@open-everywhere/core 0.1.0

package/dist/agent/docs/source-map.d.ts

@@ -0,0 +1,69 @@
+/**
+ * Files under {@link SURFACE_DOC_DIR} that are NOT one provider's runbook and stay in the universal
+ * manual. Only the cross-surface comparison qualifies: it is a product-level "what can a surface do"
+ * table, useful to a deployment carrying any surface at all, and it belongs to no single bundle.
+ */
+export declare const UNIVERSAL_SURFACE_DOCS: readonly string[];
+/** Longest gist the index carries per doc — an index of ~50 docs has to stay browsable. */
+export declare const MAX_SUMMARY_CHARS = 240;
+/**
+ * Top-level `docs/` sections the generator does NOT compile into the shipped manual (OPE-1791).
+ * The pages stay in the repo — they are documentation for humans and input to the coverage lints —
+ * but the agent never reads them in-context.
+ *
+ * `inventory` holds the behaviour inventories (OPE-1779…1783): rows of code-side behaviour with
+ * `Documented by` / `Tested by` / **UNDOCUMENTED** columns. That is a development artefact about
+ * the manual, not a page of the manual, and the same rule already keeps it out of the env-doc scan
+ * (scripts/env-docs-lint.ts, OPE-1780). Shipping it would put an audit table in the agent's
+ * context and make every inventory edit rewrite a compiled module.
+ *
+ * Adding a name here removes a whole section from the manual, so the entry is pinned both
+ * directions by {@link checkDocsSourceMap}: a name that matches no doc on disk fails the build.
+ */
+export declare const UNCOMPILED_DOC_SECTIONS: readonly string[];
+/** A doc's `# ` heading, or the file's basename when it somehow has none. */
+export declare function docTitleOf(path: string, markdown: string): string;
+/**
+ * A one-line gist: the doc's first real paragraph, markdown emphasis and links flattened to their
+ * text, whitespace collapsed, trimmed to {@link MAX_SUMMARY_CHARS} on a word boundary. Headings,
+ * blockquote callouts and list bullets are skipped — the opening paragraph is what every doc in this
+ * manual actually leads with.
+ */
+export declare function docSummaryOf(markdown: string): string;
+/**
+ * Which provider bundle owns a doc, if any. Only a `docs/deploy/surfaces/<id>.md` whose `<id>` is a
+ * bundle actually present is provider-owned; everything else — including a surface-dir file listed in
+ * {@link UNIVERSAL_SURFACE_DOCS} — is part of the universal manual.
+ */
+export declare function providerForDocPath(path: string, bundleIds: readonly string[]): string | undefined;
+/** Which generated module a universal doc lands in: its top-level `docs/` directory, or `root`. */
+export declare function sectionForDocPath(path: string): string;
+/**
+ * Does this doc belong in the compiled manual? False for every page under a section named in
+ * {@link UNCOMPILED_DOC_SECTIONS}. The generator filters on this; the totality check below reads
+ * the UNFILTERED path list, so an exclusion can never hide a surface-doc problem.
+ */
+export declare function isCompiledDoc(path: string): boolean;
+/** Everything the totality check needs; the caller (generator/lint/test) does all the fs work. */
+export interface DocsSourceMapInput {
+    /** Every `docs/**\/*.md` path, repo-relative. */
+    readonly docPaths: readonly string[];
+    /** Bundle directory names physically present under `packages/providers/`. */
+    readonly bundleIds: readonly string[];
+    /** Overridable so the unit test can drive crafted trees; defaults to {@link UNCOMPILED_DOC_SECTIONS}. */
+    readonly uncompiledSections?: readonly string[];
+}
+/**
+ * TOTALITY over the surface-doc convention, both directions — the pin that makes "the exact docs we
+ * ship" survive contact with a new provider:
+ *   • every bundle present has a runbook, so adding a bundle without documenting it fails the build;
+ *   • every file in the surface dir either maps to a bundle or is declared universal, so a runbook
+ *     for a bundle that no longer exists (or a stray file dropped in that dir) fails too, instead of
+ *     silently becoming an unscoped doc every deployment serves.
+ * Plus the same totality over the exclusion list: a name in {@link UNCOMPILED_DOC_SECTIONS} that
+ * matches no doc on disk is a stale exclusion, and a stale exclusion silently drops a future
+ * section of the manual the day someone reuses the name.
+ * Returns human-readable problems; empty means clean.
+ */
+export declare function checkDocsSourceMap(input: DocsSourceMapInput): readonly string[];
+//# sourceMappingURL=source-map.d.ts.map

package/dist/agent/docs/source-map.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-map.d.ts","sourceRoot":"","sources":["../../../agent/docs/source-map.ts"],"names":[],"mappings":"AAsBA;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,EAAE,SAAS,MAAM,EAA0B,CAAC;AAE/E,2FAA2F;AAC3F,eAAO,MAAM,iBAAiB,MAAM,CAAC;AAErC;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,uBAAuB,EAAE,SAAS,MAAM,EAAkB,CAAC;AAExE,6EAA6E;AAC7E,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAMjE;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAwBrD;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,GAAG,SAAS,CAQjG;AAED,mGAAmG;AACnG,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAItD;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEnD;AAED,kGAAkG;AAClG,MAAM,WAAW,kBAAkB;IACjC,iDAAiD;IACjD,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,6EAA6E;IAC7E,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,yGAAyG;IACzG,QAAQ,CAAC,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACjD;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,kBAAkB,GAAG,SAAS,MAAM,EAAE,CA+B/E"}

