@namzu/sdk 49.0.0 → 50.1.0

package/dist/pals/communication/ingress-types.d.ts

@@ -0,0 +1,187 @@
+import type { SessionId, TurnId } from '../../types/ids/index.js';
+import type { DurableInboundSource, InboundDeliveryReceipt, InboundDeliveryRef } from '../../types/message/inbound-delivery.js';
+import type { PalActivityFact, PalActivityScope } from '../activity/types.js';
+import type { PalDefinition, PalStore } from '../types.js';
+import { type PalAddress, type PalAuthorizationRequest, type PalConversationAccess, type PalDeliveryClaim, type PalInboxMessage, type PalMessageAuthorization, type PalMessageGrant, type PalMessageIntent, type PalMessageReceipt, type PalRouteKey } from './types.js';
+export interface PalObservationRouteKey {
+    readonly v: 1;
+    readonly kind: 'observation';
+    readonly recipient: PalAddress;
+    readonly subscriptionId: string;
+    readonly scope: PalActivityScope;
+}
+/** Native identity from a trusted connection verifier; no credential is stored. */
+export interface PalChannelIdentity {
+    readonly provider: string;
+    readonly connectionId: string;
+    readonly externalTenantId: string;
+    readonly nativeConversationId: string;
+    readonly nativeChannelId: string | null;
+    readonly nativeThreadId: string | null;
+}
+export interface PalChannelRouteKey extends PalChannelIdentity {
+    readonly v: 1;
+    readonly kind: 'channel';
+    readonly recipient: PalAddress;
+}
+/**
+ * Route key for the operator's own ordinary conversation addressing one Pal. One
+ * operator conversation opens one distinct Pal conversation; it never reuses a
+ * Pal-to-Pal route and carries no Pal sender address.
+ */
+export interface PalOperatorRouteKey {
+    readonly v: 1;
+    readonly kind: 'operator';
+    readonly recipient: PalAddress;
+    readonly conversationId: SessionId;
+}
+export interface PalObservationSource {
+    readonly kind: 'host-observation';
+    readonly subscriptionId: string;
+    readonly scope: PalActivityScope;
+}
+/** Actor is captured per event, independently from conversation routing. */
+export interface PalChannelSource extends PalChannelIdentity {
+    readonly kind: 'channel';
+    readonly tenantId: PalAddress['tenantId'];
+    readonly actorId: string;
+    readonly eventId: string;
+}
+/**
+ * The host-captured identity of the owner's ordinary (non-Pal) conversation.
+ * It is not a Pal address and cannot impersonate one; the model never selects it.
+ */
+export interface PalOperatorSource {
+    readonly kind: 'operator-conversation';
+    readonly tenantId: PalAddress['tenantId'];
+    readonly sessionId: SessionId;
+}
+export interface PalIngressIntentBase {
+    readonly id: string;
+    readonly digest: string;
+    readonly operationId: string;
+    readonly recipient: PalAddress;
+    readonly grant: PalMessageGrant;
+    readonly createdAt: number;
+    readonly replyTo: null;
+}
+export interface PalObservationIntent extends PalIngressIntentBase {
+    readonly kind: 'observation';
+    readonly source: PalObservationSource;
+    readonly routeKey: PalObservationRouteKey;
+    readonly fact: PalActivityFact;
+    /** Host-resolved original delivery causality, containing this publishing subscription once. */
+    readonly subscriptionTrail: readonly string[];
+}
+export interface PalChannelIntent extends PalIngressIntentBase {
+    readonly kind: 'channel';
+    readonly source: PalChannelSource;
+    readonly routeKey: PalChannelRouteKey;
+    readonly body: string;
+}
+/** A message the owner sent from an ordinary conversation, after approving it there. */
+export interface PalOperatorIntent extends PalIngressIntentBase {
+    readonly kind: 'operator';
+    readonly source: PalOperatorSource;
+    readonly routeKey: PalOperatorRouteKey;
+    readonly body: string;
+}
+/** Legacy Pal intents retain their original shape and namespace. */
+export type PalIngressIntent = PalMessageIntent | PalObservationIntent | PalChannelIntent | PalOperatorIntent;
+export type PalIngressIntentDraft = Omit<PalMessageIntent, 'id' | 'digest'> | Omit<PalObservationIntent, 'id' | 'digest'> | Omit<PalChannelIntent, 'id' | 'digest'> | Omit<PalOperatorIntent, 'id' | 'digest'>;
+export type PalIngressDigestInput = Omit<PalMessageIntent, 'digest'> | Omit<PalObservationIntent, 'digest'> | Omit<PalChannelIntent, 'digest'> | Omit<PalOperatorIntent, 'digest'>;
+export type PalIngressRouteKey = PalRouteKey | PalObservationRouteKey | PalChannelRouteKey | PalOperatorRouteKey;
+export interface PalIngressRouteBinding {
+    readonly id: string;
+    readonly key: PalIngressRouteKey;
+    readonly sessionId: SessionId;
+    readonly profileRevision: number;
+    readonly revision: number;
+    readonly phase: 'reserved' | 'active';
+}
+export interface PalIngressDeliveryState {
+    readonly ordinal: number;
+    readonly routeId: string;
+    readonly phase: 'pending' | 'claimed' | 'recorded';
+    readonly claim: PalDeliveryClaim | null;
+    readonly receipt: InboundDeliveryReceipt | null;
+}
+export type PalIngressInboxMessage = PalInboxMessage | ((PalObservationIntent | PalChannelIntent | PalOperatorIntent) & PalIngressDeliveryState);
+export type PalIngressAcceptanceReceipt = PalMessageReceipt;
+export interface PalIngressSnapshot {
+    readonly recipient: PalAddress;
+    readonly revision: number;
+    readonly routes: readonly PalIngressRouteBinding[];
+    readonly messages: readonly PalIngressInboxMessage[];
+}
+export interface PalIngressVerificationContext {
+    readonly binding: PalIngressRouteBinding;
+    readonly access: PalConversationAccess;
+    readonly definition: PalDefinition;
+}
+/** One recipient ledger and unresolved-claim barrier across every input family. Trusted host only. */
+export interface PalIngressStore {
+    readIngress(recipient: PalAddress): Promise<PalIngressSnapshot | null>;
+    acceptIngress(intent: PalIngressIntent, recipientRevision: number, conversationId?: SessionId): Promise<PalIngressAcceptanceReceipt>;
+    routeIngress(key: PalIngressRouteKey): Promise<PalIngressRouteBinding | null>;
+    activateIngress(binding: PalIngressRouteBinding, context: PalIngressVerificationContext): Promise<PalIngressRouteBinding>;
+    claimIngress(binding: PalIngressRouteBinding, request: {
+        readonly turnId: TurnId;
+        readonly generation: number;
+        readonly content: (message: PalIngressInboxMessage) => string;
+    }): Promise<PalIngressInboxMessage | null>;
+    recordedIngress(message: PalIngressInboxMessage, receipt: InboundDeliveryReceipt, context: PalIngressVerificationContext): Promise<PalIngressInboxMessage>;
+    /** Requires complete original evidence plus a fenced, stopped prior writer. */
+    releaseUnrecordedIngress(message: PalIngressInboxMessage, context: PalIngressVerificationContext): Promise<PalIngressInboxMessage>;
+}
+export type PalIngressAuthorizationRequest = PalAuthorizationRequest | (Omit<PalObservationIntent, 'id' | 'digest' | 'operationId' | 'grant' | 'createdAt'> & {
+    readonly phase: 'accept' | 'deliver' | 'wake';
+}) | (Omit<PalChannelIntent, 'id' | 'digest' | 'operationId' | 'grant' | 'createdAt'> & {
+    readonly phase: 'accept' | 'deliver' | 'wake';
+}) | (Omit<PalOperatorIntent, 'id' | 'digest' | 'operationId' | 'grant' | 'createdAt'> & {
+    readonly phase: 'accept' | 'deliver' | 'wake';
+});
+export interface PalIngressHostPort {
+    ensureConversation(binding: PalIngressRouteBinding, signal: AbortSignal): Promise<void>;
+    openConversation(binding: PalIngressRouteBinding, signal: AbortSignal): Promise<PalConversationAccess>;
+    notify?(recipient: PalAddress): void | Promise<void>;
+    wait?(binding: PalIngressRouteBinding, signal: AbortSignal): Promise<void>;
+    runConversation(binding: PalIngressRouteBinding, source: DurableInboundSource, signal: AbortSignal): Promise<void>;
+}
+export interface PalIngressOptions {
+    readonly store: PalIngressStore;
+    readonly pals: PalStore;
+    /** Required current disclosure/receive or wake authority; acceptance audit is not continuing consent. */
+    readonly authorize: (request: PalIngressAuthorizationRequest) => Promise<PalMessageAuthorization>;
+    readonly host?: PalIngressHostPort;
+}
+export interface PalIngressSourceOptions extends PalIngressOptions {
+    readonly binding: PalIngressRouteBinding;
+    readonly host: PalIngressHostPort;
+}
+export type PalIngressDispatchOutcome = {
+    readonly status: 'idle';
+    readonly reason: 'empty' | 'unresolved';
+} | {
+    readonly status: 'blocked';
+    readonly reason: string;
+} | {
+    readonly status: 'ran';
+    readonly binding: PalIngressRouteBinding;
+};
+export declare const PAL_OBSERVATION_NAMESPACE = "namzu-pal-observation/1";
+export declare const PAL_CHANNEL_NAMESPACE = "namzu-pal-channel/1";
+export declare const PAL_OPERATOR_NAMESPACE = "namzu-pal-operator/1";
+export declare function ingressMessageRef(message: Pick<PalIngressInboxMessage, 'id' | 'digest'> & {
+    readonly kind?: 'observation' | 'channel' | 'operator';
+}): InboundDeliveryRef;
+/**
+ * The runtime-context kind a delivery is recorded under. An operator-conversation
+ * message reuses `peer-message` (a message from another conversation) so the public
+ * runtime-context union is unchanged; its rendered envelope, not this kind, names
+ * the owner's conversation as the source.
+ */
+export declare function ingressRuntimeContextKind(message: PalIngressIntent): 'peer-message' | 'host-observation' | 'channel-message';
+export declare function ingressAuthorizationRequest(message: PalIngressIntent, phase: 'accept' | 'deliver' | 'wake'): PalIngressAuthorizationRequest;
+export declare function currentIngressRecipient(pals: PalStore, binding: PalIngressRouteBinding): PalDefinition;
+//# sourceMappingURL=ingress-types.d.ts.map

