@open-everywhere/core 0.1.0

package/dist/agent/approvals/agent-create.d.ts

@@ -0,0 +1,44 @@
+import { type AccessRequestsConfig } from "../access/config.js";
+import { type AgentSpec } from "../memory/agents-codemod.js";
+import { GitHubContents, type CommitId } from "../scm/contents.js";
+import { createBranch, getBranchSha } from "../scm/refs.js";
+import { createOrUpdatePullRequest } from "../scm/pr.js";
+/** Frozen args. `spec` is validated at propose time and never re-derived, so the diff is a pure function of what the card rendered, and `requestId` names the PR branch so a re-request updates the same branch and PR. `configRepo`/`agentsPath` are display-only; execute() re-reads the live config. */
+export interface AgentCreateArgs {
+    readonly org: string;
+    readonly scopeKey: string;
+    readonly requestId: string;
+    readonly spec: AgentSpec;
+    readonly requestedBy: string;
+    readonly reason?: string;
+    readonly channelId: string;
+    readonly threadTs: string | null;
+    /** Display-only: the config repo the card promises the PR against. */
+    readonly configRepo: string;
+    /** Display-only: the overlay path the diff will touch. */
+    readonly agentsPath: string;
+}
+export interface AgentCreateExecuteDeps {
+    readonly config?: AccessRequestsConfig;
+    readonly contents?: Pick<GitHubContents, "getFile" | "putFile">;
+    readonly getBranchSha?: typeof getBranchSha;
+    readonly createBranch?: typeof createBranch;
+    readonly createPr?: typeof createOrUpdatePullRequest;
+    readonly post?: (method: string, body: string) => Promise<Record<string, unknown> | undefined>;
+    /** The requesting thread's note, dispatched on the asking surface's own platform. Separate from `post` because the admin note always lands in the operator's one configured Slack admin channel while this lands wherever the request was made. */
+    readonly postThreadNote?: (platform: string, target: {
+        channelId: string;
+        text: string;
+        threadTs?: string | null;
+    }) => Promise<string | undefined>;
+    readonly resolveToken?: (repo: string) => Promise<string>;
+    readonly committer?: CommitId;
+}
+export type EnabledAgentCreateConfig = AccessRequestsConfig & {
+    readonly adminChannel: string;
+    readonly configRepo: string;
+};
+/** The flow's config, fail-closed: an absent loader, a missing admin channel or config repo, or an absent `baseAgents` baseline all throw, rather than open a PR nobody hears about or validate a merged result it cannot compute. */
+export declare function requireAgentCreateConfig(override?: AccessRequestsConfig): EnabledAgentCreateConfig;
+export declare function executeAgentCreate(args: AgentCreateArgs, decidedBy: string, deps?: AgentCreateExecuteDeps): Promise<string>;
+//# sourceMappingURL=agent-create.d.ts.map

package/dist/agent/approvals/agent-create.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-create.d.ts","sourceRoot":"","sources":["../../../agent/approvals/agent-create.ts"],"names":[],"mappings":"AAGA,OAAO,EAAa,KAAK,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAI3E,OAAO,EAQL,KAAK,SAAS,EACf,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,cAAc,EAAE,KAAK,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AACnE,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC5D,OAAO,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAC;AAazD,2SAA2S;AAC3S,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,sEAAsE;IACtE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,0DAA0D;IAC1D,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,MAAM,CAAC,EAAE,oBAAoB,CAAC;IACvC,QAAQ,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,cAAc,EAAE,SAAS,GAAG,SAAS,CAAC,CAAC;IAChE,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,YAAY,CAAC;IAC5C,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,YAAY,CAAC;IAC5C,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,yBAAyB,CAAC;IACrD,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC,CAAC;IAC/F,mPAAmP;IACnP,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,KAAK,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACnJ,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1D,QAAQ,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC;CAC/B;AAED,MAAM,MAAM,wBAAwB,GAAG,oBAAoB,GAAG;IAAE,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC;AAE7H,sOAAsO;AACtO,wBAAgB,wBAAwB,CAAC,QAAQ,CAAC,EAAE,oBAAoB,GAAG,wBAAwB,CAclG;AA0CD,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,GAAE,sBAA2B,GAAG,OAAO,CAAC,MAAM,CAAC,CAgIrI"}

