@happyvertical/smrt-ingestion 0.57.20 → 0.57.22

package/dist/chunks/proposal-contracts-77Uo1B1j.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proposal-contracts-77Uo1B1j.js","names":[],"sources":["../../src/extraction.ts","../../src/proposal-limits.ts","../../src/proposal-contracts.ts"],"sourcesContent":["import { fork } from 'node:child_process';\nimport { createHash } from 'node:crypto';\nimport { dirname, join } from 'node:path';\nimport { fileURLToPath } from 'node:url';\nimport type { GetAIOptions } from '@happyvertical/ai';\nimport type { PDFReaderOptions } from '@happyvertical/pdf';\nimport type { GetTranscriberOptions } from '@happyvertical/speech';\nimport type { AnalysisOutput } from './dto.js';\nimport {\n  ExtractionFailure,\n  emptyExtraction,\n  validateExtractionRequest,\n} from './extraction-providers.js';\nimport type {\n  ExtractionAdapter,\n  ExtractionRequest,\n  ExtractionResult,\n  ProviderIdentity,\n} from './extraction-types.js';\nimport { providerIdentity } from './extraction-types.js';\nimport type { AnalysisLease, IngestionService } from './server.js';\n\nexport type * from './extraction-types.js';\n\n/** Trusted server configuration. Credentials never enter analysis provenance. */\nexport interface ExtractionSDKConfiguration {\n  pdf?: {\n    provider: NonNullable<PDFReaderOptions['provider']>;\n    identity: ProviderIdentity;\n  };\n  ocr?: { identity: ProviderIdentity; options?: Record<string, unknown> };\n  speech?: { identity: ProviderIdentity; options: GetTranscriberOptions };\n  vision?: { identity: ProviderIdentity; options: GetAIOptions };\n  imageMode?: 'ocr' | 'vision';\n  /** Maximum concurrent child processes for this adapter instance (default 1). */\n  maxConcurrentProcesses?: number;\n  /** The deployment enforces a native-memory ceiling outside Node (e.g. container).\n   * Required for native decoders: Node's heap cap does not bound native allocation. */\n  nativeMemoryIsolation: 'host-enforced';\n}\n\n/** Production adapter: bounded per-evidence child, terminated on deadline/abort. */\nexport function createSDKExtractionAdapter(\n  configuration: ExtractionSDKConfiguration,\n): ExtractionAdapter {\n  try {\n    configuration = structuredClone(configuration);\n  } catch {\n    throw new Error('Serializable SDK configuration required');\n  }\n  const maximum = configuration.maxConcurrentProcesses ?? 1;\n  if (!Number.isSafeInteger(maximum) || maximum < 1 || maximum > 32)\n    throw new Error('Invalid extraction concurrency');\n  let running = 0;\n  if (configuration.nativeMemoryIsolation !== 'host-enforced')\n    throw new Error('Native memory isolation is required');\n  for (const provider of [\n    configuration.pdf,\n    configuration.ocr,\n    configuration.speech,\n    configuration.vision,\n  ]) {\n    if (provider) provider.identity = providerIdentity(provider.identity);\n  }\n  if (\n    configuration.pdf?.provider === 'auto' ||\n    configuration.ocr?.identity.provider === 'auto'\n  )\n    throw new Error('Pin extraction providers');\n  return {\n    async extract(request) {\n      let latest = emptyExtraction(request);\n      try {\n        validateExtractionRequest(request);\n      } catch (caught) {\n        if (!(caught instanceof ExtractionFailure)) throw caught;\n        latest.errors.push({\n          category: caught.category,\n          location: { kind: 'source' },\n        });\n        return latest;\n      }\n      if (request.evidence.mediaType.toLowerCase().startsWith('video/')) {\n        latest.status = 'unsupported';\n        latest.errors.push({\n          category: 'unsupported_type',\n          location: { kind: 'source' },\n        });\n        return latest;\n      }\n      if (request.signal?.aborted) {\n        latest.errors.push({\n          category: 'cancelled',\n          location: { kind: 'source' },\n        });\n        return latest;\n      }\n      if (running >= maximum) {\n        latest.errors.push({ category: 'limit', location: { kind: 'source' } });\n        return latest;\n      }\n      running++;\n      return new Promise<ExtractionResult>((resolve) => {\n        // A public entry can move shared code into chunks; resolve without loading it.\n        const child = fork(\n          join(\n            dirname(\n              fileURLToPath(\n                import.meta.resolve('@happyvertical/smrt-ingestion/server'),\n              ),\n            ),\n            'extraction-worker.js',\n          ),\n          [],\n          {\n            serialization: 'advanced',\n            stdio: ['ignore', 'ignore', 'ignore', 'ipc'],\n            execArgv: [`--max-old-space-size=${request.limits.workerHeapMb}`],\n            detached: process.platform !== 'win32',\n          },\n        );\n        let done = false;\n        const stop = () => {\n          try {\n            if (process.platform !== 'win32' && child.pid)\n              process.kill(-child.pid, 'SIGKILL');\n            else child.kill('SIGKILL');\n          } catch {\n            child.kill('SIGKILL');\n          }\n        };\n        const finish = (\n          category?: 'timeout' | 'cancelled' | 'unavailable' | 'limit',\n        ) => {\n          if (done) return;\n          done = true;\n          running--;\n          clearTimeout(timer);\n          request.signal?.removeEventListener('abort', abort);\n          stop();\n          if (category) {\n            latest.errors.push({ category, location: { kind: 'source' } });\n            latest.status = latest.segments.length ? 'partial' : 'failed';\n            latest.truncated = true;\n            latest.omitted.push({ kind: 'source' });\n          }\n          resolve(latest);\n        };\n        const abort = () => finish('cancelled');\n        const timer = setTimeout(\n          () => finish('timeout'),\n          request.limits.timeoutMs,\n        );\n        request.signal?.addEventListener('abort', abort, { once: true });\n        child.on('error', () => finish('unavailable'));\n        child.on('exit', () => {\n          if (!done) finish('unavailable');\n        });\n        child.on(\n          'message',\n          async (message: {\n            kind: string;\n            id?: number;\n            result?: ExtractionResult;\n          }) => {\n            if (done) return;\n            if (\n              message.kind === 'authorize' &&\n              Number.isSafeInteger(message.id)\n            ) {\n              try {\n                await request.beforeProviderCall?.();\n                if (!done) child.send({ kind: 'authorized', id: message.id });\n              } catch {\n                finish('cancelled');\n              }\n              return;\n            }\n            if (\n              (message.kind === 'progress' || message.kind === 'result') &&\n              message.result\n            ) {\n              // The child is our trusted normalizer; bound serialized IPC output as well.\n              if (\n                Buffer.byteLength(JSON.stringify(message.result)) >\n                request.limits.maxOutputBytes + 65536\n              )\n                return finish('limit');\n              latest = message.result;\n              if (message.kind === 'result') finish();\n            } else finish('unavailable');\n          },\n        );\n        const {\n          signal: _signal,\n          beforeProviderCall: _authorize,\n          ...wireRequest\n        } = request;\n        child.send({ request: wireRequest, configuration }, (error) => {\n          if (error) finish('unavailable');\n        });\n        if (request.signal?.aborted) abort();\n      });\n    },\n  };\n}\n\nfunction validateAndNormalizeExtractionOutput(\n  result: ExtractionResult,\n  request: ExtractionRequest,\n): void {\n  const numeric = (value: number) => Number.isFinite(value) && value >= 0;\n  const location = (\n    value: ExtractionResult['segments'][number]['location'],\n  ) => {\n    if (!value || typeof value !== 'object') return false;\n    if (value.kind === 'source') return true;\n    if (value.kind === 'page')\n      return Number.isSafeInteger(value.page) && value.page > 0;\n    if (value.kind === 'pages')\n      return (\n        Number.isSafeInteger(value.startPage) &&\n        value.startPage > 0 &&\n        Number.isSafeInteger(value.endPage) &&\n        value.endPage >= value.startPage\n      );\n    return (\n      value.kind === 'time' &&\n      numeric(value.startMs) &&\n      numeric(value.endMs) &&\n      value.endMs >= value.startMs\n    );\n  };\n  if (\n    !result ||\n    !['complete', 'partial', 'failed', 'unsupported'].includes(result.status) ||\n    result.automaticActionEligible !== false ||\n    result.configurationRevision !== request.configurationRevision ||\n    !result.evidence ||\n    Object.entries(request.evidence).some(\n      ([key, value]) =>\n        result.evidence[key as keyof typeof result.evidence] !== value,\n    ) ||\n    typeof result.truncated !== 'boolean' ||\n    !Array.isArray(result.capabilities) ||\n    result.capabilities.some(\n      (capability) =>\n        !capability ||\n        typeof capability.confidence !== 'boolean' ||\n        typeof capability.boxes !== 'boolean' ||\n        !['source', 'page', 'time'].includes(capability.location) ||\n        !['unknown', 'reported'].includes(capability.truncation) ||\n        !['unknown', 'reported'].includes(capability.usage),\n    ) ||\n    !result.limits ||\n    Object.entries(request.limits).some(\n      ([key, value]) =>\n        result.limits[key as keyof typeof result.limits] !== value,\n    ) ||\n    !Array.isArray(result.segments) ||\n    !Array.isArray(result.errors) ||\n    !Array.isArray(result.omitted) ||\n    (result.status === 'complete' &&\n      (result.truncated ||\n        result.errors.length > 0 ||\n        result.omitted.length > 0)) ||\n    result.omitted.some((value) => !location(value)) ||\n    result.segments.some(\n      (segment) =>\n        typeof segment.text !== 'string' ||\n        !location(segment.location) ||\n        segment.location.kind === 'pages' ||\n        (segment.provenance?.provider === 'unlimited-ocr' &&\n          (segment.confidence !== null || segment.boxes !== null)) ||\n        !segment.provenance ||\n        [\n          segment.provenance.provider,\n          segment.provenance.model,\n          segment.provenance.version,\n        ].some((value) => typeof value !== 'string' || !value) ||\n        (segment.confidence !== null &&\n          (!segment.confidence ||\n            !numeric(segment.confidence.value) ||\n            segment.confidence.value > 1 ||\n            segment.confidence.scale !== '0-1' ||\n            segment.confidence.calibration !== 'unknown')) ||\n        (segment.boxes !== null &&\n          (!Array.isArray(segment.boxes) ||\n            segment.boxes.some(\n              (box) =>\n                typeof box.text !