@happyvertical/smrt-ingestion 0.57.20 → 0.57.22

package/dist/review-dto.d.ts

@@ -1,8 +1,8 @@
 /** Browser-only view contracts. Every value must come from an authenticated host. */
-import type { IntakeEvidenceDTO, IntakeItemDTO } from './dto.js';
-import type { ActionResult, IntakeValues, PreviewPlanInput, PreviewProposalInput, ProposalReview, ResultReference, ReviewInput } from './execution-dto.js';
-import type { CandidatePage, CompletedAnalysisSnapshot, GenerationOutput } from './proposal-dto.js';
-export type InboxState = 'processing' | 'unresolved' | 'waiting' | 'failed' | 'deferred' | 'partially_completed' | 'completed';
+import type { IntakeEvidenceDTO, IntakeFailure, IntakeItemDTO, ItemDisposition } from './dto.js';
+import type { ActionResult, IntakeValues, PreviewPlanInput, PreviewProposalInput, ProposalReview, ResolveItemInput, ResultReference, ReviewInput, StartActionInput } from './execution-dto.js';
+import type { CandidatePage, CompletedAnalysisSnapshot, GenerationOutput, ProposalCatalogEntry } from './proposal-dto.js';
+export type InboxState = 'processing' | 'unresolved' | 'waiting' | 'failed' | 'deferred' | 'partially_completed' | 'completed' | 'resolved';
 export interface ReviewAction {
     review: ProposalReview;
     /** Absent on state-only stale/expired/unavailable entries. */
@@ -10,6 +10,8 @@ export interface ReviewAction {
     handlerId?: string;
     handlerVersion?: string;
     attemptId?: string;
+    /** `reviewer-selected` marks a human-started action; never automation-eligible. */
+    origin?: string;
     dependencies?: Record<string, ResultReference>;
     result?: ActionResult;
     /** Authorized identity/CAS only; hosts must collect fresh explicit args. */
@@ -46,6 +48,26 @@ export interface InboxEntry {
     label: string;
     state: InboxState;
     assignment: Assignment;
+    /**
+     * An inbox row's preview of its primary original, present only on `list`
+     * entries and only when the host supplies the opt-in `rowEvidence` option
+     * (#4213). The part is chosen by role: the shallowest child part (an
+     * upload's file, an email's first attachment), else the first root part.
+     * `list` reads the page's durable parts in one batched query, asks
+     * `rowEvidence` once for the page, and fills this from its answer; it is
+     * absent when the host omits `rowEvidence`, does not answer for the row,
+     * or the item has no durable parts. `load` never sets it.
+     */
+    evidence?: InboxEvidence;
+}
+/** A row's preview: the primary part's identity plus host URLs, never text. */
+export interface InboxEvidence {
+    evidence: IntakeEvidenceDTO;
+    label: string;
+    /** Host-authorized same-origin content URL, never an object-storage key. */
+    viewUrl?: string;
+    /** Optional host-authorized same-origin preview image for the row. */
+    thumbnailUrl?: string;
 }
 export interface EvidenceView {
     evidence: IntakeEvidenceDTO;
@@ -59,11 +81,61 @@ export interface ItemReviewView {
     evidence: EvidenceView[];
     analysis?: CompletedAnalysisSnapshot;
     generation?: GenerationOutput;
+    /** Handlers the item's catalog currently offers a reviewer; presentation only. */
+    catalog?: ProposalCatalogEntry[];
+    /** Reviewer and reason of a resolved item, loaded under review authority. */
+    disposition?: ItemDisposition;
     reviews: ReviewPage;
+    /** Present when an instruction was recorded or carried by the displayed generation. */
+    instruction?: ReviewerInstructionView;
     /** Host-projected safe state, never raw server exception text. */
     availability: 'available' | 'stale' | 'revoked' | 'expired' | 'unavailable';
     message?: string;
 }
+/** Immutable authenticated reviewer guidance for one item; it steers the model only. */
+export interface ReviewerInstruction {
+    id: string;
+    text: string;
+    actorId: string;
+    recordedAt: string;
+    /** The instruction this one replaced for future interpretations, if any. */
+    supersedesId: string | null;
+    digest: string;
+}
+export interface ReviewerInstructionInput {
+    itemId: string;
+    attemptId: string;
+    expectedRevision: number;
+    text: string;
+    requestId: string;
+}
+export interface ReviewerInstructionView {
+    /**
+     * Latest recorded instruction that is still in effect: the item's newest
+     * extraction carries it, so its interpretations do. Null when none was
+     * recorded or a host reprocess dropped it (see `dropped`).