package/dist/agent/approvals/agent-create.js

@@ -0,0 +1,205 @@
+// The ActionKind behind `create_agent`: it opens ONE PR that writes the agents overlay, and nothing is provisioned until a human merges it.
+// An unmerged PR provisions nothing, which is what makes opening one pre-approval safe and why `policy` is "member" - the card is the injection gate, the merge is the privilege gate. Registered at module eval for its side effect.
+import { getConfig } from "../access/config.js";
+import { assertBindingsValid, assertBundlesValid } from "../access/bundle.js";
+import { assertChannelExclusivity, assertDomainsValid } from "../memory/domain.js";
+import { assertSilosValid } from "../memory/silo.js";
+import { agentBundleName, agentSiloName, applyAgentSpec, assertExposedAgentsCurated, emitAgentsModule, emptyAgentsFile, parseAgentsModule, } from "../memory/agents-codemod.js";
+import { GitHubContents } from "../scm/contents.js";
+import { createBranch, getBranchSha } from "../scm/refs.js";
+import { createOrUpdatePullRequest } from "../scm/pr.js";
+import { getGitHubApp } from "../scm/provider.js";
+import { resolveConfigRepoWriteToken } from "../scm/config-repo-token.js";
+import { isSafeBranchName } from "../scm/git.js";
+import { appendAudit } from "../audit/audit.js";
+import { emitTelemetry } from "../observability/telemetry.js";
+import { bridgeSlackForm } from "../channels/slack-bridge.js";
+import { postSurfaceText } from "../channels/surface-message-ops.js";
+import { platformOfScopeKey } from "../access/scope-key.js";
+import { inlineForReview } from "./review-surface.js";
+import { registerActionKind, whereFromScope } from "./actions.js";
+/** The flow's config, fail-closed: an absent loader, a missing admin channel or config repo, or an absent `baseAgents` baseline all throw, rather than open a PR nobody hears about or validate a merged result it cannot compute. */
+export function requireAgentCreateConfig(override) {
+    const cfg = override ?? getConfig().loadAccessRequests?.();
+    if (!cfg?.adminChannel || !cfg.configRepo) {
+        throw new Error("creating agents from chat isn't enabled on this deployment — an operator must configure the admin channel + config repo " +
+            "(AppConfig.loadAccessRequests; env OE_ACCESS_ADMIN_CHANNEL / OE_ACCESS_CONFIG_REPO). Until then, an admin can add an agent by hand-editing config in a PR.");
+    }
+    if (!cfg.baseAgents) {
+        throw new Error("this deployment doesn't expose its code-declared agents baseline (AccessRequestsConfig.baseAgents), so a candidate agents overlay can't be validated against the config it would merge alongside. Refusing rather than opening a PR nobody validated.");
+    }
+    return cfg;
+}
+function agentMemoryClause(spec) {
+    return spec.memory.kind === "new-readonly"
+        ? `a new READ-ONLY \`${inlineForReview(spec.memory.provider)}\` silo (\`${inlineForReview(agentSiloName(spec))}\`)`
+        : `the existing silo \`${inlineForReview(spec.memory.silo)}\``;
+}
+/** The one-line summary used on the card, in the PR title and in the outcome — one function, so the
+ *  three can never describe the same spec differently. Model-authored parts (name, title) are
+ *  collapsed to one line ({@link inlineForReview}); a PR title is single-line by definition anyway. */
+function agentSentence(spec) {
+    const titled = spec.title ? ` (“${inlineForReview(spec.title)}”)` : "";
+    const exposed = spec.exposed ? ", EXPOSED to a wider audience" : "";
+    return `Create agent "${inlineForReview(spec.name)}"${titled} — reading ${agentMemoryClause(spec)}, bound to this channel${exposed}`;
+}
+/** The PR body, code-rendered from the frozen spec: every model-authored string was captured when the card was posted and is never re-derived. `reason` rides inlineForReview so it cannot open a markdown block, and the spec sits inside a json fence. */
+function prBody(args, decidedBy) {
+    const s = args.spec;
+    return [
+        agentSentence(s) + ".",
+        "",
+        "This provisions, as ONE reviewable diff to the agents overlay:",
+        `- a memory DOMAIN \`${inlineForReview(s.name)}\` whose roster is this channel;`,
+        `- ${agentMemoryClause(s)};`,
+        `- an access BUNDLE \`${inlineForReview(agentBundleName(s))}\`${s.connectors && s.connectors.length ? ` granting connector(s) ${s.connectors.map((c) => `\`${inlineForReview(c.name)}\` (as \`${inlineForReview(c.credential)}\`)`).join(", ")}` : " (no connectors)"}, bound to that domain.`,
+        "",
+        "```json",
+        JSON.stringify(s, null, 2),
+        "```",
+        "",
+        `Requested by \`${args.requestedBy}\` · sent by \`${decidedBy}\` · scope \`${args.scopeKey}\``,
+        ...(args.reason ? [`Reason: ${inlineForReview(args.reason)}`] : []),
+        "",
+        "---",
+        "This diff was produced by the deterministic agents codemod from a frozen, validated AgentSpec — no model authored any",
+        "part of it after the request card was posted. Merging this PR provisions the agent on the next deploy of the merged",
+        "config. Closing it unmerged declines the request. See docs/capabilities/memory.md.",
+    ].join("\n");
+}
+export async function executeAgentCreate(args, decidedBy, deps = {}) {
+    const cfg = requireAgentCreateConfig(deps.config);
+    const repo = cfg.configRepo;
+    const base = cfg.configBase ?? "main";
+    const agentsPath = cfg.agentsPath ?? "agent/memory/config/agents.generated.ts";
+    const branch = `agent-create/${args.requestId}`;
+    if (!isSafeBranchName(branch)) {
+        // requestId is host-minted (randomUUID) so this only fires on a tampered row.
+        throw new Error(`unsafe agent-create branch name "${branch}"`);
+    }
+    const sentence = agentSentence(args.spec);
+    const baseAgents = cfg.baseAgents();
+    const baseDomains = cfg.baseDomains?.() ?? [];
+    const baseSilos = cfg.baseSilos?.() ?? [];
+    // Merged-result validation runs before ANY side effect in both modes: the same load-time asserts the deployment runs at boot, re-run over the code baseline plus the candidate overlay, so a spec that would break boot never becomes a PR.
+    const validateMerged = (overlayText) => {
+        const overlay = overlayText ? parseAgentsModule(overlayText) : emptyAgentsFile();
+        const result = applyAgentSpec(overlay, args.spec);
+        const mergedDomains = [...baseDomains, ...baseAgents.domains, ...result.file.domains];
+        const mergedSilos = [...baseSilos, ...baseAgents.silos, ...result.file.silos];
+        const mergedSpecs = [...baseAgents.specs, ...result.file.specs];
