@ixo/editor 6.32.0 → 6.33.0

package/dist/{store-CqvAkvIZ.d.ts → connections-1NtNQrsY.d.ts}

@@ -1,8 +1,11 @@
-import { a6 as FlowNode, a7 as FlowNodeAuthzExtension, F as FlowRuntimeStateManager, g as UcanService, I as InvocationStore, a8 as EvaluationStatus, a9 as IxoEditorType, aa as PendingInvocation, ab as ActionServices, ac as ActionHandlers, ad as RunEventAppender, ae as ActionResult, af as ActionDefinition, j as UcanCapability, ag as FlowNodeRuntimeState, U as UcanDelegationStore, S as StoredDelegation } from './index-Up8gA_E9.js';
+import { a6 as FlowNodeAuthzExtension, a7 as FlowNode, a8 as EvaluationStatus, F as FlowRuntimeStateManager, G as UcanService, g as InvocationStore, a9 as IxoEditorType, aa as PendingInvocation, ab as ActionServices, ac as ActionHandlers, ad as RunEventAppender, ae as TopicExecutionContext, af as TopicActionBridge, ag as ActionResult, ah as TopicActionWriteBackResult, U as UcanCapability, ai as FlowNodeRuntimeState, z as UcanDelegationStore, v as StoredDelegation, aj as ActionDefinition } from './runtime-BFwvCQDF.js';
 import * as Y from 'yjs';
 import { Doc, Map } from 'yjs';
 import { MatrixClient } from 'matrix-js-sdk';
 
+declare const buildAuthzFromProps: (props: Record<string, any>) => FlowNodeAuthzExtension;
+declare const buildFlowNodeFromBlock: (block: any) => FlowNode;
+
 /** Condition that gates when a capability activates. */
 interface ConditionRef {
     /** ID of the upstream capability whose output is checked. */
@@ -111,14 +114,28 @@ interface TriggerSpec {
      * - `flow.start`: block runs when the flow execution begins.
      * - `block.event`: block runs each time another block emits a matching event.
      * - `block.event.all`: block runs once ALL listed sources have emitted (barrier/join).
+     * - `schedule`: block runs when a sovereign schedule fires (Sovereign
+     *   Scheduling, IXO-4429). The block carries only a reference — the five
+     *   time kinds (time.at/cron/interval/delay/relative), timezone and
+     *   recurrence live in the referenced ScheduleSpec, never in block props,
+     *   so editing a schedule does not force a flow recompile and the timing
+     *   provider never sees flow content.
      */
-    type: 'manual' | 'flow.start' | 'block.event' | 'block.event.all';
+    type: 'manual' | 'flow.start' | 'block.event' | 'block.event.all' | 'schedule';
     /** Required when `type === 'block.event'`. ID of the block that emits the event. */
     sourceBlockId?: string;
     /** Required when `type === 'block.event'`. Name of the event (must match an event declared on the source action's `events` vocabulary). */
     eventName?: string;
     /** Required when `type === 'block.event.all'`. Array of event sources — ALL must fire before the listener is queued. */
     sources?: TriggerSource[];
+    /** Required when `type === 'schedule'`. Stable ID of the ScheduleSpec this block is bound to. */
+    scheduleRef?: string;
+    /**
+     * Optional when `type === 'schedule'`: pin to one schedule revision.
+     * Cloning a flow as a template must strip `scheduleRef` — an active
+     * schedule ID names one authorized binding, not a reusable default.
+     */
+    scheduleRevision?: number;
 }
 /**
  * The Base UCAN flow plan — the intermediate representation between
@@ -207,9 +224,6 @@ interface CompiledFlow {
 /** Strategy for how a compiled flow is applied to an existing document. */
 type FlowStrategy = 'full' | 'merge' | 'patch';
 
-declare const buildAuthzFromProps: (props: Record<string, any>) => FlowNodeAuthzExtension;
-declare const buildFlowNodeFromBlock: (block: any) => FlowNode;
-
 /**
  * Context passed to resolveRuntimeRefs when resolving inputs for a triggered
  * listener block. The runtime constructs this from a PendingInvocation when
@@ -351,6 +365,14 @@ interface ExecuteActionBlockParams extends BuildActionRunInputsParams {
     flowId?: string;
     flowOwnerDid?: string;
     schemaVersion?: string;
+    /** Optional revision-bound Topic context; never substitutes for Flow authority. */
+    topic?: TopicExecutionContext;
+    /** Durable receipt bridge, supplied only after independent Topic UCAN verification. */
+    topicBridge?: TopicActionBridge;
+    /** DID of the runtime provider/controller issuing Topic receipts. */
+    executorDid?: string;
+    /** Pinned Flow revision or digest used by Topic bindings and receipts. */
+    flowRevision?: string;
 }
 interface ExecuteActionBlockResult {
     success: boolean;
@@ -386,6 +408,7 @@ interface ExecuteActionBlockResult {
     pendingInvocationRemoved?: boolean;
     completionState: ActionExecutionCompletionState;
     pendingInvocation?: PendingInvocation;
+    topicWriteBack?: TopicActionWriteBackResult;
 }
 declare function buildActionRunInputs(params: BuildActionRunInputsParams): BuildActionRunInputsResult;
 declare function executeActionBlock(params: ExecuteActionBlockParams): Promise<ExecuteActionBlockResult>;
@@ -406,81 +429,329 @@ interface AuthorizationResult {
  */
 declare const isAuthorized: (blockId: string, actorDid: string, ucanService: UcanService | undefined, flowUri: string, schemaVersion?: string) => Promise<AuthorizationResult>;
 
-/** Registry interface expected by the compiler (keeps it pure / testable). */
