@happyvertical/smrt-ingestion 0.57.31 → 0.57.33

package/EXTRACTION.md

@@ -91,6 +91,21 @@ boundaries for mixed/scanned PDF, Unlimited-OCR, camera observations, message
 attachments, audio timestamps and malformed/partial output. These fixtures are
 not real remote-provider integrations and are not the ADR evaluation corpus.
 
+### Host OCR data
+
+`@happyvertical/pdf` probes its Kreuzberg provider on import and logs
+`Kreuzberg could not initialize Tesseract language 'eng'` when no `eng`
+traineddata is found. Ingestion's suites do not route through Kreuzberg (PDF
+extraction uses `unpdf` or injected fixtures), so on its own this warning does
+not explain a test failure. Hosts that run Kreuzberg OCR need Tesseract
+language data: install `tesseract-ocr-eng` (Debian/Ubuntu) or `tesseract`
+(Homebrew), or place `eng.traineddata` from
+[tessdata_fast](https://github.com/tesseract-ocr/tessdata_fast) in a directory
+and export `TESSDATA_PREFIX` pointing at it. The SDK checks
+`TESSDATA_PREFIX`, then `tesseract --list-langs`, then the common
+`/usr/share`, `/usr/local/share` and Homebrew `tessdata` directories; on
+hosts without those paths (for example NixOS), set `TESSDATA_PREFIX`.
+
 No live Unlimited-OCR, speech recognition or vision quality run is claimed.
 No recorded-human-audio recognition accuracy, real camera-scene quality,
 calibrated confidence, table extraction, or automatic-action acceptance is

package/PROPOSALS.md

@@ -145,6 +145,45 @@ new text, but their digests do not record it; a host that needs provenance to
 tell the two apart bumps its own `promptVersion`, which, like any configuration
 change, makes earlier attempts read as stale (`GenerationSnapshotStaleError`).
 
+Each suggestion's `explanation` is one or two plain sentences stating what the
+document is and why the handler fits, with no deliberation, self-correction or
+restating of the rules, and is bounded at 300 code points (#4331,
+`PROPOSAL_EXPLANATION_LIMIT`). Two such sentences run about 150-250
+characters; the bound keeps a verbose model from spending its output budget
+(and hitting the `length` finish reason) on prose instead of arguments. A
+reply cut at the token limit is still refused (`finish_reason`) and partial
+JSON is never salvaged; the grammar bound and the instruction are what keep
+replies under the limit. The provider schema and the validator carry the same `maxLength`, so the provider
+copy still accepts a superset of the validator (#4261), and a grammar backend
+enforces the bound while decoding. In the provider schema `explanation` is the
+last suggestion property, after `handlerId`, `handlerVersion`, `args`,
+`evidence`, `alternatives` and `missingFields`, and the top-level keys are
+`outcome`, `suggestions`, `splits` in that order; `required` lists the same
+order. That order predates #4331 and is now pinned by a test, so explanation
+prose cannot precede the arguments. xgrammar emits object properties in schema `properties` order unless
+`any_order` is set (its default is `false`, and vLLM does not set it), and
+llguidance fixes property order to the `properties` map, then `required`. A provider
+that ignores the schema can still return a longer explanation: fresh output is
+normalized after the list deduplication above and before validation, cutting
+it to 299 code points plus `…` on a code-point boundary, so a long explanation
+never fails validation (the raw output-size and SDK `output_limit` checks
+still run first). The value-free count is recorded as
+`provenance.explanationsTruncated`, absent when zero and removed with
+`duplicatesRemoved` whenever the suggestions are discarded. It counts only
+replies from providers that ignore the schema: on a grammar backend such as
+vLLM the string closes at 300 code points with no marker, and nothing is
+counted. The cut happens
+before the invented-target echo check, so an echo beyond the bound is no
+longer seen; explanation text is never a target or authority.
+
+Replay: the bound, the property order and the instruction text feed no digest.
+The response schema is built per request and never persisted; the frozen
+interpretation configuration holds versions, identities, the catalog digest and
+`limits`, none of which include the explanation bound. Stored attempts are read
+as persisted, never re-validated or re-cut, so an earlier attempt with an
+explanation of up to 2000 characters still reads, previews and replays with
+its original `output_digest`. New attempts' digests cover the bounded form.
+
 A trusted custom `ProposalGenerator` must likewise honor cancellation, bound its
 response, and explicitly declare validated `complete` or `unknown` completion.
 The SDK currently normalizes missing/unknown finish reasons to `stop`
@@ -386,6 +425,44 @@ phrase. Transport failures through the OpenAI SDK already carried
 problem, and other non-SDK errors contribute the transport facts above. The
 category is unchanged (`unavailable`).
 
+### Host suggestion review (`reviewSuggestion`)
+
+A host's own checks on a generated suggestion (a label that is not the invoice
+date, an amount that is not in the document) can hold it and leave a record a
+reviewer sees:
+
+```ts
+proposals: {
+  // ...
+  reviewSuggestion: ({ suggestion, handler, evidence }) => ({
+    hold: true,                        // optional; forces needs_review
+    reasons: ['total_not_in_text'],    // optional; <= 8 codes, /^[a-z][a-z0-9_.-]{0,47}$/
+    prefilled: ['billDate'],           // optional; names declared in handler.argsSchema.properties
+  }),
+},
+```
+
+The hook is trusted, server-only and optional. It runs once per validated
+suggestion, after validation and before the decision gate, with deep copies of
+the suggestion, its offered handler and the retained evidence text. It cannot
+change `args`, `missingFields`, evidence or the outcome except through `hold`,
+and it can never upgrade: `hold` sets the suggestion (and a `proposals` outcome)
+to `needs_review`; absent or `hold: false` leaves the validator's disposition.
+
+The result is stored as `suggestion.hostReview` (`{held, reasons, prefilled}`)
+and counted in `provenance.hostReview` (`{annotated, held}`); both are absent
+when the hook records nothing. Values cannot be stored: unknown keys, free-text
+or over-long reasons, `prefilled` names that are not argument names, and any
+reason code containing one of the suggestion's own argument values (3+
+characters) make the result invalid. An invalid result, a throw, a rejection or
+a hook slower than `limits.timeoutMs` holds the suggestion with the fixed code
+`host_review_invalid` or `host_review_failed`; the error text is discarded.
+`ReviewView` shows "Checked by the shop: ..." under the arguments.
+
+Like `failureCapture`, the hook is not public read configuration and never enters
+frozen configuration or digests. Hosts keep it synchronous-cheap: it runs inside
+the generation lease.
+
 ### Failed-attempt capture (opt-in, #4285)
 