+        assertChannelExclusivity(mergedDomains);
+        assertDomainsValid(mergedDomains);
+        assertSilosValid(mergedSilos);
+        assertExposedAgentsCurated(mergedDomains, mergedSilos, mergedSpecs);
+        const mergedBundles = [...cfg.baseBundles(), ...baseAgents.bundles, ...result.file.bundles];
+        assertBundlesValid(mergedBundles);
+        // The PERSON-GROUP registry rides along (C.1): this overlay only writes domain-scoped bindings,
+        // but the CODE baseline it is merged into may hold `group`-scoped ones, and a two-argument call
+        // here would skip their existence check — silently reporting "valid" for a config the next boot
+        // would refuse. Absent registry ⇒ the check is skipped, never faked (bundle.ts's contract).
+        assertBindingsValid([...cfg.baseBindings(), ...baseAgents.bindings, ...result.file.bindings], mergedBundles, cfg.groupRegistry?.());
+        return result;
+    };
+    if (cfg.dryRun) {
+        validateMerged("");
+        await appendAudit({
+            ...whereFromScope(args.org, args.scopeKey),
+            principalId: decidedBy,
+            action: "agent.create.pr_opened",
+            detail: { requestId: args.requestId, dryRun: true, agent: args.spec.name, sentence, repo, branch },
+        });
+        return `dry-run — would commit agent "${args.spec.name}" to ${repo}#${branch} and open a PR against ${base}; validation passed`;
+    }
+    const token = await (deps.resolveToken ?? resolveConfigRepoWriteToken)(repo);
+    const contents = deps.contents ?? new GitHubContents();
+    const refSha = deps.getBranchSha ?? getBranchSha;
+    const mkBranch = deps.createBranch ?? createBranch;
+    const openPr = deps.createPr ?? createOrUpdatePullRequest;
+    const post = deps.post ?? bridgeSlackForm;
+    // Cut (or reuse) the request branch off base. Reuse is the re-request path: the same pending's
+    // branch accumulates the (idempotent) codemod result and the PR updates.
+    let branchSha = await refSha({ repo, branch, token });
+    if (branchSha === null) {
+        const baseSha = await refSha({ repo, branch: base, token });
+        if (baseSha === null)
+            throw new Error(`config repo ${repo} has no base branch "${base}" — check accessRequests.configBase.`);
+        await mkBranch({ repo, branch, sha: baseSha, token });
+        branchSha = baseSha;
+    }
+    // Read the CURRENT overlay from the branch (a missing file means a first-ever agent), apply the
+    // frozen spec, and re-validate the merged result — ring ② — before anything is committed.
+    const existing = await contents.getFile(repo, agentsPath, branch, token);
+    const result = validateMerged(existing?.content ?? "");
+    if (result.changed) {
+        const committer = deps.committer ?? getGitHubApp()?.committer() ?? { name: "open-everywhere[bot]", email: "open-everywhere@users.noreply.github.com" };
+        await contents.putFile(repo, agentsPath, emitAgentsModule(result.file), `create agent: ${args.spec.name}`, branch, token, committer, existing?.sha);
+    }
+    const pr = await openPr({
+        repo,
+        head: branch,
+        base,
+        title: sentence,
+        body: prBody(args, decidedBy),
+        token,
+    });
+    await appendAudit({
+        ...whereFromScope(args.org, args.scopeKey),
+        principalId: decidedBy,
+        action: "agent.create.pr_opened",
+        detail: {
+            requestId: args.requestId,
+            agent: args.spec.name,
+            sentence,
+            repo,
+            branch,
+            pr: pr.number,
+            url: pr.url,
+            updated: pr.updated,
+            requestedBy: args.requestedBy,
+        },
+    });
+    emitTelemetry("oe.feature.used", { "oe.feature": "agent_created", "oe.outcome": "ok" });
+    // Notifications are best-effort AFTER the PR exists: a Slack hiccup must not lose an already-open
+    // PR, so failures degrade to a note in the outcome line, never a throw.
+    const adminBody = new URLSearchParams();
+    adminBody.set("channel", cfg.adminChannel);
+    adminBody.set("text", `:robot_face: New agent — ${sentence}.\nRequested by <@${args.requestedBy}> · sent by <@${decidedBy}>` +
+        `${args.reason ? ` · reason: ${inlineForReview(args.reason)}` : ""}\nReview and merge to provision it: ${pr.url}`);
+    const adminRes = await post("chat.postMessage", adminBody.toString());
+    const adminOk = adminRes?.ok === true;
+    // The requester's thread note goes to the platform of `args.scopeKey`, frozen at propose from the verified binding, never to anything the model or the click supplied. An unparseable scope key yields no platform, and the note is skipped rather than guessed onto Slack.
+    const askingPlatform = platformOfScopeKey(args.scopeKey);
+    if (askingPlatform) {
+        const threadNote = deps.postThreadNote ?? postSurfaceText;
+        await threadNote(askingPlatform, {
+            channelId: args.channelId,
+            threadTs: args.threadTs,
+            text: `Agent request sent — PR ${pr.url} is with the admins. Merging it provisions agent "${args.spec.name}" for this channel.`,
+        });
+    }
+    return (`${pr.updated ? `updated PR #${pr.number}` : `opened PR #${pr.number}`} — ${pr.url}; an admin merges it in GitHub to provision the agent` +
+        (adminOk ? "" : " (admin-channel notification failed — flag it to an admin directly)"));
+}
+const agentCreate = {
+    kind: "agent.create",
+    policy: "member",
+    summarize(args) {
+        const s = args.spec;
+        return [
+            `Open a PR provisioning a new agent — ${agentSentence(s)}`,
+            `Memory: ${agentMemoryClause(s)}.`,
+            `Capabilities: bundle \`${inlineForReview(agentBundleName(s))}\`${s.connectors && s.connectors.length ? ` — connector(s) ${s.connectors.map((c) => `\`${inlineForReview(c.name)}\` (as \`${inlineForReview(c.credential)}\`)`).join(", ")}` : " — no connectors"}.`,
+            ...(s.instructions ? [`Standing instructions: "${inlineForReview(s.instructions)}"`] : []),
+            ...(s.exposed ? ["⚠ EXPOSED — reachable by a wider, less-trusted audience; it may only read a curated read-only silo."] : []),
+            ...(args.reason ? [`Reason: ${inlineForReview(args.reason)}`] : []),
+            `Sending opens a bot-PR against \`${args.configRepo}\` for an admin to merge — nothing is provisioned until they do.`,
+            `Requested by ${args.requestedBy}`,
+        ];
+    },
+    async execute(args, decidedBy) {
+        return executeAgentCreate(args, decidedBy);
+    },
+};
+registerActionKind(agentCreate);
+//# sourceMappingURL=agent-create.js.map