-interface CompilerRegistry {
-    getActionByCan(can: string): ActionDefinition | undefined;
+type FlowAgentPublicNodeState = 'Pending' | 'Blocked' | 'Overdue' | 'Done';
+type FlowAgentRunPhase = 'Running' | 'Validating' | 'Failed' | 'Archived';
+type FlowAgentBlockerCause = 'missing_input' | 'failed_upstream' | 'missing_ucan' | 'stale_config' | 'service_error' | 'external_confirmation_pending' | 'validation_mismatch' | 'unverified_completion' | 'awaiting_verification' | 'unknown';
+type FlowAgentCommandType = 'diagnose_blocker' | 'assign_actor' | 'notify_actor' | 'execute_action' | 'validate_external_state' | 'archive_flow' | 'propose_config_change';
+type FlowAgentCommandStatus = 'queued' | 'leased' | 'running' | 'confirmed' | 'awaiting_readback' | 'failed' | 'skipped';
+type FlowAgentLedgerEventType = 'agent.decision' | 'agent.command' | 'agent.validation' | 'agent.escalation' | 'agent.memory';
+interface FlowAgentActor {
+    did: string;
+    matrixUserId?: string;
+    displayName?: string;
+    skills?: string[];
+}
+interface FlowAgentLease {
+    id: string;
+    commandId: string;
+    sessionRunId: string;
+    nodeId: string;
+    actorDid: string;
+    acquiredAt: number;
+    expiresAt: number;
+    epoch: number;
+}
+interface FlowAgentNodeSnapshot {
+    nodeId: string;
+    blockType: string;
+    actionType?: string;
+    title?: string;
+    runtime: FlowNodeRuntimeState;
+    publicState: FlowAgentPublicNodeState;
+    blockerCause?: FlowAgentBlockerCause;
+    assigneeDid?: string;
+    dueAt?: number;
+    pendingInvocationCount: number;
+}
+interface FlowAgentCommandBase {
+    id: string;
+    type: FlowAgentCommandType;
+    flowId: string;
+    sessionRunId: string;
+    flowUri: string;
+    nodeId: string;
+    actorDid: string;
+    status: FlowAgentCommandStatus;
+    capability: UcanCapability;
+    idempotencyKey: string;
+    createdAt: number;
+    updatedAt: number;
+    reason: string;
+    payload: Record<string, unknown>;
+    lease?: FlowAgentLease;
+    error?: string;
+}
+type FlowAgentCommand = FlowAgentCommandBase;
+interface FlowAgentLedgerEvent {
+    id: string;
+    type: FlowAgentLedgerEventType;
+    flowId: string;
+    sessionRunId: string;
+    nodeId?: string;
+    commandId?: string;
+    actorDid: string;
+    timestamp: number;
+    details: Record<string, unknown>;
+}
+interface FlowAgentMaps {
+    outbox: Map<FlowAgentCommand>;
+    leases: Map<FlowAgentLease>;
+}
+interface FlowAgentPolicyDecision {
+    allowed: boolean;
+    reason: string;
+    capability: UcanCapability;
+    proofCids: string[];
+}
+interface FlowAgentContext {
+    yDoc: Doc;
+    editor?: IxoEditorType;
+    /** Planner targets, including executable actions and manual work nodes. */
+    blocks?: unknown[];
+    /** Full recursive document used to resolve condition source blocks. */
+    documentBlocks?: unknown[];
+    flowId: string;
+    sessionRunId: string;
+    flowUri: string;
+    actor: FlowAgentActor;
+    now?: () => number;
+}
+interface FlowAgentCommandResult {
+    commandId: string;
+    success: boolean;
+    output?: Record<string, unknown>;
+    confirmed?: boolean;
+    completionState?: ActionExecutionCompletionState;
+    status?: FlowAgentCommandStatus;
+    error?: string;
+}
+interface FlowAgentExecutor {
+    executeAction?: (command: FlowAgentCommand, context: FlowAgentContext) => Promise<FlowAgentCommandResult>;
+    assignActor?: (command: FlowAgentCommand, context: FlowAgentContext) => Promise<FlowAgentCommandResult>;
+    notifyActor?: (command: FlowAgentCommand, context: FlowAgentContext) => Promise<FlowAgentCommandResult>;
+    validateExternalState?: (command: FlowAgentCommand, context: FlowAgentContext) => Promise<FlowAgentCommandResult>;
+    archiveFlow?: (command: FlowAgentCommand, context: FlowAgentContext) => Promise<FlowAgentCommandResult>;
+    proposeConfigChange?: (command: FlowAgentCommand, context: FlowAgentContext) => Promise<FlowAgentCommandResult>;
+    diagnoseBlocker?: (command: FlowAgentCommand, context: FlowAgentContext) => Promise<FlowAgentCommandResult>;
+}
+interface FlowAgentTickResult {
+    flowDone: boolean;
+    snapshots: FlowAgentNodeSnapshot[];
+    queuedCommands: FlowAgentCommand[];
+    executedCommands: FlowAgentCommandResult[];
+}
+
+interface CreateAgentCommandParams {
+    type: FlowAgentCommandType;
+    flowId: string;
+    sessionRunId: string;
+    flowUri: string;
+    nodeId: string;
+    actor: FlowAgentActor;
+    reason: string;
+    payload?: Record<string, unknown>;
+    now?: number;
+}
+declare function createAgentCommand({ type, flowId, sessionRunId, flowUri, nodeId, actor, reason, payload, now }: CreateAgentCommandParams): FlowAgentCommand;
+declare function validateAgentCommand(command: FlowAgentCommand): {
+    valid: boolean;
+    error?: string;
+};
+declare function isExternalMutation(type: FlowAgentCommandType): boolean;
+
+interface BuildFlowAgentContextParams {
+    yDoc: Doc;
+    flowId: string;
+    sessionRunId: string;
+    flowUri?: string;
+    actor: FlowAgentActor;
+    blocks?: unknown[];
+    documentBlocks?: unknown[];
+    editor?: IxoEditorType;
+    now?: () => number;
 }
 /**
- * Compile a Base UCAN flow plan into blocks, graph state, and metadata.