 The value-free reason cannot show what the model actually sent. A host that

package/dist/chunks/proposal-contracts-CqVVPvqq.js.map

@@ -1 +1 @@
-{"version":3,"file":"proposal-contracts-CqVVPvqq.js","names":[],"sources":["../../src/extraction.ts","../../src/proposal-limits.ts","../../src/proposal-contracts.ts"],"sourcesContent":["import { fork } from 'node:child_process';\nimport { createHash } from 'node:crypto';\nimport { dirname, join } from 'node:path';\nimport { fileURLToPath } from 'node:url';\nimport type { GetAIOptions } from '@happyvertical/ai';\nimport type { PDFReaderOptions } from '@happyvertical/pdf';\nimport type { GetTranscriberOptions } from '@happyvertical/speech';\nimport type { AnalysisOutput } from './dto.js';\nimport {\n  ExtractionFailure,\n  emptyExtraction,\n  validateExtractionRequest,\n} from './extraction-providers.js';\nimport type {\n  ExtractionAdapter,\n  ExtractionRequest,\n  ExtractionResult,\n  ProviderIdentity,\n} from './extraction-types.js';\nimport { providerIdentity } from './extraction-types.js';\nimport type { AnalysisLease, IngestionService } from './server.js';\n\nexport type * from './extraction-types.js';\n\n/** Trusted server configuration. Credentials never enter analysis provenance. */\nexport interface ExtractionSDKConfiguration {\n  pdf?: {\n    provider: NonNullable<PDFReaderOptions['provider']>;\n    identity: ProviderIdentity;\n  };\n  ocr?: { identity: ProviderIdentity; options?: Record<string, unknown> };\n  speech?: { identity: ProviderIdentity; options: GetTranscriberOptions };\n  vision?: { identity: ProviderIdentity; options: GetAIOptions };\n  imageMode?: 'ocr' | 'vision';\n  /** Maximum concurrent child processes for this adapter instance (default 1). */\n  maxConcurrentProcesses?: number;\n  /** The deployment enforces a native-memory ceiling outside Node (e.g. container).\n   * Required for native decoders: Node's heap cap does not bound native allocation. */\n  nativeMemoryIsolation: 'host-enforced';\n}\n\n/** Production adapter: bounded per-evidence child, terminated on deadline/abort. */\nexport function createSDKExtractionAdapter(\n  configuration: ExtractionSDKConfiguration,\n): ExtractionAdapter {\n  try {\n    configuration = structuredClone(configuration);\n  } catch {\n    throw new Error('Serializable SDK configuration required');\n  }\n  const maximum = configuration.maxConcurrentProcesses ?? 1;\n  if (!Number.isSafeInteger(maximum) || maximum < 1 || maximum > 32)\n    throw new Error('Invalid extraction concurrency');\n  let running = 0;\n  if (configuration.nativeMemoryIsolation !== 'host-enforced')\n    throw new Error('Native memory isolation is required');\n  for (const provider of [\n    configuration.pdf,\n    configuration.ocr,\n    configuration.speech,\n    configuration.vision,\n  ]) {\n    if (provider) provider.identity = providerIdentity(provider.identity);\n  }\n  if (\n    configuration.pdf?.provider === 'auto' ||\n    configuration.ocr?.identity.provider === 'auto'\n  )\n    throw new Error('Pin extraction providers');\n  return {\n    async extract(request) {\n      let latest = emptyExtraction(request);\n      try {\n        validateExtractionRequest(request);\n      } catch (caught) {\n        if (!(caught instanceof ExtractionFailure)) throw caught;\n        latest.errors.push({\n          category: caught.category,\n          location: { kind: 'source' },\n        });\n        return latest;\n      }\n      if (request.evidence.mediaType.toLowerCase().startsWith('video/')) {\n        latest.status = 'unsupported';\n        latest.errors.push({\n          category: 'unsupported_type',\n          location: { kind: 'source' },\n        });\n        return latest;\n      }\n      if (request.signal?.aborted) {\n        latest.errors.push({\n          category: 'cancelled',\n          location: { kind: 'source' },\n        });\n        return latest;\n      }\n      if (running >= maximum) {\n        latest.errors.push({ category: 'limit', location: { kind: 'source' } });\n        return latest;\n      }\n      running++;\n      return new Promise<ExtractionResult>((resolve) => {\n        // A public entry can move shared code into chunks; resolve without loading it.\n        const child = fork(\n          join(\n            dirname(\n              fileURLToPath(\n                import.meta.resolve('@happyvertical/smrt-ingestion/server'),\n              ),\n            ),\n            'extraction-worker.js',\n          ),\n          [],\n          {\n            serialization: 'advanced',\n            stdio: ['ignore', 'ignore', 'ignore', 'ipc'],\n            execArgv: [`--max-old-space-size=${request.limits.workerHeapMb}`],\n            detached: process.platform !== 'win32',\n          },\n        );\n        let done = false;\n        const stop = () => {\n          try {\n            if (process.platform !== 'win32' && child.pid)\n              process.kill(-child.pid, 'SIGKILL');\n            else child.kill('SIGKILL');\n          } catch {\n            child.kill('SIGKILL');\n          }\n        };\n        const finish = (\n          category?: 'timeout' | 'cancelled' | 'unavailable' | 'limit',\n        ) => {\n          if (done) return;\n          done = true;\n          running--;\n          clearTimeout(timer);\n          request.signal?.removeEventListener('abort', abort);\n          stop();\n          if (category) {\n            latest.errors.push({ category, location: { kind: 'source' } });\n            latest.status = latest.segments.length ? 'partial' : 'failed';\n            latest.truncated = true;\n            latest.omitted.push({ kind: 'source' });\n          }\n          resolve(latest);\n        };\n        const abort = () => finish('cancelled');\n        const timer = setTimeout(\n          () => finish('timeout'),\n          request.limits.timeoutMs,\n        );\n        request.signal?.addEventListener('abort', abort, { once: true });\n        child.on('error', () => finish('unavailable'));\n        child.on('exit', () => {\n          if (!done) finish('unavailable');\n        });\n        child.on(\n          'message',\n          async (message: {\n            kind: string;\n            id?: number;\n            result?: ExtractionResult;\n          }) => {\n            if (done) return;\n            if (\n              message.kind === 'authorize' &&\n              Number.isSafeInteger(message.id)\n            ) {\n              try {\n                await request.beforeProviderCall?.();\n                if (!done) child.send({ kind: 'authorized', id: message.id });\n              } catch {\n                finish('cancelled');\n              }\n              return;\n            }\n            if (\n              (message.kind === 'progress' || message.kind === 'result') &&\n              message.result\n            ) {\n              // The child is our trusted normalizer; bound serialized IPC output as well.\n              if (\n                Buffer.byteLength(JSON.stringify(message.result)) >\n                request.limits.maxOutputBytes + 65536\n              )\n                return finish('limit');\n              latest = message.result;\n              if (message.kind === 'result') finish();\n            } else finish('unavailable');\n          },\n        );\n        const {\n          signal: _signal,\n          beforeProviderCall: _authorize,\n          ...wireRequest\n        } = request;\n        child.send({ request: wireRequest, configuration }, (error) => {\n          if (error) finish('unavailable');\n        });\n        if (request.signal?.aborted) abort();\n      });\n    },\n  };\n}\n\nfunction validateAndNormalizeExtractionOutput(\n  result: ExtractionResult,\n  request: ExtractionRequest,\n): void {\n  const numeric = (value: number) => Number.isFinite(value) && value >= 0;\n  const location = (\n    value: ExtractionResult['segments'][number]['location'],\n  ) => {\n    if (!value || typeof value !== 'object') return false;\n    if (value.kind === 'source') return true;\n    if (value.kind === 'page')\n      return Number.isSafeInteger(value.page) && value.page > 0;\n    if (value.kind === 'pages')\n      return (\n        Number.isSafeInteger(value.startPage) &&\n        value.startPage > 0 &&\n        Number.isSafeInteger(value.endPage) &&\n        value.endPage >= value.startPage\n      );\n    return (\n      value.kind === 'time' &&\n      numeric(value.startMs) &&\n      numeric(value.endMs) &&\n      value.endMs >= value.startMs\n    );\n  };\n  if (\n    !result ||\n    !['complete', 'partial', 'failed', 'unsupported'].includes(result.status) ||\n    result.automaticActionEligible !== false ||\n    result.configurationRevision !== request.configurationRevision ||\n    !result.evidence ||\n    Object.entries(request.evidence).some(\n      ([key, value]) =>\n        result.evidence[key as keyof typeof result.evidence] !== value,\n    ) ||\n    typeof result.truncated !== 'boolean' ||\n    !Array.isArray(result.capabilities) ||\n    result.capabilities.some(\n      (capability) =>\n        !capability ||\n        typeof capability.confidence !== 'boolean' ||\n        typeof capability.boxes !== 'boolean' ||\n        !['source', 'page', 'time'].includes(capability.location) ||\n        !['unknown', 'reported'].includes(capability.truncation) ||\n        !['unknown', 'reported'].includes(capability.usage),\n    ) ||\n    !result.limits ||\n    Object.entries(request.limits).some(\n      ([key, value]) =>\n        result.limits[key as keyof typeof result.limits] !== value,\n    ) ||\n    !Array.isArray(result.segments) ||\n    !Array.isArray(result.errors) ||\n    !Array.isArray(result.omitted) ||\n    (result.status === 'complete' &&\n      (result.truncated ||\n        result.errors.length > 0 ||\n        result.omitted.length > 0)) ||\n    result.omitted.some((value) => !location(value)) ||\n    result.segments.some(\n      (segment) =>\n        typeof segment.text !== 'string' ||\n        !location(segment.location) ||\n        segment.location.kind === 'pages' ||\n        (segment.provenance?.provider === 'unlimited-ocr' &&\n          (segment.confidence !== null || segment.boxes !== null)) ||\n        !segment.provenance ||\n        [\n          segment.provenance.provider,\n          segment.provenance.model,\n          segment.provenance.version,\n        ].some((value) => typeof value !== 'string' || !value) ||\n        (segment.confidence !== null &&\n          (!segment.confidence ||\n            !numeric(segment.confidence.value) ||\n            segment.confidence.value > 1 ||\n            segment.confidence.scale !== '0-1' ||\n            segment.confidence.calibration !== 'unknown')) ||\n        (segment.boxes !== null &&\n          (!Array.isArray(segment.boxes) ||\n            segment.boxes.some(\n              (box) =>\n                typeof box.text !== 'string' ||\n                ![box.x, box.y, box.width, box.height].every(numeric),\n            ))),\n    ) ||\n    result.errors.some(\n      (error) =>\n        ![\n          'unsupported_type',\n          'malformed_output',\n          'limit',\n          'timeout',\n          'unavailable',\n          'authentication',\n          'cancelled',\n          'integrity',\n        ].includes(error.category) || !location(error.location),\n    ) ||\n    !result.usage ||\n    Object.values(result.usage).some((value) => !numeric(value))\n  )\n    throw new Error('Invalid extraction output');\n  // Structural typing permits extra host fields. Never persist them as identity.