@gitroll/tacitt-cli 0.6.8 → 0.6.10

package/dist/{src-d7n58sbH.mjs → src-BqtdFVq7.mjs}

@@ -1,4 +1,4 @@
-import { $ as bCountSchema, $n as detectStatic, A as bDuplicateMirror, B as bEvidenceReader, Bt as sessionPeriodSchema, C as validateBUnit, Cn as inspectionSemanticVersions, Ct as cardsSubmitSchema, D as uncoveredBObligations, Dn as createStaticProcessor, Dt as privacyResolveSchema, E as bLiterals, Et as packageConfirmActionSchema, Fn as entityDictionaryVersion, Ft as termTypeInfo, G as subtractBRanges, Gn as validateProfile, H as codePointLength, Ht as journeyProfileAddressActionSchema, I as bIssue, It as termTypeSchema, J as bRetainedGroupSchema, Jn as validatePlan, Jt as respondProfileLinks, Kn as orderProfile, L as bOverlaps, Lt as termTypes, M as bLegacyBindings, Mt as reviewTermsResultSchema, N as bUnitFragments, Nt as termAssessmentSchema, O as indexBRanges, On as staticDefaults, Ot as privacyTermKey, P as bAdoptedObligations, Pn as cleanupImplementationVersion, Pt as termOverrideValueSchema, Q as bAnchorSchema, Qt as safeCode, R as unownedBObligations, Rt as deselectOutsidePeriod, S as validateBFields, Sn as currentDetectorVersion, St as cardsConfirmActionSchema, T as bLiteralTerms, Tn as gapReasons, Tt as emptyJourneyPrivacy, U as codePointSlice, Ut as journeyProfileLinksActionSchema, V as bDigest, Vt as emptyJourneyProfile, W as createCodePointIndex, X as bSessionDecisionSchema, Xt as ApplicationError, Y as bReviewSubmissionSchema, Yn as copyData, Yt as classificationTitleMaskSchema, Z as bTermSchema, Zt as UnfinishedJourneyError, _ as semanticFindingSchema, _t as hideConfirmSchema, a as reviewChunkSchema, an as observeSource, at as journeyExceptionSchema, b as validateBReview, bt as journeyConfigurationSchema, c as textDigest, cn as inventorySchema, cr as scalarBefore, ct as journeyPreferenceScopeSchema, dt as nativeJourneySchema, en as familyNeedsReview, et as bIdSchema, f as reviewAlignmentAuditSchema, fn as nativeSourceIdentitySchema, ft as journeyGuidanceSchema, g as validateReviewAlignment, h as reviewFindingsDigest, ht as journeyDescribeSchema, i as reviewBatchSchema, in as sourceKey, ir as createEntityMatcher, it as journeyDigestSchema, jt as reviewTermsInputSchema, kn as staticOptions, l as validateReview, lr as defaultDetectionLimits, lt as journeyProjectTypeSchema, m as reviewAlignmentSchema, mt as delegatedDecisionSchema, n as compileBFindings, nn as reviewFamilies, nt as journeyAccessSchema, o as reviewDigest, on as sourceSnapshotId, ot as journeyIdSchema, p as reviewAlignmentInputSchema, pt as journeyInstructionInputSchema, q as bRepresentationSchema, r as reviewBatchChunks, rn as sourceGraph, rt as journeyChoiceSchema, s as reviewSubmitSchema, sn as fileIdentitySchema, sr as scalarAfter, st as journeyKindSchema, tn as familySelected, tr as staticCategories, tt as bMethod, u as findingReferenceKey, un as sourcePartSchema, ut as journeyWorkTypeSchema, vt as hidePlanInputSchema, w as bLiteralAdmitted, x as createBAnalysisUnits, xt as cardAnswerActionSchema, y as validateBClassification, yt as hidePlanResourceSchema, z as bAnchorKey } from "./locate-BWkblijS.mjs";
+import { $ as bCountSchema, $n as detectStatic, A as bDuplicateMirror, B as bEvidenceReader, Bt as sessionPeriodSchema, C as validateBUnit, Cn as inspectionSemanticVersions, Ct as cardsSubmitSchema, D as uncoveredBObligations, Dn as createStaticProcessor, Dt as privacyResolveSchema, E as bLiterals, Et as packageConfirmActionSchema, Fn as entityDictionaryVersion, Ft as termTypeInfo, G as subtractBRanges, Gn as validateProfile, H as codePointLength, Ht as journeyProfileAddressActionSchema, I as bIssue, It as termTypeSchema, J as bRetainedGroupSchema, Jn as validatePlan, Jt as respondProfileLinks, Kn as orderProfile, L as bOverlaps, Lt as termTypes, M as bLegacyBindings, Mt as reviewTermsResultSchema, N as bUnitFragments, Nt as termAssessmentSchema, O as indexBRanges, On as staticDefaults, Ot as privacyTermKey, P as bAdoptedObligations, Pn as cleanupImplementationVersion, Pt as termOverrideValueSchema, Q as bAnchorSchema, Qt as safeCode, R as unownedBObligations, Rt as deselectOutsidePeriod, S as validateBFields, Sn as currentDetectorVersion, St as cardsConfirmActionSchema, T as bLiteralTerms, Tn as gapReasons, Tt as emptyJourneyPrivacy, U as codePointSlice, Ut as journeyProfileLinksActionSchema, V as bDigest, Vt as emptyJourneyProfile, W as createCodePointIndex, X as bSessionDecisionSchema, Xt as ApplicationError, Y as bReviewSubmissionSchema, Yn as copyData, Yt as classificationTitleMaskSchema, Z as bTermSchema, Zt as UnfinishedJourneyError, _ as semanticFindingSchema, _t as hideConfirmSchema, a as reviewChunkSchema, an as observeSource, at as journeyExceptionSchema, b as validateBReview, bt as journeyConfigurationSchema, c as textDigest, cn as inventorySchema, cr as scalarBefore, ct as journeyPreferenceScopeSchema, dt as nativeJourneySchema, en as familyNeedsReview, et as bIdSchema, f as reviewAlignmentAuditSchema, fn as nativeSourceIdentitySchema, ft as journeyGuidanceSchema, g as validateReviewAlignment, h as reviewFindingsDigest, ht as journeyDescribeSchema, i as reviewBatchSchema, in as sourceKey, ir as createEntityMatcher, it as journeyDigestSchema, jt as reviewTermsInputSchema, kn as staticOptions, l as validateReview, lr as defaultDetectionLimits, lt as journeyProjectTypeSchema, m as reviewAlignmentSchema, mt as delegatedDecisionSchema, n as compileBFindings, nn as reviewFamilies, nt as journeyAccessSchema, o as reviewDigest, on as sourceSnapshotId, ot as journeyIdSchema, p as reviewAlignmentInputSchema, pt as journeyInstructionInputSchema, q as bRepresentationSchema, r as reviewBatchChunks, rn as sourceGraph, rt as journeyChoiceSchema, s as reviewSubmitSchema, sn as fileIdentitySchema, sr as scalarAfter, st as journeyKindSchema, tn as familySelected, tr as staticCategories, tt as bMethod, u as findingReferenceKey, un as sourcePartSchema, ut as journeyWorkTypeSchema, vt as hidePlanInputSchema, w as bLiteralAdmitted, x as createBAnalysisUnits, xt as cardAnswerActionSchema, y as validateBClassification, yt as hidePlanResourceSchema, z as bAnchorKey } from "./locate-Cwv6WH8n.mjs";
 import { z } from "zod";
 import { createHash, createHmac, createSecretKey, randomUUID } from "node:crypto";
 import { setTimeout as setTimeout$1 } from "node:timers/promises";
@@ -14,6 +14,13 @@ const processingPlanSchema = z.unknown().transform((value, context) => {
 		return z.NEVER;
 	}
 });
+//#endregion
+//#region packages/application/src/processing/settings/data.ts
+/**
+* Sessions in one frozen configuration. Packaging admits at most 60,000 source parts per run
+* (the artifact's entry bound) and every selected session has a part, so this matches it.
