@indexnetwork/protocol 22.0.0-rc.499.1 → 64.0.0

package/dist/opportunities/opportunity.lifecycle.js

@@ -1,181 +0,0 @@
-/**
- * Applies status-transition admission rules before lifecycle persistence.
- * Acceptance is a two-party action: an actor that already acted cannot accept
- * again, while rejection and expiry remain available to any participating actor.
- */
-export function assessOpportunityStatusTransition(opportunity, actorUserId, newStatus) {
-    if (newStatus !== 'accepted' && newStatus !== 'rejected' && newStatus !== 'expired') {
-        return { success: false, error: 'newStatus must be one of: accepted, rejected, expired.' };
-    }
-    const callerActor = opportunity.actors.find((actor) => actor.userId === actorUserId);
-    if (!callerActor) {
-        return { success: false, error: 'You are not part of this opportunity.' };
-    }
-    if (newStatus === 'accepted') {
-        if (callerActor.actedAt) {
-            return {
-                success: false,
-                error: 'You have already acted on this opportunity. The other party must accept.',
-            };
-        }
-        return {
-            kind: 'stamp_accepted',
-            counterpartUserId: opportunity.actors.find((actor) => actor.userId !== actorUserId && actor.role !== 'introducer')?.userId,
-        };
-    }
-    return { kind: 'set_terminal_status', status: newStatus };
-}
-/**
- * Applies send admission and recipient-routing rules without performing writes.
- * Introducers, peers, and direct patient/party flows each reveal the next tier
- * to a distinct audience.
- */
-export function assessOpportunitySend(opportunity, actorUserId) {
-    if (opportunity.status !== 'latent' && opportunity.status !== 'draft') {
-        return {
-            success: false,
-            error: `Opportunity is already ${opportunity.status}; only latent or draft opportunities can be sent.`,
-        };
-    }
-    const sender = opportunity.actors.find((actor) => actor.userId === actorUserId);
-    if (!sender) {
-        return { success: false, error: 'You are not part of this opportunity.' };
-    }
-    const hasIntroducer = opportunity.actors.some((actor) => actor.role === 'introducer');
-    const canSend = sender.role === 'introducer'
-        || sender.role === 'peer'
-        || (sender.role === 'patient' && !hasIntroducer)
-        || (sender.role === 'party' && !hasIntroducer);
-    if (!canSend) {
-        return { success: false, error: 'You cannot send this opportunity.' };
-    }
-    const recipients = sender.role === 'introducer'
-        ? opportunity.actors.filter((actor) => actor.role === 'patient' || actor.role === 'party')
-        : sender.role === 'peer'
-            ? opportunity.actors.filter((actor) => actor.role === 'peer' && actor.userId !== actorUserId)
-            : opportunity.actors.filter((actor) => actor.role === 'agent');
-    return { sender, recipients };
-}
-/** Checks whether a caller may approve this opportunity's introducer gate. */
-export function assessIntroductionApproval(opportunity, actorUserId) {
-    const introducerActor = opportunity.actors.find((actor) => actor.role === 'introducer' && actor.userId === actorUserId);
-    if (!introducerActor) {
-        return { success: false, error: 'You are not the introducer for this opportunity' };
-    }
-    if (introducerActor.approved === true) {
-        return { success: false, error: 'Introduction already approved' };
-    }
-    return { kind: 'approve' };
-}
-function isMutationResult(value) {
-    return 'success' in value;
-}
-/** Persists an admitted status transition, preserving accept-before-write DM ordering. */
-export async function updateOpportunityLifecycle(database, input) {
-    if (!input.opportunityId) {
-        return { success: false, error: 'opportunityId is required.' };
-    }
-    // Preserve the graph's legacy validation order: invalid transitions do not
-    // read persistence and always return the input error before actor checks.
-    if (input.newStatus !== 'accepted' && input.newStatus !== 'rejected' && input.newStatus !== 'expired') {
-        return { success: false, error: 'newStatus must be one of: accepted, rejected, expired.' };
-    }