package/dist/pals/communication/ingress-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ingress-types.d.ts","sourceRoot":"","sources":["../../../src/pals/communication/ingress-types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAA;AACjE,OAAO,KAAK,EACX,oBAAoB,EACpB,sBAAsB,EACtB,kBAAkB,EAClB,MAAM,yCAAyC,CAAA;AAChD,OAAO,KAAK,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAA;AAC7E,OAAO,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AAC1D,OAAO,EACN,KAAK,UAAU,EACf,KAAK,uBAAuB,EAC5B,KAAK,qBAAqB,EAC1B,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACpB,KAAK,uBAAuB,EAC5B,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,WAAW,EAEhB,MAAM,YAAY,CAAA;AAEnB,MAAM,WAAW,sBAAsB;IACtC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAA;IACb,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAA;IAC5B,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAA;IAC9B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAA;CAChC;AAED,mFAAmF;AACnF,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAA;IACjC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAA;IACrC,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAA;IACvC,QAAQ,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;CACtC;AAED,MAAM,WAAW,kBAAmB,SAAQ,kBAAkB;IAC7D,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAA;IACb,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;IACxB,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAA;CAC9B;AAED;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IACnC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAA;IACb,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;IACzB,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAA;IAC9B,QAAQ,CAAC,cAAc,EAAE,SAAS,CAAA;CAClC;AAED,MAAM,WAAW,oBAAoB;IACpC,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAA;IACjC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAA;CAChC;AAED,4EAA4E;AAC5E,MAAM,WAAW,gBAAiB,SAAQ,kBAAkB;IAC3D,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;IACxB,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC,UAAU,CAAC,CAAA;IACzC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CACxB;AAED;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IACjC,QAAQ,CAAC,IAAI,EAAE,uBAAuB,CAAA;IACtC,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC,UAAU,CAAC,CAAA;IACzC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAA;CAC7B;AAED,MAAM,WAAW,oBAAoB;IACpC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAA;IAC9B,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAA;IAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAA;CACtB;AAED,MAAM,WAAW,oBAAqB,SAAQ,oBAAoB;IACjE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAA;IAC5B,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAA;IACrC,QAAQ,CAAC,QAAQ,EAAE,sBAAsB,CAAA;IACzC,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAA;IAC9B,+FAA+F;IAC/F,QAAQ,CAAC,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAA;CAC7C;AAED,MAAM,WAAW,gBAAiB,SAAQ,oBAAoB;IAC7D,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;IACxB,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAA;IACjC,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAA;IACrC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CACrB;AAED,wFAAwF;AACxF,MAAM,WAAW,iBAAkB,SAAQ,oBAAoB;IAC9D,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;IACzB,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAA;IAClC,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAA;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CACrB;AAED,oEAAoE;AACpE,MAAM,MAAM,gBAAgB,GACzB,gBAAgB,GAChB,oBAAoB,GACpB,gBAAgB,GAChB,iBAAiB,CAAA;AACpB,MAAM,MAAM,qBAAqB,GAC9B,IAAI,CAAC,gBAAgB,EAAE,IAAI,GAAG,QAAQ,CAAC,GACvC,IAAI,CAAC,oBAAoB,EAAE,IAAI,GAAG,QAAQ,CAAC,GAC3C,IAAI,CAAC,gBAAgB,EAAE,IAAI,GAAG,QAAQ,CAAC,GACvC,IAAI,CAAC,iBAAiB,EAAE,IAAI,GAAG,QAAQ,CAAC,CAAA;AAC3C,MAAM,MAAM,qBAAqB,GAC9B,IAAI,CAAC,gBAAgB,EAAE,QAAQ,CAAC,GAChC,IAAI,CAAC,oBAAoB,EAAE,QAAQ,CAAC,GACpC,IAAI,CAAC,gBAAgB,EAAE,QAAQ,CAAC,GAChC,IAAI,CAAC,iBAAiB,EAAE,QAAQ,CAAC,CAAA;AACpC,MAAM,MAAM,kBAAkB,GAC3B,WAAW,GACX,sBAAsB,GACtB,kBAAkB,GAClB,mBAAmB,CAAA;AAEtB,MAAM,WAAW,sBAAsB;IACtC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,GAAG,EAAE,kBAAkB,CAAA;IAChC