@happyvertical/smrt-ingestion 0.0.0-stage → 0.55.6

package/dist/smrt-knowledge.json

@@ -0,0 +1,1621 @@
+{
+  "schemaVersion": 1,
+  "sensitiveFieldsExcluded": true,
+  "generatedAt": "1970-01-01T00:00:00.000Z",
+  "packageName": "@happyvertical/smrt-ingestion",
+  "packageVersion": "0.55.6",
+  "sourceManifestPath": "dist/manifest.json",
+  "agentDocPath": "AGENTS.md",
+  "sourceHashes": {
+    "manifest": "d79161b90fb56e63e5d88658a58943c662f26d49e400466664c457508a429fdb",
+    "packageJson": "7d352d56fcd07a61126e99cadc33dfc5f2a33c63a16aa053793241e03c593173",
+    "agents": "641b3e98116c5eb0c6b4dec127beaeacd293fe87e0ed98d2d07d8ed264fe36b6",
+    "moduleDoc:agents/execution.md": "6153206adeea46fee1be57ccc01d171621ffb3dc3a754b3634bfe2ce367e8416",
+    "moduleDoc:README.md": "8c22e7879e7d7caaedd87de59e7603192d909b8a8d60c15496afac179fb39f13",
+    "moduleDoc:EXTRACTION.md": "b735a25a7be75f3a13f3f9e92b0c25834c1394835c16ccd73a076d5720c14243",
+    "moduleDoc:PROPOSALS.md": "3accad9430e917e65319b7b7708d5c1df277eea7eaa0490df913cf361e80b7bc",
+    "agentSurface:src/test-support/execution.ts": "80a8d4661f6f09091d7c20d5a825de129a8e1acbda20984d87dc42cdec557d59",
+    "agentSurface:src/test-support/proposals.ts": "ab304c4e83e326c382bdb2b68d00f951b7707543041270c99fab0801302db842"
+  },
+  "exports": [
+    ".",
+    "./dto",
+    "./execution",
+    "./manifest",
+    "./manifest.json",
+    "./models",
+    "./proposals",
+    "./server"
+  ],
+  "dependencies": {
+    "@happyvertical/smrt-core": "workspace:*",
+    "@happyvertical/smrt-types": "workspace:*",
+    "@happyvertical/smrt-tenancy": "workspace:*",
+    "@happyvertical/smrt-assets": "workspace:*",
+    "@happyvertical/smrt-jobs": "workspace:*",
+    "@happyvertical/sql": "catalog:",
+    "@happyvertical/pdf": "catalog:",
+    "@happyvertical/ocr": "catalog:",
+    "@happyvertical/speech": "catalog:",
+    "@happyvertical/ai": "catalog:",
+    "sharp": "catalog:",
+    "@happyvertical/smrt-agents": "workspace:*",
+    "@happyvertical/smrt-playbooks": "workspace:*",
+    "ajv": "8.20.0",
+    "@happyvertical/smrt-vitest": "workspace:*",
+    "@types/node": "24.13.6",
+    "typescript": "6.0.3",
+    "vite": "8.1.4",
+    "vitest": "4.1.10",
+    "@happyvertical/smrt-content": "workspace:*",
+    "@happyvertical/smrt-users": "workspace:*"
+  },
+  "smrtDependencies": [
+    "@happyvertical/smrt-agents",
+    "@happyvertical/smrt-assets",
+    "@happyvertical/smrt-content",
+    "@happyvertical/smrt-core",
+    "@happyvertical/smrt-jobs",
+    "@happyvertical/smrt-playbooks",
+    "@happyvertical/smrt-tenancy",
+    "@happyvertical/smrt-types",
+    "@happyvertical/smrt-users",
+    "@happyvertical/smrt-vitest"
+  ],
+  "sdkDependencies": [
+    "@happyvertical/ai",
+    "@happyvertical/ocr",
+    "@happyvertical/pdf",
+    "@happyvertical/sql"
+  ],
+  "tags": [
+    "cross-package"
+  ],
+  "risks": [
+    "cross-package-refs:1",
+    "sensitive-fields-excluded"
+  ],
+  "objects": [
+    {
+      "name": "IntakeItem",
+      "qualifiedName": "@happyvertical/smrt-ingestion:IntakeItem",
+      "collection": "intakeitems",
+      "tableName": "intake_items",
+      "packageName": "@happyvertical/smrt-ingestion",
+      "extends": "SmrtObject",
+      "fields": [
+        {
+          "name": "tenantId",
+          "type": "text",
+          "required": true,
+          "columnType": "UUID"
+        },
+        {
+          "name": "confidentialScopeId",
+          "type": "text",
+          "required": true,
+          "columnType": "TEXT"
+        },
+        {
+          "name": "sourceId",
+          "type": "text",
+          "required": true,
+          "columnType": "TEXT"
+        },
+        {
+          "name": "sourceVersion",
+          "type": "text",
+          "required": true,
+          "columnType": "TEXT"
+        },
+        {
+          "name": "deliveryKey",
+          "type": "text",
+          "required": true,
+          "columnType": "TEXT"
+        },
+        {
+          "name": "payloadDigest",
+          "type": "text",
+          "required": true,
+          "columnType": "TEXT"
+        },
+        {
+          "name": "scopeDigest",
+          "type": "text",
+          "required": true,
+          "columnType": "TEXT"
+        },
+        {
+          "name": "receiptState",
+          "type": "text",
+          "required": true,
+          "columnType": "TEXT"
+        },
+        {
+          "name": "processingState",
+          "type": "text",
+          "required": true,
+          "columnType": "TEXT"
+        },
+        {
+          "name": "visibility",
+          "type": "text",
+          "required": true,
+          "columnType": "TEXT"
+        },
+        {
+          "name": "receiptVersion",
+          "type": "integer",
+          "required": true,
+          "columnType": "INTEGER"
+        },
+        {
+          "name": "analysisRevision",
+          "type": "integer",
+          "required": true,
+          "columnType": "INTEGER"
+        },
+        {
+          "name": "fence",
+          "type": "integer",
+          "required": true,
+          "columnType": "INTEGER"
+        },
+        {
+          "name": "leaseToken",
+          "type": "text",
+          "required": true,
+          "columnType": "TEXT"
+        },
+        {
+          "name": "leaseUntil",
+          "type": "datetime",
+          "required": false,
+          "columnType": "TIMESTAMP"
+        },
+        {
+          "name": "expiresAt",
+          "type": "datetime",
+          "required": true,
+          "columnType": "TIMESTAMP"
+        },
+        {
+          "name": "replayUntil",
+          "type": "datetime",
+          "required": true,
+          "columnType": "TIMESTAMP"
+        },
+        {
+          "name": "cancelled",
+          "type": "boolean",
+          "required": true,
+          "columnType": "BOOLEAN"
+        },
+        {
+          "name": "traceId",
+          "type": "text",
+          "required": true,
+          "columnType": "TEXT"
+        },
+        {
+          "name": "data",
+          "type": "json",
+          "required": true,
+          "columnType": "JSON"
+        }
+      ],
+      "relationships": [],
+      "methods": [
+        "getData"
+      ],
+      "methodSignatures": [
+        {
+          "name": "getData",
+          "returns": "Record<string, unknown>"
+        }
+      ],
+      "tenant": {
+        "scoped": true,
+        "mode": "required",
+        "field": "tenantId"
+      },
+      "conflictColumns": [
+        "tenant_id",
+        "source_id",
+        "delivery_key"
+      ],
+      "surfaces": [],
+      "withheldSurfaces": [
+        {
+          "kind": "api",
+          "operation": "getData",
+          "code": "api-disabled",
+          "reason": "api is disabled",
+          "objectName": "@happyvertical/smrt-ingestion:IntakeItem"
+        }
+      ],
+      "relationshipFeatures": [
+        "uuidColumns"
+      ],
+      "tags": [],
+      "risks": []
+    },
+    {
+      "name": "IntakeEvidence",
+      "qualifiedName": "@happyvertical/smrt-ingestion:IntakeEvidence",
+      "collection": "intakeevidences",
+      "tableName": "intake_evidence",
+      "packageName": "@happyvertical/smrt-ingestion",
+      "extends": "SmrtObject",
+      "fields": [
+        {
+          "name": "tenantId",
+          "type": "text",
+          "required": true,
+          "columnType": "UUID"
+        },
+        {
+          "name": "confidentialScopeId",
+          "type": "text",
+          "required": true,
+          "columnType": "TEXT"
+        },
+        {
+          "name": "itemId",
+          "type": "foreignKey",
+          "required": true,
+          "related": "IntakeItem",
+          "columnType": "UUID"
+        },
+        {
+          "name": "partId",
+          "type": "text",
+          "required": true,
+          "columnType": "TEXT"
+        },
+        {
+          "name": "parentEvidenceId",
+          "type": "foreignKey",
+          "required": false,
+          "related": "IntakeEvidence",
+          "columnType": "UUID"
+        },
+        {
+          "name": "assetId",
+          "type": "crossPackageRef",
+          "required": false,
+          "related": "@happyvertical/smrt-assets:Asset",
+          "columnType": "UUID"
+        },
+        {
+          "name": "state",
+          "type": "text",
+          "required": true,
+          "columnType": "TEXT"
+        },
+        {
+          "name": "contentHash",
+          "type": "text",
+          "required": true,
+          "columnType": "TEXT"
+        },
+        {
+          "name": "byteLength",
+          "type": "integer",
+          "required": true,
+          "columnType": "INTEGER"
+        },
+        {
+          "name": "mediaType",
+          "type": "text",
+          "required": true,
+          "columnType": "TEXT"
+        },
+        {
+          "name": "sourceUri",
+          "type": "text",
+          "required": true,
+          "columnType": "TEXT"
+        },
+        {
+          "name": "data",
+          "type": "json",
+          "required": true,
+          "columnType": "JSON"
+        }
+      ],
+      "relationships": [
+        {
+          "name": "itemId",
+          "type": "foreignKey",
+          "required": true,
+          "related": "IntakeItem",
+          "columnType": "UUID"
+        },
+        {
+          "name": "parentEvidenceId",
+          "type": "foreignKey",
+          "required": false,
+          "related": "IntakeEvidence",
+          "columnType": "UUID"
+        },
+        {
+          "name": "assetId",
+          "type": "crossPackageRef",
+          "required": false,
+          "related": "@happyvertical/smrt-assets:Asset",
+          "columnType": "UUID"
+        }
+      ],
+      "methods": [
+        "getData"
+      ],
+      "methodSignatures": [
+        {
+          "name": "getData",
+          "returns": "Record<string, unknown>"
+        }
+      ],
+      "tenant": {
+        "scoped": true,
+        "mode": "required",
+        "field": "tenantId"
+      },
+      "conflictColumns": [
+        "tenant_id",
+        "item_id",
+        "part_id"
+      ],
+      "surfaces": [],
+      "withheldSurfaces": [
+        {
+          "kind": "api",