-    const opportunity = await database.getOpportunity(input.opportunityId);
-    if (!opportunity) {
-        return { success: false, error: 'Opportunity not found.' };
-    }
-    const plan = assessOpportunityStatusTransition(opportunity, input.actorUserId, input.newStatus);
-    if (isMutationResult(plan))
-        return plan;
-    let conversationId;
-    if (plan.kind === 'stamp_accepted') {
-        if (plan.counterpartUserId) {
-            const dm = await database.getOrCreateDM(input.actorUserId, plan.counterpartUserId);
-            conversationId = dm.id;
-        }
-        await database.stampOpportunityActorAction(input.opportunityId, input.actorUserId, 'accepted', input.actorUserId);
-    }
-    else {
-        await database.updateOpportunityStatus(input.opportunityId, plan.status);
-    }
-    return {
-        success: true,
-        opportunityId: input.opportunityId,
-        message: `Opportunity status updated to ${input.newStatus}.`,
-        ...(conversationId && { conversationId }),
-    };
-}
-/** Expires an opportunity after verifying the caller is one of its actors. */
-export async function deleteOpportunityLifecycle(database, input) {
-    if (!input.opportunityId) {
-        return { success: false, error: 'opportunityId is required.' };
-    }
-    const opportunity = await database.getOpportunity(input.opportunityId);
-    if (!opportunity) {
-        return { success: false, error: 'Opportunity not found.' };
-    }
-    if (!opportunity.actors.some((actor) => actor.userId === input.actorUserId)) {
-        return { success: false, error: 'You are not part of this opportunity.' };
-    }
-    await database.updateOpportunityStatus(input.opportunityId, 'expired');
-    return {
-        success: true,
-        opportunityId: input.opportunityId,
-        message: 'Opportunity archived (expired).',
-    };
-}
-/** Persists a send transition, then notifies only the actors exposed by its routing policy. */
-export async function sendOpportunityLifecycle(database, input, queueNotification) {
-    if (!input.opportunityId) {
-        return { success: false, error: 'opportunityId is required.' };
-    }
-    const opportunity = await database.getOpportunity(input.opportunityId);
-    if (!opportunity) {
-        return { success: false, error: 'Opportunity not found.' };
-    }
-    const plan = assessOpportunitySend(opportunity, input.actorUserId);
-    if (isMutationResult(plan))
-        return plan;
-    await database.stampOpportunityActorAction(input.opportunityId, input.actorUserId, 'pending');
-    if (queueNotification) {
-        for (const recipient of plan.recipients) {
-            await queueNotification(opportunity.id, recipient.userId, 'high');
-        }
-    }
-    return {
-        success: true,
-        opportunityId: opportunity.id,
-        notified: plan.recipients.map((actor) => actor.userId),
-        message: 'Opportunity sent. The other person has been notified.',
-    };
-}
-/** Approves an introducer gate before enqueuing the existing-opportunity negotiation. */
-export async function approveOpportunityIntroduction(database, input, queueNegotiateExisting) {
-    if (!input.opportunityId) {
-        return { success: false, error: 'opportunityId required for approve_introduction' };
-    }
-    let opportunity;
-    try {
-        opportunity = await database.getOpportunity(input.opportunityId);
-    }
-    catch (error) {
-        return {
-            success: false,
-            error: `Failed to load opportunity: ${error instanceof Error ? error.message : String(error)}`,
-        };
-    }
-    if (!opportunity) {
-        return { success: false, error: 'Opportunity not found' };
-    }
-    const admission = assessIntroductionApproval(opportunity, input.actorUserId);
-    if (isMutationResult(admission))
-        return admission;
-    const updated = await database.updateOpportunityActorApproval(input.opportunityId, input.actorUserId, true);
-    if (!updated) {
-        return { success: false, error: 'Failed to update approval' };
-    }
-    if (queueNegotiateExisting) {
-        await queueNegotiateExisting(input.opportunityId, input.actorUserId);
-    }
-    return { success: true, opportunityId: input.opportunityId };
-}