== 'string' ||\n                ![box.x, box.y, box.width, box.height].every(numeric),\n            ))),\n    ) ||\n    result.errors.some(\n      (error) =>\n        ![\n          'unsupported_type',\n          'malformed_output',\n          'limit',\n          'timeout',\n          'unavailable',\n          'authentication',\n          'cancelled',\n          'integrity',\n        ].includes(error.category) || !location(error.location),\n    ) ||\n    !result.usage ||\n    Object.values(result.usage).some((value) => !numeric(value))\n  )\n    throw new Error('Invalid extraction output');\n  // Structural typing permits extra host fields. Never persist them as identity.\n  for (const segment of result.segments)\n    segment.provenance = providerIdentity(segment.provenance);\n  result.capabilities = result.capabilities.map((capability) => ({\n    ...providerIdentity(capability),\n    confidence: capability.confidence,\n    boxes: capability.boxes,\n    location: capability.location,\n    truncation: capability.truncation,\n    usage: capability.usage,\n  }));\n}\n\n/** Current access is rechecked on read and fenced publication by the foundation.\n * The host already allocated the immutable input/config revision and lease. */\nexport async function extractAnalysis(\n  service: IngestionService,\n  lease: AnalysisLease,\n  adapter: ExtractionAdapter,\n  options: Pick<\n    ExtractionRequest,\n    'limits' | 'configurationRevision' | 'signal'\n  >,\n): Promise<boolean> {\n  const snapshot = await service.getAnalysisInput(lease);\n  const persisted = snapshot.configuration.extraction as\n    | { configurationRevision?: unknown; limits?: Record<string, unknown> }\n    | undefined;\n  if (\n    !persisted ||\n    persisted.configurationRevision !== options.configurationRevision ||\n    !persisted.limits ||\n    Object.keys(options.limits).some(\n      (key) =>\n        persisted.limits?.[key] !==\n        options.limits[key as keyof typeof options.limits],\n    ) ||\n    Object.keys(persisted.limits).length !== Object.keys(options.limits).length\n  )\n    throw new Error('Extraction configuration mismatch');\n  const evidence = snapshot.evidence;\n  const boundOptions = { ...options, limits: structuredClone(options.limits) };\n  const results: ExtractionResult[] = [];\n  let limited = false;\n  const publication = (reserve = false): AnalysisOutput => {\n    const allComplete =\n      !limited &&\n      results.length === evidence.length &&\n      results.every((result) => result.status === 'complete');\n    const firstError =\n      limited || reserve\n        ? 'limit'\n        : results.flatMap((result) => result.errors)[0]?.category;\n    return {\n      status: reserve\n        ? 'needs_attention'\n        : allComplete\n          ? 'completed'\n          : results.some((result) => result.segments.length)\n            ? 'partial'\n            : 'needs_attention',\n      provider: 'smrt-ingestion-extraction',\n      model: 'none',\n      version: '1',\n      output: {\n        configurationRevision: options.configurationRevision,\n        results,\n        ...(limited || reserve\n          ? {\n              truncated: true,\n              omittedEvidenceCount: evidence.length - results.length,\n            }\n          : {}),\n      },\n      usage: {},\n      ...(firstError ? { error: firstError } : {}),\n    };\n  };\n  // Canonical persistence sorts keys but uses identical JSON value encoding/size.\n  const fits = (output: AnalysisOutput) =>\n    Buffer.byteLength(JSON.stringify(output)) <= snapshot.maxOutputBytes;\n  const minimum: AnalysisOutput = {\n    status: 'needs_attention',\n    provider: 'smrt-ingestion-extraction',\n    model: 'none',\n    version: '1',\n    output: {},\n    usage: {},\n    error: 'limit',\n  };\n  if (!fits(minimum)) return service.failAnalysis(lease, 'limit');\n  if (!fits(publication(true))) return service.completeAnalysis(lease, minimum);\n  for (const part of evidence) {\n    await service.getAnalysisInput(lease);\n    const bytes = await service.readEvidence(lease.itemId, part.id);\n    await service.getAnalysisInput(lease);\n    const request = { ...boundOptions, evidence: part, bytes };\n    const result = await adapter.extract({\n      ...request,\n      evidence: { ...part },\n      limits: { ...request.limits },\n      bytes: bytes.slice(),\n      beforeProviderCall: async () => {\n        await service.getAnalysisInput(lease);\n      },\n    });\n    validateAndNormalizeExtractionOutput(result, request);\n    results.push(result);\n    if (!fits(publication(true))) {\n      limited = true;\n      // Preserve earlier parts and the largest prefix of complete segments that fits.\n      result.status = 'partial';\n      result.truncated = true;\n      result.errors.push({ category: 'limit', location: { kind: 'source' } });\n      while (result.segments.length && !fits(publication(true))) {\n        const removed = result.segments.pop();\n        if (removed) result.omitted.push(removed.location);\n      }\n      // Diagnostics are indivisible: omit this result rather than erase known gaps.\n      if (!fits(publication(true))) results.pop();\n    }\n    // Revalidation after an external call prevents returning/publishing revoked evidence.\n    await service.getAnalysisInput(lease);\n    if (limited || options.signal?.aborted) break;\n  }\n  return service.completeAnalysis(lease, publication());\n}\n\n/** Side-effect-free, versioned split proposal. Original evidence is not replaced. */\nexport function proposeDocumentSplits(\n  result: ExtractionResult,\n  revision: number,\n  groups: number[][],\n) {\n  if (!Number.isSafeInteger(revision) || revision < 1 || !groups.length)\n    throw new Error('Invalid split revision');\n  const available = new Set(\n    result.segments.flatMap((segment) =>\n      segment.location.kind === 'page' ? [segment.location.page] : [],\n    ),\n  );\n  const seen = new Set<number>();\n  for (const group of groups) {\n    if (!group.length) throw new Error('Empty split');\n    for (const page of group) {\n      if (!Number.isSafeInteger(page) || !available.has(page) || seen.has(page))\n        throw new Error('Invalid split page');\n      seen.add(page);\n    }\n    if (group.some((page, index) => index > 0 && page <= group[index - 1]))\n      throw new Error('Unordered split');\n  }\n  const proposal = {\n    revision,\n    evidenceId: result.evidence.id,\n    inputHash: result.evidence.contentHash,\n    configurationRevision: result.configurationRevision,\n    groups: groups.map((pages) => ({ pages: [...pages] })),\n    status: 'proposed' as const,\n  };\n  return {\n    ...proposal,\n    digest: createHash('sha256').update(JSON.stringify(proposal)).digest('hex'),\n  };\n}\n","import type { ProposalConfiguration } from './proposal-contracts.js';\n\n/** Validate deployment limits before any item is interpreted. */\nexport function assertProposalLimits(\n  limits: ProposalConfiguration['limits'],\n): void {\n  if (\n    !limits ||\n    [\n      'maxHandlers',\n      'maxCandidates',\n      'maxSuggestions',\n      'maxInputBytes',\n      'maxOutputBytes',\n      'maxQueryLength',\n      'timeoutMs',\n    ].some(\n      (key) =>\n        !Number.isSafeInteger(limits[key as keyof typeof limits]) ||\n        limits[key as keyof typeof limits] <= 0,\n    ) ||\n    limits.maxHandlers > 20 ||\n    limits.maxCandidates > 20 ||\n    limits.maxSuggestions > 20 ||\n    limits.timeoutMs > 2_147_483_647\n  )\n    throw new Error('Invalid proposal limits');\n}\n","import type { DecisionClient } from '@happyvertical/smrt-core';\nimport type { HandlerContext } from './execution-contracts.js';\nimport type { IntakeValues } from './execution-dto.js';\nimport {\n  type EvidenceLocation,\n  type ProviderIdentity,\n  providerIdentity,\n} from './extraction-types.js';\nimport type {\n  ProposalCandidate,\n  ProposalCatalogEntry,\n  ProposalReferenceField,\n} from './proposal-dto.js';\n\n/** Optional discovery capability on the existing application execution handler. */\nexport interface HandlerDiscovery {\n  mediaTypes: readonly string[];\n  /** Every existing-record argument exposed to generation must be declared here. */\n  references: Readonly<Record<string, ProposalReferenceField>>;\n  /** Database reads only; filter in the query before ranking/summarizing. */\n  candidates?(\n    query: string,\n    context: HandlerContext,\n    page: { limit: number },\n  ): Promise<{\n    items: Array<Omit<ProposalCandidate, 'key'>>;\n    hasMore: boolean;\n  }>;\n}\nexport interface GenerationLimits {\n  maxHandlers: number;\n  maxCandidates: number;\n  maxSuggestions: number;\n  maxInputBytes: number;\n  maxOutputBytes: number;\n  maxQueryLength: number;\n  timeoutMs: number;\n}\nexport interface GenerativeProposalInput {\n  evidence: Array<{\n    evidenceId: string;\n    partId: string;\n    parentEvidenceId: string | null;\n    mediaType: string;\n    contentHash: string;\n    segments: Array<{ text: string; location: EvidenceLocation }>;\n  }>;\n  offered: Array<{\n    handler: ProposalCatalogEntry;\n    candidates: ProposalCandidate[];\n  }>;\n  instructions: string;\n  /** Bounded, currently eligible examples; neither evidence nor authority. */\n  examples?: import('./feedback-dto.js').FeedbackSelection;\n  /** Authenticated human correction carried through fresh extraction; never model authority. */\n  humanCorrection?: IntakeValues;\n  /** Authenticated reviewer guidance; trusted steering only, never catalog or approval authority. */\n  reviewerInstruction?: { id: string; text: string };\n}\n/** Inject only trusted SDK-bound adapters. Generative output is always untrusted. */\nexport interface ProposalGenerator {\n  identity: ProviderIdentity;\n  generate(\n    input: GenerativeProposalInput,\n    options: { signal: AbortSignal; maxOutputBytes: number },\n  ): Promise<{\n    output: unknown;\n    completion: 'complete' | 'unknown';\n    usage?: Record<string, number>;\n    /** Provider-reported immutable model revision, when it safely resolves a configured alias. */\n    responseModel?: string;\n  }>;\n}\n/**\n * How validated decision answers affect readiness. `gate` (default) sends a\n * suggestion to `needs_review` when the thresholds are not met; `record` still\n * runs and persists the same answers but leaves outcome/disposition to the\n * validator. Neither mode makes any action automation-eligible.\n */\nexport type DecisionReadiness = 'gate' | 'record';\n/** Public decision settings shared by generation and read configuration. */\nexport interface DecisionSettings {\n  minimumDecisionProbability?: number;\n  tieMargin?: number;\n  /**\n   * Per-request token window forwarded to the decision client as `maxLen`\n   * (the SDK Laya provider option). Absent keeps the client/checkpoint default.\n   */\n  decisionMaxLen?: number;\n  decisionReadiness?: DecisionReadiness;\n}\nexport interface ProposalConfiguration extends DecisionSettings {\n  version: string;\n  promptVersion: string;\n  generator: ProposalGenerator;\n  /** Absent means the normal unconfigured decision path, never fake probability. */\n  decision?: { client: DecisionClient; identity: ProviderIdentity };\n  limits: GenerationLimits;\n}\n/** Credential-free configuration for validating persisted proposal snapshots. */\nexport interface ProposalReadConfiguration extends DecisionSettings {\n  version: string;\n  promptVersion: string;\n  generator: ProviderIdentity;\n  decision?: ProviderIdentity;\n  limits: GenerationLimits;\n}\n/** Remove generation capability while preserving the public persisted configuration. */\nexport function proposalReadConfiguration(\n  config: ProposalConfiguration | ProposalReadConfiguration,\n): ProposalReadConfiguration {\n  const generator = providerIdentity(\n    'identity' in config.generator\n      ? config.generator.identity\n      : config.generator,\n  );\n  return {\n    version: config.version,\n    promptVersion: config.promptVersion,\n    generator,\n    ...