@indexnetwork/protocol 20.0.1-rc.485.1 → 21.0.0-rc.486.1

package/CHANGELOG.md

@@ -20,6 +20,30 @@ went 6.7.1 → 8.0.2 with no 7.x in between because the whole 7.x line shipped a
 prereleases between the two promotions. To track every change, read `rc`; to
 pin a supported release, use `latest`.
 
+## 21.0.0 - 2026-08-17
+
+### Removed
+
+- **Breaking:** remove the Agent reporter persona. `REPORTER_PERSONA`,
+  `REPORTER_PERSONA_ID`, `REPORTER_BRIEFING_KICKOFF`, `REPORTER_TOOL_NAMES`,
+  `createReporterTools`, `filterReporterTools` and `narrowReporterTools` are
+  gone from the package entry point, along with `reporter.persona.ts`,
+  `reporter.prompt.ts` and the `propose_cleanup_actions` tool
+  (`reporter.action.tools.ts`, `reporter.action.contracts.ts`). Hosts that named
+  the `reporter` persona must pick another; unknown personas already fail closed.
+- **Breaking:** drop `actionToolsEnabled` from `ToolContext`/`ToolDeps`/
+  `ResolvedToolContext` and `actionProposalStore` from `ToolDeps`. Both existed
+  solely to gate the reporter's cleanup-action tool. `resolveChatContext()` no
+  longer accepts or returns `actionToolsEnabled`.
+- Remove `ChatAgent.hasPriorAgentActionProposal()`, the
+  ```agent_action_proposal``` fence parser behind it, and
+  `IterationContext.hasPriorAgentActionProposal`. The reporter prompt was the
+  only consumer, so all of it became dead with the persona.
+
+`read_activity_summary` and the whole `activity-projection` module are
+**unchanged** — they are shared utility tools registered for every persona and
+exposed on the MCP server, not reporter-specific.
+
 ## 20.0.1 - 2026-08-17
 
 ### Changed

package/IMPLEMENTATION.md

@@ -173,7 +173,7 @@ The intent and community graphs are the exceptions: they are reached through the
 
 ### Persisted chat personas
 
-`ChatGraphFactory.withPersona()` keeps the runtime neutral while selecting an exported persona configuration. `SIGNAL_PERSONA`, `REPORTER_PERSONA`, and `ONBOARDING_PERSONA` each own an exact positive tool allowlist; shared tools added later remain unavailable until reviewed. `ONBOARDING_PERSONA` reuses Signal's proposal-only, live-membership-narrowed `create_intent` contract and otherwise exposes only privacy consent, approved self-context preview/confirmation, guided questions, and validated completion. Hosts must persist the exported persona ID on session creation and treat it as authoritative on follow-ups.
+`ChatGraphFactory.withPersona()` keeps the runtime neutral while selecting an exported persona configuration. `SIGNAL_PERSONA` and `ONBOARDING_PERSONA` each own an exact positive tool allowlist; shared tools added later remain unavailable until reviewed. `ONBOARDING_PERSONA` reuses Signal's proposal-only, live-membership-narrowed `create_intent` contract and otherwise exposes only privacy consent, approved self-context preview/confirmation, guided questions, and validated completion. Hosts must persist the exported persona ID on session creation and treat it as authoritative on follow-ups.
 
 ## Intents
 

package/dist/agents/index.d.ts

@@ -15,7 +15,6 @@ export { ChatTitleGenerator, } from "../chat/chat.title.generator.js";
 export { createChatTools, } from "../chat/chat.tools.js";
 export { createNegotiatorPersona, NEGOTIATOR_PERSONA_ID, } from "../chat/negotiator.persona.js";
 export { createOnboardingTools, filterOnboardingTools, narrowOnboardingTools, ONBOARDING_PERSONA, ONBOARDING_PERSONA_ID, ONBOARDING_PROFILE_KICKOFF, ONBOARDING_TOOL_NAMES, } from "../chat/onboarding.persona.js";
-export { createReporterTools, filterReporterTools, narrowReporterTools, REPORTER_BRIEFING_KICKOFF, REPORTER_PERSONA, REPORTER_PERSONA_ID, REPORTER_TOOL_NAMES, } from "../chat/reporter.persona.js";
 export { createSignalTools, filterSignalTools, narrowSignalTools, SIGNAL_NEW_SIGNAL_KICKOFF, SIGNAL_PERSONA, SIGNAL_PERSONA_ID, SIGNAL_TOOL_NAMES, } from "../chat/signal.persona.js";
 export { createAgentTools, } from "./application/index.js";
 export { SYSTEM_AGENT_IDS, } from "./domain/index.js";

package/dist/agents/index.js

@@ -6,7 +6,6 @@ export { ChatTitleGenerator, } from "../chat/chat.title.generator.js";
 export { createChatTools, } from "../chat/chat.tools.js";
 export { createNegotiatorPersona, NEGOTIATOR_PERSONA_ID, } from "../chat/negotiator.persona.js";
 export { createOnboardingTools, filterOnboardingTools, narrowOnboardingTools, ONBOARDING_PERSONA, ONBOARDING_PERSONA_ID, ONBOARDING_PROFILE_KICKOFF, ONBOARDING_TOOL_NAMES, } from "../chat/onboarding.persona.js";
-export { createReporterTools, filterReporterTools, narrowReporterTools, REPORTER_BRIEFING_KICKOFF, REPORTER_PERSONA, REPORTER_PERSONA_ID, REPORTER_TOOL_NAMES, } from "../chat/reporter.persona.js";
 export { createSignalTools, filterSignalTools, narrowSignalTools, SIGNAL_NEW_SIGNAL_KICKOFF, SIGNAL_PERSONA, SIGNAL_PERSONA_ID, SIGNAL_TOOL_NAMES, } from "../chat/signal.persona.js";
 export { createAgentTools, } from "./application/index.js";
 export { SYSTEM_AGENT_IDS, } from "./domain/index.js";

package/dist/chat/chat.agent.d.ts

@@ -195,12 +195,6 @@ export declare class ChatAgent {
      * Extracts the text content of the most recent HumanMessage.
