@open-everywhere/core 0.1.0

package/dist/agent/tools/create_skill.js

@@ -0,0 +1,157 @@
+// create_skill PROPOSES a runtime DOMAIN skill: a reusable markdown instruction package, bare-named and invocable from the domain's future turns. Any member may propose one, but nothing is written on the spot — a card carries the full body and the write happens on a human's click, because a skill is a procedure the agent FOLLOWS, so an injected one is persistent RCE-of-behaviour. Audited either way, and the approved body is retained in revisions so a later edit cannot destroy what an approver agreed to.
+// AND A FIRE MAY NOT PROPOSE ONE. A domain skill is standing trusted text handed to every future turn of the domain, by name. Grain cannot carry that weight alone — this is a wide-hands row, and `fullKit()` admits `native` only while delegation.oneshotAgent is DISARMED, so on that deployment an unattended channel fire would hold the tool — so the fence is IDENTITY rather than grain, deliberately: narrowing a channel fire's grain would leave it with no hands and no delegator, while refusing the acting-principal question costs it this one verb and nothing else. It takes effect from the NEXT turn, because skills resolve at session and turn start.
+import { defineTool } from "eve/tools";
+import { windowGated } from "../access/window-gated.js";
+import { z } from "zod";
+import { bindFrom } from "../identity/binding.js";
+import { resolvePartition } from "../memory/partition.js";
+import { proposalScopeKey } from "../channels/propose-scope.js";
+import { actingPrincipalIdOf, resolveAccessFor, unattendedOf } from "../access/request.js";
+import { isSafeSkillName } from "../scm/repo-skills.js";
+import { untrustedIngestedThisTurn } from "../access/taint-signal.js";
+import { requestApproval, autoApprovedNote } from "../approvals/flow.js";
+import { approvalPostDeps } from "./set_spend_limit.js";
+import { checkApprovalVenue, describeVenueRefusal, cardPostedPrefix, cardPostedTail } from "../approvals/card-venue.js";
+import { getConfig } from "../access/config.js";
+import { requireSessionContinuation } from "../spend/checkpoint.js";
+import { MAX_DOMAIN_SKILL_BYTES, domainSkillCap, domainSkillRefusalMessage, listDomainSkills, resolveSkillDomainDetailed, withDescription, } from "../skills/domain-skills.js";
+export default windowGated("create_skill", defineTool({
+    description: "PROPOSE creating or updating a SKILL for this channel's memory domain — a reusable markdown instruction package any future turn in the domain can invoke by its bare name. This does NOT arm the skill: a skill is a procedure the agent loads and FOLLOWS, so a human in the domain must read and approve it first — an approval card posts with the full body, and the skill arms only when someone clicks. Any domain member can propose one, and it becomes invocable once armed. Can't be authored from a DM, a group chat, or an externally-shared/unconfirmed channel — author from a channel that's actually in the target domain. Write one worth keeping: a trigger-rich description in the words a teammate would use, the intent behind the ask (not just the commands you ran), the edge cases you hit, and one coherent job per skill. The posted card IS the reply — do not add narration after this call. EXCEPT when this surface can't host a card: it then goes to a card-capable channel in the same domain, the `message` field names it, and you MUST relay that.",
+    inputSchema: z.object({
+        name: z.string().min(1).max(80).describe('Bare invocation name, e.g. "deploy-runbook". Letters, digits, ".", "_", "-" only (no ":", no "..").'),
+        content: z.string().min(1).describe("The skill's markdown body — the instructions the model reads once it invokes this skill."),
+        description: z
+            .string()
+            .optional()
+            .describe('One-line summary of when to use this skill, shown to the model alongside its name. Name the concrete situations it applies to ("when someone asks to deploy the payments API") — a vague description means the skill never fires. Omit if `content` already starts with its own `---` frontmatter.'),
+    }),
+    outputSchema: z.object({
+        ok: z.boolean(),
+        name: z.string(),
+        domain: z.string(),
+        action: z.enum(["created", "updated"]),
+        // Gated: nothing is armed yet — an approval card was posted for a human to confirm.
+        pending: z.boolean(),
+        pendingId: z.string().optional(),
+        message: z.string(),
+        autoApproved: z.boolean().optional().describe("The approver chain lowered this verb: no card was posted and it has ALREADY run."),
+    }),
+    async execute(input, ctx) {
+        // SOFT session cost checkpoint (OPE-62) — pause consequential work past a configured
+        // per-session threshold until a member confirms; no-op when unconfigured.
+        await requireSessionContinuation(ctx, "create_skill");
+        const name = input.name.trim();
+        if (!isSafeSkillName(name)) {
+            throw new Error(`"${name}" isn't a valid skill name — use letters, digits, ".", "_", "-" only (no ":", no "..").`);
+        }
+        // Granted always wins on a name collision (agent/skills/scoped.ts's merge precedence),
+        // so writing a domain skill under a bundle-granted name would silently never arm — the
+        // resolver would drop it with a warn nobody here sees. Refuse up front rather than let
+        // this tool's "armed once approved" promise turn out to be false.
