@open-everywhere/core 0.1.0

package/dist/agent/access/window-gated.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"window-gated.js","sourceRoot":"","sources":["../../../agent/access/window-gated.ts"],"names":[],"mappings":"AAAA,uKAAuK;AACvK,wXAAwX;AACxX,qNAAqN;AACrN,kMAAkM;AAClM,qdAAqd;AAErd,OAAO,EAAE,aAAa,EAAE,UAAU,EAAuB,MAAM,WAAW,CAAC;AAgB3E,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,aAAa,EAAE,kBAAkB,EAAE,aAAa,EAAE,oBAAoB,EAA0C,MAAM,wBAAwB,CAAC;AACjL,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,2FAA2F;AAC3F,yFAAyF;AACzF,OAAO,EAAE,8BAA8B,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AACpG,kGAAkG;AAClG,oGAAoG;AACpG,mGAAmG;AACnG,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,2BAA2B,CAAC;AAC3F,iGAAiG;AACjG,OAAO,EAAE,0BAA0B,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AACrG,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AACxE,uGAAuG;AACvG,OAAO,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAC3E,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,OAAO,EAAE,MAAM,2BAA2B,CAAC;AAG1I,4NAA4N;AAC5N,MAAM,UAAU,iBAAiB,CAAC,KAA4C;IAC5E,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IAChC,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC7C,IAAI,OAAO,QAAQ,KAAK,UAAU;QAAE,OAAO,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChE,OAAO,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AACzC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAA4C;IAC7E,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IAChC,IAAI,QAAQ,KAAK,SAAS,IAAI,OAAO,QAAQ,KAAK,UAAU;QAAE,OAAO,SAAS,CAAC;IAC/E,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC;IACnC,OAAO,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AACtE,CAAC;AAED,uQAAuQ;AACvQ,SAAS,eAAe,CAAC,KAAkB;IACzC,OAAO,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACpC,CAAC;AAED;oGACoG;AACpG,SAAS,OAAO,CAAC,GAAoB;IACnC,IAAI,CAAC;QACH,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,UAAU,CAAC;IACpB,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,GAAoB;IAChD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,EAAE,iBAAiB,IAAI,kBAAkB,CAAC,GAAG,CAAC,CAAC;QACtE,MAAM,GAAG,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,IAAI,GAAG,CAAC,IAAI,KAAK,aAAa;YAAE,OAAO,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC;QACtG,IAAI,GAAG,CAAC,IAAI,KAAK,sBAAsB;YAAE,OAAO,GAAG,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;QAC3G,gFAAgF;QAChF,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QAC9C,MAAM,KAAK,GAAG,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QAC9E,MAAM,MAAM,GAAG,KAAK,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;QAC9C,OAAO,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC,CAAC,iEAAiE;IACrF,CAAC;AACH,CAAC;AAED,sKAAsK;AACtK,2RAA2R;AAC3R,MAAM,eAAe,GAAG,IAAI,GAAG,EAAU,CAAC;AAE1C,KAAK,UAAU,aAAa,CAAC,GAAoB,EAAE,KAAkB;IACnE,IAAI,CAAC;QACH,MAAM,SAAS,GAAI,GAAqC,CAAC,OAAO,EAAE,EAAE,IAAI,aAAa,CAAC,GAAG,CAAC,CAAC;QAC3F,IAAI,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC;YAAE,OAAO;QAC3C,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC/B,MAAM,mBAAmB,CAAC;YACxB,GAAG,EAAE,aAAa,EAAE;YACpB,MAAM,EAAE,aAAa,CAAC,GAAG,CAAC;YAC1B,KAAK;YACL,QAAQ,EAAE,iBAAiB,CAAC,KAAK,CAAC;YAClC,MAAM,EAAE,aAAa,CAAC,GAAG,CAAC,IAAI,IAAI;YAClC,SAAS,EAAG,GAAqC,CAAC,OAAO,EAAE,EAAE,IAAI,IAAI;SACtE,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,sFAAsF;QACtF,uFAAuF;IACzF,CAAC;AACH,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,4BAA4B;IAC1C,eAAe,CAAC,KAAK,EAAE,CAAC;AAC1B,CAAC;AAED,kGAAkG;AAClG,SAAS,UAAU,CAAC,IAAY,EAAE,KAAkB;IAClD,IAAI,KAAK,KAAK,UAAU,EAAE,CAAC;QACzB,OAAO,CACL,GAAG,IAAI,mFAAmF;YAC1F,+FAA+F;YAC/F,wBAAwB,CACzB,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,IAAI,0BAA0B,KAAK,WAAW,CAAC;AAC3D,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,IAAY,EACZ,OAA+B,EAC/B,GAAoB,EACpB,OAAO,GAAmC,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC;IAE5E,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAC3B,kGAAkG;IAClG,iGAAiG;IACjG,8EAA8E;IAC9E,IAAI,gBAAgB,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;QAChC,MAAM,mBAAmB,CAAC;YACxB,GAAG,EAAE,aAAa,EAAE;YACpB,MAAM,EAAE,aAAa,CAAC,GAAG,CAAC;YAC1B,KAAK;YACL,QAAQ,EAAE,CAAC,IAAI,CAAC;YAChB,MAAM,EAAE,aAAa,CAAC,GAAG,CAAC,IAAI,IAAI;YAClC,SAAS,EAAG,GAAqC,CAAC,OAAO,EAAE,EAAE,IAAI,IAAI;YACrE,MAAM,EAAE,UAAU;SACnB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC1B,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,+RAA+R,IAAI,GAAG,CAC9S,CAAC;IACJ,CAAC;IACD,iGAAiG;IACjG,kGAAkG;IAClG,yCAAyC;IACzC,IAAI,iBAAiB,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;QACjC,MAAM,mBAAmB,CAAC;YACxB,GAAG,EAAE,aAAa,EAAE;YACpB,MAAM,EAAE,aAAa,CAAC,GAAG,CAAC;YAC1B,KAAK;YACL,QAAQ,EAAE,CAAC,IAAI,CAAC;YAChB,MAAM,EAAE,aAAa,CAAC,GAAG,CAAC,IAAI,IAAI;YAClC,SAAS,EAAG,GAAqC,CAAC,OAAO,EAAE,EAAE,IAAI,IAAI;YACrE,MAAM,EAAE,WAAW;SACpB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC1B,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,2OAA2O,CACnP,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO;IACpC,MAAM,mBAAmB,CAAC;QACxB,GAAG,EAAE,aAAa,EAAE;QACpB,MAAM,EAAE,aAAa,CAAC,GAAG,CAAC;QAC1B,KAAK;QACL,QAAQ,EAAE,CAAC,IAAI,CAAC;QAChB,MAAM,EAAE,aAAa,CAAC,GAAG,CAAC,IAAI,IAAI;QAClC,SAAS,EAAG,GAAqC,CAAC,OAAO,EAAE,EAAE,IAAI,IAAI;KACtE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC1B,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;AAClC,CAAC;AAED,oOAAoO;AACpO,SAAS,cAAc,CAAC,GAAoB;IAC1C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;QAChC,OAAO,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,MAAM,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,iBAAiB,CAAC,IAAY,EAAE,GAAoB;IAC3D,IAAI,CAAC;QACH,8NAA8N;QAC9N,IAAI,iBAAiB,CAAC,IAAI,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QAC/D,2TAA2T;QAC3T,0IAA0I;QAC1I,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC;QACrD,MAAM,CAAC,GAAG,KAAK,EAAE,CAAC,oBAAoB,CAAC,CAAC;QACxC,MAAM,UAAU,GAAG,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,MAAM,CAAC;QAChG,IAAI,UAAU,IAAI,cAAc,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC,CAAC,+BAA+B;QACtF,MAAM,OAAO,GAAG,sBAAsB,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,WAAW,EAAE,mBAAmB,CAAC,GAAG,CAAC,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9H,OAAO,OAAO,KAAK,MAAM,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC,CAAC,iFAAiF;IACjG,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,IAAY,EAAE,GAAoB;IAC1D,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,IAAI,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,CAAC;QACjG,MAAM,OAAO,GAAG,qBAAqB,CAAC;YACpC,OAAO,EAAE,cAAc,CAAC,KAAK,CAAC;YAC9B,UAAU,EAAE,YAAY,EAAE;YAC1B,cAAc,EAAE,gBAAgB,EAAE;SACnC,CAAC,CAAC;QACH,OAAO,OAAO,KAAK,YAAY,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,CAAC;IACvE,CAAC;IAAC,MAAM,CAAC;QACP,8FAA8F;QAC9F,4FAA4F;QAC5F,+EAA+E;QAC/E,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;uDAEuD;AACvD,SAAS,YAAY,CAAC,IAAY,EAAE,KAAqB;IACvD,OAAO,KAAK,EAAE,KAAc,EAAE,GAAY,EAAE,EAAE;QAC5C,MAAM,sBAAsB,CAAC,IAAI,EAAE,kBAAkB,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,GAAsB,CAAC,CAAC;QAC3F,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACnC,CAAC,CAAC;AACJ,CAAC;AAED,mMAAmM;AACnM,MAAM,iBAAiB,GAAG,MAAM,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;AAExE,SAAS,YAAY;IACnB,MAAM,CAAC,GAAG,UAAqC,CAAC;IAChD,IAAI,GAAG,GAAG,CAAC,CAAC,iBAAiB,CAAqC,CAAC;IACnE,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,GAAG,GAAG,IAAI,GAAG,EAAE,CAAC;QAChB,CAAC,CAAC,iBAAiB,CAAC,GAAG,GAAG,CAAC;IAC7B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,2MAA2M;AAC3M,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,QAAgB;IAC5D,OAAO;QACL,OAAO,EAAE,yBAAyB,IAAI,IAAI,QAAQ,EAAE;QACpD,QAAQ,EAAE,6BAA6B,IAAI,IAAI,QAAQ,EAAE;QACzD,gBAAgB,EAAE,sCAAsC,IAAI,IAAI,QAAQ,EAAE;QAC1E,aAAa,EAAE,iCAAiC,IAAI,IAAI,QAAQ,EAAE;KACnE,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,sBAAsB,GAAG,MAAM,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC;AAahF;;;GAGG;AACH,SAAS,4BAA4B,CAAC,KAAc,EAAE,IAAI,GAAoB,IAAI,OAAO,EAAE;IACzF,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3F,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC7D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,4BAA4B,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IACjG,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,MAAM,KAAK,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC3C,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,MAAM,CAAC,SAAS;QAAE,OAAO,KAAK,CAAC;IAC/D,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAClC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAChB,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QACxC,IAAI,IAAI,KAAK,SAAS;YAAE,SAAS;QACjC,IAAI,CAAC,4BAA4B,CAAC,IAAI,EAAE,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;IAC9D,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACnB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,8BAA8B,CACrC,KAA0B,EAC1B,SAAyD,EACzD,OAAO,GAAgF,EAAE;IAEzF,MAAM,MAAM,GAAG,KAA2C,CAAC;IAC3D,MAAM,QAAQ,GAAI,MAAM,CAAC,sBAAsB,CAAsE,IAAI,EAAE,CAAC;IAC5H,MAAM,IAAI,GAA6C,EAAE,CAAC;IAC1D,KAAK,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,IAAI,SAAS,KAAK,SAAS;YAAE,IAAI,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC;IAChH,MAAM,OAAO,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAA0B,CAAC;IACjE,4JAA4J;IAC5J,kPAAkP;IAClP,KAAK,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1D,IAAI,QAAQ,KAAK,SAAS;YAAE,SAAS;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QACzB,IAAI,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;YACrD,wTAAwT;YACxT,qLAAqL;YACrL,IAAI,4BAA4B,CAAC,IAAI,CAAC,OAAO,CAAC;gBAAE,SAAS;YACzD,OAAO,CAAC,KAAK,CACX,0DAA0D,KAAK,0CAA0C;gBACvG,0GAA0G;gBAC1G,qHAAqH,CACxH,CAAC;QACJ,CAAC;QACD,gGAAgG;QAChG,uFAAuF;QACvF,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,EAAE,CAAC;IACtD,CAAC;IACD,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,sBAAsB,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC7F,CAAC;AASD;;;;;GAKG;AACH;;;GAGG;AACH,MAAM,eAAe,GAAG,IAAI,GAAG,EAAmF,CAAC;AAEnH,mOAAmO;AACnO,SAAS,aAAa,CAAC,IAAY,EAAE,QAAgB;IACnD,OAAO,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC;AACpD,CAAC;AAED,SAAS,gBAAgB,CAAC,WAAmB,EAAE,KAA0B,EAAE,cAAuB;IAChG,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC9C,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,eAAe,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC;QAChF,OAAO;IACT,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACxB,IAAI,cAAc;QAAE,