\n  for (const segment of result.segments)\n    segment.provenance = providerIdentity(segment.provenance);\n  result.capabilities = result.capabilities.map((capability) => ({\n    ...providerIdentity(capability),\n    confidence: capability.confidence,\n    boxes: capability.boxes,\n    location: capability.location,\n    truncation: capability.truncation,\n    usage: capability.usage,\n  }));\n}\n\n/** Current access is rechecked on read and fenced publication by the foundation.\n * The host already allocated the immutable input/config revision and lease. */\nexport async function extractAnalysis(\n  service: IngestionService,\n  lease: AnalysisLease,\n  adapter: ExtractionAdapter,\n  options: Pick<\n    ExtractionRequest,\n    'limits' | 'configurationRevision' | 'signal'\n  >,\n): Promise<boolean> {\n  const snapshot = await service.getAnalysisInput(lease);\n  const persisted = snapshot.configuration.extraction as\n    | { configurationRevision?: unknown; limits?: Record<string, unknown> }\n    | undefined;\n  if (\n    !persisted ||\n    persisted.configurationRevision !== options.configurationRevision ||\n    !persisted.limits ||\n    Object.keys(options.limits).some(\n      (key) =>\n        persisted.limits?.[key] !==\n        options.limits[key as keyof typeof options.limits],\n    ) ||\n    Object.keys(persisted.limits).length !== Object.keys(options.limits).length\n  )\n    throw new Error('Extraction configuration mismatch');\n  const evidence = snapshot.evidence;\n  const boundOptions = { ...options, limits: structuredClone(options.limits) };\n  const results: ExtractionResult[] = [];\n  let limited = false;\n  const publication = (reserve = false): AnalysisOutput => {\n    const allComplete =\n      !limited &&\n      results.length === evidence.length &&\n      results.every((result) => result.status === 'complete');\n    const firstError =\n      limited || reserve\n        ? 'limit'\n        : results.flatMap((result) => result.errors)[0]?.category;\n    return {\n      status: reserve\n        ? 'needs_attention'\n        : allComplete\n          ? 'completed'\n          : results.some((result) => result.segments.length)\n            ? 'partial'\n            : 'needs_attention',\n      provider: 'smrt-ingestion-extraction',\n      model: 'none',\n      version: '1',\n      output: {\n        configurationRevision: options.configurationRevision,\n        results,\n        ...(limited || reserve\n          ? {\n              truncated: true,\n              omittedEvidenceCount: evidence.length - results.length,\n            }\n          : {}),\n      },\n      usage: {},\n      ...(firstError ? { error: firstError } : {}),\n    };\n  };\n  // Canonical persistence sorts keys but uses identical JSON value encoding/size.\n  const fits = (output: AnalysisOutput) =>\n    Buffer.byteLength(JSON.stringify(output)) <= snapshot.maxOutputBytes;\n  const minimum: AnalysisOutput = {\n    status: 'needs_attention',\n    provider: 'smrt-ingestion-extraction',\n    model: 'none',\n    version: '1',\n    output: {},\n    usage: {},\n    error: 'limit',\n  };\n  if (!fits(minimum)) return service.failAnalysis(lease, 'limit');\n  if (!fits(publication(true))) return service.completeAnalysis(lease, minimum);\n  for (const part of evidence) {\n    await service.getAnalysisInput(lease);\n    const bytes = await service.readEvidence(lease.itemId, part.id);\n    await service.getAnalysisInput(lease);\n    const request = { ...boundOptions, evidence: part, bytes };\n    const result = await adapter.extract({\n      ...request,\n      evidence: { ...part },\n      limits: { ...request.limits },\n      bytes: bytes.slice(),\n      beforeProviderCall: async () => {\n        await service.getAnalysisInput(lease);\n      },\n    });\n    validateAndNormalizeExtractionOutput(result, request);\n    results.push(result);\n    if (!fits(publication(true))) {\n      limited = true;\n      // Preserve earlier parts and the largest prefix of complete segments that fits.\n      result.status = 'partial';\n      result.truncated = true;\n      result.errors.push({ category: 'limit', location: { kind: 'source' } });\n      while (result.segments.length && !fits(publication(true))) {\n        const removed = result.segments.pop();\n        if (removed) result.omitted.push(removed.location);\n      }\n      // Diagnostics are indivisible: omit this result rather than erase known gaps.\n      if (!fits(publication(true))) results.pop();\n    }\n    // Revalidation after an external call prevents returning/publishing revoked evidence.\n    await service.getAnalysisInput(lease);\n    if (limited || options.signal?.aborted) break;\n  }\n  return service.completeAnalysis(lease, publication());\n}\n\n/**\n * A split's page groups failed the group check (empty, unknown or repeated\n * page, unordered). Generated splits that fail it are dropped (#4288); the\n * message is a fixed phrase, never page numbers.\n */\nexport class SplitGroupError extends Error {}\n/** Side-effect-free, versioned split proposal. Original evidence is not replaced. */\nexport function proposeDocumentSplits(\n  result: ExtractionResult,\n  revision: number,\n  groups: number[][],\n) {\n  if (!Number.isSafeInteger(revision) || revision < 1 || !groups.length)\n    throw new Error('Invalid split revision');\n  const available = new Set(\n    result.segments.flatMap((segment) =>\n      segment.location.kind === 'page' ? [segment.location.page] : [],\n    ),\n  );\n  const seen = new Set<number>();\n  for (const group of groups) {\n    if (!group.length) throw new SplitGroupError('Empty split');\n    for (const page of group) {\n      if (!Number.isSafeInteger(page) || !available.has(page) || seen.has(page))\n        throw new SplitGroupError('Invalid split page');\n      seen.add(page);\n    }\n    if (group.some((page, index) => index > 0 && page <= group[index - 1]))\n      throw new SplitGroupError('Unordered split');\n  }\n  const proposal = {\n    revision,\n    evidenceId: result.evidence.id,\n    inputHash: result.evidence.contentHash,\n    configurationRevision: result.configurationRevision,\n    groups: groups.map((pages) => ({ pages: [...pages] })),\n    status: 'proposed' as const,\n  };\n  return {\n    ...proposal,\n    digest: createHash('sha256').update(JSON.stringify(proposal)).digest('hex'),\n  };\n}\n","import type { ProposalConfiguration } from './proposal-contracts.js';\n\n/** Validate deployment limits before any item is interpreted. */\nexport function assertProposalLimits(\n  limits: ProposalConfiguration['limits'],\n): void {\n  if (\n    !limits ||\n    [\n      'maxHandlers',\n      'maxCandidates',\n      'maxSuggestions',\n      'maxInputBytes',\n      'maxOutputBytes',\n      'maxQueryLength',\n      'timeoutMs',\n    ].some(\n      (key) =>\n        !Number.isSafeInteger(limits[key as keyof typeof limits]) ||\n        limits[key as keyof typeof limits] <= 0,\n    ) ||\n    limits.maxHandlers > 20 ||\n    limits.maxCandidates > 20 ||\n    limits.maxSuggestions > 20 ||\n    limits.timeoutMs > 2_147_483_647\n  )\n    throw new Error('Invalid proposal limits');\n}\n","import type { DecisionClient } from '@happyvertical/smrt-core';\nimport type { HandlerContext } from './execution-contracts.js';\nimport type { IntakeValues } from './execution-dto.js';\nimport {\n  type EvidenceLocation,\n  type ProviderIdentity,\n  providerIdentity,\n} from './extraction-types.js';\nimport type {\n  ProposalCandidate,\n  ProposalCatalogEntry,\n  ProposalReferenceField,\n} from './proposal-dto.js';\n\n/** Optional discovery capability on the existing application execution handler. */\nexport interface HandlerDiscovery {\n  mediaTypes: readonly string[];\n  /** Every existing-record argument exposed to generation must be declared here. */\n  references: Readonly<Record<string, ProposalReferenceField>>;\n  /** Database reads only; filter in the query before ranking/summarizing. */\n  candidates?(\n    query: string,\n    context: HandlerContext,\n    page: { limit: number },\n  ): Promise<{\n    items: Array<Omit<ProposalCandidate, 'key'>>;\n    hasMore: boolean;\n  }>;\n}\nexport interface GenerationLimits {\n  maxHandlers: number;\n  maxCandidates: number;\n  maxSuggestions: number;\n  maxInputBytes: number;\n  maxOutputBytes: number;\n  maxQueryLength: number;\n  timeoutMs: number;\n}\nexport interface GenerativeProposalInput {\n  evidence: Array<{\n    evidenceId: string;\n    partId: string;\n    parentEvidenceId: string | null;\n    mediaType: string;\n    contentHash: string;\n    segments: Array<{ text: string; location: EvidenceLocation }>;\n  }>;\n  offered: Array<{\n    handler: ProposalCatalogEntry;\n    candidates: ProposalCandidate[];\n  }>;\n  instructions: string;\n  /** Bounded, currently eligible examples; neither evidence nor authority. */\n  examples?: import('./feedback-dto.js').FeedbackSelection;\n  /** Authenticated human correction carried through fresh extraction; never model authority. */\n  humanCorrection?: IntakeValues;\n  /** Authenticated reviewer guidance; trusted steering only, never catalog or approval authority. */\n  reviewerInstruction?: { id: string; text: string };\n}\n/** Inject only trusted SDK-bound adapters. Generative output is always untrusted. */\nexport interface ProposalGenerator {\n  identity: ProviderIdentity;\n  generate(\n    input: GenerativeProposalInput,\n    options: { signal: AbortSignal; maxOutputBytes: number },\n  ): Promise<{\n    output: unknown;\n    completion: 'complete' | 'unknown';\n    usage?: Record<string, number>;\n    /** Provider-reported immutable model revision, when it safely resolves a configured alias. */\n    responseModel?: string;\n  }>;\n}\n/**\n * How validated decision answers affect readiness. `gate` (default) sends a\n * suggestion to `needs_review` when the thresholds are not met; `record` still\n * runs and persists the same answers but leaves outcome/disposition to the\n * validator. Neither mode makes any action automation-eligible.\n */\nexport type DecisionReadiness = 'gate' | 'record';\n/** Public decision settings shared by generation and read configuration. */\nexport interface DecisionSettings {\n  minimumDecisionProbability?: number;\n  tieMargin?: number;\n  /**\n   * Per-request token window forwarded to the decision client as `maxLen`\n   * (the SDK Laya provider option). Absent keeps the client/checkpoint default.\n   */\n  decisionMaxLen?: number;\n  decisionReadiness?: DecisionReadiness;\n}\nexport interface ProposalConfiguration extends DecisionSettings {\n  version: string;\n  promptVersion: string;\n  generator: ProposalGenerator;\n  /** Absent means the normal unconfigured decision path, never fake probability. */\n  decision?: { client: DecisionClient; identity: ProviderIdentity };\n  limits: GenerationLimits;\n  /**\n   * Opt-in, bounded, redacted capture of the model output on a failed\n   * interpretation attempt (#4285). Text requires a host redactor; absent or\n   * failed redaction retains no text. Off when absent. Not public read\n   * configuration: it never enters frozen configuration, digests or\n   * `proposalReadConfiguration`. See PROPOSALS.md.\n   */\n  failureCapture?: import('./failure-capture.js').FailureCaptureConfiguration;\n}\n/** Credential-free configuration for validating persisted proposal snapshots. */\nexport interface ProposalReadConfiguration extends DecisionSettings {\n  version: string;\n  promptVersion: string;\n  generator: ProviderIdentity;\n  decision?: ProviderIdentity;\n  limits: GenerationLimits;\n}\n/** Remove generation capability while preserving the public persisted configuration. */\nexport function proposalReadConfiguration(\n  config: ProposalConfiguration | ProposalReadConfiguration,\n): ProposalReadConfiguration {\n  const generator = providerIdentity(\n    'identity' in config.generator\n      ? config.generator.identity\n      : config.generator,\n  );\n  return {\n    version: config.version,\n    promptVersion: config.promptVersion,\n    generator,\n    ...