+ * Builds the host-facing runtime context expected by the Flow Agent.
  *
- * This is a **pure function** — no React, no Yjs, no side effects.
- * The output is consumed by `hydrateFlowFromPlan()`.
+ * Headless hosts own Matrix login, room joins, and Y.Doc sync. Once a host has
+ * a live room document and an agent identity, this helper gives it the stable
+ * context shape to pass into `tickFlowAgent` or `FlowAgentService`.
  */
-declare function compileBaseUcanFlow(plan: BaseUcanFlow, registry: CompilerRegistry): CompiledFlow;
+declare function buildFlowAgentContext({ yDoc, flowId, sessionRunId, flowUri, actor, blocks, documentBlocks, editor, now, }: BuildFlowAgentContextParams): FlowAgentContext;
 
-/** Describes what changed when merging two compiled flows. */
-interface MergeResult {
-    /** The merged compiled flow (full state). */
-    merged: CompiledFlow;
-    /** Node IDs that were added (new in incoming, not in existing). */
-    added: string[];
-    /** Node IDs that were replaced (patch only — existed and was overwritten). */
-    replaced: string[];
-    /** Node IDs that were kept unchanged from existing. */
-    kept: string[];
+interface AcquireFlowAgentLeaseParams {
+    leases: Map<FlowAgentLease>;
+    commandId: string;
+    sessionRunId: string;
+    nodeId: string;
+    actorDid: string;
+    now?: number;
+    ttlMs?: number;
 }
+declare function acquireFlowAgentLease({ leases, commandId, sessionRunId, nodeId, actorDid, now, ttlMs, }: AcquireFlowAgentLeaseParams): FlowAgentLease | null;
+declare function validateFlowAgentLease(leases: Map<FlowAgentLease>, lease: FlowAgentLease, now?: number): boolean;
+declare function releaseFlowAgentLease(leases: Map<FlowAgentLease>, lease: FlowAgentLease): boolean;
+declare function cleanupExpiredFlowAgentLeases(leases: Map<FlowAgentLease>, now?: number): FlowAgentLease[];
+
+declare function requiredCapabilityForCommand(type: FlowAgentCommandType, flowUri: string, nodeId: string): UcanCapability;
+declare function isCapabilityMatch(granted: UcanCapability, required: UcanCapability): boolean;
 /**
- * Merge an incoming compiled flow into an existing one.
- *
- * This is a **pure function** — no Yjs, no side effects.
+ * Match a granted capability pattern against a required `can`.
  *
- * Strategies:
- * - `merge`: existing nodes win on ID collision. Incoming nodes with new IDs
- *   are added. Existing nodes are never modified.
- * - `patch`: incoming nodes overwrite existing nodes on ID collision. Incoming
- *   nodes with new IDs are added. Existing nodes not in incoming are kept.
+ * ⚠️ This is the **trusted flow-agent policy** matcher: it allows the global
+ * `'*'` wildcard, so a delegation granting `can: '*'` matches every ability.
+ * It is re-exported from `src/core/index.ts` — do not use it to gate public or
+ * untrusted matching. For that, call `capabilityPatternCoversCan` directly and
+ * leave `allowGlobalWildcard` off (the default), which rejects `'*'`.
  *
- * Edges in the merged result are the union of edges from both sides, filtered
- * to those whose source and target both exist in the merged node set, with
- * duplicates collapsed by edge id. Order is the merged node insertion order
- * (existing first, then newly added) — there is no topological sort because
- * there is no inferred dependency relationship.
+ * Note: the granted side is normalized (`normalizeCan`), so dotted legacy
+ * grants such as `flow.notify` / `flow.*` now match `flow/notify` where they
+ * were previously inert.
  */
-declare function mergeCompiledFlows(existing: CompiledFlow, incoming: CompiledFlow, strategy: 'merge' | 'patch'): MergeResult;
-
-interface SetupFlowOptions {
-    /** The Base UCAN flow plan to compile. */
-    plan: BaseUcanFlow;
-    /** Matrix room ID to hydrate the flow into. */
-    roomId: string;
-    /** Authenticated Matrix client. */
-    matrixClient: MatrixClient;
-    /** DID of the user setting up the flow. */
-    creatorDid: string;
-    /** Optional doc ID override (defaults to plan.flowId). */
-    docId?: string;
-    /**
-     * Room ID of the template this flow was instantiated from, if any.
-     * Recorded into the root map as `source_template_id` for lineage tracking.
-     */
-    templateId?: string;
-    /**
-     * How to apply the plan to the existing document.
-     * - `full` (default): wipe existing flow state and rebuild entirely.
-     * - `merge`: keep existing blocks, add new capabilities from the plan.
-     * - `patch`: replace matching nodes, add new ones, keep the rest.
