@jungjaehoon/mama-os 0.78.0 → 0.79.1

package/dist/runtime/upkeep-writeback.js

@@ -0,0 +1,203 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WRITEBACK_ORDER_CHANNEL = void 0;
+exports.writebackUpkeepKind = writebackUpkeepKind;
+const timezone_js_1 = require("./timezone.js");
+const upkeep_orders_js_1 = require("./upkeep-orders.js");
+exports.WRITEBACK_ORDER_CHANNEL = 'operator:writeback';
+/** How many sources one subject carries: the refs source.read opened first, then search hits. */
+const MAX_REFS_PER_SUBJECT = 30;
+/**
+ * The privacy boundary (docs/development/work/ledger-upkeep.md, U2; Codex: "U2 crossed the
+ * personal boundary"). It reads the observation's own scope columns, which appendObservationVersion
+ * derives from the flat scope bag every connector and chat write carries, and decides "common" the
+ * way the common session's reads already do (action-surface.ts ownerAccess):
+ * - a non-chat source the owner reads connector-wide, unscoped or scoped to the common principal;
+ * - a chat message scoped to the common principal (`user:<owner>`), outside every private
+ *   Telegram channel, so no DM, the owner's own included, reaches the common order.
+ * Chat is never admitted by connector: its commonness is its scope. Anything else (another
+ * principal's scope, an owner-visibility record, an unknown handle) is dropped.
+ */
+function commonSourceFilter(col, wideReadConnectors, ownerPrincipalId) {
+    const connectorWide = wideReadConnectors.length === 0
+        ? ''
+        : `(o.source <> 'chat' AND o.source IN (${wideReadConnectors.map(() => '?').join(',')})
+           AND (o.memory_scope_kind IS NULL
+                OR (o.memory_scope_kind = 'user' AND o.memory_scope_id = ?))) OR`;
+    const sql = `EXISTS (
+      SELECT 1 FROM observation_versions o
+       WHERE o.observation_id = ${col}
+         AND (${connectorWide}
+              (o.source = 'chat' AND o.memory_scope_kind = 'user' AND o.memory_scope_id = ?
+               AND o.channel IS NOT NULL
+               AND o.channel NOT IN (SELECT 'telegram:' || external_id FROM external_identities
+                                      WHERE connector = 'telegram' AND namespace = 'private'))))`;
+    return {
+        sql,
+        params: [
+            ...(wideReadConnectors.length === 0 ? [] : [...wideReadConnectors, ownerPrincipalId]),
+            ownerPrincipalId,
+        ],
+    };
+}
+/** `${alias}`'s run belongs to the question turn `r`: the turn's own run or a direct child run. */
+function inTurnRuns(alias) {
+    return `(${alias}.model_run_id = r.model_run_id
+     OR ${alias}.model_run_id IN (SELECT model_run_id FROM model_runs
+                                   WHERE parent_model_run_id = r.model_run_id))`;
+}
+/** The observation handles a turn's reads returned in evidence_json, correlated on the turn `r`. */
+function readRefsSubquery(tool, filter) {
+    const tools = tool === 'read' ? `'source.read'` : `'source.search', 'source.read'`;
+    const sql = `SELECT ref.value AS oref, tr.tool_name AS tool, tr.created_at AS at
+     FROM tool_traces tr
+     JOIN json_each(json_extract(tr.evidence_json, '$.observationRefs')) ref
+    WHERE ${inTurnRuns('tr')}
+      AND tr.tool_name IN (${tools})
+      AND tr.execution_status = 'completed'
+      AND tr.evidence_json IS NOT NULL
+      ${filter ? `AND ${filter.sql}` : ''}`;
+    return { sql, params: filter?.params ?? [] };
+}
+/** A completed derived_from edge in these runs that cites one of `refs` (work revision or memory.save). */
+function derivedFromCites(adapter, runIds, refs) {
+    if (runIds.length === 0 || refs.length === 0)
+        return false;
+    return (adapter
+        .prepare(`SELECT 1 FROM twin_edges
+          WHERE edge_type = 'derived_from' AND object_kind = 'observation'
+            AND object_id IN (${refs.map(() => '?').join(',')})
+            AND model_run_id IN (${runIds.map(() => '?').join(',')})
+          LIMIT 1`)
+        .get(...refs, ...runIds) !== undefined);
+}
+/**
+ * U2, write-back orders. A subject is one question turn (a committed owner_message run of the
+ * common session or an owner-role principal) that read common-scope sources and recorded nothing
+ * from them. The order carries only common-scope handles; the question text is never carried. It
+ * is checked when the order's run writes a revision or a fact/lesson citing one of the handles, or
+ * declares work.no_update naming them.