+          "operation": "getData",
+          "code": "api-disabled",
+          "reason": "api is disabled",
+          "objectName": "@happyvertical/smrt-ingestion:IntakeEvidence"
+        }
+      ],
+      "relationshipFeatures": [
+        "crossPackageRef",
+        "foreignKey",
+        "uuidColumns"
+      ],
+      "tags": [],
+      "risks": []
+    },
+    {
+      "name": "IntakeAnalysis",
+      "qualifiedName": "@happyvertical/smrt-ingestion:IntakeAnalysis",
+      "collection": "intakeanalysises",
+      "tableName": "intake_analyses",
+      "packageName": "@happyvertical/smrt-ingestion",
+      "extends": "SmrtObject",
+      "fields": [
+        {
+          "name": "tenantId",
+          "type": "text",
+          "required": true,
+          "columnType": "UUID"
+        },
+        {
+          "name": "confidentialScopeId",
+          "type": "text",
+          "required": true,
+          "columnType": "TEXT"
+        },
+        {
+          "name": "itemId",
+          "type": "foreignKey",
+          "required": true,
+          "related": "IntakeItem",
+          "columnType": "UUID"
+        },
+        {
+          "name": "revision",
+          "type": "integer",
+          "required": true,
+          "columnType": "INTEGER"
+        },
+        {
+          "name": "fence",
+          "type": "integer",
+          "required": true,
+          "columnType": "INTEGER"
+        },
+        {
+          "name": "attemptNumber",
+          "type": "integer",
+          "required": true,
+          "columnType": "INTEGER"
+        },
+        {
+          "name": "currentAttemptId",
+          "type": "foreignKey",
+          "required": false,
+          "related": "IntakeAnalysisAttempt",
+          "columnType": "UUID"
+        },
+        {
+          "name": "state",
+          "type": "text",
+          "required": true,
+          "columnType": "TEXT"
+        },
+        {
+          "name": "inputDigest",
+          "type": "text",
+          "required": true,
+          "columnType": "TEXT"
+        },
+        {
+          "name": "data",
+          "type": "json",
+          "required": true,
+          "columnType": "JSON"
+        }
+      ],
+      "relationships": [
+        {
+          "name": "itemId",
+          "type": "foreignKey",
+          "required": true,
+          "related": "IntakeItem",
+          "columnType": "UUID"
+        },
+        {
+          "name": "currentAttemptId",
+          "type": "foreignKey",
+          "required": false,
+          "related": "IntakeAnalysisAttempt",
+          "columnType": "UUID"
+        }
+      ],
+      "methods": [
+        "getData"
+      ],
+      "methodSignatures": [
+        {
+          "name": "getData",
+          "returns": "Record<string, unknown>"
+        }
+      ],
+      "tenant": {
+        "scoped": true,
+        "mode": "required",
+        "field": "tenantId"
+      },
+      "conflictColumns": [
+        "tenant_id",
+        "item_id",
+        "revision"
+      ],
+      "surfaces": [],
+      "withheldSurfaces": [
+        {
+          "kind": "api",
+          "operation": "getData",
+          "code": "api-disabled",
+          "reason": "api is disabled",
+          "objectName": "@happyvertical/smrt-ingestion:IntakeAnalysis"
+        }
+      ],
+      "relationshipFeatures": [
+        "foreignKey",
+        "uuidColumns"
+      ],
+      "tags": [],
+      "risks": []
+    },
+    {
+      "name": "IntakeAnalysisAttempt",
+      "qualifiedName": "@happyvertical/smrt-ingestion:IntakeAnalysisAttempt",
+      "collection": "intakeanalysisattempts",
+      "tableName": "intake_analysis_attempts",
+      "packageName": "@happyvertical/smrt-ingestion",
+      "extends": "SmrtObject",
+      "fields": [
+        {
+          "name": "tenantId",
+          "type": "text",
+          "required": true,
+          "columnType": "UUID"
+        },
+        {
+          "name": "confidentialScopeId",
+          "type": "text",
+          "required": true,
+          "columnType": "TEXT"
+        },
+        {
+          "name": "itemId",
+          "type": "foreignKey",
+          "required": true,
+          "related": "IntakeItem",
+          "columnType": "UUID"
+        },
+        {
+          "name": "analysisId",
+          "type": "foreignKey",
+          "required": true,
+          "related": "IntakeAnalysis",
+          "columnType": "UUID"
+        },
+        {
+          "name": "attemptNumber",
+          "type": "integer",
+          "required": true,
+          "columnType": "INTEGER"
+        },
+        {
+          "name": "fence",
+          "type": "integer",
+          "required": true,
+          "columnType": "INTEGER"
+        },
+        {
+          "name": "state",
+          "type": "text",
+          "required": true,
+          "columnType": "TEXT"
+        },
+        {
+          "name": "leaseToken",
+          "type": "text",
+          "required": true,
+          "columnType": "TEXT"
+        },
+        {
+          "name": "leaseUntil",
+          "type": "datetime",
+          "required": false,
+          "columnType": "TIMESTAMP"
+        },
+        {
+          "name": "outputDigest",
+          "type": "text",
+          "required": true,
+          "columnType": "TEXT"
+        },
+        {
+          "name": "safeError",
+          "type": "text",
+          "required": true,
+          "columnType": "TEXT"
+        },
+        {
+          "name": "confidence",
+          "type": "decimal",
+          "required": false,
+          "columnType": "REAL"
+        },
+        {
+          "name": "data",
+          "type": "json",
+          "required": true,
+          "columnType": "JSON"
+        }
+      ],
+      "relationships": [
+        {
+          "name": "itemId",
+          "type": "foreignKey",
+          "required": true,
+          "related": "IntakeItem",
+          "columnType": "UUID"
+        },
+        {
+          "name": "analysisId",
+          "type": "foreignKey",
+          "required": true,
+          "related": "IntakeAnalysis",
+          "columnType": "UUID"
+        }
+      ],
+      "methods": [
+        "getData"
+      ],
+      "methodSignatures": [
+        {
+          "name": "getData",
+          "returns": "Record<string, unknown>"
+        }
+      ],
+      "tenant": {
+        "scoped": true,
+        "mode": "required",
+        "field": "tenantId"
+      },
+      "conflictColumns": [
+        "tenant_id",
+        "analysis_id",
+        "attempt_number"
+      ],
+      "surfaces": [],
+      "withheldSurfaces": [
+        {
+          "kind": "api",
+          "operation": "getData",
+          "code": "api-disabled",
+          "reason": "api is disabled",
+          "objectName": "@happyvertical/smrt-ingestion:IntakeAnalysisAttempt"
+        }
+      ],
+      "relationshipFeatures": [
+        "foreignKey",
+        "uuidColumns"
+      ],
+      "tags": [],
+      "risks": []
+    },
+    {
+      "name": "IntakePlan",
+      "qualifiedName": "@happyvertical/smrt-ingestion:IntakePlan",
+      "collection": "intakeplans",
+      "tableName": "intake_plans",
+      "packageName": "@happyvertical/smrt-ingestion",
+      "extends": "SmrtObject",
+      "fields": [
+        {
+          "name": "tenantId",
+          "type": "text",
+          "required": true,
+          "columnType": "UUID"
+        },
+        {
+          "name": "confidentialScopeId",
+          "type": "text",
+          "required": true,
+          "columnType": "TEXT"
+        },
+        {
+          "name": "itemId",
+          "type": "foreignKey",
+          "required": true,
+          "related": "IntakeItem",
+          "columnType": "UUID"
+        },
+        {
+          "name": "planKey",
+          "type": "text",
+          "required": true,
+          "columnType": "TEXT"
+        },
+        {
+          "name": "revision",
+          "type": "integer",
+          "required": true,
+          "columnType": "INTEGER"
+        },
+        {
+          "name": "digest",
+          "type": "text",
+          "required": true,
+          "columnType": "TEXT"
+        },
+        {
+          "name": "data",
+          "type": "json",
+          "required": true,
+          "columnType": "JSON"
+        }
+      ],
+      "relationships": [
+        {
+          "name": "itemId",
+          "type": "foreignKey",
+          "required": true,
+          "related": "IntakeItem",
+          "columnType": "UUID"
+        }
+      ],
+      "methods": [
+        "getData"
+      ],
+      "methodSignatures": [
+        {
+          "name": "getData",
+          "returns": "Record<string, unknown>"
+        }
+      ],
+      "tenant": {
+        "scoped": true,
+        "mode": "required",
+        "field": "tenantId"
+      },
+      "conflictColumns": [
+        "tenant_id",
+        "item_id",
+        "plan_key",
+        "revision"
+      ],
+      "surfaces": [],
+      "withheldSurfaces": [
+        {
+          "kind": "api",
+          "operation": "getData",
+          "code": "api-disabled",
+          "reason": "api is disabled",
+          "objectName": "@happyvertical/smrt-ingestion:IntakePlan"
+        }
+      ],
+      "relationshipFeatures": [
+        "foreignKey",
+        "uuidColumns"
+      ],
+      "tags": [],
+      "risks": []
+    },
+    {
+      "name": "IntakeAction",
+      "qualifiedName": "@happyvertical/smrt-ingestion:IntakeAction",
+      "collection": "intakeactions",
+      "tableName": "intake_actions",
+      "packageName": "@happyvertical/smrt-ingestion",
+      "extends": "SmrtObject",
+      "fields": [
+        {
+          "name": "tenantId",
+          "type": "text",
+          "required": true,
+          "columnType": "UUID"
+        },
+        {
+          "name": "confidentialScopeId",
+          "type": "text",
+          "required": true,
+          "columnType": "TEXT"
+        },
+        {
+          "name": "itemId",
+          "type": "foreignKey",
+          "required": true,
+          "related": "IntakeItem",
+          "columnType": "UUID"
+        },
+        {
+          "name": "actionKey",
+          "type": "text",
+          "required": true,
+          "columnType": "TEXT"
+        },
+        {