-     */
-    strategy?: FlowStrategy;
+declare function canMatches(granted: string, required: string): boolean;
+declare function resourceMatches(granted: string, required: string): boolean;
+interface EvaluateFlowAgentPolicyParams {
+    actorDid: string;
+    commandType: FlowAgentCommandType;
+    flowUri: string;
+    nodeId: string;
+    delegationStore?: UcanDelegationStore;
+    delegations?: StoredDelegation[];
+    now?: number;
 }
-interface SetupFlowResult {
-    /** The compiled flow artifacts. */
-    compiled: CompiledFlow;
-    /** The room ID (same as input, for convenience). */
-    roomId: string;
-    /** The flow ID from the plan. */
-    flowId: string;
+declare function evaluateFlowAgentPolicy({ actorDid, commandType, flowUri, nodeId, delegationStore, delegations, now, }: EvaluateFlowAgentPolicyParams): FlowAgentPolicyDecision;
+
+interface FlowAgentOrchestratorOptions {
+    delegationStore?: UcanDelegationStore;
+    delegations?: StoredDelegation[];
+    candidateActors?: FlowAgentActor[];
+    executor?: FlowAgentExecutor;
+    leaseTtlMs?: number;
+    archiveWhenDone?: boolean;
 }
-interface ReadFlowOptions {
+declare function planRalphLoopCommands(context: FlowAgentContext, options?: FlowAgentOrchestratorOptions): {
+    snapshots: FlowAgentNodeSnapshot[];
+    queuedCommands: FlowAgentCommand[];
+    flowDone: boolean;
+};
+declare function executeQueuedAgentCommands(context: FlowAgentContext, options?: FlowAgentOrchestratorOptions): Promise<FlowAgentCommandResult[]>;
+declare function tickFlowAgent(context: FlowAgentContext, options?: FlowAgentOrchestratorOptions): Promise<FlowAgentTickResult>;
+
+interface FlowAgentServiceOptions extends FlowAgentOrchestratorOptions {
+    intervalMs?: number;
+    onTick?: (result: FlowAgentTickResult) => void | Promise<void>;
+    onError?: (error: unknown) => void;
+}
+/**
+ * Headless-service adapter boundary.
+ *
+ * Host applications own Matrix login, room joins, and Y.Doc sync. Once they
+ * have a live Y.Doc/editor snapshot, this service provides the deterministic
+ * Ralph-loop tick and command execution cycle.
+ */
+declare class FlowAgentService {
+    private readonly context;
+    private readonly options;
+    private timer;
+    private running;
+    constructor(context: FlowAgentContext, options?: FlowAgentServiceOptions);
+    tick(): Promise<FlowAgentTickResult>;
+    start(): void;
+    stop(): void;
+}
+
+declare function getFlowAgentMaps(yDoc: Doc): FlowAgentMaps;
+declare function computeAgentCommandId(params: {
+    flowId: string;
+    sessionRunId: string;
+    nodeId: string;
+    type: string;
+    payload: Record<string, unknown>;
+}): string;
+declare function queueAgentCommand(yDoc: Doc, command: FlowAgentCommand): {
+    command: FlowAgentCommand;
+    created: boolean;
+};
+/** Read every command for one session without creating the outbox map. */
+declare function readAgentCommands(yDoc: Doc, sessionRunId?: string): FlowAgentCommand[];
+declare function readQueuedAgentCommands(yDoc: Doc, sessionRunId?: string): FlowAgentCommand[];
+/** Read every lease for one session without creating the leases map. */
+declare function readFlowAgentLeases(yDoc: Doc, sessionRunId?: string): FlowAgentLease[];
+declare function updateAgentCommand(yDoc: Doc, commandId: string, patch: Partial<FlowAgentCommand>): FlowAgentCommand | null;
+declare function appendAgentLedgerEvent(yDoc: Doc, event: Omit<FlowAgentLedgerEvent, 'id'> & {
+    id?: string;
+}): FlowAgentLedgerEvent;
+declare function readAgentLedgerEvents(yDoc: Doc, eventType?: FlowAgentLedgerEventType, sessionRunId?: string): FlowAgentLedgerEvent[];
+
+/** Registry interface expected by the compiler (keeps it pure / testable). */
+interface CompilerRegistry {
+    getActionByCan(can: string): ActionDefinition | undefined;
+}
+declare function compileBaseUcanFlow(plan: BaseUcanFlow, registry: CompilerRegistry): CompiledFlow;
+
+/** Describes what changed when merging two compiled flows. */
+interface MergeResult {
+    /** The merged compiled flow (full state). */
+    merged: CompiledFlow;
+    /** Node IDs that were added (new in incoming, not in existing). */
+    added: string[];
+    /** Node IDs that were replaced (patch only — existed and was overwritten). */
+    replaced: string[];
+    /** Node IDs that were kept unchanged from existing. */
+    kept: string[];
+}
+/**
+ * Merge an incoming compiled flow into an existing one.
+ *
+ * This is a **pure function** — no Yjs, no side effects.
+ *
+ * Strategies:
+ * - `merge`: existing nodes win on ID collision. Incoming nodes with new IDs
+ *   are added. Existing nodes are never modified.
+ * - `patch`: incoming nodes overwrite existing nodes on ID collision. Incoming
+ *   nodes with new IDs are added. Existing nodes not in incoming are kept.
+ *
+ * Edges in the merged result are the union of edges from both sides, filtered
+ * to those whose source and target both exist in the merged node set, with
+ * duplicates collapsed by edge id. Order is the merged node insertion order
+ * (existing first, then newly added) — there is no topological sort because
+ * there is no inferred dependency relationship.