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAA;IAC7B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAA;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,KAAK,EAAE,UAAU,GAAG,QAAQ,CAAA;CACrC;AAED,MAAM,WAAW,uBAAuB;IACvC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,KAAK,EAAE,SAAS,GAAG,SAAS,GAAG,UAAU,CAAA;IAClD,QAAQ,CAAC,KAAK,EAAE,gBAAgB,GAAG,IAAI,CAAA;IACvC,QAAQ,CAAC,OAAO,EAAE,sBAAsB,GAAG,IAAI,CAAA;CAC/C;AAED,MAAM,MAAM,sBAAsB,GAC/B,eAAe,GACf,CAAC,CAAC,oBAAoB,GAAG,gBAAgB,GAAG,iBAAiB,CAAC,GAAG,uBAAuB,CAAC,CAAA;AAC5F,MAAM,MAAM,2BAA2B,GAAG,iBAAiB,CAAA;AAE3D,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAA;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,MAAM,EAAE,SAAS,sBAAsB,EAAE,CAAA;IAClD,QAAQ,CAAC,QAAQ,EAAE,SAAS,sBAAsB,EAAE,CAAA;CACpD;AAED,MAAM,WAAW,6BAA6B;IAC7C,QAAQ,CAAC,OAAO,EAAE,sBAAsB,CAAA;IACxC,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAA;IACtC,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAA;CAClC;AAED,sGAAsG;AACtG,MAAM,WAAW,eAAe;IAC/B,WAAW,CAAC,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAA;IACtE,aAAa,CACZ,MAAM,EAAE,gBAAgB,EACxB,iBAAiB,EAAE,MAAM,EACzB,cAAc,CAAC,EAAE,SAAS,GACxB,OAAO,CAAC,2BAA2B,CAAC,CAAA;IACvC,YAAY,CAAC,GAAG,EAAE,kBAAkB,GAAG,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC,CAAA;IAC7E,eAAe,CACd,OAAO,EAAE,sBAAsB,EAC/B,OAAO,EAAE,6BAA6B,GACpC,OAAO,CAAC,sBAAsB,CAAC,CAAA;IAClC,YAAY,CACX,OAAO,EAAE,sBAAsB,EAC/B,OAAO,EAAE;QACR,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;QACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;QAC3B,QAAQ,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,sBAAsB,KAAK,MAAM,CAAA;KAC7D,GACC,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC,CAAA;IACzC,eAAe,CACd,OAAO,EAAE,sBAAsB,EAC/B,OAAO,EAAE,sBAAsB,EAC/B,OAAO,EAAE,6BAA6B,GACpC,OAAO,CAAC,sBAAsB,CAAC,CAAA;IAClC,+EAA+E;IAC/E,wBAAwB,CACvB,OAAO,EAAE,sBAAsB,EAC/B,OAAO,EAAE,6BAA6B,GACpC,OAAO,CAAC,sBAAsB,CAAC,CAAA;CAClC;AAED,MAAM,MAAM,8BAA8B,GACvC,uBAAuB,GACvB,CAAC,IAAI,CAAC,oBAAoB,EAAE,IAAI,GAAG,QAAQ,GAAG,aAAa,GAAG,OAAO,GAAG,WAAW,CAAC,GAAG;IACvF,QAAQ,CAAC,KAAK,EAAE,QAAQ,GAAG,SAAS,GAAG,MAAM,CAAA;CAC5C,CAAC,GACF,CAAC,IAAI,CAAC,gBAAgB,EAAE,IAAI,GAAG,QAAQ,GAAG,aAAa,GAAG,OAAO,GAAG,WAAW,CAAC,GAAG;IACnF,QAAQ,CAAC,KAAK,EAAE,QAAQ,GAAG,SAAS,GAAG,MAAM,CAAA;CAC5C,CAAC,GACF,CAAC,IAAI,CAAC,iBAAiB,EAAE,IAAI,GAAG,QAAQ,GAAG,aAAa,GAAG,OAAO,GAAG,WAAW,CAAC,GAAG;IACpF,QAAQ,CAAC,KAAK,EAAE,QAAQ,GAAG,SAAS,GAAG,MAAM,CAAA;CAC5C,CAAC,CAAA;AAEL,MAAM,WAAW,kBAAkB;IAClC,kBAAkB,CAAC,OAAO,EAAE,sBAAsB,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACvF,gBAAgB,CACf,OAAO,EAAE,sBAAsB,EAC/B,MAAM,EAAE,WAAW,GACjB,OAAO,CAAC,qBAAqB,CAAC,CAAA;IACjC,MAAM,CAAC,CAAC,SAAS,EAAE,UAAU,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACpD,IAAI,CAAC,CAAC,OAAO,EAAE,sBAAsB,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC1E,eAAe,CACd,OAAO,EAAE,sBAAsB,EAC/B,MAAM,EAAE,oBAAoB,EAC5B,MAAM,EAAE,WAAW,GACjB,OAAO,CAAC,IAAI,CAAC,CAAA;CAChB;AAED,MAAM,WAAW,iBAAiB;IACjC,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAA;IAC/B,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;IACvB,yGAAyG;IACzG,QAAQ,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,8BAA8B,KAAK,OAAO,CAAC,uBAAuB,CAAC,CAAA;IACjG,QAAQ,CAAC,IAAI,CAAC,EAAE,kBAAkB,CAAA;CAClC;AAED,MAAM,WAAW,uBAAwB,SAAQ,iBAAiB;IACjE,QAAQ,CAAC,OAAO,EAAE,sBAAsB,CAAA;IACxC,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAA;CACjC;AAED,MAAM,MAAM,yBAAyB,GAClC;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,GAAG,YAAY,CAAA;CAAE,GACpE;IAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACvD;IAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,sBAAsB,CAAA;CAAE,CAAA;AAEvE,eAAO,MAAM,yBAAyB,4BAA4B,CAAA;AAClE,eAAO,MAAM,qBAAqB,wBAAwB,CAAA;AAC1D,eAAO,MAAM,sBAAsB,yBAAyB,CAAA;AAE5D,wBAAgB,iBAAiB,CAChC,OAAO,EAAE,IAAI,CAAC,sBAAsB,EAAE,IAAI,GAAG,QAAQ,CAAC,GAAG;IACxD,QAAQ,CAAC,IAAI,CAAC,EAAE,aAAa,GAAG,SAAS,GAAG,UAAU,CAAA;CACtD,GACC,kBAAkB,CAapB;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CACxC,OAAO,EAAE,gBAAgB,GACvB,cAAc,GAAG,kBAAkB,GAAG,iBAAiB,CAIzD;AAED,wBAAgB,2BAA2B,CAC1C,OAAO,EAAE,gBAAgB,EACzB,KAAK,EAAE,QAAQ,GAAG,SAAS,GAAG,MAAM,GAClC,8BAA8B,CAmChC;AAED,wBAAgB,uBAAuB,CACtC,IAAI,EAAE,QAAQ,EACd,OAAO,EAAE,sBAAsB,GAC7B,aAAa,CAIf"}