+          "name": "state",
+          "type": "text",
+          "required": true,
+          "columnType": "TEXT"
+        },
+        {
+          "name": "proposalRevision",
+          "type": "integer",
+          "required": true,
+          "columnType": "INTEGER"
+        },
+        {
+          "name": "reviewVersion",
+          "type": "integer",
+          "required": true,
+          "columnType": "INTEGER"
+        },
+        {
+          "name": "executionAttempt",
+          "type": "integer",
+          "required": true,
+          "columnType": "INTEGER"
+        },
+        {
+          "name": "fence",
+          "type": "integer",
+          "required": true,
+          "columnType": "INTEGER"
+        },
+        {
+          "name": "resultDigest",
+          "type": "text",
+          "required": true,
+          "columnType": "TEXT"
+        },
+        {
+          "name": "data",
+          "type": "json",
+          "required": true,
+          "columnType": "JSON"
+        }
+      ],
+      "relationships": [
+        {
+          "name": "itemId",
+          "type": "foreignKey",
+          "required": true,
+          "related": "IntakeItem",
+          "columnType": "UUID"
+        }
+      ],
+      "methods": [
+        "getData"
+      ],
+      "methodSignatures": [
+        {
+          "name": "getData",
+          "returns": "Record<string, unknown>"
+        }
+      ],
+      "tenant": {
+        "scoped": true,
+        "mode": "required",
+        "field": "tenantId"
+      },
+      "conflictColumns": [
+        "tenant_id",
+        "item_id",
+        "action_key"
+      ],
+      "surfaces": [],
+      "withheldSurfaces": [
+        {
+          "kind": "api",
+          "operation": "getData",
+          "code": "api-disabled",
+          "reason": "api is disabled",
+          "objectName": "@happyvertical/smrt-ingestion:IntakeAction"
+        }
+      ],
+      "relationshipFeatures": [
+        "foreignKey",
+        "uuidColumns"
+      ],
+      "tags": [],
+      "risks": []
+    },
+    {
+      "name": "IntakeProposal",
+      "qualifiedName": "@happyvertical/smrt-ingestion:IntakeProposal",
+      "collection": "intakeproposals",
+      "tableName": "intake_proposals",
+      "packageName": "@happyvertical/smrt-ingestion",
+      "extends": "SmrtObject",
+      "fields": [
+        {
+          "name": "tenantId",
+          "type": "text",
+          "required": true,
+          "columnType": "UUID"
+        },
+        {
+          "name": "confidentialScopeId",
+          "type": "text",
+          "required": true,
+          "columnType": "TEXT"
+        },
+        {
+          "name": "itemId",
+          "type": "foreignKey",
+          "required": true,
+          "related": "IntakeItem",
+          "columnType": "UUID"
+        },
+        {
+          "name": "actionId",
+          "type": "foreignKey",
+          "required": true,
+          "related": "IntakeAction",
+          "columnType": "UUID"
+        },
+        {
+          "name": "analysisId",
+          "type": "foreignKey",
+          "required": true,
+          "related": "IntakeAnalysis",
+          "columnType": "UUID"
+        },
+        {
+          "name": "analysisAttemptId",
+          "type": "foreignKey",
+          "required": true,
+          "related": "IntakeAnalysisAttempt",
+          "columnType": "UUID"
+        },
+        {
+          "name": "revision",
+          "type": "integer",
+          "required": true,
+          "columnType": "INTEGER"
+        },
+        {
+          "name": "bindingHash",
+          "type": "text",
+          "required": true,
+          "columnType": "TEXT"
+        },
+        {
+          "name": "data",
+          "type": "json",
+          "required": true,
+          "columnType": "JSON"
+        }
+      ],
+      "relationships": [
+        {
+          "name": "itemId",
+          "type": "foreignKey",
+          "required": true,
+          "related": "IntakeItem",
+          "columnType": "UUID"
+        },
+        {
+          "name": "actionId",
+          "type": "foreignKey",
+          "required": true,
+          "related": "IntakeAction",
+          "columnType": "UUID"
+        },
+        {
+          "name": "analysisId",
+          "type": "foreignKey",
+          "required": true,
+          "related": "IntakeAnalysis",
+          "columnType": "UUID"
+        },
+        {
+          "name": "analysisAttemptId",
+          "type": "foreignKey",
+          "required": true,
+          "related": "IntakeAnalysisAttempt",
+          "columnType": "UUID"
+        }
+      ],
+      "methods": [
+        "getData"
+      ],
+      "methodSignatures": [
+        {
+          "name": "getData",
+          "returns": "Record<string, unknown>"
+        }
+      ],
+      "tenant": {
+        "scoped": true,
+        "mode": "required",
+        "field": "tenantId"
+      },
+      "conflictColumns": [
+        "tenant_id",
+        "action_id",
+        "revision"
+      ],
+      "surfaces": [],
+      "withheldSurfaces": [
+        {
+          "kind": "api",
+          "operation": "getData",
+          "code": "api-disabled",
+          "reason": "api is disabled",
+          "objectName": "@happyvertical/smrt-ingestion:IntakeProposal"
+        }
+      ],
+      "relationshipFeatures": [
+        "foreignKey",
+        "uuidColumns"
+      ],
+      "tags": [],
+      "risks": []
+    },
+    {
+      "name": "IntakeReviewDecision",
+      "qualifiedName": "@happyvertical/smrt-ingestion:IntakeReviewDecision",
+      "collection": "intakereviewdecisions",
+      "tableName": "intake_review_decisions",
+      "packageName": "@happyvertical/smrt-ingestion",
+      "extends": "SmrtObject",
+      "fields": [
+        {
+          "name": "tenantId",
+          "type": "text",
+          "required": true,
+          "columnType": "UUID"
+        },
+        {
+          "name": "confidentialScopeId",
+          "type": "text",
+          "required": true,
+          "columnType": "TEXT"
+        },
+        {
+          "name": "itemId",
+          "type": "foreignKey",
+          "required": true,
+          "related": "IntakeItem",
+          "columnType": "UUID"
+        },
+        {
+          "name": "actionId",
+          "type": "foreignKey",
+          "required": true,
+          "related": "IntakeAction",
+          "columnType": "UUID"
+        },
+        {
+          "name": "proposalId",
+          "type": "foreignKey",
+          "required": true,
+          "related": "IntakeProposal",
+          "columnType": "UUID"
+        },
+        {
+          "name": "reviewVersion",
+          "type": "integer",
+          "required": true,
+          "columnType": "INTEGER"
+        },
+        {
+          "name": "bindingHash",
+          "type": "text",
+          "required": true,
+          "columnType": "TEXT"
+        },
+        {
+          "name": "decision",
+          "type": "text",
+          "required": true,
+          "columnType": "TEXT"
+        },
+        {
+          "name": "data",
+          "type": "json",
+          "required": true,
+          "columnType": "JSON"
+        }
+      ],
+      "relationships": [
+        {
+          "name": "itemId",
+          "type": "foreignKey",
+          "required": true,
+          "related": "IntakeItem",
+          "columnType": "UUID"
+        },
+        {
+          "name": "actionId",
+          "type": "foreignKey",
+          "required": true,
+          "related": "IntakeAction",
+          "columnType": "UUID"
+        },
+        {
+          "name": "proposalId",
+          "type": "foreignKey",
+          "required": true,
+          "related": "IntakeProposal",
+          "columnType": "UUID"
+        }
+      ],
+      "methods": [
+        "getData"
+      ],
+      "methodSignatures": [
+        {
+          "name": "getData",
+          "returns": "Record<string, unknown>"
+        }
+      ],
+      "tenant": {
+        "scoped": true,
+        "mode": "required",
+        "field": "tenantId"
+      },
+      "conflictColumns": [
+        "tenant_id",
+        "action_id",
+        "review_version"
+      ],
+      "surfaces": [],
+      "withheldSurfaces": [
+        {
+          "kind": "api",
+          "operation": "getData",
+          "code": "api-disabled",
+          "reason": "api is disabled",
+          "objectName": "@happyvertical/smrt-ingestion:IntakeReviewDecision"
+        }
+      ],
+      "relationshipFeatures": [
+        "foreignKey",
+        "uuidColumns"
+      ],
+      "tags": [],
+      "risks": []
+    },
+    {
+      "name": "IntakeExecution",
+      "qualifiedName": "@happyvertical/smrt-ingestion:IntakeExecution",
+      "collection": "intakeexecutions",
+      "tableName": "intake_executions",
+      "packageName": "@happyvertical/smrt-ingestion",
+      "extends": "SmrtObject",
+      "fields": [
+        {
+          "name": "tenantId",
+          "type": "text",
+          "required": true,
+          "columnType": "UUID"
+        },
+        {
+          "name": "confidentialScopeId",
+          "type": "text",
+          "required": true,
+          "columnType": "TEXT"
+        },
+        {
+          "name": "itemId",
+          "type": "foreignKey",
+          "required": true,
+          "related": "IntakeItem",
+          "columnType": "UUID"
+        },
+        {
+          "name": "actionId",
+          "type": "foreignKey",
+          "required": true,
+          "related": "IntakeAction",
+          "columnType": "UUID"
+        },
+        {
+          "name": "attemptNumber",
+          "type": "integer",
+          "required": true,
+          "columnType": "INTEGER"
+        },
+        {
+          "name": "fence",
+          "type": "integer",
+          "required": true,
+          "columnType": "INTEGER"
+        },
+        {
+          "name": "state",
+          "type": "text",
+          "required": true,
+          "columnType": "TEXT"
+        },
+        {
+          "name": "bindingHash",
+          "type": "text",
+          "required": true,
+          "columnType": "TEXT"
+        },
+        {
+          "name": "resultDigest",
+          "type": "text",
+          "required": true,