+ */
+declare function mergeCompiledFlows(existing: CompiledFlow, incoming: CompiledFlow, strategy: 'merge' | 'patch'): MergeResult;
+
+interface SetupFlowOptions {
+    /** The Base UCAN flow plan to compile. */
+    plan: BaseUcanFlow;
+    /** Matrix room ID to hydrate the flow into. */
+    roomId: string;
+    /** Authenticated Matrix client. */
+    matrixClient: MatrixClient;
+    /** DID of the user setting up the flow. */
+    creatorDid: string;
+    /** Optional doc ID override (defaults to plan.flowId). */
+    docId?: string;
+    /**
+     * Room ID of the template this flow was instantiated from, if any.
+     * Recorded into the root map as `source_template_id` for lineage tracking.
+     */
+    templateId?: string;
+    /**
+     * How to apply the plan to the existing document.
+     * - `full` (default): wipe existing flow state and rebuild entirely.
+     * - `merge`: keep existing blocks, add new capabilities from the plan.
+     * - `patch`: replace matching nodes, add new ones, keep the rest.
+     */
+    strategy?: FlowStrategy;
+}
+interface SetupFlowResult {
+    /** The compiled flow artifacts. */
+    compiled: CompiledFlow;
+    /** The room ID (same as input, for convenience). */
+    roomId: string;
+    /** The flow ID from the plan. */
+    flowId: string;
+}
+interface ReadFlowOptions {
     /** Matrix room ID to read from. */
     roomId: string;
     /** Authenticated Matrix client. */
@@ -782,258 +1053,4 @@ declare function upsertFlowConnectionBinding(yDoc: Doc, binding: FlowConnectionB
 /** Remove a binding. No-op when the flow has no binding for `toolkit`. */
 declare function removeFlowConnectionBinding(yDoc: Doc, toolkit: string): void;
 
-type FlowAgentPublicNodeState = 'Pending' | 'Blocked' | 'Overdue' | 'Done';
-type FlowAgentRunPhase = 'Running' | 'Validating' | 'Failed' | 'Archived';
-type FlowAgentBlockerCause = 'missing_input' | 'failed_upstream' | 'missing_ucan' | 'stale_config' | 'service_error' | 'external_confirmation_pending' | 'validation_mismatch' | 'unverified_completion' | 'awaiting_verification' | 'unknown';
-type FlowAgentCommandType = 'diagnose_blocker' | 'assign_actor' | 'notify_actor' | 'execute_action' | 'validate_external_state' | 'archive_flow' | 'propose_config_change';
-type FlowAgentCommandStatus = 'queued' | 'leased' | 'running' | 'confirmed' | 'awaiting_readback' | 'failed' | 'skipped';
-type FlowAgentLedgerEventType = 'agent.decision' | 'agent.command' | 'agent.validation' | 'agent.escalation' | 'agent.memory';
-interface FlowAgentActor {
-    did: string;
-    matrixUserId?: string;
-    displayName?: string;
-    skills?: string[];
-}
-interface FlowAgentLease {
-    id: string;
-    commandId: string;
-    sessionRunId: string;
-    nodeId: string;
-    actorDid: string;
-    acquiredAt: number;
-    expiresAt: number;
-    epoch: number;
-}
-interface FlowAgentNodeSnapshot {
-    nodeId: string;
-    blockType: string;
-    actionType?: string;
-    title?: string;
-    runtime: FlowNodeRuntimeState;
-    publicState: FlowAgentPublicNodeState;
-    blockerCause?: FlowAgentBlockerCause;
-    assigneeDid?: string;
-    dueAt?: number;
-    pendingInvocationCount: number;
-}
-interface FlowAgentCommandBase {
-    id: string;
-    type: FlowAgentCommandType;
-    flowId: string;
-    sessionRunId: string;
-    flowUri: string;
-    nodeId: string;
-    actorDid: string;
-    status: FlowAgentCommandStatus;
-    capability: UcanCapability;
-    idempotencyKey: string;
-    createdAt: number;
-    updatedAt: number;
-    reason: string;
-    payload: Record<string, unknown>;
-    lease?: FlowAgentLease;
-    error?: string;
-}
-type FlowAgentCommand = FlowAgentCommandBase;
-interface FlowAgentLedgerEvent {
-    id: string;
-    type: FlowAgentLedgerEventType;
-    flowId: string;
-    sessionRunId: string;
-    nodeId?: string;
-    commandId?: string;
-    actorDid: string;
-    timestamp: number;
-    details: Record<string, unknown>;
-}
-interface FlowAgentMaps {
-    outbox: Map<FlowAgentCommand>;
-    leases: Map<FlowAgentLease>;
-}
-interface FlowAgentPolicyDecision {
-    allowed: boolean;
-    reason: string;
-    capability: UcanCapability;
-    proofCids: string[];
-}
-interface FlowAgentContext {
-    yDoc: Doc;
-    editor?: IxoEditorType;
-    /** Planner targets, including executable actions and manual work nodes. */
-    blocks?: unknown[];
-    /** Full recursive document used to resolve condition source blocks. */
-    documentBlocks?: unknown[];
-    flowId: string;
-    sessionRunId: string;
-    flowUri: string;
-    actor: FlowAgentActor;
-    now?: () => number;
-}
-interface FlowAgentCommandResult {
-    commandId: string;
-    success: boolean;
-    output?: Record<string, unknown>;
-    confirmed?: boolean;
-    completionState?: ActionExecutionCompletionState;
-    status?: FlowAgentCommandStatus;
-    error?: string;
-}
-interface FlowAgentExecutor {
-    executeAction?: (command: FlowAgentCommand, context: FlowAgentContext) => Promise<FlowAgentCommandResult>;
-    assignActor?: (command: FlowAgentCommand, context: FlowAgentContext) => Promise<FlowAgentCommandResult>;
-    notifyActor?: (command: FlowAgentCommand, context: FlowAgentContext) => Promise<FlowAgentCommandResult>;