+        if (resolveAccessFor(ctx).skills.includes(name)) {
+            throw new Error(`"${name}" is already a bundle-granted skill for this session — granted skills always win a name collision, so a domain skill with this name would never actually arm. Choose a different name.`);
+        }
+        const content = withDescription(input.content, input.description);
+        const bytes = Buffer.byteLength(content, "utf8");
+        if (bytes > MAX_DOMAIN_SKILL_BYTES) {
+            throw new Error(`Skill content is ${bytes} bytes — the cap is ${MAX_DOMAIN_SKILL_BYTES} bytes (32KB). Trim it and try again.`);
+        }
+        const resolved = resolveSkillDomainDetailed(ctx);
+        if (resolved.domain === null) {
+            throw new Error(domainSkillRefusalMessage(resolved.reason));
+        }
+        const domain = resolved.domain;
+        const p = resolvePartition(ctx);
+        // 🔴 THE ROOM THAT ASKED, NOT THE ROOM THAT ARRIVED LAST (OPE-1756). `p` above is the TURN's
+        // partition, and a turn that merged queued deliveries carries only the LAST delivery's auth —
+        // so on a turn answering two rooms it names the wrong one. The GOVERNED scope follows the
+        // ADDRESSED wake instead, through the same road the reply path uses; it falls back to `p` on
+        // every unknown, so a single-wake turn is unchanged.
+        // 🔴 THE MERGE ROAD IS UNREACHABLE ON eve 0.54.3; THIS READ IS STILL LIVE (OPE-2042). eve batches
+        // adjacent queued deliveries only when their full auth contexts match, and OE stamps a fresh
+        // per-delivery `oe_delivery_id` into `auth.attributes`, so two auth-carrying deliveries on one
+        // unified window never compare equal; only the caller-less task COMPLETION COHORT still folds,
+        // and it carries no `auth` at all. But the TURN's ctx names the wrong room WITHOUT any merge
+        // too: a turn woken by an INTERNAL wake — an approval decision, a completion — answers a
+        // conversation whose envelope is in the seat's shared context, through the reply fence's
+        // same-conversation and pending arms (`channels/unified-window.ts` `resolveAnswerableReplyTarget`,
+        // arms 3 and 4). Measured in production on 2026-08-15 (`docs/glossary.md`). So this read is
+        // LOAD-BEARING, not defensive. `scripts/coalesced-delivery-merge-assumption-test.ts` pins only
+        // the merge road's impossibility.
+        // 🔴 WHAT MOVES IS THE GOVERNANCE KEY ONLY. Anything else this tool derives from `p` — the memory
+        // tier, the card's venue walk, and any surface key frozen into the proposal's own `args` — keeps
+        // reading the TURN's partition, deliberately: those name what the act DOES and where this seat
+        // lives, while the scope key names who may approve it and which halt covers it. Moving the act's
+        // own target is a design choice this task does not hold.
+        const proposeScopeKey = await proposalScopeKey(ctx, p);
+        const existing = await listDomainSkills(p.org, domain);
+        const already = existing.some((s) => s.name === name);
+        const cap = domainSkillCap();
+        if (!already && existing.length >= cap) {
+            throw new Error(`Domain "${domain}" already has ${existing.length} skill(s) — the cap is ${cap} (skills.domainSkillCap). Delete one with delete_skill first.`);
+        }
+        // GATE (P0-4, PERSIST leg). A skill is a PROCEDURE the agent loads and FOLLOWS — an
+        // injected one is persistent RCE-of-behaviour (S7). So don't write on the spot: post an
+        // approval card carrying the full body; a human in the domain arms it with a click
+        // (skill.create ActionKind does the putDomainSkill). Fail-closed off a card-path surface.
+        const binding = bindFrom(ctx);
+        // 🔴 THE ACTING principal, never the bound one. `principalIdOf` here would be answered by a routine
+        // fire's attested creator — a real person's id — so the refusal would never fire, and the card's AUTHOR
+        // line would name the one human whose name makes a skill body most likely to be armed on a wrong click.
+        // principal-gate: presence — a skill is standing trusted text every future turn of the domain is handed
+        // by name, so a fire that could propose one could propose its own next doctrine (edit_routine's argument,
+        // same object under a different name).
+        const authoredBy = actingPrincipalIdOf(ctx);
+        if (!authoredBy) {
+            throw new Error("create_skill needs a verified sender on this turn — a triggered routine fire has no acting sender (only the creator it is attributed to), and a fire may not author standing instructions every later turn of the domain will follow. Ask a person in this conversation to propose it.");
+        }
+        // WHERE THE CARD GOES (OPE-325, the create_routine/OPE-303 pattern): this room when it can host
+        // one, otherwise a card-capable channel in the SAME domain (approvals/card-venue.ts). Also
+        // subsumes the old "couldn't resolve this channel's id" throw.
+        const venueResult = await checkApprovalVenue(binding, p, () => getConfig().loadDomains());
+        if ("refusal" in venueResult) {
+            throw new Error(describeVenueRefusal(venueResult.refusal, binding.platform, "create that skill"));
+        }
+        const venue = venueResult.venue;
+        const action = already ? "updated" : "created";
+        const tainted = untrustedIngestedThisTurn();
+        const posted = await requestApproval({
+            org: p.org,
+            kind: "skill.create",
+            args: { org: p.org, domain, name, content, action, ...(authoredBy ? { authoredBy } : {}), tainted },
+            scopeKey: proposeScopeKey,
+            domain,
+            requestedBy: authoredBy,
+            channelId: venue.channelId,
+            threadTs: venue.sameRoom ? binding.threadTs ?? null : null,
+            // Mint-frozen proposing-surface identity (task #105) — the TTL sweep's feedback target,
+            // and the VENUE's key because that is where the card actually is.
