@indexnetwork/protocol 22.0.0-rc.499.1 → 64.0.0-rc.604.2

package/dist/negotiations/negotiation.protocol.js

@@ -1,224 +0,0 @@
-/**
- * Seat-scoped negotiation protocol rules (v2 client-advocate protocol).
- *
- * v2 fixes exactly one initiating seat per match (`metadata.initiatorUserId`,
- * stamped at discovery time — IND-396) and makes consent asymmetric:
- * **accept can only come from the counterparty seat**, schema-enforced.
- *
- * Vocabulary per seat (v2):
- * - initiator:     `outreach | counter | question | withdraw`  (no accept)
- * - counterparty:  `accept | decline | counter | question`
- * - final turn:    initiator `withdraw | counter`; counterparty `accept | decline`
- *
- * v1 tasks keep the legacy vocabulary (`propose | accept | reject | counter |
- * question`) — the version is inherited per conversation, never re-stamped, so
- * in-flight v1 negotiations are grandfathered untouched.
- *
- * Outcome mapping is version-independent: `accept` → opportunity `pending`,
- * `reject`/`withdraw`/`decline` → `rejected`, turn-cap → `stalled`.
- */
-import { z } from "zod";
-import { AskUserPayloadSchema } from "../shared/schemas/negotiation-state.schema.js";
-// ─── Shared assessment fragment ──────────────────────────────────────────────
-const AssessmentSchema = z.object({
-    reasoning: z.string(),
-    suggestedRoles: z.object({
-        ownUser: z.enum(["agent", "patient", "peer"]),
-        otherUser: z.enum(["agent", "patient", "peer"]),
-    }),
-});
-function turnSchema(actions) {
-    return z.object({
-        action: z.enum(actions),
-        assessment: AssessmentSchema,
-        message: z.string().nullable().optional(),
-        /** Present when action is `ask_user` (v2, P3.2). */
-        askUser: AskUserPayloadSchema.nullable().optional(),
-    });
-}
-// ─── v2 seat-scoped turn schemas ─────────────────────────────────────────────
-/** Initiator seat, non-final turn: may reach out, push back, ask, or walk away — never accept. */
-export const InitiatorTurnSchema = turnSchema(["outreach", "counter", "question", "withdraw"]);
-/** Counterparty seat, non-final turn: the only seat that can accept. */
-export const CounterpartyTurnSchema = turnSchema(["accept", "decline", "counter", "question"]);
-/** Initiator seat, final allowed turn: commit to walking away or leave the door open. */
-export const FinalInitiatorTurnSchema = turnSchema(["withdraw", "counter"]);
-/** Counterparty seat, final allowed turn: must decide. */
-export const FinalCounterpartyTurnSchema = turnSchema(["accept", "decline"]);
-// ─── v2 ask_user variants (P3.2, flag-gated) ────────────────────────────────
-// Non-final turns only: the final-cap turn must decide, never pause. Selected
-// via the `opts.askUser` parameter on allowedActionsFor/turnSchemaFor — the
-// base schemas above stay byte-identical for every existing caller.
-/** Initiator seat, non-final turn, with the client-consult pause available. */
-export const InitiatorAskUserTurnSchema = turnSchema(["outreach", "counter", "question", "withdraw", "ask_user"]);
-/** Counterparty seat, non-final turn, with the client-consult pause available. */
-export const CounterpartyAskUserTurnSchema = turnSchema(["accept", "decline", "counter", "question", "ask_user"]);
-// ─── Action vocabulary per version + seat ────────────────────────────────────
-const V1_ACTIONS = ["propose", "accept", "reject", "counter", "question"];
-const V1_FINAL_ACTIONS = ["accept", "reject"];
-const V2_INITIATOR_ACTIONS = ["outreach", "counter", "question", "withdraw"];
-const V2_COUNTERPARTY_ACTIONS = ["accept", "decline", "counter", "question"];
-const V2_FINAL_INITIATOR_ACTIONS = ["withdraw", "counter"];
-const V2_FINAL_COUNTERPARTY_ACTIONS = ["accept", "decline"];
-const V2_INITIATOR_ASK_USER_ACTIONS = [...V2_INITIATOR_ACTIONS, "ask_user"];
-const V2_COUNTERPARTY_ASK_USER_ACTIONS = [...V2_COUNTERPARTY_ACTIONS, "ask_user"];
-/**
- * The set of actions a given seat may submit under a given protocol version.
