@open-everywhere/core 0.1.0

package/dist/agent/channels/memory-claim-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-claim-guard.js","sourceRoot":"","sources":["../../../agent/channels/memory-claim-guard.ts"],"names":[],"mappings":"AAAA,gGAAgG;AAChG,aAAa;AACb,EAAE;AACF,oGAAoG;AACpG,kGAAkG;AAClG,mGAAmG;AACnG,kGAAkG;AAClG,uDAAuD;AACvD,EAAE;AACF,mGAAmG;AACnG,oGAAoG;AACpG,oGAAoG;AACpG,kGAAkG;AAClG,mGAAmG;AACnG,yFAAyF;AACzF,EAAE;AACF,mGAAmG;AACnG,wEAAwE;AACxE,oGAAoG;AACpG,sFAAsF;AACtF,EAAE;AACF,qGAAqG;AACrG,kGAAkG;AAClG,gGAAgG;AAChG,2BAA2B;AAC3B,EAAE;AACF,qGAAqG;AACrG,gFAAgF;AAChF,mGAAmG;AACnG,oGAAoG;AACpG,gGAAgG;AAChG,sGAAsG;AACtG,qFAAqF;AACrF,oGAAoG;AACpG,oGAAoG;AACpG,oGAAoG;AACpG,6FAA6F;AAC7F,mFAAmF;AACnF,EAAE;AACF,mGAAmG;AACnG,8FAA8F;AAC9F,oGAAoG;AACpG,oGAAoG;AACpG,4FAA4F;AAC5F,EAAE;AACF,iGAAiG;AACjG,8FAA8F;AAC9F,kGAAkG;AAClG,kGAAkG;AAClG,mGAAmG;AACnG,mGAAmG;AACnG,oGAAoG;AACpG,qGAAqG;AACrG,gGAAgG;AAChG,iGAAiG;AACjG,EAAE;AACF,oGAAoG;AACpG,oGAAoG;AACpG,kGAAkG;AAClG,sBAAsB;AACtB,EAAE;AACF,oGAAoG;AACpG,gGAAgG;AAChG,2FAA2F;AAC3F,qGAAqG;AACrG,EAAE;AACF,wFAAwF;AACxF,qGAAqG;AACrG,kFAAkF;AAClF,+FAA+F;AAC/F,mGAAmG;AACnG,mGAAmG;AACnG,oDAAoD;AACpD,EAAE;AACF,kGAAkG;AAClG,iGAAiG;AACjG,gDAAgD;AAEhD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAGjE;yEACyE;AACzE,MAAM,CAAC,MAAM,4BAA4B,GAAG,uBAAuB,CAAC;AAEpE;;;;;;;YAOY;AACZ,MAAM,CAAC,MAAM,mBAAmB,GAC9B,0FAA0F,CAAC;AAc7F;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,cAAc,GAAyE;IAC3F,kGAAkG;IAClG,oFAAoF;IACpF;QACE,KAAK,EAAE,QAAQ;QACf,EAAE,EAAE,4HAA4H;KACjI;IACD,wFAAwF;IACxF,kGAAkG;IAClG,0EAA0E;IAC1E;QACE,KAAK,EAAE,QAAQ;QACf,EAAE,EAAE,oMAAoM;KACzM;IACD,yFAAyF;IACzF,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,EAAE,gFAAgF,EAAE;IAC7G,gGAAgG;IAChG,2EAA2E;IAC3E,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,EAAE,sFAAsF,EAAE;IACtH,oGAAoG;IACpG,oGAAoG;IACpG,gGAAgG;IAChG,iGAAiG;IACjG,uCAAuC;IACvC,EAAE;IACF,oGAAoG;IACpG,gGAAgG;IAChG,qBAAqB;IACrB,EAAE;IACF,8FAA8F;IAC9F,iGAAiG;IACjG,oGAAoG;IACpG,oGAAoG;IACpG,oGAAoG;IACpG,+FAA+F;IAC/F,+DAA+D;IAC/D,EAAE;IACF,mGAAmG;IACnG,6FAA6F;IAC7F,mGAAmG;IACnG,qGAAqG;IACrG,iGAAiG;IACjG,yFAAyF;IACzF;QACE,KAAK,EAAE,QAAQ;QACf,EAAE,EAAE,0NAA0N;KAC/N;IACD,iGAAiG;IACjG,iGAAiG;IACjG,iGAAiG;IACjG,iGAAiG;IACjG,kGAAkG;IAClG,iGAAiG;IACjG,sCAAsC;IACtC,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,oDAAoD,EAAE;CAC9E,CAAC;AAEF,iEAAiE;AACjE,MAAM,gBAAgB,GAAG,cAAc,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC;AAEpE;4FAC4F;AAC5F,MAAM,wBAAwB,GAAG,cAAc,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC;AAE5E;;;;;;6DAM6D;AAC7D,MAAM,eAAe,GAAG,MAAM,CAAC;AAE/B;;;;;;;8BAO8B;AAC9B,MAAM,kBAAkB,GAAG,cAAc,CAAC,CAAC,CAAE,CAAC;AAE9C;;;;;;gCAMgC;AAChC,MAAM,oBAAoB,GACxB,qKAAqK,CAAC;AAExK;;;;;;;;;;;;;iFAaiF;AACjF,MAAM,oBAAoB,GAAG,gCAAgC,CAAC;AAE9D;;;;;;;;;;GAUG;AACH,MAAM,YAAY,GAAG,6HAA6H,CAAC;AAEnJ;;;;;yEAKyE;AACzE,MAAM,aAAa,GAAG,uEAAuE,CAAC;AAE9F;;;;wFAIwF;AACxF,MAAM,eAAe,GAAG,sFAAsF,CAAC;AAE/G;;2FAE2F;AAC3F,MAAM,gBAAgB,GAAG,qDAAqD,CAAC;AAE/E;;;;;;;;;;8FAU8F;AAC9F,MAAM,UAAU,GAAG,uIAAuI,CAAC;AAE3J;;;;;;;;;;oEAUoE;AACpE,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,MAAM,GAAG,GAAmD,EAAE,CAAC;IAC/D,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC;QACpB,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;YAC1D,sFAAsF;YACtF,4FAA4F;YAC5F,+CAA+C;YAC/C,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;YAChB,OAAO,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC;gBAAE,GAAG,EAAE,CAAC;YACjG,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;YACvD,KAAK,GAAG,GAAG,CAAC;YACZ,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC;QACd,CAAC;IACH,CAAC;IACD,IAAI,KAAK,GAAG,IAAI,CAAC,MAAM;QAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACxF,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAY;IACjD,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,MAAM,SAAS,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1C,MAAM,CAAC,GAAG,SAAS,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC;QAC7B,KAAK,MAAM,CAAC,IAAI,cAAc,EAAE,CAAC;YAC/B,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACvB,IAAI,CAAC,KAAK,IAAI;gBAAE,SAAS;YACzB,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;YACnC,IAAI,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAAE,SAAS,CAAC,uBAAuB;YAC5F,IAAI,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAAE,SAAS,CAAC,4BAA4B;YACvG,+FAA+F;YAC/F,sCAAsC;YACtC,IAAI,CAAC,KAAK,gBAAgB,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAAE,SAAS;YACvG,6FAA6F;YAC7F,6FAA6F;YAC7F,wFAAwF;YACxF,IAAI,CAAC,KAAK,wBAAwB,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAAE,SAAS;YAC/G,iFAAiF;YACjF,IAAI,CAAC,KAAK,kBAAkB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC;gBAAE,SAAS;YACnE,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;YAC7C,MAAM,CAAC,qFAAqF;QAC9F,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAWD;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAAY,EAAE,MAAe;IACjE,oGAAoG;IACpG,iGAAiG;IACjG,sGAAsG;IACtG,kGAAkG;IAClG,yCAAyC;IACzC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC;IACnD,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACjF,IAAI,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAChD,MAAM,MAAM,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAC5C,kGAAkG;IAClG,iGAAiG;IACjG,iGAAiG;IACjG,yFAAyF;IACzF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,OAAO,mBAAmB,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAC7G,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;IACtD,MAAM,SAAS,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC3E,mGAAmG;IACnG,mGAAmG;IACnG,mBAAmB;IACnB,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,OAAO,mBAAmB,EAAE,CAAC,SAAS,EAAE,CAAC;IAChF,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;AACpC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,KAA6B,EAC7B,QAAgB,EAChB,QAAgC;IAEhC,IAAI,CAAC,KAAK,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAC5C,MAAM,WAAW,CAAC;QAChB,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,QAAQ;QACR,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,MAAM,EAAE,4BAA4B;QACpC,MAAM,EAAE;YACN,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,MAAM,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;YAClD,SAAS,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;YAC1C,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1D,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClD;KACF,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;AAC5B,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,KAA6B;IAC3E,OAAO,qBAAqB,CAAC,IAAI,EAAE,kBAAkB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;AACxE,CAAC"}