package/dist/agent/docs/source-map.js

@@ -0,0 +1,156 @@
+// THE DOC SOURCE MAP — the pure half of `scripts/docs-generate.ts` (the generator AND its `--check`
+// lint). Same division of labour as access/provider-selection-check.ts + scripts/provider-selection-
+// lint.ts: everything here is pure (no fs, no eve, no imports at all), so the generator, the lint and
+// the unit test run the SAME logic and a red in one is the same red in the other.
+//
+// TWO JOBS:
+//   1. LOWERING — a doc's `# ` title and a one-line gist, derived from the markdown itself so the
+//      index can never drift from the prose (nothing about a doc is hand-maintained anywhere).
+//   2. THE PROVIDER MAP + ITS TOTALITY PIN — which docs belong to a provider bundle rather than to
+//      the deployment-wide manual, and the fail-closed check that the two sets agree with the
+//      bundles physically present. `docs/deploy/surfaces/<id>.md` IS the per-provider setup runbook,
+//      one file per bundle, and that convention already held exactly (7 bundles, 7 surface docs)
+//      before this module existed — the check is what stops it rotting, in the same shape as the
+//      consequence registry: a surface doc with no bundle, or a bundle with no surface doc, fails
+//      the build rather than quietly becoming undocumented or unscoped.
+//
+// VENDOR-FREE: no provider is named here. Bundle ids arrive as data (the directory names under
+// `packages/providers/`), exactly as they do at the runtime gate.
+/** Where the per-provider setup runbooks live — one file per bundle, named for the bundle. */
+const SURFACE_DOC_DIR = "docs/deploy/surfaces";
+/**
+ * Files under {@link SURFACE_DOC_DIR} that are NOT one provider's runbook and stay in the universal
+ * manual. Only the cross-surface comparison qualifies: it is a product-level "what can a surface do"
+ * table, useful to a deployment carrying any surface at all, and it belongs to no single bundle.
+ */
+export const UNIVERSAL_SURFACE_DOCS = ["support-matrix.md"];
+/** Longest gist the index carries per doc — an index of ~50 docs has to stay browsable. */
+export const MAX_SUMMARY_CHARS = 240;
+/**
+ * Top-level `docs/` sections the generator does NOT compile into the shipped manual (OPE-1791).
+ * The pages stay in the repo — they are documentation for humans and input to the coverage lints —
+ * but the agent never reads them in-context.
+ *
+ * `inventory` holds the behaviour inventories (OPE-1779…1783): rows of code-side behaviour with
+ * `Documented by` / `Tested by` / **UNDOCUMENTED** columns. That is a development artefact about
+ * the manual, not a page of the manual, and the same rule already keeps it out of the env-doc scan
+ * (scripts/env-docs-lint.ts, OPE-1780). Shipping it would put an audit table in the agent's
+ * context and make every inventory edit rewrite a compiled module.
+ *
+ * Adding a name here removes a whole section from the manual, so the entry is pinned both
+ * directions by {@link checkDocsSourceMap}: a name that matches no doc on disk fails the build.
+ */
+export const UNCOMPILED_DOC_SECTIONS = ["inventory"];
+/** A doc's `# ` heading, or the file's basename when it somehow has none. */
+export function docTitleOf(path, markdown) {
+    for (const line of markdown.split(/\r?\n/u)) {
+        const m = /^#\s+(.+?)\s*$/u.exec(line);
+        if (m)
+            return m[1];
+    }
+    return path.split("/").pop() ?? path;
+}
+/**
+ * A one-line gist: the doc's first real paragraph, markdown emphasis and links flattened to their
+ * text, whitespace collapsed, trimmed to {@link MAX_SUMMARY_CHARS} on a word boundary. Headings,
+ * blockquote callouts and list bullets are skipped — the opening paragraph is what every doc in this
+ * manual actually leads with.
+ */
+export function docSummaryOf(markdown) {
+    const lines = markdown.split(/\r?\n/u);
+    const buf = [];
+    for (const line of lines) {
+        const t = line.trim();
+        if (buf.length === 0) {
+            if (t.length === 0 || t.startsWith("#") || t.startsWith(">") || t.startsWith("-") || t.startsWith("*") || t.startsWith("|"))
+                continue;
+            buf.push(t);
+            continue;
+        }
+        if (t.length === 0)
+            break;
+        buf.push(t);
+    }
+    const flat = buf
+        .join(" ")
+        .replace(/!\[([^\]]*)\]\([^)]*\)/gu, "$1")
+        .replace(/\[([^\]]+)\]\([^)]*\)/gu, "$1")
+        .replace(/[`*_]/gu, "")
+        .replace(/\s+/gu, " ")
+        .trim();
+    if (flat.length <= MAX_SUMMARY_CHARS)
+        return flat;
+    const cut = flat.slice(0, MAX_SUMMARY_CHARS);
+    const lastSpace = cut.lastIndexOf(" ");
+    return `${(lastSpace > MAX_SUMMARY_CHARS / 2 ? cut.slice(0, lastSpace) : cut).trimEnd()}…`;
+}
+/**
+ * Which provider bundle owns a doc, if any. Only a `docs/deploy/surfaces/<id>.md` whose `<id>` is a
+ * bundle actually present is provider-owned; everything else — including a surface-dir file listed in
+ * {@link UNIVERSAL_SURFACE_DOCS} — is part of the universal manual.
+ */
+export function providerForDocPath(path, bundleIds) {
+    const prefix = `${SURFACE_DOC_DIR}/`;
+    if (!path.startsWith(prefix))
+        return undefined;
+    const file = path.slice(prefix.length);
+    if (file.includes("/"))
+        return undefined;
+    if (UNIVERSAL_SURFACE_DOCS.includes(file))
+        return undefined;
+    const id = file.replace(/\.md$/u, "");
+    return bundleIds.includes(id) ? id : undefined;
+}
+/** Which generated module a universal doc lands in: its top-level `docs/` directory, or `root`. */
+export function sectionForDocPath(path) {
+    const rest = path.startsWith("docs/") ? path.slice("docs/".length) : path;
+    const slash = rest.indexOf("/");
+    return slash === -1 ? "root" : rest.slice(0, slash);
+}
+/**
+ * Does this doc belong in the compiled manual? False for every page under a section named in
+ * {@link UNCOMPILED_DOC_SECTIONS}. The generator filters on this; the totality check below reads
+ * the UNFILTERED path list, so an exclusion can never hide a surface-doc problem.
+ */
+export function isCompiledDoc(path) {
+    return !UNCOMPILED_DOC_SECTIONS.includes(sectionForDocPath(path));
+}
+/**
+ * TOTALITY over the surface-doc convention, both directions — the pin that makes "the exact docs we
+ * ship" survive contact with a new provider:
+ *   • every bundle present has a runbook, so adding a bundle without documenting it fails the build;
+ *   • every file in the surface dir either maps to a bundle or is declared universal, so a runbook
+ *     for a bundle that no longer exists (or a stray file dropped in that dir) fails too, instead of
+ *     silently becoming an unscoped doc every deployment serves.
+ * Plus the same totality over the exclusion list: a name in {@link UNCOMPILED_DOC_SECTIONS} that
+ * matches no doc on disk is a stale exclusion, and a stale exclusion silently drops a future
+ * section of the manual the day someone reuses the name.
+ * Returns human-readable problems; empty means clean.
+ */
+export function checkDocsSourceMap(input) {
+    const problems = [];
+    const uncompiled = input.uncompiledSections ?? UNCOMPILED_DOC_SECTIONS;
+    for (const section of uncompiled) {
+        if (!input.docPaths.some((p) => sectionForDocPath(p) === section)) {
+            problems.push(`UNCOMPILED_DOC_SECTIONS names "${section}", but no doc lives under docs/${section}/ — the exclusion is stale and would silently drop that section from the shipped manual the day the directory comes back. Delete the entry (packages/core/agent/docs/source-map.ts).`);
+        }
+    }
+    const prefix = `${SURFACE_DOC_DIR}/`;
+    const surfaceFiles = input.docPaths.filter((p) => p.startsWith(prefix) && !p.slice(prefix.length).includes("/"));
+    for (const id of input.bundleIds) {
+        if (!surfaceFiles.includes(`${prefix}${id}.md`)) {
+            problems.push(`provider bundle "packages/providers/${id}" has no ${prefix}${id}.md — every bundle ships its own setup runbook, and that runbook is what the agent serves to a deployment carrying the bundle. Write it, or drop the bundle.`);
+        }
+    }
+    for (const p of surfaceFiles) {
+        const file = p.slice(prefix.length);
+        if (UNIVERSAL_SURFACE_DOCS.includes(file))
+            continue;
+        const id = file.replace(/\.md$/u, "");
+        if (!input.bundleIds.includes(id)) {
+            problems.push(`${p} names no provider bundle ("packages/providers/${id}" does not exist) — it would ship to EVERY deployment as a universal doc. Add the bundle, delete the doc, or declare the filename in UNIVERSAL_SURFACE_DOCS (agent/docs/source-map.ts) with the reason it belongs to no single provider.`);
+        }
+    }
+    return problems;
+}
+//# sourceMappingURL=source-map.js.map