+*/
+const maximumConfigurationSessions = 6e4;
 var SettingsError = class extends Error {
 	code;
 	field;
@@ -1192,152 +1199,6 @@ function requireSelecting(run) {
 	if (run.phase !== "selecting") throw new ApplicationError("INVALID_TRANSITION");
 }
 //#endregion
-//#region packages/application/src/journey/preview.ts
-const journeyRenderSchema = z.object({
-	journeyId: journeyIdSchema,
-	workId: journeyIdSchema
-}).strict();
-/** One Work, or several in one call where each Work renders or fails on its own. */
-const journeyRenderInputSchema = z.union([journeyRenderSchema, z.object({
-	journeyId: journeyIdSchema,
-	workIds: z.array(journeyIdSchema).min(1).max(256)
-}).strict()]);
-const journeyPreviewSchema = journeyRenderSchema.extend({ cursor: z.object({
-	sha256: journeyDigestSchema,
-	after: z.number().int().min(-1)
-}).strict().optional() }).strict();
-z.object({
-	workId: journeyIdSchema,
-	revision: z.number().int().nonnegative(),
-	sha256: journeyDigestSchema,
-	title: z.string(),
-	rows: z.array(z.object({
-		ordinal: z.number().int().nonnegative(),
-		sessionId: z.string(),
-		role: z.enum(["user", "assistant"]),
-		text: z.string()
-	}).strict()),
-	cursor: z.object({
-		sha256: journeyDigestSchema,
-		after: z.number().int().min(-1)
-	}).strict().nullable()
-}).strict();
-//#endregion
-//#region packages/application/src/journey/privacy/findings.ts
-/** UTF-16 source coordinates; contexts are local private evidence, never journey state. */
-const journeyFindingsSchema = journeyPreviewSchema;
-const journeyFindingSchema = z.object({
-	ordinal: z.number().int().nonnegative(),
-	termKey: z.string(),
-	value: z.string(),
-	type: termTypeSchema,
-	disposition: z.enum(["hidden", "pending"]),
-	reason: z.string(),
-	entryPath: z.string(),
-	basis: z.enum([
-		"static-original",
-		"static-base",
-		"classification-metadata",
-		"scan-source"
-	]),
-	source: z.discriminatedUnion("kind", [
-		z.object({
-			kind: z.literal("session"),
-			sessionId: z.string(),
-			sourcePartId: z.string().nullable(),
-			recordIndex: z.number().int().nonnegative(),
-			pointer: z.string()
-		}).strict(),
-		z.object({
-			kind: z.literal("metadata"),
-			field: z.string()
-		}).strict(),
-		z.object({
-			kind: z.literal("setup"),
-			pointer: z.string()
-		}).strict()
-	]),
-	start: z.number().int().nonnegative(),
-	end: z.number().int().nonnegative(),
-	context: z.object({
-		text: z.string(),
-		start: z.number().int().nonnegative(),
-		matchStart: z.number().int().nonnegative(),
-		matchEnd: z.number().int().nonnegative()
-	}).strict()
-}).strict();
-z.object({
-	workId: z.uuid(),
-	countScope: z.literal("source-evidence"),
-	revision: z.number().int().nonnegative(),
-	sha256: z.string(),
-	rows: z.array(journeyFindingSchema).max(32),
-	cursor: journeyPreviewSchema.shape.cursor.unwrap().nullable()
-}).strict();
-const journeyFindingImpactSchema = z.object({
-	journeyId: z.uuid(),
-	termKeys: z.array(z.string()).min(1).max(2e4),
-	cursor: journeyPreviewSchema.shape.cursor
-}).strict();
-//#endregion
-//#region packages/application/src/journey/privacy/record.ts
-/** Merge independently reviewed occurrences into one journey-wide decision. */
-function mergePrivacyTerms(state, incoming) {
-	const terms = new Map(state.privacy.terms.map((term) => [privacyTermKey(term), term]));
-	const overrides = /* @__PURE__ */ new Map();
-	for (const item of state.valueOverrides ?? []) {
-		const value = item.value.normalize("NFC");
-		if (!overrides.has(value)) overrides.set(value, item);
-	}
-	for (const term of incoming) {
-		const key = privacyTermKey(term), prior = terms.get(key);
-		const override = overrides.get(term.value.normalize("NFC"));
-		const preference = state.groups.find((group) => group.key === `type:${term.type}` && group.origin === "preference");
-		const disposition = !termTypeInfo[term.type].asked ? "hidden" : override ? override.choice === "hide" ? "hidden" : "keep" : preference?.choice ? preference.choice === "hide" ? "hidden" : "keep" : prior?.disposition === "hidden" || term.disposition === "hidden" ? "hidden" : prior && prior.disposition !== term.disposition ? "pending" : term.disposition;
-		const sources = [...new Map([...prior?.sources ?? [], ...term.sources].map((source) => [JSON.stringify(source.kind === "session" ? [
-			source.workId,
-			source.batchId,
-			source.chunkId
-		] : [source.workId, source.field]), source])).values()];
-		terms.set(key, {
-			...term,
-			disposition,
-			sources,
-			reason: prior && prior.disposition !== term.disposition ? disposition === "pending" ? "Conflicting scan judgments require a contextual decision." : disposition === "hidden" ? "A Hidden judgment for this keyword takes precedence." : term.reason : term.reason
-		});
-	}
-	const values = Map.groupBy([...terms.values()], (term) => term.value.normalize("NFC"));
-	for (const same of values.values()) if (same.some((term) => !termTypeInfo[term.type].asked)) for (const term of same) terms.set(privacyTermKey(term), {
-		...term,
-		disposition: "hidden"
-	});
-	else if (overrides.has(same[0]?.value.normalize("NFC") ?? "")) {
-		const override = overrides.get(same[0]?.value.normalize("NFC") ?? "");
-		for (const term of same) terms.set(privacyTermKey(term), {
-			...term,
-			disposition: override?.choice === "hide" ? "hidden" : "keep"
-		});
-	} else if (same.some((term) => term.disposition === "hidden")) for (const term of same) terms.set(privacyTermKey(term), {
-		...term,
-		disposition: "hidden",
-		reason: term.disposition === "hidden" ? term.reason : "A Hidden judgment for this NFC keyword takes precedence across term types."
-	});
-	else if (new Set(same.map((term) => term.disposition)).size > 1) for (const term of same) terms.set(privacyTermKey(term), {
-		...term,
-		disposition: "pending",
-		reason: "Conflicting scan judgments require a contextual decision."
-	});
-	return {
-		...state.privacy,
-		terms: [...terms.values()],
-		packageApproval: null
-	};
-}
-/** A journey-wide literal can affect selected Works even when its reporting Work was Dropped. */
-function activePrivacyTerms(state) {
-	return state.works.some((work) => work.access !== "drop" && work.rootSessionIds.length > 0) ? state.privacy.terms : [];
-}
-//#endregion
 //#region packages/application/src/journey/placement/readiness.ts
 function hasCompleteWorkDescription(work) {
 	return work.placement === "placed" && !!work.description.trim() && work.classificationRecommendation !== null;
@@ -1366,6 +1227,18 @@ function isSkippedWork(work) {
 function isIncludedWork(work) {
 	return isSelectedWork(work) && !isSkippedWork(work);
 }
+/**
+* ADR 0274: Public needs a recorded choice: the person's panel click or named conversation
+* answer (origin `explicit`), or, under ADR 0275, the account proof that every root was already
+* Public (origin and channel `account`). A Public Work stored before `accessChoice` existed is
+* still pending. Mirrored by `phaseOf` in the Skill's `journey-state.mjs` and by the panel's
+* `WorkAccess`.
+*/
+function hasPublicChoice(work) {
+	if (work.access !== "public") return true;
+	if (!work.accessConfirmed || !work.accessChoice) return false;
+	return work.accessChoice.channel === "account" ? work.accessOrigin === "account" : work.accessOrigin === "explicit";
+}
 function selectedWorks(state) {
 	return state.works.filter(isSelectedWork);
 }
@@ -1612,6 +1485,26 @@ const sendItemSchema = z.object({
 		title: z.string(),
 		access
 	}).strict().optional(),
+	/** Safe preflight facts; local requested-access conflicts have no account owner. */
+	accessConflict: z.object({
+		sessionKey: journeyDigestSchema,
+		requestedAccess: access,
+		accountWorkId: journeyIdSchema.nullable(),
+		accountAccess: z.enum([
+			"public",
+			"private",
+			"removed",
+			"mixed"
+		]).nullable(),
+		rule: z.enum([
+			"held-elsewhere",
+			"destination-access",
+			"requested-access",
+			"content-access"
+		])
+	}).strict().optional(),
+	/** Distinct conflicting session keys across all rules and account holders. */
+	accessConflictSessionCount: count$13.positive().optional(),
 	/** Membership readback retained for visible conflict recovery. */
 	membershipConflict: z.object({
 		revision: count$13,
@@ -1754,6 +1647,64 @@ function hasCurrentStaticReview(state, work) {
 	return work.staticReview !== void 0 && work.staticReview.snapshotId === state.snapshotId && work.staticReview.inputRevision === work.inputRevision;
 }
 //#endregion
+//#region packages/application/src/journey/privacy/record.ts
+/** Merge independently reviewed occurrences into one journey-wide decision. */
+function mergePrivacyTerms(state, incoming) {
+	const terms = new Map(state.privacy.terms.map((term) => [privacyTermKey(term), term]));
+	const overrides = /* @__PURE__ */ new Map();
+	for (const item of state.valueOverrides ?? []) {
+		const value = item.value.normalize("NFC");
+		if (!overrides.has(value)) overrides.set(value, item);
+	}
+	for (const term of incoming) {
+		const key = privacyTermKey(term), prior = terms.get(key);
+		const override = overrides.get(term.value.normalize("NFC"));
+		const preference = state.groups.find((group) => group.key === `type:${term.type}` && group.origin === "preference");
+		const disposition = !termTypeInfo[term.type].asked ? "hidden" : override ? override.choice === "hide" ? "hidden" : "keep" : preference?.choice ? preference.choice === "hide" ? "hidden" : "keep" : prior?.disposition === "hidden" || term.disposition === "hidden" ? "hidden" : prior && prior.disposition !== term.disposition ? "pending" : term.disposition;
+		const sources = [...new Map([...prior?.sources ?? [], ...term.sources].map((source) => [JSON.stringify(source.kind === "session" ? [
+			source.workId,
+			source.batchId,
+			source.chunkId
+		] : [source.workId, source.field]), source])).values()];
+		terms.set(key, {
+			...term,
+			disposition,
+			sources,
+			reason: prior && prior.disposition !== term.disposition ? disposition === "pending" ? "Conflicting scan judgments require a contextual decision." : disposition === "hidden" ? "A Hidden judgment for this keyword takes precedence." : term.reason : term.reason
+		});
+	}
+	const values = Map.groupBy([...terms.values()], (term) => term.value.normalize("NFC"));
+	for (const same of values.values()) if (same.some((term) => !termTypeInfo[term.type].asked)) for (const term of same) terms.set(privacyTermKey(term), {
+		...term,
+		disposition: "hidden"
+	});
+	else if (overrides.has(same[0]?.value.normalize("NFC") ?? "")) {
+		const override = overrides.get(same[0]?.value.normalize("NFC") ?? "");
+		for (const term of same) terms.set(privacyTermKey(term), {
+			...term,
+			disposition: override?.choice === "hide" ? "hidden" : "keep"
+		});
+	} else if (same.some((term) => term.disposition === "hidden")) for (const term of same) terms.set(privacyTermKey(term), {
+		...term,
+		disposition: "hidden",
+		reason: term.disposition === "hidden" ? term.reason : "A Hidden judgment for this NFC keyword takes precedence across term types."
+	});
+	else if (new Set(same.map((term) => term.disposition)).size > 1) for (const term of same) terms.set(privacyTermKey(term), {
+		...term,
+		disposition: "pending",
+		reason: "Conflicting scan judgments require a contextual decision."
+	});
+	return {
+		...state.privacy,
+		terms: [...terms.values()],
+		packageApproval: null
+	};
+}
+/** A journey-wide literal can affect selected Works even when its reporting Work was Dropped. */
+function activePrivacyTerms(state) {
+	return state.works.some((work) => work.access !== "drop" && work.rootSessionIds.length > 0) ? state.privacy.terms : [];
+}
+//#endregion
 //#region packages/application/src/journey/policy/commands.ts
 const journeyFindingReferenceSchema = z.object({
 	batchId: journeyIdSchema,
@@ -1809,6 +1760,16 @@ const journeyPropagateActionSchema = z.object({
 //#region packages/application/src/journey/scope/model.ts
 const count$11 = z.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER);
 const safeText = z.string().trim().min(1).max(240);
+/**
+* One Work's stored account access (ADR 0274 D3(b), refined by ADR 0275): `public-all` when
+* every root key is held Public, `public` when the held keys are Public and other roots are new.