package/dist/agent/channels/name-drop-wake-audit.d.ts

@@ -0,0 +1,93 @@
+/** The road ADMITTED a name-drop and dispatched a wake — the positive observable (OPE-1899). */
+export declare const NAME_DROP_WOKE_ACTION = "surface.name_drop_woke";
+/** The road refused to wake a message that NAMED the agent, and `detail.reason` says which gate
+ *  refused. Never written for a message that named nobody — see the header's bound. */
+export declare const NAME_DROP_SILENT_ACTION = "surface.name_drop_silent";
+/**
+ * Which session the admitted name-drop woke. `seat` is the room's STANDING seat (Slack's
+ * OPE-1725 hand-off); `native` is the per-thread session an unseated deployment opens. The two are
+ * different products for the same address, so the row says which one answered.
+ */
+export type NameDropRoad = "seat" | "native";
+/**
+ * WHO decided the wake. `built-in` is the shipped name-drop policy; `arm` is a deployment's
+ * registered `decideWake` arm filling an abstention (channels/wake-arm.ts). An operator reading
+ * back "why did the agent join this conversation" needs the two apart — an arm-added wake is the
+ * deployment's own rule, not the product's.
+ */
+export type NameDropVia = "built-in" | "arm";
+/** The partition columns every wake row is keyed by — the caller resolves them, because only the
+ *  surface knows how its own ids compose. */
+export interface NameDropAuditKey {
+    readonly org: string;
+    readonly platform: string;
+    readonly workspace: string;
+    readonly surface?: string;
+    /** The acting member, when the surface knows one. */
+    readonly principalId?: string;
+    /** The surface-native container the message arrived in — a Slack channel id, a Discord channel
+     *  id. Carried as `detail.container` so a reader can join the row to the room without parsing the
+     *  partition key. */
+    readonly container: string;
+    /** The triggering message's own surface locator — a Slack `ts`, a Discord message id — or `null`
+     *  where the surface gives none. `null` rather than an omitted key, so the row SAYS the surface
+     *  carries no locator instead of reading like a lost value. */
+    readonly ts: string | null;
+}
+/** The append seam. Defaults to the live audit sink; injected so the rows are testable without a
+ *  store, and so a test can see the exact detail object a row carries. */
+export type NameDropAuditAppend = (entry: {
+    readonly org: string;
+    readonly platform: string;
+    readonly workspace: string;
+    readonly surface?: string;
+    readonly principalId?: string;
+    readonly action: string;
+    readonly detail: Readonly<Record<string, unknown>>;
+}) => Promise<void>;
+/** Build the row both emitters append — one place, so the two rows carry the same columns and a
+ *  reader can join them. Exported for the contract test, which asserts the detail against the
+ *  action registry's declared field list. */
+export declare function nameDropAuditRow(key: NameDropAuditKey, action: string, reason: string, extra?: Readonly<Record<string, unknown>>): {
+    readonly org: string;
+    readonly platform: string;
+    readonly workspace: string;
+    readonly surface?: string;
+    readonly principalId?: string;
+    readonly action: string;
+    readonly detail: Readonly<Record<string, unknown>>;
+};
+/**
+ * THE POSITIVE ROW: the name-drop road admitted this message and a wake was dispatched.
+ *
+ * Called at the ONE point on each surface where the road has decided to wake and nothing below it
+ * can refuse on the NAME — so the row means "the road did its job", never "a turn ran".
+ *
+ * 🔴 SAY WHAT IT DOES NOT CLAIM. Gates BELOW this line can still refuse the turn: the tenant fence,
+ * the spend cap, and on a seated Slack channel the seat road's own checks. Each of those writes its
+ * OWN refusal row, so a reader sees the road admitting and the turn being refused as two separate
+ * facts. That split is the point — the question this row answers is "did `nameDropWake` run and
+ * admit at all", which is exactly the one a clean silence could not answer before.
+ */
+export declare function auditNameDropWoke(key: NameDropAuditKey, reason: string, opts: {
+    readonly road: NameDropRoad;
+    readonly via: NameDropVia;
+    readonly append?: NameDropAuditAppend;
+}): Promise<void>;
+/**
+ * THE NEGATIVE ROW: the agent was NAMED and the road refused to wake.
+ *
+ * 🔴 THE CALLER OWES THE BOUND, NOT THIS FUNCTION. It cannot re-derive "the name matched" from a
+ * reason string without keeping a copy of every disqualifier, which is the stale-copy shape
+ * `nameDropAbstained` exists to avoid. So each call site passes only a refusal it has already
+ * established was a refusal of a CANDIDATE.
+ * WHERE THAT IS PINNED, exactly: `slack-engagement-test.ts` drives the real `routeNameDropEvent` and
+ * asserts that a message naming nobody leaves this road rowless. It pins the route AS SHIPPED — with
+ * no `decideWake` arm registered, such a message returns before either write. The explicit
+ * `textMatchesName` guards the route also carries are reachable only on the ARM path, and no test
+ * drives an arm today; that half of the bound is unproven and is stated here rather than assumed.
+ */
+export declare function auditNameDropSilent(key: NameDropAuditKey, reason: string, opts?: {
+    readonly append?: NameDropAuditAppend;
+}): Promise<void>;
+//# sourceMappingURL=name-drop-wake-audit.d.ts.map