package/dist/agent/docs/source-map.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-map.js","sourceRoot":"","sources":["../../../agent/docs/source-map.ts"],"names":[],"mappings":"AAAA,oGAAoG;AACpG,qGAAqG;AACrG,sGAAsG;AACtG,kFAAkF;AAClF,EAAE;AACF,YAAY;AACZ,kGAAkG;AAClG,+FAA+F;AAC/F,mGAAmG;AACnG,8FAA8F;AAC9F,qGAAqG;AACrG,iGAAiG;AACjG,iGAAiG;AACjG,kGAAkG;AAClG,wEAAwE;AACxE,EAAE;AACF,+FAA+F;AAC/F,kEAAkE;AAElE,8FAA8F;AAC9F,MAAM,eAAe,GAAG,sBAAsB,CAAC;AAE/C;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAsB,CAAC,mBAAmB,CAAC,CAAC;AAE/E,2FAA2F;AAC3F,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAErC;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAsB,CAAC,WAAW,CAAC,CAAC;AAExE,6EAA6E;AAC7E,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,QAAgB;IACvD,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5C,MAAM,CAAC,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC;YAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC;AACvC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,QAAgB;IAC3C,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACvC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACtB,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrB,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,SAAS;YACtI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACZ,SAAS;QACX,CAAC;QACD,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM;QAC1B,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACd,CAAC;IACD,MAAM,IAAI,GAAG,GAAG;SACb,IAAI,CAAC,GAAG,CAAC;SACT,OAAO,CAAC,0BAA0B,EAAE,IAAI,CAAC;SACzC,OAAO,CAAC,yBAAyB,EAAE,IAAI,CAAC;SACxC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;SACtB,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC;SACrB,IAAI,EAAE,CAAC;IACV,IAAI,IAAI,CAAC,MAAM,IAAI,iBAAiB;QAAE,OAAO,IAAI,CAAC;IAClD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC;IAC7C,MAAM,SAAS,GAAG,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACvC,OAAO,GAAG,CAAC,SAAS,GAAG,iBAAiB,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC;AAC7F,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY,EAAE,SAA4B;IAC3E,MAAM,MAAM,GAAG,GAAG,eAAe,GAAG,CAAC;IACrC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,SAAS,CAAC;IAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACvC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IACzC,IAAI,sBAAsB,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5D,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACtC,OAAO,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACjD,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1E,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAChC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;AACtD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,OAAO,CAAC,uBAAuB,CAAC,QAAQ,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC;AACpE,CAAC;AAYD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAyB;IAC1D,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,UAAU,GAAG,KAAK,CAAC,kBAAkB,IAAI,uBAAuB,CAAC;IACvE,KAAK,MAAM,OAAO,IAAI,UAAU,EAAE,CAAC;QACjC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,EAAE,CAAC;YAClE,QAAQ,CAAC,IAAI,CACX,kCAAkC,OAAO,kCAAkC,OAAO,sLAAsL,CACzQ,CAAC;QACJ,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,GAAG,eAAe,GAAG,CAAC;IACrC,MAAM,YAAY,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IAEjH,KAAK,MAAM,EAAE,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QACjC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,MAAM,GAAG,EAAE,KAAK,CAAC,EAAE,CAAC;YAChD,QAAQ,CAAC,IAAI,CACX,uCAAuC,EAAE,YAAY,MAAM,GAAG,EAAE,8JAA8J,CAC/N,CAAC;QACJ,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,YAAY,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,sBAAsB,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,SAAS;QACpD,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACtC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;YAClC,QAAQ,CAAC,IAAI,CACX,GAAG,CAAC,kDAAkD,EAAE,0OAA0O,CACnS,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/agent/hooks/approval-raised.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("eve/hooks").HookDefinition<"input.requested">;
+export default _default;
+//# sourceMappingURL=approval-raised.d.ts.map

