@open-everywhere/core 0.1.0

package/dist/agent/access/delta.d.ts

@@ -0,0 +1,103 @@
+import { type Bundle, type Connection, type HttpMethod } from "./bundle.js";
+import { type Group } from "../identity/groups.js";
+import { type Domain } from "../memory/domain.js";
+import type { EffectiveAccess } from "./resolver.js";
+import type { ConnectorCredentials as ConnectorCredentialsCatalogue } from "./connector-credentials.js";
+export declare const OUT_OF_VOCABULARY = "that isn't something I can request automatically \u2014 an admin needs to PR this by hand (edit agent/access/bundles.ts in the config repo).";
+/** The canonical HTTP-method order (bundle.ts's HttpMethod union, in spec order) — used
+ *  for validation AND for the codemod's stable output ordering. */
+export declare const HTTP_METHODS: readonly HttpMethod[];
+/** The scope a delta targets, tagged by level and carrying exactly that level's one address field. Derived by the tool from the verified binding — the group NAME excepted — never taken from model input. */
+export type RequestingScope = 
+/** The canonical domain that owns the requesting channel: every room the domain admits. */
+{
+    readonly level: "domain";
+    readonly domain: string;
+}
+/** The requesting CHANNEL: `platform/<tenant-id>/<container-id>` (OPE-219's surface key). */
+ | {
+    readonly level: "surface";
+    readonly surface: string;
+}
+/** The requester's OWN DM universe: `platform/<principal-id>` (identity/principal-key.ts). */
+ | {
+    readonly level: "principal";
+    readonly principal: string;
+}
+/** A declared PERSON-GROUP, by bare name (identity/groups.ts) — every member's DM. */
+ | {
+    readonly level: "group";
+    readonly group: string;
+};
+export declare function sameScope(a: RequestingScope, b: RequestingScope): boolean;
+/** The per-level address grammar, run by both the plan path and the codemod; `undefined` means well-formed. A `directory:` group is refused unconditionally: that namespace is the machine-owned IdP overlay, which the codemod cannot see. */
+export declare function requestingScopeProblem(scope: RequestingScope): string | undefined;
+/** What every delta carries. `allowBroad` is the acknowledgement the broad-grant lint demands of a credentialed binding onto a wide person-group; the codemod writes it and never removes one. */
+interface DeltaBase {
+    readonly scope: RequestingScope;
+    readonly allowBroad?: string;
+}
+/** Widen an EXISTING, already-effective connection for the requesting scope only. */
+export interface WidenConnectionDelta extends DeltaBase {
+    readonly kind: "widen-connection";
+    /** Id of the connection being widened (must be effective in `scope` at propose time). */
+    readonly connectionId: string;
+    /** Methods to ADD (already-effective ones are filtered out at plan time). */
+    readonly addMethods: readonly HttpMethod[];
+    /** Path prefixes to ADD (already-effective ones are filtered out at plan time). */
+    readonly addPathPrefixes: readonly string[];
+    /** FROZEN snapshot of the connection as effective for the scope at PROPOSE time: the codemod clones it plus the additions, so the card and the PR match. Never re-derived at execute time. */
+    readonly baseConnection: Connection;
+}
+/** Bind an already-defined connector, as an already-configured credential, to the requesting scope. */
+export interface GrantConnectorDelta extends DeltaBase {
+    readonly kind: "grant-connector";
+    /** Connector slug (agent/connections/*.ts name) — must be granted SOMEWHERE in config
+     *  already (the defined set) and NOT already effective in `scope`. */
+    readonly connector: string;
+    /** The credential id this scope would reach the connector as. Mandatory, and it must be one the connector's own catalogue declares: the vocabulary can name a configured identity and can never mint one. */
+    readonly credential: string;
+}
+/** The closed vocabulary. Adding a member is a reviewed code change by design. */
+export type AccessDelta = WidenConnectionDelta | GrantConnectorDelta;
+/** The model-facing ask the tool collects — UNTRUSTED until planAccessDelta validates it against loaded config. `scope` is deliberately absent: the tool supplies it from the verified binding. */
+export interface AccessAsk {
+    readonly kind: string;
+    readonly connection?: string;
+    readonly addMethods?: readonly string[];
+    readonly addPathPrefixes?: readonly string[];
+    readonly connector?: string;
+    /** grant-connector: the configured credential id to reach the connector as. Validated against the
+     *  connector's own catalogue at plan time; an unconfigured id is out of vocabulary. */
+    readonly credential?: string;
+    /** The requester's stated why, model-authored. Used here for exactly one decision: it is the `allowBroad` acknowledgement a broad domain/group grant cannot be planned without. */
+    readonly reason?: string;
+}
+/** What planAccessDelta validates against — pure inputs, so the planner is testable without a live config registry. `access` is the access of the SCOPE BEING WIDENED, never of the room the ask arrived in. */
+export interface PlanContext {
+    readonly scope: RequestingScope;
+    readonly access: EffectiveAccess;
+    readonly bundles: readonly Bundle[];
+    /** The closed set of identities a `grant-connector` ask may name. Absent means nothing is configured, so every grant-connector refuses: fail-closed. */
+    readonly connectorCredentials?: readonly ConnectorCredentialsCatalogue[];
+    /** The person-group registry, needed only for a `group` target. Absent means no group is declared, so every group target refuses — never "unknown means fine". */
+    readonly groups?: readonly Group[];
+    /** The canonical domain registry, needed only for a `domain` target. Absent means no domain is declared, so a domain target refuses rather than emitting a binding CI cannot validate. */
+    readonly domains?: readonly Domain[];
+}
+/** Every connector slug the config defines — the names on the one `connectors` grant list, which is the same list scripts/connections-lint.ts reads. */
+export declare function definedConnectors(bundles: readonly Bundle[]): readonly string[];
+/** The credential ids one connector's catalogue declares — the closed set an ask may name. Empty, and therefore refusing, when nothing is configured for that connector. */
+export declare function definedConnectorCredentials(catalogues: readonly ConnectorCredentialsCatalogue[], connector: string): readonly string[];
+/** The longest `allowBroad` reason the planner writes into the overlay. Truncation is visible (an ellipsis), never silent. */
+export declare const ALLOW_BROAD_REASON_MAX = 200;
+/** Flatten the requester's words for the DIFF a human reads: an acknowledgement that spans lines would read as structure the codemod did not write. */
+export declare function normalizeAllowBroadReason(reason: string): string;
+/** Validate one UNTRUSTED ask into a typed AccessDelta against loaded config. Throws a model-relayable refusal for anything invalid, already-effective or out of vocabulary — never a partial delta. */
+export declare function planAccessDelta(ask: AccessAsk, ctx: PlanContext): AccessDelta;
+/** The deterministic one-sentence grant description for the card, the PR title and the admin notice — code text over the frozen delta, never model text. */