+            postedTo: venue.surfaceKey,
+            chain: { unattended: unattendedOf(ctx) },
+        }, approvalPostDeps(venue.platform, ctx));
+        // Chain-lowered (OPE-296) ⇒ no card, the skill is already written and arms from the next turn.
+        const subject = `skill "${name}" (${action})${tainted ? " ⚠ tainted" : ""}`;
+        if (posted.autoApproved) {
+            return {
+                ok: true,
+                name,
+                domain,
+                action,
+                pending: false,
+                autoApproved: true,
+                pendingId: posted.id,
+                message: autoApprovedNote(subject, posted.autoApproved),
+            };
+        }
+        return {
+            ok: true,
+            name,
+            domain,
+            action,
+            pending: true,
+            pendingId: posted.id,
+            message: `${cardPostedPrefix(venue)} — ${subject} awaiting a human to arm it (pending ${posted.id}).${cardPostedTail(venue, "arm it", posted)}`,
+        };
+    },
+}));
+//# sourceMappingURL=create_skill.js.map

package/dist/agent/tools/create_skill.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create_skill.js","sourceRoot":"","sources":["../../../agent/tools/create_skill.ts"],"names":[],"mappings":"AAAA,6fAA6f;AAC7f,4oBAA4oB;AAE5oB,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAC3F,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACzE,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AACxH,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,0BAA0B,EAAE,MAAM,wBAAwB,CAAC;AACpE,OAAO,EACL,sBAAsB,EACtB,cAAc,EACd,yBAAyB,EACzB,gBAAgB,EAChB,0BAA0B,EAC1B,eAAe,GAChB,MAAM,4BAA4B,CAAC;AAEpC,eAAe,WAAW,CAAC,cAAc,EAAE,UAAU,CAAC;IACpD,WAAW,EACT,yhCAAyhC;IAC3hC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,qGAAqG,CAAC;QAC/I,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,0FAA0F,CAAC;QAC/H,WAAW,EAAE,CAAC;aACX,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CACP,oSAAoS,CACrS;KACJ,CAAC;IACF,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC;QACrB,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE;QACf,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;QAClB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QACtC,oFAAoF;QACpF,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;QACpB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAChC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;QACnB,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kFAAkF,CAAC;KAClI,CAAC;IACF,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG;QACtB,qFAAqF;QACrF,0EAA0E;QAC1E,MAAM,0BAA0B,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QACtD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAC/B,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,IAAI,IAAI,yFAAyF,CAAC,CAAC;QACrH,CAAC;QACD,uFAAuF;QACvF,uFAAuF;QACvF,uFAAuF;QACvF,kEAAkE;QAClE,IAAI,gBAAgB,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CAAC,IAAI,IAAI,wLAAwL,CAAC,CAAC;QACpN,CAAC;QAED,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;QAClE,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACjD,IAAI,KAAK,GAAG,sBAAsB,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,oBAAoB,KAAK,uBAAuB,sBAAsB,uCAAuC,CAAC,CAAC;QACjI,CAAC;QAED,MAAM,QAAQ,GAAG,0BAA0B,CAAC,GAAG,CAAC,CAAC;QACjD,IAAI,QAAQ,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAC9D,CAAC;QACD,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;QAE/B,MAAM,CAAC,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAChC,6FAA6F;QAC7F,8FAA8F;QAC9F,0FAA0F;QAC1F,6FAA6F;QAC7F,qDAAqD;QACrD,kGAAkG;QAClG,6FAA6F;QAC7F,+FAA+F;QAC/F,+FAA+F;QAC/F,6FAA6F;QAC7F,yFAAyF;QACzF,yFAAyF;QACzF,mGAAmG;QACnG,4FAA4F;QAC5F,+FAA+F;QAC/F,kCAAkC;QAClC,kGAAkG;QAClG,iGAAiG;QACjG,+FAA+F;QAC/F,iGAAiG;QACjG,yDAAyD;QACzD,MAAM,eAAe,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACvD,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACvD,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QACtD,MAAM,GAAG,GAAG,cAAc,EAAE,CAAC;QAC7B,IAAI,CAAC,OAAO,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,WAAW,MAAM,iBAAiB,QAAQ,CAAC,MAAM,0BAA0B,GAAG,+DAA+D,CAAC,CAAC;QACjK,CAAC;QAED,oFAAoF;QACpF,wFAAwF;QACxF,mFAAmF;QACnF,0FAA0F;QAC1F,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC9B,oGAAoG;QACpG,wGAAwG;QACxG,wGAAwG;QACxG,wGAAwG;QACxG,0GAA0G;QAC1G,uCAAuC;QACvC,MAAM,UAAU,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;QAC5C,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,wRAAwR,CAAC,CAAC;QAC5S,CAAC;QAED,gGAAgG;QAChG,2FAA2F;QAC3F,+DAA+D;QAC/D,MAAM,WAAW,GAAG,MAAM,kBAAkB,CAAC,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QAC1F,IAAI,SAAS,IAAI,WAAW,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC,CAAC;QACpG,CAAC;QACD,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC;QAEhC,