package/dist/agent/hooks/approval-raised.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-raised.d.ts","sourceRoot":"","sources":["../../../agent/hooks/approval-raised.ts"],"names":[],"mappings":""}

package/dist/agent/hooks/approval-raised.js

@@ -0,0 +1,31 @@
+// Marks the duplicate-approval fingerprint from `input.requested`, not inside the approval policy: an uncommitted durable step's body re-executes on crash-recovery redelivery, so a write there cannot tell a new ask from its own crashed, never-shown attempt.
+// The event is not a commit point either — a crash after the emit leaves a mark whose request batch is gone (OPE-476).
+import { defineHook } from "eve/hooks";
+import { recordApprovalRaised } from "../access/approval-dedupe.js";
+export default defineHook({
+    events: {
+        "input.requested": async (event, ctx) => {
+            const requests = event.data?.requests;
+            if (!Array.isArray(requests))
+                return;
+            const sessionId = typeof ctx.session?.id === "string" && ctx.session.id.length > 0 ? ctx.session.id : undefined;
+            if (!sessionId)
+                return; // no session to fingerprint against — nothing safe to record
+            for (const raw of requests) {
+                const request = raw;
+                if (request?.kind !== "tool-approval")
+                    continue;
+                const toolName = request.action?.toolName;
+                if (typeof toolName !== "string" || toolName.length === 0)
+                    continue;
+                try {
+                    await recordApprovalRaised(sessionId, toolName, request.action?.input);
+                }
+                catch {
+                    /* best-effort: a lost mark costs a duplicate approval card on a later ask, never a silent denial */
+                }
+            }
+        },
+    },
+});
+//# sourceMappingURL=approval-raised.js.map

package/dist/agent/hooks/approval-raised.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-raised.js","sourceRoot":"","sources":["../../../agent/hooks/approval-raised.ts"],"names":[],"mappings":"AAAA,kQAAkQ;AAClQ,uHAAuH;AAEvH,OAAO,EAAE,UAAU,EAAoB,MAAM,WAAW,CAAC;AACzD,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAWpE,eAAe,UAAU,CAAC;IACxB,MAAM,EAAE;QACN,iBAAiB,EAAE,KAAK,EAAE,KAAK,EAAE,GAAgB,EAAE,EAAE;YACnD,MAAM,QAAQ,GAAI,KAAK,CAAC,IAA2C,EAAE,QAAQ,CAAC;YAC9E,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;gBAAE,OAAO;YACrC,MAAM,SAAS,GAAG,OAAO,GAAG,CAAC,OAAO,EAAE,EAAE,KAAK,QAAQ,IAAI,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;YAChH,IAAI,CAAC,SAAS;gBAAE,OAAO,CAAC,6DAA6D;YAErF,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;gBAC3B,MAAM,OAAO,GAAG,GAA+B,CAAC;gBAChD,IAAI,OAAO,EAAE,IAAI,KAAK,eAAe;oBAAE,SAAS;gBAChD,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC;gBAC1C,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;oBAAE,SAAS;gBACpE,IAAI,CAAC;oBACH,MAAM,oBAAoB,CAAC,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;gBACzE,CAAC;gBAAC,MAAM,CAAC;oBACP,oGAAoG;gBACtG,CAAC;YACH,CAAC;QACH,CAAC;KACF;CACF,CAAC,CAAC"}

package/dist/agent/hooks/approval-settlement.d.ts

@@ -0,0 +1,5 @@
+export declare const EVE_APPROVAL_SETTLED_ACTION = "approval.eve_settled";
+export declare const EVE_APPROVAL_CANDIDATE_ACTION = "approval.eve_candidate";
+declare const _default: import("eve/hooks").HookDefinition<"approval.candidate" | "approval.settled">;
+export default _default;
+//# sourceMappingURL=approval-settlement.d.ts.map

package/dist/agent/hooks/approval-settlement.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-settlement.d.ts","sourceRoot":"","sources":["../../../agent/hooks/approval-settlement.ts"],"names":[],"mappings":"AAQA,eAAO,MAAM,2BAA2B,yBAAyB,CAAC;AAClE,eAAO,MAAM,6BAA6B,2BAA2B,CAAC"}

