@open-everywhere/core 0.1.0

package/dist/agent/channels/post-arms.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"post-arms.d.ts","sourceRoot":"","sources":["../../../agent/channels/post-arms.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACjE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAM3D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAG/D;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,GAAG,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IACnC,GAAG,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,4FAA4F;IAC5F,QAAQ,CAAC,GAAG,EAAE,eAAe,CAAC;CAC/B;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,uGAAuG;IACvG,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,wDAAwD;IACxD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,yFAAyF;IACzF,QAAQ,CAAC,MAAM,EAAE,QAAQ,GAAG,QAAQ,CAAC;CACtC;AAED;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACnC,6FAA6F;IAC7F,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,uGAAuG;IACvG,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,mBAAmB,EAAE,CAAC;CACnD;AAED;;;GAGG;AACH,eAAO,MAAM,+BAA+B,0BAA0B,CAAC;AAEvE;;sGAEsG;AACtG,MAAM,MAAM,uBAAuB,GAC/B;IAAE,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAA;CAAE,GAC5B;IAAE,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC;AAE7F;;;GAGG;AACH,wBAAgB,+BAA+B,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,SAAS,EAAE,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,uBAAuB,CAO1J;AAED;wGACwG;AACxG,wBAAgB,8BAA8B,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,SAAS,GAAG,uBAAuB,CAE1H;AAED;;;GAGG;AACH,MAAM,MAAM,WAAW,GAGnB;IAAE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAA;CAAE,GAC3F;IAAE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAA;CAAE,GAE9I;IAAE,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC;AAE7F;;;GAGG;AACH,MAAM,WAAW,UAAU;IACzB;kGAC8F;IAC9F,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,sGAAsG;IACtG,aAAa,CAAC,CAAC,GAAG,EAAE,gBAAgB,GAAG,WAAW,GAAG,IAAI,CAAC;IAC1D;;;OAGG;IACH,aAAa,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3F;;;OAGG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAStC;;;OAGG;IACH,eAAe,CAAC,CAAC,MAAM,EAAE,iBAAiB,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAChJ;;;;OAIG;IACH,sBAAsB,CAAC,CACrB,MAAM,EAAE,iBAAiB,EACzB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,SAAS,mBAAmB,EAAE,EACvC,IAAI,EAAE,gBAAgB,EACtB,OAAO,CAAC,EAAE,YAAY,EACtB,MAAM,CAAC,EAAE,UAAU,GAClB,OAAO,CAAC,MAAM,CAAC,CAAC;IACnB;;;OAGG;IACH,oBAAoB,CAAC,CAAC,MAAM,EAAE,iBAAiB,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5G;;;OAGG;IACH,WAAW,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/E;;;;;OAKG;IACH,aAAa,CAAC,CAAC,KAAK,EAAE;QAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACnG;;;OAGG;IACH,iBAAiB,CAAC,CAAC,MAAM,EAAE,iBAAiB,EAAE,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IACpF,+FAA+F;IAC/F,qBAAqB,CAAC,CAAC,MAAM,EAAE,iBAAiB,GAAG,MAAM,CAAC;IAC1D,wGAAwG;IACxG,kBAAkB,CAAC,CAAC,MAAM,EAAE,iBAAiB,GAAG,MAAM,CAAC;IACvD;;;OAGG;IACH,oBAAoB,CAAC,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;IACnF;;;OAGG;IACH,kBAAkB,CAAC,CAAC,GAAG,EAAE,gBAAgB,GAAG,WAAW,GAAG,IAAI,CAAC;IAC/D;;;OAGG;IACH,KAAK,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3D;AAMD;gFACgF;AAChF,wBAAgB,eAAe,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI,CAGlD;AAED;;wCAEwC;AACxC,wBAAgB,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,GAAG,SAAS,CAEzE;AAED,sFAAsF;AACtF,wBAAgB,0BAA0B,IAAI,SAAS,MAAM,EAAE,CAE9D;AAED,sGAAsG;AACtG,wBAAgB,6BAA6B,IAAI,SAAS,MAAM,EAAE,CAIjE;AAED;kFACkF;AAClF,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAE7E;AAED;;6FAE6F;AAC7F,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAE3E;AAED;oGACoG;AACpG,wBAAgB,6BAA6B,IAAI,SAAS,MAAM,EAAE,CAIjE;AAED;;;GAGG;AACH,wBAAsB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,EAAE,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAUrI;AAED;;;GAGG;AACH,wBAAsB,oBAAoB,CACxC,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE;IAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,aAAa,EAAE,CAAA;CAAE,GACpD,OAAO,CAAC,MAAM,CAAC,CA2CjB"}