(config.decision\n      ? {\n          decision: providerIdentity(\n            'identity' in config.decision\n              ? config.decision.identity\n              : config.decision,\n          ),\n        }\n      : {}),\n    ...(config.minimumDecisionProbability === undefined\n      ? {}\n      : { minimumDecisionProbability: config.minimumDecisionProbability }),\n    ...(config.tieMargin === undefined ? {} : { tieMargin: config.tieMargin }),\n    ...(config.decisionMaxLen === undefined\n      ? {}\n      : { decisionMaxLen: config.decisionMaxLen }),\n    ...(config.decisionReadiness === undefined\n      ? {}\n      : { decisionReadiness: config.decisionReadiness }),\n    limits: {\n      maxHandlers: config.limits.maxHandlers,\n      maxCandidates: config.limits.maxCandidates,\n      maxSuggestions: config.limits.maxSuggestions,\n      maxInputBytes: config.limits.maxInputBytes,\n      maxOutputBytes: config.limits.maxOutputBytes,\n      maxQueryLength: config.limits.maxQueryLength,\n      timeoutMs: config.limits.timeoutMs,\n    },\n  };\n}\nexport interface GenerationStageConfiguration extends IntakeValues {\n  stage: 'interpret';\n  /** Copied from the pinned extraction source; verified against it before provider disclosure. */\n  reviewerInstruction?: IntakeValues;\n  proposals: {\n    source: import('./proposal-dto.js').GenerationSourcePin;\n    configurationVersion: string;\n    promptVersion: string;\n    catalogDigest: string;\n    generator: ProviderIdentity;\n    decision: ProviderIdentity | null;\n    limits: GenerationLimits;\n    minimumDecisionProbability: number;\n    tieMargin: number;\n    /** Present only when configured, so default digests stay stable. */\n    decisionMaxLen?: number;\n    /** Present only for `record`; `gate` is the default. */\n    decisionReadiness?: 'record';\n  };\n}\n"],"mappings":";;;;;;AA0CO,SAAS,2BACd,eACmB;CACnB,IAAI;EACF,gBAAgB,gBAAgB,aAAa;CAC/C,QAAQ;EACN,MAAM,IAAI,MAAM,yCAAyC;CAC3D;CACA,MAAM,UAAU,cAAc,0BAA0B;CACxD,IAAI,CAAC,OAAO,cAAc,OAAO,KAAK,UAAU,KAAK,UAAU,IAC7D,MAAM,IAAI,MAAM,gCAAgC;CAClD,IAAI,UAAU;CACd,IAAI,cAAc,0BAA0B,iBAC1C,MAAM,IAAI,MAAM,qCAAqC;CACvD,KAAA,MAAW,YAAY;EACrB,cAAc;EACd,cAAc;EACd,cAAc;EACd,cAAc;CAChB,GACE,IAAI,UAAU,SAAS,WAAW,iBAAiB,SAAS,QAAQ;CAEtE,IACE,cAAc,KAAK,aAAa,UAChC,cAAc,KAAK,SAAS,aAAa,QAEzC,MAAM,IAAI,MAAM,0BAA0B;CAC5C,OAAO,EACL,MAAM,QAAQ,SAAS;EACrB,IAAI,SAAS,gBAAgB,OAAO;EACpC,IAAI;GACF,0BAA0B,OAAO;EACnC,SAAS,QAAQ;GACf,IAAI,EAAE,kBAAkB,oBAAoB,MAAM;GAClD,OAAO,OAAO,KAAK;IACjB,UAAU,OAAO;IACjB,UAAU,EAAE,MAAM,SAAS;GAC7B,CAAC;GACD,OAAO;EACT;EACA,IAAI,QAAQ,SAAS,UAAU,YAAY,CAAA,CAAE,WAAW,QAAQ,GAAG;GACjE,OAAO,SAAS;GAChB,OAAO,OAAO,KAAK;IACjB,UAAU;IACV,UAAU,EAAE,MAAM,SAAS;GAC7B,CAAC;GACD,OAAO;EACT;EACA,IAAI,QAAQ,QAAQ,SAAS;GAC3B,OAAO,OAAO,KAAK;IACjB,UAAU;IACV,UAAU,EAAE,MAAM,SAAS;GAC7B,CAAC;GACD,OAAO;EACT;EACA,IAAI,WAAW,SAAS;GACtB,OAAO,OAAO,KAAK;IAAE,UAAU;IAAS,UAAU,EAAE,MAAM,SAAS;GAAE,CAAC;GACtE,OAAO;EACT;EACA;EACA,OAAO,IAAI,SAA2B,YAAY;GAEhD,MAAM,QAAQ,KACZ,KACE,QACE,cACE,OAAA,KAAY,QAAQ,sCAAsC,CAC5D,CACF,GACA,sBACF,GACA,CAAC,GACD;IACE,eAAe;IACf,OAAO;KAAC;KAAU;KAAU;KAAU;IAAK;IAC3C,UAAU,CAAC,wBAAwB,QAAQ,OAAO,cAAc;IAChE,UAAU,QAAQ,aAAa;GACjC,CACF;GACA,IAAI,OAAO;GACX,MAAM,aAAa;IACjB,IAAI;KACF,IAAI,QAAQ,aAAa,WAAW,MAAM,KACxC,QAAQ,KAAK,CAAC,MAAM,KAAK,SAAS;UAC/B,MAAM,KAAK,SAAS;IAC3B,QAAQ;KACN,MAAM,KAAK,SAAS;IACtB;GACF;GACA,MAAM,UACJ,aACG;IACH,IAAI,MAAM;IACV,OAAO;IACP;IACA,aAAa,KAAK;IAClB,QAAQ,QAAQ,oBAAoB,SAAS,KAAK;IAClD,KAAK;IACL,IAAI,UAAU;KACZ,OAAO,OAAO,KAAK;MAAE;MAAU,UAAU,EAAE,MAAM,SAAS;KAAE,CAAC;KAC7D,OAAO,SAAS,OAAO,SAAS,SAAS,YAAY;KACrD,OAAO,YAAY;KACnB,OAAO,QAAQ,KAAK,EAAE,MAAM,SAAS,CAAC;IACxC;IACA,QAAQ,MAAM;GAChB;GACA,MAAM,cAAc,OAAO,WAAW;GACtC,MAAM,QAAQ,iBACN,OAAO,SAAS,GACtB,QAAQ,OAAO,SACjB;GACA,QAAQ,QAAQ,iBAAiB,SAAS,OAAO,EAAE,MAAM,KAAK,CAAC;GAC/D,MAAM,GAAG,eAAe,OAAO,aAAa,CAAC;GAC7C,MAAM,GAAG,cAAc;IACrB,IAAI,CAAC,MAAM,OAAO,aAAa;GACjC,CAAC;GACD,MAAM,GACJ,WACA,OAAO,YAID;IACJ,IAAI,MAAM;IACV,IACE,QAAQ,SAAS,eACjB,OAAO,cAAc,QAAQ,EAAE,GAC/B;KACA,IAAI;MACF,MAAM,QAAQ,qBAAqB;MACnC,IAAI,CAAC,MAAM,MAAM,KAAK;OAAE,MAAM;OAAc,IAAI,QAAQ;MAAG,CAAC;KAC9D,QAAQ;MACN,OAAO,WAAW;KACpB;KACA;IACF;IACA,KACG,QAAQ,SAAS,cAAc,QAAQ,SAAS,aACjD,QAAQ,QACR;KAEA,IACE,OAAO,WAAW,KAAK,UAAU,QAAQ,MAAM,CAAC,IAChD,QAAQ,OAAO,iBAAiB,OAEhC,OAAO,OAAO,OAAO;KACvB,SAAS,QAAQ;KACjB,IAAI,QAAQ,SAAS,UAAU,OAAO;IACxC,OAAO,OAAO,aAAa;GAC7B,CACF;GACA,MAAM,EACJ,QAAQ,SACR,oBAAoB,YACpB,GAAG,gBACD;GACJ,MAAM,KAAK;IAAE,SAAS;IAAa;GAAc,IAAI,UAAU;IAC7D,IAAI,OAAO,OAAO,aAAa;GACjC,CAAC;GACD,IAAI,QAAQ,QAAQ,SAAS,MAAM;EACrC,CAAC;CACH,EACF;AACF;AAEA,SAAS,qCACP,QACA,SACM;CACN,MAAM,WAAW,UAAkB,OAAO,SAAS,KAAK,KAAK,SAAS;CACtE,MAAM,YACJ,UACG;EACH,IAAI,CAAC,SAAS,OAAO,UAAU,UAAU,OAAO;EAChD,IAAI,MAAM,SAAS,UAAU,OAAO;EACpC,IAAI,MAAM,SAAS,QACjB,OAAO,OAAO,cAAc,MAAM,IAAI,KAAK,MAAM,OAAO;EAC1D,IAAI,MAAM,SAAS,SACjB,OACE,OAAO,cAAc,MAAM,SAAS,KACpC,MAAM,YAAY,KAClB,OAAO,cAAc,MAAM,OAAO,KAClC,MAAM,WAAW,MAAM;EAE3B,OACE,MAAM,SAAS,UACf,QAAQ,MAAM,OAAO,KACrB,QAAQ,MAAM,KAAK,KACnB,MAAM,SAAS,MAAM;CAEzB;CACA,IACE,CAAC,UACD,CAAC;EAAC;EAAY;EAAW;EAAU;CAAa,CAAA,CAAE,SAAS,OAAO,MAAM,KACxE,OAAO,4BAA4B,SACnC,OAAO,0BAA0B,QAAQ,yBACzC,CAAC,OAAO,YACR,OAAO,QAAQ,QAAQ,QAAQ,CAAA,CAAE,MAC9B,CAAC,KAAK,WACL,OAAO,SAAS,SAAyC,KAC7D,KACA,OAAO,OAAO,cAAc,aAC5B,CAAC,MAAM,QAAQ,OAAO,YAAY,KAClC,OAAO,aAAa,MACjB,eACC,CAAC,cACD,OAAO,WAAW,eAAe,aACjC,OAAO,WAAW,UAAU,aAC5B,CAAC;EAAC;EAAU;EAAQ;CAAM,CAAA,CAAE,SAAS,WAAW,QAAQ,KACxD,CAAC,CAAC,WAAW,UAAU,CAAA,CAAE,SAAS,WAAW,UAAU,KACvD,CAAC,CAAC,WAAW,UAAU,CAAA,CAAE,SAAS,WAAW,KAAK,CACtD,KACA,CAAC,OAAO,UACR,OAAO,QAAQ,QAAQ,MAAM,CAAA,CAAE,MAC5B,CAAC,KAAK,WACL,OAAO,OAAO,SAAuC,KACzD,KACA,CAAC,MAAM,QAAQ,OAAO,QAAQ,KAC9B,CAAC,MAAM,QAAQ,OAAO,MAAM,KAC5B,CAAC,MAAM,QAAQ,OAAO,OAAO,KAC5B,OAAO,WAAW,eAChB,OAAO,aACN,OAAO,OAAO,SAAS,KACvB,OAAO,QAAQ,SAAS,MAC5B,OAAO,QAAQ,MAAM,UAAU,CAAC,SAAS,KAAK,CAAC,KAC/C,OAAO,SAAS,MACb,YACC,OAAO,QAAQ,SAAS,YACxB,CAAC,SAAS,QAAQ,QAAQ,KAC1B,QAAQ,SAAS,SAAS,WACzB,QAAQ,YAAY,aAAa,oBAC/B,QAAQ,eAAe,QAAQ,QAAQ,UAAU,SACpD,CAAC,QAAQ,cACT;EACE,QAAQ,WAAW;EACnB,QAAQ,WAAW;EACnB,QAAQ,WAAW;CACrB,CAAA,CAAE,MAAM,UAAU,OAAO,UAAU,YAAY,CAAC,KAAK,KACpD,QAAQ,eAAe,SACrB,CAAC,QAAQ,cACR,CAAC,QAAQ,QAAQ,WAAW,KAAK,KACjC,QAAQ,WAAW,QAAQ,KAC3B,QAAQ,WAAW,UAAU,SAC7B,QAAQ,WAAW,gBAAgB,cACtC,QAAQ,UAAU,SAChB,CAAC,MAAM,QAAQ,QAAQ,KAAK,KAC3B,QAAQ,MAAM,MACX,QACC,OAAO,IAAI,SAAS,YACpB,CAAC;EAAC,IAAI;EAAG,IAAI;EAAG,IAAI;EAAO,IAAI;CAAM,CAAA,CAAE,MAAM,OAAO,CACxD,EACR,KACA,OAAO,OAAO,MACX,UACC,CAAC;EACC;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CACF,CAAA,CAAE,SAAS,MAAM,QAAQ,KAAK,CAAC,SAAS,MAAM,QAAQ,CAC1D,KACA,CAAC,OAAO,SACR,OAAO,OAAO,OAAO,KAAK,CAAA,CAAE,MAAM,UAAU,CAAC,QAAQ,KAAK,CAAC,GAE3D,MAAM,IAAI,MAAM,2BAA2B;CAE7C,KAAA,MAAW,WAAW,OAAO,UAC3B,QAAQ,aAAa,iBAAiB,QAAQ,UAAU;CAC1D,OAAO,eAAe,OAAO,aAAa,KAAK,gBAAgB;EAC7D,GAAG,iBAAiB,UAAU;EAC9B,YAAY,WAAW;EACvB,OAAO,WAAW;EAClB,UAAU,WAAW;EACrB,YAAY,WAAW;EACvB,OAAO,WAAW;CACpB,EAAE;AACJ;AAIA,eAAsB,gBACpB,SACA,OACA,SACA,SAIkB;CAClB,MAAM,WAAW,MAAM,QAAQ,iBAAiB,KAAK;CACrD,MAAM,YAAY,SAAS,cAAc;CAGzC,IACE,CAAC,aACD,UAAU,0BAA0B,QAAQ,yBAC5C,CAAC,UAAU,UACX,OAAO,KAAK,QAAQ,MAAM,CAAA,CAAE,MACzB,QACC,UAAU,SAAS,SACnB,QAAQ,OAAO,IACnB,KACA,OAAO,KAAK,UAAU,MAAM,CAAA,CAAE,WAAW,OAAO,KAAK,QAAQ,MAAM,CAAA,CAAE,QAErE,MAAM,IAAI,MAAM,mCAAmC;CACrD,MAAM,WAAW,SAAS;CAC1B,MAAM,eAAe;EAAE,GAAG;EAAS,QAAQ,gBAAgB,QAAQ,MAAM;CAAE;CAC3E,MAAM,UAA8B,CAAC;CACrC,IAAI,UAAU;CACd,MAAM,eAAe,UAAU,UAA0B;EACvD,MAAM,cACJ,CAAC,WACD,QAAQ,WAAW,SAAS,UAC5B,QAAQ,OAAO,WAAW,OAAO,WAAW,UAAU;EACxD,MAAM,aACJ,WAAW,UACP,UACA,QAAQ,SAAS,WAAW,OAAO,MAAM,CAAA,CAAE,EAAC,EAAG;EACrD,OAAO;GACL,QAAQ,UACJ,oBACA,cACE,cACA,QAAQ,MAAM,WAAW,OAAO,SAAS,MAAM,IAC7C,YACA;GACR,UAAU;GACV,OAAO;GACP,SAAS;GACT,QAAQ;IACN,uBAAuB,QAAQ;IAC/B;IACA,GAAI,WAAW,UACX;KACE,WAAW;KACX,sBAAsB,SAAS,SAAS,QAAQ;IAClD,IACA,CAAC;GACP;GACA,OAAO,CAAC;GACR,GAAI,aAAa,EAAE,OAAO,WAAW,IAAI,CAAC;EAC5C;CACF;CAEA,MAAM,QAAQ,WACZ,OAAO,WAAW,KAAK,UAAU,MAAM,CAAC,KAAK,SAAS;CACxD,MAAM,UAA0B;EAC9B,QAAQ;EACR,UAAU;EACV,OAAO;EACP,SAAS;EACT,QAAQ,CAAC;EACT,OAAO,CAAC;EACR,OAAO;CACT;CACA,IAAI,CAAC,KAAK,OAAO,GAAG,OAAO,QAAQ,aAAa,OAAO,OAAO;CAC9D,IAAI,CAAC,KAAK,YAAY,IAAI,CAAC,GAAG,OAAO,QAAQ,iBAAiB,OAAO,OAAO;CAC5E,KAAA,MAAW,QAAQ,UAAU;EAC3B,MAAM,QAAQ,iBAAiB,KAAK;EACpC,MAAM,QAAQ,MAAM,QAAQ,aAAa,MAAM,QAAQ,KAAK,EAAE;EAC9D,MAAM,QAAQ,iBAAiB,KAAK;EACpC,MAAM,UAAU;GAAE,GAAG;GAAc,UAAU;GAAM;EAAM;EACzD,MAAM,SAAS,MAAM,QAAQ,QAAQ;GACnC,GAAG;GACH,UAAU,EAAE,GAAG,KAAK;GACpB,QAAQ,EAAE,GAAG,QAAQ,OAAO;GAC5B,OAAO,MAAM,MAAM;GACnB,oBAAoB,YAAY;IAC9B,MAAM,QAAQ,iBAAiB,KAAK;GACtC;EACF,CAAC;EACD,qCAAqC,QAAQ,OAAO;EACpD,QAAQ,KAAK,MAAM;EACnB,IAAI,CAAC,KAAK,YAAY,IAAI,CAAC,GAAG;GAC5B,UAAU;GAEV,OAAO,SAAS;GAChB,OAAO,YAAY;GACnB,OAAO,OAAO,KAAK;IAAE,UAAU;IAAS,UAAU,EAAE,MAAM,SAAS;GAAE,CAAC;GACtE,OAAO,OAAO,SAAS,UAAU,CAAC,KAAK,YAAY,IAAI,CAAC,GAAG;IACzD,MAAM,UAAU,OAAO,SAAS,IAAI;IACpC,IAAI,SAAS,OAAO,QAAQ,KAAK,QAAQ,QAAQ;GACnD;GAEA,IAAI,CAAC,KAAK,YAAY,IAAI,CAAC,GAAG,QAAQ,IAAI;EAC5C;EAEA,MAAM,QAAQ,iBAAiB,KAAK;EACpC,IAAI,WAAW,QAAQ,QAAQ,SAAS;CAC1C;CACA,OAAO,QAAQ,iBAAiB,OAAO,YAAY,CAAC;AACtD;AAOO,IAAM,kBAAN,cAA8B,MAAM,CAAC;AAErC,SAAS,sBACd,QACA,UACA,QACA;CACA,IAAI,CAAC,OAAO,cAAc,QAAQ,KAAK,WAAW,KAAK,CAAC,OAAO,QAC7D,MAAM,IAAI,MAAM,wBAAwB;CAC1C,MAAM,YAAY,IAAI,IACpB,OAAO,SAAS,SAAS,YACvB,QAAQ,SAAS,SAAS,SAAS,CAAC,QAAQ,SAAS,IAAI,IAAI,CAAC,CAChE,CACF;CACA,MAAM,uBAAO,IAAI,IAAY;CAC7B,KAAA,MAAW,SAAS,QAAQ;EAC1B,IAAI,CAAC,MAAM,QAAQ,MAAM,IAAI,gBAAgB,aAAa;EAC1D,KAAA,MAAW,QAAQ,OAAO;GACxB,IAAI,CAAC,OAAO,cAAc,IAAI,KAAK,CAAC,UAAU,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,GACtE,MAAM,IAAI,gBAAgB,oBAAoB;GAChD,KAAK,IAAI,IAAI;EACf;EACA,IAAI,MAAM,MAAM,MAAM,UAAU,QAAQ,KAAK,QAAQ,MAAM,QAAQ,EAAE,GACnE,MAAM,IAAI,gBAAgB,iBAAiB;CAC/C;CACA,MAAM,WAAW;EACf;EACA,YAAY,OAAO,SAAS;EAC5B,WAAW,OAAO,SAAS;EAC3B,uBAAuB,OAAO;EAC9B,QAAQ,OAAO,KAAK,WAAW,EAAE,OAAO,CAAC,GAAG,KAAK,EAAE,EAAE;EACrD,QAAQ;CACV;CACA,OAAO;EACL,GAAG;EACH,QAAQ,WAAW,QAAQ,CAAA,CAAE,OAAO,KAAK,UAAU,QAAQ,CAAC,CAAA,CAAE,OAAO,KAAK;CAC5E;AACF;;;AC9dO,SAAS,qBACd,QACM;CACN,IACE,CAAC,UACD;EACE;EACA;EACA;EACA;EACA;EACA;EACA;CACF,CAAA,CAAE,MACC,QACC,CAAC,OAAO,cAAc,OAAO,IAA2B,KACxD,OAAO,QAA+B,CAC1C,KACA,OAAO,cAAc,MACrB,OAAO,gBAAgB,MACvB,OAAO,iBAAiB,MACxB,OAAO,YAAY,YAEnB,MAAM,IAAI,MAAM,yBAAyB;AAC7C;;;ACyFO,SAAS,0BACd,QAC2B;CAC3B,MAAM,YAAY,iBAChB,cAAc,OAAO,YACjB,OAAO,UAAU,WACjB,OAAO,SACb;CACA,OAAO;EACL,SAAS,OAAO;EAChB,eAAe,OAAO;EACtB;EACA,GAAI,OAAO,WACP,EACE,UAAU,iBACR,cAAc,OAAO,WACjB,OAAO,SAAS,WAChB,OAAO,QACb,EACF,IACA,CAAC;EACL,GAAI,OAAO,+BAA+B,KAAA,IACtC,CAAC,IACD,EAAE,4BAA4B,OAAO,2BAA2B;EACpE,GAAI,OAAO,cAAc,KAAA,IAAY,CAAC,IAAI,EAAE,WAAW,OAAO,UAAU;EACxE,GAAI,OAAO,mBAAmB,KAAA,IAC1B,CAAC,IACD,EAAE,gBAAgB,OAAO,eAAe;EAC5C,GAAI,OAAO,sBAAsB,KAAA,IAC7B,CAAC,IACD,EAAE,mBAAmB,OAAO,kBAAkB;EAClD,QAAQ;GACN,aAAa,OAAO,OAAO;GAC3B,eAAe,OAAO,OAAO;GAC7B,gBAAgB,OAAO,OAAO;GAC9B,eAAe,OAAO,OAAO;GAC7B,gBAAgB,OAAO,OAAO;GAC9B,gBAAgB,OAAO,OAAO;GAC9B,WAAW,OAAO,OAAO;EAC3B;CACF;AACF"}