MAAM,MAAM,GAA0B,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;QACtE,MAAM,OAAO,GAAG,yBAAyB,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,MAAM,eAAe,CAClC;YACE,GAAG,EAAE,CAAC,CAAC,GAAG;YACV,IAAI,EAAE,cAAc;YACpB,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE;YACnG,QAAQ,EAAE,eAAe;YACzB,MAAM;YACN,WAAW,EAAE,UAAU;YACvB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI;YAC1D,wFAAwF;YACxF,kEAAkE;YAClE,QAAQ,EAAE,KAAK,CAAC,UAAU;YAC1B,KAAK,EAAE,EAAE,UAAU,EAAE,YAAY,CAAC,GAAG,CAAC,EAAE;SACzC,EACD,gBAAgB,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC,CACtC,CAAC;QAEF,+FAA+F;QAC/F,MAAM,OAAO,GAAG,UAAU,IAAI,MAAM,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAC5E,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YACxB,OAAO;gBACL,EAAE,EAAE,IAAI;gBACR,IAAI;gBACJ,MAAM;gBACN,MAAM;gBACN,OAAO,EAAE,KAAK;gBACd,YAAY,EAAE,IAAI;gBAClB,SAAS,EAAE,MAAM,CAAC,EAAE;gBACpB,OAAO,EAAE,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,YAAY,CAAC;aACxD,CAAC;QACJ,CAAC;QACD,OAAO;YACL,EAAE,EAAE,IAAI;YACR,IAAI;YACJ,MAAM;YACN,MAAM;YACN,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,MAAM,CAAC,EAAE;YACpB,OAAO,EAAE,GAAG,gBAAgB,CAAC,KAAK,CAAC,MAAM,OAAO,wCAAwC,MAAM,CAAC,EAAE,KAAK,cAAc,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE;SAChJ,CAAC;IACJ,CAAC;CACF,CAAC,CAAC,CAAC"}

package/dist/agent/tools/create_ticket.d.ts

@@ -0,0 +1,70 @@
+export declare const createTicketEntry: import("eve/tools").ToolDefinition<{
+    platform?: string | undefined;
+    target?: string | undefined;
+    title: string;
+    body: string;
+}, {
+    pending: boolean;
+    pendingId?: string | undefined;
+    platform: string;
+    target: string;
+    message: string;
+    autoApproved?: boolean | undefined;
+}> & {
+    execute(input: {
+        platform?: string | undefined;
+        target?: string | undefined;
+        title: string;
+        body: string;
+    }, ctx: import("eve/tools").ToolContext): Promise<{
+        pending: boolean;
+        autoApproved: boolean;
+        pendingId: string;
+        platform: string;
+        target: string;
+        message: string;
+    } | {
+        autoApproved?: undefined;
+        pending: boolean;
+        pendingId: string;
+        platform: string;
+        target: string;
+        message: string;
+    }>;
+};
+declare const _default: import("eve/tools").DynamicSentinel<(import("eve/tools").ToolDefinition<{
+    platform?: string | undefined;
+    target?: string | undefined;
+    title: string;
+    body: string;
+}, {
+    pending: boolean;
+    pendingId?: string | undefined;
+    platform: string;
+    target: string;
+    message: string;
+    autoApproved?: boolean | undefined;
+}> & {
+    execute(input: {
+        platform?: string | undefined;
+        target?: string | undefined;
+        title: string;
+        body: string;
+    }, ctx: import("eve/tools").ToolContext): Promise<{
+        pending: boolean;
+        autoApproved: boolean;
+        pendingId: string;
+        platform: string;
+        target: string;
+        message: string;
+    } | {
+        autoApproved?: undefined;
+        pending: boolean;
+        pendingId: string;
+        platform: string;
+        target: string;
+        message: string;
+    }>;
+}) | null>;
+export default _default;
+//# sourceMappingURL=create_ticket.d.ts.map

package/dist/agent/tools/create_ticket.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create_ticket.d.ts","sourceRoot":"","sources":["../../../agent/tools/create_ticket.ts"],"names":[],"mappings":"AA+BA,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4I5B,CAAC"}

package/dist/agent/tools/create_ticket.js

@@ -0,0 +1,171 @@
+// create_ticket PROPOSES filing a NEW work item on whichever work surface this window is bound to. Surface-agnostic by construction: the schema carries no vendor field, everything vendor-specific lives behind per-provider adapters, and a surface with no registered adapter refuses cleanly rather than faking a creation. GATED, because a filed issue is audience-expanding — watchers, triage automation and subscribers all see it, none of them in the asking room — so this is the PROPOSE half: it resolves and gates the destination, freezes the fields and posts a card, and the issue is filed only on a human's click.
+// 🔴 Two independent joins, and only one of them moves. The DESTINATION is bound to the ASKING session and stays there: re-deriving it from the card's venue would file into a different repo or team, which is a different action, not a different room. The CARD VENUE may move — this room if it can host a card, else a card-capable channel in the SAME domain, else a refusal naming the config. There is no `approval:` property at all; the consequential gate is the OE approvals plane, never eve HITL.