package/dist/agent/channels/name-drop-wake-audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"name-drop-wake-audit.d.ts","sourceRoot":"","sources":["../../../agent/channels/name-drop-wake-audit.ts"],"names":[],"mappings":"AA+BA,gGAAgG;AAChG,eAAO,MAAM,qBAAqB,2BAA2B,CAAC;AAE9D;uFACuF;AACvF,eAAO,MAAM,uBAAuB,6BAA6B,CAAC;AAElE;;;;GAIG;AACH,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,QAAQ,CAAC;AAE7C;;;;;GAKG;AACH,MAAM,MAAM,WAAW,GAAG,UAAU,GAAG,KAAK,CAAC;AAE7C;6CAC6C;AAC7C,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,qDAAqD;IACrD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B;;yBAEqB;IACrB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;;mEAE+D;IAC/D,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED;0EAC0E;AAC1E,MAAM,MAAM,mBAAmB,GAAG,CAAC,KAAK,EAAE;IACxC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACpD,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;AAEpB;;6CAE6C;AAC7C,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,gBAAgB,EACrB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,KAAK,GAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAM,GAC5C;IACD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACpD,CAUA;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,iBAAiB,CACrC,GAAG,EAAE,gBAAgB,EACrB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE;IAAE,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,mBAAmB,CAAA;CAAE,GACtG,OAAO,CAAC,IAAI,CAAC,CAOf;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,mBAAmB,CACvC,GAAG,EAAE,gBAAgB,EACrB,MAAM,EAAE,MAAM,EACd,IAAI,GAAE;IAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,mBAAmB,CAAA;CAAO,GACnD,OAAO,CAAC,IAAI,CAAC,CAOf"}