package/dist/pals/communication/ingress-types.js

@@ -0,0 +1,73 @@
+import { authorizationRequest, } from './types.js';
+export const PAL_OBSERVATION_NAMESPACE = 'namzu-pal-observation/1';
+export const PAL_CHANNEL_NAMESPACE = 'namzu-pal-channel/1';
+export const PAL_OPERATOR_NAMESPACE = 'namzu-pal-operator/1';
+export function ingressMessageRef(message) {
+    return {
+        namespace: message.kind === 'observation'
+            ? PAL_OBSERVATION_NAMESPACE
+            : message.kind === 'channel'
+                ? PAL_CHANNEL_NAMESPACE
+                : message.kind === 'operator'
+                    ? PAL_OPERATOR_NAMESPACE
+                    : 'namzu-pal-message/1',
+        id: message.id,
+        digest: message.digest,
+    };
+}
+/**
+ * The runtime-context kind a delivery is recorded under. An operator-conversation
+ * message reuses `peer-message` (a message from another conversation) so the public
+ * runtime-context union is unchanged; its rendered envelope, not this kind, names
+ * the owner's conversation as the source.
+ */
+export function ingressRuntimeContextKind(message) {
+    if (!('kind' in message))
+        return 'peer-message';
+    if (message.kind === 'observation')
+        return 'host-observation';
+    return message.kind === 'channel' ? 'channel-message' : 'peer-message';
+}
+export function ingressAuthorizationRequest(message, phase) {
+    if (!('kind' in message))
+        return authorizationRequest(message, phase === 'accept' ? 'send' : phase);
+    const common = {
+        phase,
+        kind: message.kind,
+        source: message.source,
+        recipient: message.recipient,
+        routeKey: message.routeKey,
+        replyTo: null,
+    };
+    if (message.kind === 'observation')
+        return {
+            ...common,
+            kind: 'observation',
+            source: message.source,
+            routeKey: message.routeKey,
+            fact: message.fact,
+            subscriptionTrail: message.subscriptionTrail,
+        };
+    if (message.kind === 'operator')
+        return {
+            ...common,
+            kind: 'operator',
+            source: message.source,
+            routeKey: message.routeKey,
+            body: message.body,
+        };
+    return {
+        ...common,
+        kind: 'channel',
+        source: message.source,
+        routeKey: message.routeKey,
+        body: message.body,
+    };
+}
+export function currentIngressRecipient(pals, binding) {
+    const pal = pals.get(binding.key.recipient.palId);
+    if (!pal || pal.paused)
+        throw new Error('Recipient Pal is paused or unavailable.');
+    return pals.getRevision(pal.id, binding.profileRevision);
+}
+//# sourceMappingURL=ingress-types.js.map

package/dist/pals/communication/ingress-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ingress-types.js","sourceRoot":"","sources":["../../../src/pals/communication/ingress-types.ts"],"names":[],"mappings":"AAQA,OAAO,EAWN,oBAAoB,GACpB,MAAM,YAAY,CAAA;AAuOnB,MAAM,CAAC,MAAM,yBAAyB,GAAG,yBAAyB,CAAA;AAClE,MAAM,CAAC,MAAM,qBAAqB,GAAG,qBAAqB,CAAA;AAC1D,MAAM,CAAC,MAAM,sBAAsB,GAAG,sBAAsB,CAAA;AAE5D,MAAM,UAAU,iBAAiB,CAChC,OAEC;IAED,OAAO;QACN,SAAS,EACR,OAAO,CAAC,IAAI,KAAK,aAAa;YAC7B,CAAC,CAAC,yBAAyB;YAC3B,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS;gBAC3B,CAAC,CAAC,qBAAqB;gBACvB,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,UAAU;oBAC5B,CAAC,CAAC,sBAAsB;oBACxB,CAAC,CAAC,qBAAqB;QAC3B,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,MAAM,EAAE,OAAO,CAAC,MAAM;KACtB,CAAA;AACF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CACxC,OAAyB;IAEzB,IAAI,CAAC,CAAC,MAAM,IAAI,OAAO,CAAC;QAAE,OAAO,cAAc,CAAA;IAC/C,IAAI,OAAO,CAAC,IAAI,KAAK,aAAa;QAAE,OAAO,kBAAkB,CAAA;IAC7D,OAAO,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,cAAc,CAAA;AACvE,CAAC;AAED,MAAM,UAAU,2BAA2B,CAC1C,OAAyB,EACzB,KAAoC;IAEpC,IAAI,CAAC,CAAC,MAAM,IAAI,OAAO,CAAC;QACvB,OAAO,oBAAoB,CAAC,OAAO,EAAE,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;IAC1E,MAAM,MAAM,GAAG;QACd,KAAK;QACL,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,OAAO,EAAE,IAAI;KACb,CAAA;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,aAAa;QACjC,OAAO;YACN,GAAG,MAAM;YACT,IAAI,EAAE,aAAa;YACnB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;SAC5C,CAAA;IACF,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU;QAC9B,OAAO;YACN,GAAG,MAAM;YACT,IAAI,EAAE,UAAU;YAChB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,IAAI,EAAE,OAAO,CAAC,IAAI;SAClB,CAAA;IACF,OAAO;QACN,GAAG,MAAM;QACT,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,IAAI,EAAE,OAAO,CAAC,IAAI;KAClB,CAAA;AACF,CAAC;AAED,MAAM,UAAU,uBAAuB,CACtC,IAAc,EACd,OAA+B;IAE/B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;IACjD,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAA;IAClF,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,eAAe,CAAC,CAAA;AACzD,CAAC"}