+import { defineDynamic, defineTool } from "eve/tools";
+import { z } from "zod";
+import { bindFrom } from "../identity/binding.js";
+import { principalIdOf, unattendedOf } from "../access/request.js";
+import { resolvePartition } from "../memory/partition.js";
+import { proposalScopeKey } from "../channels/propose-scope.js";
+import { untrustedIngestedThisTurn } from "../access/taint-signal.js";
+import { getConfig } from "../access/config.js";
+import { resolveTicketCreate, supportedTicketCreatePlatforms } from "../channels/ticket-create.js";
+import { workDestinationPlatforms } from "../channels/work-destinations.js";
+import { requestApproval, autoApprovedNote } from "../approvals/flow.js";
+import { approvalPostDeps } from "./set_spend_limit.js";
+import { checkApprovalVenue, describeVenueRefusal, cardPostedPrefix, cardPostedTail } from "../approvals/card-venue.js";
+import { requireSessionContinuation } from "../spend/checkpoint.js";
+import { preRegisterDynamicEntry } from "../access/window-gated.js";
+function safeDomains() {
+    try {
+        return getConfig().loadDomains();
+    }
+    catch {
+        return [];
+    }
+}
+// Exported for the unit test (calls .execute directly, mirroring set_state.ts's pattern).
+export const createTicketEntry = defineTool({
+    description: "PROPOSE filing a NEW work item — a GitHub issue or a Linear issue — on a work surface this " +
+        "conversation is bound to. Use it to turn a reported defect or a follow-up into tracked work. " +
+        "Consequential: posts an approval card showing the exact title and body — nothing is filed until " +
+        "a human confirms. " +
+        "Write the body like a ticket: what happens, what should happen, and how to reproduce or verify. " +
+        "The posted card IS the reply — do not add narration after this call. EXCEPT when this surface can't " +
+        "host a card: it then goes to a card-capable channel in the same domain, the `message` field names it, " +
+        "and you MUST relay that.",
+    inputSchema: z.object({
+        platform: z
+            .string()
+            .min(1)
+            .optional()
+            .describe('Which work surface to file on — "github" or "linear". Optional: defaults to this window\'s only work surface.'),
+        target: z
+            .string()
+            .min(1)
+            .optional()
+            .describe('Where on that surface — a GitHub repo as "owner/repo", or a Linear team key such as "ENG". Optional: defaults to this turn\'s own repo/team when there is one.'),
+        title: z.string().min(1).describe("One-line summary of the work item."),
+        body: z.string().describe("The full description (markdown): what happens, what should happen, how to reproduce or verify."),
+    }),
+    outputSchema: z.object({
+        pending: z.boolean(),
+        pendingId: z.string().optional(),
+        platform: z.string(),
+        target: z.string(),
+        message: z.string(),
+        autoApproved: z.boolean().optional().describe("The approver chain lowered this verb: no card was posted and it has ALREADY run."),
+    }),
+    // NO `approval:` on a dynamic tool: eve registers the approval fn in-process at session.started resolve time only, so a RESUMED session's replay lookup fails and eve forces an ungrantable user-approval that kills the turn.
+    // The consequential gate is requestApproval below, not eve HITL.
+    async execute(input, ctx) {
+        const bctx = ctx;
+        await requireSessionContinuation(bctx, "create_ticket");
+        // Resolves and gates the DESTINATION — platform, topology, adapter support, target, per-surface authz — and throws BEFORE any card posts. `run` is deliberately never called: the creation happens only on a human's click.
+        // ONE config read, threaded to BOTH joins below, so the destination's topology gate and the card's venue walk answer against the SAME domain list.
+        const domains = safeDomains();
+        // 🔴 Resolved from `bctx`, the ASKING surface — never from the venue below.
+        const { platform, target, organizationId } = await resolveTicketCreate(bctx, input.platform || input.target ? { ...(input.platform ? { platform: input.platform } : {}), ...(input.target ? { target: input.target } : {}) } : undefined, domains);
+        const binding = bindFrom(ctx);
+        const p = resolvePartition(ctx);
+        // 🔴 THE ROOM THAT ASKED, NOT THE ROOM THAT ARRIVED LAST (OPE-1756). `p` above is the TURN's
+        // partition, and a turn that merged queued deliveries carries only the LAST delivery's auth —
+        // so on a turn answering two rooms it names the wrong one. The GOVERNED scope follows the
+        // ADDRESSED wake instead, through the same road the reply path uses; it falls back to `p` on
+        // every unknown, so a single-wake turn is unchanged.
+        // 🔴 THE MERGE ROAD IS UNREACHABLE ON eve 0.54.3; THIS READ IS STILL LIVE (OPE-2042). eve batches
+        // adjacent queued deliveries only when their full auth contexts match, and OE stamps a fresh
+        // per-delivery `oe_delivery_id` into `auth.attributes`, so two auth-carrying deliveries on one
+        // unified window never compare equal; only the caller-less task COMPLETION COHORT still folds,
+        // and it carries no `auth` at all. But the TURN's ctx names the wrong room WITHOUT any merge
+        // too: a turn woken by an INTERNAL wake — an approval decision, a completion — answers a
+        // conversation whose envelope is in the seat's shared context, through the reply fence's
+        // same-conversation and pending arms (`channels/unified-window.ts` `resolveAnswerableReplyTarget`,
+        // arms 3 and 4). Measured in production on 2026-08-15 (`docs/glossary.md`). So this read is
+        // LOAD-BEARING, not defensive. `scripts/coalesced-delivery-merge-assumption-test.ts` pins only
+        // the merge road's impossibility.