      */
     private static getCurrentUserMessage;
-    /**
-     * Detects a prior visible action proposal without considering current-turn
-     * tool calls. The reporter uses this only to make typed confirmation
-     * language contextual rather than executable on its own.
-     */
-    static hasPriorAgentActionProposal(messages: BaseMessage[]): boolean;
     /**
      * Async factory: creates a ChatAgent with resolved user/index context.
      * Resolves user/network identity from DB during tool initialization.

package/dist/chat/chat.agent.js

@@ -19,55 +19,6 @@ import { sanitizeForDebugMeta } from "../shared/observability/debug-meta.sanitiz
 import { Timed } from "../shared/observability/performance.js";
 import { requestContext } from "../shared/observability/request-context.js";
 import { deduplicateQuestions } from "./chat.question-dedup.js";
-const AGENT_ACTION_PROPOSAL_FENCE_PATTERN = /```agent_action_proposal\s*\n([\s\S]*?)\n```/g;
-const AGENT_ACTION_PROPOSAL_KEYS = new Set(["proposalId", "actions"]);
-const AGENT_ACTION_KEYS = new Set([
-    "type",
-    "entityId",
-    "currentState",
-    "proposedOperation",
-    "skipped",
-    "reason",
-    "description",
-    "evidence",
-]);
-const AGENT_ACTION_OPERATIONS = {
-    retract_premise: "RETRACT_PREMISE",
-    narrow_signal: "NARROW_SIGNAL",
-    pause_signal: "PAUSE_SIGNAL",
-};
-function isVisibleAgentActionProposal(payload) {
-    if (!payload || typeof payload !== "object" || Array.isArray(payload))
-        return false;
-    const proposal = payload;
-    if (Object.keys(proposal).some((key) => !AGENT_ACTION_PROPOSAL_KEYS.has(key)))
-        return false;
-    if (typeof proposal.proposalId !== "string"
-        || !/^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i.test(proposal.proposalId)
-        || !Array.isArray(proposal.actions)
-        || proposal.actions.length < 1
-        || proposal.actions.length > 5)
-        return false;
-    return proposal.actions.every((rawAction) => {
-        if (!rawAction || typeof rawAction !== "object" || Array.isArray(rawAction))
-            return false;
-        const action = rawAction;
-        if (Object.keys(action).some((key) => !AGENT_ACTION_KEYS.has(key)))
-            return false;
-        if (typeof action.type !== "string" || !(action.type in AGENT_ACTION_OPERATIONS))
-            return false;
-        const type = action.type;
-        if (action.proposedOperation !== AGENT_ACTION_OPERATIONS[type])
-            return false;
-        if (typeof action.entityId !== "string" || !action.entityId.trim())
-            return false;
-        if (typeof action.currentState !== "string" || !action.currentState.trim())
-            return false;
-        if (action.skipped !== undefined && typeof action.skipped !== "boolean")
-            return false;
-        return ["reason", "description", "evidence"].every((key) => action[key] === undefined || typeof action[key] === "string");
-    });
-}
 const logger = protocolLogger("ChatAgent");
 // Re-export for external consumers
 export { ITERATION_NUDGE } from "./chat.prompt.js";
@@ -143,48 +94,6 @@ export class ChatAgent {
         }
         return undefined;
     }
-    /**
-     * Detects a prior visible action proposal without considering current-turn
-     * tool calls. The reporter uses this only to make typed confirmation
-     * language contextual rather than executable on its own.
-     */
-    static hasPriorAgentActionProposal(messages) {
-        let currentHumanIndex = -1;
-        let previousHumanIndex = -1;
-        for (let index = messages.length - 1; index >= 0; index -= 1) {
-            if (messages[index]._getType() !== "human")
-                continue;
-            if (currentHumanIndex < 0) {
-                currentHumanIndex = index;
-            }
-            else {
-                previousHumanIndex = index;
-                break;
-            }
-        }
-        if (currentHumanIndex < 0 || previousHumanIndex < 0)
-            return false;
-        let latestAssistant;
-        for (let index = currentHumanIndex - 1; index > previousHumanIndex; index -= 1) {
-            if (messages[index]._getType() === "ai") {
-                latestAssistant = messages[index];
-                break;
-            }
-        }
-        if (!latestAssistant || typeof latestAssistant.content !== "string")
-            return false;
-        AGENT_ACTION_PROPOSAL_FENCE_PATTERN.lastIndex = 0;
-        for (const match of latestAssistant.content.matchAll(AGENT_ACTION_PROPOSAL_FENCE_PATTERN)) {
-            try {
-                if (isVisibleAgentActionProposal(JSON.parse(match[1])))
-                    return true;
-            }
-            catch {
-                // An invalid prior fence is not visible proposal context.
-            }
-        }
-        return false;
-    }
     /**
      * Async factory: creates a ChatAgent with resolved user/index context.
      * Resolves user/network identity from DB during tool initialization.
@@ -204,7 +113,6 @@ export class ChatAgent {
             userId: context.userId,
             networkId: scopedNetworkId,
             sessionId: context.sessionId,
-            actionToolsEnabled: context.actionToolsEnabled,
         });
         if (explicitScope.scopeType && explicitScope.scopeId) {
             resolved.scopeType = explicitScope.scopeType;
@@ -224,7 +132,6 @@ export class ChatAgent {
         const iterCtx = {
             recentTools: extractRecentToolCalls(messages),
             currentMessage: ChatAgent.getCurrentUserMessage(messages),
-            hasPriorAgentActionProposal: ChatAgent.hasPriorAgentActionProposal(messages),
             ctx: this.resolvedContext,
         };
         const deterministicResponse = this.persona.resolveDeterministicResponse?.(this.resolvedContext, iterCtx);
@@ -583,7 +490,6 @@ export class ChatAgent {
             const iterCtx = {
                 recentTools: extractRecentToolCalls(messages),
                 currentMessage: ChatAgent.getCurrentUserMessage(messages),
-                hasPriorAgentActionProposal: ChatAgent.hasPriorAgentActionProposal(messages),
                 ctx: this.resolvedContext,
             };
             const deterministicResponse = this.persona.resolveDeterministicResponse?.(this.resolvedContext, iterCtx);

package/dist/chat/chat.persona.d.ts

@@ -9,8 +9,7 @@ export interface ChatPersonaLoopBehaviors {
      * Detect hallucinated ```opportunity / ```intent_proposal code blocks in model
      * text, auto-invoke the corresponding tool, and strip unbacked blocks from the
      * final response. Only meaningful for personas whose toolset can legitimately
-     * produce those blocks — enabled for onboarding, signal and negotiator, off
-     * for reporter.