+          "columnType": "TEXT"
+        },
+        {
+          "name": "idempotencyKey",
+          "type": "text",
+          "required": true,
+          "columnType": "TEXT"
+        },
+        {
+          "name": "data",
+          "type": "json",
+          "required": true,
+          "columnType": "JSON"
+        }
+      ],
+      "relationships": [
+        {
+          "name": "itemId",
+          "type": "foreignKey",
+          "required": true,
+          "related": "IntakeItem",
+          "columnType": "UUID"
+        },
+        {
+          "name": "actionId",
+          "type": "foreignKey",
+          "required": true,
+          "related": "IntakeAction",
+          "columnType": "UUID"
+        }
+      ],
+      "methods": [
+        "getData"
+      ],
+      "methodSignatures": [
+        {
+          "name": "getData",
+          "returns": "Record<string, unknown>"
+        }
+      ],
+      "tenant": {
+        "scoped": true,
+        "mode": "required",
+        "field": "tenantId"
+      },
+      "conflictColumns": [
+        "tenant_id",
+        "action_id",
+        "attempt_number"
+      ],
+      "surfaces": [],
+      "withheldSurfaces": [
+        {
+          "kind": "api",
+          "operation": "getData",
+          "code": "api-disabled",
+          "reason": "api is disabled",
+          "objectName": "@happyvertical/smrt-ingestion:IntakeExecution"
+        }
+      ],
+      "relationshipFeatures": [
+        "foreignKey",
+        "uuidColumns"
+      ],
+      "tags": [],
+      "risks": []
+    },
+    {
+      "name": "IntakeFeedback",
+      "qualifiedName": "@happyvertical/smrt-ingestion:IntakeFeedback",
+      "collection": "intakefeedbacks",
+      "tableName": "intake_feedback",
+      "packageName": "@happyvertical/smrt-ingestion",
+      "extends": "SmrtObject",
+      "fields": [
+        {
+          "name": "tenantId",
+          "type": "text",
+          "required": true,
+          "columnType": "UUID"
+        },
+        {
+          "name": "confidentialScopeId",
+          "type": "text",
+          "required": true,
+          "columnType": "TEXT"
+        },
+        {
+          "name": "itemId",
+          "type": "foreignKey",
+          "required": true,
+          "related": "IntakeItem",
+          "columnType": "UUID"
+        },
+        {
+          "name": "requestKey",
+          "type": "text",
+          "required": true,
+          "columnType": "TEXT"
+        },
+        {
+          "name": "supersedesId",
+          "type": "foreignKey",
+          "required": false,
+          "related": "IntakeFeedback",
+          "columnType": "UUID"
+        },
+        {
+          "name": "kind",
+          "type": "text",
+          "required": true,
+          "columnType": "TEXT"
+        },
+        {
+          "name": "data",
+          "type": "json",
+          "required": true,
+          "columnType": "JSON"
+        }
+      ],
+      "relationships": [
+        {
+          "name": "itemId",
+          "type": "foreignKey",
+          "required": true,
+          "related": "IntakeItem",
+          "columnType": "UUID"
+        },
+        {
+          "name": "supersedesId",
+          "type": "foreignKey",
+          "required": false,
+          "related": "IntakeFeedback",
+          "columnType": "UUID"
+        }
+      ],
+      "methods": [
+        "getData"
+      ],
+      "methodSignatures": [
+        {
+          "name": "getData",
+          "returns": "Record<string, unknown>"
+        }
+      ],
+      "tenant": {
+        "scoped": true,
+        "mode": "required",
+        "field": "tenantId"
+      },
+      "conflictColumns": [
+        "tenant_id",
+        "item_id",
+        "request_key"
+      ],
+      "surfaces": [],
+      "withheldSurfaces": [
+        {
+          "kind": "api",
+          "operation": "getData",
+          "code": "api-disabled",
+          "reason": "api is disabled",
+          "objectName": "@happyvertical/smrt-ingestion:IntakeFeedback"
+        }
+      ],
+      "relationshipFeatures": [
+        "foreignKey",
+        "uuidColumns"
+      ],
+      "tags": [],
+      "risks": []
+    },
+    {
+      "name": "IntakeDispatch",
+      "qualifiedName": "@happyvertical/smrt-ingestion:IntakeDispatch",
+      "collection": "intakedispatches",
+      "tableName": "intake_dispatches",
+      "packageName": "@happyvertical/smrt-ingestion",
+      "extends": "SmrtObject",
+      "fields": [
+        {
+          "name": "tenantId",
+          "type": "text",
+          "required": true,
+          "columnType": "UUID"
+        },
+        {
+          "name": "confidentialScopeId",
+          "type": "text",
+          "required": true,
+          "columnType": "TEXT"
+        },
+        {
+          "name": "itemId",
+          "type": "foreignKey",
+          "required": true,
+          "related": "IntakeItem",
+          "columnType": "UUID"
+        },
+        {
+          "name": "stage",
+          "type": "text",
+          "required": true,
+          "columnType": "TEXT"
+        },
+        {
+          "name": "revision",
+          "type": "integer",
+          "required": true,
+          "columnType": "INTEGER"
+        },
+        {
+          "name": "state",
+          "type": "text",
+          "required": true,
+          "columnType": "TEXT"
+        },
+        {
+          "name": "jobId",
+          "type": "text",
+          "required": true,
+          "columnType": "TEXT"
+        },
+        {
+          "name": "deliveries",
+          "type": "integer",
+          "required": true,
+          "columnType": "INTEGER"
+        },
+        {
+          "name": "data",
+          "type": "json",
+          "required": true,
+          "columnType": "JSON"
+        }
+      ],
+      "relationships": [
+        {
+          "name": "itemId",
+          "type": "foreignKey",
+          "required": true,
+          "related": "IntakeItem",
+          "columnType": "UUID"
+        }
+      ],
+      "methods": [
+        "getData"
+      ],
+      "methodSignatures": [
+        {
+          "name": "getData",
+          "returns": "Record<string, unknown>"
+        }
+      ],
+      "tenant": {
+        "scoped": true,
+        "mode": "required",
+        "field": "tenantId"
+      },
+      "conflictColumns": [
+        "tenant_id",
+        "item_id",
+        "stage",
+        "revision"
+      ],
+      "surfaces": [],
+      "withheldSurfaces": [
+        {
+          "kind": "api",
+          "operation": "getData",
+          "code": "api-disabled",
+          "reason": "api is disabled",
+          "objectName": "@happyvertical/smrt-ingestion:IntakeDispatch"
+        }
+      ],
+      "relationshipFeatures": [
+        "foreignKey",
+        "uuidColumns"
+      ],
+      "tags": [],
+      "risks": []
+    },
+    {
+      "name": "IntakeDeletion",
+      "qualifiedName": "@happyvertical/smrt-ingestion:IntakeDeletion",
+      "collection": "intakedeletions",
+      "tableName": "intake_deletions",
+      "packageName": "@happyvertical/smrt-ingestion",
+      "extends": "SmrtObject",
+      "fields": [
+        {
+          "name": "tenantId",
+          "type": "text",
+          "required": true,
+          "columnType": "UUID"
+        },
+        {
+          "name": "confidentialScopeId",
+          "type": "text",
+          "required": true,
+          "columnType": "TEXT"
+        },
+        {
+          "name": "itemId",
+          "type": "foreignKey",
+          "required": true,
+          "related": "IntakeItem",
+          "columnType": "UUID"
+        },
+        {
+          "name": "state",
+          "type": "text",
+          "required": true,
+          "columnType": "TEXT"
+        },
+        {
+          "name": "data",
+          "type": "json",
+          "required": true,
+          "columnType": "JSON"
+        }
+      ],
+      "relationships": [
+        {
+          "name": "itemId",
+          "type": "foreignKey",
+          "required": true,
+          "related": "IntakeItem",
+          "columnType": "UUID"
+        }
+      ],
+      "methods": [
+        "getData"
+      ],
+      "methodSignatures": [
+        {
+          "name": "getData",
+          "returns": "Record<string, unknown>"
+        }
+      ],
+      "tenant": {
+        "scoped": true,
+        "mode": "required",
+        "field": "tenantId"
+      },
+      "conflictColumns": [
+        "tenant_id",
+        "item_id"
+      ],
+      "surfaces": [],
+      "withheldSurfaces": [
+        {
+          "kind": "api",
+          "operation": "getData",
+          "code": "api-disabled",
+          "reason": "api is disabled",
+          "objectName": "@happyvertical/smrt-ingestion:IntakeDeletion"
+        }
+      ],
+      "relationshipFeatures": [
+        "foreignKey",
+        "uuidColumns"
+      ],
+      "tags": [],
+      "risks": []
+    }
+  ],
+  "surfaces": [],
+  "prompts": [],
+  "relationshipsV2": {
+    "foreignKeyFields": 21,
+    "crossPackageRefFields": 1,
+    "junctionCollections": 0,
+    "hierarchicalObjects": 0,
+    "polymorphicAssociations": 0,
+    "uuidColumns": 46
+  },