package/dist/opportunities/opportunity.module.d.ts

@@ -1,54 +0,0 @@
-/**
- * opportunity — the capability's sole cross-capability surface.
- *
- * Anything outside this capability imports from here and nowhere else.
- * Supersedes the capabilities/*.facade.ts + opportunities/public/ pair; the export
- * list is the union of the facades it replaces, so the contract is unchanged.
- */
-export { getOrCreateDeliveryCardBatch, } from "./delivery-card.cache.js";
-export { OpportunityEvaluator, } from "./opportunity.evaluator.js";
-export type { EvaluatorInput, } from "./opportunity.evaluator.js";
-export { OpportunityGraphFactory, } from "./opportunity.graph.js";
-export type { OpportunityGraphThresholdOverrides, } from "./opportunity.graph.js";
-export { isIntroducerDiscoveryEnabled, } from "./opportunity.introducer-feature.js";
-export { INTRODUCER_DISCOVERY_SOURCE, MAX_CANDIDATES_PER_CONTACT, MAX_CONTACTS_PER_CYCLE, runIntroducerDiscovery, selectContactsForDiscovery, shouldRunIntroducerDiscovery, } from "./opportunity.introducer.js";
-export type { ContactWithIntents, IntroducerDiscoveryDatabase, IntroducerDiscoveryQueue, } from "./opportunity.introducer.js";
-export type { StampNewbornOpportunitiesFn, StampNewbornOpportunitiesInput, } from "./opportunity.newborn-stamping.js";
-export { opportunityOwnerActionForStatus, } from "./opportunity.owner-approval.js";
-export type { OpportunityOwnerAction, OpportunityOwnerApprovalAttestation, OpportunityOwnerApprovalAuthority, OpportunityOwnerApprovalBinding, OpportunityOwnerApprovalChallenge, OpportunityOwnerApprovalDenialReason, OpportunityOwnerApprovalVerdict, OpportunityOwnerInteractionProvenance, OpportunityOwnerInteractionSurface, } from "./opportunity.owner-approval.js";
-export { bindOwnerApprovalProvenance, } from "./opportunity.owner-provenance.js";
-export { persistOpportunities, } from "./opportunity.persist.js";
-export { gatherPresenterContext, OpportunityPresenter, } from "./opportunity.presentation.js";
-export type { PresenterDatabase, } from "./opportunity.presentation.js";
-export { createOpportunityTools, } from "./opportunity.tools.js";
-export { DISCOVERY_EVALUATOR_MIN_SCORE_DEFAULT, DISCOVERY_MIN_SIMILARITY_DEFAULT, discoveryAllowedTypes, discoveryEvaluatorMinScore, discoveryIntentMatchingEnabled, discoveryMinSimilarity, discoveryProfileMatchingEnabled, discoveryProfileSource, resetDiscoveryEnvWarningsForTests, validateDiscoveryEvaluatorMinScore, validateDiscoveryMinSimilarity, } from "./discovery.env.js";
-export type { DiscoveryMatchType, DiscoveryProfileSource, } from "./discovery.env.js";
-export { buildPoolAdjustment, mergePoolAdjustment, planPoolAdjustments, } from "./discriminator/discriminator.adjustments.js";
-export type { PoolAdjustment, PoolAdjustmentSignal, } from "./discriminator/discriminator.adjustments.js";
-export { PoolDiscriminatorAssigner, } from "./discriminator/discriminator.assigner.js";
-export type { PoolDiscriminatorAssignedAxis, PoolDiscriminatorAssignmentInput, } from "./discriminator/discriminator.assigner.js";
-export { POOL_DISCRIMINATOR_MAX_CANDIDATES, POOL_DISCRIMINATOR_MAX_PUBLIC_CONTEXT_CHARS, POOL_DISCRIMINATOR_MIN_POOL_SIZE, POOL_QUESTION_MAX_PENDING_PER_INTENT, POOL_QUESTION_MIN_VOI, POOL_RERUN_DEBOUNCE_MS, POOL_VISIT_MINING_DEBOUNCE_MS, poolQuestionsMiningMode, poolQuestionsMode, poolQuestionsPushMode, poolQuestionsRanking, poolQuestionsStampNewborn, poolQuestionsVisitTrigger, } from "./discriminator/discriminator.env.js";
-export { PoolDiscriminatorMiner, } from "./discriminator/discriminator.miner.js";
-export { buildPoolQuestionPushMessage, poolQuestionCycleKey, } from "./discriminator/discriminator.push.js";
-export { BOTH_MATTER_LABEL, selectQuestionDiscriminators, synthesizePoolQuestion, toQuestionDiscriminator, } from "./discriminator/discriminator.question.js";
-export { runPoolDiscriminatorShadow, } from "./discriminator/discriminator.shadow.js";
-export type { DiscriminatorMiningInput, MinedDiscriminator, PoolCandidate, } from "./discriminator/discriminator.types.js";
-export { hasUnsupportedOpportunityClaim, stripUnsupportedOpportunityClaims, stripUnsupportedOpportunityClaims as stripUnsupportedOpportunityClaimsText, } from "../shared/utils/claim-safety.js";
-export { buildCandidateEvidence, } from "./opportunity.evidence.js";
-export { getPrimaryActionLabel, } from "./opportunity.labels.js";
-export { buildApiChatCardPresentationCacheKey, buildDeliveryCardPresentationCacheKey, buildRadarCardPresentationCacheKey, } from "./opportunity.presentation.js";
-export { presentOpportunity, stripUuids, truncateAtBoundary, } from "./opportunity.presentation.js";
-export type { UserInfo, } from "./opportunity.presentation.js";
-export { DEFAULT_FALLBACK_HEADLINE, safeFallbackSummary, } from "./opportunity.presentation.js";
-export { canUserSeeOpportunity, classifyOpportunity, isActionableForViewer, RADAR_SOFT_TARGETS, selectByComposition, validateOpportunityActors, } from "./opportunity.utils.js";
-export { NEGOTIATION_EVIDENCE_MAX_OPPORTUNITIES, negotiationEvidenceQuestionsMode, } from "./negotiation-evidence/negotiation-evidence.env.js";
-export { NegotiationEvidenceMiner, } from "./negotiation-evidence/negotiation-evidence.miner.js";
-export { runNegotiationEvidenceShadow, } from "./negotiation-evidence/negotiation-evidence.shadow.js";
-export type { RawEvidenceOutcome, RawEvidenceOwnerAnswer, RawEvidenceSegment, RawEvidenceTurn, } from "./negotiation-evidence/negotiation-evidence.types.js";
-export { isOutcomeQuestionsActivated, OUTCOME_MAX_CANDIDATES, OUTCOME_MAX_PUBLIC_CONTEXT_CHARS, OUTCOME_MIN_INDEPENDENT_EXAMPLES, } from "./outcome/outcome.env.js";
-export { runOutcomeShadow, } from "./outcome/outcome.shadow.js";
-export type { OutcomeExample, OutcomeLabel, OutcomeShadowResult, } from "./outcome/outcome.types.js";
-export type { OpportunityToolDeps, } from "./opportunity.tools.port.js";
-export { RadarGraphFactory, } from "./radar/radar.graph.js";
-export { computeRadarHealth, } from "./radar/radar.health.js";
-export type { RadarHealthInput, } from "./radar/radar.health.js";