package/dist/agent/channels/post-arms.js

@@ -0,0 +1,146 @@
+// post-arms — the ONE cross-surface POST registry behind the reply, unified and redrive spines: a per-platform arm registry keyed by `platform`, so those spines hold ZERO vendor imports and dispatch by a RUNTIME key instead of a hardcoded compile-time switch. Each provider owns all of its own posting in one module and registers a single arm here.
+// ONE ARM PER PROVIDER, MEMBERS OPTIONAL: presence IS the declaration, and undefined means unsupported, never faked. An absent member means the spine returns an honest "cannot post here" or throws a LOUD, token-free "no post arm" rather than silently mis-routing. Arms import the spine types as TYPES only, so there is no runtime cycle back, and the registry itself owns no vendor code.
+import { admitProviderRegistration } from "../access/provider-selection.js";
+import { soleAdmittedTenantFromConfig } from "../access/tenant-admission.js";
+import { appendAudit } from "../audit/audit.js";
+import { expandLinkSet } from "../identity/link-store.js";
+import { isTenantScopedPlatform, tryPrincipalKey } from "../identity/principal-key.js";
+import { processRegistryMap } from "../lib/process-registry.js";
+/**
+ * The `dm.delivery.skipped` audit `detail.reason` — one greppable string, shared by the emitter
+ * and its test (same convention as `UNADMITTED_TENANT_DROP_REASON` in access/tenant-admission.ts).
+ */
+export const DM_WORKSPACE_UNREACHABLE_REASON = "workspace-unreachable";
+/**
+ * PURE decision table for the DM-workspace floor: it takes the arm's own tenant as an argument, so the table is unit-testable without a config. It is the DETECTION seam ONLY — it never picks a credential and never changes which token an arm uses, it just tells the caller whether to bother trying.
+ * THREE branches answer `reachable: true` on purpose, stated so a future reader does not "fix" them into a skip: a platform whose ids are vendor-global has no same-platform workspace to alias across; a blank target tenant is not evidence of a FOREIGN workspace, so comparing it would invent a mismatch rather than detect one; and an UNDETERMINED arm tenant is the FAIL-OPEN-ON-UNKNOWN pin, because today's code always attempts the send and this floor must never newly refuse a delivery that used to go through. It answers false only when the arm tenant is KNOWN and differs.
+ */
+export function classifyDmWorkspaceReachability(platform, targetTenant, armTenant) {
+    if (!isTenantScopedPlatform(platform))
+        return { reachable: true };
+    const target = typeof targetTenant === "string" ? targetTenant.trim() : "";
+    if (target.length === 0)
+        return { reachable: true };
+    if (armTenant === undefined)
+        return { reachable: true };
+    if (armTenant === target)
+        return { reachable: true };
+    return { reachable: false, targetTenant: target, armTenant };
+}
+/** {@link classifyDmWorkspaceReachability} against the registered app config's sole admitted tenant
+ *  for `platform` (access/tenant-admission.ts) — the real call this floor makes at DM-delivery time. */
+export function dmWorkspaceReachableFromConfig(platform, targetTenant) {
+    return classifyDmWorkspaceReachability(platform, targetTenant, soleAdmittedTenantFromConfig(platform));
+}
+// Populated at module load by the per-provider arm imports at the bottom of this file: the registry owner does the wiring, so each arm file stays free of any dependency on this module.
+// PROCESS-GLOBAL, because providers register their arm from one module identity while reply-posting resolves from another, and a split registry means an arm posts NOTHING, silently.
+const POST_ARMS = processRegistryMap("post-arms.v1");
+/** Register (or replace) one provider's post arm. Called once per provider at module load — see the
+ *  bottom of this file. Exported so a future surface registers the same way. */
+export function registerPostArm(arm) {
+    if (!admitProviderRegistration(arm.platform, "post-arm"))
+        return;
+    POST_ARMS.set(arm.platform, arm);
+}
+/** The arm for `platform`, or undefined when no provider registered one — or the platform itself is
+ *  undefined (channelPlatform returns `string | undefined`) — so the spine refuses/returns null,
+ *  never a faked or mis-routed post. */
+export function postArm(platform) {
+    return platform === undefined ? undefined : POST_ARMS.get(platform);
+}
+/** The platforms with ANY post arm registered — for the "no arm" refusal messages. */
+export function registeredPostArmPlatforms() {
+    return [...POST_ARMS.keys()];
+}
+/** The platforms whose arm implements {@link PostArm.deliverDirectMessage} — for the refusal copy. */
+export function directMessageCapablePlatforms() {
+    return [...POST_ARMS.values()]
+        .filter((a) => typeof a.deliverDirectMessage === "function")
+        .map((a) => a.platform);
+}
+/** Does `platform` support DM delivery? Checked BEFORE any pane substance is computed, so the
+ *  governance arm can refuse without ever materialising what it can't deliver. */
+export function canDeliverDirectMessage(platform) {
+    return typeof postArm(platform)?.deliverDirectMessage === "function";
+}
+/** Can a unified post on `platform` carry tappable actions — that is, does its arm implement
+ *  {@link PostArm.dispatchUnifiedActions}? Read BEFORE a caller mints any click state, so a surface
+ *  with no component plane never writes a ticket row for buttons that will not be posted. */
+export function canPostUnifiedActions(platform) {
+    return typeof postArm(platform)?.dispatchUnifiedActions === "function";
+}
+/** The platforms whose arm can carry tappable actions on a unified post — for the same honest
+ *  "which surfaces actually do this" answer {@link directMessageCapablePlatforms} gives for DMs. */
+export function unifiedActionCapablePlatforms() {
+    return [...POST_ARMS.values()]
+        .filter((a) => typeof a.dispatchUnifiedActions === "function")
+        .map((a) => a.platform);
+}
+/**
+ * Deliver `text` to `principalId`'s DM on `platform` through that provider's post arm.
+ * It throws a LOUD, token-free error when the platform has no DM arm, naming the platforms that do — the same refuse-rather-than-mis-route posture the dispatch spines take, and what keeps the governance DM arm fail-closed on a provider that cannot DM.
+ */
+export async function dispatchDirectMessage(platform, input) {
+    const arm = postArm(platform);
+    const deliver = arm?.deliverDirectMessage;
+    if (!arm || !deliver) {
+        const capable = directMessageCapablePlatforms();
+        throw new Error(`no DM-delivery arm for platform "${platform ?? "(unknown)"}" — DM delivery is implemented by: ${capable.length ? capable.join(", ") : "(no provider)"}.`);
+    }
+    return await deliver.call(arm, input);
+}
+/**
+ * Tell EVERY confirmed member of a link-set that it changed. It is NOT a gate and must never become one: under the collapsed consent model MEMBERSHIP IS THE CONSENT, and any confirmed member may grow or sever the set. What this adds is the one thing that collapse left missing — a compromised account cannot change the shape of somebody's identity QUIETLY, because the person hears about it on their other accounts.
+ * BEST-EFFORT on every axis, and each is a real hole: only an account on a DM-CAPABLE surface is reachable, and the registry is the only honest answer to which those are; if the set's ONLY DM-capable account is the compromised one, the notice goes to the attacker and nobody else; a throwing or hanging arm must never fail the tool turn; and a member on a workspace this deployment's arm cannot reach is SKIPPED WITH AN AUDIT ROW, a loud non-delivery rather than a new hole. It never throws, and returns how many deliveries actually landed.
+ */
+export async function notifyLinkSetMembers(org, linkSetId, text, opts) {
+    let delivered = 0;
+    try {
+        const skip = new Set((opts?.except ?? []).map((a) => tryPrincipalKey(a.platform, a.tenant, a.nativeId)).filter((k) => k !== undefined));
+        // `expandLinkSet` already excludes `suggested` and `revoked` rows and returns [] for a
+        // suspended/revoked set — so an unproven or withdrawn account is never told, matching what the
+        // membership read itself believes.
+        const members = await expandLinkSet(org, linkSetId);
+        for (const m of members) {
+            const key = tryPrincipalKey(m.platform, m.tenant, m.nativeId);
+            if (key !== undefined && skip.has(key))
+                continue;
+            if (!canDeliverDirectMessage(m.platform))
+                continue;
+            // THE CHEAP HONEST FLOOR. The request still names WHO and never WHERE, so this does not close the multi-workspace DM gap — it stops the SILENT half of it.
+            // When this deployment's arm can name a SINGLE tenant it serves for the platform, and that differs from the member's own recorded tenant, the send is refused BEFORE it is attempted — a skip, not a throw — and the reason goes on an audit row rather than a console line. An INDETERMINATE arm tenant still attempts the send, so this floor can only add loudness to an already-mis-routing delivery and can never break one that used to work.
+            const reach = dmWorkspaceReachableFromConfig(m.platform, m.tenant);
+            if (!reach.reachable) {
+                await appendAudit({
+                    org,
+                    platform: m.platform,
+                    workspace: reach.targetTenant,
+                    action: "dm.delivery.skipped",
+                    detail: {
+                        reason: DM_WORKSPACE_UNREACHABLE_REASON,
+                        linkSetId,
+                        targetWorkspaceId: reach.targetTenant,
+                        armWorkspaceId: reach.armTenant,
+                    },
+                }).catch(() => undefined);
+                console.log(`[open-everywhere:identity] link-set ${linkSetId}: SKIPPED notifying ${key ?? `${m.platform} account \"${m.nativeId}\"`} — its workspace ("${reach.targetTenant}") is not the one this deployment's ${m.platform} credential serves ("${reach.armTenant}"); see the dm.delivery.skipped audit row.`);
+                continue;
+            }
+            try {
+                await dispatchDirectMessage(m.platform, { principalId: m.nativeId, text });
+                delivered++;
+            }
+            catch (err) {
+                // Per-account, so one dead arm does not silence the rest of the set.
+                console.log(`[open-everywhere:identity] link-set ${linkSetId}: could not notify ${key ?? `${m.platform} account \"${m.nativeId}\"`}: ${String(err)}`);
+            }
+        }
+    }
+    catch (err) {
+        console.log(`[open-everywhere:identity] link-set ${linkSetId}: member notification skipped: ${String(err)}`);
+    }
+    return delivered;
+}
+// Provider arm registration, imported HERE rather than the other way round, so each provider arm file stays free of any dependency on this registry: it exports its arm object and the registry owner wires it.
+// This is also the single place the vendor import graph is pulled in, and it is unchanged overall — the spines already imported every one of these vendors before the arms moved out of them.
+//# sourceMappingURL=post-arms.js.map