- *
- * v1 ignores the seat entirely (legacy symmetric vocabulary) so pre-v2
- * negotiations behave exactly as before.
- */
-export function allowedActionsFor(version, seat, isFinalTurn = false, opts) {
-    if (version !== "v2")
-        return isFinalTurn ? V1_FINAL_ACTIONS : V1_ACTIONS;
-    const askUser = opts?.askUser === true && !isFinalTurn;
-    if (seat === "initiator") {
-        return isFinalTurn ? V2_FINAL_INITIATOR_ACTIONS : (askUser ? V2_INITIATOR_ASK_USER_ACTIONS : V2_INITIATOR_ACTIONS);
-    }
-    return isFinalTurn ? V2_FINAL_COUNTERPARTY_ACTIONS : (askUser ? V2_COUNTERPARTY_ASK_USER_ACTIONS : V2_COUNTERPARTY_ACTIONS);
-}
-/**
- * Zod turn schema for a system-agent turn, selected by version + seat +
- * final-turn flag. v1 returns the legacy schemas (seat-agnostic); v2 returns
- * the seat-scoped schemas above, making an initiator `accept` structurally
- * impossible rather than prompt-discouraged.
- *
- * The v1 legacy schemas are passed in by the caller (they live in
- * `negotiation.state.ts`) to keep this module free of a state-module import.
- */
-export function turnSchemaFor(version, seat, isFinalTurn, v1Schemas, opts) {
-    if (version !== "v2")
-        return isFinalTurn ? v1Schemas.final : v1Schemas.system;
-    const askUser = opts?.askUser === true && !isFinalTurn;
-    if (seat === "initiator") {
-        return isFinalTurn ? FinalInitiatorTurnSchema : (askUser ? InitiatorAskUserTurnSchema : InitiatorTurnSchema);
-    }
-    return isFinalTurn ? FinalCounterpartyTurnSchema : (askUser ? CounterpartyAskUserTurnSchema : CounterpartyTurnSchema);
-}
-// ─── Action semantics (version-independent) ──────────────────────────────────
-/** Terminal actions end the negotiation immediately. */
-export function isTerminalAction(action) {
-    return action === "accept" || action === "reject" || action === "withdraw" || action === "decline";
-}
-/** Reject-like actions map the opportunity to `rejected` (v1 reject, v2 withdraw/decline). */
-export function isRejectLikeAction(action) {
-    return action === "reject" || action === "withdraw" || action === "decline";
-}
-/**
- * Conservative action when an agent produced schema-invalid output (after the
- * retry) or an internal error needs a seat-valid terminal placeholder.
- *
- * Non-final turns fall back to `counter` (keeps the dialogue open — the AC's
- * "conservative counter"). Final turns must decide: v1 → `reject`, v2
- * counterparty → `decline`, v2 initiator → `counter` is still legal on the
- * final turn so it stays `counter` (finalizes as turn-cap/stalled).
- */
-export function fallbackActionFor(version, seat, isFinalTurn) {
-    if (!isFinalTurn)
-        return "counter";
-    if (version !== "v2")
-        return "reject";
-    return seat === "counterparty" ? "decline" : "counter";
-}
-/** Seat-appropriate reject-like action for error paths. */
-export function rejectActionFor(version, seat) {
-    if (version !== "v2")
-        return "reject";
-    return seat === "initiator" ? "withdraw" : "decline";
-}
-// ─── Metadata readers ────────────────────────────────────────────────────────
-/**
- * Read the protocol version off task metadata. Returns null when the task
- * predates version stamping (treat as v1 at the call site when the task is a
- * genuine prior; fresh tasks stamp from {@link configuredProtocolVersion}).
- */
-export function readProtocolVersion(metadata) {
-    const v = metadata?.protocolVersion;
-    return v === "v2" ? "v2" : v === "v1" ? "v1" : null;
-}
-/**
- * Protocol version for negotiations without a prior task for the same
- * opportunity, from the `NEGOTIATION_PROTOCOL_VERSION` env switch. Defaults
- * to `v1` when unset — v2 is opt-in per environment, and rolling back is the
- * same single switch (only in-flight negotiations stay pinned to their
- * stamped version).