+        // 🔴 WHAT MOVES IS THE GOVERNANCE KEY ONLY. Anything else this tool derives from `p` — the memory
+        // tier, the card's venue walk, and any surface key frozen into the proposal's own `args` — keeps
+        // reading the TURN's partition, deliberately: those name what the act DOES and where this seat
+        // lives, while the scope key names who may approve it and which halt covers it. Moving the act's
+        // own target is a design choice this task does not hold.
+        const proposeScopeKey = await proposalScopeKey(ctx, p);
+        // Where the card goes: this room when it can host one, otherwise a card-capable channel in the SAME domain. Placed exactly where the old card-path refusal was, and it subsumes the "couldn't resolve this channel's id" throw that followed.
+        // The destination resolved above is already frozen and unaffected: the venue decides who READS the title and body before they publish, not where they publish to.
+        const venueResult = await checkApprovalVenue(binding, p, () => domains);
+        if ("refusal" in venueResult) {
+            throw new Error(describeVenueRefusal(venueResult.refusal, binding.platform, "file that ticket"));
+        }
+        const venue = venueResult.venue;
+        // principal-gate: accountability — a routine that files work is the PRODUCT (the daily-triage recipe is
+        // exactly this), so presence is the wrong question here. The card needs a requester to show, and naming
+        // the routine's creator is the improvement OPE-269 delivered over the old `eve:app`. The unattended
+        // case is bounded elsewhere: create_ticket is withheld from a restricted job wake (JOB_WAKE_TOOLS).
+        const requestedBy = principalIdOf(ctx);
+        if (!requestedBy) {
+            throw new Error("create_ticket needs a verified sender to gate the filing — no principal id resolved, so there's no requester to show on the approval card.");
+        }
+        const args = {
+            org: p.org,
+            scopeKey: proposeScopeKey,
+            platform,
+            target,
+            ...(organizationId ? { organizationId } : {}),
+            title: input.title,
+            body: input.body,
+            requestedBy,
+            tainted: untrustedIngestedThisTurn(),
+        };
+        const posted = await requestApproval({
+            org: p.org,
+            kind: "ticket.create",
+            args,
+            scopeKey: proposeScopeKey,
+            domain: null,
+            requestedBy,
+            channelId: venue.channelId,
+            threadTs: venue.sameRoom ? binding.threadTs ?? null : null,
+            // The VENUE's key, because that is where the card actually is — the TTL sweep and the
+            // decision wake both go looking there.
+            postedTo: venue.surfaceKey,
+            // OPE-296 P3: the chain's unattended signal — a fire (no ACTING sender) must deny fast on an
+            // undeclared gate rather than post a card into an empty room (ask-unattended; feeds OPE-297).
+            chain: { unattended: unattendedOf(ctx) },
+        }, approvalPostDeps(venue.platform, ctx));
+        // Chain-lowered (OPE-296) ⇒ no card, the ticket already exists on the tracker (the execute
+        // outcome carries its url/key — the one thing the user actually wants back).
+        const subject = `file "${input.title}" on ${platform} (${target})`;
+        if (posted.autoApproved) {
+            return {
+                pending: false,
+                autoApproved: true,
+                pendingId: posted.id,
+                platform,
+                target,
+                message: autoApprovedNote(subject, posted.autoApproved),
+            };
+        }
+        return {
+            pending: true,
+            pendingId: posted.id,
+            platform,
+            target,
+            message: `${cardPostedPrefix(venue)} — ${subject} awaiting a human to confirm (pending ${posted.id}).${cardPostedTail(venue, "confirm the filing", posted)}`,
+        };
+    },
+});
+preRegisterDynamicEntry("create_ticket", "_single", createTicketEntry);
+export default defineDynamic({
+    events: {
+        "session.started": (_event, ctx) => {
+            const bctx = ctx;
+            // Mount on the SAME set the resolver gates on: the window's sources PLUS the connectors this domain holds a work grant on.
+            // Reading sources alone left a domain that files in one tracker and talks in another with no create_ticket at all — a live grant and no tool to spend it.