+     * produce those blocks — enabled for onboarding, signal and negotiator.
      */
     hallucinationRecovery: boolean;
 }

package/dist/chat/chat.prompt.js

@@ -4,7 +4,7 @@
 //
 // Persona-neutral prompt text owned by the agent loop rather than by any one
 // persona. Each persona builds its own system prompt (see signal.prompt.ts,
-// negotiator.prompt.ts, reporter.prompt.ts, onboarding.prompt.ts); what remains
+// negotiator.prompt.ts, onboarding.prompt.ts); what remains
 // here is only what the loop itself injects regardless of persona.
 /**
  * Nudge message injected after SOFT_ITERATION_LIMIT iterations.

package/dist/chat/chat.prompt.modules.d.ts

@@ -11,8 +11,6 @@ export interface IterationContext {
     }>;
     /** Text of the latest user message (for regex matching). */
     currentMessage?: string;
-    /** Whether an earlier assistant turn visibly contained a valid action proposal. */
-    hasPriorAgentActionProposal?: boolean;
     /** Resolved tool context (user, profile, indexes, etc.). */
     ctx: ResolvedToolContext;
 }

package/dist/index.d.ts

@@ -35,7 +35,6 @@ export { ChatGraphFactory } from "./agents/index.js";
 export { type ChatPersonaConfig } from "./agents/index.js";
 export { NEGOTIATOR_PERSONA_ID, createNegotiatorPersona } from "./agents/index.js";
 export { SIGNAL_PERSONA_ID, SIGNAL_PERSONA, } from "./agents/index.js";
-export { REPORTER_PERSONA_ID, REPORTER_PERSONA, REPORTER_BRIEFING_KICKOFF, } from "./agents/index.js";
 export { ONBOARDING_PERSONA_ID, ONBOARDING_PERSONA, } from "./agents/index.js";
 export { RadarGraphFactory } from "./opportunities/index.js";
 export { HydeGraphFactory } from "./discovery/index.js";

package/dist/index.js

@@ -31,7 +31,6 @@ export { DEFAULT_NETWORK_ASSIGNMENT_THRESHOLD, resolveAssignmentNetworkScope, bu
 export { ChatGraphFactory } from "./agents/index.js";
 export { NEGOTIATOR_PERSONA_ID, createNegotiatorPersona } from "./agents/index.js";
 export { SIGNAL_PERSONA_ID, SIGNAL_PERSONA, } from "./agents/index.js";
-export { REPORTER_PERSONA_ID, REPORTER_PERSONA, REPORTER_BRIEFING_KICKOFF, } from "./agents/index.js";
 export { ONBOARDING_PERSONA_ID, ONBOARDING_PERSONA, } from "./agents/index.js";
 export { RadarGraphFactory } from "./opportunities/index.js";
 export { HydeGraphFactory } from "./discovery/index.js";

package/dist/shared/agent/tool.factory.js

@@ -50,7 +50,6 @@ export async function createChatTools(deps, preResolvedContext) {
             userId: deps.userId,
             networkId: explicitScope.scopeType === 'network' ? explicitScope.scopeId : deps.networkId,
             sessionId: deps.sessionId,
-            actionToolsEnabled: deps.actionToolsEnabled,
         }));
     if (!preResolvedContext && explicitScope.scopeType && explicitScope.scopeId) {
         resolvedContext.scopeType = explicitScope.scopeType;

package/dist/shared/agent/tool.helpers.d.ts

@@ -98,8 +98,6 @@ export interface ResolvedToolContext {
      * which are owner-trusted and receive the full owner view.
      */
     mcpCaller?: McpActivityCaller;
-    /** True only when the gated reporter cleanup-action proposal tool is registered. */
-    actionToolsEnabled?: boolean;
 }
 /**
  * Dependencies passed when creating tools for a user session.
@@ -137,8 +135,6 @@ interface ToolContextBindings {
     intentQueue: IntentGraphQueue;
     /** Contact management operations. */
     contactService: ContactServiceAdapter;
-    /** True only when the gated reporter cleanup-action proposal tool is registered. */
-    actionToolsEnabled?: boolean;
     /** Chat session reader for loading conversation history. */
     chatSession: ChatSessionReader;
     /** Read-through chat-session digest. Optional; consumers fall back to undefined `chatContext`. */
@@ -184,8 +180,6 @@ interface ToolContextBindings {
      * the backend composition root; when absent the tool is not registered.
      */
     chatQuestions?: ChatQuestionsHost;
-    /** Optional durable persistence for reporter cleanup-action proposals. */
-    actionProposalStore?: import('../../chat/reporter.action.contracts.js').AgentActionProposalStore;
     /** Durable host persistence for verified intent proposals shown in chat. */
     intentProposalStore?: import('../../intents/intent.proposal.js').IntentProposalStore;
     /**
@@ -292,8 +286,6 @@ export declare function resolveChatContext(params: {
     networkId?: string;
     /** Chat session ID for draft opportunities (stored as context.conversationId). */
     sessionId?: string;
-    /** Reporter action gate forwarded into the persona prompt/context. */
-    actionToolsEnabled?: boolean;
 }): Promise<ResolvedToolContext>;
 /**
  * Type for the `defineTool` closure created in `createChatTools`.