- */
-export function configuredProtocolVersion() {
-    return process.env.NEGOTIATION_PROTOCOL_VERSION === "v2" ? "v2" : "v1";
-}
-/**
- * Whether the `ask_user` client-consult pause (P3.2) is enabled, from the
- * `NEGOTIATION_ASK_USER_ENABLED` env switch. Defaults to off — the deployment
- * is byte-for-byte unchanged until the flag is flipped, and rolling back is
- * the same single switch.
- */
-export function configuredAskUserEnabled() {
-    return process.env.NEGOTIATION_ASK_USER_ENABLED === "true";
-}
-/**
- * Default per-negotiation ask cap: total client-consultation rounds (mid-flight
- * `ask_user` pauses and post-stall parks, both sides combined) before the
- * negotiation stalls terminally instead of parking again. Three admits one
- * post-stall park even after each side has spent its one mid-flight consult.
- */
-export const DEFAULT_NEGOTIATION_ASK_ROUNDS_CAP = 3;
-/**
- * Per-negotiation ask cap, overridable via `NEGOTIATION_ASK_ROUNDS_CAP`.
- * Invalid or non-positive values fall back to the default — zero is not an
- * off switch here; the cap exists so two agents cannot ping-pong their humans
- * indefinitely. It tunes the bound, it does not gate the behaviour.
- */
-export function negotiationAskRoundsCap() {
-    const raw = process.env.NEGOTIATION_ASK_ROUNDS_CAP;
-    if (raw) {
-        const parsed = Number(raw);
-        if (Number.isInteger(parsed) && parsed > 0)
-            return parsed;
-    }
-    return DEFAULT_NEGOTIATION_ASK_ROUNDS_CAP;
-}
-/** Default answer window for a paused `ask_user` negotiation: 24 hours. */
-export const DEFAULT_ASK_USER_WINDOW_MS = 24 * 60 * 60 * 1000;
-/**
- * Answer window for a paused `ask_user` negotiation, in ms. Overridable via
- * `NEGOTIATION_ASK_USER_WINDOW_MS` (dev/e2e use shorter windows to exercise
- * the expiry path); invalid or non-positive values fall back to 24 h.
- */
-export function askUserAnswerWindowMs() {
-    const raw = process.env.NEGOTIATION_ASK_USER_WINDOW_MS;
-    if (raw) {
-        const parsed = Number(raw);
-        if (Number.isFinite(parsed) && parsed > 0)
-            return parsed;
-    }
-    return DEFAULT_ASK_USER_WINDOW_MS;
-}
-/**
- * Slack added on top of the answer window when deciding whether a paused
- * (`input_required`) task still holds the conversation lock. Covers expiry
- * worker delay: the lock must outlive the timer slightly, so ambient
- * rediscovery cannot slip in between window expiry and the worker's resume.
- */
-export const ASK_USER_LOCK_SLACK_MS = 60 * 60 * 1000;
-/**
- * Resolve the seat of `userId` on a negotiation task.
- *
- * Keys on `metadata.initiatorUserId` (the rigid v2 stamp), **never on turn
- * parity** — continuations can start with either side speaking first, so
- * parity misattributes seats across sessions. Pre-stamp tasks fall back to
- * `sourceUserId` (the discovery-session opener), which is what the stamp
- * defaults to anyway.
- */
-export function resolveSeat(userId, metadata) {
-    const initiator = typeof metadata?.initiatorUserId === "string" && metadata.initiatorUserId.length > 0
-        ? metadata.initiatorUserId
-        : typeof metadata?.sourceUserId === "string"
-            ? metadata.sourceUserId
-            : undefined;
-    return initiator === userId ? "initiator" : "counterparty";
-}
-/** Human-readable seat-violation message shared by respond surfaces. */
-export function seatViolationMessage(action, seat, version) {
-    const allowed = allowedActionsFor(version, seat).join(", ");
-    return `Action "${action}" is not allowed for your seat (${seat}) under negotiation protocol ${version}. Allowed actions: ${allowed}.`;
-}

package/dist/negotiations/negotiation.question-safety.d.ts

@@ -1,52 +0,0 @@
-import type { StructuredQuestion } from '../shared/schemas/structured-question.schema.js';
-/** Fixed prompt-safe labels; producers must not replace them with raw network/counterparty text. */
-export declare const NEGOTIATION_QUESTION_GENERIC_COUNTERPARTY = "the other participant";
-export declare const NEGOTIATION_QUESTION_GENERIC_NETWORK = "the selected network";
-/**
- * Deterministically reject question context copied from private negotiation inputs.