+export declare function grantSentence(delta: AccessDelta): string;
+/** The card's rendered-delta lines — the exact machine delta, so the tapping human and the merging admin read what will land in the overlay. */
+export declare function renderDelta(delta: AccessDelta): string[];
+export {};
+//# sourceMappingURL=delta.d.ts.map

package/dist/agent/access/delta.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delta.d.ts","sourceRoot":"","sources":["../../../agent/access/delta.ts"],"names":[],"mappings":"AAEA,OAAO,EAAqC,KAAK,MAAM,EAAE,KAAK,UAAU,EAAE,KAAK,UAAU,EAAE,MAAM,aAAa,CAAC;AAC/G,OAAO,EAA0B,KAAK,KAAK,EAAE,MAAM,uBAAuB,CAAC;AAI3E,OAAO,EAAoB,KAAK,MAAM,EAAE,MAAM,qBAAqB,CAAC;AACpE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,KAAK,EAAE,oBAAoB,IAAI,6BAA6B,EAAE,MAAM,4BAA4B,CAAC;AAExG,eAAO,MAAM,iBAAiB,iJAC6G,CAAC;AAE5I;mEACmE;AACnE,eAAO,MAAM,YAAY,EAAE,SAAS,UAAU,EAAsD,CAAC;AAErG,8MAA8M;AAC9M,MAAM,MAAM,eAAe;AACzB,2FAA2F;AACzF;IAAE,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE;AACvD,6FAA6F;GAC3F;IAAE,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE;AACzD,8FAA8F;GAC5F;IAAE,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE;AAC7D,sFAAsF;GACpF;IAAE,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAexD,wBAAgB,SAAS,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE,eAAe,GAAG,OAAO,CAEzE;AAED,+OAA+O;AAC/O,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,eAAe,GAAG,MAAM,GAAG,SAAS,CA0BjF;AAED,kMAAkM;AAClM,UAAU,SAAS;IACjB,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC;IAChC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,qFAAqF;AACrF,MAAM,WAAW,oBAAqB,SAAQ,SAAS;IACrD,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,yFAAyF;IACzF,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,6EAA6E;IAC7E,QAAQ,CAAC,UAAU,EAAE,SAAS,UAAU,EAAE,CAAC;IAC3C,mFAAmF;IACnF,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,8LAA8L;IAC9L,QAAQ,CAAC,cAAc,EAAE,UAAU,CAAC;CACrC;AAED,uGAAuG;AACvG,MAAM,WAAW,mBAAoB,SAAQ,SAAS;IACpD,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IACjC;0EACsE;IACtE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,6MAA6M;IAC7M,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,kFAAkF;AAClF,MAAM,MAAM,WAAW,GAAG,oBAAoB,GAAG,mBAAmB,CAAC;AAErE,mMAAmM;AACnM,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B;2FACuF;IACvF,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,mLAAmL;IACnL,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,gNAAgN;AAChN,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,wJAAwJ;IACxJ,QAAQ,CAAC,oBAAoB,CAAC,EAAE,SAAS,6BAA6B,EAAE,CAAC;IACzE,kKAAkK;IAClK,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,KAAK,EAAE,CAAC;IACnC,0LAA0L;IAC1L,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACtC;AAMD,wJAAwJ;AACxJ,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,CAG/E;AAED,4KAA4K;AAC5K,wBAAgB,2BAA2B,CACzC,UAAU,EAAE,SAAS,6BAA6B,EAAE,EACpD,SAAS,EAAE,MAAM,GAChB,SAAS,MAAM,EAAE,CAGnB;AAiCD,8HAA8H;AAC9H,eAAO,MAAM,sBAAsB,MAAM,CAAC;AAE1C,uJAAuJ;AACvJ,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAGhE;AAqJD,wMAAwM;AACxM,wBAAgB,eAAe,CAAC,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,WAAW,GAAG,WAAW,CAe7E;AAED,4JAA4J;AAC5J,wBAAgB,aAAa,CAAC,KAAK,EAAE,WAAW,GAAG,MAAM,CASxD;AAED,gJAAgJ;AAChJ,wBAAgB,WAAW,CAAC,KAAK,EAAE,WAAW,GAAG,MAAM,EAAE,CAcxD"}

package/dist/agent/access/delta.js

@@ -0,0 +1,267 @@
+// The CLOSED vocabulary an ask must compress into: widen a connection already effective in the scope, or grant an already-defined connector as an already-configured credential. The scope is derived from the verified binding and canonical domain roster (a group NAME excepted) and a delta may alter only that scope; a broad domain/group grant is refused unless the ask gives the `allowBroad` reason.
+import { SURFACE_KEY, bundleConnectorNames } from "./bundle.js";
+import { DIRECTORY_GROUP_PREFIX } from "../identity/groups.js";
+import { isQualifiedPrincipalKey } from "../identity/principal-key.js";
+import { tenantRungRemedy } from "./tenant-admission.js";
+import { groupWidth } from "./lint.js";
+import { domainContainers } from "../memory/domain.js";
+export const OUT_OF_VOCABULARY = "that isn't something I can request automatically — an admin needs to PR this by hand (edit agent/access/bundles.ts in the config repo).";
+/** The canonical HTTP-method order (bundle.ts's HttpMethod union, in spec order) — used
+ *  for validation AND for the codemod's stable output ordering. */
+export const HTTP_METHODS = ["GET", "HEAD", "POST", "PUT", "PATCH", "DELETE"];
+function scopeAddress(scope) {
+    switch (scope.level) {
+        case "domain":
+            return scope.domain;
+        case "surface":
+            return scope.surface;
+        case "principal":
+            return scope.principal;
+        case "group":
+            return scope.group;
+    }
+}
+export function sameScope(a, b) {
+    return a.level === b.level && scopeAddress(a) === scopeAddress(b);
+}
+/** The per-level address grammar, run by both the plan path and the codemod; `undefined` means well-formed. A `directory:` group is refused unconditionally: that namespace is the machine-owned IdP overlay, which the codemod cannot see. */
+export function requestingScopeProblem(scope) {
+    switch (scope.level) {
+        case "domain":
+            return scope.domain.trim().length > 0 && !scope.domain.includes("/")
+                ? undefined
+                : `domain="${scope.domain}" is not the bare name of a declared memory domain`;
+        case "surface":
+            return SURFACE_KEY.test(scope.surface ?? "")
+                ? undefined
+                : `surface="${scope.surface}" is not the fully-qualified surface key "platform/<tenant-id>/<container-id>"`;
+        case "principal":
+            return isQualifiedPrincipalKey(scope.principal)
+                ? undefined
+                : `principal="${scope.principal}" is not a well-formed principal key — "platform/<principal-id>", or "platform/<tenant-id>/<principal-id>" on a tenant-scoped platform (e.g. "slack/T0AB1CD2E/U0123ABC", "discord/300000000000000104")${tenantRungRemedy(scope.principal ?? "")}`;
+        case "group": {
+            const name = scope.group ?? "";
+            if (name.trim().length === 0)
+                return "group name is empty — a group grant needs the bare name of a declared person-group";
+            if (/[\s/]/u.test(name)) {
+                return `group="${name}" must be a BARE name with no whitespace or "/" (it names the overlay bundle \`grants:group:<name>\`)`;
+            }
+            if (name.startsWith(DIRECTORY_GROUP_PREFIX)) {
+                return `group="${name}" is in the reserved "${DIRECTORY_GROUP_PREFIX}" namespace, which belongs to the machine-owned IdP-group overlay — a grant onto a directory-synced group is a hand PR`;
+            }
+            return undefined;
+        }
+    }
+}
+function isHttpMethod(v) {
+    return HTTP_METHODS.includes(v);
+}
+/** Every connector slug the config defines — the names on the one `connectors` grant list, which is the same list scripts/connections-lint.ts reads. */
+export function definedConnectors(bundles) {
+    // Names only: a request can never mint a `contentOrigin` declaration, which is an operator assertion.