package/dist/agent/channels/post-arms.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"post-arms.js","sourceRoot":"","sources":["../../../agent/channels/post-arms.ts"],"names":[],"mappings":"AAAA,6VAA6V;AAC7V,mYAAmY;AAOnY,OAAO,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAC;AAC5E,OAAO,EAAE,4BAA4B,EAAE,MAAM,+BAA+B,CAAC;AAC7E,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,EAAE,sBAAsB,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAEvF,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AA+ChE;;;GAGG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,uBAAuB,CAAC;AASvE;;;GAGG;AACH,MAAM,UAAU,+BAA+B,CAAC,QAAgB,EAAE,YAAgC,EAAE,SAA6B;IAC/H,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAClE,MAAM,MAAM,GAAG,OAAO,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3E,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IACpD,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IACxD,IAAI,SAAS,KAAK,MAAM;QAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IACrD,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;AAC/D,CAAC;AAED;wGACwG;AACxG,MAAM,UAAU,8BAA8B,CAAC,QAAgB,EAAE,YAAgC;IAC/F,OAAO,+BAA+B,CAAC,QAAQ,EAAE,YAAY,EAAE,4BAA4B,CAAC,QAAQ,CAAC,CAAC,CAAC;AACzG,CAAC;AA2GD,yLAAyL;AACzL,sLAAsL;AACtL,MAAM,SAAS,GAAG,kBAAkB,CAAU,cAAc,CAAC,CAAC;AAE9D;gFACgF;AAChF,MAAM,UAAU,eAAe,CAAC,GAAY;IAC1C,IAAI,CAAC,yBAAyB,CAAC,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC;QAAE,OAAO;IACjE,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;AACnC,CAAC;AAED;;wCAEwC;AACxC,MAAM,UAAU,OAAO,CAAC,QAA4B;IAClD,OAAO,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;AACtE,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,0BAA0B;IACxC,OAAO,CAAC,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;AAC/B,CAAC;AAED,sGAAsG;AACtG,MAAM,UAAU,6BAA6B;IAC3C,OAAO,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC;SAC3B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,oBAAoB,KAAK,UAAU,CAAC;SAC3D,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;AAC5B,CAAC;AAED;kFACkF;AAClF,MAAM,UAAU,uBAAuB,CAAC,QAA4B;IAClE,OAAO,OAAO,OAAO,CAAC,QAAQ,CAAC,EAAE,oBAAoB,KAAK,UAAU,CAAC;AACvE,CAAC;AAED;;6FAE6F;AAC7F,MAAM,UAAU,qBAAqB,CAAC,QAA4B;IAChE,OAAO,OAAO,OAAO,CAAC,QAAQ,CAAC,EAAE,sBAAsB,KAAK,UAAU,CAAC;AACzE,CAAC;AAED;oGACoG;AACpG,MAAM,UAAU,6BAA6B;IAC3C,OAAO,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC;SAC3B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,sBAAsB,KAAK,UAAU,CAAC;SAC7D,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;AAC5B,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,QAA4B,EAAE,KAA2B;IACnG,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC9B,MAAM,OAAO,GAAG,GAAG,EAAE,oBAAoB,CAAC;IAC1C,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QACrB,MAAM,OAAO,GAAG,6BAA6B,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CACb,oCAAoC,QAAQ,IAAI,WAAW,sCAAsC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,eAAe,GAAG,CAC1J,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;AACxC,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,GAAW,EACX,SAAiB,EACjB,IAAY,EACZ,IAAqD;IAErD,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC;QACrJ,uFAAuF;QACvF,+FAA+F;QAC/F,mCAAmC;QACnC,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QACpD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,MAAM,GAAG,GAAG,eAAe,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC;YAC9D,IAAI,GAAG,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,SAAS;YACjD,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC,QAAQ,CAAC;gBAAE,SAAS;YACnD,2JAA2J;YAC3J,obAAob;YACpb,MAAM,KAAK,GAAG,8BAA8B,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;YACnE,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;gBACrB,MAAM,WAAW,CAAC;oBAChB,GAAG;oBACH,QAAQ,EAAE,CAAC,CAAC,QAAQ;oBACpB,SAAS,EAAE,KAAK,CAAC,YAAY;oBAC7B,MAAM,EAAE,qBAAqB;oBAC7B,MAAM,EAAE;wBACN,MAAM,EAAE,+BAA+B;wBACvC,SAAS;wBACT,iBAAiB,EAAE,KAAK,CAAC,YAAY;wBACrC,cAAc,EAAE,KAAK,CAAC,SAAS;qBAChC;iBACF,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBAC1B,OAAO,CAAC,GAAG,CAAC,uCAAuC,SAAS,uBAAuB,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,cAAc,CAAC,CAAC,QAAQ,IAAI,sBAAsB,KAAK,CAAC,YAAY,uCAAuC,CAAC,CAAC,QAAQ,wBAAwB,KAAK,CAAC,SAAS,4CAA4C,CAAC,CAAC;gBACjT,SAAS;YACX,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,qBAAqB,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC3E,SAAS,EAAE,CAAC;YACd,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,qEAAqE;gBACrE,OAAO,CAAC,GAAG,CAAC,uCAAuC,SAAS,sBAAsB,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,cAAc,CAAC,CAAC,QAAQ,IAAI,KAAK,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACxJ,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,GAAG,CAAC,uCAAuC,SAAS,kCAAkC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC/G,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,gNAAgN;AAChN,8LAA8L"}