- * This guard never rewrites content: unsafe or ambiguous text yields no card while
- * the already-armed timeout retains the conservative continuation path.
- */
-export declare function isSafeNegotiationQuestionText(value: string, options?: {
-    forbiddenIdentifiers?: string[];
-    forbiddenSourceText?: string[];
-}): boolean;
-/**
- * Whole-question gate for a question the NEGOTIATOR authored.
- *
- * The pre-A2H `disclosureSubject` never reached the client as written — the
- * server templated the copy around it. An authored `StructuredQuestion` is
- * rendered verbatim, so every visible field needs the same gate the subject
- * got, and it needs it with the identifiers in hand.
- *
- * That is the capability the api-side `isSafeNegotiationQuestionPayload` lacks
- * and cannot gain: at the DB boundary it holds only generic patterns, so it
- * cannot tell that a perfectly well-formed question is naming THIS counterparty
- * or paraphrasing THIS seed assessment. The turn node has both, which is why
- * this runs here and not there.
- *
- * Fail-closed and non-rewriting, like every guard in this file: a caller that
- * gets `false` drops the question and keeps the enum-only path, rather than
- * shipping a repaired one.
- *
- * @param options.forbiddenIdentifiers Names that must not appear as words —
- *        the counterparty's, at the call site.
- * @param options.forbiddenSourceText Private inputs that must not be echoed —
- *        the seed assessment's reasoning, at the call site.
- */
-export declare function isSafeAuthoredNegotiationQuestion(question: StructuredQuestion | null | undefined, options?: {
-    forbiddenIdentifiers?: string[];
-    forbiddenSourceText?: string[];
-}): boolean;
-/** Validate the only structured fields allowed to enter the inflight Questioner prompt. */
-export declare function validateInflightAskUserFields(input: {
-    disclosureSubject?: string | null;
-    draftQuestion?: string | null;
-    forbiddenIdentifiers?: string[];
-    forbiddenSourceText?: string[];
-}): {
-    disclosureSubject: string;
-    draftQuestion?: string;
-} | null;
-/** Stable, non-secret settlement/outbox key derived only from the exact paused task. */
-export declare function negotiationQuestionSettlementId(taskId: string): string;

package/dist/negotiations/negotiation.question-safety.js

@@ -1,119 +0,0 @@
-import { hasUnsupportedOpportunityClaim } from '../shared/utils/claim-safety.js';
-/** Fixed prompt-safe labels; producers must not replace them with raw network/counterparty text. */
-export const NEGOTIATION_QUESTION_GENERIC_COUNTERPARTY = 'the other participant';
-export const NEGOTIATION_QUESTION_GENERIC_NETWORK = 'the selected network';
-const INTERNAL_ID_PATTERN = /\b(?:[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}|(?:task|intent|network|opportunity|user|match)[_-]?id)\b/i;
-const PRIVATE_SOURCE_PATTERN = /\b(?:private transcript|raw transcript|assessment(?:\.reasoning)?|seed assessment|evaluator reasoning|match reason|matchReason|internal metadata|counterparty profile)\b/i;
-function normalize(value) {
-    return value.toLowerCase().replace(/[^a-z0-9]+/g, ' ').trim();
-}
-/**
- * Deterministically reject question context copied from private negotiation inputs.
- * This guard never rewrites content: unsafe or ambiguous text yields no card while
- * the already-armed timeout retains the conservative continuation path.