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;AACjD,CAAC;AAED,4MAA4M;AAC5M,MAAM,UAAU,wBAAwB;IACtC,OAAO,IAAI,GAAG,CAAC,CAAC,GAAG,eAAe,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AACnF,CAAC;AAWD;;;GAGG;AACH,MAAM,UAAU,sBAAsB;IACpC,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,eAAe,EAAE,CAAC;QAC3C,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC;YAAE,SAAS;QACpC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAW,CAAC;QACrC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjC,MAAM,SAAS,GAAI,KAA4C,CAAC,sBAAsB,CAEzE,CAAC;YACd,SAAS,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC9C,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,EAAE,wBAAwB,EAAE,SAAS,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;IACnI,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CAAC,WAAmB;IAC5D,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC9C,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACzC,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CACb,+BAA+B,WAAW,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,uFAAuF,CAC1J,CAAC;IACJ,CAAC;IACD,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC;IAC7B,MAAM,OAAO,GAAG,KAAK,EAAE,aAAa,CAAC;IACrC,IAAI,OAAO,OAAO,KAAK,UAAU;QAAE,OAAO,SAAS,CAAC;IACpD,OAAO,CAAC,MAAe,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;AAC9C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CAAC,WAAmB,EAAE,QAAuD;IACrH,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACxC,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,+BAA+B,WAAW,wEAAwE,CAAC,CAAC;IACtI,CAAC;IACD,eAAe,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;AACzC,CAAC;AAED,0RAA0R;AAC1R,MAAM,oBAAoB,GAAG,IAAI,GAAG,EAA+C,CAAC;AAEpF;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,WAAmB,EAAE,QAAgB,EAAE,KAA0B;IACtG,MAAM,IAAI,GAAG,oBAAoB,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;IACzD,IAAI,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC;IACvB,oBAAoB,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IAC5C,eAAe,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;AACrC,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,4BAA4B;IAC1C,oBAAoB,CAAC,KAAK,EAAE,CAAC;AAC/B,CAAC;AAED;uFACuF;AACvF,SAAS,eAAe,CAAC,WAAmB,EAAE,QAAuD;IACnG,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACxC;yFACqF;IACrF,MAAM,IAAI,GAAG,CAAC,OAAgB,EAAoD,EAAE;QAClF,MAAM,QAAQ,GAAI,OAA8C,EAAE,QAAQ,CAAC;QAC3E,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,SAAS,EAAE,CAAC;YACrE,MAAM,IAAI,KAAK,CACb,iBAAiB,WAAW,kEAAkE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK;gBACzH,4HAA4H,CAC/H,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,CAAC;IACjD,CAAC,CAAC;IACF,MAAM,MAAM,GAAmD,EAAE,CAAC;IAClE,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC,OAAgB,EAAE,KAAc,EAAE,GAAY,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAmB,CAAC;IACjI,MAAM,kBAAkB,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;IAC/F,MAAM,mBAAmB,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;IACjG,IAAI,kBAAkB,EAAE,CAAC;QACvB,MAAM,CAAC,eAAe,GAAG,CAAC,CAAC,OAAgB,EAAE,IAAa,EAAE,EAAE;YAC5D,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;YAC1C,MAAM,OAAO,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;YACzC,IAAI,OAAO,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,WAAW,cAAc,QAAQ,mCAAmC,CAAC,CAAC;YAClI,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC;QACvB,CAAC,CAAmB,CAAC;IACvB,CAAC;IACD,IAAI,mBAAmB,EAAE,CAAC;QACxB,MAAM,CAAC,gBAAgB,GAAG,CAAC,CAAC,OAAgB,EAAE,IAAa,EAAE,EAAE;YAC7D,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;YAC1C,MAAM,QAAQ,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;YAC3C,IAAI,QAAQ,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,WAAW,cAAc,QAAQ,oCAAoC,CAAC,CAAC;YACpI,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC;QACxB,CAAC,CAAmB,CAAC;IACvB,CAAC;IACD,wMAAwM;IACxM,MAAM,cAAc,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC,aAAa,KAAK,UAAU,CAAC,CAAC;IAC9F,IAAI,cAAc,EAAE,CAAC;QACnB,MAAM,CAAC,aAAa,GAAG,CAAC,CAAC,OAAgB,EAAE,GAAY,EAAE,EAAE;YACzD,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;YAC1C,MAAM,OAAO,GAAG,KAAK,CAAC,aAAa,CAAC;YACpC,IAAI,OAAO,OAAO,KAAK,UAAU;gBAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,WAAW,cAAc,QAAQ,6BAA6B,CAAC,CAAC;YACpI,OAAO,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAClC,CAAC,CAAmB,CAAC;IACvB,CAAC;IACD,4QAA4Q;IAC5Q,uBAAuB,CAAC,WAAW,EAAE,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC,aAAa,KAAK,UAAU,CAAC,CAAC,CAAC;IACtI,MAAM,GAAG,GAAG,YAAY,EAAE,CAAC;IAC3B,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACjC,6FAA6F;QAC7F,2FAA2F;QAC3F,oEAAoE;QACpE,MAAM,KAAK,GAAG,eAAe,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QACrD,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,GAAY,EAAE,KAAc,EAAE,GAAY,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAmB,CAAC,CAAC;QACtH,MAAM,QAAQ,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,QAAQ,KAAK,SAAS;YAAE,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,GAAY,EAAE,IAAa,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAmB,CAAC,CAAC;QACzH,MAAM,gBAAgB,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;QACnD,IAAI,gBAAgB,KAAK,SAAS;YAAE,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAC,GAAY,EAAE,IAAa,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAmB,CAAC,CAAC;QACjJ,MAAM,OAAO,GAAG,KAAK,CAAC,aAAa,CAAC;QACpC,IAAI,OAAO,OAAO,KAAK,UAAU;YAAE,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC,GAAY,EAAE,GAAY,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAmB,CAAC,CAAC;QAC9I,iGAAiG;QACjG,iGAAiG;QACjG,yDAAyD;QACzD,MAAM,GAAG,GAAmD,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;QACxF,IAAI,QAAQ,KAAK,SAAS;YAAE,GAAG,CAAC,eAAe,GAAG,MAAM,CAAC,eAAe,CAAC;QACzE,IAAI,gBAAgB,KAAK,SAAS;YAAE,GAAG,CAAC,gBAAgB,GAAG,MAAM,CAAC,gBAAgB,CAAC;QACnF,IAAI,OAAO,OAAO,KAAK,UAAU;YAAE,GAAG,CAAC,aAAa,GAAG,MAAM,CAAC,aAAa,CAAC;QAC5E,8BAA8B,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACvF,gBAAgB,CAAC,WAAW,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IAC7C,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAAY,EAAE,QAAgB,EAAE,KAA0B;IAChG,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC9C,MAAM,GAAG,GAAG,YAAY,EAAE,CAAC;IAC3B,gBAAgB,CAAC,aAAa,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IAC9D,0PAA0P;IAC1P,MAAM,SAAS,GAAmD,EAAE,CAAC;IACrE,SAAS,CAAC,OAAO,GAAG,CAAC,CAAC,GAAY,EAAE,KAAc,EAAE,GAAY,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAmB,CAAC;IAClH,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAC1C,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,SAAS,CAAC,eAAe,GAAG,CAAC,CAAC,GAAY,EAAE,IAAa,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAmB,CAAC;QAChG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,SAAS,CAAC,eAAe,CAAC,CAAC;IACrD,CAAC;IACD,MAAM,gBAAgB,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IACnD,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;QACnC,SAAS,CAAC,gBAAgB,GAAG,CAAC,CAAC,GAAY,EAAE,IAAa,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAmB,CAAC;QACzG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,gBAAgB,EAAE,SAAS,CAAC,gBAAgB,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,aAAa,KAAK,UAAU,EAAE,CAAC;QAC9C,wMAAwM;QACxM,8BAA8B,CAAC,aAAa,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC9D,gNAAgN;QAChN,SAAS,CAAC,aAAa,GAAG,CAAC,CAAC,GAAY,EAAE,GAAY,EAAE,EAAE,CAAE,KAAK,CAAC,aAAyC,CAAC,GAAG,CAAC,CAAmB,CAAC;QACpI,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,EAAE,SAAS,CAAC,aAAa,CAAC,CAAC;IACxD,CAAC;IACD,8BAA8B,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,KAAqB;IACnD,OAAO,UAAU,CAAC,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,EAA+B,CAA8B,CAAC;AAChI,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,KAAqB,EAAE,SAA6C;IAC5G,8TAA8T;IAC9T,oLAAoL;IACpL,IAAI,kBAAkB,CAAC,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,gBAAgB,IAAI,2FAA2F,CAAC,CAAC;IACnI,CAAC;IACD,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACpC,uBAAuB,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IAChD,MAAM,GAAG,GAAG,aAAa,CAAC;QACxB,MAAM,EAAE;YACN,iBAAiB,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;gBACvC,MAAM,CAAC,GAAG,GAAsB,CAAC;gBACjC,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;gBACzB,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;oBAC9C,IAAI,eAAe,CAAC,KAAK,CAAC;wBAAE,MAAM,aAAa,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;oBAC1D,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,yFAAyF;gBACzF,2FAA2F;gBAC3F,mFAAmF;gBACnF,IAAI,SAAS,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;oBAAE,OAAO,IAAI,CAAC;gBAC5C,OAAO,KAAK,CAAC;YACf,CAAC;SACF;KACF,CAAC,CAAC;IACH,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAC5B,IAAY,EACZ,OAAiD,EACjD,UAAU,GAAgE,EAAE;IAE5E,MAAM,KAAK,GAAmC,EAAE,CAAC;IACjD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACpD,IAAI,kBAAkB,CAAC,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CAAC,mBAAmB,IAAI,QAAQ,IAAI,kDAAkD,CAAC,CAAC;QACzG,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACpC,uBAAuB,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACnD,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3C,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,mBAAmB,IAAI,yBAAyB,IAAI,gHAAgH,CAAC,CAAC;QACxL,CAAC;IACH,CAAC;IACD,OAAO,aAAa,CAAC;QACnB,MAAM,EAAE;YACN,iBAAiB,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;gBACvC,MAAM,CAAC,GAAG,GAAsB,CAAC;gBACjC,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;gBACzB,MAAM,OAAO,GAAmC,EAAE,CAAC;gBACnD,IAAI,WAAW,GAAG,KAAK,CAAC;gBACxB,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;oBACtC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;wBAAC,WAAW,GAAG,IAAI,CAAC;wBAAC,SAAS;oBAAC,CAAC;oBAChF,2FAA2F;oBAC3F,mEAAmE;oBACnE,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;oBAC9B,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;wBAAE,SAAS;oBAC/B,OAAO,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC9B,CAAC;gBACD,IAAI,WAAW,IAAI,eAAe,CAAC,KAAK,CAAC;oBAAE,MAAM,aAAa,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;gBACzE,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;YAC1D,CAAC;SACF;KACF,CAAC,CAAC;AACL,CAAC;AAED,wNAAwN;AACxN,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,KAAc,EAAE,GAAoB;IAC3E,MAAM,QAAQ,GAAI,KAAgF,CAAC,MAAM,EAAE,CAAC,iBAAiB,CAAC,CAAC;IAC/H,IAAI,OAAO,QAAQ,KAAK,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IAC1G,OAAO,MAAM,QAAQ,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAAE,GAAG,CAAC,CAAC;AAC1D,CAAC"}

