@mnemom/mnemom 0.17.34 → 0.17.36

package/dist/vendor/shared/durable-contract/routes.d.ts

@@ -12,7 +12,7 @@
  *
  * Owner session verbs (ruling 33.22; design-v3 section 3.5, BACKBONE A2): scoped on the
  * conversation id under /v1/agent/sessions/; the `?agent_id=` query is not part of the match. Not
- * frozen: move, inbox, triggers and profiles (not in A2), the pre-existing GET /{cid} and POST
+ * frozen: move, triggers and profiles (not in A2), the pre-existing GET /{cid} and POST
  * /{cid}/contract, and create and list (their methods are not spelled in the sources).
  *
  * Doors amendment (ruling 34.03): exec_ready_list (the pool discovery read) and exec_oidc_exchange
@@ -23,10 +23,24 @@
  * Internal): int_charter is the api route the gateway's durable seal calls on a cold charter LRU.
  * The api serves it (A2: only the api holds the charter DEK); the gateway sends
  * CHARTER_BY_HASH_BODY_KEYS with INTERNAL_KEY_HEADER and reads CHARTER_BY_HASH_RESPONSE.
+ *
+ * Inbox (S1 amendment 60, signed off by Wassim 2026-11-02): the owner's send, list and allowlist routes
+ * under /v1/agent/sessions/{cid}/inbox, and the executor's summary, take and ack routes under
+ * /v1/executor/sessions/{id}/inbox. Bodies and answers are inbox.ts's closed shapes. A route takes
+ * one id, so the allowlist's agent_id and the acked inbox_id ride in the body.
+ *
+ * Questions (S1 amendment 61, signed off by Wassim 2026-11-02): the executor's ask, poll and release
+ * routes under /v1/executor/sessions/{id}/questions, the owner's list and answer routes under
+ * /v1/agent/sessions/{cid}/questions. Bodies and answers are question.ts's closed shapes; the
+ * approval_id rides in the body.
  */
 export type RouteMethod = "GET" | "POST" | "DELETE";
 /** github_oidc (ruling 34.03 (1)): a GitHub Actions workflow OIDC token, in the body, exchanged for a one-lease key. */
-export type RouteAuth = "owner_jwt" | "owner" | "poll_secret" | "executor_key" | "internal" | "github_oidc";
+/**
+ * inbox_sender (S1 amendment 60): an `owner` credential, or an agent-bound credential (the agent's
+ * mnm_ds_ lease key or its session key) whose agent is on the recipient agent's inbox allowlist.
+ */
+export type RouteAuth = "owner_jwt" | "owner" | "poll_secret" | "executor_key" | "internal" | "github_oidc" | "inbox_sender";
 export interface FixedRoute {
     readonly method: RouteMethod;
     readonly auth: RouteAuth;
@@ -61,6 +75,20 @@ export declare const ROUTES: Readonly<{
     exec_ready_list: FixedRoute;
     /** Body {oidc_token}; answers a one-lease org-scope executor key or an OIDC_EXCHANGE_REFUSALS refusal. */
     exec_oidc_exchange: FixedRoute;
+    /** Content-free summary {admitted, delivered, oldest_admitted_at} (inboxSummaryResponseOk); marks nothing. */
+    exec_inbox: ScopedRoute;
+    /** Body {epoch, nonce, limit?}: marks up to limit messages delivered at the live epoch, journals inbox.delivered, answers their delivery text. */
+    exec_inbox_take: ScopedRoute;
+    /** Body {epoch, nonce, inbox_id, sha}: acks a message delivered at this epoch, journals inbox.acked. */
+    exec_inbox_ack: ScopedRoute;
+    /** Body {epoch, nonce, inbox_id, sha, reason}: hands a delivered message back undone (admitted again, or dead at the limit), journals inbox.reverted. */
+    exec_inbox_release: ScopedRoute;
+    /** Body {epoch, nonce, tool_use_id, questions}: opens the session's question approval (or returns it when the open one has this question_sha), journals question.asked. */
+    exec_question: ScopedRoute;
+    /** Body {epoch, nonce, approval_id}: the question's state; an answer is handed over once (marked taken). */
+    exec_question_poll: ScopedRoute;
+    /** Body {epoch, nonce, approval_id}: the seat stopped waiting; the answer (now or later) goes to the inbox. */
+    exec_question_release: ScopedRoute;
     own_lock: ScopedRoute;
     own_unlock: ScopedRoute;
     own_pause: ScopedRoute;
@@ -70,6 +98,20 @@ export declare const ROUTES: Readonly<{
     own_amend: ScopedRoute;
     own_fail: ScopedRoute;
     own_events: ScopedRoute;
+    /** Body {text, idempotency_key} (inboxSendBodyOk); answer INBOX_SEND_RESPONSE or an INBOX_REJECT_CODES refusal. */
+    own_inbox_send: ScopedRoute;
+    /** {messages: [INBOX_LIST_ITEM, ...]}, newest first, content-free. */
+    own_inbox_list: ScopedRoute;
+    /** {recipient_agent_id, senders: [INBOX_SENDER_ITEM, ...]}: the session's agent's live allowlist. */
+    own_inbox_senders: ScopedRoute;
+    /** Body {agent_id, label?}: allowlists one of the owner's own agents in the same org. */
+    own_inbox_sender_add: ScopedRoute;
+    /** Body {agent_id}: revokes it (the row keeps revoked_at and revoked_by). */
+    own_inbox_sender_remove: ScopedRoute;
+    /** {questions: [QUESTION_LIST_ITEM, ...]}, newest first; the owner reads the question text. */
+    own_questions: ScopedRoute;
+    /** Body {approval_id, via, answers | dismiss: true}: answers or dismisses, journals question.answered. */
+    own_answer: ScopedRoute;
     int_events: FixedRoute;
     int_arm: FixedRoute;
     int_sweep: FixedRoute;