+     */
+    current: ReviewerInstruction | null;
+    /**
+     * Latest recorded instruction that a host reprocess dropped (a reprocess
+     * builds its own configuration and cannot carry human corrections). It no
+     * longer applies; the reviewer can re-record it.
+     */
+    dropped?: ReviewerInstruction;
+    /** The instruction the displayed generation was produced under. */
+    applied: ReviewerInstruction | null;
+    /** Displayed suggestions predate the current instruction. */
+    stale: boolean;
+    /** Safe failure category, or `not_started` when interpretation was never appended in time. */
+    failure?: IntakeFailure | 'not_started';
+    /** Server-side "in flight", including the gap between extraction and interpretation. */
+    reinterpreting?: boolean;
+    /** Record/retry binding when no current generation is displayable: the latest completed generation attempt and the item's current revision. */
+    binding?: {
+        attemptId: string;
+        expectedRevision: number;
+    };
+}
 export interface LogicalSplitInput {
     itemId: string;
     attemptId: string;
@@ -72,12 +144,21 @@ export interface LogicalSplitInput {
     groups: number[][];
     requestId: string;
 }
+/**
+ * A preview the handler refused on its own validation of the arguments. The
+ * reviewer may correct the arguments and retry; it is never an access result.
+ */
+export interface PreviewRejection {
+    rejected: 'invalid';
+}
 /** Transport-neutral callbacks. Implement on an authenticated host; props confer no permission. */
 export interface IntakeReviewHost {
+    /** Newest receipt first; `limit` defaults to 20 and is clamped to 1..100. */
     list(input: {
         state?: InboxState;
         assigneeId?: string;
         cursor?: string;
+        limit?: number;
     }): Promise<{
         items: InboxEntry[];
         nextCursor?: string;
@@ -91,7 +172,13 @@ export interface IntakeReviewHost {
         attemptId: string;
         index: number;
         requestId: string;
-    }): Promise<void>;
+        /**
+         * Explicit human arguments completing a `needs_review` suggestion. The host
+         * publishes them through the ordinary operation/plan preview, never through
+         * the generated snapshot, so the handler validates them again.
+         */
+        args?: IntakeValues;
+    }): Promise<void | PreviewRejection>;
     decide(input: ReviewInput): Promise<void>;
     apply(actionId: string): Promise<ActionResult>;
     editPlan?: (input: PreviewPlanInput) => Promise<void>;
@@ -109,6 +196,22 @@ export interface IntakeReviewHost {
         requestId: string;
     }): Promise<void>;
     split(input: LogicalSplitInput): Promise<void>;
+    /** Start a reviewer-chosen handler; the server previews and requires normal approval. */
+    startAction?: (input: StartActionInput) => Promise<void>;
+    /** Close the item as handled without an action; terminal and distinct from reject. */
+    resolve?: (input: ResolveItemInput) => Promise<void>;
+    /**
+     * Record reviewer guidance and request a background reinterpretation; never
+     * approval. Resolves `{ stale: true }` when the anchor is superseded or work
+     * is still in flight, a refresh-and-retry signal rather than a denial, and
+     * `{ invalid: true }` when the text fails validation (empty, whitespace-only
+     * or longer than 4,000 characters), shown inline rather than as a denial.