package/dist/agent/access/window-routing.d.ts

@@ -0,0 +1,16 @@
+import type { WindowGrain } from "../identity/binding.js";
+import { type Domain } from "../memory/domain.js";
+export type WindowRoutingPosture = 
+/** On a window/task/thread seat — the intended path (or the wake is a worker, which is windowed by construction). */
+"windowed"
+/** `native`, and legitimately so: the topology gate is off, or the channel resolves to no seat
+ *  domain at all (no explicit domain and no `org` pseudo-domain to inherit). */
+ | "native-by-design"
+/** `native` even though the room HAS a seat — a routing regression, or the runtime privacy floor
+ *  standing the seat down. Loud either way; see the header for how to tell them apart. */
+ | "native-degraded";
+/** Classify a wake against the routing invariant. `domainKey` is the partition's DOMAIN-grain key, the same key every other window gate is asked about, so this can never disagree with the divert layer about which channel it means. */
+export declare function classifyWindowRouting(grain: WindowGrain, domainKey: string, domains: readonly Domain[]): WindowRoutingPosture;
+/** The audit `action` a degraded wake emits — one greppable string, shared by the hook and its test. */
+export declare const WINDOW_ROUTING_DEGRADED_ACTION = "window.routing_degraded";
+//# sourceMappingURL=window-routing.d.ts.map

package/dist/agent/access/window-routing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"window-routing.d.ts","sourceRoot":"","sources":["../../../agent/access/window-routing.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAqB,KAAK,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAErE,MAAM,MAAM,oBAAoB;AAC9B,qHAAqH;AACnH,UAAU;AACZ;gFACgF;GAC9E,kBAAkB;AACpB;0FAC0F;GACxF,iBAAiB,CAAC;AAEtB,0OAA0O;AAC1O,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,oBAAoB,CAG7H;AAED,wGAAwG;AACxG,eAAO,MAAM,8BAA8B,4BAA4B,CAAC"}

package/dist/agent/access/window-routing.js

@@ -0,0 +1,11 @@
+// Classifies a wake against the routing invariant: a `native` wake in a room whose domain WINDOWS is audited as degraded, because such a seat keeps talking while holding a different session key, toolset and memory answer. Since OPE-1695 TWO things reach that row — a routing regression, and the runtime privacy floor standing the seat down — and this pure classifier cannot subtract the second, so read a row against the surface's vouch before calling it a bug.
+import { windowedDomainFor } from "../memory/domain.js";
+/** Classify a wake against the routing invariant. `domainKey` is the partition's DOMAIN-grain key, the same key every other window gate is asked about, so this can never disagree with the divert layer about which channel it means. */
+export function classifyWindowRouting(grain, domainKey, domains) {
+    if (grain !== "native")
+        return "windowed";
+    return windowedDomainFor(domainKey, domains) ? "native-degraded" : "native-by-design";
+}
+/** The audit `action` a degraded wake emits — one greppable string, shared by the hook and its test. */
+export const WINDOW_ROUTING_DEGRADED_ACTION = "window.routing_degraded";
+//# sourceMappingURL=window-routing.js.map