(config.decision\n      ? {\n          decision: providerIdentity(\n            'identity' in config.decision\n              ? config.decision.identity\n              : config.decision,\n          ),\n        }\n      : {}),\n    ...(config.minimumDecisionProbability === undefined\n      ? {}\n      : { minimumDecisionProbability: config.minimumDecisionProbability }),\n    ...(config.tieMargin === undefined ? {} : { tieMargin: config.tieMargin }),\n    ...(config.decisionMaxLen === undefined\n      ? {}\n      : { decisionMaxLen: config.decisionMaxLen }),\n    ...(config.decisionReadiness === undefined\n      ? {}\n      : { decisionReadiness: config.decisionReadiness }),\n    limits: {\n      maxHandlers: config.limits.maxHandlers,\n      maxCandidates: config.limits.maxCandidates,\n      maxSuggestions: config.limits.maxSuggestions,\n      maxInputBytes: config.limits.maxInputBytes,\n      maxOutputBytes: config.limits.maxOutputBytes,\n      maxQueryLength: config.limits.maxQueryLength,\n      timeoutMs: config.limits.timeoutMs,\n    },\n  };\n}\nexport interface GenerationStageConfiguration extends IntakeValues {\n  stage: 'interpret';\n  /** Copied from the pinned extraction source; verified against it before provider disclosure. */\n  reviewerInstruction?: IntakeValues;\n  proposals: {\n    source: import('./proposal-dto.js').GenerationSourcePin;\n    configurationVersion: string;\n    promptVersion: string;\n    catalogDigest: string;\n    generator: ProviderIdentity;\n    decision: ProviderIdentity | null;\n    limits: GenerationLimits;\n    minimumDecisionProbability: number;\n    tieMargin: number;\n    /** Present only when configured, so default digests stay stable. */\n    decisionMaxLen?: number;\n    /** Present only for `record`; `gate` is the default. */\n    decisionReadiness?: 'record';\n  };\n}\n"],"mappings":";;;;;;AA0CO,SAAS,2BACd,eACmB;CACnB,IAAI;EACF,gBAAgB,gBAAgB,aAAa;CAC/C,QAAQ;EACN,MAAM,IAAI,MAAM,yCAAyC;CAC3D;CACA,MAAM,UAAU,cAAc,0BAA0B;CACxD,IAAI,CAAC,OAAO,cAAc,OAAO,KAAK,UAAU,KAAK,UAAU,IAC7D,MAAM,IAAI,MAAM,gCAAgC;CAClD,IAAI,UAAU;CACd,IAAI,cAAc,0BAA0B,iBAC1C,MAAM,IAAI,MAAM,qCAAqC;CACvD,KAAA,MAAW,YAAY;EACrB,cAAc;EACd,cAAc;EACd,cAAc;EACd,cAAc;CAChB,GACE,IAAI,UAAU,SAAS,WAAW,iBAAiB,SAAS,QAAQ;CAEtE,IACE,cAAc,KAAK,aAAa,UAChC,cAAc,KAAK,SAAS,aAAa,QAEzC,MAAM,IAAI,MAAM,0BAA0B;CAC5C,OAAO,EACL,MAAM,QAAQ,SAAS;EACrB,IAAI,SAAS,gBAAgB,OAAO;EACpC,IAAI;GACF,0BAA0B,OAAO;EACnC,SAAS,QAAQ;GACf,IAAI,EAAE,kBAAkB,oBAAoB,MAAM;GAClD,OAAO,OAAO,KAAK;IACjB,UAAU,OAAO;IACjB,UAAU,EAAE,MAAM,SAAS;GAC7B,CAAC;GACD,OAAO;EACT;EACA,IAAI,QAAQ,SAAS,UAAU,YAAY,CAAA,CAAE,WAAW,QAAQ,GAAG;GACjE,OAAO,SAAS;GAChB,OAAO,OAAO,KAAK;IACjB,UAAU;IACV,UAAU,EAAE,MAAM,SAAS;GAC7B,CAAC;GACD,OAAO;EACT;EACA,IAAI,QAAQ,QAAQ,SAAS;GAC3B,OAAO,OAAO,KAAK;IACjB,UAAU;IACV,UAAU,EAAE,MAAM,SAAS;GAC7B,CAAC;GACD,OAAO;EACT;EACA,IAAI,WAAW,SAAS;GACtB,OAAO,OAAO,KAAK;IAAE,UAAU;IAAS,UAAU,EAAE,MAAM,SAAS;GAAE,CAAC;GACtE,OAAO;EACT;EACA;EACA,OAAO,IAAI,SAA2B,YAAY;GAEhD,MAAM,QAAQ,KACZ,KACE,QACE,cACE,OAAA,KAAY,QAAQ,sCAAsC,CAC5D,CACF,GACA,sBACF,GACA,CAAC,GACD;IACE,eAAe;IACf,OAAO;KAAC;KAAU;KAAU;KAAU;IAAK;IAC3C,UAAU,CAAC,wBAAwB,QAAQ,OAAO,cAAc;IAChE,UAAU,QAAQ,aAAa;GACjC,CACF;GACA,IAAI,OAAO;GACX,MAAM,aAAa;IACjB,IAAI;KACF,IAAI,QAAQ,aAAa,WAAW,MAAM,KACxC,QAAQ,KAAK,CAAC,MAAM,KAAK,SAAS;UAC/B,MAAM,KAAK,SAAS;IAC3B,QAAQ;KACN,MAAM,KAAK,SAAS;IACtB;GACF;GACA,MAAM,UACJ,aACG;IACH,IAAI,MAAM;IACV,OAAO;IACP;IACA,aAAa,KAAK;IAClB,QAAQ,QAAQ,oBAAoB,SAAS,KAAK;IAClD,KAAK;IACL,IAAI,UAAU;KACZ,OAAO,OAAO,KAAK;MAAE;MAAU,UAAU,EAAE,MAAM,SAAS;KAAE,CAAC;KAC7D,OAAO,SAAS,OAAO,SAAS,SAAS,YAAY;KACrD,OAAO,YAAY;KACnB,OAAO,QAAQ,KAAK,EAAE,MAAM,SAAS,CAAC;IACxC;IACA,QAAQ,MAAM;GAChB;GACA,MAAM,cAAc,OAAO,WAAW;GACtC,MAAM,QAAQ,iBACN,OAAO,SAAS,GACtB,QAAQ,OAAO,SACjB;GACA,QAAQ,QAAQ,iBAAiB,SAAS,OAAO,EAAE,MAAM,KAAK,CAAC;GAC/D,MAAM,GAAG,eAAe,OAAO,aAAa,CAAC;GAC7C,MAAM,GAAG,cAAc;IACrB,IAAI,CAAC,MAAM,OAAO,aAAa;GACjC,CAAC;GACD,MAAM,GACJ,WACA,OAAO,YAID;IACJ,IAAI,MAAM;IACV,IACE,QAAQ,SAAS,eACjB,OAAO,cAAc,QAAQ,EAAE,GAC/B;KACA,IAAI;MACF,MAAM,QAAQ,qBAAqB;MACnC,IAAI,CAAC,MAAM,MAAM,KAAK;OAAE,MAAM;OAAc,IAAI,QAAQ;MAAG,CAAC;KAC9D,QAAQ;MACN,OAAO,WAAW;KACpB;KACA;IACF;IACA,KACG,QAAQ,SAAS,cAAc,QAAQ,SAAS,aACjD,QAAQ,QACR;KAEA,IACE,OAAO,WAAW,KAAK,UAAU,QAAQ,MAAM,CAAC,IAChD,QAAQ,OAAO,iBAAiB,OAEhC,OAAO,OAAO,OAAO;KACvB,SAAS,QAAQ;KACjB,IAAI,QAAQ,SAAS,UAAU,OAAO;IACxC,OAAO,OAAO,aAAa;GAC7B,CACF;GACA,MAAM,EACJ,QAAQ,SACR,oBAAoB,YACpB,GAAG,gBACD;GACJ,MAAM,KAAK;IAAE,SAAS;IAAa;GAAc,IAAI,UAAU;IAC7D,IAAI,OAAO,OAAO,aAAa;GACjC,CAAC;GACD,IAAI,QAAQ,QAAQ,SAAS,MAAM;EACrC,CAAC;CACH,EACF;AACF;AAEA,SAAS,qCACP,QACA,SACM;CACN,MAAM,WAAW,UAAkB,OAAO,SAAS,KAAK,KAAK,SAAS;CACtE,MAAM,YACJ,UACG;EACH,IAAI,CAAC,SAAS,OAAO,UAAU,UAAU,OAAO;EAChD,IAAI,MAAM,SAAS,UAAU,OAAO;EACpC,IAAI,MAAM,SAAS,QACjB,OAAO,OAAO,cAAc,MAAM,IAAI,KAAK,MAAM,OAAO;EAC1D,IAAI,MAAM,SAAS,SACjB,OACE,OAAO,cAAc,MAAM,SAAS,KACpC,MAAM,YAAY,KAClB,OAAO,cAAc,MAAM,OAAO,KAClC,MAAM,WAAW,MAAM;EAE3B,OACE,MAAM,SAAS,UACf,QAAQ,MAAM,OAAO,KACrB,QAAQ,MAAM,KAAK,KACnB,MAAM,SAAS,MAAM;CAEzB;CACA,IACE,CAAC,UACD,CAAC;EAAC;EAAY;EAAW;EAAU;CAAa,CAAA,CAAE,SAAS,OAAO,MAAM,KACxE,OAAO,4BAA4B,SACnC,OAAO,0BAA0B,QAAQ,yBACzC,CAAC,OAAO,YACR,OAAO,QAAQ,QAAQ,QAAQ,CAAA,CAAE,MAC9B,CAAC,KAAK,WACL,OAAO,SAAS,SAAyC,KAC7D,KACA,OAAO,OAAO,cAAc,aAC5B,CAAC,MAAM,QAAQ,OAAO,YAAY,KAClC,OAAO,aAAa,MACjB,eACC,CAAC,cACD,OAAO,WAAW,eAAe,aACjC,OAAO,WAAW,UAAU,aAC5B,CAAC;EAAC;EAAU;EAAQ;CAAM,CAAA,CAAE,SAAS,WAAW,QAAQ,KACxD,CAAC,CAAC,WAAW,UAAU,CAAA,CAAE,SAAS,WAAW,UAAU,KACvD,CAAC,CAAC,WAAW,UAAU,CAAA,CAAE,SAAS,WAAW,KAAK,CACtD,KACA,CAAC,OAAO,UACR,OAAO,QAAQ,QAAQ,MAAM,CAAA,CAAE,MAC5B,CAAC,KAAK,WACL,OAAO,OAAO,SAAuC,KACzD,KACA,CAAC,MAAM,QAAQ,OAAO,QAAQ,KAC9B,CAAC,MAAM,QAAQ,OAAO,MAAM,KAC5B,CAAC,MAAM,QAAQ,OAAO,OAAO,KAC5B,OAAO,WAAW,eAChB,OAAO,aACN,OAAO,OAAO,SAAS,KACvB,OAAO,QAAQ,SAAS,MAC5B,OAAO,QAAQ,MAAM,UAAU,CAAC,SAAS,KAAK,CAAC,KAC/C,OAAO,SAAS,MACb,YACC,OAAO,QAAQ,SAAS,YACxB,CAAC,SAAS,QAAQ,QAAQ,KAC1B,QAAQ,SAAS,SAAS,WACzB,QAAQ,YAAY,aAAa,oBAC/B,QAAQ,eAAe,QAAQ,QAAQ,UAAU,SACpD,CAAC,QAAQ,cACT;EACE,QAAQ,WAAW;EACnB,QAAQ,WAAW;EACnB,QAAQ,WAAW;CACrB,CAAA,CAAE,MAAM,UAAU,OAAO,UAAU,YAAY,CAAC,KAAK,KACpD,QAAQ,eAAe,SACrB,CAAC,QAAQ,cACR,CAAC,QAAQ,QAAQ,WAAW,KAAK,KACjC,QAAQ,WAAW,QAAQ,KAC3B,QAAQ,WAAW,UAAU,SAC7B,QAAQ,WAAW,gBAAgB,cACtC,QAAQ,UAAU,SAChB,CAAC,MAAM,QAAQ,QAAQ,KAAK,KAC3B,QAAQ,MAAM,MACX,QACC,OAAO,IAAI,SAAS,YACpB,CAAC;EAAC,IAAI;EAAG,IAAI;EAAG,IAAI;EAAO,IAAI;CAAM,CAAA,CAAE,MAAM,OAAO,CACxD,EACR,KACA,OAAO,OAAO,MACX,UACC,CAAC;EACC;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CACF,CAAA,CAAE,SAAS,MAAM,QAAQ,KAAK,CAAC,SAAS,MAAM,QAAQ,CAC1D,KACA,CAAC,OAAO,SACR,OAAO,OAAO,OAAO,KAAK,CAAA,CAAE,MAAM,UAAU,CAAC,QAAQ,KAAK,CAAC,GAE3D,MAAM,IAAI,MAAM,2BAA2B;CAE7C,KAAA,MAAW,WAAW,OAAO,UAC3B,QAAQ,aAAa,iBAAiB,QAAQ,UAAU;CAC1D,OAAO,eAAe,OAAO,aAAa,KAAK,gBAAgB;EAC7D,GAAG,iBAAiB,UAAU;EAC9B,YAAY,WAAW;EACvB,OAAO,WAAW;EAClB,UAAU,WAAW;EACrB,YAAY,WAAW;EACvB,OAAO,WAAW;CACpB,EAAE;AACJ;AAIA,eAAsB,gBACpB,SACA,OACA,SACA,SAIkB;CAClB,MAAM,WAAW,MAAM,QAAQ,iBAAiB,KAAK;CACrD,MAAM,YAAY,SAAS,cAAc;CAGzC,IACE,CAAC,aACD,UAAU,0BAA0B,QAAQ,yBAC5C,CAAC,UAAU,UACX,OAAO,KAAK,QAAQ,MAAM,CAAA,CAAE,MACzB,QACC,UAAU,SAAS,SACnB,QAAQ,OAAO,IACnB,KACA,OAAO,KAAK,UAAU,MAAM,CAAA,CAAE,WAAW,OAAO,KAAK,QAAQ,MAAM,CAAA,CAAE,QAErE,MAAM,IAAI,MAAM,mCAAmC;CACrD,MAAM,WAAW,SAAS;CAC1B,MAAM,eAAe;EAAE,GAAG;EAAS,QAAQ,gBAAgB,QAAQ,MAAM;CAAE;CAC3E,MAAM,UAA8B,CAAC;CACrC,IAAI,UAAU;CACd,MAAM,eAAe,UAAU,UAA0B;EACvD,MAAM,cACJ,CAAC,WACD,QAAQ,WAAW,SAAS,UAC5B,QAAQ,OAAO,WAAW,OAAO,WAAW,UAAU;EACxD,MAAM,aACJ,WAAW,UACP,UACA,QAAQ,SAAS,WAAW,OAAO,MAAM,CAAA,CAAE,EAAC,EAAG;EACrD,OAAO;GACL,QAAQ,UACJ,oBACA,cACE,cACA,QAAQ,MAAM,WAAW,OAAO,SAAS,MAAM,IAC7C,YACA;GACR,UAAU;GACV,OAAO;GACP,SAAS;GACT,QAAQ;IACN,uBAAuB,QAAQ;IAC/B;IACA,GAAI,WAAW,UACX;KACE,WAAW;KACX,sBAAsB,SAAS,SAAS,QAAQ;IAClD,IACA,CAAC;GACP;GACA,OAAO,CAAC;GACR,GAAI,aAAa,EAAE,OAAO,WAAW,IAAI,CAAC;EAC5C;CACF;CAEA,MAAM,QAAQ,WACZ,OAAO,WAAW,KAAK,UAAU,MAAM,CAAC,KAAK,SAAS;CACxD,MAAM,UAA0B;EAC9B,QAAQ;EACR,UAAU;EACV,OAAO;EACP,SAAS;EACT,QAAQ,CAAC;EACT,OAAO,CAAC;EACR,OAAO;CACT;CACA,IAAI,CAAC,KAAK,OAAO,GAAG,OAAO,QAAQ,aAAa,OAAO,OAAO;CAC9D,IAAI,CAAC,KAAK,YAAY,IAAI,CAAC,GAAG,OAAO,QAAQ,iBAAiB,OAAO,OAAO;CAC5E,KAAA,MAAW,QAAQ,UAAU;EAC3B,MAAM,QAAQ,iBAAiB,KAAK;EACpC,MAAM,QAAQ,MAAM,QAAQ,aAAa,MAAM,QAAQ,KAAK,EAAE;EAC9D,MAAM,QAAQ,iBAAiB,KAAK;EACpC,MAAM,UAAU;GAAE,GAAG;GAAc,UAAU;GAAM;EAAM;EACzD,MAAM,SAAS,MAAM,QAAQ,QAAQ;GACnC,GAAG;GACH,UAAU,EAAE,GAAG,KAAK;GACpB,QAAQ,EAAE,GAAG,QAAQ,OAAO;GAC5B,OAAO,MAAM,MAAM;GACnB,oBAAoB,YAAY;IAC9B,MAAM,QAAQ,iBAAiB,KAAK;GACtC;EACF,CAAC;EACD,qCAAqC,QAAQ,OAAO;EACpD,QAAQ,KAAK,MAAM;EACnB,IAAI,CAAC,KAAK,YAAY,IAAI,CAAC,GAAG;GAC5B,UAAU;GAEV,OAAO,SAAS;GAChB,OAAO,YAAY;GACnB,OAAO,OAAO,KAAK;IAAE,UAAU;IAAS,UAAU,EAAE,MAAM,SAAS;GAAE,CAAC;GACtE,OAAO,OAAO,SAAS,UAAU,CAAC,KAAK,YAAY,IAAI,CAAC,GAAG;IACzD,MAAM,UAAU,OAAO,SAAS,IAAI;IACpC,IAAI,SAAS,OAAO,QAAQ,KAAK,QAAQ,QAAQ;GACnD;GAEA,IAAI,CAAC,KAAK,YAAY,IAAI,CAAC,GAAG,QAAQ,IAAI;EAC5C;EAEA,MAAM,QAAQ,iBAAiB,KAAK;EACpC,IAAI,WAAW,QAAQ,QAAQ,SAAS;CAC1C;CACA,OAAO,QAAQ,iBAAiB,OAAO,YAAY,CAAC;AACtD;AAGO,SAAS,sBACd,QACA,UACA,QACA;CACA,IAAI,CAAC,OAAO,cAAc,QAAQ,KAAK,WAAW,KAAK,CAAC,OAAO,QAC7D,MAAM,IAAI,MAAM,wBAAwB;CAC1C,MAAM,YAAY,IAAI,IACpB,OAAO,SAAS,SAAS,YACvB,QAAQ,SAAS,SAAS,SAAS,CAAC,QAAQ,SAAS,IAAI,IAAI,CAAC,CAChE,CACF;CACA,MAAM,uBAAO,IAAI,IAAY;CAC7B,KAAA,MAAW,SAAS,QAAQ;EAC1B,IAAI,CAAC,MAAM,QAAQ,MAAM,IAAI,MAAM,aAAa;EAChD,KAAA,MAAW,QAAQ,OAAO;GACxB,IAAI,CAAC,OAAO,cAAc,IAAI,KAAK,CAAC,UAAU,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,GACtE,MAAM,IAAI,MAAM,oBAAoB;GACtC,KAAK,IAAI,IAAI;EACf;EACA,IAAI,MAAM,MAAM,MAAM,UAAU,QAAQ,KAAK,QAAQ,MAAM,QAAQ,EAAE,GACnE,MAAM,IAAI,MAAM,iBAAiB;CACrC;CACA,MAAM,WAAW;EACf;EACA,YAAY,OAAO,SAAS;EAC5B,WAAW,OAAO,SAAS;EAC3B,uBAAuB,OAAO;EAC9B,QAAQ,OAAO,KAAK,WAAW,EAAE,OAAO,CAAC,GAAG,KAAK,EAAE,EAAE;EACrD,QAAQ;CACV;CACA,OAAO;EACL,GAAG;EACH,QAAQ,WAAW,QAAQ,CAAA,CAAE,OAAO,KAAK,UAAU,QAAQ,CAAC,CAAA,CAAE,OAAO,KAAK;CAC5E;AACF;;;ACxdO,SAAS,qBACd,QACM;CACN,IACE,CAAC,UACD;EACE;EACA;EACA;EACA;EACA;EACA;EACA;CACF,CAAA,CAAE,MACC,QACC,CAAC,OAAO,cAAc,OAAO,IAA2B,KACxD,OAAO,QAA+B,CAC1C,KACA,OAAO,cAAc,MACrB,OAAO,gBAAgB,MACvB,OAAO,iBAAiB,MACxB,OAAO,YAAY,YAEnB,MAAM,IAAI,MAAM,yBAAyB;AAC7C;;;ACiFO,SAAS,0BACd,QAC2B;CAC3B,MAAM,YAAY,iBAChB,cAAc,OAAO,YACjB,OAAO,UAAU,WACjB,OAAO,SACb;CACA,OAAO;EACL,SAAS,OAAO;EAChB,eAAe,OAAO;EACtB;EACA,GAAI,OAAO,WACP,EACE,UAAU,iBACR,cAAc,OAAO,WACjB,OAAO,SAAS,WAChB,OAAO,QACb,EACF,IACA,CAAC;EACL,GAAI,OAAO,+BAA+B,KAAA,IACtC,CAAC,IACD,EAAE,4BAA4B,OAAO,2BAA2B;EACpE,GAAI,OAAO,cAAc,KAAA,IAAY,CAAC,IAAI,EAAE,WAAW,OAAO,UAAU;EACxE,GAAI,OAAO,mBAAmB,KAAA,IAC1B,CAAC,IACD,EAAE,gBAAgB,OAAO,eAAe;EAC5C,GAAI,OAAO,sBAAsB,KAAA,IAC7B,CAAC,IACD,EAAE,mBAAmB,OAAO,kBAAkB;EAClD,QAAQ;GACN,aAAa,OAAO,OAAO;GAC3B,eAAe,OAAO,OAAO;GAC7B,gBAAgB,OAAO,OAAO;GAC9B,eAAe,OAAO,OAAO;GAC7B,gBAAgB,OAAO,OAAO;GAC9B,gBAAgB,OAAO,OAAO;GAC9B,WAAW,OAAO,OAAO;EAC3B;CACF;AACF"}