package/dist/vendor/shared/durable-contract/routes.js

@@ -13,7 +13,7 @@
  *
  * Owner session verbs (ruling 33.22; design-v3 section 3.5, BACKBONE A2): scoped on the
  * conversation id under /v1/agent/sessions/; the `?agent_id=` query is not part of the match. Not
- * frozen: move, inbox, triggers and profiles (not in A2), the pre-existing GET /{cid} and POST
+ * frozen: move, triggers and profiles (not in A2), the pre-existing GET /{cid} and POST
  * /{cid}/contract, and create and list (their methods are not spelled in the sources).
  *
  * Doors amendment (ruling 34.03): exec_ready_list (the pool discovery read) and exec_oidc_exchange
@@ -24,6 +24,16 @@
  * Internal): int_charter is the api route the gateway's durable seal calls on a cold charter LRU.
  * The api serves it (A2: only the api holds the charter DEK); the gateway sends
  * CHARTER_BY_HASH_BODY_KEYS with INTERNAL_KEY_HEADER and reads CHARTER_BY_HASH_RESPONSE.
+ *
+ * Inbox (S1 amendment 60, signed off by Wassim 2026-11-02): the owner's send, list and allowlist routes
+ * under /v1/agent/sessions/{cid}/inbox, and the executor's summary, take and ack routes under
+ * /v1/executor/sessions/{id}/inbox. Bodies and answers are inbox.ts's closed shapes. A route takes
+ * one id, so the allowlist's agent_id and the acked inbox_id ride in the body.
+ *
+ * Questions (S1 amendment 61, signed off by Wassim 2026-11-02): the executor's ask, poll and release
+ * routes under /v1/executor/sessions/{id}/questions, the owner's list and answer routes under
+ * /v1/agent/sessions/{cid}/questions. Bodies and answers are question.ts's closed shapes; the
+ * approval_id rides in the body.
  */
 import { ARM_ROUTE } from "./arm.js";
 import { fieldOk } from "./admission.js";
@@ -64,6 +74,22 @@ export const ROUTES = Object.freeze({
     exec_ready_list: fixed("GET", "executor_key", "/v1/executor/ready"),
     /** Body {oidc_token}; answers a one-lease org-scope executor key or an OIDC_EXCHANGE_REFUSALS refusal. */
     exec_oidc_exchange: fixed("POST", "github_oidc", "/v1/executor/oidc/exchange"),
+    // ---- inbox, executor side (S1 amendment 60) ----
+    /** Content-free summary {admitted, delivered, oldest_admitted_at} (inboxSummaryResponseOk); marks nothing. */
+    exec_inbox: scoped("GET", "executor_key", EXEC_SESSION_PRE, "/inbox"),
+    /** Body {epoch, nonce, limit?}: marks up to limit messages delivered at the live epoch, journals inbox.delivered, answers their delivery text. */
+    exec_inbox_take: scoped("POST", "executor_key", EXEC_SESSION_PRE, "/inbox/take"),
+    /** Body {epoch, nonce, inbox_id, sha}: acks a message delivered at this epoch, journals inbox.acked. */
+    exec_inbox_ack: scoped("POST", "executor_key", EXEC_SESSION_PRE, "/inbox/ack"),
+    /** Body {epoch, nonce, inbox_id, sha, reason}: hands a delivered message back undone (admitted again, or dead at the limit), journals inbox.reverted. */