package/dist/agent/access/window-routing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"window-routing.js","sourceRoot":"","sources":["../../../agent/access/window-routing.ts"],"names":[],"mappings":"AAAA,8cAA8c;AAG9c,OAAO,EAAE,iBAAiB,EAAe,MAAM,qBAAqB,CAAC;AAYrE,0OAA0O;AAC1O,MAAM,UAAU,qBAAqB,CAAC,KAAkB,EAAE,SAAiB,EAAE,OAA0B;IACrG,IAAI,KAAK,KAAK,QAAQ;QAAE,OAAO,UAAU,CAAC;IAC1C,OAAO,iBAAiB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,kBAAkB,CAAC;AACxF,CAAC;AAED,wGAAwG;AACxG,MAAM,CAAC,MAAM,8BAA8B,GAAG,yBAAyB,CAAC"}

package/dist/agent/access/work-grant.d.ts

@@ -0,0 +1,39 @@
+import { type Domain } from "../memory/domain.js";
+import type { BindableContext } from "../identity/binding.js";
+import { type CredentialBoundDomain } from "./domain-credentials.js";
+/** The credential id this domain does `connector` work under, or undefined when it holds no work grant. NO FALLBACK: undefined means the domain may not do work on this provider, never "use the org default". */
+export declare function workGrantCredential(domain: CredentialBoundDomain | undefined, connector: string, workRole: string): string | undefined;
+/** The mount predicate every work tool's `session.started` resolver calls: false means the tool is ABSENT, not merely refusing. A tool the model can see but can never use is what produces a false capability claim in a member-facing reply. */
+export declare function hasWorkGrant(domain: CredentialBoundDomain | undefined, connector: string, workRole: string): boolean;
+/** How a work tool's mount reads the caller's domain. The default compares whole surface keys verbatim; Notion passes its own, which canonicalises a page UUID first. */
+export type WorkDomainResolver = (surfaceKey: string, domains: readonly Domain[]) => Domain | undefined;
+/** The memory domain a calling session belongs to, whatever surface it was woken on. FAIL-SOFT to undefined, which is the fail-closed direction here: an unreadable partition or config means no grant can be shown, so no work tool mounts. */
+export declare function callerWorkDomain(ctx: BindableContext, domains: () => readonly Domain[], resolveDomain?: WorkDomainResolver): Domain | undefined;
+/** The grant-to-mount rule in one call: read as a boolean it is a provider's mount predicate, read as a string it is the credential resolver. One function, so a mount and the credential it mounts for cannot disagree about the caller's domain. */
+export declare function callerWorkGrant(ctx: BindableContext, connector: string, workRole: string, domains: () => readonly Domain[], resolveDomain?: WorkDomainResolver): string | undefined;
+/** Where a provider's WORK half lives. `entity` is an addressable item a caller names, so the grant alone is a complete route and the platform can be a ticket destination; `container` is the conversation this turn arrived in, so the grant is joined with the window's sources and the platform is never a destination. A provider may hold both on one role. */
+export type WorkSurfaceKind = "entity" | "container";
+/** One provider's WORK role — the (connector, org-default credential id) pair a declaration names. */
+export interface WorkRole {
+    readonly connector: string;
+    readonly role: string;
+    readonly kind: WorkSurfaceKind;
+}
+/**
+ * The reviewed record of every (connector, work-role) pair some provider in this tree reads as a work grant.
+ * It grants nothing and fences nothing, because every gate calls hasWorkGrant with its own pair, and it is NOT a list of ticket destinations (channels/work-registry.ts answers that). Extend it in the same diff that teaches a provider to read a grant.
+ */
+export declare const WORK_ROLES: readonly WorkRole[];
+/** The work role declared for `connector`, or `undefined` when this tree reads none for it. */
+export declare function workRoleFor(connector: string): string | undefined;
+/** The work role for a CONTAINER-kind (chat) surface, or `undefined` — the predicate
+ *  access/surface-work-grant.ts gates on. An `entity`-kind provider answers undefined here: its work
+ *  half is a page or an issue, not the conversation. */
+export declare function containerWorkRoleFor(connector: string): string | undefined;
+/** GitHub's connector slug on the work plane — the name every consumer reports the grant under. */
+export declare const GITHUB_CONNECTOR = "github";
+/** The grant is the session's repo grant, resolved for the calling scope. It grants nothing and fences nothing: `repoAllowed` stays the authoritative wall, and a wildcard `owner/*` counts even though it names no concrete repo. */
+export declare function hasGithubWorkGrant(repos: readonly string[]): boolean;
+/** The connectors these domains hold a work grant on, sorted - the prompt-facing summary, never a gate. A LIST because a surface can resolve into several domains; `repos` is a second argument because the repo grant is resolved for the calling scope, which a domain list cannot answer. */
+export declare function workGrantedConnectors(domains: readonly (CredentialBoundDomain | undefined)[], repos?: readonly string[]): readonly string[];
+//# sourceMappingURL=work-grant.d.ts.map

package/dist/agent/access/work-grant.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"work-grant.d.ts","sourceRoot":"","sources":["../../../agent/access/work-grant.ts"],"names":[],"mappings":"AAKA,OAAO,EAA2B,KAAK,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAE3E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAyB,KAAK,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAE5F,kNAAkN;AAClN,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,qBAAqB,GAAG,SAAS,EACzC,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,GACf,MAAM,GAAG,SAAS,CAKpB;AAED,kPAAkP;AAClP,wBAAgB,YAAY,CAC1B,MAAM,EAAE,qBAAqB,GAAG,SAAS,EACzC,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,GACf,OAAO,CAET;AAED,yKAAyK;AACzK,MAAM,MAAM,kBAAkB,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,MAAM,EAAE,KAAK,MAAM,GAAG,SAAS,CAAC;AAIxG,gPAAgP;AAChP,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,eAAe,EACpB,OAAO,EAAE,MAAM,SAAS,MAAM,EAAE,EAChC,aAAa,GAAE,kBAAwC,GACtD,MAAM,GAAG,SAAS,CAMpB;AAED,sPAAsP;AACtP,wBAAgB,eAAe,CAC7B,GAAG,EAAE,eAAe,EACpB,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,SAAS,MAAM,EAAE,EAChC,aAAa,CAAC,EAAE,kBAAkB,GACjC,MAAM,GAAG,SAAS,CAEpB;AAED,qWAAqW;AACrW,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,WAAW,CAAC;AAErD,sGAAsG;AACtG,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;CAChC;AAED;;;GAGG;AACH,eAAO,MAAM,UAAU,EAAE,SAAS,QAAQ,EASzC,CAAC;AAEF,+FAA+F;AAC/F,wBAAgB,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAEjE;AAED;;wDAEwD;AACxD,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAE1E;AAED,mGAAmG;AACnG,eAAO,MAAM,gBAAgB,WAAW,CAAC;AAEzC,sOAAsO;AACtO,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAEpE;AAED,gSAAgS;AAChS,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,SAAS,CAAC,qBAAqB,GAAG,SAAS,CAAC,EAAE,EACvD,KAAK,GAAE,SAAS,MAAM,EAAO,GAC5B,SAAS,MAAM,EAAE,CASnB"}