package/dist/chunks/reviewer-instruction-CEc3AOuU.js

@@ -0,0 +1,33 @@
+import { i as intakeBindingDigest } from "./execution-BzVQax0n.js";
+//#region src/reviewer-instruction.ts
+var REVIEWER_INSTRUCTION_MAX_LENGTH = 4e3;
+var ReviewerInstructionInvalidError = class extends Error {
+	constructor() {
+		super("Invalid reviewer instruction");
+		this.name = "ReviewerInstructionInvalidError";
+	}
+};
+var ReviewerInstructionStaleError = class extends Error {
+	constructor() {
+		super("Stale reviewer instruction");
+		this.name = "ReviewerInstructionStaleError";
+	}
+};
+function reviewerInstructionView(value) {
+	const parsed = typeof value === "string" ? JSON.parse(value) : value;
+	if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) throw new Error("Reviewer instruction integrity");
+	const { digest: stored, ...body } = parsed;
+	if (body.kind !== "reviewer_instruction" || typeof stored !== "string" || typeof body.id !== "string" || typeof body.text !== "string" || typeof body.actorId !== "string" || typeof body.recordedAt !== "string" || body.supersedesId !== null && typeof body.supersedesId !== "string" || intakeBindingDigest(body) !== stored) throw new Error("Reviewer instruction integrity");
+	return {
+		id: body.id,
+		text: body.text,
+		actorId: body.actorId,
+		recordedAt: body.recordedAt,
+		supersedesId: body.supersedesId,
+		digest: stored
+	};
+}
+//#endregion
+export { reviewerInstructionView as i, ReviewerInstructionInvalidError as n, ReviewerInstructionStaleError as r, REVIEWER_INSTRUCTION_MAX_LENGTH as t };
+
+//# sourceMappingURL=reviewer-instruction-CEc3AOuU.js.map

package/dist/chunks/reviewer-instruction-CEc3AOuU.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reviewer-instruction-CEc3AOuU.js","names":[],"sources":["../../src/reviewer-instruction.ts"],"sourcesContent":["/** Shared server-side projection of the persisted reviewer instruction record. */\nimport { intakeBindingDigest as digest } from './execution.js';\nimport type { ReviewerInstruction } from './review-dto.js';\n\n/** Reviewer instruction text ceiling; the prompt input budget still applies. */\nexport const REVIEWER_INSTRUCTION_MAX_LENGTH = 4000;\n\n/**\n * Instruction text is empty, whitespace-only or longer than the ceiling. Hosts\n * surface it inline as a validation result, never as an access denial.\n */\nexport class ReviewerInstructionInvalidError extends Error {\n  constructor() {\n    super('Invalid reviewer instruction');\n    this.name = 'ReviewerInstructionInvalidError';\n  }\n}\n\n/**\n * The anchor generation is superseded or a reinterpretation is still in flight.\n * Hosts surface it as a refresh-and-retry signal, never as an access denial.\n */\nexport class ReviewerInstructionStaleError extends Error {\n  constructor() {\n    super('Stale reviewer instruction');\n    this.name = 'ReviewerInstructionStaleError';\n  }\n}\n\n/** Verify the record's own digest and project its browser-safe shape. */\nexport function reviewerInstructionView(value: unknown): ReviewerInstruction {\n  const parsed: unknown = typeof value === 'string' ? JSON.parse(value) : value;\n  if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed))\n    throw new Error('Reviewer instruction integrity');\n  const { digest: stored, ...body } = parsed as Record<string, unknown>;\n  if (\n    body.kind !== 'reviewer_instruction' ||\n    typeof stored !== 'string' ||\n    typeof body.id !== 'string' ||\n    typeof body.text !== 'string' ||\n    typeof body.actorId !== 'string' ||\n    typeof body.recordedAt !== 'string' ||\n    (body.supersedesId !== null && typeof body.supersedesId !== 'string') ||\n    digest(body) !== stored\n  )\n    throw new Error('Reviewer instruction integrity');\n  return {\n    id: body.id,\n    text: body.text,\n    actorId: body.actorId,\n    recordedAt: body.recordedAt,\n    supersedesId: body.supersedesId,\n    digest: stored,\n  };\n}\n"],"mappings":";;AAKO,IAAM,kCAAkC;AAMxC,IAAM,kCAAN,cAA8C,MAAM;CACzD,cAAc;EACZ,MAAM,8BAA8B;EACpC,KAAK,OAAO;CACd;AACF;AAMO,IAAM,gCAAN,cAA4C,MAAM;CACvD,cAAc;EACZ,MAAM,4BAA4B;EAClC,KAAK,OAAO;CACd;AACF;AAGO,SAAS,wBAAwB,OAAqC;CAC3E,MAAM,SAAkB,OAAO,UAAU,WAAW,KAAK,MAAM,KAAK,IAAI;CACxE,IAAI,CAAC,UAAU,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM,GAC/D,MAAM,IAAI,MAAM,gCAAgC;CAClD,MAAM,EAAE,QAAQ,QAAQ,GAAG,SAAS;CACpC,IACE,KAAK,SAAS,0BACd,OAAO,WAAW,YAClB,OAAO,KAAK,OAAO,YACnB,OAAO,KAAK,SAAS,YACrB,OAAO,KAAK,YAAY,YACxB,OAAO,KAAK,eAAe,YAC1B,KAAK,iBAAiB,QAAQ,OAAO,KAAK,iBAAiB,YAC5D,oBAAO,IAAI,MAAM,QAEjB,MAAM,IAAI,MAAM,gCAAgC;CAClD,OAAO;EACL,IAAI,KAAK;EACT,MAAM,KAAK;EACX,SAAS,KAAK;EACd,YAAY,KAAK;EACjB,cAAc,KAAK;EACnB,QAAQ;CACV;AACF"}

package/dist/dto.d.ts

@@ -19,6 +19,25 @@ export interface IntakeItemDTO {
     analysisRevision: number;
     cancelled: boolean;
     traceId: string;
+    /**
+     * Present once a reviewer closed the item without an action; terminal. Item
+     * readers see only the state and time; the reviewer and reason are returned
+     * by review surfaces (`getItemDisposition`, `ItemReviewView.disposition`).
+     */
+    disposition?: ItemDispositionState;
+}
+/** Item-level projection of a terminal disposition; carries no reviewer content. */
+export interface ItemDispositionState {
+    state: 'resolved';
+    /** When the disposition was recorded (ISO 8601). */
+    at: string;
+}
+/** Reviewer-owned terminal disposition; redaction keeps only the kind. */
+export interface ItemDisposition {
+    kind: 'resolved_no_action';
+    reviewer: string;
+    reason: string;
+    decidedAt: string;
 }
 /** Authorized evidence metadata; bytes are served by the service separately. */
 export interface IntakeEvidenceDTO {
@@ -28,6 +47,12 @@ export interface IntakeEvidenceDTO {
     mediaType: string;
     contentHash: string;
     byteLength: number;
+    /**
+     * Original name supplied by the source (upload, attachment, folder), with
+     * control, bidi and zero-width characters removed. Still untrusted text:
+     * render it as text, never as markup or a path.
+     */
+    filename?: string;
 }
 /** Explicit resource limits captured with each receipt. */
 export interface IntakeLimits {
@@ -50,6 +75,56 @@ export interface AnalysisOutput {
     error?: IntakeFailure;
     confidence?: number;
 }
+/** Host-selected extraction settings for an inline receipt; the same shape
+ * the job path persists in its `stage: 'extract'` configuration. */
+export interface InlineInterpretationInput {
+    /** Stable per receipt: retries replay the same immutable revisions. */
+    requestId: string;
+    extraction: {
+        configurationRevision: string;
+        limits: {
+            maxBytes: number;
+            maxPages: number;
+            maxPixels: number;
+            maxOutputBytes: number;
+            timeoutMs: number;
+            maxTokens: number;
+            workerHeapMb: number;
+        };
+    };
+}
+/** Terminal projection of one in-process stage; identical ledger semantics to a job. */
+export interface InlineStageResult {
+    analysisId: string;
+    revision: number;
+    attemptId: string;
+    state: 'completed' | 'partial' | 'needs_attention' | 'failed';
+    error: IntakeFailure | null;
+}
+export interface InlineInterpretation {
+    itemId: string;
+    extraction: InlineStageResult;
+    /** Absent when extraction did not complete or partially complete. */
+    generation?: InlineStageResult;
+    /** The authorized, catalog-live generation snapshot when generation completed. */
+    analysis?: import('./proposal-dto.js').CompletedAnalysisSnapshot;
+}
+/** Bounded own-submission listing; the cursor is an opaque item identifier. */
+export interface OwnProposalsInput {
+    cursor?: string;
+    limit?: number;
+}
+export interface OwnProposalsPage {
+    items: Array<{
+        item: IntakeItemDTO;
+        /** Null when the readable submission's reviews are denied; unreadable
+         * submissions are omitted from the page entirely. */
+        reviews: import('./review-dto.js').ReviewPage | null;
+        /** Set without a reason: nothing about the denied target is disclosed. */
+        unavailable?: true;
+    }>;
+    nextCursor?: string;
+}
 export type * from './feedback-dto.js';
 export type * from './proposal-dto.js';
 export type * from './review-dto.js';