+  "agentDoc": "# @happyvertical/smrt-ingestion\n\nDurable foundation for ADR 0004. `src/models.ts` owns all ingestion tables;\n`src/server.ts` owns authenticated service boundaries and lifecycle primitives.\n`src/execution.ts` owns authoritative review/apply and imports server-only principals.\nSee [execution integration](agents/execution.md) for host transaction guarantees,\ncatalog contracts, deployment dependencies and continuation bindings.\nRoot, `/models`, and `/dto` remain browser-safe; provider/network/filesystem code\nbelongs under `/server`. Generated REST/CLI/MCP model mutation is disabled.\n\nSee [README.md](README.md) for host integration and recovery/deletion operation.\nSee [EXTRACTION.md](EXTRACTION.md) for extraction contracts, provider isolation\nrequirements and corpus validation.\nSee [PROPOSALS.md](PROPOSALS.md) for the optional server-only proposal stage,\ncurrent catalog/candidate authority and immutable source pinning.\n\nAll records require tenant and confidential scope. Hosts create service scopes\nfrom authenticated sessions; source metadata is never authority. Every read and\nwrite rechecks the host scope predicate. Analysis input revisions, attempts,\nproposals, decisions, executions and feedback are append-only except documented\nstate projections and retention redaction. Terminal actions outlive job cleanup.\n\nOnly SQLite and PostgreSQL are supported. Deploy manifest migrations before\nstarting services; runtime performs no application DDL. Storage planning and\npreservation use AssetRuntime/AssetStore public methods. Blob I/O and queue\nsubmission never run inside ingestion database transactions.\n\nValidation: `pnpm test`, `pnpm test:postgres`, `pnpm test:providers`, `pnpm typecheck`, `pnpm build`.\nThe PostgreSQL command provisions a real database and fails if unavailable.\nBuild includes browser import validation. The provider lane exercises local SDK\nadapters and process isolation, without claiming live remote recognition quality.\nThe component/e2e/evaluation\ncommands are reserved by ADR 0004 and fail explicitly until their owning children\nsupply real suites.\nSee ../../docs/test-matrix/3670-ingestion-foundation.md for behavior coverage.\n",
+  "moduleDocs": [
+    {
+      "path": "agents/execution.md",
+      "module": "execution",
+      "content": "# Review and execution integration\n\n`/execution` exports `IntakeExecutionService`, handler/host types, policy\nresolution, binding digests and `continueIntakeReview`. `IngestionService` exposes\nthese operations when its optional `execution` configuration is present. Its\nloader is lazy: importing `/server` alone does not import the principal stack.\n`/dto` exposes execution messages using type-only exports. No generated REST,\nCLI or MCP mutation endpoint is enabled; applications authenticate their own\nservice surface and create `IngestionScope` from the session.\n\n## Catalog and authority\n\nApplications supply a trusted `IntakeExecutionOptions.handlers` catalog.\n`OperationHandler` has qualified ID, immutable version, description, object JSON\nschemas for arguments/results, allowlisted `resultModels`, `validate`, `preview`,\na registered `{model, action, version}` operation and explicit effect/idempotency/\nopen-world capability declaration. Preview returns display, exact normalized\narguments and target revision preconditions. There is no arbitrary tool execution\nor expression evaluation. Reviewer display wraps application fields under `preview`\nand symbolic metadata under `dependencies`; plan steps additionally wrap that\nobject under `step` alongside the plan preview. Application display keys cannot\noverwrite framework metadata or be silently overwritten by it. A version change\nrequires a new preview and approval.\n`PlanHandler` references a real registered playbook key and resolved definition\nhash; expansion contains only ordered operation handlers and typed earlier-step\nresult references. Discovery/proposal generation consumes this catalog rather\nthan creating another registry. Semantic model output is never host configuration.\n\nAuthenticated receipt context captures `capturedCeiling.execution` with principal\nID and permission/handler/operation ceilings. The execution host's `authorize`\nresolves current grants and application/tenant/source/(optional request) policy\non the supplied executor, checking the active requester and confidential scope.\nLists intersect, budgets minimize, review requirements OR, and disabled policy\nwins. Policy versions must change when policy semantics change. Normal operation\nrequires human review; machine authorization requires explicit evaluated opt-ins\nat all three authority layers and remains separate provenance from human review.\nThe reference handlers always require review; no evaluation claim is made here.\n\n`mutationBoundary: 'serialized'` is an explicit host guarantee, not an inferred\nproperty of a permissions array: grant revocation must serialize with the supplied\ntransaction, or the owning mutation must revalidate under its own lock. The host\nmust implement that guarantee before enabling handlers. `assertTarget` similarly\nlocks current tenant/confidential ownership and revision against concurrent\nwriters using the supplied executor. The reference host demonstrates a scoped\nrow lock before public `Contents` reads. A current `PrincipalRun` intersects live\npermissions with the captured ceiling and checks the exact registered collection\noperation at every effect. No `runOnce` atomicity is assumed.\n\n## Durable review and effects\n\nPreview appends a proposal bound to exact analysis attempt/evidence, handler,\narguments, policy and target preconditions. Decision requests use unique durable\nrequest IDs; reusing an ID with changed content is rejected. First valid review\nwins under the item lock. Corrections append a new revision; reject/defer remain\nnon-executable. Plan corrections use re-expansion. Human decisions expire and\nlive authority is checked again before each step. Raw foundation proposals cannot\nbypass execution's schema, preview, evidence and approval verification.\n\nDatabase handlers must use `context.db` for every domain effect and must perform\nno external I/O. Domain result and successful execution commit together. A domain savepoint rolls failed effects\nback while preserving the item lock and atomically consuming the retry attempt. Completed\nactions survive job cleanup and evidence retention; expired originals leave a\nminimal result digest tombstone, preventing a second effect. Active result reads\nrecheck host visibility and result target ownership.\n\nExternal handlers reserve a stable action idempotency key before submission.\nTimeout, process death or ambiguous outcome requires reconciliation; an expired\nlease never means permission to resend. `reconcile` must return authoritative\n`succeeded`, `not_applied` or `unknown`. `not_applied` is safe only when the provider\ncan exclude a late acceptance of the original send; uncertainty stays `unknown`.\nThe same key is reused after a conclusive non-application. Cancellation prevents\npending work but cannot retract a send already issued. Applications must arrange\nprovider reconciliation before privacy retention removes the binding; a redacted\nunknown action fails closed and cannot automatically execute again.\n\nEach plan step has a stable action identity. Completed steps are immutable and\nreturn their original result. Symbolic record IDs bind to exact earlier proposal\nrevision, successful result digest/model and target revision; they cannot point\nacross items or form cycles. Failed dependent steps never repeat predecessors.\nThe plan preview and target preconditions are part of its digest and visible in\neach step review; changed preview/preconditions require a fresh review.\nAbort/continue follows the pinned public playbook definition, with fresh authority\nat every step.\n\n`continueIntakeReview` uses the existing jobs continuation context. Applications\ncreate tasks with owner, tenant and exact `{recordId, revision, inputKey}` binding\nand configure `authorizeMcpTask` to revalidate it. A continuation answer only wakes\nthe task; the service reloads the authoritative decision. Waiting persists without\nan occupied worker and survives runner restart.\n\n## Deployment and evidence\n\nApply normal manifest migrations before runtime. Execution imports the public\nagents/users principal stack, which registers profiles including `ProfileAsset`;\nexecution-enabled hosts must migrate their dependency graph (including profile\nasset joins used by asset deletion). `/server` receipt-only imports register none\nof these additional models. Content is not a runtime dependency of ingestion.\n`reference/handlers.ts` is an application/test fixture, excluded from published\nentries and declarations; importing it deliberately adds Content and its asset\njoins, whose migrations the application then owns. No runtime DDL is performed.\n\nReal SQLite and PostgreSQL execution suites exercise the public Content draft and\nattachment APIs, transaction rollback, actor/context denials, simultaneous applies\nand reviewers, retention replay, external process death and actual TaskRunner\nrestart. See the issue 3674 test matrix for the complete release evidence mapping.\n\n## Layered retention and request automation\n\nEvery automation-bearing policy layer, including an optional request layer, must\nmatch the evaluated version. An absent request automation block adds no evaluator\nrestriction; it cannot replace the three required application/tenant/source opt-ins.\n\nAuthorized execution-policy access monotonically narrows the existing intake\nexpiry to `min(existing expires_at, item.created_at + resolved retentionMs)`.\nThe anchor is receipt creation, never review, retry or replay time. A longer later\npolicy never extends a recorded deadline. This hard maximum applies to the whole\nintake item: the existing `sweepRetention` protocol removes retained originals and\nderivatives, preserving replay identities. No second expiry column or hidden clock\nis introduced, and no blob I/O occurs in an execution transaction.\n\nAt an observed expired deadline, execution reads/completions erase proposal,\ndecision, execution, plan, action and feedback payloads under the item lock. Review\nreads return existing identity/hash fields with `state: 'expired'` and empty\n`display`; completed action replay returns its digest-only tombstone. Failed writes, including ordinary validation/CAS/policy rejection and domain\nsavepoint rollback, cannot roll back an already-authorized retention ceiling or\nredaction. Restoring a recorded authorized maximum needs no new content-read grant;\nlater revocation cannot undo it. Initial denied authorization records no intent.\nCompleted replay checks the deadline again after target authorization\ncallbacks before returning cached content. Proposal publication and automatic\nauthorization also recheck after preview/evaluator callbacks, before publishing\nretained proposal or decision payloads. Unknown\nexternal outcomes remain unknown/reconcile-only, never eligible for blind resend.\n"
+    },
+    {
+      "path": "README.md",
+      "module": "README",