package/dist/agent/hooks/approval-settlement.js

@@ -0,0 +1,90 @@
+// Audits eve-native approval events onto the OE audit chain as ordinary rows. eve's own approval history is not an audit store, and nothing here reads it back as a source of truth.
+// The recorded responderPrincipalId is eve's id for whoever pressed the button, not a resolved OE principal — the row's own principalId stays the session's acting principal.
+import { defineHook } from "eve/hooks";
+import { appendAudit } from "../audit/audit.js";
+import { bindFrom, deploymentOrg } from "../identity/binding.js";
+import { resolvePartition } from "../memory/partition.js";
+export const EVE_APPROVAL_SETTLED_ACTION = "approval.eve_settled";
+export const EVE_APPROVAL_CANDIDATE_ACTION = "approval.eve_candidate";
+/** A `pending` candidate is the attempt being OPENED, not a decision. The chain records decisions,
+ *  so only terminal outcomes land a row — otherwise every click would write two. */
+const TERMINAL_CANDIDATE_OUTCOMES = new Set(["rejected", "failed", "timed-out", "stale"]);
+/** Where/who stamps, best-effort. An unresolvable surface still lands a row, stamped "unknown" —
+ *  a decision that happened and was not recorded is the worse failure. */
+function stamps(ctx) {
+    try {
+        const p = resolvePartition(ctx);
+        return {
+            org: p.org,
+            platform: p.platform,
+            workspace: p.workspace,
+            surface: p.surface,
+            principalId: bindFrom(ctx).principalId,
+        };
+    }
+    catch {
+        return { org: deploymentOrg(), platform: "unknown", workspace: "unknown" };
+    }
+}
+function dataOf(event) {
+    return event?.data;
+}
+function str(v) {
+    return typeof v === "string" && v.length > 0 ? v : undefined;
+}
+async function auditApprovalSettled(event, ctx) {
+    try {
+        const data = dataOf(event);
+        const outcome = str(data?.outcome);
+        const requestId = str(data?.requestId);
+        if (outcome === undefined || requestId === undefined)
+            return;
+        await appendAudit({
+            ...stamps(ctx),
+            action: EVE_APPROVAL_SETTLED_ACTION,
+            detail: {
+                requestId,
+                outcome,
+                ...(str(data?.responderPrincipalId) !== undefined ? { responderPrincipalId: str(data?.responderPrincipalId) } : {}),
+                ...(str(data?.turnId) !== undefined ? { turnId: str(data?.turnId) } : {}),
+            },
+        });
+    }
+    catch {
+        // Fail-soft: auditing a settlement must never break the turn it records.
+    }
+}
+/** Terminal candidate outcomes only. The reason string is the eve approval-response policy's own refusal text. */
+async function auditApprovalCandidate(event, ctx) {
+    try {
+        const data = dataOf(event);
+        const outcome = str(data?.outcome);
+        const requestId = str(data?.requestId);
+        if (outcome === undefined || requestId === undefined)
+            return;
+        if (!TERMINAL_CANDIDATE_OUTCOMES.has(outcome))
+            return;
+        await appendAudit({
+            ...stamps(ctx),
+            action: EVE_APPROVAL_CANDIDATE_ACTION,
+            detail: {
+                requestId,
+                outcome,
+                ...(str(data?.candidateId) !== undefined ? { candidateId: str(data?.candidateId) } : {}),
+                ...(str(data?.responderPrincipalId) !== undefined ? { responderPrincipalId: str(data?.responderPrincipalId) } : {}),
+                ...(str(data?.reason) !== undefined ? { reason: str(data?.reason) } : {}),
+                ...(str(data?.turnId) !== undefined ? { turnId: str(data?.turnId) } : {}),
+            },
+        });
+    }
+    catch {
+        // Fail-soft, same posture as the settled arm.
+    }
+}
+export default defineHook({
+    events: {
+        "approval.candidate": (event, ctx) => auditApprovalCandidate(event, ctx),
+        "approval.settled": (event, ctx) => auditApprovalSettled(event, ctx),
+    },
+});
+//# sourceMappingURL=approval-settlement.js.map

package/dist/agent/hooks/approval-settlement.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-settlement.js","sourceRoot":"","sources":["../../../agent/hooks/approval-settlement.ts"],"names":[],"mappings":"AAAA,qLAAqL;AACrL,8KAA8K;AAE9K,OAAO,EAAE,UAAU,EAAoB,MAAM,WAAW,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAwB,MAAM,wBAAwB,CAAC;AACvF,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE1D,MAAM,CAAC,MAAM,2BAA2B,GAAG,sBAAsB,CAAC;AAClE,MAAM,CAAC,MAAM,6BAA6B,GAAG,wBAAwB,CAAC;AAEtE;oFACoF;AACpF,MAAM,2BAA2B,GAAwB,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;AAE/G;0EAC0E;AAC1E,SAAS,MAAM,CAAC,GAAgB;IAO9B,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,gBAAgB,CAAC,GAAiC,CAAC,CAAC;QAC9D,OAAO;YACL,GAAG,EAAE,CAAC,CAAC,GAAG;YACV,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,WAAW,EAAE,QAAQ,CAAC,GAAiC,CAAC,CAAC,WAAW;SACrE,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,GAAG,EAAE,aAAa,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;IAC7E,CAAC;AACH,CAAC;AAaD,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAQ,KAAkD,EAAE,IAAI,CAAC;AACnE,CAAC;AAED,SAAS,GAAG,CAAC,CAAU;IACrB,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/D,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,KAAc,EAAE,GAAgB;IAClE,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC3B,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACnC,MAAM,SAAS,GAAG,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QACvC,IAAI,OAAO,KAAK,SAAS,IAAI,SAAS,KAAK,SAAS;YAAE,OAAO;QAC7D,MAAM,WAAW,CAAC;YAChB,GAAG,MAAM,CAAC,GAAG,CAAC;YACd,MAAM,EAAE,2BAA2B;YACnC,MAAM,EAAE;gBACN,SAAS;gBACT,OAAO;gBACP,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,oBAAoB,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,GAAG,CAAC,IAAI,EAAE,oBAAoB,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnH,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC1E;SACF,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,yEAAyE;IAC3E,CAAC;AACH,CAAC;AAED,kHAAkH;AAClH,KAAK,UAAU,sBAAsB,CAAC,KAAc,EAAE,GAAgB;IACpE,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC3B,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACnC,MAAM,SAAS,GAAG,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QACvC,IAAI,OAAO,KAAK,SAAS,IAAI,SAAS,KAAK,SAAS;YAAE,OAAO;QAC7D,IAAI,CAAC,2BAA2B,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,OAAO;QACtD,MAAM,WAAW,CAAC;YAChB,GAAG,MAAM,CAAC,GAAG,CAAC;YACd,MAAM,EAAE,6BAA6B;YACrC,MAAM,EAAE;gBACN,SAAS;gBACT,OAAO;gBACP,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,WAAW,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxF,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,oBAAoB,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,GAAG,CAAC,IAAI,EAAE,oBAAoB,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnH,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzE,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC1E;SACF,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,8CAA8C;IAChD,CAAC;AACH,CAAC;AAED,eAAe,UAAU,CAAC;IACxB,MAAM,EAAE;QACN,oBAAoB,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,sBAAsB,CAAC,KAAK,EAAE,GAAG,CAAC;QACxE,kBAAkB,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,oBAAoB,CAAC,KAAK,EAAE,GAAG,CAAC;KACrE;CACF,CAAC,CAAC"}