package/dist/dto.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dto.d.ts","sourceRoot":"","sources":["../src/dto.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,YAAY,EACZ,gBAAgB,EAChB,YAAY,EACZ,UAAU,EACV,gBAAgB,EAChB,oBAAoB,EACpB,cAAc,EACd,eAAe,EACf,WAAW,GACZ,MAAM,oBAAoB,CAAC;AAE5B,oFAAoF;AACpF,MAAM,MAAM,aAAa,GACrB;IAAE,IAAI,EAAE,UAAU,GAAG,WAAW,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE,GAC1E;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,MAAM,GAAG,aAAa,CAAA;CAAE,GACnD;IACE,IAAI,EAAE,UAAU,CAAC;IACjB,QAAQ,EAAE,UAAU,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,CAAC;CACxD,CAAC;AAEN,kCAAkC;AAClC,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,gFAAgF;AAChF,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,2DAA2D;AAC3D,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,iFAAiF;AACjF,MAAM,MAAM,aAAa,GACrB,kBAAkB,GAClB,kBAAkB,GAClB,OAAO,GACP,SAAS,GACT,aAAa,GACb,gBAAgB,GAChB,WAAW,GACX,WAAW,CAAC;AAEhB,8EAA8E;AAC9E,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,WAAW,GAAG,SAAS,GAAG,QAAQ,GAAG,iBAAiB,CAAC;IAC/D,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,mBAAmB,mBAAmB,CAAC;AACvC,mBAAmB,mBAAmB,CAAC;AACvC,mBAAmB,iBAAiB,CAAC"}
+{"version":3,"file":"dto.d.ts","sourceRoot":"","sources":["../src/dto.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,YAAY,EACZ,gBAAgB,EAChB,YAAY,EACZ,UAAU,EACV,gBAAgB,EAChB,oBAAoB,EACpB,cAAc,EACd,eAAe,EACf,WAAW,GACZ,MAAM,oBAAoB,CAAC;AAE5B,oFAAoF;AACpF,MAAM,MAAM,aAAa,GACrB;IAAE,IAAI,EAAE,UAAU,GAAG,WAAW,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE,GAC1E;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,MAAM,GAAG,aAAa,CAAA;CAAE,GACnD;IACE,IAAI,EAAE,UAAU,CAAC;IACjB,QAAQ,EAAE,UAAU,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,CAAC;CACxD,CAAC;AAEN,kCAAkC;AAClC,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,WAAW,CAAC,EAAE,oBAAoB,CAAC;CACpC;AAED,oFAAoF;AACpF,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,UAAU,CAAC;IAClB,oDAAoD;IACpD,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,0EAA0E;AAC1E,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,oBAAoB,CAAC;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,gFAAgF;AAChF,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,2DAA2D;AAC3D,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,iFAAiF;AACjF,MAAM,MAAM,aAAa,GACrB,kBAAkB,GAClB,kBAAkB,GAClB,OAAO,GACP,SAAS,GACT,aAAa,GACb,gBAAgB,GAChB,WAAW,GACX,WAAW,CAAC;AAEhB,8EAA8E;AAC9E,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,WAAW,GAAG,SAAS,GAAG,QAAQ,GAAG,iBAAiB,CAAC;IAC/D,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;oEACoE;AACpE,MAAM,WAAW,yBAAyB;IACxC,uEAAuE;IACvE,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE;QACV,qBAAqB,EAAE,MAAM,CAAC;QAC9B,MAAM,EAAE;YACN,QAAQ,EAAE,MAAM,CAAC;YACjB,QAAQ,EAAE,MAAM,CAAC;YACjB,SAAS,EAAE,MAAM,CAAC;YAClB,cAAc,EAAE,MAAM,CAAC;YACvB,SAAS,EAAE,MAAM,CAAC;YAClB,SAAS,EAAE,MAAM,CAAC;YAClB,YAAY,EAAE,MAAM,CAAC;SACtB,CAAC;KACH,CAAC;CACH;AACD,wFAAwF;AACxF,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,WAAW,GAAG,SAAS,GAAG,iBAAiB,GAAG,QAAQ,CAAC;IAC9D,KAAK,EAAE,aAAa,GAAG,IAAI,CAAC;CAC7B;AACD,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,iBAAiB,CAAC;IAC9B,qEAAqE;IACrE,UAAU,CAAC,EAAE,iBAAiB,CAAC;IAC/B,kFAAkF;IAClF,QAAQ,CAAC,EAAE,OAAO,mBAAmB,EAAE,yBAAyB,CAAC;CAClE;AACD,+EAA+E;AAC/E,MAAM,WAAW,iBAAiB;IAChC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AACD,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,KAAK,CAAC;QACX,IAAI,EAAE,aAAa,CAAC;QACpB;6DACqD;QACrD,OAAO,EAAE,OAAO,iBAAiB,EAAE,UAAU,GAAG,IAAI,CAAC;QACrD,0EAA0E;QAC1E,WAAW,CAAC,EAAE,IAAI,CAAC;KACpB,CAAC,CAAC;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,mBAAmB,mBAAmB,CAAC;AACvC,mBAAmB,mBAAmB,CAAC;AACvC,mBAAmB,iBAAiB,CAAC"}

package/dist/execution-contracts.d.ts

@@ -86,7 +86,8 @@ export interface ExecutionAccessInput {
     scope: Readonly<IngestionScope>;
     itemId: string;
     capturedCeiling: Readonly<ExecutionCeiling>;
-    operation: 'preview' | 'review' | 'execute' | 'read' | 'reconcile';
+    /** `review_own`: the recorded submitter decides their own proposal. */
+    operation: 'preview' | 'review' | 'review_own' | 'execute' | 'read' | 'reconcile';
     handlerId: string;
 }
 /** Every callback is server configuration. It must never be deserialized from input. */
@@ -96,6 +97,8 @@ export interface IntakeExecutionOptions {
     authorize(input: ExecutionAccessInput): Promise<{
         allowed: boolean;
         reviewer: boolean;
+        /** Live grant for `review_own`; absent or false denies submitter decisions. */
+        submitter?: boolean;
         principalId: string;
         permissions: string[];
         policy: [

package/dist/execution-contracts.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"execution-contracts.d.ts","sourceRoot":"","sources":["../src/execution-contracts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC/D,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AACvE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,KAAK,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACzE,OAAO,KAAK,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACnE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAElD,mBAAmB,oBAAoB,CAAC;AACxC,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,iBAAiB,CAAC;IACtB,KAAK,EAAE,QAAQ,CAAC,cAAc,CAAC,CAAC;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,YAAY,CAAC;IACzB,MAAM,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAC;IAC/B,oFAAoF;IACpF,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3E;AACD,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,YAAY,CAAC;IACtB,cAAc,EAAE,YAAY,CAAC;IAC7B,mBAAmB,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC7E;AACD,UAAU,WAAW;IACnB,gFAAgF;IAChF,SAAS,CAAC,EAAE,gBAAgB,CAAC;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,YAAY,CAAC;IACzB,YAAY,EAAE,YAAY,CAAC;IAC3B,8EAA8E;IAC9E,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,OAAO,CAAC,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAC9E,QAAQ,CACN,IAAI,EAAE,YAAY,EAClB,OAAO,EAAE,cAAc,GACtB,OAAO,CAAC;QAAE,EAAE,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CAC7B;AACD,MAAM,WAAW,gBAAiB,SAAQ,WAAW;IACnD,SAAS,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9D,kFAAkF;IAClF,UAAU,EAAE,qBAAqB,CAAC;IAClC,SAAS,EACL;QACE,IAAI,EAAE,UAAU,CAAC;QACjB,KAAK,CACH,IAAI,EAAE,YAAY,EAClB,OAAO,EAAE,cAAc,GACtB,OAAO,CAAC,YAAY,CAAC,CAAC;KAC1B,GACD;QACE,IAAI,EAAE,UAAU,CAAC;QACjB,MAAM,CACJ,IAAI,EAAE,YAAY,EAClB,OAAO,EAAE,cAAc,EACvB,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,YAAY,CAAC,CAAC;QACzB,SAAS,CACP,OAAO,EAAE,cAAc,EACvB,cAAc,EAAE,MAAM,GACrB,OAAO,CACN;YAAE,IAAI,EAAE,WAAW,CAAC;YAAC,MAAM,EAAE,YAAY,CAAA;SAAE,GAC3C;YAAE,IAAI,EAAE,aAAa,CAAA;SAAE,GACvB;YAAE,IAAI,EAAE,SAAS,CAAA;SAAE,CACtB,CAAC;KACH,CAAC;CACP;AACD,MAAM,WAAW,WAAY,SAAQ,WAAW;IAC9C,SAAS,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3D,MAAM,CACJ,IAAI,EAAE,YAAY,EAClB,UAAU,EAAE,OAAO,GAClB,OAAO,CACR,KAAK,CAAC;QACJ,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;QAClB,cAAc,EAAE,MAAM,CAAC;QACvB,IAAI,EAAE,YAAY,CAAC;QACnB,cAAc,EAAE,MAAM,CACpB,MAAM,EACN;YAAE,SAAS,EAAE,MAAM,CAAC;YAAC,WAAW,EAAE,MAAM,CAAC;YAAC,aAAa,EAAE,MAAM,CAAA;SAAE,CAClE,CAAC;KACH,CAAC,CACH,CAAC;CACH;AACD,MAAM,MAAM,aAAa,GAAG,gBAAgB,GAAG,WAAW,CAAC;AAC3D,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,iBAAiB,CAAC;IACtB,KAAK,EAAE,QAAQ,CAAC,cAAc,CAAC,CAAC;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,QAAQ,CAAC,gBAAgB,CAAC,CAAC;IAC5C,SAAS,EAAE,SAAS,GAAG,QAAQ,GAAG,SAAS,GAAG,MAAM,GAAG,WAAW,CAAC;IACnE,SAAS,EAAE,MAAM,CAAC;CACnB;AACD,wFAAwF;AACxF,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,SAAS,aAAa,EAAE,CAAC;IACnC,mEAAmE;IACnE,SAAS,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC;QAC9C,OAAO,EAAE,OAAO,CAAC;QACjB,QAAQ,EAAE,OAAO,CAAC;QAClB,WAAW,EAAE,MAAM,CAAC;QACpB,WAAW,EAAE,MAAM,EAAE,CAAC;QACtB,MAAM,EAAE;YACN,iBAAiB;YACjB,iBAAiB;YACjB,iBAAiB;YACjB,GAAG,iBAAiB,EAAE;SACvB,CAAC;QACF,+EAA+E;QAC/E,gBAAgB,EAAE,YAAY,CAAC;KAChC,CAAC,CAAC;IACH,iBAAiB,CAAC,CAAC,KAAK,EAAE;QACxB,WAAW,EAAE,MAAM,CAAC;QACpB,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,EAAE,cAAc,CAAC;KACzB,GAAG,OAAO,CAAC;QACV,QAAQ,EAAE,OAAO,CAAC;QAClB,iBAAiB,EAAE,MAAM,CAAC;QAC1B,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC,CAAC;IACH,yFAAyF;IACzF,YAAY,CAAC,KAAK,EAAE;QAClB,EAAE,EAAE,iBAAiB,CAAC;QACtB,KAAK,EAAE,QAAQ,CAAC,cAAc,CAAC,CAAC;QAChC,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,EAAE,MAAM,CAAC;QACd,EAAE,EAAE,MAAM,CAAC;QACX,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACnC"}
+{"version":3,"file":"execution-contracts.d.ts","sourceRoot":"","sources":["../src/execution-contracts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC/D,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AACvE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,KAAK,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACzE,OAAO,KAAK,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACnE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAElD,mBAAmB,oBAAoB,CAAC;AACxC,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,iBAAiB,CAAC;IACtB,KAAK,EAAE,QAAQ,CAAC,cAAc,CAAC,CAAC;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,YAAY,CAAC;IACzB,MAAM,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAC;IAC/B,oFAAoF;IACpF,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3E;AACD,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,YAAY,CAAC;IACtB,cAAc,EAAE,YAAY,CAAC;IAC7B,mBAAmB,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC7E;AACD,UAAU,WAAW;IACnB,gFAAgF;IAChF,SAAS,CAAC,EAAE,gBAAgB,CAAC;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,YAAY,CAAC;IACzB,YAAY,EAAE,YAAY,CAAC;IAC3B,8EAA8E;IAC9E,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,OAAO,CAAC,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAC9E,QAAQ,CACN,IAAI,EAAE,YAAY,EAClB,OAAO,EAAE,cAAc,GACtB,OAAO,CAAC;QAAE,EAAE,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CAC7B;AACD,MAAM,WAAW,gBAAiB,SAAQ,WAAW;IACnD,SAAS,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9D,kFAAkF;IAClF,UAAU,EAAE,qBAAqB,CAAC;IAClC,SAAS,EACL;QACE,IAAI,EAAE,UAAU,CAAC;QACjB,KAAK,CACH,IAAI,EAAE,YAAY,EAClB,OAAO,EAAE,cAAc,GACtB,OAAO,CAAC,YAAY,CAAC,CAAC;KAC1B,GACD;QACE,IAAI,EAAE,UAAU,CAAC;QACjB,MAAM,CACJ,IAAI,EAAE,YAAY,EAClB,OAAO,EAAE,cAAc,EACvB,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,YAAY,CAAC,CAAC;QACzB,SAAS,CACP,OAAO,EAAE,cAAc,EACvB,cAAc,EAAE,MAAM,GACrB,OAAO,CACN;YAAE,IAAI,EAAE,WAAW,CAAC;YAAC,MAAM,EAAE,YAAY,CAAA;SAAE,GAC3C;YAAE,IAAI,EAAE,aAAa,CAAA;SAAE,GACvB;YAAE,IAAI,EAAE,SAAS,CAAA;SAAE,CACtB,CAAC;KACH,CAAC;CACP;AACD,MAAM,WAAW,WAAY,SAAQ,WAAW;IAC9C,SAAS,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3D,MAAM,CACJ,IAAI,EAAE,YAAY,EAClB,UAAU,EAAE,OAAO,GAClB,OAAO,CACR,KAAK,CAAC;QACJ,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;QAClB,cAAc,EAAE,MAAM,CAAC;QACvB,IAAI,EAAE,YAAY,CAAC;QACnB,cAAc,EAAE,MAAM,CACpB,MAAM,EACN;YAAE,SAAS,EAAE,MAAM,CAAC;YAAC,WAAW,EAAE,MAAM,CAAC;YAAC,aAAa,EAAE,MAAM,CAAA;SAAE,CAClE,CAAC;KACH,CAAC,CACH,CAAC;CACH;AACD,MAAM,MAAM,aAAa,GAAG,gBAAgB,GAAG,WAAW,CAAC;AAC3D,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,iBAAiB,CAAC;IACtB,KAAK,EAAE,QAAQ,CAAC,cAAc,CAAC,CAAC;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,QAAQ,CAAC,gBAAgB,CAAC,CAAC;IAC5C,uEAAuE;IACvE,SAAS,EACL,SAAS,GACT,QAAQ,GACR,YAAY,GACZ,SAAS,GACT,MAAM,GACN,WAAW,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB;AACD,wFAAwF;AACxF,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,SAAS,aAAa,EAAE,CAAC;IACnC,mEAAmE;IACnE,SAAS,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC;QAC9C,OAAO,EAAE,OAAO,CAAC;QACjB,QAAQ,EAAE,OAAO,CAAC;QAClB,+EAA+E;QAC/E,SAAS,CAAC,EAAE,OAAO,CAAC;QACpB,WAAW,EAAE,MAAM,CAAC;QACpB,WAAW,EAAE,MAAM,EAAE,CAAC;QACtB,MAAM,EAAE;YACN,iBAAiB;YACjB,iBAAiB;YACjB,iBAAiB;YACjB,GAAG,iBAAiB,EAAE;SACvB,CAAC;QACF,+EAA+E;QAC/E,gBAAgB,EAAE,YAAY,CAAC;KAChC,CAAC,CAAC;IACH,iBAAiB,CAAC,CAAC,KAAK,EAAE;QACxB,WAAW,EAAE,MAAM,CAAC;QACpB,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,EAAE,cAAc,CAAC;KACzB,GAAG,OAAO,CAAC;QACV,QAAQ,EAAE,OAAO,CAAC;QAClB,iBAAiB,EAAE,MAAM,CAAC;QAC1B,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC,CAAC;IACH,yFAAyF;IACzF,YAAY,CAAC,KAAK,EAAE;QAClB,EAAE,EAAE,iBAAiB,CAAC;QACtB,KAAK,EAAE,QAAQ,CAAC,cAAc,CAAC,CAAC;QAChC,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,EAAE,MAAM,CAAC;QACd,EAAE,EAAE,MAAM,CAAC;QACX,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACnC"}