+     */
+    instruct?: (input: ReviewerInstructionInput) => Promise<void | {
+        stale: true;
+    } | {
+        invalid: true;
+    }>;
     /** Explicit correctness judgment only; never called implicitly after review or apply. */
     feedback?: (input: import('./feedback-dto.js').RecordFeedbackInput) => Promise<import('./feedback-dto.js').FeedbackReceipt | void>;
 }

package/dist/review-dto.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"review-dto.d.ts","sourceRoot":"","sources":["../src/review-dto.ts"],"names":[],"mappings":"AAAA,qFAAqF;AACrF,OAAO,KAAK,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACjE,OAAO,KAAK,EACV,YAAY,EACZ,YAAY,EACZ,gBAAgB,EAChB,oBAAoB,EACpB,cAAc,EACd,eAAe,EACf,WAAW,EACZ,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EACV,aAAa,EACb,yBAAyB,EACzB,gBAAgB,EACjB,MAAM,mBAAmB,CAAC;AAE3B,MAAM,MAAM,UAAU,GAClB,YAAY,GACZ,YAAY,GACZ,SAAS,GACT,QAAQ,GACR,UAAU,GACV,qBAAqB,GACrB,WAAW,CAAC;AAChB,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,cAAc,CAAC;IACvB,8DAA8D;IAC9D,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAC/C,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,4EAA4E;IAC5E,SAAS,CAAC,EAAE;QACV,EAAE,EAAE,MAAM,CAAC;QACX,GAAG,EAAE,MAAM,CAAC;QACZ,QAAQ,EAAE,MAAM,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC;QAClB,cAAc,EAAE,MAAM,CAAC;KACxB,CAAC;IACF,IAAI,CAAC,EAAE;QACL,EAAE,EAAE,MAAM,CAAC;QACX,GAAG,EAAE,MAAM,CAAC;QACZ,QAAQ,EAAE,MAAM,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC;QAClB,IAAI,EAAE,YAAY,CAAC;QACnB,SAAS,EAAE,MAAM,CAAC;QAClB,cAAc,EAAE,MAAM,CAAC;QACvB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;CACH;AACD,MAAM,WAAW,UAAU;IACzB,uFAAuF;IACvF,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AACD,MAAM,WAAW,UAAU;IACzB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;CACjB;AACD,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,aAAa,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,UAAU,CAAC;IAClB,UAAU,EAAE,UAAU,CAAC;CACxB;AACD,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,4EAA4E;IAC5E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AACD,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,UAAU,CAAC;IAClB,QAAQ,EAAE,YAAY,EAAE,CAAC;IACzB,QAAQ,CAAC,EAAE,yBAAyB,CAAC;IACrC,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B,OAAO,EAAE,UAAU,CAAC;IACpB,kEAAkE;IAClE,YAAY,EAAE,WAAW,GAAG,OAAO,GAAG,SAAS,GAAG,SAAS,GAAG,aAAa,CAAC;IAC5E,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AACD,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,MAAM,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CACnB;AACD,mGAAmG;AACnG,MAAM,WAAW,gBAAgB;IAC/B,IAAI,CAAC,KAAK,EAAE;QACV,KAAK,CAAC,EAAE,UAAU,CAAC;QACnB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,UAAU,EAAE,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC1D,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAC/D,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACtE,OAAO,CAAC,KAAK,EAAE;QACb,MAAM,EAAE,MAAM,CAAC;QACf,SAAS,EAAE,MAAM,CAAC;QAClB,KAAK,EAAE,MAAM,CAAC;QACd,SAAS,EAAE,MAAM,CAAC;KACnB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClB,MAAM,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1C,KAAK,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAC/C,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,gBAAgB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtD,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,oBAAoB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5D,UAAU,CAAC,KAAK,EAAE;QAChB,MAAM,EAAE,MAAM,CAAC;QACf,SAAS,EAAE,MAAM,CAAC;QAClB,cAAc,EAAE,MAAM,CAAC;QACvB,KAAK,EAAE,MAAM,CAAC;KACf,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAC3B,MAAM,CAAC,KAAK,EAAE;QACZ,MAAM,EAAE,MAAM,CAAC;QACf,eAAe,EAAE,MAAM,CAAC;QACxB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,SAAS,EAAE,MAAM,CAAC;KACnB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClB,KAAK,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/C,yFAAyF;IACzF,QAAQ,CAAC,EAAE,CACT,KAAK,EAAE,OAAO,mBAAmB,EAAE,mBAAmB,KACnD,OAAO,CAAC,OAAO,mBAAmB,EAAE,eAAe,GAAG,IAAI,CAAC,CAAC;CAClE"}
+{"version":3,"file":"review-dto.d.ts","sourceRoot":"","sources":["../src/review-dto.ts"],"names":[],"mappings":"AAAA,qFAAqF;AACrF,OAAO,KAAK,EACV,iBAAiB,EACjB,aAAa,EACb,aAAa,EACb,eAAe,EAChB,MAAM,UAAU,CAAC;AAClB,OAAO,KAAK,EACV,YAAY,EACZ,YAAY,EACZ,gBAAgB,EAChB,oBAAoB,EACpB,cAAc,EACd,gBAAgB,EAChB,eAAe,EACf,WAAW,EACX,gBAAgB,EACjB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EACV,aAAa,EACb,yBAAyB,EACzB,gBAAgB,EAChB,oBAAoB,EACrB,MAAM,mBAAmB,CAAC;AAE3B,MAAM,MAAM,UAAU,GAClB,YAAY,GACZ,YAAY,GACZ,SAAS,GACT,QAAQ,GACR,UAAU,GACV,qBAAqB,GACrB,WAAW,GACX,UAAU,CAAC;AACf,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,cAAc,CAAC;IACvB,8DAA8D;IAC9D,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mFAAmF;IACnF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAC/C,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,4EAA4E;IAC5E,SAAS,CAAC,EAAE;QACV,EAAE,EAAE,MAAM,CAAC;QACX,GAAG,EAAE,MAAM,CAAC;QACZ,QAAQ,EAAE,MAAM,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC;QAClB,cAAc,EAAE,MAAM,CAAC;KACxB,CAAC;IACF,IAAI,CAAC,EAAE;QACL,EAAE,EAAE,MAAM,CAAC;QACX,GAAG,EAAE,MAAM,CAAC;QACZ,QAAQ,EAAE,MAAM,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC;QAClB,IAAI,EAAE,YAAY,CAAC;QACnB,SAAS,EAAE,MAAM,CAAC;QAClB,cAAc,EAAE,MAAM,CAAC;QACvB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;CACH;AACD,MAAM,WAAW,UAAU;IACzB,uFAAuF;IACvF,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AACD,MAAM,WAAW,UAAU;IACzB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;CACjB;AACD,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,aAAa,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,UAAU,CAAC;IAClB,UAAU,EAAE,UAAU,CAAC;IACvB;;;;;;;;;OASG;IACH,QAAQ,CAAC,EAAE,aAAa,CAAC;CAC1B;AACD,+EAA+E;AAC/E,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,4EAA4E;IAC5E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,sEAAsE;IACtE,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AACD,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,4EAA4E;IAC5E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AACD,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,UAAU,CAAC;IAClB,QAAQ,EAAE,YAAY,EAAE,CAAC;IACzB,QAAQ,CAAC,EAAE,yBAAyB,CAAC;IACrC,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B,kFAAkF;IAClF,OAAO,CAAC,EAAE,oBAAoB,EAAE,CAAC;IACjC,6EAA6E;IAC7E,WAAW,CAAC,EAAE,eAAe,CAAC;IAC9B,OAAO,EAAE,UAAU,CAAC;IACpB,uFAAuF;IACvF,WAAW,CAAC,EAAE,uBAAuB,CAAC;IACtC,kEAAkE;IAClE,YAAY,EAAE,WAAW,GAAG,OAAO,GAAG,SAAS,GAAG,SAAS,GAAG,aAAa,CAAC;IAC5E,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AACD,wFAAwF;AACxF,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,4EAA4E;IAC5E,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,MAAM,EAAE,MAAM,CAAC;CAChB;AACD,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,MAAM,CAAC;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;CACnB;AACD,MAAM,WAAW,uBAAuB;IACtC;;;;OAIG;IACH,OAAO,EAAE,mBAAmB,GAAG,IAAI,CAAC;IACpC;;;;OAIG;IACH,OAAO,CAAC,EAAE,mBAAmB,CAAC;IAC9B,mEAAmE;IACnE,OAAO,EAAE,mBAAmB,GAAG,IAAI,CAAC;IACpC,6DAA6D;IAC7D,KAAK,EAAE,OAAO,CAAC;IACf,8FAA8F;IAC9F,OAAO,CAAC,EAAE,aAAa,GAAG,aAAa,CAAC;IACxC,wFAAwF;IACxF,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,+IAA+I;IAC/I,OAAO,CAAC,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,gBAAgB,EAAE,MAAM,CAAA;KAAE,CAAC;CAC3D;AACD,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,MAAM,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CACnB;AACD;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,SAAS,CAAC;CACrB;AACD,mGAAmG;AACnG,MAAM,WAAW,gBAAgB;IAC/B,6EAA6E;IAC7E,IAAI,CAAC,KAAK,EAAE;QACV,KAAK,CAAC,EAAE,UAAU,CAAC;QACnB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,UAAU,EAAE,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC1D,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAC/D,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACtE,OAAO,CAAC,KAAK,EAAE;QACb,MAAM,EAAE,MAAM,CAAC;QACf,SAAS,EAAE,MAAM,CAAC;QAClB,KAAK,EAAE,MAAM,CAAC;QACd,SAAS,EAAE,MAAM,CAAC;QAClB;;;;WAIG;QACH,IAAI,CAAC,EAAE,YAAY,CAAC;KAMrB,GAAG,OAAO,CAAC,IAAI,GAAG,gBAAgB,CAAC,CAAC;IACrC,MAAM,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1C,KAAK,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAC/C,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,gBAAgB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtD,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,oBAAoB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5D,UAAU,CAAC,KAAK,EAAE;QAChB,MAAM,EAAE,MAAM,CAAC;QACf,SAAS,EAAE,MAAM,CAAC;QAClB,cAAc,EAAE,MAAM,CAAC;QACvB,KAAK,EAAE,MAAM,CAAC;KACf,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAC3B,MAAM,CAAC,KAAK,EAAE;QACZ,MAAM,EAAE,MAAM,CAAC;QACf,eAAe,EAAE,MAAM,CAAC;QACxB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,SAAS,EAAE,MAAM,CAAC;KACnB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClB,KAAK,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/C,yFAAyF;IACzF,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,gBAAgB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACzD,sFAAsF;IACtF,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,gBAAgB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACrD;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,CACT,KAAK,EAAE,wBAAwB,KAC5B,OAAO,CAAC,IAAI,GAAG;QAAE,KAAK,EAAE,IAAI,CAAA;KAAE,GAAG;QAAE,OAAO,EAAE,IAAI,CAAA;KAAE,CAAC,CAAC;IACzD,yFAAyF;IACzF,QAAQ,CAAC,EAAE,CACT,KAAK,EAAE,OAAO,mBAAmB,EAAE,mBAAmB,KACnD,OAAO,CAAC,OAAO,mBAAmB,EAAE,eAAe,GAAG,IAAI,CAAC,CAAC;CAClE"}

package/dist/review-host.d.ts

@@ -1,23 +1,72 @@
 /** Server-side implementation of the transport-neutral review callback contract. */
 import type { IntakeEvidenceDTO, IntakeItemDTO } from './dto.js';
-import type { Assignment, EvidenceView, IntakeReviewHost } from './review-dto.js';
-import type { IngestionService } from './server.js';
+import type { Assignment, EvidenceView, InboxEvidence, IntakeReviewHost } from './review-dto.js';
+import { type IngestionService } from './server.js';
+/** One listed row's primary original, as passed to `rowEvidence`. */
+export interface RowEvidenceRequest {
+    itemId: string;
+    evidence: IntakeEvidenceDTO;
+}
+/** A host's preview for one row: label and same-origin URLs, never text. */
+export type RowEvidenceView = Omit<InboxEvidence, 'evidence'>;
 /** Trusted application adapters, bound to the same authenticated session as service. */
 export interface IntakeReviewHostOptions {