+    exec_inbox_release: scoped("POST", "executor_key", EXEC_SESSION_PRE, "/inbox/release"),
+    // ---- questions, executor side (S1 amendment 61) ----
+    /** Body {epoch, nonce, tool_use_id, questions}: opens the session's question approval (or returns it when the open one has this question_sha), journals question.asked. */
+    exec_question: scoped("POST", "executor_key", EXEC_SESSION_PRE, "/questions"),
+    /** Body {epoch, nonce, approval_id}: the question's state; an answer is handed over once (marked taken). */
+    exec_question_poll: scoped("POST", "executor_key", EXEC_SESSION_PRE, "/questions/poll"),
+    /** Body {epoch, nonce, approval_id}: the seat stopped waiting; the answer (now or later) goes to the inbox. */
+    exec_question_release: scoped("POST", "executor_key", EXEC_SESSION_PRE, "/questions/release"),
     // ---- owner session verbs (ruling 33.22) ----
     own_lock: scoped("POST", "owner", OWNER_SESSION_PRE, "/lock"),
     own_unlock: scoped("POST", "owner", OWNER_SESSION_PRE, "/unlock"),
@@ -74,6 +100,22 @@ export const ROUTES = Object.freeze({
     own_amend: scoped("POST", "owner", OWNER_SESSION_PRE, "/amend"),
     own_fail: scoped("POST", "owner", OWNER_SESSION_PRE, "/fail"),
     own_events: scoped("GET", "owner", OWNER_SESSION_PRE, "/events"),
+    // ---- inbox, owner side (S1 amendment 60) ----
+    /** Body {text, idempotency_key} (inboxSendBodyOk); answer INBOX_SEND_RESPONSE or an INBOX_REJECT_CODES refusal. */
+    own_inbox_send: scoped("POST", "inbox_sender", OWNER_SESSION_PRE, "/inbox"),
+    /** {messages: [INBOX_LIST_ITEM, ...]}, newest first, content-free. */
+    own_inbox_list: scoped("GET", "owner", OWNER_SESSION_PRE, "/inbox"),
+    /** {recipient_agent_id, senders: [INBOX_SENDER_ITEM, ...]}: the session's agent's live allowlist. */
+    own_inbox_senders: scoped("GET", "owner", OWNER_SESSION_PRE, "/inbox/senders"),
+    /** Body {agent_id, label?}: allowlists one of the owner's own agents in the same org. */
+    own_inbox_sender_add: scoped("POST", "owner", OWNER_SESSION_PRE, "/inbox/senders"),
+    /** Body {agent_id}: revokes it (the row keeps revoked_at and revoked_by). */
+    own_inbox_sender_remove: scoped("DELETE", "owner", OWNER_SESSION_PRE, "/inbox/senders"),
+    // ---- questions, owner side (S1 amendment 61) ----
+    /** {questions: [QUESTION_LIST_ITEM, ...]}, newest first; the owner reads the question text. */
+    own_questions: scoped("GET", "owner", OWNER_SESSION_PRE, "/questions"),
+    /** Body {approval_id, via, answers | dismiss: true}: answers or dismisses, journals question.answered. */
+    own_answer: scoped("POST", "owner", OWNER_SESSION_PRE, "/questions/answer"),
     // ---- gateway internal ----
     int_events: fixed("POST", "internal", GATEWAY_EVENTS_ROUTE),
     int_arm: fixed("GET", "internal", ARM_ROUTE),