-    validateExternalState?: (command: FlowAgentCommand, context: FlowAgentContext) => Promise<FlowAgentCommandResult>;
-    archiveFlow?: (command: FlowAgentCommand, context: FlowAgentContext) => Promise<FlowAgentCommandResult>;
-    proposeConfigChange?: (command: FlowAgentCommand, context: FlowAgentContext) => Promise<FlowAgentCommandResult>;
-    diagnoseBlocker?: (command: FlowAgentCommand, context: FlowAgentContext) => Promise<FlowAgentCommandResult>;
-}
-interface FlowAgentTickResult {
-    flowDone: boolean;
-    snapshots: FlowAgentNodeSnapshot[];
-    queuedCommands: FlowAgentCommand[];
-    executedCommands: FlowAgentCommandResult[];
-}
-
-interface CreateAgentCommandParams {
-    type: FlowAgentCommandType;
-    flowId: string;
-    sessionRunId: string;
-    flowUri: string;
-    nodeId: string;
-    actor: FlowAgentActor;
-    reason: string;
-    payload?: Record<string, unknown>;
-    now?: number;
-}
-declare function createAgentCommand({ type, flowId, sessionRunId, flowUri, nodeId, actor, reason, payload, now }: CreateAgentCommandParams): FlowAgentCommand;
-declare function validateAgentCommand(command: FlowAgentCommand): {
-    valid: boolean;
-    error?: string;
-};
-declare function isExternalMutation(type: FlowAgentCommandType): boolean;
-
-interface BuildFlowAgentContextParams {
-    yDoc: Doc;
-    flowId: string;
-    sessionRunId: string;
-    flowUri?: string;
-    actor: FlowAgentActor;
-    blocks?: unknown[];
-    documentBlocks?: unknown[];
-    editor?: IxoEditorType;
-    now?: () => number;
-}
-/**
- * Builds the host-facing runtime context expected by the Flow Agent.
- *
- * Headless hosts own Matrix login, room joins, and Y.Doc sync. Once a host has
- * a live room document and an agent identity, this helper gives it the stable
- * context shape to pass into `tickFlowAgent` or `FlowAgentService`.
- */
-declare function buildFlowAgentContext({ yDoc, flowId, sessionRunId, flowUri, actor, blocks, documentBlocks, editor, now, }: BuildFlowAgentContextParams): FlowAgentContext;
-
-interface AcquireFlowAgentLeaseParams {
-    leases: Map<FlowAgentLease>;
-    commandId: string;
-    sessionRunId: string;
-    nodeId: string;
-    actorDid: string;
-    now?: number;
-    ttlMs?: number;
-}
-declare function acquireFlowAgentLease({ leases, commandId, sessionRunId, nodeId, actorDid, now, ttlMs, }: AcquireFlowAgentLeaseParams): FlowAgentLease | null;
-declare function validateFlowAgentLease(leases: Map<FlowAgentLease>, lease: FlowAgentLease, now?: number): boolean;
-declare function releaseFlowAgentLease(leases: Map<FlowAgentLease>, lease: FlowAgentLease): boolean;
-declare function cleanupExpiredFlowAgentLeases(leases: Map<FlowAgentLease>, now?: number): FlowAgentLease[];
-
-declare function requiredCapabilityForCommand(type: FlowAgentCommandType, flowUri: string, nodeId: string): UcanCapability;
-declare function isCapabilityMatch(granted: UcanCapability, required: UcanCapability): boolean;
-/**
- * Match a granted capability pattern against a required `can`.
- *
- * ⚠️ This is the **trusted flow-agent policy** matcher: it allows the global
- * `'*'` wildcard, so a delegation granting `can: '*'` matches every ability.
- * It is re-exported from `src/core/index.ts` — do not use it to gate public or
- * untrusted matching. For that, call `capabilityPatternCoversCan` directly and
- * leave `allowGlobalWildcard` off (the default), which rejects `'*'`.
- *
- * Note: the granted side is normalized (`normalizeCan`), so dotted legacy
- * grants such as `flow.notify` / `flow.*` now match `flow/notify` where they
- * were previously inert.
- */
-declare function canMatches(granted: string, required: string): boolean;
-declare function resourceMatches(granted: string, required: string): boolean;
-interface EvaluateFlowAgentPolicyParams {
-    actorDid: string;
-    commandType: FlowAgentCommandType;
-    flowUri: string;
-    nodeId: string;
-    delegationStore?: UcanDelegationStore;
-    delegations?: StoredDelegation[];
-    now?: number;
-}
-declare function evaluateFlowAgentPolicy({ actorDid, commandType, flowUri, nodeId, delegationStore, delegations, now, }: EvaluateFlowAgentPolicyParams): FlowAgentPolicyDecision;
-
-interface FlowAgentOrchestratorOptions {
-    delegationStore?: UcanDelegationStore;
-    delegations?: StoredDelegation[];
-    candidateActors?: FlowAgentActor[];
-    executor?: FlowAgentExecutor;
-    leaseTtlMs?: number;
-    archiveWhenDone?: boolean;
-}
-declare function planRalphLoopCommands(context: FlowAgentContext, options?: FlowAgentOrchestratorOptions): {
-    snapshots: FlowAgentNodeSnapshot[];
-    queuedCommands: FlowAgentCommand[];
-    flowDone: boolean;
-};
-declare function executeQueuedAgentCommands(context: FlowAgentContext, options?: FlowAgentOrchestratorOptions): Promise<FlowAgentCommandResult[]>;
-declare function tickFlowAgent(context: FlowAgentContext, options?: FlowAgentOrchestratorOptions): Promise<FlowAgentTickResult>;
-
-interface FlowAgentServiceOptions extends FlowAgentOrchestratorOptions {
-    intervalMs?: number;
-    onTick?: (result: FlowAgentTickResult) => void | Promise<void>;
-    onError?: (error: unknown) => void;
-}
-/**
- * Headless-service adapter boundary.