package/dist/agent/channels/proactive-dm-manifest.d.ts

@@ -0,0 +1,28 @@
+/** One DM plane. A closed union, so a plane cannot reach the road without being declared. */
+export type ProactiveDmPlane = "chat.dm" | "credential.grant.card" | "credential.grant.notice" | "credential.grant.consent" | "identity.link-set" | "identity.link-consent" | "governance.pane";
+/** Where the recipient's stop stands on a plane. `outranks` is the road: the stop refuses the send, whatever the operator granted. `exempt` is a plane that still addresses a post arm directly, and every one of them is a RULING somebody has to defend rather than an oversight nobody can see.
+ * 🔴 THE RULE THAT DECIDES A NEW PLANE: a stop request throttles chattiness, so an important or host-originated message stays exempt. "Stop DMing me" does not mean never DM me; it means you are DMing me too much. */
+export type ProactiveDmStopStanding = "outranks" | "exempt";
+export interface ProactiveDmPlaneRow {
+    readonly plane: ProactiveDmPlane;
+    /** The repo-relative modules that emit this plane's DM — what the totality lint greps. */
+    readonly modules: readonly string[];
+    /** What the person receives, in one line. */
+    readonly what: string;
+    readonly stop: ProactiveDmStopStanding;
+    /**
+     * TRUE when a delivery on this plane marks the recipient's `dm_audience` DELIVERY RECORD — the fact `chat.dm` reads to tell a first message from a later one, so that the first one takes an approval card and later ones flow.
+     * 🔴 IT IS THE `chat.dm` PLANE'S FACT AND NOBODY ELSE'S. A grant card that marked it would spend the chat plane's one card on a message nobody proposed there: the next `dm_person` to that person would FLOW, with the model's bytes reaching a human that no reviewer ever saw. The record and the stop are two different questions about one address, and only the stop is shared.
+     */
+    readonly recordsDelivery: boolean;
+    /** Why this plane does not take the road. REQUIRED on `exempt` and absent on `outranks`; the lint pins both directions, so an exemption cannot be added without writing its reason down. */
+    readonly exemptBecause?: string;
+}
+/**
+ * THE TABLE. One row per plane, and the lint refuses a DM emitter that appears in no row.
+ * The line between the two standings is WHO THE MESSAGE IS FOR. A plane that carries somebody else's errand to the recipient takes the road: a third party asked, and the recipient's stop is the only thing that answers for them. A plane that tells a person about their OWN identity, or answers a handshake that person themselves began, is a different act, and the stop does not reach it: a stop request throttles chattiness, so an important or host-originated message stays exempt. The three `exempt` rows below are that rule applied, and `scripts/proactive-dm-road-test.ts` pins each one.
+ */
+export declare const PROACTIVE_DM_PLANES: readonly ProactiveDmPlaneRow[];
+/** One plane's row. THROWS on a plane with no row — an undeclared plane must never reach a send. */
+export declare function proactiveDmPlaneRow(plane: ProactiveDmPlane): ProactiveDmPlaneRow;
+//# sourceMappingURL=proactive-dm-manifest.d.ts.map