package/dist/opportunities/opportunity.module.js

@@ -1,39 +0,0 @@
-/**
- * opportunity — the capability's sole cross-capability surface.
- *
- * Anything outside this capability imports from here and nowhere else.
- * Supersedes the capabilities/*.facade.ts + opportunities/public/ pair; the export
- * list is the union of the facades it replaces, so the contract is unchanged.
- */
-export { getOrCreateDeliveryCardBatch, } from "./delivery-card.cache.js";
-export { OpportunityEvaluator, } from "./opportunity.evaluator.js";
-export { OpportunityGraphFactory, } from "./opportunity.graph.js";
-export { isIntroducerDiscoveryEnabled, } from "./opportunity.introducer-feature.js";
-export { INTRODUCER_DISCOVERY_SOURCE, MAX_CANDIDATES_PER_CONTACT, MAX_CONTACTS_PER_CYCLE, runIntroducerDiscovery, selectContactsForDiscovery, shouldRunIntroducerDiscovery, } from "./opportunity.introducer.js";
-export { opportunityOwnerActionForStatus, } from "./opportunity.owner-approval.js";
-export { bindOwnerApprovalProvenance, } from "./opportunity.owner-provenance.js";
-export { persistOpportunities, } from "./opportunity.persist.js";
-export { gatherPresenterContext, OpportunityPresenter, } from "./opportunity.presentation.js";
-export { createOpportunityTools, } from "./opportunity.tools.js";
-export { DISCOVERY_EVALUATOR_MIN_SCORE_DEFAULT, DISCOVERY_MIN_SIMILARITY_DEFAULT, discoveryAllowedTypes, discoveryEvaluatorMinScore, discoveryIntentMatchingEnabled, discoveryMinSimilarity, discoveryProfileMatchingEnabled, discoveryProfileSource, resetDiscoveryEnvWarningsForTests, validateDiscoveryEvaluatorMinScore, validateDiscoveryMinSimilarity, } from "./discovery.env.js";
-export { buildPoolAdjustment, mergePoolAdjustment, planPoolAdjustments, } from "./discriminator/discriminator.adjustments.js";
-export { PoolDiscriminatorAssigner, } from "./discriminator/discriminator.assigner.js";
-export { POOL_DISCRIMINATOR_MAX_CANDIDATES, POOL_DISCRIMINATOR_MAX_PUBLIC_CONTEXT_CHARS, POOL_DISCRIMINATOR_MIN_POOL_SIZE, POOL_QUESTION_MAX_PENDING_PER_INTENT, POOL_QUESTION_MIN_VOI, POOL_RERUN_DEBOUNCE_MS, POOL_VISIT_MINING_DEBOUNCE_MS, poolQuestionsMiningMode, poolQuestionsMode, poolQuestionsPushMode, poolQuestionsRanking, poolQuestionsStampNewborn, poolQuestionsVisitTrigger, } from "./discriminator/discriminator.env.js";
-export { PoolDiscriminatorMiner, } from "./discriminator/discriminator.miner.js";
-export { buildPoolQuestionPushMessage, poolQuestionCycleKey, } from "./discriminator/discriminator.push.js";
-export { BOTH_MATTER_LABEL, selectQuestionDiscriminators, synthesizePoolQuestion, toQuestionDiscriminator, } from "./discriminator/discriminator.question.js";
-export { runPoolDiscriminatorShadow, } from "./discriminator/discriminator.shadow.js";
-export { hasUnsupportedOpportunityClaim, stripUnsupportedOpportunityClaims, stripUnsupportedOpportunityClaims as stripUnsupportedOpportunityClaimsText, } from "../shared/utils/claim-safety.js";
-export { buildCandidateEvidence, } from "./opportunity.evidence.js";
-export { getPrimaryActionLabel, } from "./opportunity.labels.js";
-export { buildApiChatCardPresentationCacheKey, buildDeliveryCardPresentationCacheKey, buildRadarCardPresentationCacheKey, } from "./opportunity.presentation.js";
-export { presentOpportunity, stripUuids, truncateAtBoundary, } from "./opportunity.presentation.js";
-export { DEFAULT_FALLBACK_HEADLINE, safeFallbackSummary, } from "./opportunity.presentation.js";
-export { canUserSeeOpportunity, classifyOpportunity, isActionableForViewer, RADAR_SOFT_TARGETS, selectByComposition, validateOpportunityActors, } from "./opportunity.utils.js";
-export { NEGOTIATION_EVIDENCE_MAX_OPPORTUNITIES, negotiationEvidenceQuestionsMode, } from "./negotiation-evidence/negotiation-evidence.env.js";
-export { NegotiationEvidenceMiner, } from "./negotiation-evidence/negotiation-evidence.miner.js";
-export { runNegotiationEvidenceShadow, } from "./negotiation-evidence/negotiation-evidence.shadow.js";
-export { isOutcomeQuestionsActivated, OUTCOME_MAX_CANDIDATES, OUTCOME_MAX_PUBLIC_CONTEXT_CHARS, OUTCOME_MIN_INDEPENDENT_EXAMPLES, } from "./outcome/outcome.env.js";
-export { runOutcomeShadow, } from "./outcome/outcome.shadow.js";
-export { RadarGraphFactory, } from "./radar/radar.graph.js";
-export { computeRadarHealth, } from "./radar/radar.health.js";