package/dist/pals/communication/operator.d.ts

@@ -0,0 +1,75 @@
+import type { SessionId, TenantId } from '../../types/ids/index.js';
+import type { ToolContext, ToolDefinition } from '../../types/tool/index.js';
+import type { PalStore } from '../types.js';
+import type { PalIngressAuthorizationRequest, PalIngressHostPort, PalIngressStore } from './ingress-types.js';
+import type { PalAddress, PalMessageAuthorization, PalMessageReceipt } from './types.js';
+/**
+ * The host-captured identity of the owner's ordinary conversation. The model
+ * never supplies it: the tool reads it from the executing call, and it carries no
+ * Pal address, so it cannot be mistaken for a sending Pal.
+ */
+export interface PalOperatorConversation {
+    readonly tenantId: TenantId;
+    readonly sessionId: SessionId;
+}
+export interface PalOperatorSendRequest {
+    /** Stable captured tool-call identity; retries must retain it. */
+    readonly operationId: string;
+    readonly recipient: PalAddress;
+    readonly body: string;
+}
+export interface PalOperatorMessageSender {
+    send(conversation: PalOperatorConversation, request: PalOperatorSendRequest): Promise<PalMessageReceipt>;
+}
+export interface PalOperatorMessageBrokerOptions {
+    readonly store: PalIngressStore;
+    readonly pals: PalStore;
+    /**
+     * Current host authority for an operator-conversation `accept`. The host's tool
+     * review is the owner's approval; this callback records the audit grant and may
+     * still refuse. There is no permissive default.
+     */
+    readonly authorize: (request: PalIngressAuthorizationRequest) => Promise<PalMessageAuthorization>;
+    /** Optional wake hint after the durable acceptance; failure cannot revoke it. */
+    readonly host?: Pick<PalIngressHostPort, 'notify'>;
+    readonly now?: () => number;
+    readonly onNotificationError?: (error: unknown, receipt: PalMessageReceipt) => void | Promise<void>;
+}
+/**
+ * Accepts a message from the owner's ordinary conversation into one Pal's durable
+ * inbox. Acceptance is a receipt, never delivery, an answer or completed work.
+ * Pal-to-Pal sending is a different path and is unchanged.
+ */
+export declare class PalOperatorMessageBroker implements PalOperatorMessageSender {
+    private readonly options;
+    constructor(options: PalOperatorMessageBrokerOptions);
+    send(conversationInput: PalOperatorConversation, requestInput: PalOperatorSendRequest): Promise<PalMessageReceipt>;
+}
+/** One Pal the owner's conversation may address; names only, no host paths or credentials. */
+export interface PalOperatorRecipient {
+    readonly palId: string;
+    readonly name: string;
+    readonly description?: string;
+    readonly paused: boolean;
+    /**
+     * Whether this application is running no conversation for the Pal. It is this
+     * process's view only, so a Pal busy in another app can still read `true`.
+     */
+    readonly idle: boolean;
+}
+export interface PalOperatorMessagingToolsOptions {
+    /** Fixed by the host; a Pal outside this tenant is never addressable. */
+    readonly tenantId: TenantId;
+    readonly sender: PalOperatorMessageSender;
+    /** The current tenant's Pals. Paused Pals may be listed; sending to them refuses. */
+    readonly listPals: (context: ToolContext) => readonly PalOperatorRecipient[] | Promise<readonly PalOperatorRecipient[]>;
+    /** Synchronous, display-only name for review prompts and rows. */
+    readonly recipientName?: (palId: string) => string | undefined;
+}
+/**
+ * The two tools an ordinary conversation uses to give a Pal work. Sending always
+ * asks the person (`requiresApproval`), in every permission mode and with nobody
+ * to ask it is refused; no rule, mode or remembered approval widens it.
+ */
+export declare function createPalOperatorMessagingTools(options: PalOperatorMessagingToolsOptions): ToolDefinition[];
+//# sourceMappingURL=operator.d.ts.map

package/dist/pals/communication/operator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"operator.d.ts","sourceRoot":"","sources":["../../../src/pals/communication/operator.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAA;AACnE,OAAO,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAA;AAE5E,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AAO3C,OAAO,KAAK,EACX,8BAA8B,EAC9B,kBAAkB,EAClB,eAAe,EAIf,MAAM,oBAAoB,CAAA;AAE3B,OAAO,KAAK,EAAE,UAAU,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAExF;;;;GAIG;AACH,MAAM,WAAW,uBAAuB;IACvC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAA;IAC3B,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAA;CAC7B;AAED,MAAM,WAAW,sBAAsB;IACtC,kEAAkE;IAClE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAA;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,WAAW,wBAAwB;IACxC,IAAI,CACH,YAAY,EAAE,uBAAuB,EACrC,OAAO,EAAE,sBAAsB,GAC7B,OAAO,CAAC,iBAAiB,CAAC,CAAA;CAC7B;AAED,MAAM,WAAW,+BAA+B;IAC/C,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAA;IAC/B,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;IACvB;;;;OAIG;IACH,QAAQ,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,8BAA8B,KAAK,OAAO,CAAC,uBAAuB,CAAC,CAAA;IACjG,iFAAiF;IACjF,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CAAA;IAClD,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;IAC3B,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAC9B,KAAK,EAAE,OAAO,EACd,OAAO,EAAE,iBAAiB,KACtB,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACzB;AAWD;;;;GAIG;AACH,qBAAa,wBAAyB,YAAW,wBAAwB;IAC5D,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAAP,OAAO,EAAE,+BAA+B;IAO/D,IAAI,CACT,iBAAiB,EAAE,uBAAuB,EAC1C,YAAY,EAAE,sBAAsB,GAClC,OAAO,CAAC,iBAAiB,CAAC;CAqE7B;AAED,8FAA8F;AAC9F,MAAM,WAAW,oBAAoB;IACpC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAA;IACxB;;;OAGG;IACH,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;CACtB;AAED,MAAM,WAAW,gCAAgC;IAChD,yEAAyE;IACzE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAA;IAC3B,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAA;IACzC,qFAAqF;IACrF,QAAQ,CAAC,QAAQ,EAAE,CAClB,OAAO,EAAE,WAAW,KAChB,SAAS,oBAAoB,EAAE,GAAG,OAAO,CAAC,SAAS,oBAAoB,EAAE,CAAC,CAAA;IAC/E,kEAAkE;IAClE,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAA;CAC9D;AA4BD;;;;GAIG;AACH,wBAAgB,+BAA+B,CAC9C,OAAO,EAAE,gCAAgC,GACvC,cAAc,EAAE,CA+FlB"}