package/dist/agent/channels/name-drop-wake-audit.js

@@ -0,0 +1,92 @@
+// name-drop-wake-audit — THE NAME-DROP ROAD'S OWN TWO ROWS (OPE-1899).
+//
+// THE GAP THIS CLOSES. A surface with no @mention primitive addresses the agent by NAME, and the
+// `nameDropWake` road is what turns that into a wake. The road wrote NO row when it ADMITTED a
+// message: Slack's chat-silence auditing was removed on 2026-07-14, and the drop rows
+// (`surface.wake_dropped`) deliberately skip the ordinary non-candidates. So from outside the
+// deployment a seat that woke and judged NO_REPLY and a `nameDropWake` that is DEAD — a broken
+// word-boundary matcher, a dropped domain flag, a dead dispatch — are the same silence. The e2e
+// pack's S9 could only SKIP on that silence, which is a leg that can never fail, so the road could
+// rot green forever.
+//
+// THE TWO ROWS, and why there are exactly two:
+//   • {@link NAME_DROP_WOKE_ACTION} — the road ADMITTED this message and dispatched a wake. It is
+//     the POSITIVE observable the pack asserts on: a row here plus no reply is a judged silence, no
+//     row at all is a dead road.
+//   • {@link NAME_DROP_SILENT_ACTION} — the road judged NO WAKE on a message that NAMED the agent,
+//     and the reason says which gate refused. Without it the positive row alone cannot tell a
+//     message nobody named from one the domain flag or the internal probe refused.
+//
+// 🔴 THE SILENT ROW IS BOUNDED TO A CANDIDATE, AND THAT BOUND IS THE WHOLE COST CONTROL. Every
+// message in a watched room runs the road, and almost all of them fail on "the text does not say the
+// agent's name". A row per message would drown the trail it exists to make readable — the same
+// reasoning `surface.wake_dropped` states for the ordinary disqualifiers. So a caller writes this
+// row ONLY where the agent's name MATCHED and a LATER gate refused, which is a real refusal of an
+// otherwise-admittable wake and a low-volume class by construction.
+//
+// BEST-EFFORT BY CONTRACT, like every other wake row: never throws, never blocks a route, never
+// changes a decision. An unreachable store costs one row, never a wake.
+import { appendAudit } from "../audit/audit.js";
+/** The road ADMITTED a name-drop and dispatched a wake — the positive observable (OPE-1899). */
+export const NAME_DROP_WOKE_ACTION = "surface.name_drop_woke";
+/** The road refused to wake a message that NAMED the agent, and `detail.reason` says which gate
+ *  refused. Never written for a message that named nobody — see the header's bound. */
+export const NAME_DROP_SILENT_ACTION = "surface.name_drop_silent";
+/** Build the row both emitters append — one place, so the two rows carry the same columns and a
+ *  reader can join them. Exported for the contract test, which asserts the detail against the
+ *  action registry's declared field list. */
+export function nameDropAuditRow(key, action, reason, extra = {}) {
+    return {
+        org: key.org,
+        platform: key.platform,
+        workspace: key.workspace,
+        ...(key.surface === undefined ? {} : { surface: key.surface }),
+        ...(key.principalId === undefined ? {} : { principalId: key.principalId }),
+        action,
+        detail: { reason, container: key.container, ts: key.ts, ...extra },
+    };
+}
+/**
+ * THE POSITIVE ROW: the name-drop road admitted this message and a wake was dispatched.
+ *
+ * Called at the ONE point on each surface where the road has decided to wake and nothing below it
+ * can refuse on the NAME — so the row means "the road did its job", never "a turn ran".
+ *
+ * 🔴 SAY WHAT IT DOES NOT CLAIM. Gates BELOW this line can still refuse the turn: the tenant fence,
+ * the spend cap, and on a seated Slack channel the seat road's own checks. Each of those writes its
+ * OWN refusal row, so a reader sees the road admitting and the turn being refused as two separate
+ * facts. That split is the point — the question this row answers is "did `nameDropWake` run and
+ * admit at all", which is exactly the one a clean silence could not answer before.
+ */
+export async function auditNameDropWoke(key, reason, opts) {
+    const append = opts.append ?? ((e) => appendAudit(e));
+    try {
+        await append(nameDropAuditRow(key, NAME_DROP_WOKE_ACTION, reason, { road: opts.road, via: opts.via }));
+    }
+    catch {
+        /* observability only — never block a route or change its decision */
+    }
+}
+/**
+ * THE NEGATIVE ROW: the agent was NAMED and the road refused to wake.
+ *
+ * 🔴 THE CALLER OWES THE BOUND, NOT THIS FUNCTION. It cannot re-derive "the name matched" from a
+ * reason string without keeping a copy of every disqualifier, which is the stale-copy shape
+ * `nameDropAbstained` exists to avoid. So each call site passes only a refusal it has already
+ * established was a refusal of a CANDIDATE.
+ * WHERE THAT IS PINNED, exactly: `slack-engagement-test.ts` drives the real `routeNameDropEvent` and
+ * asserts that a message naming nobody leaves this road rowless. It pins the route AS SHIPPED — with
+ * no `decideWake` arm registered, such a message returns before either write. The explicit
+ * `textMatchesName` guards the route also carries are reachable only on the ARM path, and no test
+ * drives an arm today; that half of the bound is unproven and is stated here rather than assumed.
+ */
+export async function auditNameDropSilent(key, reason, opts = {}) {
+    const append = opts.append ?? ((e) => appendAudit(e));
+    try {
+        await append(nameDropAuditRow(key, NAME_DROP_SILENT_ACTION, reason));
+    }
+    catch {
+        /* observability only — never block a route or change its decision */
+    }
+}
+//# sourceMappingURL=name-drop-wake-audit.js.map

package/dist/agent/channels/name-drop-wake-audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"name-drop-wake-audit.js","sourceRoot":"","sources":["../../../agent/channels/name-drop-wake-audit.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,EAAE;AACF,iGAAiG;AACjG,+FAA+F;AAC/F,sFAAsF;AACtF,8FAA8F;AAC9F,+FAA+F;AAC/F,gGAAgG;AAChG,mGAAmG;AACnG,qBAAqB;AACrB,EAAE;AACF,+CAA+C;AAC/C,kGAAkG;AAClG,oGAAoG;AACpG,iCAAiC;AACjC,mGAAmG;AACnG,8FAA8F;AAC9F,mFAAmF;AACnF,EAAE;AACF,+FAA+F;AAC/F,qGAAqG;AACrG,+FAA+F;AAC/F,kGAAkG;AAClG,kGAAkG;AAClG,oEAAoE;AACpE,EAAE;AACF,gGAAgG;AAChG,wEAAwE;AAExE,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD,gGAAgG;AAChG,MAAM,CAAC,MAAM,qBAAqB,GAAG,wBAAwB,CAAC;AAE9D;uFACuF;AACvF,MAAM,CAAC,MAAM,uBAAuB,GAAG,0BAA0B,CAAC;AAgDlE;;6CAE6C;AAC7C,MAAM,UAAU,gBAAgB,CAC9B,GAAqB,EACrB,MAAc,EACd,MAAc,EACd,KAAK,GAAsC,EAAE;IAU7C,OAAO;QACL,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,GAAG,CAAC,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;QAC9D,GAAG,CAAC,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC;QAC1E,MAAM;QACN,MAAM,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,KAAK,EAAE;KACnE,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,GAAqB,EACrB,MAAc,EACd,IAAuG;IAEvG,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;IACtD,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,gBAAgB,CAAC,GAAG,EAAE,qBAAqB,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACzG,CAAC;IAAC,MAAM,CAAC;QACP,qEAAqE;IACvE,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,GAAqB,EACrB,MAAc,EACd,IAAI,GAA8C,EAAE;IAEpD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;IACtD,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,gBAAgB,CAAC,GAAG,EAAE,uBAAuB,EAAE,MAAM,CAAC,CAAC,CAAC;IACvE,CAAC;IAAC,MAAM,CAAC;QACP,qEAAqE;IACvE,CAAC;AACH,CAAC"}