package/dist/agent/hooks/binding-bridge.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("eve/hooks").HookDefinition<"session.started" | "turn.started">;
+export default _default;
+//# sourceMappingURL=binding-bridge.d.ts.map

package/dist/agent/hooks/binding-bridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"binding-bridge.d.ts","sourceRoot":"","sources":["../../../agent/hooks/binding-bridge.ts"],"names":[],"mappings":""}

package/dist/agent/hooks/binding-bridge.js

@@ -0,0 +1,63 @@
+// Stamps the session's platform identity into per-session state, because a tool-execute context carries no channel object and cannot resolve the binding itself.
+// Order is load-bearing within this file: refresh the stamp, then heal the delivery's auth bag so a native subagent child inherits it, then refuse a child that still has no surface.
+import { defineHook } from "eve/hooks";
+import { appendAudit } from "../audit/audit.js";
+import { bindFrom, healDeliveryIdentity, refreshBindingStamp, subagentBindingLost, subagentParentSessionId, } from "../identity/binding.js";
+import { ensureDelegatedTaskBinding } from "../channels/task-wake.js";
+function lostBindingError(ctx) {
+    const b = bindFrom(ctx);
+    return new Error(`subagent child binding LOST: this child resolved its parent's platform (${b.platform}) but no workspace and no ` +
+        `surface, so it would run on the env stand-in partition \`${b.platform}/${b.workspace}/${b.surface}\` — the ` +
+        "org default, with no connector grants, the wrong memory partition and spend filed off-surface. A native child " +
+        "inherits its parent's identity through the auth attribute bag alone (identity/binding.ts healDeliveryIdentity), " +
+        "so an empty bag here means the dispatching turn carried no platform identity and the heal did not land. " +
+        "Failing the child rather than running it on the wrong partition.");
+}
+async function auditRefusal(ctx, phase) {
+    const b = bindFrom(ctx);
+    await appendAudit({
+        org: b.org,
+        platform: b.platform,
+        workspace: b.workspace,
+        surface: b.surface,
+        action: "binding.refused",
+        // Ids and a verdict only — never an attribute value (the bag can name people and rooms).
+        detail: {
+            phase,
+            reason: "subagent-binding-lost",
+            scopeKey: `${b.platform}/${b.workspace}/${b.surface}`,
+            parentSessionId: subagentParentSessionId(ctx) ?? null,
+            aborted: true,
+        },
+    }).catch(() => undefined); // the refusal stands whether or not the row lands
+}
+async function refreshHealAndGuard(ctx, phase) {
+    // Eve materializes a delayed child's auth from the standing seat when the child STARTS, not when
+    // the parent dispatched it. Restore the durable dispatch-wake snapshot first.
+    await ensureDelegatedTaskBinding(ctx);
+    refreshBindingStamp(ctx);
+    const healed = healDeliveryIdentity(ctx);
+    // ONLY the loud arm logs. `not-needed` is every ordinary delivery and `no-stamp` is a session that
+    // has never established one, so logging either would bury the arm that matters.
+    if (healed === "unwritable") {
+        console.warn("[open-everywhere:binding-bridge] delivery heal FAILED — this session established a surface but the " +
+            "delivery's auth attributes could not take it, so a native subagent child cannot inherit the binding " +
+            "and will be refused. Check whether eve now freezes or clones the auth attribute bag.");
+    }
+    if (!subagentBindingLost(ctx))
+        return;
+    const failure = lostBindingError(ctx);
+    // LOGGED as well as thrown, deliberately: eve turns a hook throw into a terminal `session.failed`
+    // and prints nothing of its own, so a silent fail-closed is a control nobody can diagnose from the
+    // logs. hooks/egress.ts logs its own abort for the same reason.
+    console.warn(`[open-everywhere:binding-bridge] ${failure.message}`);
+    await auditRefusal(ctx, phase);
+    throw failure;
+}
+export default defineHook({
+    events: {
+        "session.started": async (_event, ctx) => refreshHealAndGuard(ctx, "session.started"),
+        "turn.started": async (_event, ctx) => refreshHealAndGuard(ctx, "turn.started"),
+    },
+});
+//# sourceMappingURL=binding-bridge.js.map

package/dist/agent/hooks/binding-bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"binding-bridge.js","sourceRoot":"","sources":["../../../agent/hooks/binding-bridge.ts"],"names":[],"mappings":"AAAA,iKAAiK;AACjK,sLAAsL;AAEtL,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EACL,QAAQ,EACR,oBAAoB,EACpB,mBAAmB,EACnB,mBAAmB,EACnB,uBAAuB,GAExB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAC;AAEtE,SAAS,gBAAgB,CAAC,GAAoB;IAC5C,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IACxB,OAAO,IAAI,KAAK,CACd,2EAA2E,CAAC,CAAC,QAAQ,4BAA4B;QAC/G,4DAA4D,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,OAAO,WAAW;QAC7G,gHAAgH;QAChH,kHAAkH;QAClH,0GAA0G;QAC1G,kEAAkE,CACrE,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,GAAoB,EAAE,KAAyC;IACzF,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IACxB,MAAM,WAAW,CAAC;QAChB,GAAG,EAAE,CAAC,CAAC,GAAG;QACV,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,MAAM,EAAE,iBAAiB;QACzB,yFAAyF;QACzF,MAAM,EAAE;YACN,KAAK;YACL,MAAM,EAAE,uBAAuB;YAC/B,QAAQ,EAAE,GAAG,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,OAAO,EAAE;YACrD,eAAe,EAAE,uBAAuB,CAAC,GAAG,CAAC,IAAI,IAAI;YACrD,OAAO,EAAE,IAAI;SACd;KACF,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,kDAAkD;AAC/E,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,GAAoB,EAAE,KAAyC;IAChG,iGAAiG;IACjG,8EAA8E;IAC9E,MAAM,0BAA0B,CAAC,GAAG,CAAC,CAAC;IACtC,mBAAmB,CAAC,GAAG,CAAC,CAAC;IACzB,MAAM,MAAM,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;IACzC,mGAAmG;IACnG,gFAAgF;IAChF,IAAI,MAAM,KAAK,YAAY,EAAE,CAAC;QAC5B,OAAO,CAAC,IAAI,CACV,qGAAqG;YACnG,sGAAsG;YACtG,sFAAsF,CACzF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC;QAAE,OAAO;IACtC,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACtC,kGAAkG;IAClG,mGAAmG;IACnG,gEAAgE;IAChE,OAAO,CAAC,IAAI,CAAC,oCAAoC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IACpE,MAAM,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC/B,MAAM,OAAO,CAAC;AAChB,CAAC;AAED,eAAe,UAAU,CAAC;IACxB,MAAM,EAAE;QACN,iBAAiB,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC,mBAAmB,CAAC,GAAsB,EAAE,iBAAiB,CAAC;QACxG,cAAc,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC,mBAAmB,CAAC,GAAsB,EAAE,cAAc,CAAC;KACnG;CACF,CAAC,CAAC"}