- *
- * Host applications own Matrix login, room joins, and Y.Doc sync. Once they
- * have a live Y.Doc/editor snapshot, this service provides the deterministic
- * Ralph-loop tick and command execution cycle.
- */
-declare class FlowAgentService {
-    private readonly context;
-    private readonly options;
-    private timer;
-    private running;
-    constructor(context: FlowAgentContext, options?: FlowAgentServiceOptions);
-    tick(): Promise<FlowAgentTickResult>;
-    start(): void;
-    stop(): void;
-}
-
-declare function getFlowAgentMaps(yDoc: Doc): FlowAgentMaps;
-declare function computeAgentCommandId(params: {
-    flowId: string;
-    sessionRunId: string;
-    nodeId: string;
-    type: string;
-    payload: Record<string, unknown>;
-}): string;
-declare function queueAgentCommand(yDoc: Doc, command: FlowAgentCommand): {
-    command: FlowAgentCommand;
-    created: boolean;
-};
-/** Read every command for one session without creating the outbox map. */
-declare function readAgentCommands(yDoc: Doc, sessionRunId?: string): FlowAgentCommand[];
-declare function readQueuedAgentCommands(yDoc: Doc, sessionRunId?: string): FlowAgentCommand[];
-/** Read every lease for one session without creating the leases map. */
-declare function readFlowAgentLeases(yDoc: Doc, sessionRunId?: string): FlowAgentLease[];
-declare function updateAgentCommand(yDoc: Doc, commandId: string, patch: Partial<FlowAgentCommand>): FlowAgentCommand | null;
-declare function appendAgentLedgerEvent(yDoc: Doc, event: Omit<FlowAgentLedgerEvent, 'id'> & {
-    id?: string;
-}): FlowAgentLedgerEvent;
-declare function readAgentLedgerEvents(yDoc: Doc, eventType?: FlowAgentLedgerEventType, sessionRunId?: string): FlowAgentLedgerEvent[];
-
-export { buildFlowAgentContext as $, type AuthorizationResult as A, readFlowConnectionBindings as B, upsertFlowConnectionBinding as C, removeFlowConnectionBinding as D, type ExecuteNodeParams as E, FLOW_PARTICIPANTS_MAP_KEY as F, FLOW_CONNECTIONS_MAP_KEY as G, FLOW_CONNECTION_BINDINGS_MAP_KEY as H, type SetupFlowResult as I, type ReadFlowResult as J, type ReadableEditor as K, type CompilerRegistry as L, type MergeResult as M, type NodeActionResult as N, type FlowParticipant as O, type FlowConnection as P, type FlowConnectionBinding as Q, type ReadFlowOptions as R, type SetupFlowOptions as S, type FlowConnectionRequirementKey as T, type BaseUcanFlow as U, type FlowCapability as V, type CompiledFlow as W, type FlowStrategy as X, FlowAgentService as Y, acquireFlowAgentLease as Z, appendAgentLedgerEvent as _, buildAuthzFromProps as a, type TriggerSpec as a$, cleanupExpiredFlowAgentLeases as a0, createAgentCommand as a1, evaluateFlowAgentPolicy as a2, executeQueuedAgentCommands as a3, getFlowAgentMaps as a4, planRalphLoopCommands as a5, queueAgentCommand as a6, readAgentLedgerEvents as a7, readQueuedAgentCommands as a8, releaseFlowAgentLease as a9, isCapabilityMatch as aA, isExternalMutation as aB, readAgentCommands as aC, readFlowAgentLeases as aD, requiredCapabilityForCommand as aE, resourceMatches as aF, updateAgentCommand as aG, type AcquireFlowAgentLeaseParams as aH, type CreateAgentCommandParams as aI, type EvaluateFlowAgentPolicyParams as aJ, type FlowAgentOrchestratorOptions as aK, type FlowAgentServiceOptions as aL, type FlowAgentCommandBase as aM, type FlowAgentCommandStatus as aN, type FlowAgentCommandType as aO, type FlowAgentLedgerEvent as aP, type FlowAgentLedgerEventType as aQ, type FlowAgentMaps as aR, type FlowAgentPolicyDecision as aS, type FlowAgentRunPhase as aT, resolveRuntimeRefs as aU, type TriggerResolutionContext as aV, type ConditionRef as aW, type ActorConstraint as aX, type TTLConstraint as aY, type RuntimeRef as aZ, type CompiledFlowNode as a_, tickFlowAgent as aa, validateAgentCommand as ab, validateFlowAgentLease as ac, type BuildFlowAgentContextParams as ad, type FlowAgentActor as ae, type FlowAgentCommand as af, type FlowAgentCommandResult as ag, type FlowAgentContext as ah, type FlowAgentExecutor as ai, type FlowAgentLease as aj, type FlowAgentNodeSnapshot as ak, type FlowAgentPublicNodeState as al, type FlowAgentTickResult as am, type CompiledBlock as an, type CompiledEdge as ao, type FlowAgentBlockerCause as ap, buildActionRunInputs as aq, executeActionBlock as ar, type ActionBlockLike as as, type ActionExecutionCompletionState as at, type