package/dist/agent/channels/proactive-dm-manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proactive-dm-manifest.d.ts","sourceRoot":"","sources":["../../../agent/channels/proactive-dm-manifest.ts"],"names":[],"mappings":"AAKA,6FAA6F;AAC7F,MAAM,MAAM,gBAAgB,GACxB,SAAS,GACT,uBAAuB,GACvB,yBAAyB,GACzB,0BAA0B,GAC1B,mBAAmB,GACnB,uBAAuB,GACvB,iBAAiB,CAAC;AAEtB;wNACwN;AACxN,MAAM,MAAM,uBAAuB,GAAG,UAAU,GAAG,QAAQ,CAAC;AAE5D,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAC;IACjC,0FAA0F;IAC1F,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,6CAA6C;IAC7C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,uBAAuB,CAAC;IACvC;;;OAGG;IACH,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;IAClC,4LAA4L;IAC5L,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC;AAED;;;GAGG;AACH,eAAO,MAAM,mBAAmB,EAAE,SAAS,mBAAmB,EAkE7D,CAAC;AAEF,oGAAoG;AACpG,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,gBAAgB,GAAG,mBAAmB,CAIhF"}

package/dist/agent/channels/proactive-dm-manifest.js

@@ -0,0 +1,80 @@
+// Every direct message this deployment STARTS with a person, declared in one closed table. A DM the agent starts is a message its recipient did not ask for, and the recipient's own stop is the control that answers it — so the question "which planes does the stop reach?" must have ONE written answer rather than as many answers as there are call sites.
+// 🔴 THE DEFECT THIS TABLE EXISTS TO CLOSE (OPE-1855): the stop was read on the `chat.dm` plane alone, while the credential-grant plane opened its own DM road straight at a post arm. Each module was correct on its own, so no unit test could see it. A person who told the agent to stop still received the grant card and the first-use notice, and neither message carried the line that says how to stop.
+// The rule this table states, and `scripts/proactive-dm-road-test.ts` enforces: a module that starts a DM either takes the ROAD (`deliverProactiveDm`, which reads the stop, appends the footer, records the delivery and writes the audit row) or is declared here as `exempt` with a reason a reviewer can weigh. There is no third state.
+// 🔴 WHAT THE LINT ACTUALLY CHECKS, so nobody reads more into it than it proves. It refuses a post-arm DM call in ANY module that is not the road itself or an `exempt` row's module — and that includes the `outranks` rows, so a plane that is on the road cannot quietly open a second one beside it, which is exactly how this defect was born. It reads whole-line comments as prose and a line-leading `deliverDirectMessage:` or `deliverDirectMessage?` as the interface member or an arm's registration; everything else on those names is a call site.
+/**
+ * THE TABLE. One row per plane, and the lint refuses a DM emitter that appears in no row.
+ * The line between the two standings is WHO THE MESSAGE IS FOR. A plane that carries somebody else's errand to the recipient takes the road: a third party asked, and the recipient's stop is the only thing that answers for them. A plane that tells a person about their OWN identity, or answers a handshake that person themselves began, is a different act, and the stop does not reach it: a stop request throttles chattiness, so an important or host-originated message stays exempt. The three `exempt` rows below are that rule applied, and `scripts/proactive-dm-road-test.ts` pins each one.
+ */
+export const PROACTIVE_DM_PLANES = [
+    {
+        plane: "chat.dm",
+        modules: ["packages/core/agent/tools/dm_person.ts", "packages/core/agent/approvals/chat-dm.ts"],
+        what: "A message the model wrote, to a person an operator granted.",
+        stop: "outranks",
+        recordsDelivery: true,
+    },
+    {
+        plane: "credential.grant.card",
+        modules: ["packages/core/agent/access/credential-grant-card.ts"],
+        what: "The card that asks an owner to lend their own connector credential to somebody else's conversation.",
+        stop: "outranks",
+        recordsDelivery: false,
+    },
+    {
+        plane: "credential.grant.notice",
+        modules: ["packages/core/agent/access/credential-grant-notice.ts"],
+        what: "The once-per-grant notice that the owner's credential was just used.",
+        stop: "outranks",
+        recordsDelivery: false,
+    },
+    {
+        plane: "credential.grant.consent",
+        modules: ["packages/core/agent/access/credential-grant-card.ts"],
+        what: "The link an owner opens to connect their own account before they can answer a grant card.",
+        stop: "outranks",
+        recordsDelivery: false,
+    },
+    {
+        plane: "identity.link-set",
+        modules: ["packages/core/agent/channels/post-arms.ts", "packages/core/agent/tools/unlink_identity.ts"],
+        what: "The alert that an account joined or left the recipient's own linked identity.",
+        stop: "exempt",
+        recordsDelivery: false,
+        exemptBecause: "It is not somebody else's errand: it tells a person that their OWN identity changed, and it is the only thing that makes a quiet takeover loud. A stop request throttles chattiness and this message is important, so it stays exempt — a security alert about the recipient themselves is not what a person is asking to be spared.",
+    },
+    {
+        plane: "identity.link-consent",
+        modules: [
+            "packages/core/agent/tools/link_identity.ts",
+            "packages/core/agent/identity/link-consent.ts",
+            "packages/core/agent/hooks/link-claim.ts",
+        ],
+        what: "The link handshake: the challenge sent to a named TARGET account, and the answer sent back to the account that started it.",
+        stop: "exempt",
+        recordsDelivery: false,
+        // 🔴 THE TWO HALVES ARE NOT ALIKE, AND THE WEAKER ONE DECIDES THE ROW. `identity/link-consent.ts`
+        // and `hooks/link-claim.ts` answer the initiator's own act. `tools/link_identity.ts` does NOT:
+        // it COLD-DMs the target account, which began nothing, and that file's own comment says an
+        // attacker who initiates at your account produces an unexpected DM naming a stranger. So the
+        // stop does not reach a message a stranger can make arrive, and the reason must say so rather
+        // than describe the comfortable half.
+        exemptBecause: "Mixed, and stated at its weakest: the answers `identity/link-consent.ts` and `hooks/link-claim.ts` send go back to the account that began the handshake, but `tools/link_identity.ts` cold-DMs the named TARGET account, which began nothing — it is the challenge that proves that account's ownership, and its copy names the initiator so the person can judge it. A stopped person can therefore still be made to receive that challenge, repeatedly, by anyone who names their account. It stays exempt on the rule that a stop request throttles chattiness: a challenge against the recipient's own account is important, and silencing it would let a link be claimed without the one message that can contest it. The repetition is the real cost, and it belongs to a rate limit on this plane rather than to the stop. NO SUCH RATE LIMIT EXISTS TODAY: `tools/link_identity.ts` names that gap in its own header, and one DM per TTL-bounded single-use request is the only bound the plane has.",
+    },
+    {
+        plane: "governance.pane",
+        modules: ["packages/core/agent/access/pane-venue.ts"],
+        what: "An admin's own pane read — a usage report, a spend report, a connector disclosure — delivered privately back to the admin who asked for it.",
+        stop: "exempt",
+        recordsDelivery: false,
+        exemptBecause: "It answers the recipient's own tool call. The DM is the private venue for a pane they just asked for, because an org-grain read must not land in a room, so it is a reply rather than a message the agent starts. A stop request throttles chattiness, and an answer the person asked for this minute is not chattiness — silencing it would drop the reply to their own command.",
+    },
+];
+/** One plane's row. THROWS on a plane with no row — an undeclared plane must never reach a send. */
+export function proactiveDmPlaneRow(plane) {
+    const row = PROACTIVE_DM_PLANES.find((r) => r.plane === plane);
+    if (row === undefined)
+        throw new Error(`proactive DM plane "${plane}" is not declared in PROACTIVE_DM_PLANES`);
+    return row;
+}
+//# sourceMappingURL=proactive-dm-manifest.js.map