+*/
+const accountWorkAccessSchema = z.enum([
+	"private",
+	"public",
+	"public-all",
+	"mixed"
+]);
 const journeyScopeConfirmActionSchema = z.object({ kind: z.literal("scope-confirm") }).strict();
 const journeyWorkTypeActionSchema = z.object({
 	kind: z.literal("work-type"),
@@ -1818,7 +1779,11 @@ const journeyWorkTypeActionSchema = z.object({
 const journeyWorksAccessActionSchema = z.object({
 	kind: z.literal("works-access"),
 	workIds: z.array(journeyIdSchema).min(1).max(1e4),
-	access: journeyAccessSchema
+	access: journeyAccessSchema,
+	accessChoice: z.object({
+		channel: z.literal("conversation"),
+		at: z.iso.datetime()
+	}).strict().optional()
 }).strict();
 /** Static-only Work facts for proposing project types and scan scope; no source bodies. */
 const journeyCatalogQuerySchema = z.object({
@@ -2018,7 +1983,11 @@ const journeyActionSchema = z.discriminatedUnion("kind", [
 	z.object({
 		kind: z.literal("work-access"),
 		workId: journeyIdSchema,
-		access: journeyAccessSchema
+		access: journeyAccessSchema,
+		accessChoice: z.object({
+			channel: z.literal("conversation"),
+			at: z.iso.datetime()
+		}).strict().optional()
 	}).strict(),
 	z.object({
 		kind: z.literal("work-title"),
@@ -2137,13 +2106,22 @@ function privacyDecisionDigest(state) {
 function assertJourneyScanned(state) {
 	if (!state.consent || state.scope.status !== "confirmed" || !state.readingComplete || state.works.some((work) => isIncludedWork(work) && (!work.classificationMetadata || work.totalBatches === 0 && !hasCertifiedNoBatchReview(work, state.snapshotId) || work.completedBatches !== work.totalBatches || work.status === "blocked"))) throw new ApplicationError("SCOPE_NOT_READY");
 }
+/** Legacy model, delegate or unrecorded confirmation is not the person's Public choice. */
+function assertPublicChoices(state) {
+	if (state.works.some((work) => isIncludedWork(work) && !hasPublicChoice(work))) throw new ApplicationError("SCOPE_NOT_READY");
+}
 /** Track B (ADR 0172): preview and packaging need every selected Work's static base. */
 function assertJourneyStaticReady(state) {
 	if (state.works.some((work) => work.access !== "drop" && work.rootSessionIds.length > 0 && !isSkippedWork(work) && !hasCurrentStaticReview(state, work))) throw new ApplicationError("SCOPE_NOT_READY");
 }
-/** Cards need only Track A, AI review and metadata; this final gate also needs Track B. */
-function assertJourneyPrivacyReady(state, packaging = false) {
+/**
+* Cards need only Track A, AI review and metadata; this final gate also needs Track B.
+* `publicChoices` defaults to `packaging`: the Send click checks it before packaging, and the
+* follow-up of an already uploaded Send skips it because nothing more goes out (ADR 0274).
+*/
+function assertJourneyPrivacyReady(state, packaging = false, { publicChoices = packaging } = {}) {
 	assertJourneyScanned(state);
+	if (publicChoices) assertPublicChoices(state);
 	if (activePrivacyTerms(state).some((term) => term.disposition === "pending") || state.privacy.cards.length > 0 && (state.privacy.cards.some((card) => !card.answer) || state.privacy.confirmedAnswersRevision !== state.privacy.answersRevision)) throw new ApplicationError("CONFIRMATION_REQUIRED");
 	assertJourneyStaticReady(state);
 	if (packaging && state.privacy.packageApproval !== privacyDecisionDigest(state)) throw new ApplicationError("CONFIRMATION_REQUIRED");
@@ -2173,15 +2151,23 @@ function appendDecisionCards(state, input) {
 	const open = new Set(activePrivacyTerms(state).filter((term) => term.disposition === "pending").map(privacyTermKey).filter((key) => !coveredBefore.has(key)));
 	const extend = input.extend ?? [];
 	const covered = [...input.cards.flatMap((card) => card.termKeys), ...extend.flatMap((item) => item.termKeys)];
-	if (!covered.length || state.privacy.cards.length + input.cards.length > 20 || new Set(input.cards.map((card) => card.id)).size !== input.cards.length || input.cards.some((card) => existing.has(card.id)) || new Set(extend.map((item) => item.cardId)).size !== extend.length || extend.some((item) => !existing.has(item.cardId)) || new Set(covered).size !== covered.length || covered.some((key) => !open.has(key))) throw new ApplicationError("INVALID_SELECTION");
+	if (!covered.length) throw new ApplicationError("INVALID_SELECTION", "cards.append.empty");
+	if (state.privacy.cards.length + input.cards.length > 20) throw new ApplicationError("INVALID_SELECTION", "cards.append.limit");
+	if (new Set(input.cards.map((card) => card.id)).size !== input.cards.length) throw new ApplicationError("INVALID_SELECTION", "cards.append.duplicate-card");
+	if (input.cards.some((card) => existing.has(card.id))) throw new ApplicationError("INVALID_SELECTION", "cards.append.existing-card");
+	if (new Set(extend.map((item) => item.cardId)).size !== extend.length) throw new ApplicationError("INVALID_SELECTION", "cards.append.duplicate-extension");
+	if (extend.some((item) => !existing.has(item.cardId))) throw new ApplicationError("INVALID_SELECTION", "cards.append.unknown-card");
+	if (new Set(covered).size !== covered.length) throw new ApplicationError("INVALID_SELECTION", "cards.append.duplicate-term");
+	if (covered.some((key) => !open.has(key))) throw new ApplicationError("INVALID_SELECTION", "cards.append.term-not-open");
 	const terms = new Map(state.privacy.terms.map((term) => [privacyTermKey(term), term]));
 	const ownValues = ownIdentityValues(state);
 	for (const extension of extend) {
 		const ownCard = !!state.privacy.cards.find((item) => item.id === extension.cardId)?.termKeys.some((key) => terms.get(key)?.type === "own-identity");
-		if (extension.termKeys.some((key) => {
+		for (const key of extension.termKeys) {
 			const term = terms.get(key);
-			return term?.type === "own-identity" ? !ownCard : term?.type === "people" && ownCard && !ownValues.has(identityValue(term.value));
-		})) throw new ApplicationError("INVALID_SELECTION");
+			if (term?.type === "own-identity" && !ownCard) throw new ApplicationError("INVALID_SELECTION", "cards.append.own-identity-card");
+			if (term?.type === "people" && ownCard && !ownValues.has(identityValue(term.value))) throw new ApplicationError("INVALID_SELECTION", "cards.append.other-person");
+		}
 	}
 	const additions = new Map(extend.map((item) => [item.cardId, item.termKeys]));
 	const inherited = new Map(extend.flatMap((item) => item.termKeys.map((key) => [key, item.cardId])));
@@ -2391,6 +2377,7 @@ function respondPrivacy(state, action, source) {
 		};
 	}
 	if (action.kind === "package-confirm") {
+		assertPublicChoices(state);
 		assertJourneyPrivacyReady(state);
 		return {
 			...state,
@@ -2403,6 +2390,127 @@ function respondPrivacy(state, action, source) {
 	return null;
 }
 //#endregion
+//#region packages/application/src/journey/send/displayed-scope.ts
+function hash(value) {
+	return createHash("sha256").update(JSON.stringify(value)).digest("hex");
+}
+/** Artifact-independent authorization: packaging progress cannot expand this scope. */
+function requestedScope(journey) {
+	return hash({
+		privacy: privacyDecisionDigest(journey),
+		configurationId: journey.configurationId,
+		confirmedHideRevision: journey.confirmedHideRevision ?? 0,
+		consent: journey.consent,
+		profile: journey.profile,
+		works: journey.works.map((work) => ({
+			id: work.id,
+			inputRevision: work.inputRevision,
+			access: work.access,
+			accessConfirmed: work.accessConfirmed,
+			included: isIncludedWork(work),
+			placement: work.placement,
+			suggestion: work.suggestion
+		}))
+	});
+}
+/** Host-issued review fence; clients echo it without hashing private decision data. */
+function displayedScopeDigest(journey) {
+	return hash({
+		scope: requestedScope(journey),
+		phase: journey.phase === "review" ? "ready" : journey.phase,
+		pendingHideId: journey.pendingHideId,
+		abandonedAt: journey.abandonedAt
+	});
+}
+//#endregion
+//#region packages/application/src/journey/preview.ts
+const journeyRenderSchema = z.object({
+	journeyId: journeyIdSchema,
+	workId: journeyIdSchema
+}).strict();
+/** One Work, or several in one call where each Work renders or fails on its own. */
+const journeyRenderInputSchema = z.union([journeyRenderSchema, z.object({
+	journeyId: journeyIdSchema,
+	workIds: z.array(journeyIdSchema).min(1).max(maximumConfigurationSessions)
+}).strict()]);
+const journeyPreviewSchema = journeyRenderSchema.extend({ cursor: z.object({
+	sha256: journeyDigestSchema,
+	after: z.number().int().min(-1)
+}).strict().optional() }).strict();
+z.object({
+	workId: journeyIdSchema,
+	revision: z.number().int().nonnegative(),
+	sha256: journeyDigestSchema,
+	title: z.string(),
+	rows: z.array(z.object({
+		ordinal: z.number().int().nonnegative(),
+		sessionId: z.string(),
+		role: z.enum(["user", "assistant"]),
+		text: z.string()
+	}).strict()),
+	cursor: z.object({
+		sha256: journeyDigestSchema,
+		after: z.number().int().min(-1)
+	}).strict().nullable()
+}).strict();
+//#endregion
+//#region packages/application/src/journey/privacy/findings.ts
+/** UTF-16 source coordinates; contexts are local private evidence, never journey state. */
+const journeyFindingsSchema = journeyPreviewSchema;
+const journeyFindingSchema = z.object({
+	ordinal: z.number().int().nonnegative(),
+	termKey: z.string(),
+	value: z.string(),
+	type: termTypeSchema,
+	disposition: z.enum(["hidden", "pending"]),
+	reason: z.string(),
+	entryPath: z.string(),
+	basis: z.enum([
+		"static-original",
+		"static-base",
+		"classification-metadata",
+		"scan-source"
+	]),
+	source: z.discriminatedUnion("kind", [
+		z.object({
+			kind: z.literal("session"),
+			sessionId: z.string(),
+			sourcePartId: z.string().nullable(),
+			recordIndex: z.number().int().nonnegative(),
+			pointer: z.string()
+		}).strict(),
+		z.object({
+			kind: z.literal("metadata"),
+			field: z.string()
+		}).strict(),
+		z.object({
+			kind: z.literal("setup"),
+			pointer: z.string()
+		}).strict()
+	]),
+	start: z.number().int().nonnegative(),
+	end: z.number().int().nonnegative(),