+{"version":3,"file":"proposal-contracts-CqVVPvqq.js","names":[],"sources":["../../src/extraction.ts","../../src/proposal-limits.ts","../../src/proposal-contracts.ts"],"sourcesContent":["import { fork } from 'node:child_process';\nimport { createHash } from 'node:crypto';\nimport { dirname, join } from 'node:path';\nimport { fileURLToPath } from 'node:url';\nimport type { GetAIOptions } from '@happyvertical/ai';\nimport type { PDFReaderOptions } from '@happyvertical/pdf';\nimport type { GetTranscriberOptions } from '@happyvertical/speech';\nimport type { AnalysisOutput } from './dto.js';\nimport {\n  ExtractionFailure,\n  emptyExtraction,\n  validateExtractionRequest,\n} from './extraction-providers.js';\nimport type {\n  ExtractionAdapter,\n  ExtractionRequest,\n  ExtractionResult,\n  ProviderIdentity,\n} from './extraction-types.js';\nimport { providerIdentity } from './extraction-types.js';\nimport type { AnalysisLease, IngestionService } from './server.js';\n\nexport type * from './extraction-types.js';\n\n/** Trusted server configuration. Credentials never enter analysis provenance. */\nexport interface ExtractionSDKConfiguration {\n  pdf?: {\n    provider: NonNullable<PDFReaderOptions['provider']>;\n    identity: ProviderIdentity;\n  };\n  ocr?: { identity: ProviderIdentity; options?: Record<string, unknown> };\n  speech?: { identity: ProviderIdentity; options: GetTranscriberOptions };\n  vision?: { identity: ProviderIdentity; options: GetAIOptions };\n  imageMode?: 'ocr' | 'vision';\n  /** Maximum concurrent child processes for this adapter instance (default 1). */\n  maxConcurrentProcesses?: number;\n  /** The deployment enforces a native-memory ceiling outside Node (e.g. container).\n   * Required for native decoders: Node's heap cap does not bound native allocation. */\n  nativeMemoryIsolation: 'host-enforced';\n}\n\n/** Production adapter: bounded per-evidence child, terminated on deadline/abort. */\nexport function createSDKExtractionAdapter(\n  configuration: ExtractionSDKConfiguration,\n): ExtractionAdapter {\n  try {\n    configuration = structuredClone(configuration);\n  } catch {\n    throw new Error('Serializable SDK configuration required');\n  }\n  const maximum = configuration.maxConcurrentProcesses ?? 1;\n  if (!Number.isSafeInteger(maximum) || maximum < 1 || maximum > 32)\n    throw new Error('Invalid extraction concurrency');\n  let running = 0;\n  if (configuration.nativeMemoryIsolation !== 'host-enforced')\n    throw new Error('Native memory isolation is required');\n  for (const provider of [\n    configuration.pdf,\n    configuration.ocr,\n    configuration.speech,\n    configuration.vision,\n  ]) {\n    if (provider) provider.identity = providerIdentity(provider.identity);\n  }\n  if (\n    configuration.pdf?.provider === 'auto' ||\n    configuration.ocr?.identity.provider === 'auto'\n  )\n    throw new Error('Pin extraction providers');\n  return {\n    async extract(request) {\n      let latest = emptyExtraction(request);\n      try {\n        validateExtractionRequest(request);\n      } catch (caught) {\n        if (!(caught instanceof ExtractionFailure)) throw caught;\n        latest.errors.push({\n          category: caught.category,\n          location: { kind: 'source' },\n        });\n        return latest;\n      }\n      if (request.evidence.mediaType.toLowerCase().startsWith('video/')) {\n        latest.status = 'unsupported';\n        latest.errors.push({\n          category: 'unsupported_type',\n          location: { kind: 'source' },\n        });\n        return latest;\n      }\n      if (request.signal?.aborted) {\n        latest.errors.push({\n          category: 'cancelled',\n          location: { kind: 'source' },\n        });\n        return latest;\n      }\n      if (running >= maximum) {\n        latest.errors.push({ category: 'limit', location: { kind: 'source' } });\n        return latest;\n      }\n      running++;\n      return new Promise<ExtractionResult>((resolve) => {\n        // A public entry can move shared code into chunks; resolve without loading it.\n        const child = fork(\n          join(\n            dirname(\n              fileURLToPath(\n                import.meta.resolve('@happyvertical/smrt-ingestion/server'),\n              ),\n            ),\n            'extraction-worker.js',\n          ),\n          [],\n          {\n            serialization: 'advanced',\n            stdio: ['ignore', 'ignore', 'ignore', 'ipc'],\n            execArgv: [`--max-old-space-size=${request.limits.workerHeapMb}`],\n            detached: process.platform !== 'win32',\n          },\n        );\n        let done = false;\n        const stop = () => {\n          try {\n            if (process.platform !== 'win32' && child.pid)\n              process.kill(-child.pid, 'SIGKILL');\n            else child.kill('SIGKILL');\n          } catch {\n            child.kill('SIGKILL');\n          }\n        };\n        const finish = (\n          category?: 'timeout' | 'cancelled' | 'unavailable' | 'limit',\n        ) => {\n          if (done) return;\n          done = true;\n          running--;\n          clearTimeout(timer);\n          request.signal?.removeEventListener('abort', abort);\n          stop();\n          if (category) {\n            latest.errors.push({ category, location: { kind: 'source' } });\n            latest.status = latest.segments.length ? 'partial' : 'failed';\n            latest.truncated = true;\n            latest.omitted.push({ kind: 'source' });\n          }\n          resolve(latest);\n        };\n        const abort = () => finish('cancelled');\n        const timer = setTimeout(\n          () => finish('timeout'),\n          request.limits.timeoutMs,\n        );\n        request.signal?.addEventListener('abort', abort, { once: true });\n        child.on('error', () => finish('unavailable'));\n        child.on('exit', () => {\n          if (!done) finish('unavailable');\n        });\n        child.on(\n          'message',\n          async (message: {\n            kind: string;\n            id?: number;\n            result?: ExtractionResult;\n          }) => {\n            if (done) return;\n            if (\n              message.kind === 'authorize' &&\n              Number.isSafeInteger(message.id)\n            ) {\n              try {\n                await request.beforeProviderCall?.();\n                if (!done) child.send({ kind: 'authorized', id: message.id });\n              } catch {\n                finish('cancelled');\n              }\n              return;\n            }\n            if (\n              (message.kind === 'progress' || message.kind === 'result') &&\n              message.result\n            ) {\n              // The child is our trusted normalizer; bound serialized IPC output as well.\n              if (\n                Buffer.byteLength(JSON.stringify(message.result)) >\n                request.limits.maxOutputBytes + 65536\n              )\n                return finish('limit');\n              latest = message.result;\n              if (message.kind === 'result') finish();\n            } else finish('unavailable');\n          },\n        );\n        const {\n          signal: _signal,\n          beforeProviderCall: _authorize,\n          ...wireRequest\n        } = request;\n        child.send({ request: wireRequest, configuration }, (error) => {\n          if (error) finish('unavailable');\n        });\n        if (request.signal?.aborted) abort();\n      });\n    },\n  };\n}\n\nfunction validateAndNormalizeExtractionOutput(\n  result: ExtractionResult,\n  request: ExtractionRequest,\n): void {\n  const numeric = (value: number) => Number.isFinite(value) && value >= 0;\n  const location = (\n    value: ExtractionResult['segments'][number]['location'],\n  ) => {\n    if (!value || typeof value !== 'object') return false;\n    if (value.kind === 'source') return true;\n    if (value.kind === 'page')\n      return Number.isSafeInteger(value.page) && value.page > 0;\n    if (value.kind === 'pages')\n      return (\n        Number.isSafeInteger(value.startPage) &&\n        value.startPage > 0 &&\n        Number.isSafeInteger(value.endPage) &&\n        value.endPage >= value.startPage\n      );\n    return (\n      value.kind === 'time' &&\n      numeric(value.startMs) &&\n      numeric(value.endMs) &&\n      value.endMs >= value.startMs\n    );\n  };\n  if (\n    !result ||\n    !['complete', 'partial', 'failed', 'unsupported'].includes(result.status) ||\n    result.automaticActionEligible !== false ||\n    result.configurationRevision !== request.configurationRevision ||\n    !result.evidence ||\n    Object.entries(request.evidence).some(\n      ([key, value]) =>\n        result.evidence[key as keyof typeof result.evidence] !== value,\n    ) ||\n    typeof result.truncated !== 'boolean' ||\n    !Array.isArray(result.capabilities) ||\n    result.capabilities.some(\n      (capability) =>\n        !capability ||\n        typeof capability.confidence !== 'boolean' ||\n        typeof capability.boxes !== 'boolean' ||\n        !['source', 'page', 'time'].includes(capability.location) ||\n        !['unknown', 'reported'].includes(capability.truncation) ||\n        !['unknown', 'reported'].includes(capability.usage),\n    ) ||\n    !result.limits ||\n    Object.entries(request.limits).some(\n      ([key, value]) =>\n        result.limits[key as keyof typeof result.limits] !== value,\n    ) ||\n    !Array.isArray(result.segments) ||\n    !Array.isArray(result.errors) ||\n    !Array.isArray(result.omitted) ||\n    (result.status === 'complete' &&\n      (result.truncated ||\n        result.errors.length > 0 ||\n        result.omitted.length > 0)) ||\n    result.omitted.some((value) => !location(value)) ||\n    result.segments.some(\n      (segment) =>\n        typeof segment.text !== 'string' ||\n        !location(segment.location) ||\n        segment.location.kind === 'pages' ||\n        (segment.provenance?.provider === 'unlimited-ocr' &&\n          (segment.confidence !== null || segment.boxes !== null)) ||\n        !segment.provenance ||\n        [\n          segment.provenance.provider,\n          segment.provenance.model,\n          segment.provenance.version,\n        ].some((value) => typeof value !== 'string' || !value) ||\n        (segment.confidence !== null &&\n          (!segment.confidence ||\n            !numeric(segment.confidence.value) ||\n            segment.confidence.value > 1 ||\n            segment.confidence.scale !== '0-1' ||\n            segment.confidence.calibration !== 'unknown')) ||\n        (segment.boxes !== null &&\n          (!Array.isArray(segment.boxes) ||\n            segment.boxes.some(\n              (box) =>\n                typeof box.text !== 'string' ||\n                ![box.x, box.y, box.width, box.height].every(numeric),\n            ))),\n    ) ||\n    result.errors.some(\n      (error) =>\n        ![\n          'unsupported_type',\n          'malformed_output',\n          'limit',\n          'timeout',\n          'unavailable',\n          'authentication',\n          'cancelled',\n          'integrity',\n        ].includes(error.category) || !location(error.location),\n    ) ||\n    !result.usage ||\n    Object.values(result.usage).some((value) => !numeric(value))\n  )\n    throw new Error('Invalid extraction output');\n  // Structural typing permits extra host fields. Never persist them as identity.\n  for (const segment of result.segments)\n    segment.provenance = providerIdentity(segment.provenance);\n  result.capabilities = result.capabilities.map((capability) => ({\n    ...providerIdentity(capability),\n    confidence: capability.confidence,\n    boxes: capability.boxes,\n    location: capability.location,\n    truncation: capability.truncation,\n    usage: capability.usage,\n  }));\n}\n\n/** Current access is rechecked on read and fenced publication by the foundation.\n * The host already allocated the immutable input/config revision and lease. */\nexport async function extractAnalysis(\n  service: IngestionService,\n  lease: AnalysisLease,\n  adapter: ExtractionAdapter,\n  options: Pick<\n    ExtractionRequest,\n    'limits' | 'configurationRevision' | 'signal'\n  >,\n): Promise<boolean> {\n  const snapshot = await service.getAnalysisInput(lease);\n  const persisted = snapshot.configuration.extraction as\n    | { configurationRevision?: unknown; limits?: Record<string, unknown> }\n    | undefined;\n  if (\n    !persisted ||\n    persisted.configurationRevision !