package/dist/shared/agent/tool.helpers.js

@@ -16,7 +16,7 @@ export class ChatContextAccessError extends Error {
  * This preloads user identity, profile, network memberships, and scoped index role.
  */
 export async function resolveChatContext(params) {
-    const { database, userId, networkId, sessionId, actionToolsEnabled } = params;
+    const { database, userId, networkId, sessionId } = params;
     const [user, rawProfile, userNetworks, globalContext] = await Promise.all([
         database.getUser(userId),
         database.getProfile(userId),
@@ -93,7 +93,6 @@ export async function resolveChatContext(params) {
         scopedMembershipRole,
         isOnboarding: !(user.onboarding?.completedAt),
         hasName,
-        actionToolsEnabled,
         ...(sessionId !== undefined ? { sessionId } : {}),
     };
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@indexnetwork/protocol",
-  "version": "20.0.1-rc.485.1",
+  "version": "21.0.0-rc.486.1",
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",

package/dist/chat/reporter.action.contracts.d.ts

@@ -1,36 +0,0 @@
-export type AgentCleanupActionType = "retract_premise" | "narrow_signal" | "pause_signal";
-export interface AgentActionProposalSnapshot {
-    status: string;
-    updatedAt?: string;
-    payload?: string;
-    summary?: string | null;
-    assertionText?: string;
-}
-interface AgentActionProposalActionBase {
-    entityId: string;
-    currentState: string;
-    proposedOperation: string;
-    evidence?: string;
-    skipped?: boolean;
-    reason?: string;
-    snapshot?: AgentActionProposalSnapshot;
-    description?: string;
-}
-export type AgentActionProposalAction = (AgentActionProposalActionBase & {
-    type: "retract_premise";
-}) | (AgentActionProposalActionBase & {
-    type: "narrow_signal";
-}) | (AgentActionProposalActionBase & {
-    type: "pause_signal";
-});
-export interface AgentActionProposal {
-    proposalId: string;
-    userId: string;
-    conversationId?: string;
-    actions: AgentActionProposalAction[];
-}
-/** Host persistence bridge for proposals; the reporter tool never mutates domain rows. */
-export interface AgentActionProposalStore {
-    createProposal(proposal: AgentActionProposal): Promise<void>;
-}
-export {};

package/dist/chat/reporter.action.contracts.js

@@ -1 +0,0 @@
-export {};

package/dist/chat/reporter.action.tools.d.ts

@@ -1,17 +0,0 @@
-import type { ChatGraphCompositeDatabase, UserDatabase } from "../shared/interfaces/database.interface.js";
-import type { ChatTools, ResolvedToolContext, ToolContext } from "../shared/agent/tool.factory.js";
-import type { AgentActionProposalStore } from "./reporter.action.contracts.js";
-export type { AgentActionProposal, AgentActionProposalAction, AgentActionProposalSnapshot, AgentActionProposalStore, AgentCleanupActionType, } from "./reporter.action.contracts.js";
-export declare const AGENT_ACTION_PROPOSAL_FENCE = "agent_action_proposal";
-/**
- * Creates the reporter-only proposal tool. It validates owner state and records
- * snapshots, but intentionally has no mutation dependency.
- */
-export declare function createProposeCleanupActionsTool(input: {
-    database: ChatGraphCompositeDatabase;
-    userDb: UserDatabase;
-    context: ResolvedToolContext;
-    store: AgentActionProposalStore;
-}): ChatTools[number];
-/** Build the optional action tool from the host-provided ToolContext. */
-export declare function createReporterActionTool(deps: ToolContext, context: ResolvedToolContext, userDb: UserDatabase): ChatTools[number] | null;

package/dist/chat/reporter.action.tools.js

@@ -1,145 +0,0 @@
-import { tool } from "@langchain/core/tools";
-import { z } from "zod";
-import { success } from "../shared/agent/tool.helpers.js";
-export const AGENT_ACTION_PROPOSAL_FENCE = "agent_action_proposal";
-const actionInputSchema = z.discriminatedUnion("type", [
-    z.object({
-        type: z.literal("retract_premise"),
-        premiseId: z.string().trim().min(1),
-    }).strict(),
-    z.object({
-        type: z.literal("narrow_signal"),
-        intentId: z.string().trim().min(1),
-        description: z.string().trim().min(1),
-    }).strict(),
-    z.object({
-        type: z.literal("pause_signal"),
-        intentId: z.string().trim().min(1),
-        evidence: z.string().trim().min(1, "pause_signal evidence is required"),
-    }).strict(),
-]);
-const proposeCleanupActionsSchema = z.object({
-    actions: z.array(actionInputSchema).min(1).max(5),
-}).strict();
-function isFullUuid(value) {
-    return z.string().uuid().safeParse(value).success;
-}
-function skippedAction(action, entityId, proposedOperation, reason) {
-    return {
-        type: action.type,
-        entityId,
-        currentState: "UNKNOWN",
-        proposedOperation,
-        skipped: true,
-        reason,
-        ...(action.type === "pause_signal" ? { evidence: action.evidence } : {}),
-    };
-}
-/**
- * Creates the reporter-only proposal tool. It validates owner state and records
- * snapshots, but intentionally has no mutation dependency.