+ */
+function writebackUpkeepKind(options) {
+    return {
+        name: 'writeback',
+        channel: exports.WRITEBACK_ORDER_CHANNEL,
+        // Hourly, like the closing-summary kind: a question answered off the ledger is worth writing
+        // back the same day, and the attempt window and one-order-per-kind cap keep it bounded.
+        intervalMs: 60 * 60 * 1000,
+        // Each subject already asks for up to 30 sources to read and record; three turns an order
+        // keeps the common session's queue, the owner's, workable.
+        maxPerOrder: 3,
+        scan: (adapter, now, page) => {
+            const wide = options.wideReadConnectors();
+            // Consulting a source is a search hit or an opened read: a question answered from a search
+            // preview without opening the record is the same unrecorded gap. The order still marks which
+            // were opened. The turn qualifies when it consulted a common source and cited none of what
+            // it consulted.
+            const commonRead = readRefsSubquery('any', commonSourceFilter('ref.value', wide, options.ownerPrincipalId));
+            const allRead = readRefsSubquery('any');
+            // A subject older than the attempt window would count its attempts from zero again; the
+            // mailbox keeps owner_message rows the same seven days, so the join never loses a newer one.
+            // No lower `since`: evidence_json did not exist before the deploy, so earlier turns carry no
+            // read receipt and cannot qualify.
+            const rows = adapter
+                .prepare(`SELECT r.model_run_id AS runId, r.created_at AS askedAt
+             FROM model_runs r
+             JOIN mailbox_inputs m
+               ON m.principal_id = json_extract(r.input_refs_json, '$.principalId')
+              AND m.stimulus_id = json_extract(r.input_refs_json, '$.sourceMessageRef')
+              AND m.kind = 'owner_message'
+            WHERE r.status = 'committed'
+              AND r.created_at >= ?
+              AND (json_extract(r.input_refs_json, '$.principalId') = ?
+                   OR json_extract(r.input_refs_json, '$.principalId') IN
+                        (SELECT principal_id FROM principal_roles WHERE role = 'owner'))
+              AND EXISTS (${commonRead.sql})
+              AND NOT EXISTS (
+                    SELECT 1 FROM twin_edges e
+                     WHERE e.edge_type = 'derived_from' AND e.object_kind = 'observation'
+                       AND ${inTurnRuns('e')}
+                       AND e.object_id IN (SELECT oref FROM (${allRead.sql})))
+            -- One row per turn: mailbox_inputs has no unique (principal_id, stimulus_id) constraint.
+            GROUP BY r.model_run_id, r.created_at
+            ORDER BY r.created_at, r.model_run_id
+            LIMIT ? OFFSET ?`)
+                .all(now - upkeep_orders_js_1.UPKEEP_WINDOW_MS, options.ownerPrincipalId, ...commonRead.params, upkeep_orders_js_1.UPKEEP_SCAN_PAGE, page * upkeep_orders_js_1.UPKEEP_SCAN_PAGE);
+            if (rows.length === 0)
+                return [];
+            // Assemble each subject's carried handles: the common-scope refs the turn opened first, then
+            // its common-scope search hits, up to thirty, oldest first.