package/dist/agent/approvals/agent-create.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-create.js","sourceRoot":"","sources":["../../../agent/approvals/agent-create.ts"],"names":[],"mappings":"AAAA,4IAA4I;AAC5I,sOAAsO;AAEtO,OAAO,EAAE,SAAS,EAA6B,MAAM,qBAAqB,CAAC;AAC3E,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAC9E,OAAO,EAAE,wBAAwB,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACnF,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EACL,eAAe,EACf,aAAa,EACb,cAAc,EACd,0BAA0B,EAC1B,gBAAgB,EAChB,eAAe,EACf,iBAAiB,GAElB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,cAAc,EAAiB,MAAM,oBAAoB,CAAC;AACnE,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC5D,OAAO,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,2BAA2B,EAAE,MAAM,6BAA6B,CAAC;AAC1E,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAkClE,sOAAsO;AACtO,MAAM,UAAU,wBAAwB,CAAC,QAA+B;IACtE,MAAM,GAAG,GAAG,QAAQ,IAAI,SAAS,EAAE,CAAC,kBAAkB,EAAE,EAAE,CAAC;IAC3D,IAAI,CAAC,GAAG,EAAE,YAAY,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CACb,0HAA0H;YACxH,4JAA4J,CAC/J,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CACb,uPAAuP,CACxP,CAAC;IACJ,CAAC;IACD,OAAO,GAA+B,CAAC;AACzC,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAe;IACxC,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,cAAc;QACxC,CAAC,CAAC,qBAAqB,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,eAAe,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,KAAK;QACnH,CAAC,CAAC,uBAAuB,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;AACnE,CAAC;AAED;;uGAEuG;AACvG,SAAS,aAAa,CAAC,IAAe;IACpC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IACvE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC,EAAE,CAAC;IACpE,OAAO,iBAAiB,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,cAAc,iBAAiB,CAAC,IAAI,CAAC,0BAA0B,OAAO,EAAE,CAAC;AACvI,CAAC;AAED,4PAA4P;AAC5P,SAAS,MAAM,CAAC,IAAqB,EAAE,SAAiB;IACtD,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC;IACpB,OAAO;QACL,aAAa,CAAC,CAAC,CAAC,GAAG,GAAG;QACtB,EAAE;QACF,gEAAgE;QAChE,uBAAuB,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,kCAAkC;QAChF,KAAK,iBAAiB,CAAC,CAAC,CAAC,GAAG;QAC5B,wBAAwB,eAAe,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,eAAe,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,kBAAkB,yBAAyB;QAC9R,EAAE;QACF,SAAS;QACT,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1B,KAAK;QACL,EAAE;QACF,kBAAkB,IAAI,CAAC,WAAW,kBAAkB,SAAS,gBAAgB,IAAI,CAAC,QAAQ,IAAI;QAC9F,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,EAAE;QACF,KAAK;QACL,uHAAuH;QACvH,qHAAqH;QACrH,oFAAoF;KACrF,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAAqB,EAAE,SAAiB,EAAE,IAAI,GAA2B,EAAE;IAClH,MAAM,GAAG,GAAG,wBAAwB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAClD,MAAM,IAAI,GAAG,GAAG,CAAC,UAAU,CAAC;IAC5B,MAAM,IAAI,GAAG,GAAG,CAAC,UAAU,IAAI,MAAM,CAAC;IACtC,MAAM,UAAU,GAAG,GAAG,CAAC,UAAU,IAAI,yCAAyC,CAAC;IAC/E,MAAM,MAAM,GAAG,gBAAgB,IAAI,CAAC,SAAS,EAAE,CAAC;IAChD,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9B,8EAA8E;QAC9E,MAAM,IAAI,KAAK,CAAC,oCAAoC,MAAM,GAAG,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,UAAU,GAAG,GAAG,CAAC,UAAW,EAAE,CAAC;IACrC,MAAM,WAAW,GAAG,GAAG,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,CAAC;IAC9C,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,CAAC;IAE1C,4OAA4O;IAC5O,MAAM,cAAc,GAAG,CAAC,WAAmB,EAAqC,EAAE;QAChF,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC;QACjF,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAClD,MAAM,aAAa,GAAG,CAAC,GAAG,WAAW,EAAE,GAAG,UAAU,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtF,MAAM,WAAW,GAAG,CAAC,GAAG,SAAS,EAAE,GAAG,UAAU,CAAC,KAAK,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9E,MAAM,WAAW,GAAG,CAAC,GAAG,UAAU,CAAC,KAAK,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChE,wBAAwB,CAAC,aAAa,CAAC,CAAC;QACxC,kBAAkB,CAAC,aAAa,CAAC,CAAC;QAClC,gBAAgB,CAAC,WAAW,CAAC,CAAC;QAC9B,0BAA0B,CAAC,aAAa,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;QACpE,MAAM,aAAa,GAAG,CAAC,GAAG,GAAG,CAAC,WAAW,EAAE,EAAE,GAAG,UAAU,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5F,kBAAkB,CAAC,aAAa,CAAC,CAAC;QAClC,gGAAgG;QAChG,gGAAgG;QAChG,gGAAgG;QAChG,4FAA4F;QAC5F,mBAAmB,CAAC,CAAC,GAAG,GAAG,CAAC,YAAY,EAAE,EAAE,GAAG,UAAU,CAAC,QAAQ,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,aAAa,EAAE,GAAG,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;QACpI,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IAEF,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;QACf,cAAc,CAAC,EAAE,CAAC,CAAC;QACnB,MAAM,WAAW,CAAC;YAChB,GAAG,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC;YAC1C,WAAW,EAAE,SAAS;YACtB,MAAM,EAAE,wBAAwB;YAChC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE;SACnG,CAAC,CAAC;QACH,OAAO,iCAAiC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,IAAI,IAAI,MAAM,0BAA0B,IAAI,qBAAqB,CAAC;IAClI,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,IAAI,2BAA2B,CAAC,CAAC,IAAI,CAAC,CAAC;IAC7E,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,cAAc,EAAE,CAAC;IACvD,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,IAAI,YAAY,CAAC;IACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,IAAI,YAAY,CAAC;IACnD,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,IAAI,yBAAyB,CAAC;IAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,eAAe,CAAC;IAE1C,+FAA+F;IAC/F,yEAAyE;IACzE,IAAI,SAAS,GAAG,MAAM,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACtD,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5D,IAAI,OAAO,KAAK,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,eAAe,IAAI,wBAAwB,IAAI,sCAAsC,CAAC,CAAC;QAC7H,MAAM,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QACtD,SAAS,GAAG,OAAO,CAAC;IACtB,CAAC;IAED,gGAAgG;IAChG,0FAA0F;IAC1F,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IACzE,MAAM,MAAM,GAAG,cAAc,CAAC,QAAQ,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC;IAEvD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,sBAAsB,EAAE,KAAK,EAAE,0CAA0C,EAAE,CAAC;QACvJ,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,EAAE,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,iBAAiB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;IACtJ,CAAC;IAED,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC;QACtB,IAAI;QACJ,IAAI,EAAE,MAAM;QACZ,IAAI;QACJ,KAAK,EAAE,QAAQ;QACf,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC;QAC7B,KAAK;KACN,CAAC,CAAC;IAEH,MAAM,WAAW,CAAC;QAChB,GAAG,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC;QAC1C,WAAW,EAAE,SAAS;QACtB,MAAM,EAAE,wBAAwB;QAChC,MAAM,EAAE;YACN,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI;YACrB,QAAQ;YACR,IAAI;YACJ,MAAM;YACN,EAAE,EAAE,EAAE,CAAC,MAAM;YACb,GAAG,EAAE,EAAE,CAAC,GAAG;YACX,OAAO,EAAE,EAAE,CAAC,OAAO;YACnB,WAAW,EAAE,IAAI,CAAC,WAAW;SAC9B;KACF,CAAC,CAAC;IACH,aAAa,CAAC,iBAAiB,EAAE,EAAE,YAAY,EAAE,eAAe,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;IAExF,kGAAkG;IAClG,wEAAwE;IACxE,MAAM,SAAS,GAAG,IAAI,eAAe,EAAE,CAAC;IACxC,SAAS,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC;IAC3C,SAAS,CAAC,GAAG,CACX,MAAM,EACN,4BAA4B,QAAQ,qBAAqB,IAAI,CAAC,WAAW,iBAAiB,SAAS,GAAG;QACpG,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,uCAAuC,EAAE,CAAC,GAAG,EAAE,CACpH,CAAC;IACF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,kBAAkB,EAAE,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC;IACtE,MAAM,OAAO,GAAG,QAAQ,EAAE,EAAE,KAAK,IAAI,CAAC;IAEtC,4QAA4Q;IAC5Q,MAAM,cAAc,GAAG,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACzD,IAAI,cAAc,EAAE,CAAC;QACnB,MAAM,UAAU,GAAG,IAAI,CAAC,cAAc,IAAI,eAAe,CAAC;QAC1D,MAAM,UAAU,CAAC,cAAc,EAAE;YAC/B,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,IAAI,EAAE,2BAA2B,EAAE,CAAC,GAAG,qDAAqD,IAAI,CAAC,IAAI,CAAC,IAAI,qBAAqB;SAChI,CAAC,CAAC;IACL,CAAC;IAED,OAAO,CACL,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,GAAG,uDAAuD;QACzI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,qEAAqE,CAAC,CACvF,CAAC;AACJ,CAAC;AAED,MAAM,WAAW,GAAgC;IAC/C,IAAI,EAAE,cAAc;IACpB,MAAM,EAAE,QAAQ;IAChB,SAAS,CAAC,IAAI;QACZ,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC;QACpB,OAAO;YACL,wCAAwC,aAAa,CAAC,CAAC,CAAC,EAAE;YAC1D,WAAW,iBAAiB,CAAC,CAAC,CAAC,GAAG;YAClC,0BAA0B,eAAe,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,eAAe,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,kBAAkB,GAAG;YACnQ,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,2BAA2B,eAAe,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1F,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,qGAAqG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7H,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACnE,oCAAoC,IAAI,CAAC,UAAU,kEAAkE;YACrH,gBAAgB,IAAI,CAAC,WAAW,EAAE;SACnC,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS;QAC3B,OAAO,kBAAkB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC7C,CAAC;CACF,CAAC;AAEF,kBAAkB,CAAC,WAAW,CAAC,CAAC"}