package/dist/agent/access/work-grant.js

@@ -0,0 +1,76 @@
+// A provider is TWO surfaces: the CHAT credential, which nothing here governs, and the WORK surface, which a domain holds ONLY by declaring the work role in its own `Domain.credentials`.
+// That declaration IS the grant and it NEVER falls back: a domain that declares nothing holds no work grant, and absence is a refusal rather than a default. GitHub is the exception, declaring its grant as an access bundle's repo list.
+// callerWorkDomain and callerWorkGrant are the grant chain once, so three consumers cannot disagree about which domain the caller is in. The resolver stays injectable because Notion canonicalises a page UUID, and `domains` stays a thunk for a `session.started` resolver that runs before config registers.
+import { resolveDomainForChannel } from "../memory/domain.js";
+import { resolvePartition } from "../memory/partition.js";
+import { credentialOverrideFor } from "./domain-credentials.js";
+/** The credential id this domain does `connector` work under, or undefined when it holds no work grant. NO FALLBACK: undefined means the domain may not do work on this provider, never "use the org default". */
+export function workGrantCredential(domain, connector, workRole) {
+    const declared = credentialOverrideFor(domain, connector, workRole);
+    if (!declared)
+        return undefined;
+    // `use` is validated non-empty at boot (domainCredentialProblems), so this is the declared id.
+    return declared.use;
+}
+/** The mount predicate every work tool's `session.started` resolver calls: false means the tool is ABSENT, not merely refusing. A tool the model can see but can never use is what produces a false capability claim in a member-facing reply. */
+export function hasWorkGrant(domain, connector, workRole) {
+    return workGrantCredential(domain, connector, workRole) !== undefined;
+}
+const resolveByChannelKey = (surfaceKey, domains) => resolveDomainForChannel(surfaceKey, domains).domain;
+/** The memory domain a calling session belongs to, whatever surface it was woken on. FAIL-SOFT to undefined, which is the fail-closed direction here: an unreadable partition or config means no grant can be shown, so no work tool mounts. */
+export function callerWorkDomain(ctx, domains, resolveDomain = resolveByChannelKey) {
+    try {
+        return resolveDomain(resolvePartition(ctx).surfaceKey, domains());
+    }
+    catch {
+        return undefined;
+    }
+}
+/** The grant-to-mount rule in one call: read as a boolean it is a provider's mount predicate, read as a string it is the credential resolver. One function, so a mount and the credential it mounts for cannot disagree about the caller's domain. */
+export function callerWorkGrant(ctx, connector, workRole, domains, resolveDomain) {
+    return workGrantCredential(callerWorkDomain(ctx, domains, resolveDomain), connector, workRole);
+}
+/**
+ * The reviewed record of every (connector, work-role) pair some provider in this tree reads as a work grant.
+ * It grants nothing and fences nothing, because every gate calls hasWorkGrant with its own pair, and it is NOT a list of ticket destinations (channels/work-registry.ts answers that). Extend it in the same diff that teaches a provider to read a grant.
+ */
+export const WORK_ROLES = [
+    { connector: "notion", role: "team-key", kind: "entity" },
+    { connector: "linear", role: "workspace", kind: "entity" },
+    { connector: "slack", role: "work-token", kind: "container" },
+    { connector: "discord", role: "work-token", kind: "container" },
+    { connector: "teams", role: "work-token", kind: "container" },
+    // Notion and Linear are CONTAINERS as well as entities: an addressable entity is also the conversation a seat or worker was delegated from. The same role is reused deliberately - one declaration read by two mount predicates, rather than a second credential a domain would have to keep in step.
+    { connector: "notion", role: "team-key", kind: "container" },
+    { connector: "linear", role: "workspace", kind: "container" },
+];
+/** The work role declared for `connector`, or `undefined` when this tree reads none for it. */
+export function workRoleFor(connector) {
+    return WORK_ROLES.find((w) => w.connector === connector)?.role;
+}
+/** The work role for a CONTAINER-kind (chat) surface, or `undefined` — the predicate
+ *  access/surface-work-grant.ts gates on. An `entity`-kind provider answers undefined here: its work
+ *  half is a page or an issue, not the conversation. */
+export function containerWorkRoleFor(connector) {
+    return WORK_ROLES.find((w) => w.connector === connector && w.kind === "container")?.role;
+}
+/** GitHub's connector slug on the work plane — the name every consumer reports the grant under. */
+export const GITHUB_CONNECTOR = "github";
+/** The grant is the session's repo grant, resolved for the calling scope. It grants nothing and fences nothing: `repoAllowed` stays the authoritative wall, and a wildcard `owner/*` counts even though it names no concrete repo. */
+export function hasGithubWorkGrant(repos) {
+    return repos.length > 0;
+}
+/** The connectors these domains hold a work grant on, sorted - the prompt-facing summary, never a gate. A LIST because a surface can resolve into several domains; `repos` is a second argument because the repo grant is resolved for the calling scope, which a domain list cannot answer. */
+export function workGrantedConnectors(domains, repos = []) {
+    const out = new Set();
+    for (const domain of domains) {
+        for (const w of WORK_ROLES) {
+            if (hasWorkGrant(domain, w.connector, w.role))
+                out.add(w.connector);
+        }
+    }
+    if (hasGithubWorkGrant(repos))
+        out.add(GITHUB_CONNECTOR);
+    return [...out].sort();
+}
+//# sourceMappingURL=work-grant.js.map

package/dist/agent/access/work-grant.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"work-grant.js","sourceRoot":"","sources":["../../../agent/access/work-grant.ts"],"names":[],"mappings":"AAAA,2LAA2L;AAC3L,2OAA2O;AAE3O,iTAAiT;AAEjT,OAAO,EAAE,uBAAuB,EAAe,MAAM,qBAAqB,CAAC;AAC3E,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE1D,OAAO,EAAE,qBAAqB,EAA8B,MAAM,yBAAyB,CAAC;AAE5F,kNAAkN;AAClN,MAAM,UAAU,mBAAmB,CACjC,MAAyC,EACzC,SAAiB,EACjB,QAAgB;IAEhB,MAAM,QAAQ,GAAG,qBAAqB,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IACpE,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChC,+FAA+F;IAC/F,OAAO,QAAQ,CAAC,GAAG,CAAC;AACtB,CAAC;AAED,kPAAkP;AAClP,MAAM,UAAU,YAAY,CAC1B,MAAyC,EACzC,SAAiB,EACjB,QAAgB;IAEhB,OAAO,mBAAmB,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC,KAAK,SAAS,CAAC;AACxE,CAAC;AAKD,MAAM,mBAAmB,GAAuB,CAAC,UAAU,EAAE,OAAO,EAAE,EAAE,CAAC,uBAAuB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC;AAE7H,gPAAgP;AAChP,MAAM,UAAU,gBAAgB,CAC9B,GAAoB,EACpB,OAAgC,EAChC,aAAa,GAAuB,mBAAmB;IAEvD,IAAI,CAAC;QACH,OAAO,aAAa,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;IACpE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,sPAAsP;AACtP,MAAM,UAAU,eAAe,CAC7B,GAAoB,EACpB,SAAiB,EACjB,QAAgB,EAChB,OAAgC,EAChC,aAAkC;IAElC,OAAO,mBAAmB,CAAC,gBAAgB,CAAC,GAAG,EAAE,OAAO,EAAE,aAAa,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;AACjG,CAAC;AAYD;;;GAGG;AACH,MAAM,CAAC,MAAM,UAAU,GAAwB;IAC7C,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE;IACzD,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE;IAC1D,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,WAAW,EAAE;IAC7D,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,WAAW,EAAE;IAC/D,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,WAAW,EAAE;IAC7D,sSAAsS;IACtS,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,EAAE;IAC5D,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,EAAE;CAC9D,CAAC;AAEF,+FAA+F;AAC/F,MAAM,UAAU,WAAW,CAAC,SAAiB;IAC3C,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,EAAE,IAAI,CAAC;AACjE,CAAC;AAED;;wDAEwD;AACxD,MAAM,UAAU,oBAAoB,CAAC,SAAiB;IACpD,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,EAAE,IAAI,CAAC;AAC3F,CAAC;AAED,mGAAmG;AACnG,MAAM,CAAC,MAAM,gBAAgB,GAAG,QAAQ,CAAC;AAEzC,sOAAsO;AACtO,MAAM,UAAU,kBAAkB,CAAC,KAAwB;IACzD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;AAC1B,CAAC;AAED,gSAAgS;AAChS,MAAM,UAAU,qBAAqB,CACnC,OAAuD,EACvD,KAAK,GAAsB,EAAE;IAE7B,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;YAC3B,IAAI,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC;gBAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IACD,IAAI,kBAAkB,CAAC,KAAK,CAAC;QAAE,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IACzD,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AACzB,CAAC"}

package/dist/agent/access/work-mount-manifest.d.ts

@@ -0,0 +1,21 @@
+export interface WorkToolFile {
+    readonly name: string;
+    readonly source: string;
+}
+export type WorkMountVia = "grant" | "grant-or-source" | "grant-and-source";
+/** One work tool's mount rule. `connector` is the provider slug the mount predicate names, or `"*"`
+ *  for a NEUTRAL verb that dispatches to whichever platform the caller asks for (`create_ticket` and
+ *  the three entity verbs): such a verb names no single connector, so the union set alone is its
+ *  mount and no connector-named predicate can apply to it. */
+export interface WorkMountRule {
+    readonly connector: string;
+    readonly via: WorkMountVia;
+}
+/** The CI-pinned registry of work tools to how each one reads the grant. Add a row in the SAME diff that authors a work tool - the totality guard below fails an unclassified one. */
+export declare const WORK_TOOL_MOUNTS: Readonly<Record<string, WorkMountRule>>;
+/** Work tools that carry the execute FENCE but mount with no grant check - a ticketed gap, NOT an exemption list: a row is still checked, must keep its fence, and must carry a real ticket id. The table is EMPTY and that is the target state; keep it empty. */
+export declare const WORK_MOUNT_GAPS: Readonly<Record<string, string>>;
+export declare function isWorkTool(source: string): boolean;
+/** Check the work-mount invariants over a set of scanned tool files; returns problem strings and is pure. `mounts`/`gaps` default to the real tables and are injectable only so the test can drive refusals the real manifest must never contain. */
+export declare function checkWorkMounts(tools: readonly WorkToolFile[], mounts?: Readonly<Record<string, WorkMountRule>>, gaps?: Readonly<Record<string, string>>): string[];
+//# sourceMappingURL=work-mount-manifest.d.ts.map

package/dist/agent/access/work-mount-manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"work-mount-manifest.d.ts","sourceRoot":"","sources":["../../../agent/access/work-mount-manifest.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,iBAAiB,GAAG,kBAAkB,CAAC;AAE5E;;;8DAG8D;AAC9D,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC;CAC5B;AAED,sLAAsL;AACtL,eAAO,MAAM,gBAAgB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CA0BpE,CAAC;AAEF,mQAAmQ;AACnQ,eAAO,MAAM,eAAe,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAM,CAAC;AAsBpE,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAElD;AA2BD,qPAAqP;AACrP,wBAAgB,eAAe,CAC7B,KAAK,EAAE,SAAS,YAAY,EAAE,EAC9B,MAAM,GAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAoB,EAClE,IAAI,GAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAmB,GACvD,MAAM,EAAE,CAiGV"}