+	context: z.object({
+		text: z.string(),
+		start: z.number().int().nonnegative(),
+		matchStart: z.number().int().nonnegative(),
+		matchEnd: z.number().int().nonnegative()
+	}).strict()
+}).strict();
+z.object({
+	workId: z.uuid(),
+	countScope: z.literal("source-evidence"),
+	revision: z.number().int().nonnegative(),
+	sha256: z.string(),
+	rows: z.array(journeyFindingSchema).max(32),
+	cursor: journeyPreviewSchema.shape.cursor.unwrap().nullable()
+}).strict();
+const journeyFindingImpactSchema = z.object({
+	journeyId: z.uuid(),
+	termKeys: z.array(z.string()).min(1).max(2e4),
+	cursor: journeyPreviewSchema.shape.cursor
+}).strict();
+//#endregion
 //#region packages/application/src/journey/scope/classification.ts
 const count$10 = z.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER);
 const classificationCursorSchema = z.object({
@@ -4768,32 +4876,200 @@ function retireScanGeneration(state, workId) {
 	});
 	return {
 		...state,
-		readingComplete: false,
-		phase: state.phase === "paused" ? "paused" : "processing",
+		readingComplete: false,
+		phase: state.phase === "paused" ? "paused" : "processing",
+		privacy: {
+			...state.privacy,
+			terms,
+			cards: state.privacy.cards.filter((card) => card.termKeys.every((key) => !changedKeys.has(key))),
+			confirmedAnswersRevision: null,
+			packageApproval: null
+		},
+		works: state.works.map((work) => work.id === workId ? resetWorkScan(work) : work)
+	};
+}
+/** The same Work with a new scan generation: it is read again from its first session. */
+function resetWorkScan(work) {
+	const { emptyReview: _empty, excludedReview: _excluded, staticReview: _static, metadataReviewedDigest: _metadata, reviewReuseFrom: _reuse, renderFailure: _failure, ...retained } = work;
+	return {
+		...retained,
+		revision: work.revision + 1,
+		inputRevision: work.inputRevision + 1,
+		status: "pending",
+		suggestion: null,
+		totalBatches: 0,
+		completedBatches: 0,
+		groupIds: [],
+		blockedCodes: [],
+		artifact: null
+	};
+}
+//#endregion
+//#region packages/application/src/journey/scope/respond.ts
+/**
+* Account-seeded access (ADR 0274 D3(b)). With `held`, the time the account inventory was read,
+* a Work whose every root is held Public is confirmed Public with the account as its recorded
+* choice (ADR 0275); without it, Public stays a suggestion.
+*/
+function accountSeededAccess(account, held) {
+	const accessChoice = account === "public-all" && held !== void 0 ? {
+		channel: "account",
+		at: held
+	} : void 0;
+	return {
+		access: account === "public" || account === "public-all" ? "public" : "private",
+		accessOrigin: "account",
+		accessConfirmed: account === "private" || accessChoice !== void 0,
+		accountAccessConflict: account === "mixed",
+		accessChoice
+	};
+}
+/** Classification confirmation initializes visibility and scan membership for this journey. */
+function confirmScope(state, now, decision, accountAccess) {
+	if (state.scope.status === "confirmed") return state;
+	if (state.classificationRevision === null || !state.works.length || state.works.some((work) => work.placement !== "placed" && work.placement !== "classifying" || work.placement === "placed" && !(work.status === "blocked" && work.access === "drop" && work.accessConfirmed) && (!work.description.trim() || !work.projectType))) throw new ApplicationError("SCOPE_NOT_READY");
+	return withReadingProgress({
+		...state,
+		scope: {
+			status: "confirmed",
+			actor: decision ? "delegate" : "human",
+			at: now
+		},
+		works: state.works.map((work) => {
+			if (work.placement === "classifying") return work;
+			if (work.accessOrigin === "explicit" && work.accessConfirmed) return work;
+			const account = accountAccess?.get(work.id);
+			if (account) return {
+				...work,
+				...accountSeededAccess(account, now)
+			};
+			if (work.accessOrigin === "account") return work;
+			const access = work.accessConfirmed ? work.access : work.classificationRecommendation?.access ?? work.access;
+			return {
+				...work,
+				access,
+				accessOrigin: work.accessConfirmed || !work.classificationRecommendation ? work.accessOrigin : "model",
+				accessConfirmed: access !== "public"
+			};
+		})
+	});
+}
+function setWorkType(state, workId, type, decision) {
+	if (state.scope.status === "confirmed") throw new ApplicationError("INVALID_TRANSITION");
+	const projectType = decision ? {
+		type,
+		reason: "Chosen by your delegate for this journey.",
+		origin: "delegate"
+	} : {
+		type,
+		reason: "Chosen by you.",
+		origin: "explicit"
+	};
+	return {
+		...state,
+		scope: {
+			status: "pending",
+			actor: null,
+			at: null
+		},
+		privacy: {
+			...state.privacy,
+			cards: [],
+			confirmedAnswersRevision: null,
+			packageApproval: null
+		},
+		works: state.works.map((work) => work.id !== workId || decision && work.projectType?.origin === "explicit" ? work : {
+			...work,
+			projectType
+		})
+	};
+}
+/** One rule for single and bulk choices; selection changes recompute reading completion. */
+function setWorksAccess(state, workIds, access, decision, accessChoice) {
+	if (decision && access === "public") throw new ApplicationError("CONFIRMATION_REQUIRED");
+	if (new Set(workIds).size !== workIds.length) throw new ApplicationError("INVALID_SELECTION");
+	if (workIds.some((id) => !state.works.some((work) => work.id === id))) throw new ApplicationError("UNKNOWN_WORKSPACE");
+	if (state.scope.status === "confirmed") return changeConfirmedAccess(state, workIds, access, decision, accessChoice);
+	return withReadingProgress({
+		...state,
+		scope: {
+			status: "pending",
+			actor: null,
+			at: null
+		},
 		privacy: {
 			...state.privacy,
-			terms,
-			cards: state.privacy.cards.filter((card) => card.termKeys.every((key) => !changedKeys.has(key))),
+			cards: [],
 			confirmedAnswersRevision: null,
 			packageApproval: null
 		},
-		works: state.works.map((work) => work.id === workId ? resetWorkScan(work) : work)
+		works: state.works.map((work) => !workIds.includes(work.id) ? work : {
+			...work,
+			revision: work.revision + 1,
+			artifact: null,
+			status: work.status === "ready" ? "review" : work.status,
+			access,
+			accessConfirmed: true,
+			accountAccessConflict: false,
+			accessChoice: access === "public" ? accessChoice : void 0,
+			accessOrigin: decision && work.accessOrigin !== "explicit" ? "delegate" : "explicit"
+		})
+	});
+}
+/**
+* After confirmation the person, never a delegate, may still change any Work's visibility
+* (D2, superseding ADR 0162's lock and ADR 0188's blocked-only Drop). Drop stops that Work's
+* scan; a Work moved out of Drop is read again; reading progress is recomputed.
+*/
+function changeConfirmedAccess(state, workIds, access, decision, accessChoice) {
+	if (decision || state.phase === "sending" || state.phase === "completed" || state.works.some((work) => workIds.includes(work.id) && work.access === access && work.accessConfirmed && hasPublicChoice(work))) throw new ApplicationError("INVALID_TRANSITION");
+	if (access === "public" && state.works.every((work) => !workIds.includes(work.id) || work.access === "public" && work.accessConfirmed)) return {
+		...state,
+		works: state.works.map((work) => workIds.includes(work.id) && accessChoice ? {
+			...work,
+			accessOrigin: "explicit",
+			accessChoice
+		} : work)
 	};
+	return withReadingProgress({
+		...state,
+		privacy: {
+			...state.privacy,
+			packageApproval: null
+		},
+		works: state.works.map((work) => workIds.includes(work.id) ? {
+			...work,
+			revision: work.revision + 1,
+			artifact: null,
+			status: work.status === "ready" ? "review" : work.status,
+			access,
+			accessConfirmed: true,
+			accountAccessConflict: false,
+			accessChoice: access === "public" ? accessChoice : void 0,
+			accessOrigin: "explicit"
+		} : work)
+	});
 }
-/** The same Work with a new scan generation: it is read again from its first session. */
-function resetWorkScan(work) {
-	const { emptyReview: _empty, excludedReview: _excluded, staticReview: _static, metadataReviewedDigest: _metadata, reviewReuseFrom: _reuse, renderFailure: _failure, ...retained } = work;
+/** Model suggestions fill or refresh model types only; a person's or delegate's type stays. */
+function applyClassification(state, items) {
+	if (state.scope.status === "confirmed") throw new ApplicationError("INVALID_TRANSITION");
+	const byWork = new Map(items.map((item) => [item.workId, item]));
+	if (byWork.size !== items.length) throw new ApplicationError("INVALID_SELECTION");
+	if (items.some((item) => !state.works.some((work) => work.id === item.workId))) throw new ApplicationError("UNKNOWN_WORKSPACE");
 	return {
-		...retained,
-		revision: work.revision + 1,
-		inputRevision: work.inputRevision + 1,
-		status: "pending",
-		suggestion: null,
-		totalBatches: 0,
-		completedBatches: 0,
-		groupIds: [],
-		blockedCodes: [],
-		artifact: null
+		...state,
+		works: state.works.map((work) => {
+			const item = byWork.get(work.id);
+			if (!item || work.projectType && work.projectType.origin !== "model") return work;
+			return {
+				...work,
+				projectType: {
+					type: item.type,
+					reason: item.reason,
+					origin: "model"
+				}
+			};
+		})
 	};
 }
 //#endregion
@@ -4818,6 +5094,7 @@ const classificationCommitSchema = z.object({
 	/** `classificationPartition` of the state the proposal was prepared against. */
 	partition: journeyDigestSchema,
 	late: z.boolean(),
+	accountAccess: z.record(z.string(), accountWorkAccessSchema).optional(),
 	items: z.array(journeyClassificationSubmitSchema.shape.items.element.extend({
 		workId: journeyIdSchema,
 		workspaceIds: workspaces
@@ -4841,13 +5118,22 @@ function classificationPartition(state) {
 		work.rootSessionIds.toSorted()
 	]))).digest("hex");
 }
+/**
+* Two placed Works one late item may join: the same access, origin, confirmation, recorded
+* Public choice and account access conflict, as local-host isolation.ts compares. The Skill's `validateLatePlacedWorks` mirrors this rule before commit.