package/dist/agent/approvals/arming-context.d.ts

@@ -0,0 +1,13 @@
+export interface ArmingApproval {
+    /** `pending_actions.id` — the join key to the frozen args and the `approval.*` audit rows. */
+    readonly id: string;
+    readonly kind: string;
+}
+/**
+ * Run `fn` with `approval` readable by anything it awaits. Called once, by the decide core around
+ * `ActionKind.execute` — do NOT wrap anything else, or "armed by this card" stops being true.
+ */
+export declare function withArmingApproval<T>(approval: ArmingApproval, fn: () => Promise<T>): Promise<T>;
+/** The card whose click is executing right now, or `undefined` outside a decide. */
+export declare function armingApproval(): ArmingApproval | undefined;
+//# sourceMappingURL=arming-context.d.ts.map

package/dist/agent/approvals/arming-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"arming-context.d.ts","sourceRoot":"","sources":["../../../agent/approvals/arming-context.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,cAAc;IAC7B,8FAA8F;IAC9F,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAID;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,QAAQ,EAAE,cAAc,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAEhG;AAED,oFAAoF;AACpF,wBAAgB,cAAc,IAAI,cAAc,GAAG,SAAS,CAE3D"}

package/dist/agent/approvals/arming-context.js

@@ -0,0 +1,17 @@
+// An approval click executes OUTSIDE any eve session, so this rides AsyncLocalStorage: `defineState` would throw there every time, and a module global would let two concurrently-served clicks read each other's card.
+// Fail-soft always: a caller outside a decide reads `undefined` and records provenance with no approval id.
+// Nothing here is a security control — it never widens what a click may do, and no authorisation decision may be taken on it.
+import { AsyncLocalStorage } from "node:async_hooks";
+const store = new AsyncLocalStorage();
+/**
+ * Run `fn` with `approval` readable by anything it awaits. Called once, by the decide core around
+ * `ActionKind.execute` — do NOT wrap anything else, or "armed by this card" stops being true.
+ */
+export function withArmingApproval(approval, fn) {
+    return store.run(approval, fn);
+}
+/** The card whose click is executing right now, or `undefined` outside a decide. */
+export function armingApproval() {
+    return store.getStore();
+}
+//# sourceMappingURL=arming-context.js.map

package/dist/agent/approvals/arming-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"arming-context.js","sourceRoot":"","sources":["../../../agent/approvals/arming-context.ts"],"names":[],"mappings":"AAAA,wNAAwN;AACxN,4GAA4G;AAC5G,8HAA8H;AAE9H,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAQrD,MAAM,KAAK,GAAG,IAAI,iBAAiB,EAAkB,CAAC;AAEtD;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAI,QAAwB,EAAE,EAAoB;IAClF,OAAO,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AACjC,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,cAAc;IAC5B,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAC;AAC1B,CAAC"}

package/dist/agent/approvals/card-disclosure.d.ts

@@ -0,0 +1,28 @@
+import { resolveAudienceFloor, type AudienceFloor, type RoomRoster } from "../access/audience-floor.js";
+/** `floor` rides both arms so an allow can be telemetered later without reshaping the type. */
+export type CardDisclosureVerdict = {
+    readonly ok: true;
+    readonly floor: AudienceFloor;
+}
+/** The room's audience floor POSITIVELY resolved to `guest` — today, an externally-shared Slack
+ *  channel (the CHANNEL's external bit, not a per-member classification). */
+ | {
+    readonly ok: false;
+    readonly reason: "audience-floor";
+    readonly floor: AudienceFloor;
+};
+export interface CardDisclosureInput {
+    readonly floor: AudienceFloor;
+    /** The live roster the floor came from — read for its `resolved` bit (the inert rule above). */
+    readonly roster: RoomRoster;
+}
+/** An OBSERVED `guest` floor refuses; everything else allows, including an unobservable roster whose floor is `guest` by fail-closed default. The action kind, the approver policy and the summary lines are deliberately NOT inputs. */
+export declare function classifyCardDisclosure(input: CardDisclosureInput): CardDisclosureVerdict;
+export interface CardDisclosureDeps {
+    readonly floor?: typeof resolveAudienceFloor;
+}
+/** `surfaceKey` is the card's destination `platform/workspace/channel`. FAIL-OPEN on a throw, so a transient platform blip never becomes an org that cannot approve anything. */
+export declare function checkCardDisclosure(surfaceKey: string, deps?: CardDisclosureDeps): Promise<CardDisclosureVerdict>;
+/** The refusal is CONTENT-FREE by construction: it names no action kind, figure, domain or scope, only the property of the ROOM and the one concrete thing to do about it. */
+export declare function cardDisclosureRefusalNotice(): string;
+//# sourceMappingURL=card-disclosure.d.ts.map

package/dist/agent/approvals/card-disclosure.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"card-disclosure.d.ts","sourceRoot":"","sources":["../../../agent/approvals/card-disclosure.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,oBAAoB,EAAE,KAAK,aAAa,EAAE,KAAK,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAExG,+FAA+F;AAC/F,MAAM,MAAM,qBAAqB,GAC7B;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAA;CAAE;AACtD;6EAC6E;GAC3E;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAA;CAAE,CAAC;AAE7F,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAC9B,gGAAgG;IAChG,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;CAC7B;AAED,yOAAyO;AACzO,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,mBAAmB,GAAG,qBAAqB,CAKxF;AAKD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,oBAAoB,CAAC;CAC9C;AAED,iLAAiL;AACjL,wBAAsB,mBAAmB,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,GAAE,kBAAuB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAQ3H;AAED,8KAA8K;AAC9K,wBAAgB,2BAA2B,IAAI,MAAM,CAQpD"}

