@open-everywhere/core 0.1.0

package/dist/agent/tools/purge_memory.js

@@ -0,0 +1,271 @@
+// purge_memory is the ONE surviving memory VERB. An ordinary correction is a plain file edit the session-end capture seam persists, audits and merges; only an erasure needs this. What purge owns is the SWEEP — every writable tier and every file in it, not the one file a model happened to open — and REDACTION BY CONSTRUCTION: the frozen args and every audit row carry each bullet's sha256 and length, never its text, because the append-only audit log lives outside the erasure path forever.
+// The blocking approval gate is acceptable precisely because purge is rare and human-initiated: an everyday correction must never block on a click, but an erasure may. There is no eve `approval:` field — the tool itself only posts a card, and an explicit one on a DYNAMIC tool breaks resumed sessions.
+import { defineDynamic, defineTool } from "eve/tools";
+import { z } from "zod";
+import { resolvePartition } from "../memory/partition.js";
+import { proposalScopeKey } from "../channels/propose-scope.js";
+import { bindFrom } from "../identity/binding.js";
+import { planFor } from "../memory/resolve.js";
+import { principalIdOf, unattendedOf } from "../access/request.js";
+import { resolveSkillDomain } from "../skills/domain-skills.js";
+import { readTierFromSandbox } from "../memory/sandbox-sync.js";
+import { bulletSha256 } from "../memory/purge-redaction.js";
+import { tierId } from "../memory/store.js";
+// Static, not `await import()`: a literal dynamic import in the authored graph code-splits
+// into a second rolldown chunk and Eve's build rejects it ("Expected one bundled authored
+// module") — bundler rule 1 in the build journal.
+import { requestApproval, autoApprovedNote } from "../approvals/flow.js";
+import { checkApprovalVenue, describeVenueRefusal, cardPostedPrefix, cardPostedTail } from "../approvals/card-venue.js";
+import { getConfig } from "../access/config.js";
+import { approvalPostDeps } from "./set_spend_limit.js";
+import { preRegisterDynamicEntry } from "../access/window-gated.js";
+import { requireSessionContinuation } from "../spend/checkpoint.js";
+/**
+ * The most distinct bullets one purge may carry. A phrase that matches more than this is a fishing expedition rather than an erasure request, and one Confirm click must never be able to empty a brain.
+ * The tool refuses and asks for a narrower phrase instead.
+ */
+export const MAX_PURGE_BULLETS = 25;
+/**
+ * PURE matching: every DISTINCT bullet line across every searched tier whose text contains `match` case-insensitively, and every place each one lives.
+ * Deliberately wider than the retired `forget` matcher, and both widenings are the sweep semantics purge exists for: ALL writable tiers and files are searched, because a fact recorded in two silos must not survive in the one nobody named; and SEVERAL distinct bullets may go at once, because the human reads every one of them verbatim on the card. Zero matches refuses outright, and more than the cap refuses too.
+ */
+export function findPurgeCandidates(tiers, match) {
+    const needle = match.trim().toLowerCase();
+    const byBullet = new Map();
+    for (const tier of tiers) {
+        for (const [file, content] of Object.entries(tier.files)) {
+            if (!content)
+                continue;
+            for (const rawLine of content.split("\n")) {
+                if (!/^\s*-\s+/.test(rawLine))
+                    continue;
+                const line = rawLine.trim();
+                if (!line.toLowerCase().includes(needle))
+                    continue;
+                const at = byBullet.get(line) ?? [];
+                if (!at.some((l) => l.tierId === tier.tierId && l.file === file)) {
+                    at.push({ siloName: tier.siloName, provider: tier.provider, tierId: tier.tierId, file });
+                }
+                byBullet.set(line, at);
+            }
+        }
+    }
+    const candidates = [...byBullet.entries()].map(([bullet, at]) => ({ bullet, at }));
+    if (candidates.length === 0)
+        return { kind: "none" };
+    if (candidates.length > MAX_PURGE_BULLETS)
+        return { kind: "toomany", count: candidates.length, sample: candidates.slice(0, 5) };
+    return { kind: "some", candidates };
+}
+/**
+ * The backings whose write really removes the bytes. The purge rewrites the file through
+ * `writeTier` (approvals/memory-purge.ts), never `deleteTier`: `sqlite` and `postgres` overwrite
+ * the row and keep no version history, so the line is gone.