package/dist/opportunities/opportunity.newborn-stamping.d.ts

@@ -1,41 +0,0 @@
-import type { CreateOpportunityData } from '../shared/interfaces/database.interface.js';
-/** Input for the host-side newborn pool-preference stamper (IND-420 P4b). */
-export interface StampNewbornOpportunitiesInput {
-    ownerUserId: string;
-    intentId: string;
-    items: CreateOpportunityData[];
-}
-/**
- * Optional host callback that stamps call-local create items before INSERT.
- * It must preserve array length/order and may only enrich metadata/signals.
- */
-export type StampNewbornOpportunitiesFn = (input: StampNewbornOpportunitiesInput) => Promise<CreateOpportunityData[]>;
-/** Persist-node facts that determine whether a new item may cross the host stamping boundary. */
-export interface NewbornStampingEligibility {
-    ownerUserId: string;
-    operationMode?: string;
-    hasIntroductionContext: boolean;
-    onBehalfOfUserId?: string;
-    targetUserId?: string;
-    discoverySource?: string;
-    resolvedTriggerIntentId?: string;
-    indexedIntentIds: readonly string[];
-}
-/** Fail-open events are injected so the graph retains its owning observability policy. */
-export interface NewbornStampingObserver {
-    onUnsafeResult?: (details: {
-        expected: number;
-        actual: number | null;
-    }) => void;
-    onFailure?: (details: {
-        intentId: string;
-        error: unknown;
-    }) => void;
-}
-/**
- * Stamps only newly-created, owned-intent discovery items. Reactivations and
- * manual, introducer, on-behalf-of, context-only, and continuation flows never
- * cross this host boundary. Unsafe callback output and callback failures retain
- * the original create items without changing their order.
- */
-export declare function stampEligibleNewbornOpportunities(itemsToPersist: CreateOpportunityData[], eligibility: NewbornStampingEligibility, stamper?: StampNewbornOpportunitiesFn, observer?: NewbornStampingObserver): Promise<CreateOpportunityData[]>;

package/dist/opportunities/opportunity.newborn-stamping.js

@@ -1,81 +0,0 @@
-function copyCreateOpportunityData(item) {
-    return {
-        ...item,
-        detection: { ...item.detection },
-        actors: item.actors.map((actor) => ({ ...actor })),
-        interpretation: {
-            ...item.interpretation,
-            signals: item.interpretation.signals?.map((signal) => ({ ...signal })),
-        },
-        context: { ...item.context },
-        metadata: item.metadata ? { ...item.metadata } : item.metadata,
-    };
-}
-/** Fields a stamper is not allowed to change; this also protects candidate order. */
-function newbornItemIdentity(item) {
-    return JSON.stringify({
-        detection: item.detection,
-        actors: item.actors,
-        interpretation: {
-            category: item.interpretation.category,
-            reasoning: item.interpretation.reasoning,
-            confidence: item.interpretation.confidence,
-        },
-        context: item.context,
-        confidence: item.confidence,
-        status: item.status,
-        expiresAt: item.expiresAt?.toISOString(),
-    });
-}
-/**
- * Stamps only newly-created, owned-intent discovery items. Reactivations and
- * manual, introducer, on-behalf-of, context-only, and continuation flows never
- * cross this host boundary. Unsafe callback output and callback failures retain
- * the original create items without changing their order.
- */
-export async function stampEligibleNewbornOpportunities(itemsToPersist, eligibility, stamper, observer) {
-    const stampIntentId = eligibility.resolvedTriggerIntentId;
-    const mayStamp = Boolean(stamper
-        && eligibility.operationMode === 'create'
-        && !eligibility.hasIntroductionContext
-        && !eligibility.onBehalfOfUserId
-        && !eligibility.targetUserId
-        && eligibility.discoverySource === 'intent'
-        && stampIntentId
-        && eligibility.indexedIntentIds.includes(stampIntentId));
-    if (!mayStamp || !stampIntentId || itemsToPersist.length === 0 || !stamper) {
-        return itemsToPersist;
-    }
-    const eligibleIndexes = itemsToPersist.flatMap((item, index) => item.detection.source === 'opportunity_graph' && item.detection.triggeredBy === stampIntentId
-        ? [index]
-        : []);
-    if (eligibleIndexes.length === 0)
-        return itemsToPersist;
-    const originals = eligibleIndexes.map((index) => itemsToPersist[index]);
-    try {
-        const stamped = await stamper({
-            ownerUserId: eligibility.ownerUserId,
-            intentId: stampIntentId,
-            items: originals.map(copyCreateOpportunityData),
-        });
-        const valid = Array.isArray(stamped)
-            && stamped.length === originals.length
-            && stamped.every((item, index) => newbornItemIdentity(item) === newbornItemIdentity(originals[index]));
-        if (!valid) {
-            observer?.onUnsafeResult?.({
-                expected: originals.length,
-                actual: Array.isArray(stamped) ? stamped.length : null,
-            });
-            return itemsToPersist;
-        }
-        const itemsForPersistence = [...itemsToPersist];
-        eligibleIndexes.forEach((itemIndex, stampedIndex) => {
-            itemsForPersistence[itemIndex] = stamped[stampedIndex];
-        });
-        return itemsForPersistence;
-    }
-    catch (error) {
-        observer?.onFailure?.({ intentId: stampIntentId, error });
-        return itemsToPersist;
-    }
-}