+            const common2 = commonSourceFilter('ref.value', wide, options.ownerPrincipalId);
+            const refRows = adapter
+                .prepare(`WITH turn(id) AS (VALUES ${rows.map(() => '(?)').join(',')}),
+                runs AS (
+                  SELECT id AS turnId, id AS runId FROM turn
+                  UNION
+                  SELECT turn.id, c.model_run_id FROM model_runs c
+                    JOIN turn ON c.parent_model_run_id = turn.id)
+           SELECT runs.turnId AS turnId, ref.value AS oref,
+                  MAX(CASE WHEN tr.tool_name = 'source.read' THEN 1 ELSE 0 END) AS opened,
+                  MIN(tr.created_at) AS at
+             FROM runs
+             JOIN tool_traces tr ON tr.model_run_id = runs.runId
+             JOIN json_each(json_extract(tr.evidence_json, '$.observationRefs')) ref
+            WHERE tr.tool_name IN ('source.search', 'source.read')
+              AND tr.execution_status = 'completed'
+              AND tr.evidence_json IS NOT NULL
+              AND ${common2.sql}
+            GROUP BY runs.turnId, ref.value
+            ORDER BY runs.turnId, opened DESC, at, ref.value`)
+                .all(...rows.map((row) => row.runId), ...common2.params);
+            const byTurn = new Map();
+            for (const row of refRows) {
+                const entry = byTurn.get(row.turnId) ?? { refs: [], opened: [] };
+                if (entry.refs.length < MAX_REFS_PER_SUBJECT) {
+                    entry.refs.push(row.oref);
+                    if (row.opened === 1)
+                        entry.opened.push(row.oref);
+                }
+                byTurn.set(row.turnId, entry);
+            }
+            return rows.flatMap((row) => {
+                const entry = byTurn.get(row.runId);
+                // A turn with no common-scope handle after assembly carries nothing; it is not a subject.
+                if (!entry || entry.refs.length === 0)
+                    return [];
+                return [{ key: row.runId, refs: entry.refs, opened: entry.opened, askedAt: row.askedAt }];
+            });
+        },
+        checked: (adapter, subject, runIds) => {
+            const { refs } = subject;
+            if (runIds.length === 0 || refs.length === 0)
+                return false;
+            return (derivedFromCites(adapter, runIds, refs) ||
+                (0, upkeep_orders_js_1.noUpdateCites)(adapter, runIds, { field: 'observationRefs', values: refs }));
+        },
+        render: (subjects, now) => {
+            const zone = options.timeZone();
+            const lines = subjects.map((subject) => {
+                const openedSet = new Set(subject.opened);
+                const opened = subject.refs.filter((ref) => openedSet.has(ref));
+                const hits = subject.refs.filter((ref) => !openedSet.has(ref));
+                const parts = [`- turn ${subject.key} (asked ${(0, timezone_js_1.localNow)(subject.askedAt, zone)}):`];
+                if (opened.length > 0)
+                    parts.push(`opened ${opened.join(', ')}`);
+                if (hits.length > 0)
+                    parts.push(`${opened.length > 0 ? 'also found' : 'found'} ${hits.join(', ')}`);
+                return parts.join(' ');
+            });
+            return [
+                `[upkeep_writeback] ${subjects.length} answered question turn${subjects.length === 1 ? '' : 's'} that read sources and recorded nothing`,
+                `Current time: ${(0, timezone_js_1.localNow)(now.getTime(), zone)} (${zone})`,
+                'A question was answered from these sources. Record what belongs in the ledger, so the next question reads one place:',
+                '1. Read each source with source.read (observationRefs, batched per connector).',