+*/
+function sameAccessRecord(work, other) {
+	return work.access === other?.access && work.accessOrigin === other.accessOrigin && work.accessConfirmed === other.accessConfirmed && work.accessChoice?.channel === other.accessChoice?.channel && work.accessChoice?.at === other.accessChoice?.at && work.accountAccessConflict === other.accountAccessConflict;
+}
 /** The proposal's Works built from the given state's current Works (E2). */
 function classificationWorks(state, plan) {
 	const late = plan.late;
 	const works = [];
 	for (const item of plan.items) {
 		const existing = state.works.find((work) => work.placement !== "classifying" && work.rootSessionIds.length === item.rootSessionIds.length && work.rootSessionIds.every((root) => item.rootSessionIds.includes(root)));
-		const extended = late ? state.works.find((work) => work.placement === "placed" && work.rootSessionIds.every((root) => item.rootSessionIds.includes(root))) : void 0;
+		const owners = late ? state.works.filter((work) => work.placement === "placed" && work.rootSessionIds.some((root) => item.rootSessionIds.includes(root))) : [];
+		if (owners.some((work) => !sameAccessRecord(work, owners[0]))) throw new ApplicationError("INVALID_SELECTION", "classification.late.several-works");
+		const extended = owners.find((work) => work.rootSessionIds.every((root) => item.rootSessionIds.includes(root)));
 		if (late && existing) {
 			works.push(existing);
 			continue;
@@ -4858,6 +5144,9 @@ function classificationWorks(state, plan) {
 			sourceWorkspaceIds: [.../* @__PURE__ */ new Set([...extended.sourceWorkspaceIds, ...item.workspaceIds])]
 		} : newJourneyWork(item.workId, item.projectName, item.rootSessionIds, item.workspaceIds, "placed"));
 		const { classificationMetadata: _display, ...original } = base;
+		const account = plan.accountAccess?.[base.id];
+		const inherit = late && account && base.accessOrigin !== "explicit";
+		const unproven = extended && base.accessChoice?.channel === "account" && account !== "public-all";
 		works.push({
 			...original,
 			projectName: item.projectName,
@@ -4872,8 +5161,13 @@ function classificationWorks(state, plan) {
 			...late && !extended ? {
 				access: item.recommendation.access,
 				accessOrigin: "model",
-				accessConfirmed: true
+				accessConfirmed: item.recommendation.access !== "public"
+			} : {},
+			...unproven ? {
+				accessConfirmed: false,
+				accessChoice: void 0
 			} : {},
+			...inherit && account ? accountSeededAccess(account, plan.at) : {},
 			classificationRecommendation: item.recommendation,
 			suggestion: null,
 			artifact: null,
@@ -5146,7 +5440,7 @@ function assertDelegatedDecision(state, action, decision, source) {
 	}
 	if (action.kind === "cards-confirm") return;
 	if (action.kind === "work-access" || action.kind === "works-access") {
-		if (action.access === "drop") throw new ApplicationError("CONFIRMATION_REQUIRED");
+		if (action.access === "drop" || action.access === "public") throw new ApplicationError("CONFIRMATION_REQUIRED");
 		const ids = action.kind === "work-access" ? [action.workId] : action.workIds;
 		if (state.works.some((work) => ids.includes(work.id) && work.accessOrigin === "explicit" && work.access !== action.access)) throw new ApplicationError("CONFIRMATION_REQUIRED");
 		return;
@@ -5226,135 +5520,6 @@ function propagateGroups(state, action) {
 	};
 }
 //#endregion
-//#region packages/application/src/journey/scope/respond.ts
-/** Classification confirmation fixes visibility and scan membership for this journey. */
-function confirmScope(state, now, decision) {
-	if (state.scope.status === "confirmed") return state;
-	if (state.classificationRevision === null || !state.works.length || state.works.some((work) => work.placement !== "placed" && work.placement !== "classifying" || work.placement === "placed" && !(work.status === "blocked" && work.access === "drop" && work.accessConfirmed) && (!work.description.trim() || !work.projectType))) throw new ApplicationError("SCOPE_NOT_READY");
-	return withReadingProgress({
-		...state,
-		scope: {
-			status: "confirmed",
-			actor: decision ? "delegate" : "human",
-			at: now
-		},
-		works: state.works.map((work) => work.placement === "classifying" ? work : work.accessConfirmed || !work.classificationRecommendation ? {
-			...work,
-			accessConfirmed: true
-		} : {
-			...work,
-			access: work.classificationRecommendation.access,
-			accessOrigin: "model",
-			accessConfirmed: true
-		})
-	});
-}
-function setWorkType(state, workId, type, decision) {
-	if (state.scope.status === "confirmed") throw new ApplicationError("INVALID_TRANSITION");
-	const projectType = decision ? {
-		type,
-		reason: "Chosen by your delegate for this journey.",
-		origin: "delegate"
-	} : {
-		type,
-		reason: "Chosen by you.",
-		origin: "explicit"
-	};
-	return {
-		...state,
-		scope: {
-			status: "pending",
-			actor: null,
-			at: null
-		},
-		privacy: {
-			...state.privacy,
-			cards: [],
-			confirmedAnswersRevision: null,
-			packageApproval: null
-		},
-		works: state.works.map((work) => work.id !== workId || decision && work.projectType?.origin === "explicit" ? work : {
-			...work,
-			projectType
-		})
-	};
-}
-/** One rule for single and bulk choices; selection changes recompute reading completion. */
-function setWorksAccess(state, workIds, access, decision) {
-	if (new Set(workIds).size !== workIds.length) throw new ApplicationError("INVALID_SELECTION");
-	if (workIds.some((id) => !state.works.some((work) => work.id === id))) throw new ApplicationError("UNKNOWN_WORKSPACE");
-	if (state.scope.status === "confirmed") return changeConfirmedAccess(state, workIds, access, decision);
-	return withReadingProgress({
-		...state,
-		scope: {
-			status: "pending",
-			actor: null,
-			at: null
-		},
-		privacy: {
-			...state.privacy,
-			cards: [],
-			confirmedAnswersRevision: null,
-			packageApproval: null
-		},
-		works: state.works.map((work) => !workIds.includes(work.id) ? work : {
-			...work,
-			revision: work.revision + 1,
-			artifact: null,
-			status: work.status === "ready" ? "review" : work.status,
-			access,
-			accessConfirmed: true,
-			accessOrigin: decision && work.accessOrigin !== "explicit" ? "delegate" : "explicit"
-		})
-	});
-}
-/**
-* After confirmation the person, never a delegate, may still change any Work's visibility
-* (D2, superseding ADR 0162's lock and ADR 0188's blocked-only Drop). Drop stops that Work's
-* scan; a Work moved out of Drop is read again; reading progress is recomputed.