package/dist/agent/approvals/card-disclosure.js

@@ -0,0 +1,31 @@
+// An approval card NEVER lands in a room with an OBSERVED external guest, because the card is a complete rendering of what will execute. The check is ROOM-GRAIN — it reads the room's roster and nothing about the card's kind, tier or content — and it fails OPEN on an unobservable roster, refusing only on a positively observed guest.
+import { resolveAudienceFloor } from "../access/audience-floor.js";
+/** An OBSERVED `guest` floor refuses; everything else allows, including an unobservable roster whose floor is `guest` by fail-closed default. The action kind, the approver policy and the summary lines are deliberately NOT inputs. */
+export function classifyCardDisclosure(input) {
+    if (input.roster.resolved && input.floor === "guest") {
+        return { ok: false, reason: "audience-floor", floor: input.floor };
+    }
+    return { ok: true, floor: input.floor };
+}
+/** EMPTY on purpose: `guest` is decided before computeAudienceFloor consults the admin set at all, so an admin set cannot change the answer and would only drag a config load onto the propose path. */
+const NO_ADMINS = new Set();
+/** `surfaceKey` is the card's destination `platform/workspace/channel`. FAIL-OPEN on a throw, so a transient platform blip never becomes an org that cannot approve anything. */
+export async function checkCardDisclosure(surfaceKey, deps = {}) {
+    try {
+        const resolution = await (deps.floor ?? resolveAudienceFloor)(surfaceKey, NO_ADMINS);
+        return classifyCardDisclosure(resolution);
+    }
+    catch (err) {
+        console.log(`[open-everywhere:approvals] audience floor unresolvable for ${surfaceKey} (${String(err)}) — card disclosure inert`);
+        return { ok: true, floor: "guest" };
+    }
+}
+/** The refusal is CONTENT-FREE by construction: it names no action kind, figure, domain or scope, only the property of the ROOM and the one concrete thing to do about it. */
+export function cardDisclosureRefusalNotice() {
+    return ("I can't put an approval card in this channel. Its audience floor resolved to \"guest\" — the " +
+        "platform reports it as externally shared, or carrying an observed guest — and an approval card " +
+        "spells out exactly what would execute, so posting one here would show that to people outside " +
+        "your org. Nothing about the action is in this message, deliberately. Ask me again in a channel " +
+        "that isn't shared outside your org (or remove the external members) and it will work as normal.");
+}
+//# sourceMappingURL=card-disclosure.js.map

package/dist/agent/approvals/card-disclosure.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"card-disclosure.js","sourceRoot":"","sources":["../../../agent/approvals/card-disclosure.ts"],"names":[],"mappings":"AAAA,8UAA8U;AAE9U,OAAO,EAAE,oBAAoB,EAAuC,MAAM,6BAA6B,CAAC;AAexG,yOAAyO;AACzO,MAAM,UAAU,sBAAsB,CAAC,KAA0B;IAC/D,IAAI,KAAK,CAAC,MAAM,CAAC,QAAQ,IAAI,KAAK,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;QACrD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;IACrE,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;AAC1C,CAAC;AAED,wMAAwM;AACxM,MAAM,SAAS,GAAwB,IAAI,GAAG,EAAU,CAAC;AAMzD,iLAAiL;AACjL,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,UAAkB,EAAE,IAAI,GAAuB,EAAE;IACzF,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,oBAAoB,CAAC,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QACrF,OAAO,sBAAsB,CAAC,UAAU,CAAC,CAAC;IAC5C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,GAAG,CAAC,+DAA+D,UAAU,KAAK,MAAM,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;QAClI,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IACtC,CAAC;AACH,CAAC;AAED,8KAA8K;AAC9K,MAAM,UAAU,2BAA2B;IACzC,OAAO,CACL,+FAA+F;QAC/F,iGAAiG;QACjG,+FAA+F;QAC/F,iGAAiG;QACjG,iGAAiG,CAClG,CAAC;AACJ,CAAC"}

package/dist/agent/approvals/card-signal.d.ts

@@ -0,0 +1,41 @@
+/** Mark that an approval card was actually posted this turn. Call it ONLY after the post succeeds — never on a validation or refusal path, whose thrown error is exactly the text the user still needs to see. */
+export declare function markCardPostedThisTurn(): void;
+/** Peek without consuming: is the card signal currently set? For a mid-turn reader that must NOT disturb the read-and-reset contract message.completed owns, and fail-soft — no session context reads false. */
+export declare function peekCardPostedThisTurn(): boolean;
+/** Read-and-reset: was a card posted this turn? It always clears the slot in the same call, so the next turn starts clean whether or not this one posted a card. */
+export declare function consumeCardPostedThisTurn(): boolean;
+/** One permission this run asked for and did not get. */
+export interface RoutineRunPermissionRefusal {
+    /** The permission in plain language — the same words `list_routines` uses for a live permission. */
+    readonly permission: string;
+    /** Where its card is, as a PERMALINK — null whenever the surface minted none, which is every Teams and Linear card and any card whose row could not be read. Never the room id: this block rides every reply, so a raw `platform/workspace/channel` triple would print the card room's internal ids into another window. */
+    readonly card: string | null;
+    /** Is there a card on a surface at all? Answered from the PLANNER's own `cardId` and never from a pointer read, which answers `{}` on any throw — a live card would then report `cardPosted: false` and send an owner to the `edit_routine` bump that destroys it. */
+    readonly cardPosted: boolean;
+    /** Did this run give up on the card plane for this permission WITHOUT consulting it, because the per-fire cap was already spent? It is not "no card": the run never looked, so both other absence arms would lie, and the entry exists so the cap costs a card and never a report line. */
+    readonly cardCapped: boolean;
+    /** Did this run ESTABLISH what became of the card? False ONLY when the card store could not be read: a null pointer must never render as "no card is waiting", which would send an owner to `edit_routine` and kill the card the failed read could not see. */
+    readonly cardKnown: boolean;
+}
+/** How many permissions one run's report lists; past the cap the ledger stops recording and never drops what it already holds. The card-offer cap reuses the number, which does NOT make the two counts equal — that cap counts offers through one seam, this ledger counts refusals from both refusal planes. */
+export declare const MAX_RUN_REFUSALS = 16;
+/** Record one permission this run was refused; call it AFTER the refusal is settled, so `card` names what is really in the room. De-duplicated by permission, and the FIRST entry wins — it is the one whose pointer was resolved beside the card that was posted. */
+export declare function noteRoutineRunPermissionRefusal(entry: RoutineRunPermissionRefusal): void;
+/**
+ * Read-and-reset: what did this run ask for and not get? The reset is at READ, not at post, so a post that then fails loses the block for this run — the standing record still answers the same question from the rows.
+ * `wakeId` is the wake the caller is ANSWERING. It admits a ledger a previous turn handed to this wake's one corrective re-drive ({@link carryRunRefusalsToRedrive}); pass it wherever the caller knows which conversation it is answering, and omit it where it does not — omitting it only ever reads the turn key, which is the behaviour this function had before the carry existed.
+ */
+export declare function consumeRoutineRunPermissionRefusals(wakeId?: string): readonly RoutineRunPermissionRefusal[];
+/**
+ * Hand this turn's held refusals to the ONE corrective re-drive of `wakeId`, so the fire's report still carries them when the seat answers on the corrective turn (OPE-1982). Called by the unified window's drop branch, and ONLY when a re-drive really fired.
+ * 🔴 IT RE-KEYS, IT DOES NOT COPY. The turn key is cleared to a value no real turn can hold, so the carried ledger is readable ONLY by a caller that names this wake.
+ * 🔴 AND IT CARRIES ONLY THIS TURN'S OWN LEDGER. A `job` routine keeps ONE session across fires, and a fire whose turn ended in judged silence leaves its entries in the slot unconsumed — the silence arm returns before the drop branch and nothing clears them there. Without the turn check a LATER fire's drop would re-key that stranded ledger onto its own wake, and its corrective reply would report a permission it never asked for, pointing at a card minted in another conversation. That is the precise harm the turn key exists to prevent, so the carry honours it rather than stepping around it.
+ * A no-op when nothing is held, when the held ledger belongs to another turn, or outside a session, so an ordinary drop writes nothing.
+ */
+export declare function carryRunRefusalsToRedrive(wakeId: string): void;
+/**
+ * Drop a ledger carried to `wakeId` because its correction is EXHAUSTED — the corrective turn ended without answering, and there is no second re-drive. Without this the entries would sit in the session container until some later turn happened to name the same wake.
+ * It drops ONLY a ledger carried for this exact wake: a live ledger belonging to the CURRENT turn is somebody else's and is left alone.
+ */
+export declare function dropCarriedRunRefusals(wakeId: string): void;
+//# sourceMappingURL=card-signal.d.ts.map