+                '2. Record what belongs in the ledger, each with derived_from links to the sources it came from: work.revise or work.create for a work change; memory.save for a fact or lesson (prices, specs and client rules are facts).',
+                '3. A matter already recorded, or chatter not worth recording: work.no_update with observationRefs naming those sources and the reason.',
+                '4. The order is checked when it ends: at least one write or a no-update must cite these sources. Correct a refused write (help gives its contract) and write it again.',
+                '5. Reply exactly [ack].',
+                ...lines,
+            ].join('\n');
+        },
+    };
+}
+//# sourceMappingURL=upkeep-writeback.js.map

package/dist/runtime/upkeep-writeback.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"upkeep-writeback.js","sourceRoot":"","sources":["../../src/runtime/upkeep-writeback.ts"],"names":[],"mappings":";;;AAgIA,kDA0IC;AAzQD,+CAAyC;AACzC,yDAM4B;AAEf,QAAA,uBAAuB,GAAG,oBAAoB,CAAC;AAE5D,iGAAiG;AACjG,MAAM,oBAAoB,GAAG,EAAE,CAAC;AAyBhC;;;;;;;;;;GAUG;AACH,SAAS,kBAAkB,CACzB,GAAW,EACX,kBAAqC,EACrC,gBAAwB;IAExB,MAAM,aAAa,GACjB,kBAAkB,CAAC,MAAM,KAAK,CAAC;QAC7B,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,wCAAwC,kBAAkB,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;;iFAEV,CAAC;IAChF,MAAM,GAAG,GAAG;;kCAEoB,GAAG;gBACrB,aAAa;;;;iGAIoE,CAAC;IAChG,OAAO;QACL,GAAG;QACH,MAAM,EAAE;YACN,GAAG,CAAC,kBAAkB,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,kBAAkB,EAAE,gBAAgB,CAAC,CAAC;YACrF,gBAAgB;SACjB;KACF,CAAC;AACJ,CAAC;AAED,mGAAmG;AACnG,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,IAAI,KAAK;UACR,KAAK;gFACiE,CAAC;AACjF,CAAC;AAED,oGAAoG;AACpG,SAAS,gBAAgB,CACvB,IAAoB,EACpB,MAA0C;IAE1C,MAAM,KAAK,GAAG,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,gCAAgC,CAAC;IACnF,MAAM,GAAG,GAAG;;;YAGF,UAAU,CAAC,IAAI,CAAC;6BACC,KAAK;;;QAG1B,MAAM,CAAC,CAAC,CAAC,OAAO,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IAC1C,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,IAAI,EAAE,EAAE,CAAC;AAC/C,CAAC;AAED,2GAA2G;AAC3G,SAAS,gBAAgB,CACvB,OAAwB,EACxB,MAAyB,EACzB,IAAuB;IAEvB,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3D,OAAO,CACL,OAAO;SACJ,OAAO,CACN;;gCAEwB,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;mCAC1B,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;kBAChD,CACX;SACA,GAAG,CAAC,GAAG,IAAI,EAAE,GAAG,MAAM,CAAC,KAAK,SAAS,CACzC,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,mBAAmB,CAAC,OAA6B;IAC/D,OAAO;QACL,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,+BAAuB;QAChC,6FAA6F;QAC7F,wFAAwF;QACxF,UAAU,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI;QAC1B,0FAA0F;QAC1F,2DAA2D;QAC3D,WAAW,EAAE,CAAC;QACd,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YAC3B,MAAM,IAAI,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;YAC1C,2FAA2F;YAC3F,6FAA6F;YAC7F,2FAA2F;YAC3F,gBAAgB;YAChB,MAAM,UAAU,GAAG,gBAAgB,CACjC,KAAK,EACL,kBAAkB,CAAC,WAAW,EAAE,IAAI,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAChE,CAAC;YACF,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;YACxC,wFAAwF;YACxF,6FAA6F;YAC7F,6FAA6F;YAC7F,mCAAmC;YACnC,MAAM,IAAI,GAAG,OAAO;iBACjB,OAAO,CACN;;;;;;;;;;;4BAWkB,UAAU,CAAC,GAAG;;;;6BAIb,UAAU,CAAC,GAAG,CAAC;+DACmB,OAAO,CAAC,GAAG;;;;6BAI7C,CACpB;iBACA,GAAG,CACF,GAAG,GAAG,mCAAgB,EACtB,OAAO,CAAC,gBAAgB,EACxB,GAAG,UAAU,CAAC,MAAM,EACpB,mCAAgB,EAChB,IAAI,GAAG,mCAAgB,CACqB,CAAC;YACjD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,EAAE,CAAC;YAEjC,6FAA6F;YAC7F,4DAA4D;YAC5D,MAAM,OAAO,GAAG,kBAAkB,CAAC,WAAW,EAAE,IAAI,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;YAChF,MAAM,OAAO,GAAG,OAAO;iBACpB,OAAO,CACN,4BAA4B,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;oBAejD,OAAO,CAAC,GAAG;;6DAE8B,CACpD;iBACA,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,OAAO,CAAC,MAAM,CAKvD,CAAC;YAEH,MAAM,MAAM,GAAG,IAAI,GAAG,EAAgD,CAAC;YACvE,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