package/dist/agent/channels/native-wake-retry.d.ts

@@ -0,0 +1,16 @@
+/** Real surface attribution already held by a provider at its native launch seam. */
+export interface NativeWakeRetryAttribution {
+    readonly platform: string;
+    readonly workspace: string;
+    readonly surfaceKey: string;
+}
+/**
+ * Dispatch one native wake through the shared wake policy.
+ *
+ * Only a proven rate-limit refusal is retried. Every other throw escapes unchanged on its first
+ * attempt, so an ambiguous transport failure can never wake a seat twice. Callers keep their
+ * existing failure catch OUTSIDE this function; after refusal exhaustion, strand classification
+ * therefore runs in exactly the same order it did before this wrapper existed.
+ */
+export declare function dispatchNativeWakeWithRetry<T>(send: () => Promise<T>, attribution: NativeWakeRetryAttribution): Promise<T>;
+//# sourceMappingURL=native-wake-retry.d.ts.map

package/dist/agent/channels/native-wake-retry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-wake-retry.d.ts","sourceRoot":"","sources":["../../../agent/channels/native-wake-retry.ts"],"names":[],"mappings":"AAmBA,qFAAqF;AACrF,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;;;GAOG;AACH,wBAAsB,2BAA2B,CAAC,CAAC,EACjD,IAAI,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EACtB,WAAW,EAAE,0BAA0B,GACtC,OAAO,CAAC,CAAC,CAAC,CAwBZ"}

package/dist/agent/channels/native-wake-retry.js

@@ -0,0 +1,44 @@
+// native-wake-retry — the ONE bounded 429 road for topology-off wake dispatches (OPE-1881).
+//
+// A native wake goes straight from a provider adapter to eve's queue. It has no unified-window
+// wakeId and no `wake.ingress` row, so this module must not manufacture either. It mints one
+// deliveryId for the queue dispatch and keeps it stable across refused attempts. That id groups the
+// retry rows for this dispatch; it deliberately claims no join to ingress, turn-start or reply rows.
+import { randomUUID } from "node:crypto";
+import { appendAudit } from "../audit/audit.js";
+import { deploymentOrg } from "../identity/binding.js";
+import { withRetryAfterThrown } from "./rate-limit-retry.js";
+import { WAKE_DISPATCH_OPERATION, WAKE_DISPATCH_RETRY_POLICY, WAKE_RETRY_ACTION, wakeRetryDetail, } from "./wake-timing.js";
+/**
+ * Dispatch one native wake through the shared wake policy.
+ *
+ * Only a proven rate-limit refusal is retried. Every other throw escapes unchanged on its first
+ * attempt, so an ambiguous transport failure can never wake a seat twice. Callers keep their
+ * existing failure catch OUTSIDE this function; after refusal exhaustion, strand classification
+ * therefore runs in exactly the same order it did before this wrapper existed.
+ */
+export async function dispatchNativeWakeWithRetry(send, attribution) {
+    const deliveryId = randomUUID();
+    return withRetryAfterThrown(send, {
+        surface: attribution.platform,
+        operation: WAKE_DISPATCH_OPERATION,
+        ...WAKE_DISPATCH_RETRY_POLICY,
+        onRefusal: (refusal) => appendAudit({
+            org: deploymentOrg(),
+            platform: attribution.platform,
+            workspace: attribution.workspace,
+            surface: attribution.surfaceKey,
+            action: WAKE_RETRY_ACTION,
+            detail: wakeRetryDetail({
+                deliveryId,
+                surfaceKey: attribution.surfaceKey,
+                attempt: refusal.attempt,
+                delayMs: refusal.delayMs,
+                waitedMs: refusal.waitedMs,
+                outcome: refusal.outcome,
+                refusalStatus: refusal.refusalStatus,
+            }),
+        }).catch(() => undefined),
+    });
+}
+//# sourceMappingURL=native-wake-retry.js.map

package/dist/agent/channels/native-wake-retry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-wake-retry.js","sourceRoot":"","sources":["../../../agent/channels/native-wake-retry.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,EAAE;AACF,+FAA+F;AAC/F,6FAA6F;AAC7F,oGAAoG;AACpG,qGAAqG;AAErG,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EACL,uBAAuB,EACvB,0BAA0B,EAC1B,iBAAiB,EACjB,eAAe,GAChB,MAAM,kBAAkB,CAAC;AAS1B;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,IAAsB,EACtB,WAAuC;IAEvC,MAAM,UAAU,GAAG,UAAU,EAAE,CAAC;IAChC,OAAO,oBAAoB,CAAC,IAAI,EAAE;QAChC,OAAO,EAAE,WAAW,CAAC,QAAQ;QAC7B,SAAS,EAAE,uBAAuB;QAClC,GAAG,0BAA0B;QAC7B,SAAS,EAAE,CAAC,OAAO,EAAE,EAAE,CACrB,WAAW,CAAC;YACV,GAAG,EAAE,aAAa,EAAE;YACpB,QAAQ,EAAE,WAAW,CAAC,QAAQ;YAC9B,SAAS,EAAE,WAAW,CAAC,SAAS;YAChC,OAAO,EAAE,WAAW,CAAC,UAAU;YAC/B,MAAM,EAAE,iBAAiB;YACzB,MAAM,EAAE,eAAe,CAAC;gBACtB,UAAU;gBACV,UAAU,EAAE,WAAW,CAAC,UAAU;gBAClC,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,aAAa,EAAE,OAAO,CAAC,aAAa;aACrC,CAAC;SACH,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;KAC5B,CAAC,CAAC;AACL,CAAC"}