+    return [...new Set(bundles.flatMap((b) => bundleConnectorNames(b)))].sort();
+}
+/** The credential ids one connector's catalogue declares — the closed set an ask may name. Empty, and therefore refusing, when nothing is configured for that connector. */
+export function definedConnectorCredentials(catalogues, connector) {
+    const cfg = catalogues.find((c) => c.connector === connector);
+    return [...(cfg?.credentials ?? [])].map((c) => c.id).sort();
+}
+/** The formal name of the universe a grant lands in, for the card, the PR title and the admin note. Deterministic code text over the frozen delta; it never quotes anything a model wrote. */
+function scopeWhere(scope) {
+    switch (scope.level) {
+        case "domain":
+            return `domain "${scope.domain}" (every room it admits)`;
+        case "surface":
+            return `surface ${scope.surface}`;
+        case "principal":
+            return `the personal DM universe of ${scope.principal}`;
+        case "group":
+            return `person-group "${scope.group}" (every member's own DM)`;
+    }
+}
+function scopeHere(scope) {
+    switch (scope.level) {
+        case "domain":
+            return `domain "${scope.domain}"`;
+        case "surface":
+            return "this channel";
+        case "principal":
+            return "your own DM universe";
+        case "group":
+            return `person-group "${scope.group}"`;
+    }
+}
+function scopeTarget(scope) {
+    return scope.level === "surface" ? scope.surface : `${scope.level}:${scopeAddress(scope)}`;
+}
+/** The longest `allowBroad` reason the planner writes into the overlay. Truncation is visible (an ellipsis), never silent. */
+export const ALLOW_BROAD_REASON_MAX = 200;
+/** Flatten the requester's words for the DIFF a human reads: an acknowledgement that spans lines would read as structure the codemod did not write. */
+export function normalizeAllowBroadReason(reason) {
+    const flat = reason.replace(/\s+/gu, " ").trim();
+    return flat.length > ALLOW_BROAD_REASON_MAX ? `${flat.slice(0, ALLOW_BROAD_REASON_MAX - 1)}…` : flat;
+}
+/** Group-target pre-checks, from the registry rather than the ask: refuse an undeclared group, and refuse a BROAD group whose ask gave no reason, since CI fails an unacknowledged broad credentialed binding. A narrow group gets none. */
+function planGroupTarget(ask, ctx) {
+    if (ctx.scope.level !== "group")
+        return undefined;
+    const name = ctx.scope.group;
+    const declared = ctx.groups ?? [];
+    const group = declared.find((g) => g.name === name);
+    if (!group) {
+        throw new Error(`"${name}" isn't a declared person-group (declared: ${declared.length ? declared.map((g) => g.name).join(", ") : "none"}) — ` +
+            `groups live in agent/identity/groups.ts and are added by PR, so ${OUT_OF_VOCABULARY}`);
+    }
+    const width = groupWidth(group);
+    if (!width)
+        return undefined;
+    const reason = (ask.reason ?? "").trim();
+    if (reason.length === 0) {
+        throw new Error(`granting "${name}" is a BROAD grant — ${width}. CI refuses a broad credentialed grant that nobody acknowledged, ` +
+            `so this request needs a reason: say why the whole group should have it, and I'll record it on the binding as \`allowBroad\` for the merging admin to read.`);
+    }
+    return normalizeAllowBroadReason(reason);
+}
+/** Domain-target pre-checks. A container or wildcard reach can admit future rooms without another
+ * binding diff, so it needs the same reviewed `allowBroad` acknowledgement the config lint requires. */
+function planDomainTarget(ask, ctx) {
+    if (ctx.scope.level !== "domain")
+        return undefined;
+    const domainName = ctx.scope.domain;
+    const domain = (ctx.domains ?? []).find((candidate) => candidate.name === domainName);
+    if (!domain) {
+        throw new Error(`"${domainName}" isn't a declared memory domain — domain targets are resolved from the server's canonical roster, so ${OUT_OF_VOCABULARY}`);
+    }
+    const containers = domainContainers(domain);
+    if (containers.length === 0)
+        return undefined;
+    const reason = (ask.reason ?? "").trim();
+    if (reason.length === 0) {
+        throw new Error(`granting domain "${domain.name}" is a BROAD grant — its reach includes container rule(s) ${containers.join(", ")}, so matching current and future rooms receive the credential without another binding diff. ` +
+            `CI refuses that generated binding unless the widening is acknowledged, so this request needs a reason: say why every room those rules admit should have it, and I'll record it on the binding as \`allowBroad\` for the tapping member and merging admin to read.`);
+    }
+    return normalizeAllowBroadReason(reason);
+}
+function planWidenConnection(ask, ctx, allowBroad) {
+    if (!ask.connection || !ask.connection.trim()) {
+        throw new Error(`widen-connection needs the connection id to widen — ${OUT_OF_VOCABULARY}`);
+    }
+    const id = ask.connection.trim();
+    // The connection must already be effective here: widening is more of what you have, and a new grant of a credentialed plane is out of vocabulary.
+    const base = ctx.access.connections.find((c) => c.id === id);
+    if (!base) {
+        throw new Error(`connection "${id}" isn't effective in ${scopeHere(ctx.scope)} (effective there: ${ctx.access.connections.length ? ctx.access.connections.map((c) => c.id).join(", ") : "none"}) — ${OUT_OF_VOCABULARY}`);
+    }
+    const rawMethods = [...new Set((ask.addMethods ?? []).map((m) => m.trim().toUpperCase()))];
+    const badMethods = rawMethods.filter((m) => !isHttpMethod(m));
+    if (badMethods.length > 0) {
+        throw new Error(`unknown HTTP method(s) ${badMethods.join(", ")} — the vocabulary covers ${HTTP_METHODS.join(", ")} only.`);
+    }
+    const rawPrefixes = [...new Set((ask.addPathPrefixes ?? []).map((p) => p.trim()))].filter((p) => p.length > 0);
+    const badPrefixes = rawPrefixes.filter((p) => !p.startsWith("/") || /\s/u.test(p));
+    if (badPrefixes.length > 0) {
+        throw new Error(`path prefix(es) ${badPrefixes.join(", ")} must start with "/" and contain no whitespace.`);
+    }
+    if (rawMethods.length === 0 && rawPrefixes.length === 0) {
+        throw new Error("widen-connection needs at least one method or path prefix to add — nothing was requested.");
+    }
+    // Filter to what would actually CHANGE effective access. An unrestricted base already allows every method or path, and adding a prefix list to one would NARROW it, which is not this tool's job.