     /** Authenticate receipt, enforce upload limits, and request the first extraction. */
     upload: IntakeReviewHost['upload'];
     /** Read durable assignment state; assignment never grants ingestion permissions. */
     assignment(itemId: string): Promise<Assignment>;
+    /**
+     * Optional batched assignment read for one inbox page. Missing ids are
+     * unassigned at version 0. Without it, `list` calls `assignment` per row.
+     */
+    assignments?(itemIds: string[]): Promise<Map<string, Assignment>>;
+    /**
+     * Optional assignee pushdown: the item ids currently assigned to `assigneeId`.
+     * `list` restricts the page query to them, so a filtered page is cut in one
+     * query. Without it (or beyond ITEM_ID_FILTER_CEILING ids) `list` scans pages
+     * and filters by `assignment`, which is still honest but costs more rows.
+     */
+    assignedItemIds?(assigneeId: string): Promise<string[]>;
     /** Authorize manager/assignee and enforce durable CAS plus request-id replay checks. */
     assign: IntakeReviewHost['assign'];
     /** Produce safe text or an authenticated same-origin URL; never storage keys. */
     evidence(evidence: IntakeEvidenceDTO): Promise<Omit<EvidenceView, 'evidence'>>;
-    label?(item: IntakeItemDTO): string;
+    /**
+     * Optional, opt-in row previews for the inbox (#4213). Called at most once
+     * per `list` page with each listed row's primary durable part (metadata
+     * only, read in one batched query); return item id -> `{ label, viewUrl?,
+     * thumbnailUrl? }` built from metadata, without reading bytes. Rows missing
+     * from the map get no preview. When omitted, rows show no original link and
+     * `list` calls no review-host adapter (`evidence`/`rowEvidence`); it still
+     * reads the page's evidence metadata once for filename labels (#4214), for
+     * which the host's `authorize` runs once per distinct captured ceiling, and
+     * lists with item-only labels if that read fails. If `rowEvidence` throws,
+     * the page still lists without previews. `load` never calls it.
+     */
+    rowEvidence?(rows: readonly RowEvidenceRequest[]): Promise<ReadonlyMap<string, RowEvidenceView>>;
+    /**
+     * Presentation label (#4214). `evidence` is the item's durable parts with
+     * the primary part first, so a host can label by the original filename;
+     * one-argument implementations keep working. The default is the primary
+     * part's own `filename`, else `Intake <8 hex>`.
+     */
+    label?(item: IntakeItemDTO, evidence: IntakeEvidenceDTO[]): string;
     /** Expose the optional feedback UI only when the service has feedback configured. */
     enableFeedback?: boolean;
     /** Optional wakeup after a durable logical split has queued extraction. */
     onSplit?(itemId: string, revision: number): Promise<void>;
+    /** Optional wakeup after a durable reviewer instruction has queued reinterpretation. */
+    onInstruct?(itemId: string, revision: number): Promise<void>;
 }
+/**
+ * The original a row should preview, chosen by role rather than media type:
+ * when any part has a parent, the record parts (an upload's capture record,
+ * an email's message) are skipped and the shallowest child wins (the uploaded
+ * file, the first attachment), even when that child is itself JSON. When no
+ * part has a parent (a watched-folder file, an email without attachments),
+ * the first root part is the original. Ties sort by part id, numerically.