-*/
-function changeConfirmedAccess(state, workIds, access, decision) {
-	if (decision || state.phase === "sending" || state.phase === "completed" || state.works.some((work) => workIds.includes(work.id) && work.access === access)) throw new ApplicationError("INVALID_TRANSITION");
-	return withReadingProgress({
-		...state,
-		privacy: {
-			...state.privacy,
-			packageApproval: null
-		},
-		works: state.works.map((work) => workIds.includes(work.id) ? {
-			...work,
-			revision: work.revision + 1,
-			artifact: null,
-			status: work.status === "ready" ? "review" : work.status,
-			access,
-			accessConfirmed: true,
-			accessOrigin: "explicit"
-		} : work)
-	});
-}
-/** Model suggestions fill or refresh model types only; a person's or delegate's type stays. */
-function applyClassification(state, items) {
-	if (state.scope.status === "confirmed") throw new ApplicationError("INVALID_TRANSITION");
-	const byWork = new Map(items.map((item) => [item.workId, item]));
-	if (byWork.size !== items.length) throw new ApplicationError("INVALID_SELECTION");
-	if (items.some((item) => !state.works.some((work) => work.id === item.workId))) throw new ApplicationError("UNKNOWN_WORKSPACE");
-	return {
-		...state,
-		works: state.works.map((work) => {
-			const item = byWork.get(work.id);
-			if (!item || work.projectType && work.projectType.origin !== "model") return work;
-			return {
-				...work,
-				projectType: {
-					type: item.type,
-					reason: item.reason,
-					origin: "model"
-				}
-			};
-		})
-	};
-}
-//#endregion
 //#region packages/application/src/journey/respond.ts
 /** A changed privacy instruction requires a new read of the same frozen roots. */
 function invalidateAnalysisIntent(state) {
@@ -5378,7 +5543,7 @@ function invalidateAnalysisIntent(state) {
 		})
 	});
 }
-function respondToJourney(state, action, source, now, decision, preferenceScope) {
+function respondToJourney(state, action, source, now, decision, preferenceScope, accountAccess) {
 	if (preferenceScope && (decision || !["group", "groups-hide"].includes(action.kind))) throw new ApplicationError("INVALID_ARGUMENTS");
 	if (state.abandonedAt) throw new ApplicationError("INVALID_TRANSITION");
 	if (action.kind === "abandon") {
@@ -5492,10 +5657,14 @@ function respondToJourney(state, action, source, now, decision, preferenceScope)
 	};
 	if (action.kind === "scope-confirm") {
 		if (source !== "conversation" || decision) throw new ApplicationError("CONFIRMATION_REQUIRED");
-		return confirmScope(state, now);
+		return confirmScope(state, now, void 0, accountAccess);
 	}
 	if (action.kind === "card-answer" || action.kind === "cards-confirm" || action.kind === "package-confirm") throw new ApplicationError("INVALID_TRANSITION");
-	if (action.kind === "works-access") return setWorksAccess(state, action.workIds, action.access, decision);
+	if ((action.kind === "work-access" || action.kind === "works-access") && action.access === "public" && source === "conversation" && (!action.accessChoice || action.accessChoice.channel !== "conversation" || !Number.isFinite(Date.parse(action.accessChoice.at)))) throw new ApplicationError("CONFIRMATION_REQUIRED");
+	if (action.kind === "works-access") return setWorksAccess(state, action.workIds, action.access, decision, source === "panel" ? {
+		channel: source,
+		at: now
+	} : action.accessChoice);
 	if (action.kind === "group" || action.kind === "groups-hide") {
 		const ids = action.kind === "group" ? [action.groupId] : action.groupIds;
 		if (new Set(ids).size !== ids.length || ids.some((id) => !state.groups.some((group) => group.id === id))) throw new ApplicationError("UNKNOWN_ITEM");
@@ -5526,7 +5695,10 @@ function respondToJourney(state, action, source, now, decision, preferenceScope)
 			})
 		});
 	}
-	return setWorksAccess(state, [workId], action.access, decision);
+	return setWorksAccess(state, [workId], action.access, decision, source === "panel" ? {
+		channel: source,
+		at: now
+	} : action.accessChoice);
 }
 //#endregion
 //#region packages/application/src/journey/questions.ts
@@ -6261,6 +6433,7 @@ function journeyView(state, now) {
 	const terms = activePrivacyTerms(state);
 	return {
 		...safe,
+		displayedScopeDigest: displayedScopeDigest(state),
 		privacy: {
 			...state.privacy,
 			terms
@@ -6317,6 +6490,59 @@ function journeyView(state, now) {
 }
 /** Works rendered at once by one several-Work call. */
 const renderConcurrency = 4;
+const inFlightRenders = /* @__PURE__ */ new WeakMap();
+const renderScopeTails = /* @__PURE__ */ new WeakMap();
+function waitForRender(pending, signal) {
+	signal.throwIfAborted();
+	return new Promise((resolve, reject) => {
+		const abort = () => reject(signal.reason);
+		signal.addEventListener("abort", abort, { once: true });
+		pending.then(resolve, reject).finally(() => signal.removeEventListener("abort", abort));
+	});
+}
+async function acquireRenderScope(port, signal) {
+	const previous = renderScopeTails.get(port);
+	const gate = Promise.withResolvers();
+	const tail = (previous ?? Promise.resolve()).then(() => gate.promise);
+	renderScopeTails.set(port, tail);
+	const release = () => {
+		gate.resolve();
+		if (renderScopeTails.get(port) === tail) renderScopeTails.delete(port);
+	};
+	try {
+		await waitForRender(previous ?? Promise.resolve(), signal);
+		return {
+			release,
+			waited: previous !== void 0
+		};
+	} catch (error) {
+		tail.then(() => {
+			if (renderScopeTails.get(port) === tail) renderScopeTails.delete(port);
+		});
+		gate.resolve();
+		throw error;
+	}
+}
+async function joinRender(port, journeyId, workId, run, signal, retryConflict = true) {
+	let pending = inFlightRenders.get(port);
+	if (!pending) {
+		pending = /* @__PURE__ */ new Map();
+		inFlightRenders.set(port, pending);
+	}
+	const key = `${journeyId}:${workId}`;
+	const existing = pending.get(key);
+	if (existing) try {
+		return await waitForRender(existing, signal);
+	} catch (error) {
+		signal.throwIfAborted();
+		if (retryConflict && safeCode(error) === "REVISION_CONFLICT") return joinRender(port, journeyId, workId, run, signal, false);
+		throw error;
+	}
+	const entries = pending;
+	const result = Promise.resolve().then(run).finally(() => entries.delete(key));
+	entries.set(key, result);
+	return result;
+}
 function createNativeJourney(storage, now = () => (/* @__PURE__ */ new Date()).toISOString(), local) {
 	/** Callers present after their write is durable, so a concurrent commit must not turn it into an error. */
 	async function present(committed) {
@@ -6600,7 +6826,8 @@ function createNativeJourney(storage, now = () => (/* @__PURE__ */ new Date()).t
 		const current = await storage.current(input.journeyId);
 		if (!current) throw new ApplicationError("UNKNOWN_ITEM");
 		const expectedRevision = rebase ? current.revision : input.expectedRevision;
-		const state = current.revision === expectedRevision ? respondToJourney(current, input.action, source, now(), input.decision, input.preferenceScope) : current;
+		const accountAccess = current.revision === expectedRevision && input.action.kind === "scope-confirm" && current.scope.status !== "confirmed" && source === "conversation" && !input.decision ? await local?.accountAccess?.(current, new AbortController().signal) : void 0;
+		const state = current.revision === expectedRevision ? respondToJourney(current, input.action, source, now(), input.decision, input.preferenceScope, accountAccess) : current;
 		const groupIds = input.action.kind === "group" ? [input.action.groupId] : input.action.kind === "groups-hide" ? input.action.groupIds : [];
 		const preferenceScopes = input.decision ? [] : state.groups.flatMap((group) => groupIds.includes(group.id) && group.preferenceScope ? [{
 			groupId: group.id,
@@ -6716,7 +6943,7 @@ function createNativeJourney(storage, now = () => (/* @__PURE__ */ new Date()).t
 		const release = await port.renderActivity?.begin(input.journeyId, workIds);
 		let result;
 		try {
-			result = "workId" in input ? { state: await port.render(input.journeyId, input.workId, signal) } : {
+			result = "workId" in input ? { state: await joinRender(port, input.journeyId, input.workId, () => port.render(input.journeyId, input.workId, signal), signal) } : {
 				renders: await renderSeveral(port, input.journeyId, workIds, signal),
 				state: await currentState(input.journeyId)
 			};
@@ -6736,35 +6963,51 @@ function createNativeJourney(storage, now = () => (/* @__PURE__ */ new Date()).t
 	}
 	async function renderSeveral(port, journeyId, workIds, signal) {
 		const renders = [];
-		let next = 0;
-		const scope = await port.renderScope?.(journeyId, workIds.length, signal);
-		const renderWork = scope ? (workId) => scope.render(workId) : (workId) => port.render(journeyId, workId, signal);
+		const lease = await acquireRenderScope(port, signal);
 		try {
-			const failure = (await Promise.allSettled(Array.from({ length: Math.min(scope?.concurrency ?? renderConcurrency, workIds.length) }, async () => {
-				for (let workId = workIds[next++]; workId !== void 0; workId = workIds[next++]) {
-					try {
-						await renderWork(workId);
-						renders.push({
-							workId,
-							status: "rendered"
-						});
-					} catch (error) {
-						signal.throwIfAborted();
-						port.renderFailed?.(workId, error);
-						renders.push({
-							workId,
-							status: "failed",
-							code: safeCode(error)
-						});
+			const current = lease.waited ? await currentState(journeyId) : void 0;
+			const completed = new Set(current?.works.filter((work) => work.artifact?.revision === work.revision && work.status === "ready" && !current.pendingHideId && current.phase !== "paused").map((work) => work.id));
+			const remaining = workIds.filter((workId) => {
+				if (!completed.has(workId)) return true;
+				renders.push({
+					workId,
+					status: "rendered"
+				});
+				return false;
+			});
+			let next = 0;
+			const scope = remaining.length ? await port.renderScope?.(journeyId, remaining.length, signal) : void 0;
+			const renderWork = scope ? (workId) => scope.render(workId) : (workId) => port.render(journeyId, workId, signal);
+			try {
+				const failure = (await Promise.allSettled(Array.from({ length: Math.min(scope?.concurrency ?? renderConcurrency, remaining.length) }, async () => {
+					for (let workId = remaining[next++]; workId !== void 0; workId = remaining[next++]) {