package/dist/vendor/shared/durable-contract/turn.d.ts

@@ -13,7 +13,10 @@ export type TurnOrigin = (typeof TURN_ORIGINS)[number];
 export declare const TURN_SOURCES: readonly ["typed", "queued", "system", "sdk"];
 export type TurnSource = (typeof TURN_SOURCES)[number];
 export declare const CHAIN_KEY = "chain";
-/** Reserved entry key; no M1 emitter (P0a-B). Any entry carrying it is unattended. */
+/**
+ * Entry key `inbox=<sha256 hex>`: the turn answers that inbox message. Any entry carrying it is
+ * unattended. Its emitter is the seat proxy (amendment 60); admission reads the newest entry's value.
+ */
 export declare const INBOX_KEY = "inbox";
 export declare const TURN_HASH_RE: RegExp;
 export interface TurnEntryFacts {
@@ -23,6 +26,8 @@ export interface TurnEntryFacts {
     producer?: string;
     /** True when the entry carried `inbox=<sha256 hex>`. */
     inbox: boolean;
+    /** The entry's `inbox=<sha256 hex>` value when it carried a well-formed one (amendment 60). */
+    inboxSha?: string;
 }
 /** Sources that keep a human entry attended: absent, typed, queued (queued attended is a recorded departure). */
 export declare const ATTENDED_SOURCES: readonly (TurnSource | undefined)[];
@@ -44,6 +49,15 @@ export declare const ATTENDED_TASK_PRODUCER = "session-task";
  * `schemaKnown=false` (schema=unknown with a well-formed chain, F07) is unattended.
  */
 export declare function candidatePosture(entries: readonly TurnEntryFacts[], schemaKnown?: boolean): "attended" | "unattended";
+/**
+ * Amendment 60 (e): the inbox message the newest entry answers, or null. The newest entry's own
+ * `inbox=<sha>`; else, when the newest entry is a session-task notification (a background command or
+ * agent this session started, the amendment 56 continuation shape), the sha of the turn that started
+ * it: walking back over session-task entries, the first other entry's `inbox=<sha>`, if it has one.
+ * So a background task an inbox turn launched finishes inside that turn's admission, and nothing
+ * else does: a human, scheduled, peer or channel entry in between ends the walk with null.
+ */
+export declare function inboxShaOf(entries: readonly TurnEntryFacts[]): string | null;
 /** chain = sha256 hex of the root promptId (UTF-8). */
 export declare function chainIdOf(rootPromptId: string): Promise<string>;
 /** Request classes (day-1 spike vocabulary) and whether each waits for its transcript entry. */

package/dist/vendor/shared/durable-contract/turn.js

@@ -13,7 +13,10 @@ import { sha256Hex } from "./canonical.js";
 export const TURN_ORIGINS = ["human", "channel", "scheduled", "peer", "task", "meta"];
 export const TURN_SOURCES = ["typed", "queued", "system", "sdk"];
 export const CHAIN_KEY = "chain";
-/** Reserved entry key; no M1 emitter (P0a-B). Any entry carrying it is unattended. */
+/**
+ * Entry key `inbox=<sha256 hex>`: the turn answers that inbox message. Any entry carrying it is
+ * unattended. Its emitter is the seat proxy (amendment 60); admission reads the newest entry's value.
+ */
 export const INBOX_KEY = "inbox";
 export const TURN_HASH_RE = /^[0-9a-f]{64}$/;
 /** Sources that keep a human entry attended: absent, typed, queued (queued attended is a recorded departure). */
@@ -51,6 +54,35 @@ export function candidatePosture(entries, schemaKnown = true) {
         entries.slice(0, -1).some(attendedHuman);
     return continuation ? "attended" : "unattended";
 }
+const sessionTaskContinuation = (e) => e.origin === "task" &&
+    e.source === "system" &&
+    e.producer === ATTENDED_TASK_PRODUCER &&
+    !e.inbox;
+/**
+ * Amendment 60 (e): the inbox message the newest entry answers, or null. The newest entry's own
+ * `inbox=<sha>`; else, when the newest entry is a session-task notification (a background command or
+ * agent this session started, the amendment 56 continuation shape), the sha of the turn that started
+ * it: walking back over session-task entries, the first other entry's `inbox=<sha>`, if it has one.
+ * So a background task an inbox turn launched finishes inside that turn's admission, and nothing
+ * else does: a human, scheduled, peer or channel entry in between ends the walk with null.
+ */
+export function inboxShaOf(entries) {
+    const newest = entries[entries.length - 1];
+    if (newest === undefined)
+        return null;
+    const own = (e) => e.inbox && typeof e.inboxSha === "string" && TURN_HASH_RE.test(e.inboxSha) ? e.inboxSha : null;
+    if (newest.inbox)
+        return own(newest);
+    if (!sessionTaskContinuation(newest))
+        return null;
+    for (let i = entries.length - 2; i >= 0; i--) {
+        const e = entries[i];
+        if (sessionTaskContinuation(e))
+            continue;
+        return own(e);
+    }
+    return null;
+}
 /** chain = sha256 hex of the root promptId (UTF-8). */
 export async function chainIdOf(rootPromptId) {
     if (typeof rootPromptId !== "string" || rootPromptId.length === 0)