+      "content": "# @happyvertical/smrt-ingestion\n\nDurable receipt, evidence, analysis attempts and action-journal foundations for\n[ADR 0004](../../docs/adr/0004-application-aware-ingestion.md).\n\nThe root, `/models` and `/dto` entry points are browser-safe. Import\n`IngestionService` from `/server` in trusted host code. Generated REST, CLI and\nMCP access to the persistence models is disabled; hosts expose authorized DTO\nmethods through their authenticated application transport.\n\nBefore starting a service, deploy the package manifest through the public s-m-r-t\nmigration APIs or `smrt db:migrate`. `assertReady()` only checks existing tables.\nSQLite and PostgreSQL are supported; other engines fail construction.\n\nA host supplies a database, AssetRuntime, authenticated tenant/actor/confidential\nscope, a live authorization callback, a registered jobs target, and an idempotent\n`purgeDerived` callback for host-owned previews, retrieval indexes and caches.\nThe authorization callback receives the captured ceiling and the current\ntransaction executor; it must intersect current grants with that ceiling. Never\nconstruct the scope, retention policy or budgets from incoming document labels.\n\n`receive` accepts bounded original byte buffers, with stable source part IDs,\nparent relationships and optional upstream identity/version. Source adapters own\nstreaming and upstream snapshot retrieval. Receipt identity is tenant + source +\ndelivery key; changing bytes or authenticated scope conflicts. Content equality\nin a different conversation does not deduplicate an arrival. The returned item\nID and version are safe acknowledgment data, never a storage URL.\n\nStorage intents contain a stable asset ID and a public AssetStore-planned URI\nbefore byte I/O. Preservation verifies existing bytes instead of replacing them.\nA receipt becomes ready only after every part is durable and its dispatch intent\ncommits. A source retries the same receive call after failure or lost\nacknowledgment. Hosts schedule `repairDispatches` after restart and periodically;\nit repairs missing/failed queue submissions through SmrtJobCollection. The host\njob restores the captured scope and calls the analysis lifecycle methods. Run\nTaskRunner with the `ingestion` queue enabled.\n\n`analyze` appends immutable input/configuration revisions. `claimAnalysis` uses\nleases, monotonic fences and attempt budgets; `completeAnalysis` rejects expired\nor superseded workers. Terminal attempt output/provenance is preserved. Queue\nsubmission budgets also stop repeated handler failures in visible\n`needs_attention`. Reprocessing does not mint actions. `createAction`,\n`publishProposal` and `appendPlan` persist explicit intentions and exact attempt\nbindings for the later review/execution layer. They do not approve or apply\nbusiness operations. Decision/execution/feedback models are persistence\nfoundations; policy, handler expansion, review and business apply belong to the\nlater epic children.\n\n`expire` revokes access and pending work before removing bytes and calling\n`purgeDerived`. Interrupted deletion is retried by `repairDeletions` and\n`sweepRetention`. Minimal receipt/action identities remain, including successful\naction result digests; all content-bearing journal payloads are redacted. Private\ncleanup locators remain in deletion tombstones so repeated sweeps can remove a\nlate stale writer's orphan bytes even after the asset owner row is gone. Source\nadapters must enforce their configured delivery-age cutoff; expired replay IDs\nnever become fresh work. Continue running the cleanup sweep for the retained\nstorage namespace. Upstream source mutation/deletion cannot change copied\noriginals; explicit privacy deletion revokes every ingestion-derived payload and\nrequires host cache/index purge.\n\nSee [EXTRACTION.md](EXTRACTION.md) for bounded extraction, lease-bound input\nsnapshots, provider isolation requirements and the extraction corpus.\n\nValidation commands are `pnpm test`, `pnpm test:postgres`, `pnpm test:providers`, `pnpm typecheck` and\n`pnpm build` (including built browser import inspection). The PostgreSQL lane\nrequires the repository's configured database service and never silently skips.\nThe provider lane exercises local SDK adapters and process isolation; it does not\nclaim live remote recognition quality. Component, e2e and evaluation command names are reserved by the ADR and\nexplicitly unavailable until their owning children deliver the corresponding\ncapability. See the [behavior matrix](../../docs/test-matrix/3670-ingestion-foundation.md).\n\n## Authoritative review and execution\n\nConfigure `IngestionOptions.execution` for policy, immutable previews, authenticated\ndecisions and idempotent domain execution. See [execution integration](agents/execution.md)\nfor the public handler catalog, required host authorization/target locks, deployment\nmigrations and jobs continuation integration. The maintained application reference\nin `reference/handlers.ts` creates draft ContentDocuments and attaches retained\nevidence through public domain APIs; it is not a published runtime adapter.\n\n## Configured source adapters\n\nThe server entry exports `createSourceDeliveryHandler`, `EmailSourceAdapter`,\n`WatchFolderSourceAdapter`, and `createVendorWebhookHandler`. Construct a\n`SourceBinding` from authenticated host configuration: enabled flag, scoped\n`IngestionService`, stable source ID/version, captured authority ceiling,\nretention policy, allowed media types and receipt limits. Re-resolve this binding\nwhen grants/configuration change. Source payloads never supply authority.\n\nThe reference POST handler authenticates before reading bytes and requires\n`Idempotency-Key`. JSON accepts exactly `capturedAt` and one of `text`,\n`structured`, or `reference: { owner: 'asset'|'message', id, version }`.\nThe host's `snapshotReference` must authorize current ownership and return copied\nbytes; an absent snapshot fails rather than acknowledging a mutable locator.\nMultipart accepts one `file` plus `captureId` (equal to the idempotency key),\n`capturedAt`, `captureSource` (`camera`, `native_picker`, `audio`, `document`), and optional\nlowercase SHA-256 `sha256`. This reuses mobile's durable UUID Idempotency-Key,\nMIME-bearing file part and explicit capture metadata convention. Captures retain\noriginal bytes and a parent metadata evidence record. Configure both the wire\nlimit `maxRequestBytes` and receipt `maxBytes`/`maxParts`; include\n`application/json` in the media allowlist for capture/email metadata. Signature\nchecks cover PDF, TIFF, PNG/JPEG/WebP and WAV/Ogg/WebM/MP3/MP4 audio; signature\nacceptance promises preservation, not extraction support or codec validity.\n\nEmail is explicitly opt-in per configured account. `EmailSourceAdapter` takes a\n`readMessage` callback compatible with the messages owner's\n`EmailAccount.readIntakeMessage(providerLookup, maxBytes, imapIdentity?)` snapshot.\nThe provider lookup is Gmail message ID, POP3 UIDL, or IMAP RFC Message-ID; it\nis separate from the delivery dedupe key. IMAP requires `{ folder, uidValidity,\nuid }`: the method selects the mailbox and verifies UIDVALIDITY and returned UID.\nAmbiguous sender IDs resolving to another UID fail explicitly. That method connects,\nfetches the full message including actual attachment bytes, copies the bytes,\nand disconnects. Metadata-only attachments fail explicitly. It never reads an\nattachment path supplied by a provider. A host lists provider deliveries using a\nstable account-specific locator (for IMAP include folder, UIDVALIDITY and UID),\nan explicit revision, and an opaque resumable checkpoint. Same locator/revision\nwith changed bytes conflicts; an explicit new revision creates a new receipt.\nDo not use sender-controlled RFC Message-ID as the sole transport identity.\n`receiveBatch` processes in order and stops at the first failure. The host owns\ndurable checkpoint storage and commits its `acknowledge` callback only after the\nadapter has received accepted/duplicate. If checkpoint persistence fails, retry\nreturns the original receipt. Message/thread/attachment relationships are copied;\ncredentials and arbitrary headers are excluded. The ordinary `syncFrom` metadata\nsync remains separate; `hasAttachments` is never proof of byte preservation.\n\nWatch-folder intake polls only an explicitly configured existing private local\ndirectory. Producers should close their files, preferably publishing with atomic\nrename. Two unchanged size/inode/mtime/ctime observations separated by\n`stabilityMs` are required, and the interval runs again after claim/restart.\nA private `.ingestion-claims/<UUID>/claim.json` intent is synced before atomically\nrenaming the original into that directory. Keep the directory on one filesystem,\nunder the host's ownership; symlink inputs are refused. A file descriptor still\nheld by an uncooperative producer can write after any stability window, so the\nproducer close/publish protocol is required for immutable input. Accepted or\nduplicate receipts move the entire claim to `.ingestion-processed`; do not delete\nclaims to retry. Polling recovers persisted UUIDs after process death, so receipt\nreplay deduplicates ready-without-ack. `failure.json` and poll results expose safe\ncategories while originals remain available. Intent directories without an\noriginal mean death before claim or a competing poll won; the producer original\nhas not been removed. Operators may remove these empty intents after confirming\nno active importer. Keep processed originals according to the host's retention\npolicy. This adapter does not watch arbitrary paths or start background loops.\n\nVendor webhooks use a host `verify(request, originalBytes)` callback after bounded\nraw-body reading. The callback must verify signature, delivery time/replay window\nand account ownership, then return trusted binding and durable delivery identity.\nNo vendor implementation or hardware driver is selected. All adapters invoke\nonly receipt preservation, never domain writes, AI tools or external actions.\n\nSee [PROPOSALS.md](PROPOSALS.md) for bounded application catalog discovery, durable\ninterpretation revisions, optional typed decisions and explicit generated preview.\n"
+    },
+    {
+      "path": "EXTRACTION.md",
+      "module": "EXTRACTION",