+						try {
+							await joinRender(port, journeyId, workId, () => renderWork(workId), signal);
+							renders.push({
+								workId,
+								status: "rendered"
+							});
+						} catch (error) {
+							signal.throwIfAborted();
+							port.renderFailed?.(workId, error);
+							renders.push({
+								workId,
+								status: "failed",
+								code: safeCode(error)
+							});
+						}
+						await new Promise((resolve) => setImmediate(resolve));
 					}
-					await new Promise((resolve) => setImmediate(resolve));
-				}
-			}))).find((item) => item.status === "rejected");
-			if (failure) throw failure.reason;
+				}))).find((item) => item.status === "rejected");
+				if (failure) throw failure.reason;
+			} finally {
+				await scope?.close();
+			}
+			const order = new Map(workIds.map((workId, index) => [workId, index]));
+			return renders.toSorted((a, b) => (order.get(a.workId) ?? 0) - (order.get(b.workId) ?? 0));
 		} finally {
-			await scope?.close();
+			lease.release();
 		}
-		return renders.toSorted((a, b) => workIds.indexOf(a.workId) - workIds.indexOf(b.workId));
 	}
 	async function findings(value, signal = new AbortController().signal) {
 		if (!local) throw new ApplicationError("INVALID_TRANSITION");
@@ -6854,7 +7097,32 @@ function createNativeJourney(storage, now = () => (/* @__PURE__ */ new Date()).t
 		const current = await storage.current(input.journeyId);
 		if (!current) throw new ApplicationError("UNKNOWN_ITEM");
 		const expectedRevision = rebase ? current.revision : input.expectedRevision;
-		const state = current.revision !== expectedRevision ? current : "resolutions" in input ? resolvePrivacyTerms(current, input) : publishDecisionCards(current, input);
+		let state;
+		try {
+			state = current.revision !== expectedRevision ? current : "resolutions" in input ? resolvePrivacyTerms(current, input) : publishDecisionCards(current, input);
+		} catch (error) {
+			if (!rebase || current.revision <= input.expectedRevision || !(error instanceof ApplicationError) || error.code !== "INVALID_SELECTION") throw error;
+			const receipt = await storage.commit({
+				expectedRevision: input.expectedRevision,
+				requestKey: input.idempotencyKey,
+				requestHash: digest$1(input),
+				state: current,
+				event: {
+					journeyId: current.journeyId,
+					kind: "response",
+					source: "conversation",
+					at: now()
+				}
+			}).catch((probeError) => {
+				if (probeError instanceof ApplicationError && probeError.code === "OPERATION_CONFLICT") throw error;
+				throw probeError;
+			});
+			if (receipt.status === "replayed") return {
+				...receipt,
+				state: await present(receipt.state)
+			};
+			throw error;
+		}
 		const result = await storage.commit({
 			expectedRevision,
 			requestKey: input.idempotencyKey,
@@ -6952,6 +7220,7 @@ const version$1 = z.number().int().nonnegative();
 const sendPrepareSchema = z.object({
 	journeyId: journeyIdSchema,
 	expectedJourneyRevision: version$1,
+	displayedScopeDigest: journeyDigestSchema.optional(),
 	idempotencyKey: journeyIdSchema
 }).strict();
 const sendActionSchema = z.object({
@@ -6963,6 +7232,7 @@ const sendActionSchema = z.object({
 }).strict();
 const sendStartSchema = sendActionSchema.extend({
 	scopeDigest: journeyDigestSchema,
+	displayedScopeDigest: journeyDigestSchema.optional(),
 	confirmedWorkIds: z.array(journeyIdSchema),
 	confirmedOmittedWorkIds: z.array(journeyIdSchema)
 }).strict();
@@ -11713,6 +11983,48 @@ const storedCredentialSchema = accountProfileSchema.extend({
 	expiresAt: z.string().min(1).max(64)
 }).refine((value) => profileUrlMatchesIdentity(value.profileUrl, value.identityUrl));
 //#endregion
+//#region packages/application/src/account/renew.ts
+const renewBeforeMs = 12e4;
+const renewTimeoutMs = 3e4;
+const renewals = /* @__PURE__ */ new WeakMap();
+function renew(account, credential) {
+	function configured(value) {
+		return value?.identityUrl === account.configuration.identityUrl && value.clientId === account.configuration.clientId ? value : null;
+	}
+	const running = renewals.get(account);
+	if (running) return running;
+	const renewing = (async () => {
+		try {
+			const stored = configured((await account.credentials.update((state) => state)).credential);
+			if (!stored || stored.refreshToken !== credential.refreshToken) return stored;
+			const token = await account.identity.refresh(credential.refreshToken, AbortSignal.timeout(renewTimeoutMs));
+			if (!token) return configured((await account.credentials.update((state) => {
+				if (state.credential?.refreshToken === credential.refreshToken) {
+					state.credential = null;
+					state.connection = null;
+					state.lastError = "SIGN_IN_EXPIRED";
+				}
+				return state;
+			})).credential);
+			return configured((await account.credentials.update((value) => {
+				if (value.credential?.refreshToken === credential.refreshToken) value.credential = {
+					...value.credential,
+					accessToken: token.accessToken,
+					refreshToken: token.refreshToken ?? credential.refreshToken,
+					scope: token.scope,
+					issuedAt: account.now(),
+					expiresAt: token.expiresAt
+				};
+				return value;
+			})).credential);
+		} finally {
+			renewals.delete(account);
+		}
+	})();
+	renewals.set(account, renewing);
+	return renewing;
+}
+//#endregion
 //#region packages/application/src/account/poll-interval.ts
 /** RFC 8628 section 3.5: each `slow_down` lengthens the interval by five seconds. */
 const slowDownStepMs = 5e3;
@@ -12001,11 +12313,41 @@ function createSharedAccount(ports) {
 			return stop(true);
 		},
 		async verify() {
-			const saved = (await read()).credential;
+			let saved = (await read()).credential;
 			if (!saved || !belongsToConfiguration(saved)) throw new ApplicationError("ACCOUNT_SIGNED_OUT");
-			const result = await ports.connection.check(saved.accessToken, shutdown.signal);
+			let result;
+			let renewing = false;
+			try {
+				const left = Date.parse(saved.expiresAt) - Date.parse(ports.now());
+				if (saved.refreshToken && (!Number.isFinite(left) || left <= 12e4)) {
+					renewing = true;
+					saved = await renew(ports, {
+						...saved,
+						refreshToken: saved.refreshToken
+					});
+					renewing = false;
+					if (!saved) return view(await read());
+				}
+				result = await ports.connection.check(saved.accessToken, shutdown.signal);
+				if (result === "rejected" && saved.refreshToken) {
+					renewing = true;
+					saved = await renew(ports, {
+						...saved,
+						refreshToken: saved.refreshToken
+					});
+					renewing = false;
+					if (!saved) return view(await read());
+					result = await ports.connection.check(saved.accessToken, shutdown.signal);
+				}
+			} catch (error) {
+				if (safeCode(error) !== "IDENTITY_UNAVAILABLE" && !(renewing && saved && !expired(saved.expiresAt, ports.now()))) throw error;
+				const detail = typeof error === "object" && error !== null && "detail" in error ? ` (${String(error.detail)})` : "";
+				console.error(`Account verification failed: ${safeCode(error)}${detail}`);
+				result = "unavailable";
+			}
+			const checked = saved;
 			return view(await update((state) => {
-				if (sameCredential(state.credential, saved)) {
+				if (checked && sameCredential(state.credential, checked)) {
 					if (result === "rejected") {
 						state.credential = null;
 						state.connection = null;
@@ -13412,4 +13754,4 @@ function equivalenceDuplicates(batch) {
 	return bindings.sort();
 }
 //#endregion
-export { settingsBatchSchema as $, reviewTransportBytes as $n, journeyPreviewSchema as $r, projectPreparationProgress as $t, deviceAuthorizationSchema as A, maximumHideIndexTokens as An, staticReviewDigest as Ar, nativeAdapterVersions as At, inspectionStartSchema as B, confirmedHideTerms as Bn, sendResolutionSchema as Br, classificationWorks as Bt, rebindReviewOverlay as C, confirmedHideDeltaSchema as Cn, applyCardAnswers as Cr, sendPrepareSchema as Ct, staticallyHiddenFindings as D, termHideAdditions as Dn, nativeGetSchema as Dr, currentJourneyAdapters as Dt, guardedFindingText as E, settleConfirmedHides as En, nativeEventsSchema as Er, settleCorrections as Et, sourceIdentityEvidence as F, bTermMatcher as Fn, agentSourcesSchema as Fr, journeyBatchReadSchema as Ft, validateInspectionClaim as G, retireWorkDescription as Gn, isReadingComplete as Gr, journeyContextSchema as Gt, validateInspectionBatches as H, journeyConfirmedHides as Hn, hasCompleteWorkDescription as Hr, newJourneyWork as Ht, withSourceEvidence as I, bWordBounded as In, journeySendSchema as Ir, journeyReviewStorageQuerySchema as It, validateInspectionInputs as J, workCorrectionBinding as Jn, selectedWorks as Jr, hidePublishSchema as Jt, validateInspectionFence as K, workDecisionDigest as Kn, isSelectedWork as Kr, hideBeginSchema as Kt, agentSetupKey as L, confirmedHideGroupIds as Ln, sendArtifactSchema as Lr, applyClassificationProposal as Lt, profileUrlMatchesIdentity as M, bContainment as Mn, staticSessionResourceSchema as Mr, validateAttemptAppend as Mt, readAccountAvatarUrl as N, bExceptionRanges as Nn, agentSourcePathSegment as Nr, journeyGuidance as Nt, createAccount as O, addHideIndexTokens as On, nativeRespondSchema as Or, obsoleteJourney as Ot, storedCredentialSchema as P, bMaskedHits as Pn, agentSourceSchema as Pr, applyClassification as Pt, inspectionInputs as Q, reviewRepairResourceSchema as Qn, journeyFindingsSchema as Qr, journeyPolicyRespondSchema as Qt, createApplication as R, confirmedHideKey as Rn, sendReceiptSchema as Rr, classificationCommitSchema as Rt, rebindReviewAlignment as S, confirmedHideAdditions as Sn, journeyClassificationSessionsSchema as Sr, sendChoiceSchema as St, reviewBatchReuse as T, renderedHideValue as Tn, privacyDecisionDigest as Tr, sendStartSchema as Tt, validateInspectionRequest as U, maskedHitsStale as Un, isClassifying as Ur, reviewCompileSchema as Ut, validateInspectionBatch as V, dictionaryHides as Vn, sendSettingsSchema as Vr, retireScanGeneration as Vt, inspectionQuerySchema as W, syncTermGroups as Wn, isIncludedWork as Wr, journeyContextQuerySchema as Wt, validateInspectionContribution as X, reviewCandidateResourceSchema as Xn, mergePrivacyTerms as Xr, journeySearchSaveSchema as Xt, validateInspectionQuery as Y, reviewCandidateInputSchema as Yn, withReadingProgress as Yr, journeySearchResultSchema as