package/dist/agent/channels/proactive-dm-manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proactive-dm-manifest.js","sourceRoot":"","sources":["../../../agent/channels/proactive-dm-manifest.ts"],"names":[],"mappings":"AAAA,iWAAiW;AACjW,iZAAiZ;AACjZ,6UAA6U;AAC7U,iiBAAiiB;AAgCjiB;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAmC;IACjE;QACE,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE,CAAC,wCAAwC,EAAE,0CAA0C,CAAC;QAC/F,IAAI,EAAE,6DAA6D;QACnE,IAAI,EAAE,UAAU;QAChB,eAAe,EAAE,IAAI;KACtB;IACD;QACE,KAAK,EAAE,uBAAuB;QAC9B,OAAO,EAAE,CAAC,qDAAqD,CAAC;QAChE,IAAI,EAAE,qGAAqG;QAC3G,IAAI,EAAE,UAAU;QAChB,eAAe,EAAE,KAAK;KACvB;IACD;QACE,KAAK,EAAE,yBAAyB;QAChC,OAAO,EAAE,CAAC,uDAAuD,CAAC;QAClE,IAAI,EAAE,sEAAsE;QAC5E,IAAI,EAAE,UAAU;QAChB,eAAe,EAAE,KAAK;KACvB;IACD;QACE,KAAK,EAAE,0BAA0B;QACjC,OAAO,EAAE,CAAC,qDAAqD,CAAC;QAChE,IAAI,EAAE,2FAA2F;QACjG,IAAI,EAAE,UAAU;QAChB,eAAe,EAAE,KAAK;KACvB;IACD;QACE,KAAK,EAAE,mBAAmB;QAC1B,OAAO,EAAE,CAAC,2CAA2C,EAAE,8CAA8C,CAAC;QACtG,IAAI,EAAE,+EAA+E;QACrF,IAAI,EAAE,QAAQ;QACd,eAAe,EAAE,KAAK;QACtB,aAAa,EACX,sUAAsU;KACzU;IACD;QACE,KAAK,EAAE,uBAAuB;QAC9B,OAAO,EAAE;YACP,4CAA4C;YAC5C,8CAA8C;YAC9C,yCAAyC;SAC1C;QACD,IAAI,EAAE,4HAA4H;QAClI,IAAI,EAAE,QAAQ;QACd,eAAe,EAAE,KAAK;QACtB,kGAAkG;QAClG,+FAA+F;QAC/F,2FAA2F;QAC3F,6FAA6F;QAC7F,8FAA8F;QAC9F,sCAAsC;QACtC,aAAa,EACX,88BAA88B;KACj9B;IACD;QACE,KAAK,EAAE,iBAAiB;QACxB,OAAO,EAAE,CAAC,0CAA0C,CAAC;QACrD,IAAI,EAAE,6IAA6I;QACnJ,IAAI,EAAE,QAAQ;QACd,eAAe,EAAE,KAAK;QACtB,aAAa,EACX,mXAAmX;KACtX;CACF,CAAC;AAEF,oGAAoG;AACpG,MAAM,UAAU,mBAAmB,CAAC,KAAuB;IACzD,MAAM,GAAG,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC;IAC/D,IAAI,GAAG,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,KAAK,0CAA0C,CAAC,CAAC;IAC/G,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/agent/channels/propose-scope.d.ts