package/dist/agent/hooks/connector-audit.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("eve/hooks").HookDefinition<"action.result">;
+export default _default;
+//# sourceMappingURL=connector-audit.d.ts.map

package/dist/agent/hooks/connector-audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connector-audit.d.ts","sourceRoot":"","sources":["../../../agent/hooks/connector-audit.ts"],"names":[],"mappings":""}

package/dist/agent/hooks/connector-audit.js

@@ -0,0 +1,103 @@
+// One `connector.op` audit row per connector-op result, read from eve's `action.result` event after eve has durably recorded it. A hook observes only; it cannot gate.
+// IDS AND VERBS ONLY — never the op arguments or the tool output. Fail-soft everywhere, and it only records calls that already happened.
+import { defineHook } from "eve/hooks";
+import { appendAudit } from "../audit/audit.js";
+import { bindFrom, currentTurnId, deploymentOrg } from "../identity/binding.js";
+import { resolvePartition } from "../memory/partition.js";
+import { connectorOpName, isConnectorOpTool, parseQualifiedToolName } from "../access/consequence.js";
+import { connectorOpConsequenceOfTier, connectorOpTierParts } from "../access/connector-op-gating.js";
+import { noteConnectorRead, PROVENANCE_READ_TIER } from "../channels/reply-provenance.js";
+import { stampReadReach } from "../channels/read-reach.js";
+import { noteDelegatedRead } from "../channels/delegated-provenance.js";
+import { noteGatedConnectorWrite } from "../channels/standing-authority.js";
+async function auditOpResult(event, ctx) {
+    try {
+        const data = event?.data;
+        const result = data?.result;
+        if (!result || result.kind !== "tool-result")
+            return;
+        const toolName = result.toolName;
+        if (typeof toolName !== "string" || !isConnectorOpTool(toolName))
+            return;
+        // A reserved-namespace name passes `isConnectorOpTool` on purpose, but its connection name reads here as the literal `grant`, so the row would mean nothing (OPE-1060).
+        // The credential-grant plane writes its own `grant.*` rows (access/credential-grant-flow.ts), which name both principals, so skipping here loses no coverage.
+        if (parseQualifiedToolName(toolName)?.namespace !== undefined)
+            return;
+        const connection = toolName.slice(0, toolName.indexOf("__"));
+        const op = connectorOpName(toolName);
+        const status = typeof data?.status === "string" ? data.status : undefined;
+        const tiers = connectorOpTierParts(toolName);
+        let org = deploymentOrg();
+        let platform = "unknown";
+        let workspace = "unknown";
+        let surface;
+        /** `platform/workspace/surface`. The audit row keeps the bare surface (its own long-standing
+         *  shape); the provenance ledger needs the KEY, because it compares rooms. */
+        let surfaceKey;
+        let principalId;
+        try {
+            const p = resolvePartition(ctx);
+            org = p.org;
+            platform = p.platform;
+            workspace = p.workspace;
+            surface = p.surface;
+            surfaceKey = p.surfaceKey;
+            principalId = bindFrom(ctx).principalId;
+        }
+        catch {
+            /* keep "unknown" stamps — the row must still land */
+        }
+        // The turn-local provenance ledger is written BEFORE the audit row deliberately: the ledger write cannot fail, so a store that is down costs the row alone and not the reply footer too.
+        // Read verbs only, and EITHER failure signal (`isError` or `status`) suppresses the note — a claim about sources must under-report.
+        if (!result.isError && status !== "error" && tiers.tier === PROVENANCE_READ_TIER) {
+            const bind = ctx;
+            const turnId = currentTurnId(bind);
+            // The read-reach proof is stamped through `channels/read-reach.ts`'s own call, so this hook and the authored-tool door cannot drift apart (OPE-1713).
+            // A connector op never names a record: its output is arbitrary JSON from a remote MCP server, so naming one would mean guessing at keys in third-party content.
+            noteConnectorRead(turnId, { ...stampReadReach(bind, turnId, surfaceKey), connection, op });
+            // OPE-1849 — AND, WHEN THIS IS A WORKER'S TURN, FOR THE SEAT THAT DELEGATED IT. The ledger above is a
+            // `defineState` slot scoped to ONE eve session, so a delegated read reaches no seat through it; this call
+            // records the read durably against the delegation, and `applyTaskSettlement` carries it into the seat's own
+            // turn. A no-op outside a subagent child, so a seat's own read is recorded once and only above.
+            noteDelegatedRead(bind, connection, op);
+        }
+        // The GATED half of the same observation (OPE-1876): a write that COMPLETED is what a reply must
+        // be able to point at when it says nothing prompted this turn. Either failure signal suppresses
+        // it — an op that did not act explains nothing — and `read` never lands here, because a read
+        // takes no card in the first place.
+        if (!result.isError && status !== "error" && (tiers.tier === "write" || tiers.tier === "destructive")) {
+            noteGatedConnectorWrite(currentTurnId(ctx), { connection, op, tier: tiers.tier });
+        }
+        await appendAudit({
+            org,
+            platform,
+            workspace,
+            surface,
+            principalId,
+            action: "connector.op",
+            detail: {
+                connection,
+                op,
+                tier: connectorOpConsequenceOfTier(tiers.tier), // "open" (read) | "gate:member" (write) — the plane made visible
+                opTier: tiers.tier, // OPE-11 refinement: "read" | "write" | "destructive"
+                ...(tiers.tier !== tiers.base ? { baseOpTier: tiers.base } : {}),
+                // `opTierArmReplaced` says the deployment REPLACED the shipped default tiering function — not that an arm ran, which one always does. `armOpTier` is the arm's answer BEFORE the seam's `write` floor.
+                // `opTierArmLowered` is measured before an operator's declared raise, so a row can carry it with `opTier === baseOpTier`; read `opTierBasis` beside it — `unrecognised` is the built-in abstaining.
+                ...(tiers.armReplaced ? { opTierArmReplaced: true } : {}),
+                ...(tiers.arm !== undefined ? { armOpTier: tiers.arm } : {}),
+                ...(tiers.armLowered ? { opTierArmLowered: true, opTierBasis: tiers.basis } : {}),
+                ...(status !== undefined ? { status } : {}),
+                ...(result.isError ? { isError: true } : {}),
+            },
+        });
+    }
+    catch {
+        // Fail-soft: auditing a connector op must never break the turn it records.
+    }
+}
+export default defineHook({
+    events: {
+        "action.result": (event, ctx) => auditOpResult(event, ctx),
+    },
+});
+//# sourceMappingURL=connector-audit.js.map