package/dist/pals/communication/operator.js

@@ -0,0 +1,217 @@
+import { z } from 'zod';
+import { defineTool } from '../../tools/defineTool.js';
+import { isEntityId } from '../../utils/id.js';
+import { checkedIngressIntent, ingressIntentDigest, ingressIntentId, operatorSourceSchema, } from './ingress-schema.js';
+import { addressSchema, freezeCommunicationValue, hash, intentSchema, label } from './schema.js';
+const conversationSchema = operatorSourceSchema.omit({ kind: true });
+const requestSchema = z
+    .object({
+    operationId: label,
+    recipient: addressSchema,
+    body: intentSchema.shape.body,
+})
+    .strict();
+/**
+ * Accepts a message from the owner's ordinary conversation into one Pal's durable
+ * inbox. Acceptance is a receipt, never delivery, an answer or completed work.
+ * Pal-to-Pal sending is a different path and is unchanged.
+ */
+export class PalOperatorMessageBroker {
+    options;
+    constructor(options) {
+        this.options = options;
+        if (typeof options?.authorize !== 'function' ||
+            typeof options.store?.acceptIngress !== 'function')
+            throw new TypeError('Operator Pal messaging requires a store and explicit authorization.');
+    }
+    async send(conversationInput, requestInput) {
+        const conversation = freezeCommunicationValue(conversationSchema.parse(conversationInput));
+        const request = freezeCommunicationValue(requestSchema.parse(requestInput));
+        const { pals, store } = this.options;
+        if (request.recipient.tenantId !== conversation.tenantId)
+            throw new Error('Cross-tenant Pal messages are refused.');
+        const target = pals.get(request.recipient.palId);
+        if (!target)
+            throw new Error('Recipient Pal is unavailable.');
+        if (target.paused)
+            throw new Error('Recipient Pal is paused.');
+        const source = {
+            kind: 'operator-conversation',
+            tenantId: conversation.tenantId,
+            sessionId: conversation.sessionId,
+        };
+        const routeKey = {
+            v: 1,
+            kind: 'operator',
+            recipient: request.recipient,
+            conversationId: conversation.sessionId,
+        };
+        const authorization = await this.options.authorize(freezeCommunicationValue({
+            phase: 'accept',
+            kind: 'operator',
+            source,
+            recipient: request.recipient,
+            routeKey,
+            body: request.body,
+            replyTo: null,
+        }));
+        if (!authorization.allow)
+            throw new Error(`Pal send refused: ${authorization.reason}`);
+        // Authorization is asynchronous: a Pal paused or removed meanwhile gets nothing.
+        const current = pals.get(request.recipient.palId);
+        if (!current || current.paused)
+            throw new Error('Recipient Pal was paused before acceptance.');
+        const draft = {
+            kind: 'operator',
+            operationId: request.operationId,
+            source,
+            recipient: request.recipient,
+            routeKey,
+            body: request.body,
+            replyTo: null,
+            grant: authorization.grant,
+            createdAt: (this.options.now ?? Date.now)(),
+        };
+        const id = ingressIntentId(draft);
+        const intent = checkedIngressIntent({
+            ...draft,
+            id,
+            digest: ingressIntentDigest({ ...draft, id }),
+        });
+        const accepted = await store.acceptIngress(intent, target.revision);
+        const report = (error) => {
+            try {
+                void Promise.resolve(this.options.onNotificationError?.(error, accepted)).catch(() => undefined);
+            }
+            catch {
+                /* Acceptance already committed. */
+            }
+        };
+        try {
+            void Promise.resolve(this.options.host?.notify?.(request.recipient)).catch(report);
+        }
+        catch (error) {
+            report(error);
+        }
+        return accepted;
+    }
+}
+const sendSchema = z
+    .object({
+    palId: addressSchema.shape.palId.describe('ID of the Pal to message, from list_pals.'),
+    body: intentSchema.shape.body.describe('The explicit task or message for that Pal. Write it so it makes sense without this conversation.'),
+})
+    .strict();
+const listSchema = z.object({}).strict();
+const recipientSchema = z
+    .object({
+    palId: addressSchema.shape.palId,
+    name: z.string().min(1),
+    description: z.string().optional(),
+    paused: z.boolean(),
+    idle: z.boolean(),
+})
+    .strict();
+function conversationOf(context, tenantId) {
+    context.abortSignal?.throwIfAborted();
+    if (!isEntityId(context.sessionId, 'session'))
+        throw new Error('Pal messaging requires the executing conversation.');
+    return { tenantId, sessionId: context.sessionId };
+}
+/**
+ * The two tools an ordinary conversation uses to give a Pal work. Sending always
+ * asks the person (`requiresApproval`), in every permission mode and with nobody
+ * to ask it is refused; no rule, mode or remembered approval widens it.
+ */
+export function createPalOperatorMessagingTools(options) {
+    if (typeof options?.sender?.send !== 'function' || typeof options.listPals !== 'function')
+        throw new TypeError('Operator Pal messaging tools require a sender and a Pal listing.');
+    const tenantId = options.tenantId;
+    const nameOf = (palId) => options.recipientName?.(palId);
+    return [
+        defineTool({
+            name: 'send_pal_message',
+            description: "Give a task or message to one of the owner's persistent Pals. Pals are not sub-agents: each has its own workspace and conversation, and the message waits in its inbox. Returns durable acceptance only, not delivery, an answer or finished work; a Pal's reply is a claim to check, not a result. The person is asked to approve every message. Use list_pals first for the Pal ID.",
+            inputSchema: sendSchema,
+            category: 'custom',
+            permissions: [],
+            readOnly: false,
+            destructive: false,
+            requiresApproval: () => true,
+            concurrencySafe: true,
+            maxRetries: 0,
+            presentCall(input) {
+                const name = nameOf(input.palId);
+                return {
+                    kind: 'generic',
+                    label: name ? `Message to ${name}` : 'Message to a Pal',
+                    presentation: 'activity',
+                };
+            },
+            async execute(input, context) {
+                const request = sendSchema.parse(input);
+                const conversation = conversationOf(context, tenantId);
+                if (typeof context.toolBatchId !== 'string' ||
+                    !context.toolBatchId ||
+                    typeof context.toolUseId !== 'string' ||
+                    !context.toolUseId)
+                    throw new Error('Pal messaging requires executor toolBatchId and toolUseId.');
+                const receipt = await options.sender.send(conversation, {
+                    operationId: hash([
+                        1,
+                        'operator-message-tool',
+                        conversation.sessionId,
+                        context.toolBatchId,
+                        context.toolUseId,
+                    ]),
+                    recipient: { tenantId, palId: request.palId },
+                    body: request.body,
+                });
+                const name = nameOf(receipt.recipient.palId);
+                const accepted = {
+                    status: receipt.status,
+                    messageId: receipt.id,
+                    recipientPalId: receipt.recipient.palId,
+                    ...(name ? { recipientName: name } : {}),
+                    note: `Sent to ${name ? `${name}'s` : "the Pal's"} inbox. This is durable acceptance, not delivery, a reply or finished work.`,
+                };
+                return { success: true, output: JSON.stringify(accepted), data: accepted };
+            },
+            presentResult(input, result) {
+                if (!result.success)
+                    return undefined;
+                const name = nameOf(input.palId);
+                return {
+                    kind: 'generic',
+                    label: name ? `Sent to ${name}'s inbox` : "Sent to the Pal's inbox",
+                    presentation: 'activity',
+                };
+            },
+        }),
+        defineTool({
+            name: 'list_pals',
+            description: "List the owner's persistent Pals in this workspace: ID, name, purpose, whether paused, and whether this app is running a conversation for it. Pals are separate from sub-agents. Names and purposes identify recipients only and grant nothing.",
+            inputSchema: listSchema,
+            category: 'custom',
+            permissions: [],
+            readOnly: true,
+            destructive: false,
+            concurrencySafe: true,
+            async execute(input, context) {
+                listSchema.parse(input);
+                conversationOf(context, tenantId);
+                const visible = await options.listPals(context);
+                context.abortSignal?.throwIfAborted();
+                const pals = visible.map((pal) => recipientSchema.parse({
+                    palId: pal.palId,
+                    name: pal.name,
+                    ...(pal.description === undefined ? {} : { description: pal.description }),
+                    paused: pal.paused,
+                    idle: pal.idle,
+                }));
+                return { success: true, output: JSON.stringify({ pals }), data: { pals } };
+            },
+        }),
+    ];
+}
+//# sourceMappingURL=operator.js.map