== options.configurationRevision ||\n    !persisted.limits ||\n    Object.keys(options.limits).some(\n      (key) =>\n        persisted.limits?.[key] !==\n        options.limits[key as keyof typeof options.limits],\n    ) ||\n    Object.keys(persisted.limits).length !== Object.keys(options.limits).length\n  )\n    throw new Error('Extraction configuration mismatch');\n  const evidence = snapshot.evidence;\n  const boundOptions = { ...options, limits: structuredClone(options.limits) };\n  const results: ExtractionResult[] = [];\n  let limited = false;\n  const publication = (reserve = false): AnalysisOutput => {\n    const allComplete =\n      !limited &&\n      results.length === evidence.length &&\n      results.every((result) => result.status === 'complete');\n    const firstError =\n      limited || reserve\n        ? 'limit'\n        : results.flatMap((result) => result.errors)[0]?.category;\n    return {\n      status: reserve\n        ? 'needs_attention'\n        : allComplete\n          ? 'completed'\n          : results.some((result) => result.segments.length)\n            ? 'partial'\n            : 'needs_attention',\n      provider: 'smrt-ingestion-extraction',\n      model: 'none',\n      version: '1',\n      output: {\n        configurationRevision: options.configurationRevision,\n        results,\n        ...(limited || reserve\n          ? {\n              truncated: true,\n              omittedEvidenceCount: evidence.length - results.length,\n            }\n          : {}),\n      },\n      usage: {},\n      ...(firstError ? { error: firstError } : {}),\n    };\n  };\n  // Canonical persistence sorts keys but uses identical JSON value encoding/size.\n  const fits = (output: AnalysisOutput) =>\n    Buffer.byteLength(JSON.stringify(output)) <= snapshot.maxOutputBytes;\n  const minimum: AnalysisOutput = {\n    status: 'needs_attention',\n    provider: 'smrt-ingestion-extraction',\n    model: 'none',\n    version: '1',\n    output: {},\n    usage: {},\n    error: 'limit',\n  };\n  if (!fits(minimum)) return service.failAnalysis(lease, 'limit');\n  if (!fits(publication(true))) return service.completeAnalysis(lease, minimum);\n  for (const part of evidence) {\n    await service.getAnalysisInput(lease);\n    const bytes = await service.readEvidence(lease.itemId, part.id);\n    await service.getAnalysisInput(lease);\n    const request = { ...boundOptions, evidence: part, bytes };\n    const result = await adapter.extract({\n      ...request,\n      evidence: { ...part },\n      limits: { ...request.limits },\n      bytes: bytes.slice(),\n      beforeProviderCall: async () => {\n        await service.getAnalysisInput(lease);\n      },\n    });\n    validateAndNormalizeExtractionOutput(result, request);\n    results.push(result);\n    if (!fits(publication(true))) {\n      limited = true;\n      // Preserve earlier parts and the largest prefix of complete segments that fits.\n      result.status = 'partial';\n      result.truncated = true;\n      result.errors.push({ category: 'limit', location: { kind: 'source' } });\n      while (result.segments.length && !fits(publication(true))) {\n        const removed = result.segments.pop();\n        if (removed) result.omitted.push(removed.location);\n      }\n      // Diagnostics are indivisible: omit this result rather than erase known gaps.\n      if (!fits(publication(true))) results.pop();\n    }\n    // Revalidation after an external call prevents returning/publishing revoked evidence.\n    await service.getAnalysisInput(lease);\n    if (limited || options.signal?.aborted) break;\n  }\n  return service.completeAnalysis(lease, publication());\n}\n\n/**\n * A split's page groups failed the group check (empty, unknown or repeated\n * page, unordered). Generated splits that fail it are dropped (#4288); the\n * message is a fixed phrase, never page numbers.\n */\nexport class SplitGroupError extends Error {}\n/** Side-effect-free, versioned split proposal. Original evidence is not replaced. */\nexport function proposeDocumentSplits(\n  result: ExtractionResult,\n  revision: number,\n  groups: number[][],\n) {\n  if (!Number.isSafeInteger(revision) || revision < 1 || !groups.length)\n    throw new Error('Invalid split revision');\n  const available = new Set(\n    result.segments.flatMap((segment) =>\n      segment.location.kind === 'page' ? [segment.location.page] : [],\n    ),\n  );\n  const seen = new Set<number>();\n  for (const group of groups) {\n    if (!group.length) throw new SplitGroupError('Empty split');\n    for (const page of group) {\n      if (!Number.isSafeInteger(page) || !available.has(page) || seen.has(page))\n        throw new SplitGroupError('Invalid split page');\n      seen.add(page);\n    }\n    if (group.some((page, index) => index > 0 && page <= group[index - 1]))\n      throw new SplitGroupError('Unordered split');\n  }\n  const proposal = {\n    revision,\n    evidenceId: result.evidence.id,\n    inputHash: result.evidence.contentHash,\n    configurationRevision: result.configurationRevision,\n    groups: groups.map((pages) => ({ pages: [...pages] })),\n    status: 'proposed' as const,\n  };\n  return {\n    ...proposal,\n    digest: createHash('sha256').update(JSON.stringify(proposal)).digest('hex'),\n  };\n}\n","import type { ProposalConfiguration } from './proposal-contracts.js';\n\n/** Validate deployment limits before any item is interpreted. */\nexport function assertProposalLimits(\n  limits: ProposalConfiguration['limits'],\n): void {\n  if (\n    !limits ||\n    [\n      'maxHandlers',\n      'maxCandidates',\n      'maxSuggestions',\n      'maxInputBytes',\n      'maxOutputBytes',\n      'maxQueryLength',\n      'timeoutMs',\n    ].some(\n      (key) =>\n        !Number.isSafeInteger(limits[key as keyof typeof limits]) ||\n        limits[key as keyof typeof limits] <= 0,\n    ) ||\n    limits.maxHandlers > 20 ||\n    limits.maxCandidates > 20 ||\n    limits.maxSuggestions > 20 ||\n    limits.timeoutMs > 2_147_483_647\n  )\n    throw new Error('Invalid proposal limits');\n}\n","import type { DecisionClient } from '@happyvertical/smrt-core';\nimport type { HandlerContext } from './execution-contracts.js';\nimport type { IntakeValues } from './execution-dto.js';\nimport {\n  type EvidenceLocation,\n  type ProviderIdentity,\n  providerIdentity,\n} from './extraction-types.js';\nimport type {\n  ProposalCandidate,\n  ProposalCatalogEntry,\n  ProposalReferenceField,\n} from './proposal-dto.js';\n\n/** Optional discovery capability on the existing application execution handler. */\nexport interface HandlerDiscovery {\n  mediaTypes: readonly string[];\n  /** Every existing-record argument exposed to generation must be declared here. */\n  references: Readonly<Record<string, ProposalReferenceField>>;\n  /** Database reads only; filter in the query before ranking/summarizing. */\n  candidates?(\n    query: string,\n    context: HandlerContext,\n    page: { limit: number },\n  ): Promise<{\n    items: Array<Omit<ProposalCandidate, 'key'>>;\n    hasMore: boolean;\n  }>;\n}\nexport interface GenerationLimits {\n  maxHandlers: number;\n  maxCandidates: number;\n  maxSuggestions: number;\n  maxInputBytes: number;\n  maxOutputBytes: number;\n  maxQueryLength: number;\n  timeoutMs: number;\n}\nexport interface GenerativeProposalInput {\n  evidence: Array<{\n    evidenceId: string;\n    partId: string;\n    parentEvidenceId: string | null;\n    mediaType: string;\n    contentHash: string;\n    segments: Array<{ text: string; location: EvidenceLocation }>;\n  }>;\n  offered: Array<{\n    handler: ProposalCatalogEntry;\n    candidates: ProposalCandidate[];\n  }>;\n  instructions: string;\n  /** Bounded, currently eligible examples; neither evidence nor authority. */\n  examples?: import('./feedback-dto.js').FeedbackSelection;\n  /** Authenticated human correction carried through fresh extraction; never model authority. */\n  humanCorrection?: IntakeValues;\n  /** Authenticated reviewer guidance; trusted steering only, never catalog or approval authority. */\n  reviewerInstruction?: { id: string; text: string };\n}\n/** Inject only trusted SDK-bound adapters. Generative output is always untrusted. */\nexport interface ProposalGenerator {\n  identity: ProviderIdentity;\n  generate(\n    input: GenerativeProposalInput,\n    options: { signal: AbortSignal; maxOutputBytes: number },\n  ): Promise<{\n    output: unknown;\n    completion: 'complete' | 'unknown';\n    usage?: Record<string, number>;\n    /** Provider-reported immutable model revision, when it safely resolves a configured alias. */\n    responseModel?: string;\n  }>;\n}\n/**\n * How validated decision answers affect readiness. `gate` (default) sends a\n * suggestion to `needs_review` when the thresholds are not met; `record` still\n * runs and persists the same answers but leaves outcome/disposition to the\n * validator. Neither mode makes any action automation-eligible.\n */\nexport type DecisionReadiness = 'gate' | 'record';\n/** Public decision settings shared by generation and read configuration. */\nexport interface DecisionSettings {\n  minimumDecisionProbability?: number;\n  tieMargin?: number;\n  /**\n   * Per-request token window forwarded to the decision client as `maxLen`\n   * (the SDK Laya provider option). Absent keeps the client/checkpoint default.\n   */\n  decisionMaxLen?: number;\n  decisionReadiness?: DecisionReadiness;\n}\nexport interface ProposalConfiguration extends DecisionSettings {\n  version: string;\n  promptVersion: string;\n  generator: ProposalGenerator;\n  /** Absent means the normal unconfigured decision path, never fake probability. */\n  decision?: { client: DecisionClient; identity: ProviderIdentity };\n  limits: GenerationLimits;\n  /**\n   * Opt-in, bounded, redacted capture of the model output on a failed\n   * interpretation attempt (#4285). Text requires a host redactor; absent or\n   * failed redaction retains no text. Off when absent. Not public read\n   * configuration: it never enters frozen configuration, digests or\n   * `proposalReadConfiguration`. See PROPOSALS.md.\n   */\n  failureCapture?: import('./failure-capture.js').FailureCaptureConfiguration;\n  /**\n   * Optional host checks on each validated suggestion (trusted, server-only).\n   * Runs after validation and before the decision gate, with a copy of the\n   * suggestion, its handler and the retained evidence text. The result can\n   * only hold the suggestion at `needs_review` and record bounded, value-free\n   * annotations; it can never upgrade a disposition or change args. A throw,\n   * timeout or malformed result holds the suggestion with a fixed reason code.\n   * Not public read configuration: it never enters frozen configuration or\n   * digests. See PROPOSALS.md.\n   */\n  reviewSuggestion?: (\n    input: SuggestionReviewInput,\n  ) =>\n    | HostSuggestionReviewResult\n    | undefined\n    | Promise<HostSuggestionReviewResult | undefined>;\n}\n/** A copy of what the host may inspect; mutating it changes nothing. */\nexport interface SuggestionReviewInput {\n  suggestion: import('./proposal-dto.js').GeneratedSuggestion;\n  handler: ProposalCatalogEntry;\n  evidence: GenerativeProposalInput['evidence'];\n}\n/** Host result: bounded codes and argument field names only. */\nexport interface HostSuggestionReviewResult {\n  /** Hold the suggestion at `needs_review`. */\n  hold?: boolean;\n  /** Up to 8 codes matching `^[a-z][a-z0-9_.