package/dist/agent/hooks/connector-audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connector-audit.js","sourceRoot":"","sources":["../../../agent/hooks/connector-audit.ts"],"names":[],"mappings":"AAAA,uKAAuK;AACvK,yIAAyI;AAEzI,OAAO,EAAE,UAAU,EAAoB,MAAM,WAAW,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,aAAa,EAAwB,MAAM,wBAAwB,CAAC;AACtG,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AACtG,OAAO,EAAE,4BAA4B,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AACtG,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AAC1F,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AACxE,OAAO,EAAE,uBAAuB,EAAE,MAAM,mCAAmC,CAAC;AAQ5E,KAAK,UAAU,aAAa,CAAC,KAAc,EAAE,GAAgB;IAC3D,IAAI,CAAC;QACH,MAAM,IAAI,GAAI,KAAkE,EAAE,IAAI,CAAC;QACvF,MAAM,MAAM,GAAG,IAAI,EAAE,MAAM,CAAC;QAC5B,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,aAAa;YAAE,OAAO;QACrD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QACjC,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC;YAAE,OAAO;QACzE,wKAAwK;QACxK,8JAA8J;QAC9J,IAAI,sBAAsB,CAAC,QAAQ,CAAC,EAAE,SAAS,KAAK,SAAS;YAAE,OAAO;QAEtE,MAAM,UAAU,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7D,MAAM,EAAE,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;QACrC,MAAM,MAAM,GAAG,OAAO,IAAI,EAAE,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1E,MAAM,KAAK,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;QAE7C,IAAI,GAAG,GAAG,aAAa,EAAE,CAAC;QAC1B,IAAI,QAAQ,GAAG,SAAS,CAAC;QACzB,IAAI,SAAS,GAAG,SAAS,CAAC;QAC1B,IAAI,OAA2B,CAAC;QAChC;sFAC8E;QAC9E,IAAI,UAA8B,CAAC;QACnC,IAAI,WAA+B,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,gBAAgB,CAAC,GAAiC,CAAC,CAAC;YAC9D,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC;YACZ,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC;YACtB,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC;YACxB,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC;YACpB,UAAU,GAAG,CAAC,CAAC,UAAU,CAAC;YAC1B,WAAW,GAAG,QAAQ,CAAC,GAAiC,CAAC,CAAC,WAAW,CAAC;QACxE,CAAC;QAAC,MAAM,CAAC;YACP,qDAAqD;QACvD,CAAC;QAED,yLAAyL;QACzL,oIAAoI;QACpI,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,KAAK,OAAO,IAAI,KAAK,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;YACjF,MAAM,IAAI,GAAG,GAAiC,CAAC;YAC/C,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;YACnC,sJAAsJ;YACtJ,gKAAgK;YAChK,iBAAiB,CAAC,MAAM,EAAE,EAAE,GAAG,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC;YAC3F,sGAAsG;YACtG,0GAA0G;YAC1G,4GAA4G;YAC5G,gGAAgG;YAChG,iBAAiB,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;QAC1C,CAAC;QAED,iGAAiG;QACjG,gGAAgG;QAChG,6FAA6F;QAC7F,oCAAoC;QACpC,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,KAAK,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,CAAC,EAAE,CAAC;YACtG,uBAAuB,CAAC,aAAa,CAAC,GAAiC,CAAC,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QAClH,CAAC;QAED,MAAM,WAAW,CAAC;YAChB,GAAG;YACH,QAAQ;YACR,SAAS;YACT,OAAO;YACP,WAAW;YACX,MAAM,EAAE,cAAc;YACtB,MAAM,EAAE;gBACN,UAAU;gBACV,EAAE;gBACF,IAAI,EAAE,4BAA4B,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,iEAAiE;gBACjH,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,sDAAsD;gBAC1E,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChE,uMAAuM;gBACvM,oMAAoM;gBACpM,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzD,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5D,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjF,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3C,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC7C;SACF,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,2EAA2E;IAC7E,CAAC;AACH,CAAC;AAED,eAAe,UAAU,CAAC;IACxB,MAAM,EAAE;QACN,eAAe,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,GAAG,CAAC;KAC3D;CACF,CAAC,CAAC"}