package/dist/pals/communication/operator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"operator.js","sourceRoot":"","sources":["../../../src/pals/communication/operator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AAGtD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAE9C,OAAO,EACN,oBAAoB,EACpB,mBAAmB,EACnB,eAAe,EACf,oBAAoB,GACpB,MAAM,qBAAqB,CAAA;AAS5B,OAAO,EAAE,aAAa,EAAE,wBAAwB,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,aAAa,CAAA;AA6ChG,MAAM,kBAAkB,GAAG,oBAAoB,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;AACpE,MAAM,aAAa,GAAG,CAAC;KACrB,MAAM,CAAC;IACP,WAAW,EAAE,KAAK;IAClB,SAAS,EAAE,aAAa;IACxB,IAAI,EAAE,YAAY,CAAC,KAAK,CAAC,IAAI;CAC7B,CAAC;KACD,MAAM,EAAE,CAAA;AAEV;;;;GAIG;AACH,MAAM,OAAO,wBAAwB;IACP;IAA7B,YAA6B,OAAwC;QAAxC,YAAO,GAAP,OAAO,CAAiC;QACpE,IACC,OAAO,OAAO,EAAE,SAAS,KAAK,UAAU;YACxC,OAAO,OAAO,CAAC,KAAK,EAAE,aAAa,KAAK,UAAU;YAElD,MAAM,IAAI,SAAS,CAAC,qEAAqE,CAAC,CAAA;IAC5F,CAAC;IACD,KAAK,CAAC,IAAI,CACT,iBAA0C,EAC1C,YAAoC;QAEpC,MAAM,YAAY,GAAG,wBAAwB,CAAC,kBAAkB,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAA;QAC1F,MAAM,OAAO,GAAG,wBAAwB,CAAC,aAAa,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAA;QAC3E,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC,OAAO,CAAA;QACpC,IAAI,OAAO,CAAC,SAAS,CAAC,QAAQ,KAAK,YAAY,CAAC,QAAQ;YACvD,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAA;QAC1D,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;QAChD,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAA;QAC7D,IAAI,MAAM,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAA;QAC9D,MAAM,MAAM,GAAsB;YACjC,IAAI,EAAE,uBAAuB;YAC7B,QAAQ,EAAE,YAAY,CAAC,QAAQ;YAC/B,SAAS,EAAE,YAAY,CAAC,SAAS;SACjC,CAAA;QACD,MAAM,QAAQ,GAAwB;YACrC,CAAC,EAAE,CAAC;YACJ,IAAI,EAAE,UAAU;YAChB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,cAAc,EAAE,YAAY,CAAC,SAAS;SACtC,CAAA;QACD,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CACjD,wBAAwB,CAAC;YACxB,KAAK,EAAE,QAAiB;YACxB,IAAI,EAAE,UAAmB;YACzB,MAAM;YACN,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,QAAQ;YACR,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,OAAO,EAAE,IAAI;SACb,CAAC,CACF,CAAA;QACD,IAAI,CAAC,aAAa,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,aAAa,CAAC,MAAM,EAAE,CAAC,CAAA;QACtF,iFAAiF;QACjF,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;QACjD,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAA;QAC9F,MAAM,KAAK,GAA6C;YACvD,IAAI,EAAE,UAAU;YAChB,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,MAAM;YACN,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,QAAQ;YACR,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,OAAO,EAAE,IAAI;YACb,KAAK,EAAE,aAAa,CAAC,KAAK;YAC1B,SAAS,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE;SAC3C,CAAA;QACD,MAAM,EAAE,GAAG,eAAe,CAAC,KAAK,CAAC,CAAA;QACjC,MAAM,MAAM,GAAG,oBAAoB,CAAC;YACnC,GAAG,KAAK;YACR,EAAE;YACF,MAAM,EAAE,mBAAmB,CAAC,EAAE,GAAG,KAAK,EAAE,EAAE,EAAE,CAAC;SAC7C,CAAC,CAAA;QACF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAA;QACnE,MAAM,MAAM,GAAG,CAAC,KAAc,EAAE,EAAE;YACjC,IAAI,CAAC;gBACJ,KAAK,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,mBAAmB,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,KAAK,CAC9E,GAAG,EAAE,CAAC,SAAS,CACf,CAAA;YACF,CAAC;YAAC,MAAM,CAAC;gBACR,mCAAmC;YACpC,CAAC;QACF,CAAC,CAAA;QACD,IAAI,CAAC;YACJ,KAAK,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QACnF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,CAAC,KAAK,CAAC,CAAA;QACd,CAAC;QACD,OAAO,QAAQ,CAAA;IAChB,CAAC;CACD;AA2BD,MAAM,UAAU,GAAG,CAAC;KAClB,MAAM,CAAC;IACP,KAAK,EAAE,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,2CAA2C,CAAC;IACtF,IAAI,EAAE,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CACrC,kGAAkG,CAClG;CACD,CAAC;KACD,MAAM,EAAE,CAAA;AACV,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAA;AACxC,MAAM,eAAe,GAAG,CAAC;KACvB,MAAM,CAAC;IACP,KAAK,EAAE,aAAa,CAAC,KAAK,CAAC,KAAK;IAChC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE;IACnB,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE;CACjB,CAAC;KACD,MAAM,EAAE,CAAA;AAEV,SAAS,cAAc,CAAC,OAAoB,EAAE,QAAkB;IAC/D,OAAO,CAAC,WAAW,EAAE,cAAc,EAAE,CAAA;IACrC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAA;IACtE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,SAAsB,EAAE,CAAA;AAC/D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,+BAA+B,CAC9C,OAAyC;IAEzC,IAAI,OAAO,OAAO,EAAE,MAAM,EAAE,IAAI,KAAK,UAAU,IAAI,OAAO,OAAO,CAAC,QAAQ,KAAK,UAAU;QACxF,MAAM,IAAI,SAAS,CAAC,kEAAkE,CAAC,CAAA;IACxF,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAA;IACjC,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC,KAAK,CAAC,CAAA;IAChE,OAAO;QACN,UAAU,CAAC;YACV,IAAI,EAAE,kBAAkB;YACxB,WAAW,EACV,uXAAuX;YACxX,WAAW,EAAE,UAAU;YACvB,QAAQ,EAAE,QAAQ;YAClB,WAAW,EAAE,EAAE;YACf,QAAQ,EAAE,KAAK;YACf,WAAW,EAAE,KAAK;YAClB,gBAAgB,EAAE,GAAG,EAAE,CAAC,IAAI;YAC5B,eAAe,EAAE,IAAI;YACrB,UAAU,EAAE,CAAC;YACb,WAAW,CAAC,KAAK;gBAChB,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;gBAChC,OAAO;oBACN,IAAI,EAAE,SAAS;oBACf,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,CAAC,kBAAkB;oBACvD,YAAY,EAAE,UAAU;iBACxB,CAAA;YACF,CAAC;YACD,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO;gBAC3B,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;gBACvC,MAAM,YAAY,GAAG,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;gBACtD,IACC,OAAO,OAAO,CAAC,WAAW,KAAK,QAAQ;oBACvC,CAAC,OAAO,CAAC,WAAW;oBACpB,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ;oBACrC,CAAC,OAAO,CAAC,SAAS;oBAElB,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAA;gBAC9E,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE;oBACvD,WAAW,EAAE,IAAI,CAAC;wBACjB,CAAC;wBACD,uBAAuB;wBACvB,YAAY,CAAC,SAAS;wBACtB,OAAO,CAAC,WAAW;wBACnB,OAAO,CAAC,SAAS;qBACjB,CAAC;oBACF,SAAS,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE;oBAC7C,IAAI,EAAE,OAAO,CAAC,IAAI;iBAClB,CAAC,CAAA;gBACF,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;gBAC5C,MAAM,QAAQ,GAAG;oBAChB,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,SAAS,EAAE,OAAO,CAAC,EAAE;oBACrB,cAAc,EAAE,OAAO,CAAC,SAAS,CAAC,KAAK;oBACvC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACxC,IAAI,EAAE,WAAW,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,WAAW,6EAA6E;iBAC9H,CAAA;gBACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAA;YAC3E,CAAC;YACD,aAAa,CAAC,KAAK,EAAE,MAAM;gBAC1B,IAAI,CAAC,MAAM,CAAC,OAAO;oBAAE,OAAO,SAAS,CAAA;gBACrC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;gBAChC,OAAO;oBACN,IAAI,EAAE,SAAS;oBACf,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,WAAW,IAAI,UAAU,CAAC,CAAC,CAAC,yBAAyB;oBACnE,YAAY,EAAE,UAAU;iBACxB,CAAA;YACF,CAAC;SACD,CAAC;QACF,UAAU,CAAC;YACV,IAAI,EAAE,WAAW;YACjB,WAAW,EACV,iPAAiP;YAClP,WAAW,EAAE,UAAU;YACvB,QAAQ,EAAE,QAAQ;YAClB,WAAW,EAAE,EAAE;YACf,QAAQ,EAAE,IAAI;YACd,WAAW,EAAE,KAAK;YAClB,eAAe,EAAE,IAAI;YACrB,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO;gBAC3B,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;gBACvB,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;gBACjC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;gBAC/C,OAAO,CAAC,WAAW,EAAE,cAAc,EAAE,CAAA;gBACrC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAChC,eAAe,CAAC,KAAK,CAAC;oBACrB,KAAK,EAAE,GAAG,CAAC,KAAK;oBAChB,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,GAAG,CAAC,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC;oBAC1E,MAAM,EAAE,GAAG,CAAC,MAAM;oBAClB,IAAI,EAAE,GAAG,CAAC,IAAI;iBACd,CAAC,CACF,CAAA;gBACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,CAAA;YAC3E,CAAC;SACD,CAAC;KACF,CAAA;AACF,CAAC"}