package/dist/opportunities/opportunity.owner-approval.d.ts

@@ -1,118 +0,0 @@
-/**
- * IND-593: protocol-owned owner-approval authority port.
- *
- * Every registered MCP-agent opportunity state change (send/accept/reject)
- * requires an explicit owner-issued, fresh, atomically single-use proof bound
- * to the exact opportunity, target action, owner principal, acting agent, and
- * current server-derived interaction. The protocol owns this verifier/consumer
- * contract and the fail-closed boundary in `update_opportunity`; the host
- * injects the concrete authority (challenge store + signed-proof issuance).
- *
- * Direct authenticated-owner interactions (REST/chat/CLI) traverse the same
- * boundary through `attestOwnerInteraction`: the host attests the
- * server-derived principal and interaction provenance of the already
- * authenticated owner session. Caller-controlled identity or proof-binding
- * fields are never trusted by either path — the binding below is always
- * derived from the resolved tool context.
- *
- * A2A negotiation approvals, agent self-acknowledgment
- * (`acknowledgedUptakeQuestionIds`), and server-generated advisory/challenge
- * values are explicitly NOT substitutes for owner authorization.
- */
-/** Owner-gated opportunity actions. `expired` is a system transition and is not gated. */
-export type OpportunityOwnerAction = 'send' | 'accept' | 'reject';
-/** Maps an update_opportunity target status to its owner-gated action, or null when ungated. */
-export declare function opportunityOwnerActionForStatus(status: string): OpportunityOwnerAction | null;
-/**
- * Server-derived proof binding. Built exclusively from the resolved tool
- * context and validated tool input — never from caller-supplied binding
- * fields. `agentId` is present exactly when a registered agent acts.
- */
-export interface OpportunityOwnerApprovalBinding {
-    opportunityId: string;
-    action: OpportunityOwnerAction;
-    ownerId: string;
-    agentId?: string;
-}
-/** Server-derived transport surface of the current interaction. */
-export type OpportunityOwnerInteractionSurface = 'mcp' | 'chat' | 'rest';
-/**
- * Trusted interaction/surface provenance for a non-agent tool call (IND-593
- * Batch B). Derived exclusively from the resolved server context — the host
- * composition binds `isSessionAuth` from the authenticated request identity,
- * and the surface follows the composition root (MCP server, chat factory,
- * REST tool service). Tool arguments and caller-supplied fields can never
- * populate it. The host authority attests ONLY a genuine direct owner
- * session (`sessionAuthenticated` on a non-chat surface); chat/CLI/H2A/A2A
- * and other mediated surfaces fail closed with `untrusted_provenance`.
- */
-export interface OpportunityOwnerInteractionProvenance {
-    surface: OpportunityOwnerInteractionSurface;
-    /** True only when the host bound an authenticated owner session (never an API key or a mediated orchestrator) to this exact request. */
-    sessionAuthenticated: boolean;
-}
-/** Attestation input: the server-derived binding plus trusted provenance. */
-export type OpportunityOwnerApprovalAttestation = OpportunityOwnerApprovalBinding & {
-    provenance: OpportunityOwnerInteractionProvenance;
-};
-/** Stable, testable denial reasons for the fail-closed owner-approval boundary. */
-export type OpportunityOwnerApprovalDenialReason = 
-/** No proof presented (or no authority wired); a fresh interaction challenge is attached. */
-'missing'
-/** Proof fails authenticity/structure checks (bad signature, unknown interaction, foreign token). */
- | 'forged'
-/** Proof or underlying challenge has expired. */
- | 'stale'
-/** Proof is not bound to an exact opportunities/action/owner/agent/interaction. */
- | 'generic'
-/** Proof binding mismatches the current server-derived binding. */
- | 'wrong_owner' | 'wrong_agent' | 'wrong_action' | 'wrong_opportunity'
-/** Proof was already consumed; single-use is atomic. */
- | 'replayed'
-/** The interaction's server-derived provenance cannot mint or attest owner authority; an owner-issued proof is required. */
- | 'untrusted_provenance'
-/** The authority's store or configuration failed; nothing is admitted. */
- | 'unavailable';
-/**
- * Fresh, server-derived interaction challenge returned with a `missing`
- * denial. The owner explicitly approves this exact interaction (bound to the
- * full server-derived binding) to obtain a one-time proof.
- */
-export interface OpportunityOwnerApprovalChallenge {
-    interactionId: string;
-    expiresAt: string;
-}
-export type OpportunityOwnerApprovalVerdict = {
-    kind: 'admitted';
-} | {
-    kind: 'denied';
-    reason: OpportunityOwnerApprovalDenialReason;
-    challenge?: OpportunityOwnerApprovalChallenge;
-};
-/**
- * Authoritative owner-proof verifier/consumer, injected by the host.
- * Implementations MUST fail closed and MUST make consumption atomically
- * single-use: a denied verification never consumes a proof; a successful one
- * consumes it exactly once, even under concurrent calls.
- */
-export interface OpportunityOwnerApprovalAuthority {
-    /**
-     * Verify and atomically consume an agent-presented proof against the
-     * server-derived binding. When `proof` is undefined the implementation
-     * registers the current interaction as a fresh challenge and denies with
-     * reason `missing`, attaching the challenge so the agent can relay it to the
-     * owner for explicit approval.
-     */
-    consumeAgentProof(proof: string | undefined, binding: OpportunityOwnerApprovalBinding & {
-        agentId: string;
-    }): Promise<OpportunityOwnerApprovalVerdict>;
-    /**
-     * Traverse the same boundary for a non-agent interaction. The host attests
-     * ONLY a genuine direct authenticated-owner session, judged from the
-     * server-derived principal and interaction/surface provenance — this is
-     * authoritative host derivation, not a bypass. Mediated surfaces
-     * (chat/CLI/H2A/A2A) and absent or malformed provenance fail closed with
-     * `untrusted_provenance`.
-     */
-    attestOwnerInteraction(binding: OpportunityOwnerApprovalAttestation): Promise<OpportunityOwnerApprovalVerdict>;
-}