package/dist/agent/channels/no-reply-signal.d.ts

@@ -0,0 +1,12 @@
+/** Closed reason enum for the `no_reply` tool — see tools/no_reply.ts. */
+export type NoReplyReason = "addressed_to_other" | "reacted_instead" | "nothing_to_add" | "not_relevant" | "duplicate" | "user_requested_silence" | "awaiting_context" | "other";
+export declare function markNoReplyThisTurn(reason: NoReplyReason): void;
+/**
+ * PEEK without consuming — for a mid-turn reader that must not disturb the read-and-reset contract, which `message.completed` owns.
+ * Fail-soft: no session context answers `null`.
+ */
+export declare function peekNoReplyThisTurn(): NoReplyReason | null;
+/** Read-and-reset: was `no_reply` called this turn, and with what reason? Always
+ *  clears the slot in the same call so the NEXT turn starts clean. */
+export declare function consumeNoReplyThisTurn(): NoReplyReason | null;
+//# sourceMappingURL=no-reply-signal.d.ts.map

package/dist/agent/channels/no-reply-signal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-reply-signal.d.ts","sourceRoot":"","sources":["../../../agent/channels/no-reply-signal.ts"],"names":[],"mappings":"AAKA,0EAA0E;AAC1E,MAAM,MAAM,aAAa,GACrB,oBAAoB,GACpB,iBAAiB,GACjB,gBAAgB,GAChB,cAAc,GACd,WAAW,GACX,wBAAwB,GACxB,kBAAkB,GAClB,OAAO,CAAC;AAIZ,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI,CAM/D;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,IAAI,aAAa,GAAG,IAAI,CAM1D;AAED;sEACsE;AACtE,wBAAgB,sBAAsB,IAAI,aAAa,GAAG,IAAI,CAQ7D"}

package/dist/agent/channels/no-reply-signal.js

@@ -0,0 +1,37 @@
+// Per-session "the `no_reply` tool was called this turn" signal, the twin of approvals/card-signal.ts. A tool call cannot reach the channel event handler that later decides the turn's fate, so a session-scoped slot is the seam between them. SCOPE: `defineState`, per-session and deliberately NOT a module global — see approvals/card-signal.ts's header for why a module-level flag would interleave concurrently-served sessions' turns.
+// Fail-soft on both sides: `defineState` throws outside an eve context, and a signal-less turn must behave exactly like one that never called the tool.
+import { defineState } from "eve/context";
+const slot = defineState("open-everywhere.no-reply-tool-called", () => null);
+export function markNoReplyThisTurn(reason) {
+    try {
+        slot.update(() => reason);
+    }
+    catch {
+        /* no session context here — nothing to signal, never blocks the tool call */
+    }
+}
+/**
+ * PEEK without consuming — for a mid-turn reader that must not disturb the read-and-reset contract, which `message.completed` owns.
+ * Fail-soft: no session context answers `null`.
+ */
+export function peekNoReplyThisTurn() {
+    try {
+        return slot.get();
+    }
+    catch {
+        return null;
+    }
+}
+/** Read-and-reset: was `no_reply` called this turn, and with what reason? Always
+ *  clears the slot in the same call so the NEXT turn starts clean. */
+export function consumeNoReplyThisTurn() {
+    try {
+        const was = slot.get();
+        slot.update(() => null);
+        return was;
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=no-reply-signal.js.map

package/dist/agent/channels/no-reply-signal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-reply-signal.js","sourceRoot":"","sources":["../../../agent/channels/no-reply-signal.ts"],"names":[],"mappings":"AAAA,kbAAkb;AAClb,wJAAwJ;AAExJ,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAa1C,MAAM,IAAI,GAAG,WAAW,CAAuB,sCAAsC,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;AAEnG,MAAM,UAAU,mBAAmB,CAAC,MAAqB;IACvD,IAAI,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,6EAA6E;IAC/E,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB;IACjC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC;IACpB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;sEACsE;AACtE,MAAM,UAAU,sBAAsB;IACpC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACxB,OAAO,GAAG,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/agent/channels/normalized-wake.d.ts