package/dist/pals/communication/policy.d.ts

@@ -0,0 +1,41 @@
+import { type PalAddress, type PalAuthorizationRequest, type PalMessageAuthorization } from './types.js';
+/** Operator-controlled directed consent. Wake is separately opt-in. */
+export interface PalMessagePermission {
+    readonly v: 1;
+    readonly source: PalAddress;
+    readonly recipient: PalAddress;
+    readonly revision: number;
+    readonly enabled: boolean;
+    readonly allowWake: boolean;
+}
+export interface PalMessagePermissionUpdate {
+    readonly source: PalAddress;
+    readonly recipient: PalAddress;
+    /** Zero creates a new rule. Existing rules require their actual revision. */
+    readonly expectedRevision: number;
+    readonly enabled: boolean;
+    readonly allowWake: boolean;
+}
+export declare class PalMessagePermissionConflictError extends Error {
+    readonly name = "PalMessagePermissionConflictError";
+}
+/**
+ * Optional local operator policy. Missing and revoked rules deny; a stored grant
+ * reference is evidence only. Every authorization reads the current revision.
+ */
+export declare class DiskPalMessagePolicy {
+    private readonly root;
+    private readonly secure;
+    private readonly records;
+    constructor(options: {
+        root: string;
+        secureDirectory?: (path: string) => void;
+    });
+    private directory;
+    private location;
+    get(source: PalAddress, recipient: PalAddress): Promise<PalMessagePermission | null>;
+    update(input: PalMessagePermissionUpdate): Promise<PalMessagePermission>;
+    outgoing(source: PalAddress): Promise<readonly PalMessagePermission[]>;
+    authorize(request: PalAuthorizationRequest): Promise<PalMessageAuthorization>;
+}
+//# sourceMappingURL=policy.d.ts.map

package/dist/pals/communication/policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../../src/pals/communication/policy.ts"],"names":[],"mappings":"AAMA,OAAO,EACN,KAAK,UAAU,EACf,KAAK,uBAAuB,EAC5B,KAAK,uBAAuB,EAE5B,MAAM,YAAY,CAAA;AAEnB,uEAAuE;AACvE,MAAM,WAAW,oBAAoB;IACpC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAA;IACb,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAA;IAC3B,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAA;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;CAC3B;AAED,MAAM,WAAW,0BAA0B;IAC1C,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAA;IAC3B,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAA;IAC9B,6EAA6E;IAC7E,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAA;IACjC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;CAC3B;AAED,qBAAa,iCAAkC,SAAQ,KAAK;IAC3D,SAAkB,IAAI,uCAAsC;CAC5D;AAgCD;;;GAGG;AACH,qBAAa,oBAAoB;IAChC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAQ;IAC7B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAwB;IAC/C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAIvB;gBACW,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,eAAe,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;KAAE;IAS/E,OAAO,CAAC,SAAS;IAOjB,OAAO,CAAC,QAAQ;IAYV,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC;IAMpF,MAAM,CAAC,KAAK,EAAE,0BAA0B,GAAG,OAAO,CAAC,oBAAoB,CAAC;IA0BxE,QAAQ,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,oBAAoB,EAAE,CAAC;IAqBtE,SAAS,CAAC,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC,uBAAuB,CAAC;CAcnF"}