@@ -0,0 +1,18 @@
+import { type BindableContext } from "../identity/binding.js";
+import type { Partition } from "../memory/partition.js";
+/**
+ * The scope key a proposal raised on THIS turn belongs to — the surface the ADDRESSED wake was
+ * dispatched from, or `partition.surfaceKey` when this turn names no addressed wake or the row cannot
+ * answer.
+ *
+ * `partition` is the caller's own `resolvePartition(ctx)`, already computed for its memory tier and
+ * its venue walk. Those keep reading the turn's own ctx on purpose, and the split is the point:
+ * MEMORY BELONGS TO THE SEAT, while a governed proposal belongs to THE ROOM THAT ASKED. Its `org` is
+ * what the wake row was written under, so it is read from here rather than from a second opinion
+ * about which org this turn is in.
+ *
+ * Never throws — a propose site may not fail because a store blipped, and a failed read here would
+ * turn a card into a tool error.
+ */
+export declare function proposalScopeKey(ctx: BindableContext, partition: Pick<Partition, "org" | "surfaceKey">): Promise<string>;
+//# sourceMappingURL=propose-scope.d.ts.map

package/dist/agent/channels/propose-scope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"propose-scope.d.ts","sourceRoot":"","sources":["../../../agent/channels/propose-scope.ts"],"names":[],"mappings":"AAgDA,OAAO,EAAiB,KAAK,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAC7E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAaxD;;;;;;;;;;;;;GAaG;AACH,wBAAsB,gBAAgB,CAAC,GAAG,EAAE,eAAe,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,KAAK,GAAG,YAAY,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAa9H"}

package/dist/agent/channels/propose-scope.js

@@ -0,0 +1,91 @@
+// propose-scope — WHICH ROOM A PROPOSAL BELONGS TO on a coalesced turn (OPE-1756).
+//
+// THE DEFECT, in one sentence: every propose site derives its scope with `resolvePartition(ctx)`, and
+// a turn that carries a SINGLE auth snapshot — the LAST delivery merged into it — then names
+// whichever room happened to arrive last, not the room that asked. `approvals/flow.ts` reads that key
+// twice: for the approver chain and its pre-approval rules, and for the break-glass HALT address. A
+// seat asked to file a ticket in room A, with an unrelated aside queued from room B, carded the ask
+// against B's approvers and read B's halt.
+//
+// 🔴 THE MERGE THAT PRODUCES THAT TURN IS UNREACHABLE TODAY, AND THIS CODE STAYS ANYWAY (OPE-2041).
+// eve 0.52.5 narrowed its ADJACENT-QUEUED batching rule to "Only batch adjacent queued deliveries
+// when their full auth contexts match", enforced by `jsonValuesEqual(c.auth, t.auth)` in
+// `takeBufferedTurnDelivery`. OE stamps `oe_wake_id` and a per-delivery `oe_delivery_id` into
+// `auth.attributes`, so two AUTH-CARRYING deliveries on one unified window never compare equal and
+// eve never folds them. The measurement OPE-1756 was written against was taken on eve 0.39.0, before
+// the rule existed. (eve's OTHER merge arm — a task COMPLETION COHORT — still fires, and is not this
+// defect: those deliveries carry no `auth` at all, so no room's auth can displace another's.) What
+// follows is therefore a DEFENSIVE GUARD, not a live fix: it is correct either way, it costs one
+// read, and it is the right shape the day eve batches authenticated deliveries again.
+// `scripts/coalesced-delivery-merge-assumption-test.ts` pins the impossibility offline and reds the
+// day it stops holding.
+//
+// 🔴 THE FIX IS THE ROAD THE REPLY PATH ALREADY TAKES, not a second one. `reply` corrects the same
+// coalescing for delegated work through `claimTasksForAddressedWake` + `retargetTaskWakes`: the wake
+// the turn ADDRESSED is the turn's own statement about which conversation it is working for, it has
+// already passed the reply fence, and it is host-minted rather than model-authored. This module reads
+// that same signal and answers the surface key the addressed wake was DISPATCHED from.
+//
+// WHY THE WAKE ROW CARRIES THE KEY AT ALL. A `UnifiedWakeOrigin` names a container and a thread and
+// nothing else — `unifiedThreadRef` answers `slack/<channel>`, never `slack/<team>/<channel>` — so no
+// origin can be reassembled into the three-segment `platform/workspace/surface` key a scope needs.
+// The divert knows it (`input.surfaceKey`) and now writes it beside the origin as a tolerated extra
+// field, exactly as `addressing` rides there (channels/unified-window.ts).
+//
+// FAIL-SOFT ON EVERY UNKNOWN, and the fallback is today's answer. No turn, no addressed wake, a row
+// minted before the field existed, an expired row, a store that could not be paged, a malformed key —
+// all answer the caller's own `resolvePartition(ctx)` key. So a proposal can never be scoped to
+// NOWHERE: the worst unknown costs exactly the behaviour that shipped.
+//
+// 🔴 THE BOUND, STATED RATHER THAN ROUNDED UP: THE FIRST ADDRESSED WAKE WINS. `claimTasksForAddressedWake`
+// records the first wake a turn addresses and later replies never change it (access/dispatch-origin-signal.ts).
+// So a turn that answers room A and then raises a proposal for an ask that came from room B scopes
+// that proposal to A — where `resolvePartition(ctx)` would have answered B, and B was right. That is
+// one wrong room traded for another, not a strict improvement, and it is the same bound the delegation
+// re-point already runs under: the turn's FIRST statement about which conversation it is working for
+// is the only host-minted signal there is. Closing it needs a per-CALL address, which no propose site
+// has and which this task does not hold.
+import { currentTurnId } from "../identity/binding.js";
+import { addressedWakeThisTurn } from "../access/dispatch-origin-signal.js";
+import { getOperationalStore } from "../operational/provider.js";
+import { wakeSurfaceKeyFromTargetJson } from "./unified-window.js";
+/** A fully-qualified `platform/workspace/surface` key has exactly three non-empty segments. A stored
+ *  value that is not one is not a scope key, and a caller must never be handed one: `parseScopeKey`
+ *  would read it as a different address shape entirely (a bare domain name, a `user:` key). */
+function isSurfaceKey(value) {
+    const parts = value.split("/");
+    return parts.length === 3 && parts.every((p) => p.length > 0);
+}
+/**
+ * The scope key a proposal raised on THIS turn belongs to — the surface the ADDRESSED wake was
+ * dispatched from, or `partition.surfaceKey` when this turn names no addressed wake or the row cannot
+ * answer.
+ *
+ * `partition` is the caller's own `resolvePartition(ctx)`, already computed for its memory tier and
+ * its venue walk. Those keep reading the turn's own ctx on purpose, and the split is the point:
+ * MEMORY BELONGS TO THE SEAT, while a governed proposal belongs to THE ROOM THAT ASKED. Its `org` is
+ * what the wake row was written under, so it is read from here rather than from a second opinion
+ * about which org this turn is in.
+ *
+ * Never throws — a propose site may not fail because a store blipped, and a failed read here would
+ * turn a card into a tool error.
+ */
+export async function proposalScopeKey(ctx, partition) {
+    const fallback = partition.surfaceKey;
+    try {
+        const addressed = addressedWakeThisTurn(currentTurnId(ctx));
+        if (addressed === undefined || addressed.length === 0)
+            return fallback;
+        if (partition.org.length === 0)
+            return fallback;
+        const json = await getOperationalStore().getUnifiedWakeTarget(partition.org, addressed);
+        if (!json)
+            return fallback;
+        const surfaceKey = wakeSurfaceKeyFromTargetJson(json);
+        return surfaceKey !== undefined && isSurfaceKey(surfaceKey) ? surfaceKey : fallback;
+    }
+    catch {
+        return fallback;
+    }
+}
+//# sourceMappingURL=propose-scope.js.map