+    const addMethods = base.methods === undefined ? [] : rawMethods.filter((m) => !base.methods.includes(m));
+    const addPathPrefixes = base.pathPrefixes === undefined ? [] : rawPrefixes.filter((p) => !base.pathPrefixes.includes(p));
+    if (addMethods.length === 0 && addPathPrefixes.length === 0) {
+        const unrestricted = [];
+        if (rawMethods.length > 0 && base.methods === undefined)
+            unrestricted.push("every method");
+        if (rawPrefixes.length > 0 && base.pathPrefixes === undefined)
+            unrestricted.push("every path");
+        throw new Error(unrestricted.length > 0
+            ? `connection "${id}" already allows ${unrestricted.join(" and ")} in ${scopeHere(ctx.scope)} — nothing to widen.`
+            : `connection "${id}" already grants everything requested in ${scopeHere(ctx.scope)} — nothing to request.`);
+    }
+    return {
+        kind: "widen-connection",
+        scope: ctx.scope,
+        ...(allowBroad ? { allowBroad } : {}),
+        connectionId: id,
+        addMethods,
+        addPathPrefixes,
+        baseConnection: base,
+    };
+}
+function planGrantConnector(ask, ctx, allowBroad) {
+    if (!ask.connector || !ask.connector.trim()) {
+        throw new Error(`grant-connector needs the connector name to grant — ${OUT_OF_VOCABULARY}`);
+    }
+    const name = ask.connector.trim();
+    if (ctx.access.connectors.includes(name)) {
+        throw new Error(`connector "${name}" is already granted to ${scopeHere(ctx.scope)} — nothing to request.`);
+    }
+    const defined = definedConnectors(ctx.bundles);
+    if (!defined.includes(name)) {
+        throw new Error(`connector "${name}" isn't defined in this deployment's config (defined: ${defined.length ? defined.join(", ") : "none"}) — ${OUT_OF_VOCABULARY}`);
+    }
+    // The ask must name the credential, and only one this deployment already configured. Absent catalogues mean nothing is configured, which refuses: fail-closed.
+    const configured = definedConnectorCredentials(ctx.connectorCredentials ?? [], name);
+    const credential = ask.credential?.trim();
+    if (!credential) {
+        throw new Error(`grant-connector needs the credential to reach "${name}" as (configured: ${configured.length ? configured.join(", ") : "none"}) — ` +
+            `every grant names its identity, so ask again naming one of those.`);
+    }
+    if (!configured.includes(credential)) {
+        throw new Error(`connector "${name}" has no credential "${credential}" configured (configured: ${configured.length ? configured.join(", ") : "none"}) — ${OUT_OF_VOCABULARY}`);
+    }
+    return {
+        kind: "grant-connector",
+        scope: ctx.scope,
+        ...(allowBroad ? { allowBroad } : {}),
+        connector: name,
+        credential,
+    };
+}
+/** Validate one UNTRUSTED ask into a typed AccessDelta against loaded config. Throws a model-relayable refusal for anything invalid, already-effective or out of vocabulary — never a partial delta. */
+export function planAccessDelta(ask, ctx) {
+    const problem = requestingScopeProblem(ctx.scope);
+    if (problem) {
+        // Defensive: the tool derives the scope from the binding, so a bad one here is a wiring bug. Fail loud rather than freeze a delta that cannot bind.
+        throw new Error(`invalid requesting scope (${ctx.scope.level}) — ${problem}.`);
+    }
+    const allowBroad = planGroupTarget(ask, ctx) ?? planDomainTarget(ask, ctx);
+    switch (ask.kind) {
+        case "widen-connection":
+            return planWidenConnection(ask, ctx, allowBroad);
+        case "grant-connector":
+            return planGrantConnector(ask, ctx, allowBroad);
+        default:
+            throw new Error(`unknown access-request kind "${ask.kind}" — the vocabulary is widen-connection | grant-connector; ${OUT_OF_VOCABULARY}`);
+    }
+}
+/** The deterministic one-sentence grant description for the card, the PR title and the admin notice — code text over the frozen delta, never model text. */
+export function grantSentence(delta) {
+    const where = scopeWhere(delta.scope);
+    if (delta.kind === "grant-connector") {
+        return `Grant connector "${delta.connector}" (as credential "${delta.credential}") to ${where}`;
+    }
+    const parts = [];
+    if (delta.addMethods.length > 0)
+        parts.push(`method${delta.addMethods.length > 1 ? "s" : ""} ${delta.addMethods.join(", ")}`);
+    if (delta.addPathPrefixes.length > 0)
+        parts.push(`path prefix${delta.addPathPrefixes.length > 1 ? "es" : ""} ${delta.addPathPrefixes.join(", ")}`);
+    return `Allow ${parts.join(" and ")} on connection "${delta.connectionId}" for ${where}`;
+}
+/** The card's rendered-delta lines — the exact machine delta, so the tapping human and the merging admin read what will land in the overlay. */
+export function renderDelta(delta) {
+    // The acknowledgement rides the rendered delta because it lands in the DIFF: both the tapping human and the merging admin must see those words.