+ */
+export declare function primaryEvidence(parts: readonly IntakeEvidenceDTO[]): IntakeEvidenceDTO | undefined;
 /**
  * Create callbacks for one authenticated service scope. Create a fresh host when
  * the session changes; HTTP authentication and CSRF remain application duties.

package/dist/review-host.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"review-host.d.ts","sourceRoot":"","sources":["../src/review-host.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,OAAO,KAAK,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAGjE,OAAO,KAAK,EACV,UAAU,EACV,YAAY,EAEZ,gBAAgB,EACjB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEpD,wFAAwF;AACxF,MAAM,WAAW,uBAAuB;IACtC,qFAAqF;IACrF,MAAM,EAAE,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACnC,oFAAoF;IACpF,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAChD,wFAAwF;IACxF,MAAM,EAAE,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACnC,iFAAiF;IACjF,QAAQ,CACN,QAAQ,EAAE,iBAAiB,GAC1B,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC,CAAC;IAC3C,KAAK,CAAC,CAAC,IAAI,EAAE,aAAa,GAAG,MAAM,CAAC;IACpC,qFAAqF;IACrF,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,2EAA2E;IAC3E,OAAO,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3D;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,gBAAgB,EACzB,OAAO,EAAE,uBAAuB,GAC/B,gBAAgB,CAgLlB"}
+{"version":3,"file":"review-host.d.ts","sourceRoot":"","sources":["../src/review-host.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,OAAO,KAAK,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAGjE,OAAO,KAAK,EACV,UAAU,EACV,YAAY,EAEZ,aAAa,EACb,gBAAgB,EAEjB,MAAM,iBAAiB,CAAC;AAOzB,OAAO,EACL,KAAK,gBAAgB,EAMtB,MAAM,aAAa,CAAC;AAErB,qEAAqE;AACrE,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,iBAAiB,CAAC;CAC7B;AACD,4EAA4E;AAC5E,MAAM,MAAM,eAAe,GAAG,IAAI,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;AAE9D,wFAAwF;AACxF,MAAM,WAAW,uBAAuB;IACtC,qFAAqF;IACrF,MAAM,EAAE,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACnC,oFAAoF;IACpF,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAChD;;;OAGG;IACH,WAAW,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;IAClE;;;;;OAKG;IACH,eAAe,CAAC,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACxD,wFAAwF;IACxF,MAAM,EAAE,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACnC,iFAAiF;IACjF,QAAQ,CACN,QAAQ,EAAE,iBAAiB,GAC1B,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC,CAAC;IAC3C;;;;;;;;;;;OAWG;IACH,WAAW,CAAC,CACV,IAAI,EAAE,SAAS,kBAAkB,EAAE,GAClC,OAAO,CAAC,WAAW,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC;IACjD;;;;;OAKG;IACH,KAAK,CAAC,CAAC,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,iBAAiB,EAAE,GAAG,MAAM,CAAC;IACnE,qFAAqF;IACrF,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,2EAA2E;IAC3E,OAAO,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1D,wFAAwF;IACxF,UAAU,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9D;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAC7B,KAAK,EAAE,SAAS,iBAAiB,EAAE,GAClC,iBAAiB,GAAG,SAAS,CAkB/B;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,gBAAgB,EACzB,OAAO,EAAE,uBAAuB,GAC/B,gBAAgB,CA2YlB"}

package/dist/review-instruction-view.d.ts

@@ -0,0 +1,12 @@
+/** Server-side projection of an item's reviewer-instruction state for review hosts. */
+import type { CompletedAnalysisSnapshot } from './proposal-dto.js';
+import type { ReviewerInstructionView } from './review-dto.js';
+import type { IngestionService } from './server.js';
+/**
+ * Project `ItemReviewView.instruction`. History and reinterpretation state are
+ * separate reads, so an instruction recorded between them would otherwise look
+ * like a dropped one: when the in-effect id names a different instruction the
+ * history is re-read, and `dropped` is set only when nothing is in effect.