+            const destinations = workDestinationPlatforms(bctx, safeDomains());
+            const adapterPlatforms = supportedTicketCreatePlatforms();
+            if (!destinations.some((s) => adapterPlatforms.includes(s)))
+                return null;
+            return createTicketEntry;
+        },
+    },
+});
+//# sourceMappingURL=create_ticket.js.map

package/dist/agent/tools/create_ticket.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create_ticket.js","sourceRoot":"","sources":["../../../agent/tools/create_ticket.ts"],"names":[],"mappings":"AAAA,wmBAAwmB;AACxmB,kfAAkf;AAElf,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACtD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAElD,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,mBAAmB,EAAE,8BAA8B,EAAE,MAAM,8BAA8B,CAAC;AACnG,OAAO,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAC5E,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACzE,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AACxH,OAAO,EAAE,0BAA0B,EAAE,MAAM,wBAAwB,CAAC;AAEpE,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAGpE,SAAS,WAAW;IAClB,IAAI,CAAC;QACH,OAAO,SAAS,EAAE,CAAC,WAAW,EAAE,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,0FAA0F;AAC1F,MAAM,CAAC,MAAM,iBAAiB,GAAG,UAAU,CAAC;IAC1C,WAAW,EACT,6FAA6F;QAC7F,+FAA+F;QAC/F,kGAAkG;QAClG,oBAAoB;QACpB,kGAAkG;QAClG,sGAAsG;QACtG,wGAAwG;QACxG,0BAA0B;IAC5B,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,QAAQ,EAAE,CAAC;aACR,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,EAAE;aACV,QAAQ,CAAC,+GAA+G,CAAC;QAC5H,MAAM,EAAE,CAAC;aACN,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,EAAE;aACV,QAAQ,CAAC,gKAAgK,CAAC;QAC7K,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,oCAAoC,CAAC;QACvE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,gGAAgG,CAAC;KAC5H,CAAC;IACF,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC;QACrB,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;QACpB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAChC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;QACpB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;QAClB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;QACnB,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kFAAkF,CAAC;KAClI,CAAC;IACF,+NAA+N;IAC/N,iEAAiE;IACjE,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG;QACtB,MAAM,IAAI,GAAG,GAAsB,CAAC;QACpC,MAAM,0BAA0B,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;QACxD,4NAA4N;QAC5N,mJAAmJ;QACnJ,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;QAC9B,4EAA4E;QAC5E,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,mBAAmB,CACpE,IAAI,EACJ,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,EAC3J,OAAO,CACR,CAAC;QAEF,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,CAAC,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAChC,6FAA6F;QAC7F,8FAA8F;QAC9F,0FAA0F;QAC1F,6FAA6F;QAC7F,qDAAqD;QACrD,kGAAkG;QAClG,6FAA6F;QAC7F,+FAA+F;QAC/F,+FAA+F;QAC/F,6FAA6F;QAC7F,yFAAyF;QACzF,yFAAyF;QACzF,mGAAmG;QACnG,4FAA4F;QAC5F,+FAA+F;QAC/F,kCAAkC;QAClC,kGAAkG;QAClG,iGAAiG;QACjG,+FAA+F;QAC/F,iGAAiG;QACjG,yDAAyD;QACzD,MAAM,eAAe,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACvD,8OAA8O;QAC9O,kKAAkK;QAClK,MAAM,WAAW,GAAG,MAAM,kBAAkB,CAAC,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC;QACxE,IAAI,SAAS,IAAI,WAAW,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC,CAAC;QACnG,CAAC;QACD,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC;QAChC,wGAAwG;QACxG,wGAAwG;QACxG,oGAAoG;QACpG,oGAAoG;QACpG,MAAM,WAAW,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,4IAA4I,CAAC,CAAC;QAChK,CAAC;QAED,MAAM,IAAI,GAAqB;YAC7B,GAAG,EAAE,CAAC,CAAC,GAAG;YACV,QAAQ,EAAE,eAAe;YACzB,QAAQ;YACR,MAAM;YACN,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7C,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,WAAW;YACX,OAAO,EAAE,yBAAyB,EAAE;SACrC,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,eAAe,CAClC;YACE,GAAG,EAAE,CAAC,CAAC,GAAG;YACV,IAAI,EAAE,eAAe;YACrB,IAAI;YACJ,QAAQ,EAAE,eAAe;YACzB,MAAM,EAAE,IAAI;YACZ,WAAW;YACX,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI;YAC1D,sFAAsF;YACtF,uCAAuC;YACvC,QAAQ,EAAE,KAAK,CAAC,UAAU;YAC1B,6FAA6F;YAC7F,8FAA8F;YAC9F,KAAK,EAAE,EAAE,UAAU,EAAE,YAAY,CAAC,GAAG,CAAC,EAAE;SACzC,EACD,gBAAgB,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC,CACtC,CAAC;QAEF,2FAA2F;QAC3F,6EAA6E;QAC7E,MAAM,OAAO,GAAG,SAAS,KAAK,CAAC,KAAK,QAAQ,QAAQ,KAAK,MAAM,GAAG,CAAC;QACnE,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YACxB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,YAAY,EAAE,IAAI;gBAClB,SAAS,EAAE,MAAM,CAAC,EAAE;gBACpB,QAAQ;gBACR,MAAM;gBACN,OAAO,EAAE,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,YAAY,CAAC;aACxD,CAAC;QACJ,CAAC;QACD,OAAO;YACL,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,MAAM,CAAC,EAAE;YACpB,QAAQ;YACR,MAAM;YACN,OAAO,EAAE,GAAG,gBAAgB,CAAC,KAAK,CAAC,MAAM,OAAO,yCAAyC,MAAM,CAAC,EAAE,KAAK,cAAc,CAAC,KAAK,EAAE,oBAAoB,EAAE,MAAM,CAAC,EAAE;SAC7J,CAAC;IACJ,CAAC;CACF,CAAC,CAAC;AACH,uBAAuB,CAAC,eAAe,EAAE,SAAS,EAAE,iBAAiB,CAAC,CAAC;AAEvE,eAAe,aAAa,CAAC;IAC3B,MAAM,EAAE;QACN,iBAAiB,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE;YACjC,MAAM,IAAI,GAAG,GAAsB,CAAC;YACpC,2HAA2H;YAC3H,0JAA0J;YAC1J,MAAM,YAAY,GAAG,wBAAwB,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;YACnE,MAAM,gBAAgB,GAAG,8BAA8B,EAAE,CAAC;YAC1D,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC;YACzE,OAAO,iBAAiB,CAAC;QAC3B,CAAC;KACF;CACF,CAAC,CAAC"}

package/dist/agent/tools/declare_webhook.d.ts

@@ -0,0 +1,70 @@
+import { type SourceVocabularyDeps } from "../webhooks/source-vocabulary.js";
+/**
+ * The env var name a hook's secret will live under, DERIVED from the id rather than taken as a parameter. Pure and exported so a test pins it.