package/dist/agent/channels/propose-scope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"propose-scope.js","sourceRoot":"","sources":["../../../agent/channels/propose-scope.ts"],"names":[],"mappings":"AAAA,mFAAmF;AACnF,EAAE;AACF,sGAAsG;AACtG,6FAA6F;AAC7F,sGAAsG;AACtG,oGAAoG;AACpG,oGAAoG;AACpG,2CAA2C;AAC3C,EAAE;AACF,oGAAoG;AACpG,kGAAkG;AAClG,yFAAyF;AACzF,8FAA8F;AAC9F,mGAAmG;AACnG,qGAAqG;AACrG,qGAAqG;AACrG,mGAAmG;AACnG,iGAAiG;AACjG,sFAAsF;AACtF,oGAAoG;AACpG,wBAAwB;AACxB,EAAE;AACF,mGAAmG;AACnG,qGAAqG;AACrG,oGAAoG;AACpG,sGAAsG;AACtG,uFAAuF;AACvF,EAAE;AACF,oGAAoG;AACpG,sGAAsG;AACtG,mGAAmG;AACnG,oGAAoG;AACpG,2EAA2E;AAC3E,EAAE;AACF,oGAAoG;AACpG,sGAAsG;AACtG,gGAAgG;AAChG,uEAAuE;AACvE,EAAE;AACF,2GAA2G;AAC3G,gHAAgH;AAChH,mGAAmG;AACnG,qGAAqG;AACrG,uGAAuG;AACvG,qGAAqG;AACrG,sGAAsG;AACtG,yCAAyC;AAEzC,OAAO,EAAE,aAAa,EAAwB,MAAM,wBAAwB,CAAC;AAE7E,OAAO,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAC5E,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAE,4BAA4B,EAAE,MAAM,qBAAqB,CAAC;AAEnE;;+FAE+F;AAC/F,SAAS,YAAY,CAAC,KAAa;IACjC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AAChE,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,GAAoB,EAAE,SAAgD;IAC3G,MAAM,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC;IACtC,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,qBAAqB,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5D,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,QAAQ,CAAC;QACvE,IAAI,SAAS,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,QAAQ,CAAC;QAChD,MAAM,IAAI,GAAG,MAAM,mBAAmB,EAAE,CAAC,oBAAoB,CAAC,SAAS,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QACxF,IAAI,CAAC,IAAI;YAAE,OAAO,QAAQ,CAAC;QAC3B,MAAM,UAAU,GAAG,4BAA4B,CAAC,IAAI,CAAC,CAAC;QACtD,OAAO,UAAU,KAAK,SAAS,IAAI,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC;IACtF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,QAAQ,CAAC;IAClB,CAAC;AACH,CAAC"}