+ */
+const ERASING_MEMORY_PROVIDERS = new Set(["sqlite", "postgres"]);
+/**
+ * The backings that cannot remove a line AT ALL. A Notion silo is APPEND-ONLY: a shorter file
+ * diverges from the page's current lines and the write THROWS
+ * (providers/notion/agent/memory/memory.ts), so the purge fails after the human approved it and the
+ * fact stays live. The card has to say that before the click, not after.
+ */
+const APPEND_ONLY_MEMORY_PROVIDERS = new Set(["notion"]);
+/**
+ * The card's closing promise, written from the backings THIS purge will touch. The approver on a
+ * retention request is the person who needs the honest answer, so the card names each silo by what
+ * its backing can actually do rather than hedging across all of them.
+ * An UNKNOWN backing takes the RETAINING claim, never the erasing one — the fail-closed direction
+ * for a promise made to the person asking to be forgotten.
+ */
+function purgeErasureLines(locations) {
+    const silosWhere = (pred) => [...new Set(locations.filter((l) => pred(l.provider)).map((l) => l.siloName))];
+    const list = (silos) => silos.map((s) => `\`${s}\``).join(", ");
+    const failing = silosWhere((p) => APPEND_ONLY_MEMORY_PROVIDERS.has(p));
+    const retaining = silosWhere((p) => !APPEND_ONLY_MEMORY_PROVIDERS.has(p) && !ERASING_MEMORY_PROVIDERS.has(p));
+    const lines = [];
+    if (failing.length === 0 && retaining.length === 0)
+        return ["This ERASES the line(s) from every silo listed. It cannot be undone."];
+    lines.push("This removes the line(s) from the agent's memory, and it cannot be undone — except where this card says otherwise.");
+    if (retaining.length > 0) {
+        const many = retaining.length !== 1;
+        lines.push(`NOT a full erasure in silo${many ? "s" : ""} ${list(retaining)}: the backing keeps the pre-purge text in its own history. Only a sqlite- or postgres-backed silo removes the bytes for good.`);
+    }
+    if (failing.length > 0) {
+        const many = failing.length !== 1;
+        lines.push(`🔴 NOTHING is removed from silo${many ? "s" : ""} ${list(failing)}: that backing is append-only (Notion), so the erasure FAILS there and the line STAYS. Remove it in Notion itself.`);
+    }
+    return lines;
+}
+/**
+ * Pure input → frozen-args mapping: the verified-sender refusal, the match → candidate-set resolution, and freezing every matched bullet's digest plus every place it lives.
+ * Throws, and never creates a pending, on zero matches and on a runaway match.
+ */
+export function planPurge(binding, partition, tiers, input, domain) {
+    // principal-gate: accountability — the card's "asked by" line. The control on an erasure is the
+    // human Confirm click, which this gate exists to label rather than to replace. `purge_memory` is
+    // withheld from a restricted job wake for the unattended case.
+    if (!binding.principalId) {
+        throw new Error("purge_memory needs a verified sender on this turn — no principal id resolved, so there's no requester to show on the approval card.");
+    }
+    const match = input.match.trim();
+    if (!match) {
+        throw new Error("purge_memory needs a non-empty phrase to match against — quote a distinctive bit of the fact.");
+    }
+    const result = findPurgeCandidates(tiers, match);
+    if (result.kind === "none") {
+        throw new Error(`Nothing in this session's writable memory matches "${match}" — try quoting the fact more exactly (a longer, more distinctive phrase). ` +
+            `Note that purge only erases; to CORRECT or reword a fact, just edit the memory file directly.`);
+    }
+    if (result.kind === "toomany") {
+        const list = result.sample.map((c) => `  • ${c.bullet}`).join("\n");
+        throw new Error(`"${match}" matches ${result.count} remembered facts — too broad to erase in one act (max ${MAX_PURGE_BULLETS}). ` +
+            `Quote a narrower phrase. First few:\n${list}`);
+    }
+    const candidates = result.candidates;
+    const bullets = candidates.map((c) => ({ sha256: bulletSha256(c.bullet), chars: c.bullet.length }));
+    // Dedupe locations across bullets: the sweep visits each (silo, tier, file) once and strips
+    // every target digest it finds there.