package/dist/execution-dto.d.ts

@@ -43,6 +43,22 @@ export interface ReviewInput {
     reason?: string;
     correctedArgs?: IntakeValues;
 }
+/** Reviewer-chosen handler for any item; previewed and approved like a generated proposal. */
+export interface StartActionInput {
+    itemId: string;
+    handlerId: string;
+    handlerVersion: string;
+    args: IntakeValues;
+    requestId: string;
+    reason?: string;
+}
+/** Close an item as handled without an action; distinct from rejecting a proposal. */
+export interface ResolveItemInput {
+    itemId: string;
+    disposition: 'resolve_no_action';
+    requestId: string;
+    reason?: string;
+}
 export interface ActionResult {
     state: 'succeeded' | 'failed' | 'outcome_unknown' | 'executing' | 'waiting_review';
     actionId: string;

package/dist/execution-dto.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"execution-dto.d.ts","sourceRoot":"","sources":["../src/execution-dto.ts"],"names":[],"mappings":"AAAA,2FAA2F;AAC3F,MAAM,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AACnD,2EAA2E;AAC3E,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AACD,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,gBAAgB,EAAE,MAAM,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;CACvB;AACD,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,YAAY,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;CAChD;AACD,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,YAAY,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;CACf;AACD,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,gBAAgB,EAAE,MAAM,CAAC;IACzB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,SAAS,GAAG,QAAQ,GAAG,OAAO,GAAG,SAAS,CAAC;IACrD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,YAAY,CAAC;CAC9B;AACD,MAAM,WAAW,YAAY;IAC3B,KAAK,EACD,WAAW,GACX,QAAQ,GACR,iBAAiB,GACjB,WAAW,GACX,gBAAgB,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,YAAY,CAAC;CACpB;AACD,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,cAAc,EAAE,CAAC;CACzB"}
+{"version":3,"file":"execution-dto.d.ts","sourceRoot":"","sources":["../src/execution-dto.ts"],"names":[],"mappings":"AAAA,2FAA2F;AAC3F,MAAM,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AACnD,2EAA2E;AAC3E,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AACD,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,gBAAgB,EAAE,MAAM,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;CACvB;AACD,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,YAAY,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;CAChD;AACD,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,YAAY,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;CACf;AACD,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,gBAAgB,EAAE,MAAM,CAAC;IACzB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,SAAS,GAAG,QAAQ,GAAG,OAAO,GAAG,SAAS,CAAC;IACrD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,YAAY,CAAC;CAC9B;AACD,8FAA8F;AAC9F,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,YAAY,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AACD,sFAAsF;AACtF,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,mBAAmB,CAAC;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AACD,MAAM,WAAW,YAAY;IAC3B,KAAK,EACD,WAAW,GACX,QAAQ,GACR,iBAAiB,GACjB,WAAW,GACX,gBAAgB,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,YAAY,CAAC;CACpB;AACD,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,cAAc,EAAE,CAAC;CACzB"}

package/dist/execution-internal.d.ts

@@ -2,6 +2,8 @@ import type { DatabaseInterface } from '@happyvertical/sql';
 import type { HandlerContext } from './execution-contracts.js';
 export declare const discoveryTransaction: unique symbol;
 export declare const generationSnapshotRead: unique symbol;
+/** The read-only list gate the service applies per (item, handler); not public. */
+export declare const listReadGate: unique symbol;
 export type TransactionRunner<T> = (work: (db: DatabaseInterface) => Promise<T>) => Promise<T>;
 export type DiscoveryGate = <T>(handlerId: string, handlerVersion: string, work: (context: HandlerContext, currentTarget: (model: string, id: string) => Promise<{
     revision: string;

package/dist/execution-internal.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"execution-internal.d.ts","sourceRoot":"","sources":["../src/execution-internal.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAG/D,eAAO,MAAM,oBAAoB,eAA2C,CAAC;AAC7E,eAAO,MAAM,sBAAsB,eAElC,CAAC;AACF,MAAM,MAAM,iBAAiB,CAAC,CAAC,IAAI,CACjC,IAAI,EAAE,CAAC,EAAE,EAAE,iBAAiB,KAAK,OAAO,CAAC,CAAC,CAAC,KACxC,OAAO,CAAC,CAAC,CAAC,CAAC;AAChB,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,EAC5B,SAAS,EAAE,MAAM,EACjB,cAAc,EAAE,MAAM,EACtB,IAAI,EAAE,CACJ,OAAO,EAAE,cAAc,EACvB,aAAa,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,KACxE,OAAO,CAAC,CAAC,CAAC,KACZ,OAAO,CAAC,CAAC,CAAC,CAAC"}
+{"version":3,"file":"execution-internal.d.ts","sourceRoot":"","sources":["../src/execution-internal.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAG/D,eAAO,MAAM,oBAAoB,eAA2C,CAAC;AAC7E,eAAO,MAAM,sBAAsB,eAElC,CAAC;AACF,mFAAmF;AACnF,eAAO,MAAM,YAAY,eAAmC,CAAC;AAC7D,MAAM,MAAM,iBAAiB,CAAC,CAAC,IAAI,CACjC,IAAI,EAAE,CAAC,EAAE,EAAE,iBAAiB,KAAK,OAAO,CAAC,CAAC,CAAC,KACxC,OAAO,CAAC,CAAC,CAAC,CAAC;AAChB,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,EAC5B,SAAS,EAAE,MAAM,EACjB,cAAc,EAAE,MAAM,EACtB,IAAI,EAAE,CACJ,OAAO,EAAE,cAAc,EACvB,aAAa,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,KACxE,OAAO,CAAC,CAAC,CAAC,KACZ,OAAO,CAAC,CAAC,CAAC,CAAC"}