- */
-export function createProposeCleanupActionsTool(input) {
-    const { database, userDb, context, store } = input;
-    return tool(async (query) => {
-        const proposalId = crypto.randomUUID();
-        const actions = [];
-        for (const action of query.actions) {
-            const entityId = action.type === "retract_premise" ? action.premiseId : action.intentId;
-            const operation = action.type === "retract_premise"
-                ? "RETRACT_PREMISE"
-                : action.type === "narrow_signal" ? "NARROW_SIGNAL" : "PAUSE_SIGNAL";
-            if (!isFullUuid(entityId)) {
-                actions.push(skippedAction(action, entityId, operation, "A full UUID is required; suffixes and ambiguous IDs are not accepted."));
-                continue;
-            }
-            if (action.type === "retract_premise") {
-                const premise = await database.getPremise(entityId).catch(() => null);
-                if (!premise || premise.userId !== context.userId) {
-                    actions.push(skippedAction(action, entityId, operation, "Premise not found or not owned by the authenticated user."));
-                    continue;
-                }
-                if (premise.status !== "ACTIVE") {
-                    actions.push({
-                        type: action.type,
-                        entityId,
-                        currentState: premise.status,
-                        proposedOperation: operation,
-                        skipped: true,
-                        reason: `Premise is already ${premise.status}.`,
-                    });
-                    continue;
-                }
-                actions.push({
-                    type: action.type,
-                    entityId,
-                    currentState: premise.status,
-                    proposedOperation: operation,
-                    snapshot: { status: premise.status, updatedAt: premise.updatedAt.toISOString(), assertionText: premise.assertion.text },
-                });
-                continue;
-            }
-            const intent = await userDb.getIntent(entityId).catch(() => null);
-            if (!intent) {
-                actions.push(skippedAction(action, entityId, operation, "Signal not found or not owned by the authenticated user."));
-                continue;
-            }
-            const status = intent.status ?? "ACTIVE";
-            if (intent.archivedAt || status === "FULFILLED" || status === "EXPIRED") {
-                actions.push({
-                    type: action.type,
-                    entityId,
-                    currentState: intent.archivedAt ? "ARCHIVED" : status,
-                    proposedOperation: operation,
-                    ...(action.type === "pause_signal" ? { evidence: action.evidence } : {}),
-                    skipped: true,
-                    reason: "Signal is archived or terminal and cannot be changed.",
-                });
-                continue;
-            }
-            actions.push({
-                type: action.type,
-                entityId,
-                currentState: status,
-                proposedOperation: operation,
-                ...(action.type === "pause_signal" ? { evidence: action.evidence } : {}),
-                ...(action.type === "narrow_signal" ? { description: action.description } : {}),
-                snapshot: {
-                    status,
-                    updatedAt: intent.updatedAt.toISOString(),
-                    payload: intent.payload,
-                    summary: intent.summary,
-                },
-            });
-        }
-        await store.createProposal({
-            proposalId,
-            userId: context.userId,
-            ...(context.sessionId ? { conversationId: context.sessionId } : {}),
-            actions,
-        });
-        const renderedActions = actions.map(({ snapshot: _snapshot, ...entry }) => entry);
-        const block = `\`\`\`${AGENT_ACTION_PROPOSAL_FENCE}\n${JSON.stringify({ proposalId, actions: renderedActions })}\n\`\`\``;
-        return success({
-            proposed: true,
-            proposalId,
-            actions: renderedActions,
-            message: `IMPORTANT: Include this \`\`\`agent_action_proposal code block EXACTLY as-is in your response. It is a REQUEST for owner confirmation; it performs no mutation until the owner confirms it in the UI:\n\n${block}`,
-        });
-    }, {
-        name: "propose_cleanup_actions",
-        description: "Prepare owner-confirmed cleanup actions from same-turn grounded reads. This tool never mutates data.",
-        schema: proposeCleanupActionsSchema,
-    });
-}
-/** Build the optional action tool from the host-provided ToolContext. */
-export function createReporterActionTool(deps, context, userDb) {
-    if (!deps.actionToolsEnabled || !deps.actionProposalStore)
-        return null;
-    return createProposeCleanupActionsTool({
-        database: deps.database,
-        userDb,
-        context,
-        store: deps.actionProposalStore,
-    });
-}

package/dist/chat/reporter.persona.d.ts

@@ -1,31 +0,0 @@
-import { type ChatTools, type ResolvedToolContext, type ToolContext } from "../shared/agent/tool.factory.js";
-import type { UserDatabase } from "../shared/interfaces/database.interface.js";
-import type { ChatPersonaConfig } from "./chat.persona.js";
-/** Public kickoff marker used by the Agent surface to request its opening briefing. */
-export { REPORTER_BRIEFING_KICKOFF } from "./reporter.prompt.js";
-/** Stable persona id persisted for read-only Agent reporting sessions. */
-export declare const REPORTER_PERSONA_ID = "reporter";
-/**
- * Exact positive allowlist for the reporter persona. New shared tools remain
- * unavailable until they are explicitly reviewed here.
- */
-export declare const REPORTER_TOOL_NAMES: readonly ["read_intents", "search_intents", "read_user_contexts", "preview_user_context", "read_premises", "read_networks", "read_network_memberships", "read_pending_questions", "list_opportunities", "read_activity_summary"];
-interface ReporterToolBoundary {
-    context: ResolvedToolContext;
-    userDb: UserDatabase;
-    findPendingQuestions?: ToolContext["findPendingQuestions"];
-}
-/** Filters a shared registry through the reporter's positive allowlist. */
-export declare function filterReporterTools<T extends {
-    name: string;
-}>(tools: T[]): T[];
-/**
- * Replaces shared tools whose normal modes can enumerate other users with
- * reporter-safe, self-only read contracts. Opportunity listing is deliberately
- * aggregate-only: it never returns a counterpart name, row, or explanation.
- */
-export declare function narrowReporterTools(allowed: ChatTools, boundary: ReporterToolBoundary): ChatTools;
-/** Creates the reporter's context-bound, allowlisted toolset. */
-export declare function createReporterTools(deps: ToolContext, preResolvedContext?: ResolvedToolContext): Promise<ChatTools>;
-/** Restricted read-only Agent reporter persona. */
-export declare const REPORTER_PERSONA: ChatPersonaConfig;

package/dist/chat/reporter.persona.js

@@ -1,207 +0,0 @@
-import { tool } from "@langchain/core/tools";
-import { z } from "zod";
-import { createChatTools } from "../shared/agent/tool.factory.js";
-import { error, resolveChatContext, success } from "../shared/agent/tool.helpers.js";
-import { focusedNetworkId, scopeFromNetworkId } from "../shared/agent/tool.scope.js";
-import { buildReporterSystemContent, resolveReporterDeterministicResponse } from "./reporter.prompt.js";
-import { createReporterActionTool } from "./reporter.action.tools.js";
-/** Public kickoff marker used by the Agent surface to request its opening briefing. */
-export { REPORTER_BRIEFING_KICKOFF } from "./reporter.prompt.js";
-/** Stable persona id persisted for read-only Agent reporting sessions. */
-export const REPORTER_PERSONA_ID = "reporter";
-/**
- * Exact positive allowlist for the reporter persona. New shared tools remain
- * unavailable until they are explicitly reviewed here.