-]{0,47}$`; never document values. */\n  reasons?: string[];\n  /** Argument names declared in the handler's `argsSchema` that the host filled itself. */\n  prefilled?: string[];\n}\n/** Credential-free configuration for validating persisted proposal snapshots. */\nexport interface ProposalReadConfiguration extends DecisionSettings {\n  version: string;\n  promptVersion: string;\n  generator: ProviderIdentity;\n  decision?: ProviderIdentity;\n  limits: GenerationLimits;\n}\n/** Remove generation capability while preserving the public persisted configuration. */\nexport function proposalReadConfiguration(\n  config: ProposalConfiguration | ProposalReadConfiguration,\n): ProposalReadConfiguration {\n  const generator = providerIdentity(\n    'identity' in config.generator\n      ? config.generator.identity\n      : config.generator,\n  );\n  return {\n    version: config.version,\n    promptVersion: config.promptVersion,\n    generator,\n    ...(config.decision\n      ? {\n          decision: providerIdentity(\n            'identity' in config.decision\n              ? config.decision.identity\n              : config.decision,\n          ),\n        }\n      : {}),\n    ...(config.minimumDecisionProbability === undefined\n      ? {}\n      : { minimumDecisionProbability: config.minimumDecisionProbability }),\n    ...(config.tieMargin === undefined ? {} : { tieMargin: config.tieMargin }),\n    ...(config.decisionMaxLen === undefined\n      ? {}\n      : { decisionMaxLen: config.decisionMaxLen }),\n    ...(config.decisionReadiness === undefined\n      ? {}\n      : { decisionReadiness: config.decisionReadiness }),\n    limits: {\n      maxHandlers: config.limits.maxHandlers,\n      maxCandidates: config.limits.maxCandidates,\n      maxSuggestions: config.limits.maxSuggestions,\n      maxInputBytes: config.limits.maxInputBytes,\n      maxOutputBytes: config.limits.maxOutputBytes,\n      maxQueryLength: config.limits.maxQueryLength,\n      timeoutMs: config.limits.timeoutMs,\n    },\n  };\n}\nexport interface GenerationStageConfiguration extends IntakeValues {\n  stage: 'interpret';\n  /** Copied from the pinned extraction source; verified against it before provider disclosure. */\n  reviewerInstruction?: IntakeValues;\n  proposals: {\n    source: import('./proposal-dto.js').GenerationSourcePin;\n    configurationVersion: string;\n    promptVersion: string;\n    catalogDigest: string;\n    generator: ProviderIdentity;\n    decision: ProviderIdentity | null;\n    limits: GenerationLimits;\n    minimumDecisionProbability: number;\n    tieMargin: number;\n    /** Present only when configured, so default digests stay stable. */\n    decisionMaxLen?: number;\n    /** Present only for `record`; `gate` is the default. */\n    decisionReadiness?: 'record';\n  };\n}\n"],"mappings":";;;;;;AA0CO,SAAS,2BACd,eACmB;CACnB,IAAI;EACF,gBAAgB,gBAAgB,aAAa;CAC/C,QAAQ;EACN,MAAM,IAAI,MAAM,yCAAyC;CAC3D;CACA,MAAM,UAAU,cAAc,0BAA0B;CACxD,IAAI,CAAC,OAAO,cAAc,OAAO,KAAK,UAAU,KAAK,UAAU,IAC7D,MAAM,IAAI,MAAM,gCAAgC;CAClD,IAAI,UAAU;CACd,IAAI,cAAc,0BAA0B,iBAC1C,MAAM,IAAI,MAAM,qCAAqC;CACvD,KAAA,MAAW,YAAY;EACrB,cAAc;EACd,cAAc;EACd,cAAc;EACd,cAAc;CAChB,GACE,IAAI,UAAU,SAAS,WAAW,iBAAiB,SAAS,QAAQ;CAEtE,IACE,cAAc,KAAK,aAAa,UAChC,cAAc,KAAK,SAAS,aAAa,QAEzC,MAAM,IAAI,MAAM,0BAA0B;CAC5C,OAAO,EACL,MAAM,QAAQ,SAAS;EACrB,IAAI,SAAS,gBAAgB,OAAO;EACpC,IAAI;GACF,0BAA0B,OAAO;EACnC,SAAS,QAAQ;GACf,IAAI,EAAE,kBAAkB,oBAAoB,MAAM;GAClD,OAAO,OAAO,KAAK;IACjB,UAAU,OAAO;IACjB,UAAU,EAAE,MAAM,SAAS;GAC7B,CAAC;GACD,OAAO;EACT;EACA,IAAI,QAAQ,SAAS,UAAU,YAAY,CAAA,CAAE,WAAW,QAAQ,GAAG;GACjE,OAAO,SAAS;GAChB,OAAO,OAAO,KAAK;IACjB,UAAU;IACV,UAAU,EAAE,MAAM,SAAS;GAC7B,CAAC;GACD,OAAO;EACT;EACA,IAAI,QAAQ,QAAQ,SAAS;GAC3B,OAAO,OAAO,KAAK;IACjB,UAAU;IACV,UAAU,EAAE,MAAM,SAAS;GAC7B,CAAC;GACD,OAAO;EACT;EACA,IAAI,WAAW,SAAS;GACtB,OAAO,OAAO,KAAK;IAAE,UAAU;IAAS,UAAU,EAAE,MAAM,SAAS;GAAE,CAAC;GACtE,OAAO;EACT;EACA;EACA,OAAO,IAAI,SAA2B,YAAY;GAEhD,MAAM,QAAQ,KACZ,KACE,QACE,cACE,OAAA,KAAY,QAAQ,sCAAsC,CAC5D,CACF,GACA,sBACF,GACA,CAAC,GACD;IACE,eAAe;IACf,OAAO;KAAC;KAAU;KAAU;KAAU;IAAK;IAC3C,UAAU,CAAC,wBAAwB,QAAQ,OAAO,cAAc;IAChE,UAAU,QAAQ,aAAa;GACjC,CACF;GACA,IAAI,OAAO;GACX,MAAM,aAAa;IACjB,IAAI;KACF,IAAI,QAAQ,aAAa,WAAW,MAAM,KACxC,QAAQ,KAAK,CAAC,MAAM,KAAK,SAAS;UAC/B,MAAM,KAAK,SAAS;IAC3B,QAAQ;KACN,MAAM,KAAK,SAAS;IACtB;GACF;GACA,MAAM,UACJ,aACG;IACH,IAAI,MAAM;IACV,OAAO;IACP;IACA,aAAa,KAAK;IAClB,QAAQ,QAAQ,oBAAoB,SAAS,KAAK;IAClD,KAAK;IACL,IAAI,UAAU;KACZ,OAAO,OAAO,KAAK;MAAE;MAAU,UAAU,EAAE,MAAM,SAAS;KAAE,CAAC;KAC7D,OAAO,SAAS,OAAO,SAAS,SAAS,YAAY;KACrD,OAAO,YAAY;KACnB,OAAO,QAAQ,KAAK,EAAE,MAAM,SAAS,CAAC;IACxC;IACA,QAAQ,MAAM;GAChB;GACA,MAAM,cAAc,OAAO,WAAW;GACtC,MAAM,QAAQ,iBACN,OAAO,SAAS,GACtB,QAAQ,OAAO,SACjB;GACA,QAAQ,QAAQ,iBAAiB,SAAS,OAAO,EAAE,MAAM,KAAK,CAAC;GAC/D,MAAM,GAAG,eAAe,OAAO,aAAa,CAAC;GAC7C,MAAM,GAAG,cAAc;IACrB,IAAI,CAAC,MAAM,OAAO,aAAa;GACjC,CAAC;GACD,MAAM,GACJ,WACA,OAAO,YAID;IACJ,IAAI,MAAM;IACV,IACE,QAAQ,SAAS,eACjB,OAAO,cAAc,QAAQ,EAAE,GAC/B;KACA,IAAI;MACF,MAAM,QAAQ,qBAAqB;MACnC,IAAI,CAAC,MAAM,MAAM,KAAK;OAAE,MAAM;OAAc,IAAI,QAAQ;MAAG,CAAC;KAC9D,QAAQ;MACN,OAAO,WAAW;KACpB;KACA;IACF;IACA,KACG,QAAQ,SAAS,cAAc,QAAQ,SAAS,aACjD,QAAQ,QACR;KAEA,IACE,OAAO,WAAW,KAAK,UAAU,QAAQ,MAAM,CAAC,IAChD,QAAQ,OAAO,iBAAiB,OAEhC,OAAO,OAAO,OAAO;KACvB,SAAS,QAAQ;KACjB,IAAI,QAAQ,SAAS,UAAU,OAAO;IACxC,OAAO,OAAO,aAAa;GAC7B,CACF;GACA,MAAM,EACJ,QAAQ,SACR,oBAAoB,YACpB,GAAG,gBACD;GACJ,MAAM,KAAK;IAAE,SAAS;IAAa;GAAc,IAAI,UAAU;IAC7D,IAAI,OAAO,OAAO,aAAa;GACjC,CAAC;GACD,IAAI,QAAQ,QAAQ,SAAS,MAAM;EACrC,CAAC;CACH,EACF;AACF;AAEA,SAAS,qCACP,QACA,SACM;CACN,MAAM,WAAW,UAAkB,OAAO,SAAS,KAAK,KAAK,SAAS;CACtE,MAAM,YACJ,UACG;EACH,IAAI,CAAC,SAAS,OAAO,UAAU,UAAU,OAAO;EAChD,IAAI,MAAM,SAAS,UAAU,OAAO;EACpC,IAAI,MAAM,SAAS,QACjB,OAAO,OAAO,cAAc,MAAM,IAAI,KAAK,MAAM,OAAO;EAC1D,IAAI,MAAM,SAAS,SACjB,OACE,OAAO,cAAc,MAAM,SAAS,KACpC,MAAM,YAAY,KAClB,OAAO,cAAc,MAAM,OAAO,KAClC,MAAM,WAAW,MAAM;EAE3B,OACE,MAAM,SAAS,UACf,QAAQ,MAAM,OAAO,KACrB,QAAQ,MAAM,KAAK,KACnB,MAAM,SAAS,MAAM;CAEzB;CACA,IACE,CAAC,UACD,CAAC;EAAC;EAAY;EAAW;EAAU;CAAa,CAAA,CAAE,SAAS,OAAO,MAAM,KACxE,OAAO,4BAA4B,SACnC,OAAO,0BAA0B,QAAQ,yBACzC,CAAC,OAAO,YACR,OAAO,QAAQ,QAAQ,QAAQ,CAAA,CAAE,MAC9B,CAAC,KAAK,WACL,OAAO,SAAS,SAAyC,KAC7D,KACA,OAAO,OAAO,cAAc,aAC5B,CAAC,MAAM,QAAQ,OAAO,YAAY,KAClC,OAAO,aAAa,MACjB,eACC,CAAC,cACD,OAAO,WAAW,eAAe,aACjC,OAAO,WAAW,UAAU,aAC5B,CAAC;EAAC;EAAU;EAAQ;CAAM,CAAA,CAAE,SAAS,WAAW,QAAQ,KACxD,CAAC,CAAC,WAAW,UAAU,CAAA,CAAE,SAAS,WAAW,UAAU,KACvD,CAAC,CAAC,WAAW,UAAU,CAAA,CAAE,SAAS,WAAW,KAAK,CACtD,KACA,CAAC,OAAO,UACR,OAAO,QAAQ,QAAQ,MAAM,CAAA,CAAE,MAC5B,CAAC,KAAK,WACL,OAAO,OAAO,SAAuC,KACzD,KACA,CAAC,MAAM,QAAQ,OAAO,QAAQ,KAC9B,CAAC,MAAM,QAAQ,OAAO,MAAM,KAC5B,CAAC,MAAM,QAAQ,OAAO,OAAO,KAC5B,OAAO,WAAW,eAChB,OAAO,aACN,OAAO,OAAO,SAAS,KACvB,OAAO,QAAQ,SAAS,MAC5B,OAAO,QAAQ,MAAM,UAAU,CAAC,SAAS,KAAK,CAAC,KAC/C,OAAO,SAAS,MACb,YACC,OAAO,QAAQ,SAAS,YACxB,CAAC,SAAS,QAAQ,QAAQ,KAC1B,QAAQ,SAAS,SAAS,WACzB,QAAQ,YAAY,aAAa,oBAC/B,QAAQ,eAAe,QAAQ,QAAQ,UAAU,SACpD,CAAC,QAAQ,cACT;EACE,QAAQ,WAAW;EACnB,QAAQ,WAAW;EACnB,QAAQ,WAAW;CACrB,CAAA,CAAE,MAAM,UAAU,OAAO,UAAU,YAAY,CAAC,KAAK,KACpD,QAAQ,eAAe,SACrB,CAAC,QAAQ,cACR,CAAC,QAAQ,QAAQ,WAAW,KAAK,KACjC,QAAQ,WAAW,QAAQ,KAC3B,QAAQ,WAAW,UAAU,SAC7B,QAAQ,WAAW,gBAAgB,cACtC,QAAQ,UAAU,SAChB,CAAC,MAAM,QAAQ,QAAQ,KAAK,KAC3B,QAAQ,MAAM,MACX,QACC,OAAO,IAAI,SAAS,YACpB,CAAC;EAAC,IAAI;EAAG,IAAI;EAAG,IAAI;EAAO,IAAI;CAAM,CAAA,CAAE,MAAM,OAAO,CACxD,EACR,KACA,OAAO,OAAO,MACX,UACC,CAAC;EACC;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CACF,CAAA,CAAE,SAAS,MAAM,QAAQ,KAAK,CAAC,SAAS,MAAM,QAAQ,CAC1D,KACA,CAAC,OAAO,SACR,OAAO,OAAO,OAAO,KAAK,CAAA,CAAE,MAAM,UAAU,CAAC,QAAQ,KAAK,CAAC,GAE3D,MAAM,IAAI,MAAM,2BAA2B;CAE7C,KAAA,MAAW,WAAW,OAAO,UAC3B,QAAQ,aAAa,iBAAiB,QAAQ,UAAU;CAC1D,OAAO,eAAe,OAAO,aAAa,KAAK,gBAAgB;EAC7D,GAAG,iBAAiB,UAAU;EAC9B,YAAY,WAAW;EACvB,OAAO,WAAW;EAClB,UAAU,WAAW;EACrB,YAAY,WAAW;EACvB,OAAO,WAAW;CACpB,EAAE;AACJ;AAIA,eAAsB,gBACpB,SACA,OACA,SACA,SAIkB;CAClB,MAAM,WAAW,MAAM,QAAQ,iBAAiB,KAAK;CACrD,MAAM,YAAY,SAAS,cAAc;CAGzC,IACE,CAAC,aACD,UAAU,0BAA0B,QAAQ,yBAC5C,CAAC,UAAU,UACX,OAAO,KAAK,QAAQ,MAAM,CAAA,CAAE,MACzB,QACC,UAAU,SAAS,SACnB,QAAQ,OAAO,IACnB,KACA,OAAO,KAAK,UAAU,MAAM,CAAA,CAAE,WAAW,OAAO,KAAK,QAAQ,MAAM,CAAA,CAAE,QAErE,MAAM,IAAI,MAAM,mCAAmC;CACrD,MAAM,WAAW,SAAS;CAC1B,MAAM,eAAe;EAAE,GAAG;EAAS,QAAQ,gBAAgB,QAAQ,MAAM;CAAE;CAC3E,MAAM,UAA8B,CAAC;CACrC,IAAI,UAAU;CACd,MAAM,eAAe,UAAU,UAA0B;EACvD,MAAM,cACJ,CAAC,WACD,QAAQ,WAAW,SAAS,UAC5B,QAAQ,OAAO,WAAW,OAAO,WAAW,UAAU;EACxD,MAAM,aACJ,WAAW,UACP,UACA,QAAQ,SAAS,WAAW,OAAO,MAAM,CAAA,CAAE,EAAC,EAAG;EACrD,OAAO;GACL,QAAQ,UACJ,oBACA,cACE,cACA,QAAQ,MAAM,WAAW,OAAO,SAAS,MAAM,IAC7C,YACA;GACR,UAAU;GACV,OAAO;GACP,SAAS;GACT,QAAQ;IACN,uBAAuB,QAAQ;IAC/B;IACA,GAAI,WAAW,UACX;KACE,WAAW;KACX,sBAAsB,SAAS,SAAS,QAAQ;IAClD,IACA,CAAC;GACP;GACA,OAAO,CAAC;GACR,GAAI,aAAa,EAAE,OAAO,WAAW,IAAI,CAAC;EAC5C;CACF;CAEA,MAAM,QAAQ,WACZ,OAAO,WAAW,KAAK,UAAU,MAAM,CAAC,KAAK,SAAS;CACxD,MAAM,UAA0B;EAC9B,QAAQ;EACR,UAAU;EACV,OAAO;EACP,SAAS;EACT,QAAQ,CAAC;EACT,OAAO,CAAC;EACR,OAAO;CACT;CACA,IAAI,CAAC,KAAK,OAAO,GAAG,OAAO,QAAQ,aAAa,OAAO,OAAO;CAC9D,IAAI,CAAC,KAAK,YAAY,IAAI,CAAC,GAAG,OAAO,QAAQ,iBAAiB,OAAO,OAAO;CAC5E,KAAA,MAAW,QAAQ,UAAU;EAC3B,MAAM,QAAQ,iBAAiB,KAAK;EACpC,MAAM,QAAQ,MAAM,QAAQ,aAAa,MAAM,QAAQ,KAAK,EAAE;EAC9D,MAAM,QAAQ,iBAAiB,KAAK;EACpC,MAAM,UAAU;GAAE,GAAG;GAAc,UAAU;GAAM;EAAM;EACzD,MAAM,SAAS,MAAM,QAAQ,QAAQ;GACnC,GAAG;GACH,UAAU,EAAE,GAAG,KAAK;GACpB,QAAQ,EAAE,GAAG,QAAQ,OAAO;GAC5B,OAAO,MAAM,MAAM;GACnB,oBAAoB,YAAY;IAC9B,MAAM,QAAQ,iBAAiB,KAAK;GACtC;EACF,CAAC;EACD,qCAAqC,QAAQ,OAAO;EACpD,QAAQ,KAAK,MAAM;EACnB,IAAI,CAAC,KAAK,YAAY,IAAI,CAAC,GAAG;GAC5B,UAAU;GAEV,OAAO,SAAS;GAChB,OAAO,YAAY;GACnB,OAAO,OAAO,KAAK;IAAE,UAAU;IAAS,UAAU,EAAE,MAAM,SAAS;GAAE,CAAC;GACtE,OAAO,OAAO,SAAS,UAAU,CAAC,KAAK,YAAY,IAAI,CAAC,GAAG;IACzD,MAAM,UAAU,OAAO,SAAS,IAAI;IACpC,IAAI,SAAS,OAAO,QAAQ,KAAK,QAAQ,QAAQ;GACnD;GAEA,IAAI,CAAC,KAAK,YAAY,IAAI,CAAC,GAAG,QAAQ,IAAI;EAC5C;EAEA,MAAM,QAAQ,iBAAiB,KAAK;EACpC,IAAI,WAAW,QAAQ,QAAQ,SAAS;CAC1C;CACA,OAAO,QAAQ,iBAAiB,OAAO,YAAY,CAAC;AACtD;AAOO,IAAM,kBAAN,cAA8B,MAAM,CAAC;AAErC,SAAS,sBACd,QACA,UACA,QACA;CACA,IAAI,CAAC,OAAO,cAAc,QAAQ,KAAK,WAAW,KAAK,CAAC,OAAO,QAC7D,MAAM,IAAI,MAAM,wBAAwB;CAC1C,MAAM,YAAY,IAAI,IACpB,OAAO,SAAS,SAAS,YACvB,QAAQ,SAAS,SAAS,SAAS,CAAC,QAAQ,SAAS,IAAI,IAAI,CAAC,CAChE,CACF;CACA,MAAM,uBAAO,IAAI,IAAY;CAC7B,KAAA,MAAW,SAAS,QAAQ;EAC1B,IAAI,CAAC,MAAM,QAAQ,MAAM,IAAI,gBAAgB,aAAa;EAC1D,KAAA,MAAW,QAAQ,OAAO;GACxB,IAAI,CAAC,OAAO,cAAc,IAAI,KAAK,CAAC,UAAU,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,GACtE,MAAM,IAAI,gBAAgB,oBAAoB;GAChD,KAAK,IAAI,IAAI;EACf;EACA,IAAI,MAAM,MAAM,MAAM,UAAU,QAAQ,KAAK,QAAQ,MAAM,QAAQ,EAAE,GACnE,MAAM,IAAI,gBAAgB,iBAAiB;CAC/C;CACA,MAAM,WAAW;EACf;EACA,YAAY,OAAO,SAAS;EAC5B,WAAW,OAAO,SAAS;EAC3B,uBAAuB,OAAO;EAC9B,QAAQ,OAAO,KAAK,WAAW,EAAE,OAAO,CAAC,GAAG,KAAK,EAAE,EAAE;EACrD,QAAQ;CACV;CACA,OAAO;EACL,GAAG;EACH,QAAQ,WAAW,QAAQ,CAAA,CAAE,OAAO,KAAK,UAAU,QAAQ,CAAC,CAAA,CAAE,OAAO,KAAK;CAC5E;AACF;;;AC9dO,SAAS,qBACd,QACM;CACN,IACE,CAAC,UACD;EACE;EACA;EACA;EACA;EACA;EACA;EACA;CACF,CAAA,CAAE,MACC,QACC,CAAC,OAAO,cAAc,OAAO,IAA2B,KACxD,OAAO,QAA+B,CAC1C,KACA,OAAO,cAAc,MACrB,OAAO,gBAAgB,MACvB,OAAO,iBAAiB,MACxB,OAAO,YAAY,YAEnB,MAAM,IAAI,MAAM,yBAAyB;AAC7C;;;ACwHO,SAAS,0BACd,QAC2B;CAC3B,MAAM,YAAY,iBAChB,cAAc,OAAO,YACjB,OAAO,UAAU,WACjB,OAAO,SACb;CACA,OAAO;EACL,SAAS,OAAO;EAChB,eAAe,OAAO;EACtB;EACA,GAAI,OAAO,WACP,EACE,UAAU,iBACR,cAAc,OAAO,WACjB,OAAO,SAAS,WAChB,OAAO,QACb,EACF,IACA,CAAC;EACL,GAAI,OAAO,+BAA+B,KAAA,IACtC,CAAC,IACD,EAAE,4BAA4B,OAAO,2BAA2B;EACpE,GAAI,OAAO,cAAc,KAAA,IAAY,CAAC,IAAI,EAAE,WAAW,OAAO,UAAU;EACxE,GAAI,OAAO,mBAAmB,KAAA,IAC1B,CAAC,IACD,EAAE,gBAAgB,OAAO,eAAe;EAC5C,GAAI,OAAO,sBAAsB,KAAA,IAC7B,CAAC,IACD,EAAE,mBAAmB,OAAO,kBAAkB;EAClD,QAAQ;GACN,aAAa,OAAO,OAAO;GAC3B,eAAe,OAAO,OAAO;GAC7B,gBAAgB,OAAO,OAAO;GAC9B,eAAe,OAAO,OAAO;GAC7B,gBAAgB,OAAO,OAAO;GAC9B,gBAAgB,OAAO,OAAO;GAC9B,WAAW,OAAO,OAAO;EAC3B;CACF;AACF"}