package/dist/execution.d.ts

@@ -1,13 +1,20 @@
 import type { JobExecutionContext } from '@happyvertical/smrt-jobs';
 import type { DatabaseInterface } from '@happyvertical/sql';
-import type { ActionResult, HandlerContext, IntakeExecutionOptions, PlanReview, PreviewPlanInput, PreviewProposalInput, ProposalReview, ReviewInput } from './execution-contracts.js';
-import { type DiscoveryGate, discoveryTransaction, type TransactionRunner } from './execution-internal.js';
+import type { ItemDisposition, OwnProposalsInput, OwnProposalsPage } from './dto.js';
+import type { ActionResult, HandlerContext, IntakeExecutionOptions, PlanReview, PreviewPlanInput, PreviewProposalInput, ProposalReview, ResolveItemInput, ReviewInput, StartActionInput } from './execution-contracts.js';
+import { type DiscoveryGate, discoveryTransaction, listReadGate, type TransactionRunner } from './execution-internal.js';
 import { type FeedbackActionContext, feedbackActionTransaction, feedbackDiscoveryContext } from './feedback-internal.js';
 import type { ReviewPage } from './review-dto.js';
 import type { IngestionOptions } from './server.js';
 export type * from './execution-contracts.js';
 export type { IntakePolicy, IntakePolicyLayer } from './policy.js';
 export { resolveIntakePolicy } from './policy.js';
+/** Uniform no-disclosure denial (missing, foreign, revoked or inactive).
+ * Integrity, validation and database errors are never this type. */
+export declare class IntakeAccessDeniedError extends Error {
+    constructor();
+}
+type Row = Record<string, unknown>;
 export declare function intakeBindingDigest(value: unknown): string;
 /** Server-only authoritative review/apply. Construct only from authenticated host options. */
 export declare class IntakeExecutionService {
@@ -30,7 +37,20 @@ export declare class IntakeExecutionService {
     private ceiling;
     private handler;
     private operation;
+    /**
+     * `arguments` marks arguments being previewed (operation preview, which
+     * also carries corrections, and plan preview): only their schema refusal is
+     * the correctable `HandlerArgumentsInvalidError`. Apply-time and
+     * external-send revalidation and result-schema checks keep the plain error.
+     */
     private validate;
+    /**
+     * The read-only half of `access`: current host authority, policy and
+     * ceiling allowlists and the retention deadline they imply. It writes
+     * nothing, so a listing may call it per (item, handler) without opening a
+     * transaction per row.
+     */
+    private authority;
     private access;
     private principal;
     /** Current discovery authority. Trusted callbacks use context.db for bounded reads. */
@@ -39,11 +59,40 @@ export declare class IntakeExecutionService {
     [discoveryTransaction]<T>(run: TransactionRunner<T>, itemId: string, work: (db: DatabaseInterface, authorize: DiscoveryGate) => Promise<T>, requireReview?: boolean): Promise<T>;
     private discoveryContext;
     private bound;
+    /**
+     * Read authority for one handler binding of a listed item, read-only. It
+     * applies the handler checks `listReviews` applies before projecting an
+     * action: the bound handler must resolve to a single operation whose
+     * operation and capability still match the saved binding (no version
+     * drift), and the execution read gate (host authority, policy and ceiling
+     * handler/operation allowlists, `policy.access`, principal) must pass, but
+     * without the retention write; an item past the deadline `access` would
+     * narrow to is not listable, and neither is a cancelled item, which
+     * `listReviews` refuses once it binds an action. Per-action target,
+     * evidence and plan gates are not evaluated here; `load` still enforces
+     * them. A refusal or any other failed check answers false and the list
+     * discloses nothing about why; a host `authorize` that throws propagates,
+     * as it does from `load`, so the page is rejected. Package-internal:
+     * reachable only through a symbol the service holds,
+     * so callers cannot hand it an unscoped row.
+     */
+    [listReadGate](item: Row, binding: {
+        handlerId: string;
+        handlerVersion: string;
+        operation: unknown;
+        capability: unknown;
+    }): Promise<boolean>;
     private review;
     /** Same-executor current review/evidence/target gate for the owning feedback ledger. */
     /** Join an existing owning transaction; its outer boundary restores retention after rollback. */
     [feedbackDiscoveryContext]<T>(db: DatabaseInterface | undefined, itemId: string, handlerId: string, handlerVersion: string, work: (context: HandlerContext) => Promise<T>, revalidate?: (context: HandlerContext) => Promise<void>): Promise<T>;
-    [feedbackActionTransaction]<T>(actionId: string, reviewer: boolean, work: (value: FeedbackActionContext) => Promise<T>, executor?: DatabaseInterface, requiredProviders?: string[], proposalId?: string): Promise<T>;
+    [feedbackActionTransaction]<T>(actionId: string, reviewer: boolean, work: (value: FeedbackActionContext) => Promise<T>, executor?: DatabaseInterface, requiredProviders?: string[], proposalId?: string, 
+    /**
+     * Compare target revisions (default). A lineage re-check of a reviewer
+     * routing choice passes false: its meaning is the handler choice, so later
+     * writes to the target only need the target to remain accessible.
+     */
+    targetRevisions?: boolean): Promise<T>;
     private feedbackLineage;
     getAction(actionId: string): Promise<ProposalReview>;
     /** Bounded reload discovery. The cursor is an opaque action ID, never authority. */
@@ -51,12 +100,23 @@ export declare class IntakeExecutionService {
         cursor?: string;
         limit?: number;
     }): Promise<ReviewPage>;
+    /**
+     * `reviewed` marks arguments a reviewer is previewing or correcting: only
+     * then is a refusal the typed `HandlerArgumentsInvalidError`. Apply-time
+     * verification and plan step expansion keep the plain error.
+     */
     private buildBinding;
     private publish;
     previewProposal(input: PreviewProposalInput): Promise<ProposalReview>;
+    /**
+     * A reviewer-selected action records a human routing choice: re-previewing it
+     * needs the reviewer grant (not just `preview`) and keeps its handler fixed,
+     * so only the arguments can be corrected.
+     */
+    private assertReviewerRevision;
     /** Capture owner facts in the same transaction; these are never correctness labels. */
     private feedbackEvent;
-    submitDecision(input: ReviewInput): Promise<ProposalReview>;
+    submitDecision(input: ReviewInput, mode?: 'review' | 'review_own'): Promise<ProposalReview>;
     private verifyEvidence;
     private approved;
     private arguments;
@@ -67,8 +127,45 @@ export declare class IntakeExecutionService {
     reconcileAction(actionId: string): Promise<ActionResult>;
     /** Machine authorization is separate provenance, never a fabricated human decision. */
     authorizeAutomatic(actionId: string): Promise<ProposalReview>;
+    /**
+     * Whether an `authorized` action still holds an unexpired approval for its
+     * current review version. An expired one can be neither applied nor rejected,
+     * so it must not keep the item open; `approved()` refuses resolved items.
+     */
+    private approvalLive;
+    /** Current terminal reviewer disposition, if any. */
+    private disposition;
+    private dispositionDTO;
+    /** The current revision's completed/partial attempt; failed revisions need reprocessing. */
+    private currentAttempt;
+    /** Reviewer authority under a handler this item's captured ceiling offers; no new grant. */
+    private reviewerAccess;
+    /** Extracted text for routing examples: the attempt's own results or its pinned extraction. */
+    private extractedQuery;
+    /** Optional explicit routing projection; the reviewer's action or disposition stays authoritative. */
+    private routingFeedback;
+    /** Human-chosen handler for any item. Same preview/approval path; never automation-eligible. */
+    startAction(input: StartActionInput): Promise<ProposalReview>;
+    /** The full disposition (reviewer, reason) under the current reviewer authority. */
+    getItemDisposition(itemId: string): Promise<ItemDisposition | undefined>;
+    /** Close an item as handled without an action. Terminal; replay returns the same disposition. */
+    resolveItem(input: ResolveItemInput): Promise<ItemDisposition>;
     previewPlan(input: PreviewPlanInput): Promise<PlanReview>;
     applyPlan(planId: string): Promise<ActionResult[]>;
+    /** The recorded submitter decides their own proposal under `review_own`
+     * authority. Apply remains the ordinary once-only path under live grants. */
+    submitOwnDecision(input: ReviewInput): Promise<ProposalReview>;
+    /** Bounded listing of this actor's own active submissions with their saved
+     * reviews. The submitter column is the authenticated receipt actor recorded by
+     * the server; every page reloads current item/handler/target authority. */
+    listOwnProposals(input?: OwnProposalsInput): Promise<OwnProposalsPage>;
+    /** Once a privacy-redacted item has no external action left to reconcile,
+     * drop the principal that redaction had to retain for it. Caller holds the
+     * item lock. */
+    private releaseRedactedPrincipal;
+    /** Only an explicit denial hides a row; a failing grant store propagates
+     * instead of silently shrinking the list. */
+    private readableOwn;
 }
 /** A jobs answer only wakes execution; the ledger's authoritative decision still gates apply. */
 export declare function continueIntakeReview(service: {

package/dist/execution.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"execution.d.ts","sourceRoot":"","sources":["../src/execution.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAEpE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAE5D,OAAO,KAAK,EACV,YAAY,EAGZ,cAAc,EACd,sBAAsB,EAItB,UAAU,EACV,gBAAgB,EAChB,oBAAoB,EACpB,cAAc,EAEd,WAAW,EACZ,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,KAAK,aAAa,EAClB,oBAAoB,EACpB,KAAK,iBAAiB,EACvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,KAAK,qBAAqB,EAC1B,yBAAyB,EACzB,wBAAwB,EACzB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,KAAK,EAAgB,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAChE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEpD,mBAAmB,0BAA0B,CAAC;AAC9C,YAAY,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACnE,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AA8BlD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAE1D;AAyCD,8FAA8F;AAC9F,qBAAa,sBAAsB;IAa/B,OAAO,CAAC,QAAQ,CAAC,OAAO;IAZ1B,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAE7B;IACJ,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAoB;IACvC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAyB;IAChD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;IACvB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAIjB;gBAEgB,OAAO,EAAE,gBAAgB,EAC1C,MAAM,EAAE,sBAAsB;IAkBhC,OAAO,CAAC,GAAG;YAGG,EAAE;YAKF,aAAa;YA2Bb,gBAAgB;YAqBhB,eAAe;YAmBf,eAAe;YAsBf,IAAI;YAeJ,MAAM;YA0BN,IAAI;IAiClB,OAAO,CAAC,OAAO;IAUf,OAAO,CAAC,OAAO;IAQf,OAAO,CAAC,SAAS;IAuBjB,OAAO,CAAC,QAAQ;YAcF,MAAM;YAkFN,SAAS;IAuCvB,uFAAuF;IACjF,oBAAoB,CAAC,CAAC,EAC1B,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,cAAc,EAAE,MAAM,EACtB,IAAI,EAAE,CAAC,OAAO,EAAE,cAAc,KAAK,OAAO,CAAC,CAAC,CAAC,GAC5C,OAAO,CAAC,CAAC,CAAC;IAKb,8EAA8E;IAC9E,CAAC,oBAAoB,CAAC,CAAC,CAAC,EACtB,GAAG,EAAE,iBAAiB,CAAC,CAAC,CAAC,EACzB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,CAAC,EAAE,EAAE,iBAAiB,EAAE,SAAS,EAAE,aAAa,KAAK,OAAO,CAAC,CAAC,CAAC,EACrE,aAAa,UAAQ,GACpB,OAAO,CAAC,CAAC,CAAC;YA2CC,gBAAgB;YAqFhB,KAAK;IA6BnB,OAAO,CAAC,MAAM;IAad,wFAAwF;IACxF,iGAAiG;IACjG,CAAC,wBAAwB,CAAC,CAAC,CAAC,EAC1B,EAAE,EAAE,iBAAiB,GAAG,SAAS,EACjC,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,cAAc,EAAE,MAAM,EACtB,IAAI,EAAE,CAAC,OAAO,EAAE,cAAc,KAAK,OAAO,CAAC,CAAC,CAAC,EAC7C,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,cAAc,KAAK,OAAO,CAAC,IAAI,CAAC,GACtD,OAAO,CAAC,CAAC,CAAC;IAab,CAAC,yBAAyB,CAAC,CAAC,CAAC,EAC3B,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,OAAO,EACjB,IAAI,EAAE,CAAC,KAAK,EAAE,qBAAqB,KAAK,OAAO,CAAC,CAAC,CAAC,EAClD,QAAQ,CAAC,EAAE,iBAAiB,EAC5B,iBAAiB,CAAC,EAAE,MAAM,EAAE,EAC5B,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC,CAAC,CAAC;YAqJC,eAAe;IA8BvB,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IAwC1D,oFAAoF;IAC9E,WAAW,CACf,MAAM,EAAE,MAAM,EACd,KAAK,GAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAO,GAC9C,OAAO,CAAC,UAAU,CAAC;YAqPR,YAAY;YA8JZ,OAAO;IAqGf,eAAe,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,cAAc,CAAC;IAS3E,uFAAuF;YACzE,aAAa;IA8ErB,cAAc,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,cAAc,CAAC;YA8GnD,cAAc;YA4Cd,QAAQ;YAgLR,SAAS;IA8EvB,OAAO,CAAC,QAAQ;YAMF,UAAU;YA6DV,MAAM;IAmEd,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAkTpD,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAiG9D,uFAAuF;IACjF,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IA4E7D,WAAW,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,UAAU,CAAC;IAgRzD,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;CAsCzD;AAED,iGAAiG;AACjG,wBAAsB,oBAAoB,CACxC,OAAO,EAAE;IACP,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAC/C,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;CAChD,EACD,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,WAAW,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,GAC7C,OAAO,CAAC,YAAY,CAAC,CA6BvB"}
+{"version":3,"file":"execution.d.ts","sourceRoot":"","sources":["../src/execution.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAEpE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAE5D,OAAO,KAAK,EAEV,eAAe,EACf,iBAAiB,EACjB,gBAAgB,EACjB,MAAM,UAAU,CAAC;AAClB,OAAO,KAAK,EACV,YAAY,EAGZ,cAAc,EACd,sBAAsB,EAItB,UAAU,EACV,gBAAgB,EAChB,oBAAoB,EACpB,cAAc,EACd,gBAAgB,EAEhB,WAAW,EACX,gBAAgB,EACjB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,KAAK,aAAa,EAClB,oBAAoB,EACpB,YAAY,EACZ,KAAK,iBAAiB,EACvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,KAAK,qBAAqB,EAC1B,yBAAyB,EACzB,wBAAwB,EACzB,MAAM,wBAAwB,CAAC;AAIhC,OAAO,KAAK,EAAgB,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAChE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEpD,mBAAmB,0BAA0B,CAAC;AAC9C,YAAY,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACnE,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAElD;oEACoE;AACpE,qBAAa,uBAAwB,SAAQ,KAAK;;CAKjD;AASD,KAAK,GAAG,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AA0BnC,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAE1D;AAyCD,8FAA8F;AAC9F,qBAAa,sBAAsB;IAa/B,OAAO,CAAC,QAAQ,CAAC,OAAO;IAZ1B,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAE7B;IACJ,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAoB;IACvC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAyB;IAChD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;IACvB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAIjB;gBAEgB,OAAO,EAAE,gBAAgB,EAC1C,MAAM,EAAE,sBAAsB;IAkBhC,OAAO,CAAC,GAAG;YAGG,EAAE;YAKF,aAAa;YA2Bb,gBAAgB;YAqBhB,eAAe;YAoBf,eAAe;YAsBf,IAAI;YAeJ,MAAM;YA0BN,IAAI;IAiClB,OAAO,CAAC,OAAO;IAUf,OAAO,CAAC,OAAO;IAQf,OAAO,CAAC,SAAS;IAuBjB;;;;;OAKG;IACH,OAAO,CAAC,QAAQ;IAiBhB;;;;;OAKG;YACW,SAAS;YAmET,MAAM;YAkDN,SAAS;IAuCvB,uFAAuF;IACjF,oBAAoB,CAAC,CAAC,EAC1B,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,cAAc,EAAE,MAAM,EACtB,IAAI,EAAE,CAAC,OAAO,EAAE,cAAc,KAAK,OAAO,CAAC,CAAC,CAAC,GAC5C,OAAO,CAAC,CAAC,CAAC;IAKb,8EAA8E;IAC9E,CAAC,oBAAoB,CAAC,CAAC,CAAC,EACtB,GAAG,EAAE,iBAAiB,CAAC,CAAC,CAAC,EACzB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,CAAC,EAAE,EAAE,iBAAiB,EAAE,SAAS,EAAE,aAAa,KAAK,OAAO,CAAC,CAAC,CAAC,EACrE,aAAa,UAAQ,GACpB,OAAO,CAAC,CAAC,CAAC;YA2CC,gBAAgB;YAqFhB,KAAK;IA6BnB;;;;;;;;;;;;;;;;OAgBG;IACG,CAAC,YAAY,CAAC,CAClB,IAAI,EAAE,GAAG,EACT,OAAO,EAAE;QACP,SAAS,EAAE,MAAM,CAAC;QAClB,cAAc,EAAE,MAAM,CAAC;QACvB,SAAS,EAAE,OAAO,CAAC;QACnB,UAAU,EAAE,OAAO,CAAC;KACrB,GACA,OAAO,CAAC,OAAO,CAAC;IA2BnB,OAAO,CAAC,MAAM;IAad,wFAAwF;IACxF,iGAAiG;IACjG,CAAC,wBAAwB,CAAC,CAAC,CAAC,EAC1B,EAAE,EAAE,iBAAiB,GAAG,SAAS,EACjC,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,cAAc,EAAE,MAAM,EACtB,IAAI,EAAE,CAAC,OAAO,EAAE,cAAc,KAAK,OAAO,CAAC,CAAC,CAAC,EAC7C,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,cAAc,KAAK,OAAO,CAAC,IAAI,CAAC,GACtD,OAAO,CAAC,CAAC,CAAC;IAab,CAAC,yBAAyB,CAAC,CAAC,CAAC,EAC3B,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,OAAO,EACjB,IAAI,EAAE,CAAC,KAAK,EAAE,qBAAqB,KAAK,OAAO,CAAC,CAAC,CAAC,EAClD,QAAQ,CAAC,EAAE,iBAAiB,EAC5B,iBAAiB,CAAC,EAAE,MAAM,EAAE,EAC5B,UAAU,CAAC,EAAE,MAAM;IACnB;;;;OAIG;IACH,eAAe,UAAO,GACrB,OAAO,CAAC,CAAC,CAAC;YAkKC,eAAe;IA8BvB,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IAwC1D,oFAAoF;IAC9E,WAAW,CACf,MAAM,EAAE,MAAM,EACd,KAAK,GAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAO,GAC9C,OAAO,CAAC,UAAU,CAAC;IAuPtB;;;;OAIG;YACW,YAAY;YAiKZ,OAAO;IAwGf,eAAe,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,cAAc,CAAC;IAU3E;;;;OAIG;YACW,sBAAsB;IAkCpC,uFAAuF;YACzE,aAAa;IAkFrB,cAAc,CAClB,KAAK,EAAE,WAAW,EAClB,IAAI,GAAE,QAAQ,GAAG,YAAuB,GACvC,OAAO,CAAC,cAAc,CAAC;YA0JZ,cAAc;YA4Cd,QAAQ;YA0LR,SAAS;IAgFvB,OAAO,CAAC,QAAQ;YAMF,UAAU;YA6DV,MAAM;IAoEd,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAkTpD,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAkG9D,uFAAuF;IACjF,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IA+EnE;;;;OAIG;YACW,YAAY;IAc1B,qDAAqD;YACvC,WAAW;IAYzB,OAAO,CAAC,cAAc;IAStB,4FAA4F;YAC9E,cAAc;IAsB5B,4FAA4F;YAC9E,cAAc;IAa5B,+FAA+F;YACjF,cAAc;IA+B5B,sGAAsG;YACxF,eAAe;IAiF7B,gGAAgG;IAC1F,WAAW,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,cAAc,CAAC;IAkFnE,oFAAoF;IAC9E,kBAAkB,CACtB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC;IAQvC,iGAAiG;IAC3F,WAAW,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC;IAuF9D,WAAW,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,UAAU,CAAC;IAgRzD,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IAsCxD;iFAC6E;IACvE,iBAAiB,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,cAAc,CAAC;IAGpE;;+EAE2E;IACrE,gBAAgB,CACpB,KAAK,GAAE,iBAAsB,GAC5B,OAAO,CAAC,gBAAgB,CAAC;IAsF5B;;oBAEgB;YACF,wBAAwB;IAyBtC;iDAC6C;YAC/B,WAAW;CAgB1B;AAED,iGAAiG;AACjG,wBAAsB,oBAAoB,CACxC,OAAO,EAAE;IACP,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAC/C,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;CAChD,EACD,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,WAAW,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,GAC7C,OAAO,CAAC,YAAY,CAAC,CA6BvB"}