package/dist/agent/approvals/card-signal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"card-signal.d.ts","sourceRoot":"","sources":["../../../agent/approvals/card-signal.ts"],"names":[],"mappings":"AAOA,kNAAkN;AAClN,wBAAgB,sBAAsB,IAAI,IAAI,CAM7C;AAED,gNAAgN;AAChN,wBAAgB,sBAAsB,IAAI,OAAO,CAMhD;AAED,oKAAoK;AACpK,wBAAgB,yBAAyB,IAAI,OAAO,CAQnD;AAID,yDAAyD;AACzD,MAAM,WAAW,2BAA2B;IAC1C,oGAAoG;IACpG,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,4TAA4T;IAC5T,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,sQAAsQ;IACtQ,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,2RAA2R;IAC3R,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,+PAA+P;IAC/P,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;CAC7B;AAsBD,kTAAkT;AAClT,eAAO,MAAM,gBAAgB,KAAK,CAAC;AAYnC,sQAAsQ;AACtQ,wBAAgB,+BAA+B,CAAC,KAAK,EAAE,2BAA2B,GAAG,IAAI,CAWxF;AAED;;;GAGG;AACH,wBAAgB,mCAAmC,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,2BAA2B,EAAE,CAoB3G;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAO9D;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAM3D"}

package/dist/agent/approvals/card-signal.js

@@ -0,0 +1,115 @@
+// Two per-turn approval signals a later, disconnected call site in the same session reads: a card posted this turn, and what this run asked for and did not get. Both ride a per-session `defineState` slot — a module global would interleave concurrently-served sessions — and both fail soft.
+import { defineState } from "eve/context";
+import { readTurnClock } from "../observability/turn-clock.js";
+const slot = defineState("open-everywhere.approval-card-posted", () => false);
+/** Mark that an approval card was actually posted this turn. Call it ONLY after the post succeeds — never on a validation or refusal path, whose thrown error is exactly the text the user still needs to see. */
+export function markCardPostedThisTurn() {
+    try {
+        slot.update(() => true);
+    }
+    catch {
+        /* no session context here — nothing to signal, never blocks the propose tool */
+    }
+}
+/** Peek without consuming: is the card signal currently set? For a mid-turn reader that must NOT disturb the read-and-reset contract message.completed owns, and fail-soft — no session context reads false. */
+export function peekCardPostedThisTurn() {
+    try {
+        return slot.get();
+    }
+    catch {
+        return false;
+    }
+}
+/** Read-and-reset: was a card posted this turn? It always clears the slot in the same call, so the next turn starts clean whether or not this one posted a card. */
+export function consumeCardPostedThisTurn() {
+    try {
+        const was = slot.get();
+        slot.update(() => false);
+        return was;
+    }
+    catch {
+        return false;
+    }
+}
+const refusals = defineState("open-everywhere.routine-run-permission-refusals", () => null);
+/** How many permissions one run's report lists; past the cap the ledger stops recording and never drops what it already holds. The card-offer cap reuses the number, which does NOT make the two counts equal — that cap counts offers through one seam, this ledger counts refusals from both refusal planes. */
+export const MAX_RUN_REFUSALS = 16;
+/** The turn key a CARRIED ledger holds. It is not a real turn id and never equals `currentTurnKey()`
+ *  — including its `""` reading — so a carried ledger is reachable only through its wake. */
+const CARRIED_TURN_KEY = "carried:redrive";
+/** This turn's id, or "" when no turn clock has been started. "" is a fine key: it never equals a
+ *  real `turn_<n>`, so an entry left by a real turn can never be read back under it. */
+function currentTurnKey() {
+    return readTurnClock()?.turnId ?? "";
+}
+/** Record one permission this run was refused; call it AFTER the refusal is settled, so `card` names what is really in the room. De-duplicated by permission, and the FIRST entry wins — it is the one whose pointer was resolved beside the card that was posted. */
+export function noteRoutineRunPermissionRefusal(entry) {
+    try {
+        const turnId = currentTurnKey();
+        refusals.update((prev) => {
+            const entries = prev !== null && prev.turnId === turnId ? prev.entries : [];
+            if (entries.some((e) => e.permission === entry.permission) || entries.length >= MAX_RUN_REFUSALS)
+                return { turnId, entries };
+            return { turnId, entries: [...entries, entry] };
+        });
+    }
+    catch {
+        /* no session context here — nothing to record, never blocks the refusal */
+    }
+}
+/**
+ * Read-and-reset: what did this run ask for and not get? The reset is at READ, not at post, so a post that then fails loses the block for this run — the standing record still answers the same question from the rows.
+ * `wakeId` is the wake the caller is ANSWERING. It admits a ledger a previous turn handed to this wake's one corrective re-drive ({@link carryRunRefusalsToRedrive}); pass it wherever the caller knows which conversation it is answering, and omit it where it does not — omitting it only ever reads the turn key, which is the behaviour this function had before the carry existed.
+ */
+export function consumeRoutineRunPermissionRefusals(wakeId) {
+    try {
+        const held = refusals.get();
+        if (held === null)
+            return [];
+        // A ledger from an EARLIER turn is not this run's, and reading it would attach one run's losses
+        // to another run's report. Dropped rather than returned — and dropped rather than left, so the
+        // container does not carry it further.
+        // THE ONE EXCEPTION is a ledger explicitly handed to THIS WAKE's corrective turn: same fire, same
+        // conversation, one turn later, and the carry was written by the host rather than inferred here.
+        const carried = held.carriedForWakeId !== undefined && wakeId !== undefined && held.carriedForWakeId === wakeId;