+      "content": "# Extraction adapters\n\n`@happyvertical/smrt-ingestion/server` exports `createSDKExtractionAdapter`,\n`extractAnalysis`, extraction types, and `proposeDocumentSplits`. Root and DTO\nexports remain browser-safe. No extraction result authorizes a business action.\n\nHosts construct the SDK adapter with explicit provider/model/version identities\n(`unknown` for unavailable model/version), credential-bearing SDK options, and\n`nativeMemoryIsolation: 'host-enforced'`. This last setting is an assertion by\ntrusted deployment configuration, never a source/body/client option. Deploy the\nprovider child under an OS/container native-memory ceiling. Node's heap limit\ncannot bound native allocations, and PDF's renderer has no pre-render pixel\nlimit. Without that host guarantee, adapter construction refuses to run. A\nconfigured provider must be pinned, not `auto`; OCR fallback is disabled so\ncapability provenance cannot silently change. Identity objects are projected onto\nexactly `provider`, `model`, and `version`, each a required nonblank string. Extra\nhost fields never enter capability or segment identities, including through\ntrusted custom adapter results at the publication boundary.\n\nThe adapter forks one disposable Node process per retained part. Deadline or\ncancellation kills it (and its process group on POSIX); provider stdout/stderr\nare discarded. Calls are sequential and bounded by input bytes, page count,\nimage decode pixels, serialized output, vision tokens, elapsed time and Node\nheap. Native memory remains the host boundary described above. Remote compute\nalready accepted by a provider may continue/bill after the local process dies.\nDo not interpret a local cancellation as remote billing cancellation.\n\nPersist `{extraction: {configurationRevision, limits}}` using `service.analyze`,\nthen claim its lease. Call `extractAnalysis(service, lease, adapter, options)`\nwith exactly that revision and limits. The service reloads the immutable input\nsnapshot and rechecks current processing authority before each provider and\nbefore publication. The production child requests a parent-side authorization\nhandshake before each PDF/OCR/vision/speech operation, including calls on later\npages. Denial kills the child; already transmitted material cannot be recalled.\nCustom trusted adapters must await `request.beforeProviderCall` before every\nprovider invocation. Bytes are read through the service's integrity-checked\nreader; revoked, expired, foreign-scope, forged and stale leases fail closed.\nA retry keeps the same analysis input revision; changed provider/model/options\nmust use a new configuration revision and `analyze` request key. Credentials are\nnever placed in persisted configuration or provider identity.\n\nResults retain the original evidence ID/hash/part/parent references. Ordered\nsegments form whole-document context; extraction does not split originals into\nbusiness records. Valid UTF-8 JSON, text and HTML remain literal source text (render HTML\nonly through an application sanitizer). JSON syntax is validated without rewriting\nits source text; malformed JSON or UTF-8 fails extraction. PDF text is extracted one page at a\ntime, falling back to actual rendered-page OCR for empty pages. Embedded text\nis not evidence that every visual element was understood. TIFF is actually\ndecoded page-by-page with sharp to PNG; each result cites its original TIFF page.\nAnimated non-TIFF images are unsupported. Ordinary image OCR and scene vision\nare separately configured. Speech uses source-level text unless actual segment\ntimestamps are returned; absent speech confidence calibration is unknown.\n\nConfidence and boxes are explicitly null unless an OCR provider advertises and\nreturns them. Unlimited-OCR's synthetic common confidence is always discarded,\neven if an injected capability claims otherwise. Measured OCR values retain an\nunknown calibration label; they are not routing certainty or approval. Boxes\nare in decoded image pixels, attached only to that actual page/source. No tables\nare invented: the current PDF/OCR text APIs do not supply a table contract.\n\nThe persisted receipt's `maxOutputBytes`, exposed by `getAnalysisInput`, bounds\nthe complete serialized analysis envelope across all parts, including provenance,\ncapabilities, usage, and failure metadata. Extraction reserves room for a `limit`\noutcome and retains fitting earlier parts/segments when the aggregate is too\nlarge. Top-level `truncated` and `omittedEvidenceCount` identify publication\nomissions; per-result omissions retain every discarded segment's exact page or\ntime location. Existing errors and omitted ranges survive trimming unchanged.\nIf those diagnostic records cannot fit, the entire result is omitted rather than\npublishing an incomplete account of its known failures. If the ceiling\ncannot fit the minimum result envelope, no provider runs: `failAnalysis` records\nonly a fixed safe category and terminal lifecycle state, with no provider output\nor output digest. That service-owned failure accounting is outside the provider\npayload budget; `completeAnalysis` never accepts an oversized result.\n\nPartial page results survive later failures or process timeout. Warnings and\nomitted page/source references remain inspectable. `unsupported_type` covers\nvideo, unconfigured media and encrypted PDF; corrupt decoder failures without a\nsafe typed SDK category are `unavailable`, never raw exception strings. A host\ncan repair/reconfigure and create a fresh analysis without rewriting originals.\n`proposeDocumentSplits` produces a hashed, versioned, non-executable grouping of\nobserved pages; overlap, unordered groups and nonexistent pages are rejected.\n\n## Evidence and limitations\n\n`pnpm --filter @happyvertical/smrt-ingestion test:providers` runs actual local PDF\nSDK extraction, actual sharp multipage TIFF decoding, and packaged process/HTTP\nadapter lifecycle tests. The local speech server tests adapter transport and\ntermination, not transcription quality. The tiny TIFF fixture proves IFD/page\nmapping, not fax OCR accuracy. `extraction.test.ts` injects deterministic SDK\nboundaries for mixed/scanned PDF, Unlimited-OCR, camera observations, message\nattachments, audio timestamps and malformed/partial output. These fixtures are\nnot real remote-provider integrations and are not the ADR evaluation corpus.\n\nNo live Unlimited-OCR, speech recognition or vision quality run is claimed.\nNo recorded-human-audio recognition accuracy, real camera-scene quality,\ncalibrated confidence, table extraction, or automatic-action acceptance is\nestablished by these tests. Deployment owners must run the intended provider,\nmodel and representative retained corpus before making those claims. The\n[behavior matrix](../../docs/test-matrix/3672-ingestion-extraction.md) records the\nrelease commands and authority obligations.\n\nThe versioned on-disk corpus manifest records exact hashes for valid embedded,\nraster and mixed PDFs, two-page TIFF, a synthetic camera-format JPEG, a valid\nPCM WAV recording of a generated tone, email text, corrupt PDF and unsupported\nvideo. The tone is not human speech; the illustrated scene is not a photograph.\nReal local HTTP fixture runs execute Unlimited-OCR's installed SDK and speech\ntransport against deterministic responses/timeouts. They verify adapters, not\nremote models. Unlimited-OCR 0.61.6 rejects valid encoded images smaller than\n100 bytes; ingestion reports `unavailable` without altering them. This owning\nSDK defect is tracked in [happyvertical/ocr#143](https://github.com/happyvertical/ocr/issues/143).\n\nEach capability record explicitly reports `truncation` and `usage` as `unknown`\nor `reported`. Unlimited-OCR's current SDK discards upstream `finish_reason`\nand token usage, so both are `unknown` even for nonempty output. Downstream\nrules must not interpret `status: 'complete'` or `truncated: false` as proof of\nuntruncated OCR: they describe completed input processing and *detected*\ntruncation only. The adapter never bypasses the SDK to recover hidden fields.\nThe missing SDK metadata is tracked in [happyvertical/ocr#144](https://github.com/happyvertical/ocr/issues/144).\nAI vision retains reported truncation when supplied by its SDK. Missing provider\ncost is unknown, not zero; no cost estimate is invented.\n"
+    },
+    {
+      "path": "PROPOSALS.md",
+      "module": "PROPOSALS",
+      "content": "# Application-aware proposal generation\n\n`@happyvertical/smrt-ingestion/proposals` is server-only. Configure\n`IngestionOptions.proposals` and the existing `execution.handlers` catalog.\nHandlers opt into discovery with `discovery.mediaTypes`, `references`, and an\noptional `candidates` callback. There is one catalog: the same operation or\nordered playbook adapter is discovered, validated, previewed, and later applied\nby the execution service. Generation never approves or applies.\n\n## Discovery and authority\n\n`listHandlers(itemId)` returns a bounded detached catalog. The owning execution\nservice checks the current principal, captured permissions/handler/operation\nceiling, policy, confidential scope, public registered operation facts, and\nordered playbook definition. Every configured provider must occur in the current\npolicy's `providers` allowlist. Missing grants remove handlers before model input.\nAn authorized catalog larger than the configured bound is rejected; the host must\nnarrow it explicitly instead of relying on silent truncation.\n\n`findCandidates({itemId,handlerId,handlerVersion,query,limit})` returns\n`{items,truncated}`. Its trusted handler callback receives `HandlerContext` with\nthe authorized transaction executor. Query by tenant and confidential scope\n**before** selecting, ranking, or building labels. Use a bounded query (often\n`limit + 1`) and report `hasMore`. The service projects candidate identity, model,\nrevision and label, then checks every target with the owning execution callback.\nThere are no hidden counts or pagination tokens. Truncated discovery forces\n`needs_review` and cannot enter generated preview.\n\nCompleted generation reload checks process authority, the current attempt, and\nowner/candidate visibility in the same final transaction. Database-backed grant\ncallbacks must use the supplied executor. The owning retention lifecycle encloses\nthat transaction so a denied read cannot roll back an authorized shorter privacy\nceiling; restoration starts only after the outer transaction has rolled back.