package/dist/agent/access/work-mount-manifest.js

@@ -0,0 +1,149 @@
+// The CI pin that every WORK tool decides its mount from the caller's WORK GRANT (access/work-grant.ts), never from grain or chat topology. `via` names the one parameter: `grant` alone, `grant-or-source` (the union with a chat-plane path), or `grant-and-source` (the intersection, for a container-fenced read).
+// It reads tool SOURCE as text, so it proves a tool NAMES its predicate and that none is unclassified, never that the predicate decides the mount. It can only narrow what a seat SEES; each provider's own fence stays the authoritative wall.
+/** The CI-pinned registry of work tools to how each one reads the grant. Add a row in the SAME diff that authors a work tool - the totality guard below fails an unclassified one. */
+export const WORK_TOOL_MOUNTS = {
+    // Notion: `notion_search` exists only on the work credential, so it is grant-only, while `read_notion_page` keeps its chat-plane path and is the union. `read_notion_comments` has the chat arm alone and takes no work-mount rule.
+    notion_search: { connector: "notion", via: "grant" },
+    read_notion_page: { connector: "notion", via: "grant-or-source" },
+    // Linear: the same pair as read_notion_page above - the container read OR the domain's Linear work grant.
+    read_linear_issue: { connector: "linear", via: "grant-or-source" },
+    // GitHub (OPE-940 for the first two, OPE-960 for the rest). Grant-only: a GitHub chat channel
+    // confers no repo, and every one of these tools takes a `repo` it cannot name without one.
+    // `checkout_repo` / `open_pull_request` decide the mount inside `windowGated` (they are grain-gated
+    // too); the five below are WINDOW_UNGATED and decide it in a bare `session.started` resolver.
+    checkout_repo: { connector: "github", via: "grant" },
+    open_pull_request: { connector: "github", via: "grant" },
+    check_pr_status: { connector: "github", via: "grant" },
+    get_pr_feedback: { connector: "github", via: "grant" },
+    walk_pr: { connector: "github", via: "grant" },
+    post_pr_walkthrough: { connector: "github", via: "grant" },
+    subscribe_pr: { connector: "github", via: "grant" },
+    // The neutral work verbs are grant-only: one tool, many platforms, so the GRANT SET is the mount and no single connector names it. `read_work_channel` / `read_work_thread` are the INTERSECTION class, grant AND source, for the reason the header states.
+    read_work_channel: { connector: "*", via: "grant-and-source" },
+    read_work_thread: { connector: "*", via: "grant-and-source" },
+    create_ticket: { connector: "*", via: "grant" },
+    set_state: { connector: "*", via: "grant" },
+    assign: { connector: "*", via: "grant" },
+    add_label: { connector: "*", via: "grant" },
+    // The federated `search` verb reads `searchGrantedConnectors`, the RAW grant, and deliberately not `workDestinationPlatforms`: the ticket-registry filter would silently drop Notion.
+    search: { connector: "*", via: "grant" },
+};
+/** Work tools that carry the execute FENCE but mount with no grant check - a ticketed gap, NOT an exemption list: a row is still checked, must keep its fence, and must carry a real ticket id. The table is EMPTY and that is the target state; keep it empty. */
+export const WORK_MOUNT_GAPS = {};
+/** The work-plane symbols that make a tool file a WORK tool — see the header's totality signature. */
+const WORK_SIGNAL = new RegExp([
+    "\\brepoAllowed\\b",
+    "\\bworkDestinationPlatforms\\b",
+    "\\b[A-Za-z]+WorkMount\\b",
+    "\\bnotionWorkGrant\\b",
+    "\\bnotionWorkCredential\\b",
+    "\\blinearWorkOrg\\b",
+    "\\bworkGrantCredential\\b",
+    "\\bhasWorkGrant\\b",
+    "\\bhasGithubWorkGrant\\b",
+    "\\bcallerWorkGrant\\b",
+    "\\bsurfaceWorkReadMount\\b",
+    "\\bassertSurfaceWorkGrant\\b",
+    "\\bsearchGrantedConnectors\\b",
+].join("|"), "u");
+export function isWorkTool(source) {
+    return WORK_SIGNAL.test(source);
+}
+/** The connector-named grant-only mount predicate, e.g. `notionWorkMount` / `githubWorkMount`. One
+ *  naming rule across every provider: a grant-only mount is `<connector>WorkMount`. */
+function grantMountPredicate(connector) {
+    return `${connector}WorkMount`;
+}
+function namesIdentifier(source, identifier) {
+    return new RegExp(`\\b${identifier}\\b`, "u").test(source);
+}
+/** A `grant-or-source` mount is the UNION: the connector-named `...WorkMount` alongside the chat path (`workerChatArmMount`, or the bare `sourceScopedMount`). `workDestinationPlatforms` is the GRANT SET, so a tool that names it and declares this class fails. */
+function mountsOnUnion(source, connector) {
+    if (connector === "*")
+        return false;
+    const chatArm = namesIdentifier(source, "sourceScopedMount") || namesIdentifier(source, "workerChatArmMount");
+    return namesIdentifier(source, grantMountPredicate(connector)) && chatArm;
+}
+/** A `via: "grant-and-source"` mount is the INTERSECTION: `surfaceWorkReadMount` decides the mount
+ *  from the window's sources filtered by the domain's grant, and `assertSurfaceWorkGrant` re-checks
+ *  the turn's OWN platform in execute. BOTH are required — the mount alone answers "any granted
+ *  source", so a unified window carrying an ungranted source would read it without the second call. */
+function mountsOnIntersection(source) {
+    return namesIdentifier(source, "surfaceWorkReadMount") && namesIdentifier(source, "assertSurfaceWorkGrant");
+}
+/** Check the work-mount invariants over a set of scanned tool files; returns problem strings and is pure. `mounts`/`gaps` default to the real tables and are injectable only so the test can drive refusals the real manifest must never contain. */
+export function checkWorkMounts(tools, mounts = WORK_TOOL_MOUNTS, gaps = WORK_MOUNT_GAPS) {
+    const problems = [];
+    const seen = new Set();
+    for (const tool of tools) {
+        const rule = mounts[tool.name];
+        const gap = gaps[tool.name];
+        if (rule !== undefined && gap !== undefined) {
+            problems.push(`tool "${tool.name}" is in BOTH WORK_TOOL_MOUNTS and WORK_MOUNT_GAPS — a work tool either mounts on the grant or is a declared gap, never both`);
+        }
+        if (rule !== undefined) {
+            seen.add(tool.name);
+            if (!isWorkTool(tool.source)) {
+                problems.push(`tool "${tool.name}" is declared in WORK_TOOL_MOUNTS but its source names no work-plane symbol — either it stopped doing provider work (drop the row) or the totality signature missed it`);
+            }
+            // Rule 1 — the mount must be decided by the grant, in the class the row declares.
+            if (rule.via === "grant") {
+                if (rule.connector === "*") {
+                    // A neutral verb names no single connector, so it mounts on a grant SET, and each has exactly ONE correct spelling: the ticket verbs read `workDestinationPlatforms`, `search` reads `searchGrantedConnectors`. Naming the other would pass this check while mounting on the wrong set.
+                    const wantsSearchSet = tool.name === "search";
+                    const spelling = wantsSearchSet ? "searchGrantedConnectors" : "workDestinationPlatforms";
+                    if (!namesIdentifier(tool.source, spelling)) {
+                        problems.push(`tool "${tool.name}" declares via:"grant" with connector:"*" but never names ${spelling} — a neutral work verb mounts on the GRANT SET, which is the connector-less spelling of the same rule (ticket-destination verbs read workDestinationPlatforms; the search verb reads the raw searchGrantedConnectors instead — see channels/work-search.ts)`);
+                    }
+                }
+                else if (!namesIdentifier(tool.source, grantMountPredicate(rule.connector))) {
+                    problems.push(`tool "${tool.name}" declares via:"grant" but its source never names ${grantMountPredicate(rule.connector)} — a grant-only work tool MUST decide its mount with the connector's grant predicate (access/work-grant.ts), not grain and not topology`);
+                }
+                // Rule 1b — a grant-only tool must NOT also mount on chat presence. That would let a domain
+                // with the provider's chat channel and no work grant see a tool that can only refuse.
+                if (namesIdentifier(tool.source, "sourceScopedMount")) {
+                    problems.push(`tool "${tool.name}" declares via:"grant" but also mounts through sourceScopedMount — chat presence is never a precondition NOR a widening for a work-credential-only tool (OPE-928). Either drop the sources path or reclassify the row via:"grant-or-source"`);
+                }
+            }
+            else if (rule.via === "grant-and-source") {
+                if (!mountsOnIntersection(tool.source)) {
+                    problems.push(`tool "${tool.name}" declares via:"grant-and-source" but its source does not name BOTH surfaceWorkReadMount (the mount) and assertSurfaceWorkGrant (the per-turn check) — a container-fenced work read needs the grant at mount AND on the turn's own platform`);
+                }
+                // A container-fenced work read must NOT mount on the grant SET: it admits every granted
+                // connector, so the verb would arm on a window that sources none of them — the INTERSECTION
+                // is the point, and half of it would be missing.
+                if (namesIdentifier(tool.source, "workDestinationPlatforms")) {
+                    problems.push(`tool "${tool.name}" declares via:"grant-and-source" but names workDestinationPlatforms — that predicate is the GRANT SET alone, so it would arm this verb on every granted connector regardless of which one this window actually sources`);
+                }
+            }
+            else if (!mountsOnUnion(tool.source, rule.connector)) {
+                problems.push(`tool "${tool.name}" declares via:"grant-or-source" but its source does not name the pair (${grantMountPredicate(rule.connector)} + sourceScopedMount) — since OPE-953 that is the ONE spelling of this class: the container read OR the grant. workDestinationPlatforms is the GRANT SET now and carries no chat arm, so it cannot stand in for the pair`);
+            }
+            continue;
+        }
+        if (gap !== undefined) {
+            seen.add(tool.name);
+            // Rule 2 — a declared gap is still checked. It must carry a real ticket id and it must keep the
+            // execute fence that makes its refusal real and audited.
+            if (!/^OPE-\d+$/u.test(gap)) {
+                problems.push(`tool "${tool.name}" is a WORK_MOUNT_GAPS row whose value "${gap}" is not a ticket id (expected OPE-<number>)`);
+            }
+            if (!namesIdentifier(tool.source, "repoAllowed")) {
+                problems.push(`tool "${tool.name}" is a WORK_MOUNT_GAPS row but no longer names repoAllowed — a gap row is tolerated ONLY while the execute fence still refuses. Give it a grant mount and move it to WORK_TOOL_MOUNTS`);
+            }
+            continue;
+        }
+        // Rule 3 — totality. An un-classified work tool fails.
+        if (isWorkTool(tool.source)) {
+            problems.push(`tool "${tool.name}" does provider WORK (its source names a work-plane symbol) but appears in neither WORK_TOOL_MOUNTS nor WORK_MOUNT_GAPS — classify it: a work tool's mount comes from the caller's work grant (access/work-grant.ts)`);
+        }
+    }
+    // Rule 4 — no stale row.
+    for (const name of [...Object.keys(mounts), ...Object.keys(gaps)]) {
+        if (!seen.has(name)) {
+            problems.push(`"${name}" is declared in the work-mount manifest but no tool file of that name was scanned — stale row (rename or delete it)`);
+        }
+    }
+    return problems;
+}
+//# sourceMappingURL=work-mount-manifest.js.map