+    const locations = [];
+    for (const c of candidates) {
+        for (const l of c.at) {
+            if (!locations.some((x) => x.tierId === l.tierId && x.file === l.file))
+                locations.push(l);
+        }
+    }
+    const silos = [...new Set(locations.map((l) => l.siloName))];
+    return {
+        kind: "memory.purge",
+        args: { org: binding.org, partition, bullets, locations },
+        scopeKey: partition.surfaceKey,
+        domain,
+        cardLines: [
+            `PURGE ${candidates.length === 1 ? "a remembered fact" : `${candidates.length} remembered facts`} — silo${silos.length === 1 ? "" : "s"} ${silos.map((s) => `\`${s}\``).join(", ")}`,
+            ...candidates.map((c) => `> ${c.bullet}`),
+            `Found in ${locations.length} file(s): ${locations.map((l) => `${l.tierId}/${l.file}`).join(", ")}`,
+            ...purgeErasureLines(locations),
+        ],
+    };
+}
+// FACTORED + PRE-REGISTERED (access/window-gated.ts's REPLAY DOCTRINE): top-level defineTool const,
+// registered at module load under the deterministic slug-keyed step name, never an inline literal.
+const purgeEntry = defineTool({
+    description: 'PROPOSE ERASING remembered fact(s) from durable memory — this does NOT delete anything by itself, and it is the RARE, destructive path. Use it ONLY when somebody asks for information to be genuinely removed/erased (a mistake that must not persist, personal data, a retention request). To CORRECT, reword or supersede a fact, do NOT use this — just edit the memory file in /workspace/memory/ directly and the change persists at the end of the session. Give a distinctive phrase from the fact; every matching bullet across every writable memory silo is swept, and a confirmation card is posted showing the exact lines and where they live. Any member of this channel can click Confirm — nothing is erased until then. If the phrase matches nothing, or matches too many facts, this errors instead of guessing. The posted card IS the reply to the user — do not add any narration, summary, or confirmation text after this call. EXCEPT when this surface can\'t host a card: the card then goes to a card-capable channel in the same domain, the `note` field names it, and you MUST relay that, or the confirmation is somewhere the user can\'t see.',
+    inputSchema: z.object({
+        match: z.string().min(3).describe("A distinctive phrase from the fact(s) to erase — quote enough of it to identify the specific remembered lines, not just a topic word."),
+    }),
+    outputSchema: z.object({
+        requested: z.boolean(),
+        pendingId: z.string().optional(),
+        expiresAt: z.string().optional(),
+        note: z.string(),
+        autoApproved: z.boolean().optional().describe("The approver chain lowered this verb: no card was posted and it has ALREADY run."),
+    }),
+    // No `approval:` field. An eve DYNAMIC tool's approval fn registers in-process at session.started resolve time only, so on a RESUMED session in a fresh invocation the replay lookup fails and eve forces an ungrantable "user-approval" that kills the turn silently.
+    // Absent approval is the same as `never()` on both the live and the replay path, so it is omitted.
+    async execute(input, ctx) {
+        // SOFT session cost checkpoint (OPE-62) — pause consequential work past a configured
+        // per-session threshold until a member confirms; no-op when unconfigured.
+        await requireSessionContinuation(ctx, "purge_memory");
+        const binding = bindFrom(ctx);
+        const partition = resolvePartition(ctx);
+        const domain = resolveSkillDomain(ctx) ?? null;
+        const plan = planFor(binding, partition);
+        // EVERY writable silo, not just the primary: purge's whole job is that the fact does not survive in the silo nobody named.
+        // Read-only sources are skipped — the deployment cannot erase from them through this seam, and the read-only banner already tells the agent where their write path is.
+        const writable = plan.writes;
+        if (writable.length === 0) {
+            throw new Error(`There's no writable memory to purge from here — ${plan.reason}. ` +
+                `Put this channel in a domain (memory config) to give it a shared brain, or use a DM for private memory.`);
+        }
+        const sandbox = await ctx.getSandbox();
+        const tiers = [];
+        for (const rm of writable) {
+            tiers.push({
+                siloName: rm.silo.name,
+                provider: rm.silo.provider,
+                tierId: tierId(rm.tier),
+                files: await readTierFromSandbox(sandbox, rm.tier),
+            });
+        }
+        const purgePlan = planPurge(binding, partition, tiers, input, domain);
+        // Where the card goes: this room when it can host one, otherwise a card-capable channel in the SAME domain. `checkApprovalVenue`, never the floor-blind `approvalVenueFor`, so a candidate that is itself externally shared is skipped.
+        // Memory bullets render VERBATIM on this card, which is exactly why the venue's own floor check matters here.