- */
-export const REPORTER_TOOL_NAMES = [
-    "read_intents",
-    "search_intents",
-    "read_user_contexts",
-    "preview_user_context",
-    "read_premises",
-    "read_networks",
-    "read_network_memberships",
-    "read_pending_questions",
-    "list_opportunities",
-    "read_activity_summary",
-];
-const REPORTER_TOOL_ALLOWLIST = new Set(REPORTER_TOOL_NAMES);
-/** Filters a shared registry through the reporter's positive allowlist. */
-export function filterReporterTools(tools) {
-    return tools.filter((candidate) => REPORTER_TOOL_ALLOWLIST.has(candidate.name));
-}
-function invokeSharedTool(sharedTool, input) {
-    return sharedTool.invoke(input);
-}
-/**
- * Replaces shared tools whose normal modes can enumerate other users with
- * reporter-safe, self-only read contracts. Opportunity listing is deliberately
- * aggregate-only: it never returns a counterpart name, row, or explanation.
- */
-export function narrowReporterTools(allowed, boundary) {
-    const { context, userDb } = boundary;
-    return allowed.map((sharedTool) => {
-        if (sharedTool.name === "read_intents") {
-            return tool(async (query) => {
-                const limit = query.limit ?? 100;
-                const page = query.page ?? 1;
-                const intents = await userDb.getActiveIntents();
-                const start = (page - 1) * limit;
-                return success({
-                    intents: intents.slice(start, start + limit),
-                    page,
-                    limit,
-                    total: intents.length,
-                });
-            }, {
-                name: "read_intents",
-                description: "Read the authenticated user's own active signals only.",
-                schema: z.object({
-                    limit: z.number().int().min(1).max(100).optional(),
-                    page: z.number().int().min(1).optional(),
-                }).strict(),
-            });
-        }
-        if (sharedTool.name === "search_intents") {
-            return tool(async (query) => success({
-                intents: await userDb.searchOwnIntents(query.query, query.limit ?? 20),
-            }), {
-                name: "search_intents",
-                description: "Search the authenticated user's own active signals only.",
-                schema: z.object({
-                    query: z.string().trim().min(1),
-                    limit: z.number().int().min(1).max(100).optional(),
-                }).strict(),
-            });
-        }
-        if (sharedTool.name === "read_user_contexts") {
-            return tool(async () => invokeSharedTool(sharedTool, {}), {
-                name: "read_user_contexts",
-                description: "Read the authenticated user's own identity and global context only.",
-                schema: z.object({}).strict(),
-            });
-        }
-        if (sharedTool.name === "read_premises") {
-            return tool(async (query) => invokeSharedTool(sharedTool, {
-                includeRetracted: query.includeRetracted ?? false,
-                userId: context.userId,
-            }), {
-                name: "read_premises",
-                description: "Read the authenticated user's own premises only.",
-                schema: z.object({ includeRetracted: z.boolean().optional() }).strict(),
-            });
-        }
-        if (sharedTool.name === "read_network_memberships") {
-            return tool(async () => invokeSharedTool(sharedTool, {}), {
-                name: "read_network_memberships",
-                description: "Read the authenticated user's own network memberships only.",
-                schema: z.object({}).strict(),
-            });
-        }
-        if (sharedTool.name === "read_networks") {
-            return tool(async () => invokeSharedTool(sharedTool, { userId: context.userId }), {
-                name: "read_networks",
-                description: "Read networks available to the authenticated user.",
-                schema: z.object({}).strict(),
-            });
-        }
-        if (sharedTool.name === "read_pending_questions") {
-            return tool(async (query) => {
-                if (!boundary.findPendingQuestions)
-                    return error("Question lookup is not available.");
-                const questions = await boundary.findPendingQuestions(context.userId, {
-                    modes: ["intent"],
-                    limit: query.limit ?? 10,
-                });
-                return success({ questions: questions.slice(0, query.limit ?? 10) });
-            }, {
-                name: "read_pending_questions",
-                description: "Read the user's own non-negotiation pending questions; answering is unavailable here.",
-                schema: z.object({ limit: z.number().int().min(1).max(10).optional() }).strict(),
-            });
-        }
-        if (sharedTool.name === "list_opportunities") {
-            return tool(async (query) => {
-                const scopedNetworkId = focusedNetworkId(context);
-                if (scopedNetworkId && query.networkId && query.networkId !== scopedNetworkId) {
-                    return error("This chat is scoped to a different network.");
-                }
-                const activeIntents = await userDb.getActiveIntents();
-                const intentById = new Map(activeIntents.map((intent) => [intent.id, intent]));
-                const opportunities = await userDb.getOpportunitiesForUser({
-                    ...(query.networkId || scopedNetworkId ? { networkId: query.networkId || scopedNetworkId } : {}),
-                    statuses: ["draft", "pending", "latent"],
-                    limit: 100,
-                });
-                const counts = new Map();
-                const seen = new Set();
-                for (const opportunity of opportunities) {
-                    const ownIntentIds = new Set(opportunity.actors
-                        .filter((actor) => actor.userId === context.userId && actor.intent && intentById.has(actor.intent))
-                        .map((actor) => actor.intent));
-                    if (ownIntentIds.size === 0)
-                        continue;
-                    seen.add(opportunity.id);
-                    for (const intentId of ownIntentIds) {
-                        const intent = intentById.get(intentId);
-                        if (!intent)
-                            continue;
-                        const existing = counts.get(intentId) ?? {