;gBAC1B,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;gBACjE,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,oBAAoB,EAAE,CAAC;oBAC7C,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBAC1B,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;wBAAE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACpD,CAAC;gBACD,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YAChC,CAAC;YACD,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAsB,EAAE;gBAC9C,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBACpC,0FAA0F;gBAC1F,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;oBAAE,OAAO,EAAE,CAAC;gBACjD,OAAO,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YAC5F,CAAC,CAAC,CAAC;QACL,CAAC;QACD,OAAO,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE;YACpC,MAAM,EAAE,IAAI,EAAE,GAAG,OAA2B,CAAC;YAC7C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,KAAK,CAAC;YAC3D,OAAO,CACL,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC;gBACvC,IAAA,gCAAa,EAAC,OAAO,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAC3E,CAAC;QACJ,CAAC;QACD,MAAM,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE;YACxB,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;YAChC,MAAM,KAAK,GAAI,QAAwC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;gBACtE,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBAC1C,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;gBAChE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC/D,MAAM,KAAK,GAAG,CAAC,UAAU,OAAO,CAAC,GAAG,WAAW,IAAA,sBAAQ,EAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;gBACpF,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;oBAAE,KAAK,CAAC,IAAI,CAAC,UAAU,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACjE,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;oBACjB,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACjF,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACzB,CAAC,CAAC,CAAC;YACH,OAAO;gBACL,sBAAsB,QAAQ,CAAC,MAAM,0BAA0B,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,yCAAyC;gBACxI,iBAAiB,IAAA,sBAAQ,EAAC,GAAG,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,KAAK,IAAI,GAAG;gBAC1D,sHAAsH;gBACtH,gFAAgF;gBAChF,4NAA4N;gBAC5N,wIAAwI;gBACxI,wKAAwK;gBACxK,yBAAyB;gBACzB,GAAG,KAAK;aACT,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACf,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/utils/untrusted-content.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"untrusted-content.d.ts","sourceRoot":"","sources":["../../src/utils/untrusted-content.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,wBAAgB,+BAA+B,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAYzE;AAKD,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAW5E;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAItE"}
+{"version":3,"file":"untrusted-content.d.ts","sourceRoot":"","sources":["../../src/utils/untrusted-content.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,wBAAgB,+BAA+B,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAmBzE;AAKD,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAW5E;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAItE"}

package/dist/utils/untrusted-content.js

@@ -19,7 +19,14 @@ function isUntrustedExternalEvidenceTool(toolName) {
         toolName === 'source.attachment.list' ||
         toolName === 'source.attachment.download' ||
         toolName === 'manage.wiki.read' ||
-        toolName === 'report.read');
+        toolName === 'report.read' ||
+        // Live connector reads (readsConnector): card and file text is written by other people, and
+        // the board reconcile order reads cards in a turn with no person in it.
+        toolName === 'trello.read' ||
+        toolName === 'drive.read' ||
+        toolName === 'drive.download' ||
+        // Mail, events, sheets and documents are written by other people too.