+        const mine = held.turnId === currentTurnKey() || carried ? held.entries : [];
+        // 🔴 CLEAR ONLY WHAT THIS CALL CLAIMED. A CARRIED ledger belongs to one wake, and a coalesced
+        // turn answers several: a reply to some OTHER wake must not destroy the fire's report on its way
+        // past. An unclaimed ledger that is NOT carried is still dropped, which is the original rule —
+        // a stale turn-keyed ledger is nobody's and must not be left to surface later.
+        if (mine.length > 0 || held.carriedForWakeId === undefined)
+            refusals.update(() => null);
+        return mine;
+    }
+    catch {
+        return [];
+    }
+}
+/**
+ * Hand this turn's held refusals to the ONE corrective re-drive of `wakeId`, so the fire's report still carries them when the seat answers on the corrective turn (OPE-1982). Called by the unified window's drop branch, and ONLY when a re-drive really fired.
+ * 🔴 IT RE-KEYS, IT DOES NOT COPY. The turn key is cleared to a value no real turn can hold, so the carried ledger is readable ONLY by a caller that names this wake.
+ * 🔴 AND IT CARRIES ONLY THIS TURN'S OWN LEDGER. A `job` routine keeps ONE session across fires, and a fire whose turn ended in judged silence leaves its entries in the slot unconsumed — the silence arm returns before the drop branch and nothing clears them there. Without the turn check a LATER fire's drop would re-key that stranded ledger onto its own wake, and its corrective reply would report a permission it never asked for, pointing at a card minted in another conversation. That is the precise harm the turn key exists to prevent, so the carry honours it rather than stepping around it.
+ * A no-op when nothing is held, when the held ledger belongs to another turn, or outside a session, so an ordinary drop writes nothing.
+ */
+export function carryRunRefusalsToRedrive(wakeId) {
+    try {
+        const turnId = currentTurnKey();
+        refusals.update((prev) => (prev === null || prev.entries.length === 0 || prev.turnId !== turnId ? prev : { carriedForWakeId: wakeId, turnId: CARRIED_TURN_KEY, entries: prev.entries }));
+    }
+    catch {
+        /* no session context — nothing to carry, and never blocks the drop */
+    }
+}
+/**
+ * Drop a ledger carried to `wakeId` because its correction is EXHAUSTED — the corrective turn ended without answering, and there is no second re-drive. Without this the entries would sit in the session container until some later turn happened to name the same wake.
+ * It drops ONLY a ledger carried for this exact wake: a live ledger belonging to the CURRENT turn is somebody else's and is left alone.
+ */
+export function dropCarriedRunRefusals(wakeId) {
+    try {
+        refusals.update((prev) => (prev !== null && prev.carriedForWakeId === wakeId ? null : prev));
+    }
+    catch {
+        /* no session context — nothing to drop */
+    }
+}
+//# sourceMappingURL=card-signal.js.map

package/dist/agent/approvals/card-signal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"card-signal.js","sourceRoot":"","sources":["../../../agent/approvals/card-signal.ts"],"names":[],"mappings":"AAAA,kSAAkS;AAElS,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAE/D,MAAM,IAAI,GAAG,WAAW,CAAU,sCAAsC,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;AAEvF,kNAAkN;AAClN,MAAM,UAAU,sBAAsB;IACpC,IAAI,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,gFAAgF;IAClF,CAAC;AACH,CAAC;AAED,gNAAgN;AAChN,MAAM,UAAU,sBAAsB;IACpC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC;IACpB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,oKAAoK;AACpK,MAAM,UAAU,yBAAyB;IACvC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;QACzB,OAAO,GAAG,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAoCD,MAAM,QAAQ,GAAG,WAAW,CAA0B,iDAAiD,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;AAErH,kTAAkT;AAClT,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAEnC;6FAC6F;AAC7F,MAAM,gBAAgB,GAAG,iBAAiB,CAAC;AAE3C;wFACwF;AACxF,SAAS,cAAc;IACrB,OAAO,aAAa,EAAE,EAAE,MAAM,IAAI,EAAE,CAAC;AACvC,CAAC;AAED,sQAAsQ;AACtQ,MAAM,UAAU,+BAA+B,CAAC,KAAkC;IAChF,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,cAAc,EAAE,CAAC;QAChC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;YACvB,MAAM,OAAO,GAAG,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5E,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,MAAM,IAAI,gBAAgB;gBAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;YAC7H,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,GAAG,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;QAClD,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,2EAA2E;IAC7E,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mCAAmC,CAAC,MAAe;IACjE,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,EAAE,CAAC;QAC5B,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,EAAE,CAAC;QAC7B,gGAAgG;QAChG,+FAA+F;QAC/F,uCAAuC;QACvC,kGAAkG;QAClG,iGAAiG;QACjG,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,gBAAgB,KAAK,MAAM,CAAC;QAChH,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,KAAK,cAAc,EAAE,IAAI,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,8FAA8F;QAC9F,iGAAiG;QACjG,+FAA+F;QAC/F,+EAA+E;QAC/E,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,gBAAgB,KAAK,SAAS;YAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACxF,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CAAC,MAAc;IACtD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,cAAc,EAAE,CAAC;QAChC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAC3L,CAAC;IAAC,MAAM,CAAC;QACP,sEAAsE;IACxE,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAc;IACnD,IAAI,CAAC;QACH,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,gBAAgB,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/F,CAAC;IAAC,MAAM,CAAC;QACP,0CAA0C;IAC5C,CAAC;AACH,CAAC"}