package/dist/vendor/shared/durable-contract/vectors.d.ts

@@ -189,3 +189,48 @@ export declare const SEAL_VECTORS: {
         readonly hash: "5a3bb041c155d67e50d18ee9afb0e6903f7a64988c881ab6373d3447fd5906f5";
     };
 };
+/**
+ * S1 amendment 60: inboxSha golden vectors (sha256 of the canonical identity with `v: 1`), computed
+ * independently with node:crypto over a hand-sorted JSON preimage. `text` is the delivery text the
+ * api renders for the message (inboxDeliveryText), with the sender label shown.
+ */
+export declare const INBOX_SHA_VECTORS: readonly [{
+    readonly identity: {
+        readonly session_id: "11111111-2222-4333-8444-555555555555";
+        readonly sender_kind: "owner";
+        readonly sender_agent_id: null;
+        readonly on_behalf_of: null;
+        readonly in_reply_to: null;
+        readonly body: "Please rebase PR 3220 and rerun the contract tests.";
+    };
+    readonly sender_label: null;
+    readonly preimage: "{\"body\":\"Please rebase PR 3220 and rerun the contract tests.\",\"in_reply_to\":null,\"on_behalf_of\":null,\"sender_agent_id\":null,\"sender_kind\":\"owner\",\"session_id\":\"11111111-2222-4333-8444-555555555555\",\"v\":1}";
+    readonly sha: "87fc04e971ee9fde7c3db3536772f4a7402c30a911111eff9fb37cbd3927c72f";
+    readonly text: "[mnemom inbox 87fc04e971ee9fde7c3db3536772f4a7402c30a911111eff9fb37cbd3927c72f] from the owner\n\nPlease rebase PR 3220 and rerun the contract tests.";
+}, {
+    readonly identity: {
+        readonly session_id: "11111111-2222-4333-8444-555555555555";
+        readonly sender_kind: "agent";
+        readonly sender_agent_id: "mnm-chief01";
+        readonly on_behalf_of: "user_owner_1";
+        readonly in_reply_to: null;
+        readonly body: "Wassim asks: status on the inbox migration?";
+    };
+    readonly sender_label: "chief";
+    readonly preimage: "{\"body\":\"Wassim asks: status on the inbox migration?\",\"in_reply_to\":null,\"on_behalf_of\":\"user_owner_1\",\"sender_agent_id\":\"mnm-chief01\",\"sender_kind\":\"agent\",\"session_id\":\"11111111-2222-4333-8444-555555555555\",\"v\":1}";
+    readonly sha: "8a955bd0811770262fa0d400472472b9cd8bc1cff8a41abb2955a2c1582eea54";
+    readonly text: "[mnemom inbox 8a955bd0811770262fa0d400472472b9cd8bc1cff8a41abb2955a2c1582eea54] from agent chief on behalf of the owner\n\nWassim asks: status on the inbox migration?";
+}, {
+    readonly identity: {
+        readonly session_id: "11111111-2222-4333-8444-555555555555";
+        readonly sender_kind: "owner";
+        readonly sender_agent_id: null;
+        readonly on_behalf_of: null;
+        readonly in_reply_to: "aaaaaaaa-bbbb-4ccc-8ddd-eeeeeeeeeeee";
+        readonly body: "Yes, ship it as a draft. — W ✓";
+    };
+    readonly sender_label: null;
+    readonly preimage: "{\"body\":\"Yes, ship it as a draft. — W ✓\",\"in_reply_to\":\"aaaaaaaa-bbbb-4ccc-8ddd-eeeeeeeeeeee\",\"on_behalf_of\":null,\"sender_agent_id\":null,\"sender_kind\":\"owner\",\"session_id\":\"11111111-2222-4333-8444-555555555555\",\"v\":1}";
+    readonly sha: "f79c83ca6fd83b8b918fe6464479c79ba4abea1ec30f43fd62b9b6d5950cc218";
+    readonly text: "[mnemom inbox f79c83ca6fd83b8b918fe6464479c79ba4abea1ec30f43fd62b9b6d5950cc218] from the owner (answer to question aaaaaaaa-bbbb-4ccc-8ddd-eeeeeeeeeeee)\n\nYes, ship it as a draft. — W ✓";
+}];