+        toolName === 'google.read');
 }
 const OPEN_MARKER = '<<<UNTRUSTED-CONTENT';
 const END_MARKER = '<<<END-UNTRUSTED-CONTENT>>>';

package/dist/utils/untrusted-content.js.map

@@ -1 +1 @@
-{"version":3,"file":"untrusted-content.js","sourceRoot":"","sources":["../../src/utils/untrusted-content.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAEH,0EAYC;AAKD,oDAWC;AAKD,8CAIC;AArCD,SAAgB,+BAA+B,CAAC,QAAgB;IAC9D,OAAO;IACL,mEAAmE;IACnE,QAAQ,KAAK,UAAU;QACvB,QAAQ,KAAK,wBAAwB;QACrC,QAAQ,KAAK,eAAe;QAC5B,QAAQ,KAAK,aAAa;QAC1B,QAAQ,KAAK,wBAAwB;QACrC,QAAQ,KAAK,4BAA4B;QACzC,QAAQ,KAAK,kBAAkB;QAC/B,QAAQ,KAAK,aAAa,CAC3B,CAAC;AACJ,CAAC;AAED,MAAM,WAAW,GAAG,sBAAsB,CAAC;AAC3C,MAAM,UAAU,GAAG,6BAA6B,CAAC;AAEjD,SAAgB,oBAAoB,CAAC,MAAc,EAAE,OAAe;IAClE,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC;IAC5D,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACrE,OAAO;QACL,GAAG,WAAW,WAAW,UAAU,KAAK;QACxC,8EAA8E;QAC9E,kFAAkF;QAClF,yDAAyD;QACzD,IAAI;QACJ,UAAU;KACX,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED;;GAEG;AACH,SAAgB,iBAAiB,CAAC,IAAY,EAAE,IAAa;IAC3D,OAAO,+BAA+B,CAAC,IAAI,CAAC;QAC1C,CAAC,CAAC,oBAAoB,CAAC,IAAI,EAAE,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC;QAC5F,CAAC,CAAC,IAAI,CAAC;AACX,CAAC"}
+{"version":3,"file":"untrusted-content.js","sourceRoot":"","sources":["../../src/utils/untrusted-content.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAEH,0EAmBC;AAKD,oDAWC;AAKD,8CAIC;AA5CD,SAAgB,+BAA+B,CAAC,QAAgB;IAC9D,OAAO;IACL,mEAAmE;IACnE,QAAQ,KAAK,UAAU;QACvB,QAAQ,KAAK,wBAAwB;QACrC,QAAQ,KAAK,eAAe;QAC5B,QAAQ,KAAK,aAAa;QAC1B,QAAQ,KAAK,wBAAwB;QACrC,QAAQ,KAAK,4BAA4B;QACzC,QAAQ,KAAK,kBAAkB;QAC/B,QAAQ,KAAK,aAAa;QAC1B,4FAA4F;QAC5F,wEAAwE;QACxE,QAAQ,KAAK,aAAa;QAC1B,QAAQ,KAAK,YAAY;QACzB,QAAQ,KAAK,gBAAgB;QAC7B,sEAAsE;QACtE,QAAQ,KAAK,aAAa,CAC3B,CAAC;AACJ,CAAC;AAED,MAAM,WAAW,GAAG,sBAAsB,CAAC;AAC3C,MAAM,UAAU,GAAG,6BAA6B,CAAC;AAEjD,SAAgB,oBAAoB,CAAC,MAAc,EAAE,OAAe;IAClE,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC;IAC5D,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACrE,OAAO;QACL,GAAG,WAAW,WAAW,UAAU,KAAK;QACxC,8EAA8E;QAC9E,kFAAkF;QAClF,yDAAyD;QACzD,IAAI;QACJ,UAAU;KACX,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED;;GAEG;AACH,SAAgB,iBAAiB,CAAC,IAAY,EAAE,IAAa;IAC3D,OAAO,+BAA+B,CAAC,IAAI,CAAC;QAC1C,CAAC,CAAC,oBAAoB,CAAC,IAAI,EAAE,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC;QAC5F,CAAC,CAAC,IAAI,CAAC;AACX,CAAC"}