-                            intentId,
-                            title: intent.summary?.trim() || intent.payload,
-                            count: 0,
-                        };
-                        existing.count += 1;
-                        counts.set(intentId, existing);
-                    }
-                }
-                return success({
-                    found: seen.size > 0,
-                    count: seen.size,
-                    bySignal: [...counts.values()],
-                });
-            }, {
-                name: "list_opportunities",
-                description: "Report current opportunity counts by the user's own signal, without counterpart identities or rows.",
-                schema: z.object({ networkId: z.string().uuid().optional() }).strict(),
-            });
-        }
-        return sharedTool;
-    });
-}
-/** Creates the reporter's context-bound, allowlisted toolset. */
-export async function createReporterTools(deps, preResolvedContext) {
-    const explicitScope = deps.scopeType && deps.scopeId
-        ? { scopeType: deps.scopeType, scopeId: deps.scopeId }
-        : scopeFromNetworkId(deps.networkId);
-    const resolvedContext = preResolvedContext ?? await resolveChatContext({
-        database: deps.database,
-        userId: deps.userId,
-        networkId: explicitScope.scopeType === "network" ? explicitScope.scopeId : deps.networkId,
-        sessionId: deps.sessionId,
-        actionToolsEnabled: deps.actionToolsEnabled,
-    });
-    if (explicitScope.scopeType && explicitScope.scopeId) {
-        resolvedContext.scopeType = explicitScope.scopeType;
-        resolvedContext.scopeId = explicitScope.scopeId;
-    }
-    const userDb = deps.userDb ?? deps.createUserDatabase(deps.database, resolvedContext.userId);
-    const allowed = filterReporterTools(await createChatTools(deps, resolvedContext));
-    const narrowed = narrowReporterTools(allowed, {
-        context: resolvedContext,
-        userDb,
-        findPendingQuestions: deps.findPendingQuestions,
-    });
-    const actionTool = createReporterActionTool(deps, resolvedContext, userDb);
-    return actionTool ? [...narrowed, actionTool] : narrowed;
-}
-/** Restricted read-only Agent reporter persona. */
-export const REPORTER_PERSONA = {
-    id: REPORTER_PERSONA_ID,
-    buildSystemContent: (ctx, iterCtx) => buildReporterSystemContent(ctx, iterCtx),
-    createTools: (deps, preResolvedContext) => createReporterTools(deps, preResolvedContext),
-    resolveDeterministicResponse: (_ctx, iterCtx) => resolveReporterDeterministicResponse(iterCtx),
-    loopBehaviors: {
-        hallucinationRecovery: false,
-    },
-};

package/dist/chat/reporter.prompt.d.ts

@@ -1,24 +0,0 @@
-import type { ResolvedToolContext } from "../shared/agent/tool.factory.js";
-import type { IterationContext } from "./chat.prompt.modules.js";
-/** Stable marker used by the Agent surface to request its opening briefing. */
-export declare const REPORTER_BRIEFING_KICKOFF = "reporter-briefing-kickoff";
-/**
- * Recognizes the explicit opening briefing marker without putting ordinary
- * reporter conversations into briefing mode accidentally.
- *
- * @param message - Latest user message in the current turn
- * @returns Whether this turn is the Agent-surface briefing kickoff
- */
-export declare function isReporterBriefingKickoff(message?: string): boolean;
-/** Recognizes a short acknowledgement only when a prior proposal is visible. */
-export declare function isReporterActionConfirmation(message?: string, hasPriorProposal?: boolean): boolean;
-/** Deterministic reporter response for contextual typed acknowledgements. */
-export declare function resolveReporterDeterministicResponse(iterCtx: IterationContext): string | null;
-/**
- * Builds the read-only reporter persona prompt.
- *
- * @param ctx - Resolved authenticated user context
- * @param iterCtx - Current agent-loop context used for briefing kickoff
- * @returns Complete reporter system content
- */
-export declare function buildReporterSystemContent(ctx: ResolvedToolContext, iterCtx?: IterationContext): string;

package/dist/chat/reporter.prompt.js

@@ -1,149 +0,0 @@
-/** Stable marker used by the Agent surface to request its opening briefing. */
-export const REPORTER_BRIEFING_KICKOFF = "reporter-briefing-kickoff";
-/**
- * Recognizes the explicit opening briefing marker without putting ordinary
- * reporter conversations into briefing mode accidentally.
- *
- * @param message - Latest user message in the current turn
- * @returns Whether this turn is the Agent-surface briefing kickoff
- */
-export function isReporterBriefingKickoff(message) {
-    const normalized = message?.trim().toLocaleLowerCase()
-        .replace(/[–—]/g, "-")
-        .replace(/^_+|_+$/g, "");
-    if (!normalized)
-        return false;
-    return normalized === REPORTER_BRIEFING_KICKOFF;
-}
-/** Recognizes a short acknowledgement only when a prior proposal is visible. */
-export function isReporterActionConfirmation(message, hasPriorProposal = false) {
-    const normalized = message?.trim().toLocaleLowerCase()
-        .replace(/[.!?,;:]+$/g, "")
-        .replace(/\s+/g, " ");
-    if (!normalized || !hasPriorProposal)
-        return false;
-    return new Set([
-        "i confirm",
-        "confirm",
-        "confirm it",
-        "approve",
-        "approved",
-        "approve it",
-        "i approve",
-        "yes",
-        "yes i confirm",
-        "yes please",
-        "please do it",
-        "proceed",
-        "go ahead",
-    ]).has(normalized);
-}
-/** Deterministic reporter response for contextual typed acknowledgements. */
-export function resolveReporterDeterministicResponse(iterCtx) {
-    if (!isReporterActionConfirmation(iterCtx.currentMessage, iterCtx.hasPriorAgentActionProposal === true))
-        return null;
-    return "Use the visible proposal card's Confirm control to approve this request. I won't run or recreate it from a chat acknowledgement.";
-}
-function buildBriefingGuidance(iterCtx) {
-    if (!isReporterBriefingKickoff(iterCtx?.currentMessage))
-        return "";
-    return `
-
-## Opening briefing
-This is the Agent-surface briefing kickoff. Call read_activity_summary first with the default window, then call the read tools needed to ground the four transparency asks below. Present one concise briefing covering:
-1. summarize all my signals;
-2. what did you do today?;
-3. how do I look to others?;
-4. what should I sharpen?