package/dist/agent/access/work-mount-manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"work-mount-manifest.js","sourceRoot":"","sources":["../../../agent/access/work-mount-manifest.ts"],"names":[],"mappings":"AAAA,uTAAuT;AACvT,gPAAgP;AAkBhP,sLAAsL;AACtL,MAAM,CAAC,MAAM,gBAAgB,GAA4C;IACvE,oOAAoO;IACpO,aAAa,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE;IACpD,gBAAgB,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,EAAE,iBAAiB,EAAE;IACjE,0GAA0G;IAC1G,iBAAiB,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,EAAE,iBAAiB,EAAE;IAClE,8FAA8F;IAC9F,2FAA2F;IAC3F,oGAAoG;IACpG,8FAA8F;IAC9F,aAAa,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE;IACpD,iBAAiB,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE;IACxD,eAAe,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE;IACtD,eAAe,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE;IACtD,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE;IAC9C,mBAAmB,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE;IAC1D,YAAY,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE;IACnD,4PAA4P;IAC5P,iBAAiB,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,EAAE,kBAAkB,EAAE;IAC9D,gBAAgB,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,EAAE,kBAAkB,EAAE;IAC7D,aAAa,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE;IAC/C,SAAS,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE;IAC3C,MAAM,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE;IACxC,SAAS,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE;IAC3C,sLAAsL;IACtL,MAAM,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE;CACzC,CAAC;AAEF,mQAAmQ;AACnQ,MAAM,CAAC,MAAM,eAAe,GAAqC,EAAE,CAAC;AAEpE,sGAAsG;AACtG,MAAM,WAAW,GAAG,IAAI,MAAM,CAC5B;IACE,mBAAmB;IACnB,gCAAgC;IAChC,0BAA0B;IAC1B,uBAAuB;IACvB,4BAA4B;IAC5B,qBAAqB;IACrB,2BAA2B;IAC3B,oBAAoB;IACpB,0BAA0B;IAC1B,uBAAuB;IACvB,4BAA4B;IAC5B,8BAA8B;IAC9B,+BAA+B;CAChC,CAAC,IAAI,CAAC,GAAG,CAAC,EACX,GAAG,CACJ,CAAC;AAEF,MAAM,UAAU,UAAU,CAAC,MAAc;IACvC,OAAO,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAClC,CAAC;AAED;uFACuF;AACvF,SAAS,mBAAmB,CAAC,SAAiB;IAC5C,OAAO,GAAG,SAAS,WAAW,CAAC;AACjC,CAAC;AAED,SAAS,eAAe,CAAC,MAAc,EAAE,UAAkB;IACzD,OAAO,IAAI,MAAM,CAAC,MAAM,UAAU,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC7D,CAAC;AAED,sQAAsQ;AACtQ,SAAS,aAAa,CAAC,MAAc,EAAE,SAAiB;IACtD,IAAI,SAAS,KAAK,GAAG;QAAE,OAAO,KAAK,CAAC;IACpC,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,EAAE,mBAAmB,CAAC,IAAI,eAAe,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;IAC9G,OAAO,eAAe,CAAC,MAAM,EAAE,mBAAmB,CAAC,SAAS,CAAC,CAAC,IAAI,OAAO,CAAC;AAC5E,CAAC;AAED;;;uGAGuG;AACvG,SAAS,oBAAoB,CAAC,MAAc;IAC1C,OAAO,eAAe,CAAC,MAAM,EAAE,sBAAsB,CAAC,IAAI,eAAe,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC;AAC9G,CAAC;AAED,qPAAqP;AACrP,MAAM,UAAU,eAAe,CAC7B,KAA8B,EAC9B,MAAM,GAA4C,gBAAgB,EAClE,IAAI,GAAqC,eAAe;IAExD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAE/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAE5B,IAAI,IAAI,KAAK,SAAS,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YAC5C,QAAQ,CAAC,IAAI,CACX,SAAS,IAAI,CAAC,IAAI,6HAA6H,CAChJ,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC7B,QAAQ,CAAC,IAAI,CACX,SAAS,IAAI,CAAC,IAAI,wKAAwK,CAC3L,CAAC;YACJ,CAAC;YACD,kFAAkF;YAClF,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,EAAE,CAAC;gBACzB,IAAI,IAAI,CAAC,SAAS,KAAK,GAAG,EAAE,CAAC;oBAC3B,wRAAwR;oBACxR,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC;oBAC9C,MAAM,QAAQ,GAAG,cAAc,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,0BAA0B,CAAC;oBACzF,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;wBAC5C,QAAQ,CAAC,IAAI,CACX,SAAS,IAAI,CAAC,IAAI,6DAA6D,QAAQ,6PAA6P,CACrV,CAAC;oBACJ,CAAC;gBACH,CAAC;qBAAM,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,EAAE,mBAAmB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;oBAC9E,QAAQ,CAAC,IAAI,CACX,SAAS,IAAI,CAAC,IAAI,qDAAqD,mBAAmB,CAAC,IAAI,CAAC,SAAS,CAAC,yIAAyI,CACpP,CAAC;gBACJ,CAAC;gBACD,4FAA4F;gBAC5F,sFAAsF;gBACtF,IAAI,eAAe,CAAC,IAAI,CAAC,MAAM,EAAE,mBAAmB,CAAC,EAAE,CAAC;oBACtD,QAAQ,CAAC,IAAI,CACX,SAAS,IAAI,CAAC,IAAI,6OAA6O,CAChQ,CAAC;gBACJ,CAAC;YACH,CAAC;iBAAM,IAAI,IAAI,CAAC,GAAG,KAAK,kBAAkB,EAAE,CAAC;gBAC3C,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;oBACvC,QAAQ,CAAC,IAAI,CACX,SAAS,IAAI,CAAC,IAAI,6OAA6O,CAChQ,CAAC;gBACJ,CAAC;gBACD,wFAAwF;gBACxF,4FAA4F;gBAC5F,iDAAiD;gBACjD,IAAI,eAAe,CAAC,IAAI,CAAC,MAAM,EAAE,0BAA0B,CAAC,EAAE,CAAC;oBAC7D,QAAQ,CAAC,IAAI,CACX,SAAS,IAAI,CAAC,IAAI,yNAAyN,CAC5O,CAAC;gBACJ,CAAC;YACH,CAAC;iBAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;gBACvD,QAAQ,CAAC,IAAI,CACX,SAAS,IAAI,CAAC,IAAI,2EAA2E,mBAAmB,CAAC,IAAI,CAAC,SAAS,CAAC,0NAA0N,CAC3V,CAAC;YACJ,CAAC;YACD,SAAS;QACX,CAAC;QAED,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpB,gGAAgG;YAChG,yDAAyD;YACzD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC5B,QAAQ,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,2CAA2C,GAAG,8CAA8C,CAAC,CAAC;YAChI,CAAC;YACD,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC,EAAE,CAAC;gBACjD,QAAQ,CAAC,IAAI,CACX,SAAS,IAAI,CAAC,IAAI,uLAAuL,CAC1M,CAAC;YACJ,CAAC;YACD,SAAS;QACX,CAAC;QAED,uDAAuD;QACvD,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5B,QAAQ,CAAC,IAAI,CACX,SAAS,IAAI,CAAC,IAAI,sNAAsN,CACzO,CAAC;QACJ,CAAC;IACH,CAAC;IAED,yBAAyB;IACzB,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAClE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACpB,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,sHAAsH,CAAC,CAAC;QAChJ,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/agent/access/worker-capabilities.d.ts