package/dist/opportunities/opportunity.owner-approval.js

@@ -1,34 +0,0 @@
-/**
- * IND-593: protocol-owned owner-approval authority port.
- *
- * Every registered MCP-agent opportunity state change (send/accept/reject)
- * requires an explicit owner-issued, fresh, atomically single-use proof bound
- * to the exact opportunity, target action, owner principal, acting agent, and
- * current server-derived interaction. The protocol owns this verifier/consumer
- * contract and the fail-closed boundary in `update_opportunity`; the host
- * injects the concrete authority (challenge store + signed-proof issuance).
- *
- * Direct authenticated-owner interactions (REST/chat/CLI) traverse the same
- * boundary through `attestOwnerInteraction`: the host attests the
- * server-derived principal and interaction provenance of the already
- * authenticated owner session. Caller-controlled identity or proof-binding
- * fields are never trusted by either path — the binding below is always
- * derived from the resolved tool context.
- *
- * A2A negotiation approvals, agent self-acknowledgment
- * (`acknowledgedUptakeQuestionIds`), and server-generated advisory/challenge
- * values are explicitly NOT substitutes for owner authorization.
- */
-/** Maps an update_opportunity target status to its owner-gated action, or null when ungated. */
-export function opportunityOwnerActionForStatus(status) {
-    switch (status) {
-        case 'pending':
-            return 'send';
-        case 'accepted':
-            return 'accept';
-        case 'rejected':
-            return 'reject';
-        default:
-            return null;
-    }
-}

package/dist/opportunities/opportunity.owner-provenance.d.ts

@@ -1,6 +0,0 @@
-import type { ResolvedToolContext } from "../shared/agent/tool.helpers.js";
-import type { OpportunityOwnerInteractionProvenance } from "./opportunity.owner-approval.js";
-/** Bind authoritative host provenance to one resolved tool context. */
-export declare function bindOwnerApprovalProvenance(context: ResolvedToolContext, provenance: OpportunityOwnerInteractionProvenance): void;
-/** Read host-bound provenance without accepting any caller-supplied surrogate. */
-export declare function ownerApprovalProvenanceFor(context: ResolvedToolContext): OpportunityOwnerInteractionProvenance | undefined;