package/dist/host-review.d.ts

@@ -0,0 +1,19 @@
+import type { IntakeValues } from './execution-dto.js';
+import type { HostSuggestionReview } from './proposal-dto.js';
+/** At most this many reason codes per suggestion. */
+export declare const HOST_REVIEW_MAX_REASONS = 8;
+/** A reason code: lowercase, starts with a letter, bounded; no spaces or punctuation beyond `_ . -`. */
+export declare const HOST_REVIEW_REASON_PATTERN: RegExp;
+/** Codes the service itself records when the hook fails; hosts may not need to emit them. */
+export declare const HOST_REVIEW_FAILED = "host_review_failed";
+export declare const HOST_REVIEW_INVALID = "host_review_invalid";
+/**
+ * Normalize a host `reviewSuggestion` result into the stored, value-free shape.
+ * Throws on anything unexpected so the caller can hold the suggestion: only
+ * `{hold?, reasons?, prefilled?}` is accepted, `prefilled` entries must be the
+ * handler's declared argument names, reasons are bounded codes, and a reason
+ * that contains one of the suggestion's own argument values is refused.
+ * Returns undefined when the host recorded nothing.
+ */
+export declare function normalizeHostReview(result: unknown, argsSchema: IntakeValues, args: IntakeValues): HostSuggestionReview | undefined;
+//# sourceMappingURL=host-review.d.ts.map

package/dist/host-review.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-review.d.ts","sourceRoot":"","sources":["../src/host-review.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAE9D,qDAAqD;AACrD,eAAO,MAAM,uBAAuB,IAAI,CAAC;AACzC,wGAAwG;AACxG,eAAO,MAAM,0BAA0B,QAA6B,CAAC;AACrE,6FAA6F;AAC7F,eAAO,MAAM,kBAAkB,uBAAuB,CAAC;AACvD,eAAO,MAAM,mBAAmB,wBAAwB,CAAC;AAEzD;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,OAAO,EACf,UAAU,EAAE,YAAY,EACxB,IAAI,EAAE,YAAY,GACjB,oBAAoB,GAAG,SAAS,CAmDlC"}

package/dist/manifest.json

@@ -2,7 +2,7 @@
   "version": "1.0.0",
   "timestamp": 0,
   "packageName": "@happyvertical/smrt-ingestion",
-  "packageVersion": "0.57.31",
+  "packageVersion": "0.57.33",
   "objects": {
     "@happyvertical/smrt-ingestion:IntakeItem": {
       "name": "intakeitem",