@@ -0,0 +1,60 @@
+import { type MemoryRecallRoute } from "./window-gate-manifest.js";
+import type { WindowGrain } from "../identity/binding.js";
+/** One capability a worker can be asked for: a router-facing headline plus the tools that provide
+ *  it. `id` is stable and greppable; `headline` is what the model actually reads. */
+export interface WorkerCapabilityGroup {
+    readonly id: string;
+    /** The router-facing sentence. Written as something an ASK can be matched against, never as a
+     *  description of a tool ("Make, read and change files…", not "the file tools"). */
+    readonly headline: string;
+    readonly tools: readonly string[];
+}
+/** Tools that are MACHINERY, not capability: per-grain kit resolvers that mount nothing under their own name. `grant_tools` stays here after OPE-2023, when a lent tool moved ONTO the worker: the index is a roster of NAMES a seat may route, and a `grant__…` name is minted at runtime from a grant row, so there is no name here to route. What tells the seat to delegate a lent tool is the copy the own-account gate hands it (`connections/own-account-ask.ts`), not this table. */
+export declare const WORKER_INDEX_MACHINERY: ReadonlySet<string>;
+/** Tools that are GRAIN LIFECYCLE, not capability: how a seat or a worker is born and dies. Excluding them is also what makes the STANDING and THREAD indexes identical, which is what lets one generated string serve both seats. */
+export declare const WORKER_INDEX_LIFECYCLE: ReadonlySet<string>;
+/** The seat's OWN conversational verbs, excluded because the index answers "what can a worker do that I can't" and these are the half the seat keeps. Kept as an explicit set rather than derived from what the seat mounts, so the totality check stays meaningful before the roster cut as well as after. */
+export declare const WORKER_INDEX_SEAT_VERBS: ReadonlySet<string>;
+/** THE GROUPING — the one hand-authored thing in this module, and the thing the totality check binds. Order is render order, and each headline is written from the ASK's side: "reach the open web" is a thing a person asks for, "the egress tools" is not. */
+export declare const WORKER_CAPABILITY_GROUPS: readonly WorkerCapabilityGroup[];
+/** The names a task WORKER holds that a DELEGATING seat of this grain does not, with machinery and lifecycle stripped here so every consumer sees the same set. It is lean-aware and worker-subtraction-aware for one reason: a name the lean cut or the worker's own subtraction removes is not a route that works, so the index must never offer it. */
+export declare function workerOnlyTools(grain: WindowGrain, gated?: Readonly<Record<string, readonly WindowGrain[]>>, ungated?: ReadonlySet<string>, withheldFromWorker?: ReadonlySet<string>): readonly string[];
+/** Totality, no-stale and no-duplicate over the grouping, failing for the reason this module exists: a new tool with no group would be INVISIBLE to a seat that can only delegate. Returns human-readable problems; empty means clean. */
+export declare function checkWorkerCapabilityGroups(gated?: Readonly<Record<string, readonly WindowGrain[]>>, ungated?: ReadonlySet<string>, groups?: readonly WorkerCapabilityGroup[]): string[];
+/** The drift join: WORKER_SEAT_RESERVED_TOOLS must name EXACTLY the DM carve-in set. It is a check rather than an import because access/worker-seat.ts is pure and spells the names itself, and a verb added to either set alone reds here instead of mounting on a delegated worker in silence. */
+export declare function checkWorkerSeatReservedTools(carveIn?: ReadonlySet<string>, reserved?: ReadonlySet<string>): string[];
+/**
+ * THE DELEGATION FLOOR (OPE-1766) — what "trivial" means, stated where the push to delegate is made.
+ *
+ * WHAT WENT WRONG. Across soak `soak-2026-09-12-a` (steps 1, 4, 6, 8, 9, 20, 22, 28) the seat sent
+ * one-line memory persists and single-section reads to a worker at the same rate at 23:22 as at
+ * 21:44 — no learning over 2 h 49 m and three rotations. Answering directly took 10–14 s; every turn
+ * over 45 s was a delegated turn or one waiting on a human. So trivial delegation cost the member a
+ * 4× wait, and delegation is also where the settlement double post rides (OPE-1753).
+ *
+ * 🔴 WHY THIS IS PROSE AND NOT A GATE, stated plainly rather than left as a gap. The delegation verb
+ * is eve's BUILT-IN `agent` — OE mounts no tool of that name and owns no `execute` for it
+ * (access/worker-continuation.ts). OE does own the tool's schema `validate`, which is where the
+ * `agentId` refusal lives, so a refusal there is mechanically available. It is not USED here because
+ * the only input is the brief TEXT, and no host-side predicate over a brief can tell "persist this
+ * one line" from a job that needs a worker: a length or keyword test would refuse real work and pass
+ * padded trivia. The seat is the only reader that knows how many calls the ask takes, so the floor
+ * is written for the seat rather than asserted by a gate.
+ *
+ * 🔴 THE MEASUREMENT IS HALF-BUILT, AND SAYING SO IS THE POINT. `scripts/eval/delegation-floor-
+ * offline.ts` holds the two-sided ask pool and a pure scorer, and `npm run test:delegation-floor-
+ * scoring` pins that scorer and the join from "no `agent` call" to "no `delegation.*` rows". What
+ * does NOT exist yet is a RUNNER: nothing drives a model over the pool, so the floor's effect on a
+ * live seat is unmeasured today and a regression in it is undetectable. Wire the runner the way
+ * `scripts/eval/compound-ask-offline.ts` does (a `main()` over `generateText`) before reading any
+ * delegation rate as evidence.
+ *
+ * Exported so the eval and the pinning test read the REAL sentence rather than a copy of it.
+ */
+export declare const DELEGATION_FLOOR: string;
+/** Only groups with at least one worker-only member appear, and only their worker-only members are named, so the block grows with the roster without anybody editing prose. On route "none" it renders EMPTY: telling a seat that cannot delegate to delegate is an instruction to bluff. */
+export declare function renderWorkerCapabilityIndex(workerOnly: readonly string[], route: MemoryRecallRoute, groups?: readonly WorkerCapabilityGroup[], 
+/** The async seat-minting verb, named only where it resolves (standing seats — §4.1's
+ *  no-recursive-thread-trees invariant keeps it off a thread seat). Omit on a thread seat. */
+asyncVerb?: "spawn_thread_session"): string;
+//# sourceMappingURL=worker-capabilities.d.ts.map

package/dist/agent/access/worker-capabilities.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-capabilities.d.ts","sourceRoot":"","sources":["../../../agent/access/worker-capabilities.ts"],"names":[],"mappings":"AAEA,OAAO,EAA4C,KAAK,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAG7G,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAE1D;qFACqF;AACrF,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB;wFACoF;IACpF,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;CACnC;AAED,6dAA6d;AAC7d,eAAO,MAAM,sBAAsB,EAAE,WAAW,CAAC,MAAM,CAA8D,CAAC;AAEtH,sOAAsO;AACtO,eAAO,MAAM,sBAAsB,EAAE,WAAW,CAAC,MAAM,CAWrD,CAAC;AAEH,+SAA+S;AAC/S,eAAO,MAAM,uBAAuB,EAAE,WAAW,CAAC,MAAM,CActD,CAAC;AAEH,gQAAgQ;AAChQ,eAAO,MAAM,wBAAwB,EAAE,SAAS,qBAAqB,EAuIpE,CAAC;AASF,0VAA0V;AAC1V,wBAAgB,eAAe,CAC7B,KAAK,EAAE,WAAW,EAClB,KAAK,GAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,WAAW,EAAE,CAAC,CAAsB,EAC5E,OAAO,GAAE,WAAW,CAAC,MAAM,CAAwB,EACnD,kBAAkB,GAAE,WAAW,CAAC,MAAM,CAA0B,GAC/D,SAAS,MAAM,EAAE,CAQnB;AAED,0OAA0O;AAC1O,wBAAgB,2BAA2B,CACzC,KAAK,GAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,WAAW,EAAE,CAAC,CAAsB,EAC5E,OAAO,GAAE,WAAW,CAAC,MAAM,CAAwB,EACnD,MAAM,GAAE,SAAS,qBAAqB,EAA6B,GAClE,MAAM,EAAE,CAwBV;AAED,oSAAoS;AACpS,wBAAgB,4BAA4B,CAC1C,OAAO,GAAE,WAAW,CAAC,MAAM,CAAoB,EAC/C,QAAQ,GAAE,WAAW,CAAC,MAAM,CAA8B,GACzD,MAAM,EAAE,CAeV;AAkCD;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,eAAO,MAAM,gBAAgB,QAMjB,CAAC;AAEb,6RAA6R;AAC7R,wBAAgB,2BAA2B,CACzC,UAAU,EAAE,SAAS,MAAM,EAAE,EAC7B,KAAK,EAAE,iBAAiB,EACxB,MAAM,GAAE,SAAS,qBAAqB,EAA6B;AACnE;8FAC8F;AAC9F,SAAS,CAAC,EAAE,sBAAsB,GACjC,MAAM,CAsCR"}