@@ -0,0 +1,129 @@
+import { type WakeReason, type WakeMessageInput, type WakeChannelMeta, type WakeThreadMeta, type WakeParticipant, type WakeAddressing, type WakeEngagementTier, type WakeFollowUp } from "./wake-envelope.js";
+import { type ContextLine } from "./context-render.js";
+export type { WakeAddressing, WakeEngagementTier } from "./wake-envelope.js";
+/** Turn-final text that means "post nothing" (see slack-events.ts isNoReply). */
+export declare const NO_REPLY_SENTINEL = "NO_REPLY";
+/**
+ * The trigger-message id prefix the ONE corrective re-drive wake carries (`redrive-<original wake id>`, minted in channels/unified-redrive.ts's `buildRedriveWake`). It reaches the served prompt as a `<message … id="redrive-…">` attribute, so it is the marker that names a corrective turn to any reader of the prompt alone.
+ * 🔴 IT IS A MARKER, NOT A GATE (OPE-1982). Nothing in the product branches on it: the corrective wake is an ordinary ambient wake and the seat must not treat it as special. The SCRIPTED MODEL reads it (agent/model/scripted-resolve.ts) to tell the one legitimate cross-turn re-entry of a still-registered script — a turn the host itself re-drove — from the handle leak the OPE-727 guard exists to catch. It lives here, beside the silence vocabulary, so the builder and that reader cannot drift two copies of the string.
+ */
+export declare const REDRIVE_TRIGGER_ID_PREFIX = "redrive-";
+/**
+ * THE ONE SENTENCE THAT ENDS A SILENT TURN. eve runs one step per model call and reads a step with no tool call and no text as a FAILURE, then reissues the call once with a nudge to answer now — so a turn that correctly chose silence gets commanded to reply.
+ * Every terminal-verb result that ends a turn in silence therefore NAMES this output, which makes the next step non-empty and keeps eve out of its recovery path. Three sites say it, and they must say the SAME thing, because they are all answering the same nudge.
+ */
+export declare const END_TURN_WITH_SENTINEL_INSTRUCTION = "Now end the turn: output exactly NO_REPLY and nothing else.";
+/**
+ * Shared addendum for every judged-silence instruction: prefer the `no_reply` TOOL over the bare sentinel where one is available, because it is audited and carries a closed reason on the identical suppression path.
+ * It lives in ONE place rather than copy-pasted across every wake instruction.
+ */
+export declare const PREFER_NO_REPLY_TOOL: string;
+/**
+ * The wake TRIGGER — a discriminated union. `message` is a message that woke the agent; {@link mkMessageTrigger} stamps `trigger: true` on it, so the renderer's exactly-one-trigger-message invariant is satisfied structurally rather than by convention.
+ * `notice` is a wake that NO message caused: OE itself woke the session to tell it something (an approval decision). Its whole cause is OE's own instruction, which rides {@link NormalizedWake.systemNote}; the envelope then carries no `<message>` element at all.
+ * 🔴 A NOTICE NEVER INVENTS A MESSAGE. A synthetic `relay` message would put OE's own instruction inside the untrusted fence with a `source` label that claims a chat message, and an instruction-following model correctly refuses it (OPE-2065). It would also hand every trigger-body consumer an "author's body" that nobody wrote.
+ */
+export type NormalizedWakeTrigger = {
+    readonly kind: "message";
+    readonly message: WakeMessageInput;
+} | {
+    readonly kind: "notice";
+};
+/**
+ * The conversational locus of the wake — the two-level collapse every surface maps into, a container holding a conversation.
+ * It reuses the envelope's existing meta types, so each surface's render stays byte-identical.
+ */
+export interface WakeLocus {
+    /** The CONTAINER: Slack/Discord channel, Notion page, GitHub repo, Linear team. */
+    readonly channel: WakeChannelMeta;
+    /** The CONVERSATION, when the wake is conversation-scoped (Slack thread ts, Discord thread
+     *  channel id, Notion discussion id, …). Absent = container-scoped (top-level message,
+     *  supervisor wake). */
+    readonly thread?: WakeThreadMeta;
+}
+export interface NormalizedWake {
+    /** Platform id (binding.ts vocabulary). For audit/log labels and the ingest registry key ONLY —
+     *  renderWake NEVER branches on it (that is the whole point). */
+    readonly platform: string;
+    /** Existing union (wake-envelope.ts) — NOT extended here. */
+    readonly reason: WakeReason;
+    readonly addressing: WakeAddressing;
+    /** The CONTAINER noun for this locus — "channel" (default, Slack/Discord) or "doc" (Notion).
+     *  Renders as the `<channel container>` attribute; unset ⇒ "channel". */
+    readonly containerNoun?: string;
+    /** Engagement calibration ({@link WakeEngagementTier}) — renders as the `<wake engagement>`
+     *  attribute, a resolved `"neutral"` included. */
+    readonly engagementTier?: WakeEngagementTier;
+    /**
+     * Host-minted wake id, rendered as the `<wake wake-id>` attribute — the SINGLE-WINDOW path only. It is the id the model echoes to the `reply` tool so the host can resolve the wake's origin, because a turn that merged cross-surface deliveries carries one auth snapshot that cannot address each wake. That merge is unreachable on eve 0.54.3 — only the caller-less task completion cohort folds, and it carries no `auth` — but the id is still LOAD-BEARING: every single-window reply resolves its target by it, and the fence admits sibling wakes with no merge (OPE-2042).
+     * Unset means no attribute, and the session then has no id to route a `reply` through.
+     */
+    readonly wakeId?: string;
+    /**
+     * The follow-up contract for a wake that is NOT a name-drop, rendered as the `<wake follow-up>` attribute.
+     * The name-drop mechanic states its own value under {@link NormalizedWake.nameDrop}; this field is what lets an ALREADY-ENGAGED conversation state `"thread-engaged"` on a judged ambient wake, which is a fact the envelope vocabulary has always carried and no builder could set.
+     * MEASURED WHY (ship #195, deploy `dpl_EXAMPLE000000000000000000001`): the F-EDIT leg's edit wake reached the seat with `addressing="channel-watch"` and no `follow-up`, in a thread the same seat had answered 65 s earlier, and the seat declined it as `no_reply reason:"not_relevant"` — "The headcount update was not addressed to me". The enrolment was in the engagement registry the whole time; nothing on the wake said so.
+     * Absent ⇒ no attribute, which is every wake that states no contract. {@link NormalizedWake.nameDrop} wins where both are somehow set, so the name-drop render is byte-identical.
+     */
+    readonly followUp?: WakeFollowUp;
+    readonly locus: WakeLocus;
+    /** id→name/handle directory (untrusted profile content; the envelope escapes it). */
+    readonly participants?: readonly WakeParticipant[];
+    /** ENVELOPE-SIBLING backscroll (oldest-first, no trigger flags): the supervisor first-wake
+     *  clustered bundle. Renders as <session>-grouped / flat <message> siblings before the trigger. */
+    readonly backscroll?: readonly WakeMessageInput[];
+    /** SIDE-CHANNEL conversation context (mention/name-drop hydration): RAW ContextLines — the
+     *  renderer calls the shared renderContext itself (W3). Rendered into RenderedWake.context. */
+    readonly contextLines?: readonly ContextLine[];
+    /** renderContext's `source` label. Required when contextLines is non-empty. */
+    readonly contextSource?: string;
+    /** Trusted, adapter-authored "fetch more" hint naming REAL tools on this surface (surfaces with
+     *  no read tools pass none — honest availability, same doctrine as the CapabilityManifest).
+     *  Appended OUTSIDE the untrusted wrap by renderContext. */
+    readonly readMoreHint?: string;
+    /**
+     * name-drop addressing only. `followUp` is the honest follow-up contract — three values, because three engagement mechanics exist today — rendered as the `<wake follow-up>` attribute.
+     * There is deliberately no matched-name member: the standing identity line states the agent's own name every turn, so the wake never needed to.
+     */
+    readonly nameDrop?: {
+        readonly followUp: WakeFollowUp;
+    };
+    /**
+     * A "changed since your last wake" PUSH — a FULLY-FORMED, TRUSTED, OE-computed `<system-reminder>` block, appended after the rendered envelope on its own line, so the model is TOLD which memory silos changed.
+     * It is trusted ONLY because every byte is built from OE-CONTROLLED pointers, never memory-file content, and the renderer emits it VERBATIM, adding no interpolation point. Unset means nothing is appended, and it is ignored on a raw `direct` wake, which stays verbatim.
+     */
+    readonly memoryDelta?: string;
+    /**
+     * This surface cannot read its own history between wakes, so the seat's since-last-wake catch-up did not run (channels/seat-catch-up.ts `catchUpUnavailableReason`). Rendered as a trusted `<system-note>` inside the envelope — see {@link WakeEnvelopeInput.catchUpUnavailable} for why an empty context must not be readable as a quiet room.
+     * Absent ⇒ nothing is appended. Ignored on a raw `direct` wake, which stays verbatim.
+     */
+    readonly catchUpUnavailable?: string;
+    /**
+     * OE's OWN instruction for this wake, rendered as a trusted `<system-note>` inside the envelope — see {@link WakeEnvelopeInput.systemNote} for why it must never ride a fenced message body.
+     * Only an OE builder sets it: the auto-redrive's correction (channels/unified-redrive.ts `buildRedriveWake`) and the approval-decision notice (approvals/decision-wake.ts `buildApprovalDecisionWake`, a `notice` trigger whose note is its whole cause).
+     * Absent ⇒ nothing is appended. Ignored on a raw `direct` wake, which stays verbatim. REQUIRED, non-empty, on a `notice` trigger — the renderer throws otherwise.
+     */
+    readonly systemNote?: string;
+    readonly trigger: NormalizedWakeTrigger;
+}
+/** What the single renderer emits — the exact shape every OE-owned dispatch already sends. */
+export interface RenderedWake {
+    /** The turn message: the `<wake>` envelope (judged) or the raw driver text (direct). */
+    readonly message: string;
+    /** Untrusted-wrapped context blocks (renderContext output) — omitted when empty, so the eve
+     *  SendPayload stays `message`-only on the no-context path (today's exact behaviour). */
+    readonly context?: readonly string[];
+}
+/** One inbound-event mapper: a raw surface payload becomes a NormalizedWake, or null to drop. The uniform seam every surface builder conforms to. */
+export type WakeIngest<Raw> = (raw: Raw) => NormalizedWake | null;
+/**
+ * Wrap a fully-built trigger message as the sole `{ kind: "message" }` trigger.
+ * It STAMPS `trigger: true` structurally — callers never set it — so the renderer's exactly-one-trigger invariant is satisfied by construction rather than by convention.
+ */
+export declare function mkMessageTrigger(message: WakeMessageInput): NormalizedWakeTrigger;
+/**
+ * The SINGLE wake renderer — no platform branch. `direct` emits the trigger body VERBATIM and unwrapped; every judged addressing emits the `<wake>` envelope ALONE, body untrusted-wrapped by the envelope renderer, with nothing rendered above it.
+ * Context is the untrusted-wrapped block when there are context lines, and is omitted otherwise so the payload stays message-only. `now` is a clock seam, so the envelope's current time is deterministic in tests.
+ */
+export declare function renderWake(nw: NormalizedWake, now?: () => string): RenderedWake;
+//# sourceMappingURL=normalized-wake.d.ts.map