-Do not claim a metric unless it appears in a tool result from this turn. If a section has no grounded data, say that plainly rather than filling the gap.`;
-}
-function buildTurnGuidance(iterCtx) {
-    const currentMessage = iterCtx?.currentMessage;
-    const confirmation = isReporterActionConfirmation(currentMessage, iterCtx?.hasPriorAgentActionProposal === true);
-    return `
-
-## Turn discipline
-- The detailed four-section opening briefing is reserved for the exact reporter-briefing-kickoff marker. Do not repeat the full briefing or duplicate all reads for a focused follow-up.
-- For every non-kickoff message, answer only the user's current request and perform only the reads needed to answer it.
-${confirmation ? `- This message is only a natural-language acknowledgement. Never execute, claim execution, create, or reuse an action proposal in response. Do not call read_activity_summary or propose_cleanup_actions. Tell the owner to use the visible proposal card's Confirm control; “${currentMessage?.trim()}” is not endpoint confirmation.` : ""}`;
-}
-/**
- * Builds the read-only reporter persona prompt.
- *
- * @param ctx - Resolved authenticated user context
- * @param iterCtx - Current agent-loop context used for briefing kickoff
- * @returns Complete reporter system content
- */
-export function buildReporterSystemContent(ctx, iterCtx) {
-    const userContext = JSON.stringify(ctx.user, null, 2);
-    const profileContext = ctx.userProfile
-        ? JSON.stringify(ctx.userProfile, null, 2)
-        : "null";
-    const membershipContext = JSON.stringify(ctx.userNetworks.map((network) => ({
-        id: network.networkId,
-        title: network.networkTitle,
-        isPersonal: network.isPersonal,
-    })), null, 2);
-    const roleGuidance = ctx.actionToolsEnabled
-        ? "Your role is to report what the user's Index agent has done and what the user's own signals currently communicate. You may prepare a cleanup-action request from grounded same-turn reads, but you never change anything in chat."
-        : "Your role is to report what the user's Index agent has done and what the user's own signals currently communicate. You observe; you never change anything. Suggestions such as pausing or merging a signal are recommendations for the user to carry out through existing product UI, never actions for this persona.";
-    const mutationRule = ctx.actionToolsEnabled
-        ? "- Never mutate data in chat. You may call propose_cleanup_actions only after same-turn owner-scoped reads; it creates a REQUEST block and never executes an action. The owner must confirm through the product UI."
-        : "- Never create, update, delete, confirm, answer, remember, forget, assign, discover, negotiate, scrape, or otherwise mutate data. Do not ask the user a question through a tool.";
-    const actionGuidance = ctx.actionToolsEnabled ? `
-
-## Cleanup-action requests
-- You may propose only retract_premise, narrow_signal, and pause_signal actions grounded in read results from this same turn.
-- Resolve references through owner-scoped read tools and pass exact full UUIDs only; never use suffixes, guesses, or IDs from another user.
-- pause_signal requires non-empty evidence recorded from this turn, such as zero live opportunities plus the owner's statement.
-- The proposal block is a REQUEST for owner confirmation. Never narrate an action as completed and never mutate inside chat.
-- Do not propose actions for counterparties or expose counterparty identity.
-` : "";
-    return `You are Agent, the user's private read-only activity reporter for ${ctx.userName}.
-
-${roleGuidance}${actionGuidance}
-
-## Hard rules
-- Every factual claim, number, status, or trend must come from a tool result in the current turn. Never invent, estimate, or reuse an unverified metric.
-- Use read_activity_summary for activity counts and read_intents/read_user_contexts/read_premises/read_networks/read_network_memberships/read_pending_questions for the underlying current state.
-- Counterparties are identity-free aggregate data only: never reveal names, IDs, transcripts, message text, or per-counterparty rows. Do not infer what another person thinks from a match or negotiation.
-${mutationRule}
-- Do not write observed behavior back as a preference or premise. The user decides whether to act on a suggestion.
-- If opportunity information is relevant, use only the restricted list_opportunities result or read_activity_summary result. Do not expose raw evaluator reasoning, matchReason, or internal JSON. Any opportunity copy must be presenter-backed; this persona's list view is aggregate-only.
-- Be transparent about missing data and the reporting window. Keep the response concise, calm, and useful without hype.
-
-## Four transparency asks
-Be ready to answer:
-- “summarize all my signals” — read the user's own signals and describe their current themes without inventing a synthesis.
-- “what did you do today?” — report only grounded activity counts from the requested window.
-- “how do I look to others?” — describe only the user's own stored context and signals; do not claim access to private counterparty opinions.
-- “what should I sharpen?” — suggest possible signal/context improvements based on observed gaps in the returned data, clearly label them as suggestions, and point the user to existing UI. Never apply them.
-
-## Allowed capabilities
-- Own signal reads: read_intents, search_intents.
-- Own context reads: read_user_contexts, preview_user_context, read_premises.
-- Own community context: read_networks, read_network_memberships.
-- Own pending-question reads: read_pending_questions (never answer them).
-- Aggregate activity reporting: read_activity_summary.
-- Aggregate current opportunity reporting: list_opportunities (no counterpart identities or rows).${ctx.actionToolsEnabled ? "\n- Cleanup-action requests: propose_cleanup_actions (request only; owner confirmation is required)." : ""}
-
-## Session identity (preloaded)
-- User: ${ctx.userName} (${ctx.userEmail}), id: ${ctx.userId}
-
-### User record
-\`\`\`json
-${userContext}
-\`\`\`
-
-### User context
-\`\`\`json
-${profileContext}
-\`\`\`
-
-### Current memberships
-\`\`\`json
-${membershipContext}
-\`\`\`
-
-Only the identity, context, and membership metadata above are preloaded. Signals, premises, questions, and activity are not preloaded: call the appropriate read/report tool before describing them.${buildTurnGuidance(iterCtx)}${buildBriefingGuidance(iterCtx)}`;
-}