+    const ack = delta.allowBroad ? [`  allowBroad: ${delta.allowBroad}`] : [];
+    if (delta.kind === "grant-connector") {
+        return ["```" + [`grant-connector: ${delta.connector} (credential ${delta.credential}) → ${scopeTarget(delta.scope)}`, ...ack].join("\n") + "```"];
+    }
+    const lines = [
+        `widen-connection: ${delta.connectionId} → ${scopeTarget(delta.scope)}`,
+        ...(delta.addMethods.length > 0 ? [`  + methods: ${delta.addMethods.join(", ")}`] : []),
+        ...(delta.addPathPrefixes.length > 0 ? [`  + pathPrefixes: ${delta.addPathPrefixes.join(", ")}`] : []),
+        `  base: ${delta.baseConnection.allowedWebsites.join(", ")} (methods: ${delta.baseConnection.methods?.join(",") ?? "all"}; paths: ${delta.baseConnection.pathPrefixes?.join(",") ?? "all"})`,
+        ...ack,
+    ];
+    return ["```" + lines.join("\n") + "```"];
+}
+//# sourceMappingURL=delta.js.map

package/dist/agent/access/delta.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delta.js","sourceRoot":"","sources":["../../../agent/access/delta.ts"],"names":[],"mappings":"AAAA,+YAA+Y;AAE/Y,OAAO,EAAE,WAAW,EAAE,oBAAoB,EAAiD,MAAM,aAAa,CAAC;AAC/G,OAAO,EAAE,sBAAsB,EAAc,MAAM,uBAAuB,CAAC;AAC3E,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AACvE,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,gBAAgB,EAAe,MAAM,qBAAqB,CAAC;AAIpE,MAAM,CAAC,MAAM,iBAAiB,GAC5B,yIAAyI,CAAC;AAE5I;mEACmE;AACnE,MAAM,CAAC,MAAM,YAAY,GAA0B,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;AAarG,SAAS,YAAY,CAAC,KAAsB;IAC1C,QAAQ,KAAK,CAAC,KAAK,EAAE,CAAC;QACpB,KAAK,QAAQ;YACX,OAAO,KAAK,CAAC,MAAM,CAAC;QACtB,KAAK,SAAS;YACZ,OAAO,KAAK,CAAC,OAAO,CAAC;QACvB,KAAK,WAAW;YACd,OAAO,KAAK,CAAC,SAAS,CAAC;QACzB,KAAK,OAAO;YACV,OAAO,KAAK,CAAC,KAAK,CAAC;IACvB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,CAAkB,EAAE,CAAkB;IAC9D,OAAO,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK,IAAI,YAAY,CAAC,CAAC,CAAC,KAAK,YAAY,CAAC,CAAC,CAAC,CAAC;AACpE,CAAC;AAED,+OAA+O;AAC/O,MAAM,UAAU,sBAAsB,CAAC,KAAsB;IAC3D,QAAQ,KAAK,CAAC,KAAK,EAAE,CAAC;QACpB,KAAK,QAAQ;YACX,OAAO,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAClE,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,WAAW,KAAK,CAAC,MAAM,oDAAoD,CAAC;QAClF,KAAK,SAAS;YACZ,OAAO,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC;gBAC1C,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,YAAY,KAAK,CAAC,OAAO,gFAAgF,CAAC;QAChH,KAAK,WAAW;YACd,OAAO,uBAAuB,CAAC,KAAK,CAAC,SAAS,CAAC;gBAC7C,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,cAAc,KAAK,CAAC,SAAS,yMAAyM,gBAAgB,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,CAAC;QACtR,KAAK,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;YAC/B,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,oFAAoF,CAAC;YAC1H,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACxB,OAAO,UAAU,IAAI,uGAAuG,CAAC;YAC/H,CAAC;YACD,IAAI,IAAI,CAAC,UAAU,CAAC,sBAAsB,CAAC,EAAE,CAAC;gBAC5C,OAAO,UAAU,IAAI,yBAAyB,sBAAsB,wHAAwH,CAAC;YAC/L,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;AACH,CAAC;AA6DD,SAAS,YAAY,CAAC,CAAS;IAC7B,OAAQ,YAAkC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AACzD,CAAC;AAED,wJAAwJ;AACxJ,MAAM,UAAU,iBAAiB,CAAC,OAA0B;IAC1D,sGAAsG;IACtG,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAC9E,CAAC;AAED,4KAA4K;AAC5K,MAAM,UAAU,2BAA2B,CACzC,UAAoD,EACpD,SAAiB;IAEjB,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC;IAC9D,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;AAC/D,CAAC;AAED,8LAA8L;AAC9L,SAAS,UAAU,CAAC,KAAsB;IACxC,QAAQ,KAAK,CAAC,KAAK,EAAE,CAAC;QACpB,KAAK,QAAQ;YACX,OAAO,WAAW,KAAK,CAAC,MAAM,0BAA0B,CAAC;QAC3D,KAAK,SAAS;YACZ,OAAO,WAAW,KAAK,CAAC,OAAO,EAAE,CAAC;QACpC,KAAK,WAAW;YACd,OAAO,+BAA+B,KAAK,CAAC,SAAS,EAAE,CAAC;QAC1D,KAAK,OAAO;YACV,OAAO,iBAAiB,KAAK,CAAC,KAAK,2BAA2B,CAAC;IACnE,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,KAAsB;IACvC,QAAQ,KAAK,CAAC,KAAK,EAAE,CAAC;QACpB,KAAK,QAAQ;YACX,OAAO,WAAW,KAAK,CAAC,MAAM,GAAG,CAAC;QACpC,KAAK,SAAS;YACZ,OAAO,cAAc,CAAC;QACxB,KAAK,WAAW;YACd,OAAO,sBAAsB,CAAC;QAChC,KAAK,OAAO;YACV,OAAO,iBAAiB,KAAK,CAAC,KAAK,GAAG,CAAC;IAC3C,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,KAAsB;IACzC,OAAO,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,IAAI,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;AAC7F,CAAC;AAED,8HAA8H;AAC9H,MAAM,CAAC,MAAM,sBAAsB,GAAG,GAAG,CAAC;AAE1C,uJAAuJ;AACvJ,MAAM,UAAU,yBAAyB,CAAC,MAAc;IACtD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACjD,OAAO,IAAI,CAAC,MAAM,GAAG,sBAAsB,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,sBAAsB,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AACvG,CAAC;AAED,4OAA4O;AAC5O,SAAS,eAAe,CAAC,GAAc,EAAE,GAAgB;IACvD,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,OAAO;QAAE,OAAO,SAAS,CAAC;IAClD,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC;IAC7B,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC;IAClC,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IACpD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,IAAI,IAAI,8CAA8C,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,MAAM;YAC3H,mEAAmE,iBAAiB,EAAE,CACzF,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IAChC,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACzC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CACb,aAAa,IAAI,wBAAwB,KAAK,oEAAoE;YAChH,4JAA4J,CAC/J,CAAC;IACJ,CAAC;IACD,OAAO,yBAAyB,CAAC,MAAM,CAAC,CAAC;AAC3C,CAAC;AAED;wGACwG;AACxG,SAAS,gBAAgB,CAAC,GAAc,EAAE,GAAgB;IACxD,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACnD,MAAM,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC;IACpC,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC;IACtF,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,IAAI,UAAU,yGAAyG,iBAAiB,EAAE,CAC3I,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAC5C,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC9C,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACzC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CACb,oBAAoB,MAAM,CAAC,IAAI,6DAA6D,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,8FAA8F;YAC7M,mQAAmQ,CACtQ,CAAC;IACJ,CAAC;IACD,OAAO,yBAAyB,CAAC,MAAM,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAc,EAAE,GAAgB,EAAE,UAA8B;IAC3F,IAAI,CAAC,GAAG,CAAC,UAAU,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,uDAAuD,iBAAiB,EAAE,CAAC,CAAC;IAC9F,CAAC;IACD,MAAM,EAAE,GAAG,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;IAEjC,kJAAkJ;IAClJ,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7D,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CACb,eAAe,EAAE,wBAAwB,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,sBAC3D,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MACvF,OAAO,iBAAiB,EAAE,CAC3B,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3F,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9D,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,0BAA0B,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,4BAA4B,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9H,CAAC;IAED,MAAM,WAAW,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC/G,MAAM,WAAW,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACnF,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,mBAAmB,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,iDAAiD,CAAC,CAAC;IAC9G,CAAC;IAED,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,2FAA2F,CAAC,CAAC;IAC/G,CAAC;IAED,kMAAkM;IAClM,MAAM,UAAU,GACd,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,OAAQ,CAAC,QAAQ,CAAC,CAAe,CAAC,CAAiB,CAAC;IACvH,MAAM,eAAe,GAAG,IAAI,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,YAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAE1H,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5D,MAAM,YAAY,GAAa,EAAE,CAAC;QAClC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;YAAE,YAAY,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC3F,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS;YAAE,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC/F,MAAM,IAAI,KAAK,CACb,YAAY,CAAC,MAAM,GAAG,CAAC;YACrB,CAAC,CAAC,eAAe,EAAE,oBAAoB,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,sBAAsB;YAClH,CAAC,CAAC,eAAe,EAAE,4CAA4C,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,wBAAwB,CAC9G,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI,EAAE,kBAAkB;QACxB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrC,YAAY,EAAE,EAAE;QAChB,UAAU;QACV,eAAe;QACf,cAAc,EAAE,IAAI;KACrB,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAc,EAAE,GAAgB,EAAE,UAA8B;IAC1F,IAAI,CAAC,GAAG,CAAC,SAAS,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,uDAAuD,iBAAiB,EAAE,CAAC,CAAC;IAC9F,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;IAElC,IAAI,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,cAAc,IAAI,2BAA2B,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC7G,CAAC;IAED,MAAM,OAAO,GAAG,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC/C,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CACb,cAAc,IAAI,yDAAyD,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,OAAO,iBAAiB,EAAE,CAClJ,CAAC;IACJ,CAAC;IAED,+JAA+J;IAC/J,MAAM,UAAU,GAAG,2BAA2B,CAAC,GAAG,CAAC,oBAAoB,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;IACrF,MAAM,UAAU,GAAG,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC;IAC1C,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CACb,kDAAkD,IAAI,qBAAqB,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,MAAM;YACjI,mEAAmE,CACtE,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CACb,cAAc,IAAI,wBAAwB,UAAU,6BAA6B,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,OAAO,iBAAiB,EAAE,CAC9J,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI,EAAE,iBAAiB;QACvB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrC,SAAS,EAAE,IAAI;QACf,UAAU;KACX,CAAC;AACJ,CAAC;AAED,wMAAwM;AACxM,MAAM,UAAU,eAAe,CAAC,GAAc,EAAE,GAAgB;IAC9D,MAAM,OAAO,GAAG,sBAAsB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAClD,IAAI,OAAO,EAAE,CAAC;QACZ,oJAAoJ;QACpJ,MAAM,IAAI,KAAK,CAAC,6BAA6B,GAAG,CAAC,KAAK,CAAC,KAAK,OAAO,OAAO,GAAG,CAAC,CAAC;IACjF,CAAC;IACD,MAAM,UAAU,GAAG,eAAe,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC3E,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC;QACjB,KAAK,kBAAkB;YACrB,OAAO,mBAAmB,CAAC,GAAG,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;QACnD,KAAK,iBAAiB;YACpB,OAAO,kBAAkB,CAAC,GAAG,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;QAClD;YACE,MAAM,IAAI,KAAK,CAAC,gCAAgC,GAAG,CAAC,IAAI,6DAA6D,iBAAiB,EAAE,CAAC,CAAC;IAC9I,CAAC;AACH,CAAC;AAED,4JAA4J;AAC5J,MAAM,UAAU,aAAa,CAAC,KAAkB;IAC9C,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACtC,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;QACrC,OAAO,oBAAoB,KAAK,CAAC,SAAS,qBAAqB,KAAK,CAAC,UAAU,SAAS,KAAK,EAAE,CAAC;IAClG,CAAC;IACD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,SAAS,KAAK,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC9H,IAAI,KAAK,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,cAAc,KAAK,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnJ,OAAO,SAAS,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,mBAAmB,KAAK,CAAC,YAAY,SAAS,KAAK,EAAE,CAAC;AAC3F,CAAC;AAED,gJAAgJ;AAChJ,MAAM,UAAU,WAAW,CAAC,KAAkB;IAC5C,gJAAgJ;IAChJ,MAAM,GAAG,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,iBAAiB,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1E,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;QACrC,OAAO,CAAC,KAAK,GAAG,CAAC,oBAAoB,KAAK,CAAC,SAAS,gBAAgB,KAAK,CAAC,UAAU,OAAO,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC;IACrJ,CAAC;IACD,MAAM,KAAK,GAAG;QACZ,qBAAqB,KAAK,CAAC,YAAY,MAAM,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;QACvE,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,gBAAgB,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvF,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,qBAAqB,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACtG,WAAW,KAAK,CAAC,cAAc,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,KAAK,CAAC,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,YAAY,KAAK,CAAC,cAAc,CAAC,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,GAAG;QAC5L,GAAG,GAAG;KACP,CAAC;IACF,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC;AAC5C,CAAC"}

package/dist/agent/access/dispatch-origin-signal.d.ts

@@ -0,0 +1,19 @@
+export interface DispatchedTaskWake {
+    readonly taskId: string;
+    readonly wakeId: string;
+}
+/** Capture the wake ids the host attributed to this turn's delivery. Human deliveries use the full
+ * rendered envelope; host-only routine fires use the same structured wake marker without inventing
+ * a trigger message. Two distinct ids are enough to make pre-reply delegation ambiguous, so the
+ * durable set is capped at two. */
+export declare function recordDeliveredWakes(turnId: string | undefined, message: string | undefined): void;
+/** Exact authority for a delegation before the turn has replied: one and only one delivered wake. */
+export declare function exactDispatchWakeThisTurn(turnId: string | undefined): string | undefined;
+/** The wake this turn has addressed. `undefined` means the dispatch edge must use a positively
+ * singleton delivered wake or refuse; the mutable last-delivery auth is never an authority. */
+export declare function addressedWakeThisTurn(turnId: string | undefined): string | undefined;
+/** Records that this turn dispatched a task, so the first wake the turn addresses can re-point it. Records NOTHING once the turn has already addressed a wake, because such a dispatch read the addressed wake at the edge and is already right. */
+export declare function noteTaskDispatchedThisTurn(turnId: string | undefined, taskId: string, wakeId: string): void;
+/** Returns the tasks whose registered origin must now be re-pointed at the just-addressed wake, and empties the ledger in the same update so a second reply in the turn claims nothing. Returns an EMPTY list, while still recording the address, whenever there is nothing to move or anything is unreadable. */
+export declare function claimTasksForAddressedWake(turnId: string | undefined, wakeId: string): readonly DispatchedTaskWake[];
+//# sourceMappingURL=dispatch-origin-signal.d.ts.map

package/dist/agent/access/dispatch-origin-signal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatch-origin-signal.d.ts","sourceRoot":"","sources":["../../../agent/access/dispatch-origin-signal.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AA4CD;;;mCAGmC;AACnC,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAclG;AAED,qGAAqG;AACrG,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CASxF;AAED;+FAC+F;AAC/F,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAQpF;AAED,oPAAoP;AACpP,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAe3G;AAED,kTAAkT;AAClT,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS,kBAAkB,EAAE,CAgBpH"}

package/dist/agent/access/dispatch-origin-signal.js

@@ -0,0 +1,130 @@
+// A background task's answer belongs to the conversation the turn ADDRESSED, not the delivery `currentWakeId` names — a turn that merged queued deliveries carries only the last delivery's auth. The FIRST addressed wake wins, once per turn, and re-points tasks dispatched earlier in the turn; outside an eve context every function no-ops or answers empty.