\n\nCandidate callbacks perform bounded database reads only: no provider I/O, network,\nor domain mutations. Target locks and existing retention enforcement remain\nowned by execution. Hosts configure their database's statement deadlines; an\narbitrary trusted callback is not a sandbox. Each existing-record argument must\nbe a declared top-level `references` field of kind `candidate` with its qualified\nmodel, or `evidence`. Closed JSON argument schemas are required. The host owns\nthat declaration and its target authorization semantics.\n\n## Durable stages\n\n1. Complete extraction through the existing analysis ledger.\n2. Call `prepareGeneration(itemId, extractionAttemptId)`. It reads the current\n   completed/partial immutable extraction and returns configuration with\n   `stage: 'interpret'`, pinned source attempt/revision/input/output/evidence\n   digests, prompt/configuration/catalog/provider versions, limits and thresholds.\n3. Pass that configuration to `analyze(itemId, configuration, requestKey)` and\n   claim its new revision with `claimAnalysis`.\n4. The host's existing job callback routes on the frozen `configuration.stage`:\n   extraction invokes `extractAnalysis`; interpretation invokes\n   `generateProposals(lease)`.\n5. Reload the current completed generation using `getCompletedAnalysis(itemId)`,\n   or pass an explicit attempt ID to additionally reject stale client state.\n   Queued/running revisions never return an older completed attempt.\n\nA generation revision does not rewrite terminal extraction. Reprocessing starts\nwith a new extraction revision, followed by interpretation, while the host keeps\nthe same business intention keys. An interrupted still-current generation lease\ncan be retried; terminal generation output remains immutable. `getGenerationInput`\nreads historical extraction only through the current generation lease and its\nfrozen source pin. It verifies same-item scope, immutable hashes, durable evidence,\nand current process permission before returning detached data. The source must be\nthe immediately preceding revision, so an intervening reprocess invalidates a\nprepared generation. Completed generation reads additionally recheck current\ncatalog and target visibility before disclosing persisted candidate labels.\nExpired, cancelled, revoked, retried or superseded workers cannot read or publish late output. The\ncurrent lease and each offered handler/candidate are rechecked immediately before\neach outbound generative/decision boundary and before publication.\n\n## Providers and validation\n\n`createSDKProposalGenerator(client, identity, {maxTokens,timeoutMs})` uses an\nexisting AI SDK `chat` client. It sends a fixed system instruction and separate\nJSON evidence/catalog data, requests JSON, supplies cancellation and bounds, uses\nno tools or continuation, and rejects known truncation or tool calls,\nunexpected models, malformed JSON and oversized output. Configure SDK clients\nwithout automatic retry that would bypass application boundary checks. The\nadapter's public identity is exactly provider/model/version; credentials and raw\nprovider errors are never provenance.\n\nA trusted custom `ProposalGenerator` must likewise honor cancellation, bound its\nresponse, and explicitly declare validated `complete` or `unknown` completion.\nThe SDK currently normalizes missing/unknown finish reasons to `stop`\n([owning SDK follow-up](https://github.com/happyvertical/sdk/issues/1381)), so its\nadapter conservatively declares `unknown`, persisted as\n`generation_completion_unknown`. Otherwise valid suggestions remain available\nfor human preview; automatic eligibility always remains false. The service\ndeadline aborts requests and prevents late publication; it does not claim to terminate computation at a remote\nprovider or isolate native allocations. Extractor process limits remain separate.\n\nModel output can contain only offered handler versions, schema-valid arguments,\nretained evidence locations and offered alternative handler/candidate keys.\nCandidate IDs must occur in the offered set, and evidence IDs in retained source\nresults. Unknown enums, invented IDs, extra authority/tool/approval fields and\nmalformed structures fail closed. Missing required top-level fields are retained\nas `missingFields`, with `needs_review`; values are never invented to satisfy a\nschema. Observed page/time/source granularity is preserved. Logical scan splits\nuse `proposeDocumentSplits`; originals and hashes remain intact.\n\n`createSDKProposalDecisionClient(client)` adapts an existing SDK client’s optional\ncapability without changing its errors or protocol. Optional `decision` uses public core `executeDecision` and the existing SDK\npredicate, choice, score and batch contracts. Supported-effect predicates,\nhandler classification, candidate entity matching, and action ambiguity/risk\nare distinct questions. Their validated probabilities and provenance are stored\nseparately from generative provenance and unknown OCR certainty. The complete\nserialized decision request, including suggestions and questions, must fit the\nminimum configured/current policy byte ceiling before capability probing and\nagain before deciding. A policy change between these boundaries fails closed.\nTies, support probability or selected-handler confidence below\n`minimumDecisionProbability`, and actually incomplete extraction require review.\nUnknown provider\ncompletion metadata is preserved as `source_completion_unknown`; it does not\nblock otherwise schema-valid **human** preview or imply completeness. Automatic\naction eligibility remains false. An unconfigured decision path\nis recorded explicitly. Configured errors produce a durable safe failure outcome;\nthey never silently switch to a generative decision fallback.\n\nOutput records zero, one or multiple suggestions, alternatives, missing fields,\nsource links, proposed splits, versions, allowlisted usage, warnings and explicit\n`unknown`, `ambiguous`, `no_action`, `needs_review` or `provider_error` outcomes.\n`automaticActionEligible` is always false. Provider input/output and the complete\nserialized persisted envelope are bounded by configuration, live policy and the\nreceipt ceiling. Oversized output becomes a bounded review/limit result; when\nno safe envelope fits, the owning service records fixed `failAnalysis` metadata\noutside the provider payload budget without retaining provider output.\n\n## Explicit preview and stable intentions\n\nThe host chooses persisted suggestion indexes and calls:\n\n```ts\nawait service.previewGeneratedProposals({\n  itemId,\n  attemptId: generationAttemptId,\n  selections: [{\n    index: 0,\n    intentionKey: 'document:meeting-2026-10-09',\n    expectedRevision: 0,\n    requestId: 'review-request-1',\n  }],\n});\n```\n\n`intentionKey` is the host's stable business-intention identity across generation\nrevisions. Never derive a fresh key from model output, suggestion order or a retry.\nSelections must reference current persisted validated `ready_for_review` output.\nEach batch requires distinct suggestion indexes and intention keys; duplicate\nindexes are rejected before any operation or plan preview is written.\nThe service rechecks current catalog/schema/target/source provenance, then calls\nthe existing operation or plan preview. Each result still requires the ordinary\nhuman review and execution APIs. Reprocessing creates no new business identity;\nsuccessful-action replay protection stays with execution.\n\n## Evidence and limits\n\nThe test matrix is `docs/test-matrix/3673-ingestion-proposals.md`. SQLite and real\nPostgreSQL suites exercise authority, revisions, abstention, hostile output,\ncompound proposals, split provenance and reviewed domain effects. The upload\nreference composes authenticated multipart delivery of a generated embedded-text\nPDF through the actual packaged PDF child, durable interpretation, and the existing\nordered ContentDocument draft/retained-asset plan. It checks duplicate delivery,\nunauthenticated and foreign-tenant denial, explicit approval of both steps,\nidempotent execution replay, page provenance, and unchanged original bytes.\nThe compound-email case uses a declared messages-owner snapshot fixture.\n\nLocal HTTP fixtures execute the actual AI SDK transport and cancellation contract.\nGenerative responses and the separate injected PDF split boundaries establish\ndeterministic orchestration, not model accuracy or OCR quality. No held-out routing\nevaluation or automatic approval is claimed. Missing/unknown AI completion remains\nexplicit under [SDK #1381](https://github.com/happyvertical/sdk/issues/1381).\n"
+    }
+  ],
+  "agentSurface": {
+    "intents": [],
+    "playbooks": [],
+    "diagnostics": [
+      {
+        "code": "not-module-scope",
+        "helper": "definePlaybook",
+        "message": "`definePlaybook()` must be called at module scope to be emitted into the manifest and knowledge graph. A declaration the scanner cannot read without evaluating it is not emittable — use `useWebMcpTool` for a tool set derived from computed or fetched data.",
+        "line": 316,
+        "column": 7,
+        "sourceFile": "src/test-support/execution.ts"
+      },
+      {
+        "code": "not-module-scope",
+        "helper": "definePlaybook",
+        "message": "`definePlaybook()` must be called at module scope to be emitted into the manifest and knowledge graph. A declaration the scanner cannot read without evaluating it is not emittable — use `useWebMcpTool` for a tool set derived from computed or fetched data.",
+        "line": 1761,
+        "column": 9,
+        "sourceFile": "src/test-support/execution.ts"
+      },
+      {
+        "code": "not-module-scope",
+        "helper": "definePlaybook",
+        "message": "`definePlaybook()` must be called at module scope to be emitted into the manifest and knowledge graph. A declaration the scanner cannot read without evaluating it is not emittable — use `useWebMcpTool` for a tool set derived from computed or fetched data.",
+        "line": 1535,
+        "column": 7,
+        "sourceFile": "src/test-support/proposals.ts"
+      }
+    ]
+  }
+}