package/dist/opportunities/opportunity.owner-provenance.js

@@ -1,28 +0,0 @@
-/**
- * Capability-local extension of the resolved tool context for IND-593.
- *
- * The host is the only writer: it binds provenance after authentication and
- * before the registry invokes a tool. Tool input schemas never contain this
- * field, so a caller cannot forge a direct-owner interaction through args or
- * generic context data. Keeping this extension here avoids changing the shared
- * helper that is part of the negotiations/question architecture cycle.
- */
-const OWNER_APPROVAL_PROVENANCE = Symbol("ownerApprovalProvenance");
-function hasOwnerApprovalProvenance(context) {
-    return OWNER_APPROVAL_PROVENANCE in context;
-}
-/** Bind authoritative host provenance to one resolved tool context. */
-export function bindOwnerApprovalProvenance(context, provenance) {
-    Object.defineProperty(context, OWNER_APPROVAL_PROVENANCE, {
-        value: Object.freeze({ ...provenance }),
-        enumerable: false,
-        configurable: false,
-        writable: false,
-    });
-}
-/** Read host-bound provenance without accepting any caller-supplied surrogate. */
-export function ownerApprovalProvenanceFor(context) {
-    return hasOwnerApprovalProvenance(context)
-        ? context[OWNER_APPROVAL_PROVENANCE]
-        : undefined;
-}

package/dist/opportunities/opportunity.persist.d.ts

@@ -1,58 +0,0 @@
-/**
- * Shared persist phase for opportunity creation: enrichOrCreate → create (or create+expire) → optional chat injection.
- * Used by the opportunity graph persist node and by the manual opportunity service for consistency.
- */
-import type { CreateOpportunityData, IntentScopedOpportunityPersistenceResult, Opportunity, OpportunityDedupConflict, OpportunityNetworkEligibility, OpportunityStatus } from '../shared/interfaces/database.interface.js';
-import type { Embedder } from '../shared/interfaces/embedder.interface.js';
-import type { EnricherDatabase } from "./opportunity.enricher.js";
-export type PersistOpportunityDatabase = EnricherDatabase & {
-    createOpportunity(data: CreateOpportunityData): Promise<Opportunity>;
-    createOpportunityIfNetworkEligible?(data: CreateOpportunityData, eligibility: OpportunityNetworkEligibility): Promise<Opportunity | null>;
-    updateOpportunityStatus(id: string, status: OpportunityStatus): Promise<void | Opportunity | null>;
-    createOpportunityAndExpireIds?(data: CreateOpportunityData, expireIds: string[]): Promise<{
-        created: Opportunity;
-        expired: Opportunity[];
-    }>;
-    createOpportunityAndExpireIdsIfNetworkEligible?(data: CreateOpportunityData, expireIds: string[], eligibility: OpportunityNetworkEligibility): Promise<{
-        created: Opportunity;
-        expired: Opportunity[];
-    } | null>;
-    persistIntentScopedOpportunityIfNetworkEligible?(data: CreateOpportunityData, expireIds: string[], eligibility: OpportunityNetworkEligibility & {
-        triggerIntentId: string;
-    }, dedupWindowMs: number): Promise<IntentScopedOpportunityPersistenceResult | null>;
-    /** Optional: used to populate expired list in non-atomic path. */
-    getOpportunity?(id: string): Promise<Opportunity | null>;
-};
-export interface PersistOpportunitiesParams {
-    database: PersistOpportunityDatabase;
-    embedder: Embedder;
-    items: CreateOpportunityData[];
-    injectChat?: (opportunity: Opportunity) => Promise<unknown>;
-    /** Require adapter-level membership/assignment locks for discovery-created rows. */
-    networkEligibility?: OpportunityNetworkEligibility;
-    /** Scope dedup/enrichment and the final atomic re-check to one owned intent. */
-    intentDedupScope?: {
-        triggerIntentId: string;
-        dedupWindowMs: number;
-    };
-}
-export interface PersistOpportunitiesError {
-    itemIndex: number;
-    error: unknown;
-}
-export interface PersistOpportunitiesConflict extends OpportunityDedupConflict {
-    itemIndex: number;
-    finalAtomic: true;
-}
-export interface PersistOpportunitiesResult {
-    created: Opportunity[];
-    expired: Opportunity[];
-    conflicts: PersistOpportunitiesConflict[];
-    errors?: PersistOpportunitiesError[];
-}
-/**
- * Persist one or more opportunities: enrich (merge overlapping), create, expire replaced, optional chat injection.
- * When the database has createOpportunityAndExpireIds and enrichment produced expireIds, uses it for atomic create+expire.
- * Returns both created and expired so callers can emit events (e.g. manual service).
- */
-export declare function persistOpportunities(params: PersistOpportunitiesParams): Promise<PersistOpportunitiesResult>;