+ * Derived because an arbitrary `secretRef` in a chat-authored declaration is a way to make a new hook authenticate against an EXISTING credential, and because it makes the operator's follow-up step predictable from the hook's name alone.
+ */
+export declare function secretRefForHookId(id: string): string;
+/**
+ * The stored-credential ref a `broker: "db"` hook's secret lives under, derived rather than chosen for exactly the reasons its env sibling is. An `env` ref costs a REDEPLOY before the hook can authenticate anything; a `db` ref rides the PR, and once merged an operator arms the VALUE through the one-shot reveal route with nothing redeployed.
+ * NOT in a reserved namespace, deliberately: those hold material the host minted FOR ITSELF and the outbound resolver refuses them by name, while this ref is resolved like every other stored credential.
+ */
+export declare function dbSecretRefForHookId(id: string): string;
+/**
+ * The escape an unknown-source refusal must name: a caller who typed the name of a system THEY control does not need an adapter at all — they need a LABEL plus a general-purpose contract. The label belongs in the hook's `id`, which is the handle a routine subscribes to, and `source` carries the contract.
+ * The copy lives here rather than in the vocabulary module because that module deliberately makes no claim about which members the registries hold: the alternative is named only when it is MEASURED present, and the whole sentence disappears on a deployment that has none. Pure and exported, because the message IS the rule.
+ */
+export declare function generalPurposeSchemeHint(source: string, contracts: readonly string[]): string;
+/**
+ * The two vocabulary questions as one pure decision. Deps-injectable and exported because the BRANCH is the thing that was wrong, and inside execute() it is unreachable without a live ctx, a bound surface, an approval path and a config repo.
+ * 🔴 THE ORDER IS LOAD-BEARING. Declarability is asked FIRST and for every broker: it covers the two conditions whose absence is silent and permanent — no verifier means 401 forever, no normalizer means nothing can ever subscribe. Mintability is asked SECOND and only under `db`, the one broker whose value this deployment produces; asking it unconditionally refuses a hook that would work.
+ */
+export declare function sourceVocabularyRefusal(source: string, secretHome: "env" | "db", envRef: string, deps?: SourceVocabularyDeps): string | undefined;
+declare const _default: import("eve/tools").ToolDefinition<{
+    id: string;
+    source: string;
+    target?: string | undefined;
+    instruction?: string | undefined;
+    secretHome?: "db" | "env" | undefined;
+    posture: "content-bearing" | "projection" | "trigger-only";
+    project?: string[] | undefined;
+    readableBy: string[];
+    reason?: string | undefined;
+}, {
+    proposed: boolean;
+    pending: boolean;
+    pendingId?: string | undefined;
+    id: string;
+    readableBy: string;
+    message: string;
+    autoApproved?: boolean | undefined;
+}> & {
+    execute(input: {
+        id: string;
+        source: string;
+        target?: string | undefined;
+        instruction?: string | undefined;
+        secretHome?: "db" | "env" | undefined;
+        posture: "content-bearing" | "projection" | "trigger-only";
+        project?: string[] | undefined;
+        readableBy: string[];
+        reason?: string | undefined;
+    }, ctx: import("eve/tools").ToolContext): Promise<{
+        proposed: boolean;
+        pending: boolean;
+        autoApproved: boolean;
+        pendingId: string;
+        id: string;
+        readableBy: string;
+        message: string;
+    } | {
+        autoApproved?: undefined;
+        proposed: boolean;
+        pending: boolean;
+        pendingId: string;
+        id: string;
+        readableBy: string;
+        message: string;
+    }>;
+};
+export default _default;
+//# sourceMappingURL=declare_webhook.d.ts.map

package/dist/agent/tools/declare_webhook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"declare_webhook.d.ts","sourceRoot":"","sources":["../../../agent/tools/declare_webhook.ts"],"names":[],"mappings":"AAkBA,OAAO,EAML,KAAK,oBAAoB,EAC1B,MAAM,kCAAkC,CAAC;AAO1C;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAErD;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAQ7F;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,GAAE,oBAAyB,GAAG,MAAM,GAAG,SAAS,CAKrJ"}