- */
-export function isSafeNegotiationQuestionText(value, options) {
-    const trimmed = value.trim();
-    if (trimmed.length === 0 || trimmed.length > 600)
-        return false;
-    if (INTERNAL_ID_PATTERN.test(trimmed) || PRIVATE_SOURCE_PATTERN.test(trimmed))
-        return false;
-    if (hasUnsupportedOpportunityClaim(trimmed))
-        return false;
-    const normalized = normalize(trimmed);
-    for (const identifier of options?.forbiddenIdentifiers ?? []) {
-        const forbidden = normalize(identifier);
-        if (forbidden.length >= 3 && new RegExp(`(?:^| )${forbidden.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')}(?: |$)`).test(normalized)) {
-            return false;
-        }
-    }
-    for (const source of options?.forbiddenSourceText ?? []) {
-        const forbidden = normalize(source);
-        if (forbidden.length >= 24 && (normalized.includes(forbidden) || forbidden.includes(normalized))) {
-            return false;
-        }
-    }
-    return true;
-}
-/**
- * Instruction-shaped text that must never survive into a rendered question.
- *
- * Applies ONLY to `isSafeAuthoredNegotiationQuestion` — deliberately not added
- * to `isSafeNegotiationQuestionText`, which guards a live path whose verdicts
- * must not move. The exposure is specific to the authored question: the client
- * reads these strings verbatim on a card, and whatever they select comes BACK
- * into the negotiator's prompt as a user answer. An option labelled "ignore
- * previous instructions" is therefore a round-trip injection with a human
- * clicking the button.
- *
- * Two families. Override phrasings ("ignore the above", "you are now a…"), and
- * forged structure: role headers and the `--- section ---` delimiter this
- * codebase actually uses to fence prompt sections (see
- * `renderNegotiatorClientDmSection`), which is what a forged block would have
- * to imitate to be read as one.
- */
-const PROMPT_INJECTION_PATTERN = /\b(?:ignore|disregard|forget|override|bypass)\b[^.!?\n]{0,40}\b(?:instructions?|prompts?|rules?|directives?|guidelines?|everything\s+above|the\s+above|all\s+of\s+the\s+above)\b|\byou\s+are\s+now\s+(?:an?|the)\b|\bnew\s+instructions?\s*:|^\s*(?:#{1,6}\s*|\*{2}\s*)?(?:system|assistant|developer|human)\s*:|<\|[^|>]{0,40}\|>|\[\/?(?:INST|SYS)\]|^\s*-{3,}[^\n]*-{3,}\s*$/im;
-/**
- * Whole-question gate for a question the NEGOTIATOR authored.
- *
- * The pre-A2H `disclosureSubject` never reached the client as written — the
- * server templated the copy around it. An authored `StructuredQuestion` is
- * rendered verbatim, so every visible field needs the same gate the subject
- * got, and it needs it with the identifiers in hand.
- *
- * That is the capability the api-side `isSafeNegotiationQuestionPayload` lacks
- * and cannot gain: at the DB boundary it holds only generic patterns, so it
- * cannot tell that a perfectly well-formed question is naming THIS counterparty
- * or paraphrasing THIS seed assessment. The turn node has both, which is why
- * this runs here and not there.
- *
- * Fail-closed and non-rewriting, like every guard in this file: a caller that
- * gets `false` drops the question and keeps the enum-only path, rather than
- * shipping a repaired one.
- *
- * @param options.forbiddenIdentifiers Names that must not appear as words —
- *        the counterparty's, at the call site.
- * @param options.forbiddenSourceText Private inputs that must not be echoed —
- *        the seed assessment's reasoning, at the call site.
- */
-export function isSafeAuthoredNegotiationQuestion(question, options) {
-    if (!question || typeof question !== 'object')
-        return false;
-    // Re-checked rather than trusted from the schema: this gate also runs on
-    // turns that arrive from an external agent, and a rendered card with one
-    // option (or fifteen) is a broken card regardless of how it validated.