package/dist/vendor/shared/durable-contract/vectors.js

@@ -206,3 +206,52 @@ export const SEAL_VECTORS = {
         "hash": "5a3bb041c155d67e50d18ee9afb0e6903f7a64988c881ab6373d3447fd5906f5"
     }
 };
+/**
+ * S1 amendment 60: inboxSha golden vectors (sha256 of the canonical identity with `v: 1`), computed
+ * independently with node:crypto over a hand-sorted JSON preimage. `text` is the delivery text the
+ * api renders for the message (inboxDeliveryText), with the sender label shown.
+ */
+export const INBOX_SHA_VECTORS = [
+    {
+        identity: {
+            session_id: "11111111-2222-4333-8444-555555555555",
+            sender_kind: "owner",
+            sender_agent_id: null,
+            on_behalf_of: null,
+            in_reply_to: null,
+            body: "Please rebase PR 3220 and rerun the contract tests.",
+        },
+        sender_label: null,
+        preimage: '{"body":"Please rebase PR 3220 and rerun the contract tests.","in_reply_to":null,"on_behalf_of":null,"sender_agent_id":null,"sender_kind":"owner","session_id":"11111111-2222-4333-8444-555555555555","v":1}',
+        sha: "87fc04e971ee9fde7c3db3536772f4a7402c30a911111eff9fb37cbd3927c72f",
+        text: "[mnemom inbox 87fc04e971ee9fde7c3db3536772f4a7402c30a911111eff9fb37cbd3927c72f] from the owner\n\nPlease rebase PR 3220 and rerun the contract tests.",
+    },
+    {
+        identity: {
+            session_id: "11111111-2222-4333-8444-555555555555",
+            sender_kind: "agent",
+            sender_agent_id: "mnm-chief01",
+            on_behalf_of: "user_owner_1",
+            in_reply_to: null,
+            body: "Wassim asks: status on the inbox migration?",
+        },
+        sender_label: "chief",
+        preimage: '{"body":"Wassim asks: status on the inbox migration?","in_reply_to":null,"on_behalf_of":"user_owner_1","sender_agent_id":"mnm-chief01","sender_kind":"agent","session_id":"11111111-2222-4333-8444-555555555555","v":1}',
+        sha: "8a955bd0811770262fa0d400472472b9cd8bc1cff8a41abb2955a2c1582eea54",
+        text: "[mnemom inbox 8a955bd0811770262fa0d400472472b9cd8bc1cff8a41abb2955a2c1582eea54] from agent chief on behalf of the owner\n\nWassim asks: status on the inbox migration?",
+    },
+    {
+        identity: {
+            session_id: "11111111-2222-4333-8444-555555555555",
+            sender_kind: "owner",
+            sender_agent_id: null,
+            on_behalf_of: null,
+            in_reply_to: "aaaaaaaa-bbbb-4ccc-8ddd-eeeeeeeeeeee",
+            body: "Yes, ship it as a draft. — W ✓",
+        },
+        sender_label: null,
+        preimage: '{"body":"Yes, ship it as a draft. — W ✓","in_reply_to":"aaaaaaaa-bbbb-4ccc-8ddd-eeeeeeeeeeee","on_behalf_of":null,"sender_agent_id":null,"sender_kind":"owner","session_id":"11111111-2222-4333-8444-555555555555","v":1}',
+        sha: "f79c83ca6fd83b8b918fe6464479c79ba4abea1ec30f43fd62b9b6d5950cc218",
+        text: "[mnemom inbox f79c83ca6fd83b8b918fe6464479c79ba4abea1ec30f43fd62b9b6d5950cc218] from the owner (answer to question aaaaaaaa-bbbb-4ccc-8ddd-eeeeeeeeeeee)\n\nYes, ship it as a draft. — W ✓",
+    },
+];

package/node_modules/@mnemom/aip-verifier/LICENSE

@@ -0,0 +1,190 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to the Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by the Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding any notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   Copyright 2026 Mnemon
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.