Yt, validateDetectionSummary as Z, reviewRepairInputSchema as Zn, journeyFindingImpactSchema as Zr, searchScopeDigest as Zt, changeJourney as _, sessionUsefulnessInputSchema as _n, emptyPreparationFacts as _r, emptyTermsRevision as _t, bCrossSegmentReviewSchema as a, selectionSchema as ai, reviewAttemptResourceSchema as an, scanPreparationDigest as ar, defaultAgentSetupInclusion as at, isGenericPublicTerm as b, journeyCommitSchema as bn, preparationStartSchema as br, replaceSensitiveTermsSchema as bt, reconstructBFields as c, stateSchema as ci, sessionReconcileInputSchema as cn, scanGitSeedsResource as cr, resolveFailureLocation as ct, resolveGroupSplit as d, approvedTreatmentSchema as di, sessionRereadInputSchema as dn, validateScanExclusion as dr, manualUploadBindingSchema as dt, journeyRenderInputSchema as ei, journeyResourceQuerySchema as en, bReviewDigest as er, settingsQuerySchema as et, selectedValueMembers as f, effectiveTreatmentSchema as fi, sessionRereadResourceSchema as fn, resolveSourceSelection as fr, manualUploadChoiceSchema as ft, semanticGroupKey as g, staticCatalogRef as gi, sessionReviewStatusSchema as gn, journeyPreparationProgressSchema as gr, candidateSortAvailable as gt, hideScopeDigest as h, selectFrozenConfiguration as hi, sessionReviewResourceSchema as hn, journeyInventorySchema as hr, manualUploadStartSchema as ht, validateBCrossSegmentReview as i, selectionBatchSchema as ii, sortingApplySchema as in, scanCanonicalResourceSchema as ir, classifyAgentSetup as it, deviceProfileScopeSchema as j, packHideIndex as jn, staticSessionId as jr, attemptBudgetCodePoints as jt, accountProfileSchema as k, hideKeyId as kn, hasCurrentStaticReview as kr, metadataProcessingVersion as kt, chooseCheapPlacement as l, sourceChangePolicy as li, sessionReconcileResultSchema as ln, verifiedScanGitSeeds as lr, validateFailureLocation as lt, activeJourneyTerms as m, freezeConfiguration as mi, sessionReviewQuerySchema as mn, journeyInventoryReadSchema as mr, manualUploadSchema as mt, scanBatchEquivalenceDigest as n, commandSchema as ni, journeyIsolateSchema as nn, planBRepair as nr, reviewInventory as nt, bRereadDigest as o, gitMetadataBudgetBytes as oi, reviewAttemptsQuerySchema as on, scanSessionResourceSchema as or, maximumAgentSetupSessions as ot, splitSelectorValues as p, defaultScopedSettings as pi, sessionReviewInputSchema as pn, journeyInventoryQuerySchema as pr, manualUploadPrepareSchema as pt, validateInspectionHead as q, workPrivacyDecisions as qn, isSkippedWork as qr, hideFinishSchema as qt, locateTermEvidence as r, packageCommandSchema as ri, journeyPlaceSchema as rn, scanAliasResourceSchema as rr, appendSensitiveTerms as rt, reconcileBSession as s, producerVersion as si, reviewAttemptsResultSchema as sn, scanGitSeedsId as sr, artifactFailureDetailSchema as st, scanBatchContextDigest as t, journeyRenderSchema as ti, journeyResourceSchema as tn, mergeBRepair as tr, readWorkspaceOutcomes as tt, reviseGroupMembership as u, recommendParallelism as ui, sessionReconciliationResourceSchema as un, scanExclusionResourceSchema as ur, manualUploadActionSchema as ut, projectJourneyInventory as v, sessionUsefulnessResourceSchema as vn, preparationBeginSchema as vr, maximumTermsFileBytes as vt, rebindReviewSubmit as w, readConfirmedHideChange as wn, assertJourneyPrivacyReady as wr, sendRequestSchema as wt, bReviewScope as x, journeyEventSchema as xn, validatePreparationFacts as xr, sendActionSchema as xt, preparationScope as y, journeyCommitResultSchema as yn, preparationSettlementSchema as yr, normalizeSensitiveTerms as yt, inspectionCancelSchema as z, confirmedHideKinds as zn, sendReplaceResultSchema as zr, classificationPartition as zt };
+export { validateDetectionSummary as $, reviewRepairInputSchema as $n, isClassifying as $r, searchScopeDigest as $t, renewBeforeMs as A, addHideIndexTokens as An, displayedScopeDigest as Ar, obsoleteJourney as At, createApplication as B, confirmedHideKey as Bn, staticReviewDigest as Br, classificationPartition as Bt, rebindReviewOverlay as C, journeyEventSchema as Cn, validatePreparationFacts as Cr, sendActionSchema as Ct, staticallyHiddenFindings as D, renderedHideValue as Dn, journeyPreviewSchema as Dr, sendStartSchema as Dt, guardedFindingText as E, readConfirmedHideChange as En, journeyFindingsSchema as Er, sendRequestSchema as Et, readAccountAvatarUrl as F, bExceptionRanges as Fn, nativeEventsSchema as Fr, journeyGuidance as Ft, validateInspectionRequest as G, maskedHitsStale as Gn, agentSourcesSchema as Gr, reviewCompileSchema as Gt, inspectionStartSchema as H, confirmedHideTerms as Hn, staticSessionResourceSchema as Hr, applyClassification as Ht, storedCredentialSchema as I, bMaskedHits as In, nativeGetSchema as Ir, journeyBatchReadSchema as It, validateInspectionFence as J, workDecisionDigest as Jn, sendReceiptSchema as Jr, hideBeginSchema as Jt, inspectionQuerySchema as K, syncTermGroups as Kn, journeySendSchema as Kr, journeyContextQuerySchema as Kt, sourceIdentityEvidence as L, bTermMatcher as Ln, nativeRespondSchema as Lr, journeyReviewStorageQuerySchema as Lt, deviceAuthorizationSchema as M, maximumHideIndexTokens as Mn, applyCardAnswers as Mr, nativeAdapterVersions as Mt, deviceProfileScopeSchema as N, packHideIndex as Nn, assertJourneyPrivacyReady as Nr, attemptBudgetCodePoints as Nt, createAccount as O, settleConfirmedHides as On, journeyRenderInputSchema as Or, settleCorrections as Ot, profileUrlMatchesIdentity as P, bContainment as Pn, privacyDecisionDigest as Pr, validateAttemptAppend as Pt, validateInspectionContribution as Q, reviewCandidateResourceSchema as Qn, hasCompleteWorkDescription as Qr, journeySearchSaveSchema as Qt, withSourceEvidence as R, bWordBounded as Rn, mergePrivacyTerms as Rr, applyClassificationProposal as Rt, rebindReviewAlignment as S, journeyCommitSchema as Sn, preparationStartSchema as Sr, replaceSensitiveTermsSchema as St, reviewBatchReuse as T, confirmedHideDeltaSchema as Tn, journeyFindingImpactSchema as Tr, sendPrepareSchema as Tt, validateInspectionBatch as U, dictionaryHides as Un, agentSourcePathSegment as Ur, retireScanGeneration as Ut, inspectionCancelSchema as V, confirmedHideKinds as Vn, staticSessionId as Vr, classificationWorks as Vt, validateInspectionBatches as W, journeyConfirmedHides as Wn, agentSourceSchema as Wr, newJourneyWork as Wt, validateInspectionInputs as X, workCorrectionBinding as Xn, sendResolutionSchema as Xr, hidePublishSchema as Xt, validateInspectionHead as Y, workPrivacyDecisions as Yn, sendReplaceResultSchema as Yr, hideFinishSchema as Yt, validateInspectionQuery as Z, reviewCandidateInputSchema as Zn, sendSettingsSchema as Zr, journeySearchResultSchema as Zt, changeJourney as _, defaultScopedSettings as _i, sessionReviewResourceSchema as _n, journeyInventorySchema as _r, manualUploadStartSchema as _t, bCrossSegmentReviewSchema as a, withReadingProgress as ai, journeyPlaceSchema as an, scanAliasResourceSchema as ar, appendSensitiveTerms as at, isGenericPublicTerm as b, staticCatalogRef as bi, sessionUsefulnessResourceSchema as bn, preparationBeginSchema as br, maximumTermsFileBytes as bt, reconstructBFields as c, selectionBatchSchema as ci, reviewAttemptsQuerySchema as cn, scanSessionResourceSchema as cr, maximumAgentSetupSessions as ct, resolveGroupSplit as d, producerVersion as di, sessionReconcileResultSchema as dn, verifiedScanGitSeeds as dr, validateFailureLocation as dt, isIncludedWork as ei, journeyPolicyRespondSchema as en, reviewRepairResourceSchema as er, inspectionInputs as et, selectedValueMembers as f, stateSchema as fi, sessionReconciliationResourceSchema as fn, scanExclusionResourceSchema as fr, manualUploadActionSchema as ft, semanticGroupKey as g, effectiveTreatmentSchema as gi, sessionReviewQuerySchema as gn, journeyInventoryReadSchema as gr, manualUploadSchema as gt, hideScopeDigest as h, approvedTreatmentSchema as hi, sessionReviewInputSchema as hn, journeyInventoryQuerySchema as hr, manualUploadPrepareSchema as ht, validateBCrossSegmentReview as i, selectedWorks as ii, journeyIsolateSchema as in, planBRepair as ir, reviewInventory as it, accountProfileSchema as j, hideKeyId as jn, requestedScope as jr, metadataProcessingVersion as jt, renew as k, termHideAdditions as kn, journeyRenderSchema as kr, currentJourneyAdapters as kt, chooseCheapPlacement as l, selectionSchema as li, reviewAttemptsResultSchema as ln, scanGitSeedsId as lr, artifactFailureDetailSchema as lt, activeJourneyTerms as m, recommendParallelism as mi, sessionRereadResourceSchema as mn, resolveSourceSelection as mr, manualUploadChoiceSchema as mt, scanBatchEquivalenceDigest as n, isSelectedWork as ni, journeyResourceQuerySchema as nn, bReviewDigest as nr, settingsQuerySchema as nt, bRereadDigest as o, commandSchema as oi, sortingApplySchema as on, scanCanonicalResourceSchema as or, classifyAgentSetup as ot, splitSelectorValues as p, sourceChangePolicy as pi, sessionRereadInputSchema as pn, validateScanExclusion as pr, manualUploadBindingSchema as pt, validateInspectionClaim as q, retireWorkDescription as qn, sendArtifactSchema as qr, journeyContextSchema as qt, locateTermEvidence as r, isSkippedWork as ri, journeyResourceSchema as rn, mergeBRepair as rr, readWorkspaceOutcomes as rt, reconcileBSession as s, packageCommandSchema as si, reviewAttemptResourceSchema as sn, scanPreparationDigest as sr, defaultAgentSetupInclusion as st, scanBatchContextDigest as t, isReadingComplete as ti, projectPreparationProgress as tn, reviewTransportBytes as tr, settingsBatchSchema as tt, reviseGroupMembership as u, gitMetadataBudgetBytes as ui, sessionReconcileInputSchema as un, scanGitSeedsResource as ur, resolveFailureLocation as ut, projectJourneyInventory as v, freezeConfiguration as vi, sessionReviewStatusSchema as vn, journeyPreparationProgressSchema as vr, candidateSortAvailable as vt, rebindReviewSubmit as w, confirmedHideAdditions as wn, journeyClassificationSessionsSchema as wr, sendChoiceSchema as wt, bReviewScope as x, journeyCommitResultSchema as xn, preparationSettlementSchema as xr, normalizeSensitiveTerms as xt, preparationScope as y, selectFrozenConfiguration as yi, sessionUsefulnessInputSchema as yn, emptyPreparationFacts as yr, emptyTermsRevision as yt, agentSetupKey as z, confirmedHideGroupIds as zn, hasCurrentStaticReview as zr, classificationCommitSchema as zt };