package/dist/execution.js

@@ -1,2 +1,2 @@
-import { i as resolveIntakePolicy, n as continueIntakeReview, r as intakeBindingDigest, t as IntakeExecutionService } from "./chunks/execution-NoDh3pjs.js";
-export { IntakeExecutionService, continueIntakeReview, intakeBindingDigest, resolveIntakePolicy };
+import { a as resolveIntakePolicy, i as intakeBindingDigest, n as IntakeExecutionService, r as continueIntakeReview, t as IntakeAccessDeniedError } from "./chunks/execution-BzVQax0n.js";
+export { IntakeAccessDeniedError, IntakeExecutionService, continueIntakeReview, intakeBindingDigest, resolveIntakePolicy };

package/dist/feedback-dto.d.ts

@@ -28,18 +28,32 @@ export interface FeedbackExample {
     judgment: 'correct' | 'incorrect';
     query: string;
     args: IntakeValues;
-    model: {
+    /** Generation context of an interpretation judgment; absent for reviewer routing. */
+    model?: {
         provider: string;
         model: string;
         version: string;
     };
-    promptVersion: string;
-    configurationVersion: string;
+    promptVersion?: string;
+    configurationVersion?: string;
+    /** Absent means an interpretation judgment on a model suggestion. */
+    kind?: 'reviewer_routing';
+    /** Reviewer routing only: `none` closed the item without an action (handlerId `none`). */
+    routing?: {
+        choice: 'handler' | 'none';
+        reason: string;
+    };
+    /** Reviewer guidance the judged suggestion was produced under; an example, never authority. */
+    instruction?: {
+        id: string;
+        digest: string;
+        text: string;
+    };
 }
 export interface FeedbackReceipt {
     id: string;
     digest: string;
-    kind: 'interpretation' | 'action_decision' | 'downstream_outcome';
+    kind: 'interpretation' | 'action_decision' | 'downstream_outcome' | 'reviewer_routing';
 }
 export interface FeedbackReferences {
     version: string;

package/dist/feedback-dto.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"feedback-dto.d.ts","sourceRoot":"","sources":["../src/feedback-dto.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACvD,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,gBAAgB,EAAE,MAAM,CAAC;IACzB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,WAAW,EAAE,MAAM,CAAC;CACrB;AACD,MAAM,WAAW,mBAAoB,SAAQ,eAAe;IAC1D,QAAQ,EAAE,SAAS,GAAG,WAAW,CAAC;IAClC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AACD,MAAM,WAAW,oBAAqB,SAAQ,eAAe;IAC3D,IAAI,EAAE,iBAAiB,GAAG,oBAAoB,CAAC;IAC/C,OAAO,EAAE,MAAM,CAAC;CACjB;AACD,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,SAAS,GAAG,WAAW,CAAC;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,YAAY,CAAC;IACnB,KAAK,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5D,aAAa,EAAE,MAAM,CAAC;IACtB,oBAAoB,EAAE,MAAM,CAAC;CAC9B;AACD,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,gBAAgB,GAAG,iBAAiB,GAAG,oBAAoB,CAAC;CACnE;AACD,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,QAAQ,EAAE,KAAK,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACzD;AACD,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,QAAQ,EAAE,eAAe,EAAE,CAAC;CAC7B;AACD,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,kFAAkF;IAClF,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,+EAA+E;IAC/E,UAAU,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IACnD,+EAA+E;IAC/E,IAAI,EAAE,YAAY,CAAC;CACpB;AACD,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,WAAW,CAAC;IAClB,kBAAkB,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC1D,qBAAqB,EAAE,MAAM,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,uBAAuB,EAAE,KAAK,CAAC;CAChC;AACD,MAAM,WAAW,gBAAiB,SAAQ,eAAe;IACvD,qBAAqB,EAAE,MAAM,EAAE,CAAC;IAChC,SAAS,EAAE,MAAM,CAAC;CACnB;AACD,MAAM,WAAW,aAAc,SAAQ,eAAe;IACpD,YAAY,EAAE,MAAM,CAAC;CACtB;AACD,MAAM,WAAW,cAAe,SAAQ,eAAe;IACrD,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;CACnB;AACD,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,uBAAuB,EAAE,KAAK,CAAC;CAChC;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;CACf"}
+{"version":3,"file":"feedback-dto.d.ts","sourceRoot":"","sources":["../src/feedback-dto.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACvD,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,gBAAgB,EAAE,MAAM,CAAC;IACzB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,WAAW,EAAE,MAAM,CAAC;CACrB;AACD,MAAM,WAAW,mBAAoB,SAAQ,eAAe;IAC1D,QAAQ,EAAE,SAAS,GAAG,WAAW,CAAC;IAClC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AACD,MAAM,WAAW,oBAAqB,SAAQ,eAAe;IAC3D,IAAI,EAAE,iBAAiB,GAAG,oBAAoB,CAAC;IAC/C,OAAO,EAAE,MAAM,CAAC;CACjB;AACD,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,SAAS,GAAG,WAAW,CAAC;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,YAAY,CAAC;IACnB,qFAAqF;IACrF,KAAK,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7D,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,qEAAqE;IACrE,IAAI,CAAC,EAAE,kBAAkB,CAAC;IAC1B,0FAA0F;IAC1F,OAAO,CAAC,EAAE;QAAE,MAAM,EAAE,SAAS,GAAG,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IACzD,+FAA+F;IAC/F,WAAW,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CAC5D;AACD,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EACA,gBAAgB,GAChB,iBAAiB,GACjB,oBAAoB,GACpB,kBAAkB,CAAC;CACxB;AACD,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,QAAQ,EAAE,KAAK,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACzD;AACD,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,QAAQ,EAAE,eAAe,EAAE,CAAC;CAC7B;AACD,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,kFAAkF;IAClF,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,+EAA+E;IAC/E,UAAU,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IACnD,+EAA+E;IAC/E,IAAI,EAAE,YAAY,CAAC;CACpB;AACD,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,WAAW,CAAC;IAClB,kBAAkB,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC1D,qBAAqB,EAAE,MAAM,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,uBAAuB,EAAE,KAAK,CAAC;CAChC;AACD,MAAM,WAAW,gBAAiB,SAAQ,eAAe;IACvD,qBAAqB,EAAE,MAAM,EAAE,CAAC;IAChC,SAAS,EAAE,MAAM,CAAC;CACnB;AACD,MAAM,WAAW,aAAc,SAAQ,eAAe;IACpD,YAAY,EAAE,MAAM,CAAC;CACtB;AACD,MAAM,WAAW,cAAe,SAAQ,eAAe;IACrD,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;CACnB;AACD,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,uBAAuB,EAAE,KAAK,CAAC;CAChC;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;CACf"}

package/dist/feedback-internal.d.ts

@@ -14,6 +14,15 @@ export interface FeedbackActionContext {
     result: IntakeValues;
     handlerId: string;
     handlerVersion: string;
+    /** `intake_actions.data.origin`, e.g. `generated-proposal` or `reviewer-selected`. */
+    origin: string;
+    /**
+     * The action is approved and still effective: applied (`executing`,
+     * `succeeded`) or `authorized` with an unexpired approval, on an unresolved
+     * item. Evaluated only when an example or rule support is first selected;
+     * lineage re-checks of an earlier selection never consult it.
+     */
+    settled: boolean;
 }
 export declare const feedbackDiscoveryContext: unique symbol;
 //# sourceMappingURL=feedback-internal.d.ts.map

package/dist/feedback-internal.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"feedback-internal.d.ts","sourceRoot":"","sources":["../src/feedback-internal.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,KAAK,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACvE,2EAA2E;AAC3E,eAAO,MAAM,yBAAyB,eAErC,CAAC;AACF,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,iBAAiB,CAAC;IACtB,OAAO,EAAE,cAAc,CAAC;IACxB,MAAM,EAAE,cAAc,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,YAAY,CAAC;IACnB,QAAQ,EAAE,YAAY,CAAC;IACvB,MAAM,EAAE,YAAY,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,eAAO,MAAM,wBAAwB,eAEpC,CAAC"}
+{"version":3,"file":"feedback-internal.d.ts","sourceRoot":"","sources":["../src/feedback-internal.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,KAAK,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACvE,2EAA2E;AAC3E,eAAO,MAAM,yBAAyB,eAErC,CAAC;AACF,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,iBAAiB,CAAC;IACtB,OAAO,EAAE,cAAc,CAAC;IACxB,MAAM,EAAE,cAAc,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,YAAY,CAAC;IACnB,QAAQ,EAAE,YAAY,CAAC;IACvB,MAAM,EAAE,YAAY,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,sFAAsF;IACtF,MAAM,EAAE,MAAM,CAAC;IACf;;;;;OAKG;IACH,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,eAAO,MAAM,wBAAwB,eAEpC,CAAC"}

package/dist/feedback.d.ts

@@ -38,13 +38,23 @@ export declare class IntakeFeedbackService {
     private checkBinding;
     private insert;
     private receipt;
+    /** Source text, pin and (when a model suggestion exists) generation versions. */
     private provenance;
+    /** The example exactly as retrieval returns it; shared by the write-time size check. */
+    private exampleOf;
+    /**
+     * The verified reviewer instruction the action's generation ran under: the
+     * authenticated extraction record must match the generation's provenance.
+     */
+    private instructionFor;
     /** Internal saved-action gate; the execution owner supplies its transaction. */
     assertActionLineage(actionId: string, db: DatabaseInterface, proposalId: string): Promise<void>;
     record(input: RecordFeedbackInput): Promise<FeedbackReceipt>;
     /** Consume a durable owner event idempotently. Never derive correctness from these signals. */
     observe(input: ObserveFeedbackInput): Promise<FeedbackReceipt>;
     private example;
+    /** Reviewer routing choice, reusable without a model suggestion; fails closed like `example`. */
+    private routingExample;
     private receivingContext;
     retrieve(input: RetrieveFeedbackInput, executor?: DatabaseInterface): Promise<FeedbackSelection>;
     assertSelection(input: RetrieveFeedbackInput, selection: FeedbackReferences, executor?: DatabaseInterface): Promise<void>;