-    const questionOptions = question.options;
-    if (!Array.isArray(questionOptions) || questionOptions.length < 2 || questionOptions.length > 4)
-        return false;
-    const fields = [
-        question.title,
-        question.prompt,
-        ...questionOptions.flatMap((option) => [option?.label, option?.description]),
-    ];
-    for (const field of fields) {
-        if (typeof field !== 'string')
-            return false;
-        if (!isSafeNegotiationQuestionText(field, options))
-            return false;
-        if (PROMPT_INJECTION_PATTERN.test(field))
-            return false;
-    }
-    return true;
-}
-/** Validate the only structured fields allowed to enter the inflight Questioner prompt. */
-export function validateInflightAskUserFields(input) {
-    const disclosureSubject = input.disclosureSubject?.trim();
-    if (!disclosureSubject || !isSafeNegotiationQuestionText(disclosureSubject, input))
-        return null;
-    const draftQuestion = input.draftQuestion?.trim();
-    if (draftQuestion && !isSafeNegotiationQuestionText(draftQuestion, input))
-        return null;
-    return {
-        disclosureSubject,
-        ...(draftQuestion ? { draftQuestion } : {}),
-    };
-}
-/** Stable, non-secret settlement/outbox key derived only from the exact paused task. */
-export function negotiationQuestionSettlementId(taskId) {
-    return `negotiation-question-settlement-v1-${taskId}`;
-}

package/dist/negotiations/negotiation.reflect.d.ts

@@ -1,194 +0,0 @@
-import { z } from "zod";
-import { createStructuredModel } from "../shared/agent/model.config.js";
-export { NEGOTIATOR_MEMORY_KINDS } from "./negotiation.memory.js";
-export type { DistilledMemoryKind } from "./negotiation.memory.js";
-/** Hard ceiling on entries distilled per reflection pass (per side). */
-export declare const MAX_DISTILLED_MEMORIES = 3;
-/**
- * One distilled memory entry as produced by the reflection LLM. The caller
- * owns persistence: it resolves `aboutCounterparty` to a `subjectUserId`,
- * computes the embedding, and attaches provenance `sourceRefs`.
- */
-export declare const DistilledMemorySchema: z.ZodObject<{
-    kind: z.ZodEnum<["playbook", "disclosure_rule", "counterparty_dossier", "threshold"]>;
-    /** Self-contained operational statement, useful without the transcript. */
-    content: z.ZodString;
-    /** Evidence strength, 0..1. Explicit client statements score high. */
-    confidence: z.ZodNumber;
-    /**
-     * True when the entry is about the counterparty (kind should be
-     * `counterparty_dossier`); false for client-side rules and playbooks.
-     */
-    aboutCounterparty: z.ZodBoolean;
-    /** Turn indexes (0-based, into the provided transcript) evidencing this entry. */
-    turnIndexes: z.ZodDefault<z.ZodArray<z.ZodNumber, "many">>;
-}, "strip", z.ZodTypeAny, {
-    kind: "threshold" | "playbook" | "disclosure_rule" | "counterparty_dossier";
-    confidence: number;
-    content: string;
-    aboutCounterparty: boolean;
-    turnIndexes: number[];
-}, {
-    kind: "threshold" | "playbook" | "disclosure_rule" | "counterparty_dossier";
-    confidence: number;
-    content: string;
-    aboutCounterparty: boolean;
-    turnIndexes?: number[] | undefined;
-}>;
-export type DistilledMemory = z.infer<typeof DistilledMemorySchema>;
-export declare const ReflectionResultSchema: z.ZodObject<{
-    memories: z.ZodArray<z.ZodObject<{
-        kind: z.ZodEnum<["playbook", "disclosure_rule", "counterparty_dossier", "threshold"]>;
-        /** Self-contained operational statement, useful without the transcript. */
-        content: z.ZodString;
-        /** Evidence strength, 0..1. Explicit client statements score high. */
-        confidence: z.ZodNumber;
-        /**
-         * True when the entry is about the counterparty (kind should be
-         * `counterparty_dossier`); false for client-side rules and playbooks.