BuildActionRunInputsParams as au, type BuildActionRunInputsResult as av, type ExecuteActionBlockParams as aw, type ExecuteActionBlockResult as ax, canMatches as ay, computeAgentCommandId as az, buildFlowNodeFromBlock as b, isRuntimeRef as b0, type ExecutionOutcome as c, type ExecutionContext as d, executeNode as e, readFlowFromEditor as f, readFlow as g, setActiveEditor as h, isAuthorized as i, getActiveEditor as j, compileBaseUcanFlow as k, readCompiledFlowFromYDoc as l, mergeCompiledFlows as m, decompileToBaseUcanFlow as n, readFlowParticipants as o, removeFlowParticipant as p, setFlowParticipantPowerLevel as q, readFlowAsBaseUcan as r, setupFlowFromBaseUcan as s, setFlowParticipantRequirements as t, upsertFlowParticipant as u, readFlowConnections as v, upsertFlowConnection as w, removeFlowConnection as x, setFlowConnectionOptional as y, setFlowConnectionRequires as z };
+export { readCompiledFlowFromYDoc as $, type AuthorizationResult as A, type BaseUcanFlow as B, type CompiledFlow as C, appendAgentLedgerEvent as D, type ExecuteNodeParams as E, FLOW_CONNECTIONS_MAP_KEY as F, buildAuthzFromProps as G, buildFlowAgentContext as H, buildFlowNodeFromBlock as I, cleanupExpiredFlowAgentLeases as J, compileBaseUcanFlow as K, createAgentCommand as L, type MergeResult as M, type NodeActionResult as N, decompileToBaseUcanFlow as O, evaluateFlowAgentPolicy as P, executeNode as Q, type ReadFlowOptions as R, type SetupFlowOptions as S, executeQueuedAgentCommands as T, getActiveEditor as U, getFlowAgentMaps as V, isAuthorized as W, mergeCompiledFlows as X, planRalphLoopCommands as Y, queueAgentCommand as Z, readAgentLedgerEvents as _, type BuildFlowAgentContextParams as a, resourceMatches as a$, readFlow as a0, readFlowAsBaseUcan as a1, readFlowConnectionBindings as a2, readFlowConnections as a3, readFlowFromEditor as a4, readFlowParticipants as a5, readQueuedAgentCommands as a6, releaseFlowAgentLease as a7, removeFlowConnection as a8, removeFlowConnectionBinding as a9, type ExecuteActionBlockParams as aA, type ExecuteActionBlockResult as aB, type FlowAgentCommandBase as aC, type FlowAgentCommandStatus as aD, type FlowAgentCommandType as aE, type FlowAgentLedgerEvent as aF, type FlowAgentLedgerEventType as aG, type FlowAgentMaps as aH, type FlowAgentOrchestratorOptions as aI, type FlowAgentPolicyDecision as aJ, type FlowAgentRunPhase as aK, type FlowAgentServiceOptions as aL, type RuntimeRef as aM, type TTLConstraint as aN, type TriggerResolutionContext as aO, type TriggerSpec as aP, buildActionRunInputs as aQ, canMatches as aR, computeAgentCommandId as aS, executeActionBlock as aT, isCapabilityMatch as aU, isExternalMutation as aV, isRuntimeRef as aW, readAgentCommands as aX, readFlowAgentLeases as aY, requiredCapabilityForCommand as aZ, resolveRuntimeRefs as a_, removeFlowParticipant as aa, setActiveEditor as ab, setFlowConnectionOptional as ac, setFlowConnectionRequires as ad, setFlowParticipantPowerLevel as ae, setFlowParticipantRequirements as af, setupFlowFromBaseUcan as ag, tickFlowAgent as ah, upsertFlowConnection as ai, upsertFlowConnectionBinding as aj, upsertFlowParticipant as ak, validateAgentCommand as al, validateFlowAgentLease as am, type FlowAgentBlockerCause as an, type CompiledBlock as ao, type CompiledEdge as ap, type AcquireFlowAgentLeaseParams as aq, type ActionBlockLike as ar, type ActionExecutionCompletionState as as, type ActorConstraint as at, type BuildActionRunInputsParams as au, type BuildActionRunInputsResult as av, type CompiledFlowNode as aw, type ConditionRef as ax, type CreateAgentCommandParams as ay, type EvaluateFlowAgentPolicyParams as az, type CompilerRegistry as b, updateAgentCommand as b0, type ExecutionContext as c, type ExecutionOutcome as d, FLOW_CONNECTION_BINDINGS_MAP_KEY as e, FLOW_PARTICIPANTS_MAP_KEY as f, type FlowAgentActor as g, type FlowAgentCommand as h, type FlowAgentCommandResult as i, type FlowAgentContext as j, type FlowAgentExecutor as k, type FlowAgentLease as l, type FlowAgentNodeSnapshot as m, type FlowAgentPublicNodeState as n, FlowAgentService as o, type FlowAgentTickResult as p, type FlowCapability as q, type FlowConnection as r, type FlowConnectionBinding as s, type FlowConnectionRequirementKey as t, type FlowParticipant as u, type FlowStrategy as v, type ReadFlowResult as w, type ReadableEditor as x, type SetupFlowResult as y, acquireFlowAgentLease as z };