+// 🔴 THAT MERGE IS UNREACHABLE ON eve 0.54.3, AND THIS SIGNAL STAYS ANYWAY (OPE-2042). eve batches adjacent queued deliveries only when their full auth contexts match, and OE stamps a fresh per-delivery `oe_delivery_id` into `auth.attributes`, so two auth-carrying deliveries on one unified window never compare equal. Only the caller-less task COMPLETION COHORT still folds, and it carries no `auth` at all. But the turn's ctx names the wrong conversation WITHOUT any merge too: a turn woken by an INTERNAL wake — an approval decision, a completion — answers a conversation whose envelope is in the seat's shared context, through the reply fence's same-conversation and pending arms. Measured in production on 2026-08-15 (`docs/glossary.md`). So this is LOAD-BEARING, not defensive. `scripts/coalesced-delivery-merge-assumption-test.ts` pins the MERGE road alone.
+import { defineState } from "eve/context";
+import { wakeIdsFromEnvelope } from "../channels/wake-envelope.js";
+const slot = defineState("open-everywhere.dispatch-origin", () => ({}));
+/** How many dispatched tasks one turn tracks. A real turn dispatches a handful; the cap only stops a
+ *  looping turn from growing the serialized container without bound. Past the cap the ledger stops
+ *  recording, so the extra tasks keep the pre-OPE-601 address — it never starts refusing. */
+const MAX_TASKS = 16;
+/** Read the durable value defensively — a resumed session can hand back anything a previous
+ *  deployment wrote. Anything unrecognised reads as "no record". */
+function readState(v) {
+    if (v === null || typeof v !== "object")
+        return {};
+    const s = v;
+    if (typeof s.turn !== "string" || s.turn.length === 0)
+        return {};
+    const tasks = Array.isArray(s.tasks)
+        ? s.tasks.filter((t) => typeof t === "object" &&
+            t !== null &&
+            typeof t.taskId === "string" &&
+            t.taskId.length > 0 &&
+            typeof t.wakeId === "string" &&
+            t.wakeId.length > 0)
+        : [];
+    return {
+        turn: s.turn,
+        ...(typeof s.addressed === "string" && s.addressed.length > 0 ? { addressed: s.addressed } : {}),
+        tasks,
+        deliveredWakes: Array.isArray(s.deliveredWakes)
+            ? [...new Set(s.deliveredWakes.filter((wake) => typeof wake === "string" && wake.length > 0))].slice(0, 2)
+            : [],
+    };
+}
+/** Capture the wake ids the host attributed to this turn's delivery. Human deliveries use the full
+ * rendered envelope; host-only routine fires use the same structured wake marker without inventing
+ * a trigger message. Two distinct ids are enough to make pre-reply delegation ambiguous, so the
+ * durable set is capped at two. */
+export function recordDeliveredWakes(turnId, message) {
+    if (turnId === undefined || turnId.length === 0 || message === undefined)
+        return;
+    const incoming = wakeIdsFromEnvelope(message);
+    if (incoming.length === 0)
+        return;
+    try {
+        slot.update((cur) => {
+            const state = readState(cur);
+            const prior = state.turn === turnId ? (state.deliveredWakes ?? []) : [];
+            const deliveredWakes = [...new Set([...prior, ...incoming])].slice(0, 2);
+            return state.turn === turnId ? { ...state, deliveredWakes } : { turn: turnId, deliveredWakes, tasks: [] };
+        });
+    }
+    catch {
+        /* no eve context means there is no dispatch to authorize */
+    }
+}
+/** Exact authority for a delegation before the turn has replied: one and only one delivered wake. */
+export function exactDispatchWakeThisTurn(turnId) {
+    if (turnId === undefined || turnId.length === 0)
+        return undefined;
+    try {
+        const state = readState(slot.get());
+        if (state.turn !== turnId || state.deliveredWakes?.length !== 1)
+            return undefined;
+        return state.deliveredWakes[0];
+    }
+    catch {
+        return undefined;
+    }
+}
+/** The wake this turn has addressed. `undefined` means the dispatch edge must use a positively
+ * singleton delivered wake or refuse; the mutable last-delivery auth is never an authority. */
+export function addressedWakeThisTurn(turnId) {
+    if (turnId === undefined || turnId.length === 0)
+        return undefined;
+    try {
+        const state = readState(slot.get());
+        return state.turn === turnId ? state.addressed : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+/** Records that this turn dispatched a task, so the first wake the turn addresses can re-point it. Records NOTHING once the turn has already addressed a wake, because such a dispatch read the addressed wake at the edge and is already right. */
+export function noteTaskDispatchedThisTurn(turnId, taskId, wakeId) {
+    if (turnId === undefined || turnId.length === 0)
+        return;
+    if (taskId.length === 0 || wakeId.length === 0)
+        return;
+    try {
+        slot.update((cur) => {
+            const state = readState(cur);
+            if (state.turn !== turnId)
+                return { turn: turnId, tasks: [{ taskId, wakeId }] };
+            if (state.addressed !== undefined)
+                return state; // dispatched AFTER an address ⇒ already right
+            const tasks = state.tasks ?? [];
+            if (tasks.length >= MAX_TASKS || tasks.some((t) => t.taskId === taskId))
+                return state;
+            return { ...state, tasks: [...tasks, { taskId, wakeId }] };
+        });
+    }
+    catch {
+        /* no eve context — nothing to record, and never a reason to disturb the turn */
+    }
+}
+/** Returns the tasks whose registered origin must now be re-pointed at the just-addressed wake, and empties the ledger in the same update so a second reply in the turn claims nothing. Returns an EMPTY list, while still recording the address, whenever there is nothing to move or anything is unreadable. */
+export function claimTasksForAddressedWake(turnId, wakeId) {
+    if (turnId === undefined || turnId.length === 0)
+        return [];
+    if (wakeId.length === 0)
+        return [];
+    let claimed = [];
+    try {
+        slot.update((cur) => {
+            const state = readState(cur);
+            if (state.turn !== turnId)
+                return { turn: turnId, addressed: wakeId, tasks: [] };
+            if (state.addressed !== undefined)
+                return state; // FIRST addressed wake wins — see the header
+            claimed = state.tasks ?? [];
+            return { turn: turnId, addressed: wakeId, tasks: [] };
+        });
+    }
+    catch {
+        return [];
+    }
+    return claimed;
+}
+//# sourceMappingURL=dispatch-origin-signal.js.map