-         */
-        aboutCounterparty: z.ZodBoolean;
-        /** Turn indexes (0-based, into the provided transcript) evidencing this entry. */
-        turnIndexes: z.ZodDefault<z.ZodArray<z.ZodNumber, "many">>;
-    }, "strip", z.ZodTypeAny, {
-        kind: "threshold" | "playbook" | "disclosure_rule" | "counterparty_dossier";
-        confidence: number;
-        content: string;
-        aboutCounterparty: boolean;
-        turnIndexes: number[];
-    }, {
-        kind: "threshold" | "playbook" | "disclosure_rule" | "counterparty_dossier";
-        confidence: number;
-        content: string;
-        aboutCounterparty: boolean;
-        turnIndexes?: number[] | undefined;
-    }>, "many">;
-}, "strip", z.ZodTypeAny, {
-    memories: {
-        kind: "threshold" | "playbook" | "disclosure_rule" | "counterparty_dossier";
-        confidence: number;
-        content: string;
-        aboutCounterparty: boolean;
-        turnIndexes: number[];
-    }[];
-}, {
-    memories: {
-        kind: "threshold" | "playbook" | "disclosure_rule" | "counterparty_dossier";
-        confidence: number;
-        content: string;
-        aboutCounterparty: boolean;
-        turnIndexes?: number[] | undefined;
-    }[];
-}>;
-export type ReflectionResult = z.infer<typeof ReflectionResultSchema>;
-/** A transcript row projected into the reflecting client's perspective. */
-export interface ReflectionTranscriptEntry {
-    index: number;
-    speaker: "client" | "counterparty";
-    action: string;
-    message?: string;
-    reasoning?: string;
-}
-export interface NegotiationReflectionInput {
-    /** The user whose negotiator is reflecting (memories land on their agent). */
-    clientUser: {
-        id: string;
-        name?: string;
-        bio?: string;
-    };
-    counterpartyUser: {
-        id: string;
-        name?: string;
-        bio?: string;
-    };
-    /** The client's seat in this negotiation. */
-    seat: "initiator" | "counterparty";
-    outcome: {
-        hasOpportunity: boolean;
-        reasoning: string;
-        turnCount: number;
-    };
-    transcript: ReflectionTranscriptEntry[];
-    /** Network prompt for context (optional). */
-    indexContext?: string;
-}
-export interface ChatReflectionInput {
-    clientUser: {
-        id: string;
-        name?: string;
-    };
-    /** The negotiator DM messages, oldest first. */
-    messages: Array<{
-        role: "user" | "assistant";
-        content: string;
-    }>;
-}
-/**
- * Payload the finalize node hands to the injected {@link ReflectEnqueueFn}.
- * Carries user display context so the reflect worker never re-loads profiles;
- * turn history is loaded from the conversation by the worker (payloads stay
- * small in Redis).
- */
-export interface NegotiationReflectJobData {
-    negotiationId: string;
-    conversationId: string;
-    opportunityId?: string;
-    sourceUser: {
-        id: string;
-        name?: string;
-        bio?: string;
-    };
-    candidateUser: {
-        id: string;
-        name?: string;
-        bio?: string;
-    };
-    initiatorUserId: string;
-    outcome: {
-        hasOpportunity: boolean;
-        reasoning: string;
-        turnCount: number;
-    };
-}
-/**
- * Injected enqueue callback for post-negotiation reflection (P5.2). The
- * protocol package has no BullMQ access — services/api wires this at its
- * composition roots, exactly like `QuestionerEnqueueFn`. Called fire-and-
- * forget from the finalize node: a reflection failure must never affect the
- * negotiation outcome.
- */
-export type ReflectEnqueueFn = (job: NegotiationReflectJobData) => Promise<void>;
-export interface NegotiationReflectorConfig {
-    /** Hard ceiling on the reflection LLM round-trip, in ms (default 20000). */
-    timeoutMs?: number;
-}
-/**
- * The memory distiller (P5.2). One structured LLM call per reflection pass,
- * producing ≤ {@link MAX_DISTILLED_MEMORIES} private memory entries for one
- * client's negotiator. Throws on LLM/validation failure — callers (the reflect
- * queue worker) own the swallow-and-log policy, since reflection must never
- * affect a negotiation outcome.
- */
-export declare class NegotiationReflector {
-    private readonly timeoutMs;
-    constructor(config?: NegotiationReflectorConfig);
-    /**
-     * Distill memories from a finished negotiation, from one side's perspective.
-     * @throws When the LLM call times out or returns schema-invalid output.
-     */
-    reflectNegotiation(input: NegotiationReflectionInput): Promise<DistilledMemory[]>;
-    /**
-     * Distill stated preferences/corrections from a client ↔ negotiator chat.
-     * @throws When the LLM call times out or returns schema-invalid output.
-     */
-    reflectChat(input: ChatReflectionInput): Promise<DistilledMemory[]>;
-    private distill;
-    /**
-     * Raw structured-model round trip. Split out as a seam so tests can drive
-     * the schema-validation path without a live provider.
-     */
-    protected callModel(model: ReturnType<typeof createStructuredModel>, chatMessages: Array<{
-        role: string;
-        content: string;
-    }>): Promise<unknown>;
-}