package/dist/agent/channels/normalized-wake.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"normalized-wake.d.ts","sourceRoot":"","sources":["../../../agent/channels/normalized-wake.ts"],"names":[],"mappings":"AAGA,OAAO,EAEL,KAAK,UAAU,EACf,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,kBAAkB,EACvB,KAAK,YAAY,EAClB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAkC,KAAK,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAUvF,YAAY,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAK7E,iFAAiF;AACjF,eAAO,MAAM,iBAAiB,aAAa,CAAC;AAE5C;;;GAGG;AACH,eAAO,MAAM,yBAAyB,aAAa,CAAC;AAEpD;;;GAGG;AACH,eAAO,MAAM,kCAAkC,gEAA4E,CAAC;AAE5H;;;GAGG;AACH,eAAO,MAAM,oBAAoB,QAEwE,CAAC;AAE1G;;;;GAIG;AACH,MAAM,MAAM,qBAAqB,GAC7B;IACE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,gBAAgB,CAAC;CACpC,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,CAAC;AAQhC;;;GAGG;AACH,MAAM,WAAW,SAAS;IACxB,mFAAmF;IACnF,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAClC;;4BAEwB;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,cAAc,CAAC;CAClC;AAED,MAAM,WAAW,cAAc;IAC7B;qEACiE;IACjE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,6DAA6D;IAC7D,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,cAAc,CAAC;IACpC;6EACyE;IACzE,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAEhC;sDACkD;IAClD,QAAQ,CAAC,cAAc,CAAC,EAAE,kBAAkB,CAAC;IAE7C;;;OAGG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;OAKG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,YAAY,CAAC;IACjC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,qFAAqF;IACrF,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,eAAe,EAAE,CAAC;IACnD;uGACmG;IACnG,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAClD;mGAC+F;IAC/F,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,WAAW,EAAE,CAAC;IAC/C,+EAA+E;IAC/E,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC;;gEAE4D;IAC5D,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B;;;OAGG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE;QAClB,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;KACjC,CAAC;IACF;;;OAGG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B;;;OAGG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC;;;;OAIG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAC;CACzC;AAED,8FAA8F;AAC9F,MAAM,WAAW,YAAY;IAC3B,wFAAwF;IACxF,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB;6FACyF;IACzF,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACtC;AAED,qJAAqJ;AACrJ,MAAM,MAAM,UAAU,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,cAAc,GAAG,IAAI,CAAC;AAElE;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,gBAAgB,GAAG,qBAAqB,CAEjF;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,EAAE,EAAE,cAAc,EAAE,GAAG,GAAE,MAAM,MAAuC,GAAG,YAAY,CA6G/G"}