package/dist/agent/access/dispatch-origin-signal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatch-origin-signal.js","sourceRoot":"","sources":["../../../agent/access/dispatch-origin-signal.ts"],"names":[],"mappings":"AAAA,mWAAmW;AACnW,i2BAAi2B;AAEj2B,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAenE,MAAM,IAAI,GAAG,WAAW,CAAsB,iCAAiC,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAE7F;;6FAE6F;AAC7F,MAAM,SAAS,GAAG,EAAE,CAAC;AAErB;oEACoE;AACpE,SAAS,SAAS,CAAC,CAAU;IAC3B,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IACnD,MAAM,CAAC,GAAG,CAAuF,CAAC;IAClG,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACjE,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;QAClC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CACZ,CAAC,CAAC,EAA2B,EAAE,CAC7B,OAAO,CAAC,KAAK,QAAQ;YACrB,CAAC,KAAK,IAAI;YACV,OAAQ,CAAwB,CAAC,MAAM,KAAK,QAAQ;YACnD,CAAwB,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;YAC3C,OAAQ,CAAwB,CAAC,MAAM,KAAK,QAAQ;YACnD,CAAwB,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAC9C;QACH,CAAC,CAAC,EAAE,CAAC;IACP,OAAO;QACL,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,GAAG,CAAC,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChG,KAAK;QACL,cAAc,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC;YAC7C,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;YAC1H,CAAC,CAAC,EAAE;KACP,CAAC;AACJ,CAAC;AAED;;;mCAGmC;AACnC,MAAM,UAAU,oBAAoB,CAAC,MAA0B,EAAE,OAA2B;IAC1F,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO;IACjF,MAAM,QAAQ,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC9C,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAClC,IAAI,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE;YAClB,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;YAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACxE,MAAM,cAAc,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,KAAK,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACzE,OAAO,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;QAC5G,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,4DAA4D;IAC9D,CAAC;AACH,CAAC;AAED,qGAAqG;AACrG,MAAM,UAAU,yBAAyB,CAAC,MAA0B;IAClE,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAClE,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACpC,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,cAAc,EAAE,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAClF,OAAO,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;+FAC+F;AAC/F,MAAM,UAAU,qBAAqB,CAAC,MAA0B;IAC9D,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAClE,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACpC,OAAO,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,oPAAoP;AACpP,MAAM,UAAU,0BAA0B,CAAC,MAA0B,EAAE,MAAc,EAAE,MAAc;IACnG,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACxD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACvD,IAAI,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE;YAClB,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;YAC7B,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;gBAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;YAChF,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS;gBAAE,OAAO,KAAK,CAAC,CAAC,8CAA8C;YAC/F,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;YAChC,IAAI,KAAK,CAAC,MAAM,IAAI,SAAS,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC;gBAAE,OAAO,KAAK,CAAC;YACtF,OAAO,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,CAAC,GAAG,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QAC7D,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,gFAAgF;IAClF,CAAC;AACH,CAAC;AAED,kTAAkT;AAClT,MAAM,UAAU,0BAA0B,CAAC,MAA0B,EAAE,MAAc;IACnF,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC3D,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACnC,IAAI,OAAO,GAAkC,EAAE,CAAC;IAChD,IAAI,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE;YAClB,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;YAC7B,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;gBAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;YACjF,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS;gBAAE,OAAO,KAAK,CAAC,CAAC,6CAA6C;YAC9F,OAAO,GAAG,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;YAC5B,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;QACxD,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/agent/access/domain-credentials.d.ts

@@ -0,0 +1,32 @@
+import type { Domain } from "../memory/domain.js";
+import type { ConnectorCredentials } from "./connector-credentials.js";
+/** One domain's override of one connector credential. It keys on the credential it REPLACES, not on the connector alone, so a vendor with several credential roles stays unambiguous. */
+export interface DomainCredentialOverride {
+    readonly connector: string;
+    /** The ORG-DEFAULT credential id this replaces, i.e. the ROLE (Notion: `"channel-key"`). */
+    readonly credential: string;
+    readonly use: string;
+    /** The operator-secret NAME holding this integration's INBOUND webhook signing key; absent means the deployment's default inbound secret. It is a name, never a credential — inbound signing keys are never resolvable as outbound credentials. */
+    readonly inboundSecret?: string;
+}
+export interface CredentialBoundDomain {
+    readonly name?: string;
+    readonly credentials?: readonly DomainCredentialOverride[];
+}
+/** Undefined means this domain has no override, which every caller reads as "use the org default". */
+export declare function credentialOverrideFor(domain: CredentialBoundDomain | undefined, connector: string, credential: string): DomainCredentialOverride | undefined;
+/** The credential id this domain uses — the override's `use`, else `credential` itself — so every domain resolves to some id and an unbound one resolves to the org default. */
+export declare function domainCredentialId(domain: CredentialBoundDomain | undefined, connector: string, credential: string): string;
+/** One integration this deployment can be reached by. A delivery is authenticated by trying each entry's inbound secret; the one that verifies IDENTIFIES the integration that sent it. */
+export interface ConnectorIntegration {
+    readonly credentialId: string;
+    readonly inboundSecret: string;
+    readonly domain?: string;
+}
+/** The org default is always present and always FIRST, which makes an unbound domain work with no config and keeps the trial order stable. Entries repeating a (credentialId, inboundSecret) pair are dropped, so the gate never verifies one key twice. */
+export declare function connectorIntegrations(domains: readonly Domain[], connector: string, credential: string, defaultInboundSecret: string): readonly ConnectorIntegration[];
+/** The SHAPE half of validation, called from assertDomainsValid so a malformed binding fails at config load rather than at the first webhook. Whether the named credentials EXIST is a separate question, answered by assertDomainCredentialsResolvable at boot. */
+export declare function domainCredentialProblems(domain: CredentialBoundDomain): readonly string[];
+/** Fails LOUD at boot when an override names a credential no connector catalogue carries. This is what keeps the no-silent-fallback rule from ever being felt at runtime. */
+export declare function assertDomainCredentialsResolvable(domains: readonly Domain[], catalogues: readonly ConnectorCredentials[]): void;
+//# sourceMappingURL=domain-credentials.d.ts.map

package/dist/agent/access/domain-credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"domain-credentials.d.ts","sourceRoot":"","sources":["../../../agent/access/domain-credentials.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAEvE,yLAAyL;AACzL,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,4FAA4F;IAC5F,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,mPAAmP;IACnP,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,wBAAwB,EAAE,CAAC;CAC5D;AAED,sGAAsG;AACtG,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,qBAAqB,GAAG,SAAS,EACzC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,GACjB,wBAAwB,GAAG,SAAS,CAEtC;AAED,gLAAgL;AAChL,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,qBAAqB,GAAG,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAE3H;AAED,2LAA2L;AAC3L,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,4PAA4P;AAC5P,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,SAAS,MAAM,EAAE,EAC1B,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,oBAAoB,EAAE,MAAM,GAC3B,SAAS,oBAAoB,EAAE,CAajC;AAED,oQAAoQ;AACpQ,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,qBAAqB,GAAG,SAAS,MAAM,EAAE,CAyBzF;AAED,6KAA6K;AAC7K,wBAAgB,iCAAiC,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,EAAE,UAAU,EAAE,SAAS,oBAAoB,EAAE,GAAG,IAAI,CAuB/H"}