+ */
+export declare function loadInstructionView(service: Pick<IngestionService, 'listReviewerInstructions' | 'getReinterpretationState'>, itemId: string, analysis: CompletedAnalysisSnapshot | undefined): Promise<ReviewerInstructionView | undefined>;
+//# sourceMappingURL=review-instruction-view.d.ts.map

package/dist/review-instruction-view.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"review-instruction-view.d.ts","sourceRoot":"","sources":["../src/review-instruction-view.ts"],"names":[],"mappings":"AAAA,uFAAuF;AACvF,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AACnE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAE/D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEpD;;;;;GAKG;AACH,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,IAAI,CACX,gBAAgB,EAChB,0BAA0B,GAAG,0BAA0B,CACxD,EACD,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,yBAAyB,GAAG,SAAS,GAC9C,OAAO,CAAC,uBAAuB,GAAG,SAAS,CAAC,CA0C9C"}

package/dist/review-summary.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"review-summary.d.ts","sourceRoot":"","sources":["../src/review-summary.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAC9C,OAAO,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC9D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEpD,mFAAmF;AACnF,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,gBAAgB,EACzB,IAAI,EAAE,aAAa,EACnB,eAAe,CAAC,EAAE,MAAM,GACvB,OAAO,CAAC;IAAE,OAAO,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,UAAU,CAAA;CAAE,CAAC,CA2CrD"}
+{"version":3,"file":"review-summary.d.ts","sourceRoot":"","sources":["../src/review-summary.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAC9C,OAAO,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC9D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEpD,mFAAmF;AACnF,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,gBAAgB,EACzB,IAAI,EAAE,aAAa,EACnB,eAAe,CAAC,EAAE,MAAM,GACvB,OAAO,CAAC;IAAE,OAAO,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,UAAU,CAAA;CAAE,CAAC,CA+CrD"}

package/dist/reviewer-instruction.d.ts

@@ -0,0 +1,20 @@
+import type { ReviewerInstruction } from './review-dto.js';
+/** Reviewer instruction text ceiling; the prompt input budget still applies. */
+export declare const REVIEWER_INSTRUCTION_MAX_LENGTH = 4000;
+/**
+ * Instruction text is empty, whitespace-only or longer than the ceiling. Hosts
+ * surface it inline as a validation result, never as an access denial.
+ */
+export declare class ReviewerInstructionInvalidError extends Error {
+    constructor();
+}
+/**
+ * The anchor generation is superseded or a reinterpretation is still in flight.
+ * Hosts surface it as a refresh-and-retry signal, never as an access denial.
+ */
+export declare class ReviewerInstructionStaleError extends Error {
+    constructor();
+}
+/** Verify the record's own digest and project its browser-safe shape. */
+export declare function reviewerInstructionView(value: unknown): ReviewerInstruction;
+//# sourceMappingURL=reviewer-instruction.d.ts.map

package/dist/reviewer-instruction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reviewer-instruction.d.ts","sourceRoot":"","sources":["../src/reviewer-instruction.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAE3D,gFAAgF;AAChF,eAAO,MAAM,+BAA+B,OAAO,CAAC;AAEpD;;;GAGG;AACH,qBAAa,+BAAgC,SAAQ,KAAK;;CAKzD;AAED;;;GAGG;AACH,qBAAa,6BAA8B,SAAQ,KAAK;;CAKvD;AAED,yEAAyE;AACzE,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,mBAAmB,CAwB3E"}