+        const venueResult = await checkApprovalVenue(binding, partition, () => getConfig().loadDomains());
+        if ("refusal" in venueResult) {
+            throw new Error(describeVenueRefusal(venueResult.refusal, binding.platform, "purge that from memory"));
+        }
+        const venue = venueResult.venue;
+        const posted = await requestApproval({
+            org: purgePlan.args.org,
+            kind: purgePlan.kind,
+            args: purgePlan.args,
+            // 🔴 THE ROOM THAT ASKED, NOT THE ROOM THAT ARRIVED LAST (OPE-1756). `purgePlan.scopeKey` is
+            // the TURN's partition, and a turn that merged queued deliveries carries only the LAST
+            // delivery's auth. The governed scope follows the ADDRESSED wake instead, falling back to the
+            // plan's own key on every unknown. The plan's `args` keep the turn's partition, deliberately:
+            // they name the MEMORY the purge erases, which belongs to the seat, not to the asking room.
+            // 🔴 THE MERGE ROAD IS UNREACHABLE ON eve 0.54.3; THIS READ IS STILL LIVE (OPE-2042). eve
+            // batches adjacent queued deliveries only when their full auth contexts match, and OE stamps
+            // a fresh per-delivery `oe_delivery_id` into `auth.attributes`, so two auth-carrying
+            // deliveries on one unified window never compare equal; only the caller-less task COMPLETION
+            // COHORT still folds, and it carries no `auth` at all. But the TURN's ctx names the wrong
+            // room WITHOUT any merge too: a turn woken by an INTERNAL wake — an approval decision, a
+            // completion — answers a conversation whose envelope is in the seat's shared context,
+            // through the reply fence's same-conversation and pending arms (arms 3 and 4 of
+            // `channels/unified-window.ts` `resolveAnswerableReplyTarget`). Measured in production on
+            // 2026-08-15 (`docs/glossary.md`). So this read is LOAD-BEARING, not defensive.
+            scopeKey: await proposalScopeKey(ctx, { org: purgePlan.args.org, surfaceKey: purgePlan.scopeKey }),
+            domain: purgePlan.domain,
+            requestedBy: principalIdOf(ctx),
+            channelId: venue.channelId,
+            // Thread the card under the asking conversation (see set_spend_limit.ts) — but a thread
+            // anchor is only meaningful in the room it came from, so a cross-venue card posts top-level
+            // rather than against a ts belonging to a different workspace's channel.
+            threadTs: venue.sameRoom ? binding.threadTs ?? null : null,
+            // Mint-frozen proposing-surface identity (task #105) — the TTL sweep's feedback target.
+            postedTo: venue.surfaceKey,
+            // OPE-296 P3: the chain's unattended signal — a fire (no ACTING sender) must deny fast on an
+            // undeclared gate rather than post a card into an empty room (ask-unattended; feeds OPE-297).
+            chain: { unattended: unattendedOf(ctx) },
+            // Display-only verbatim card body — the frozen args carry only the bullets' digests
+            // (see PurgeArgs); the approver still reads the exact lines on the pending card.
+            summaryLines: purgePlan.cardLines,
+        }, 
+        // 🔴 THE VENUE's platform, not the binding's (OPE-303): on a redirect the card renders in the
+        // destination's chat app, and asking the Teams surface for a poster would render nothing.
+        approvalPostDeps(venue.platform, ctx));
+        // Digest-only on BOTH branches (no verbatim bullet): tool results land in the durable session
+        // transcript, and the purge flow keeps the facts out of every durable sink.
+        const first = purgePlan.args.bullets[0];
+        const more = purgePlan.args.bullets.length > 1 ? ` +${purgePlan.args.bullets.length - 1} more` : "";
+        const subject = `purge ${first.sha256.slice(0, 12)}…${more}`;
+        // Chain-lowered (OPE-296) ⇒ no card, the facts are already erased. See revoke_connector.ts for
+        // why this note stops being internal-only on this branch.
+        if (posted.autoApproved) {
+            return {
+                requested: false,
+                autoApproved: true,
+                pendingId: posted.id,
+                note: autoApprovedNote(subject, posted.autoApproved),
+            };
+        }
+        return {
+            requested: true,
+            pendingId: posted.id,
+            expiresAt: posted.expiresAt,
+            // Internal-only WHEN THE CARD IS IN THIS ROOM (it is then the user-facing reply). On a
+            // REDIRECT it stops being internal: the card is by construction invisible from here, so this
+            // note is the only way the asker learns their confirmation exists at all.
+            note: `${cardPostedPrefix(venue)} — ${subject} (pending ${posted.id}).` + cardPostedTail(venue, "confirm it", posted),
+        };
+    },
+});
+preRegisterDynamicEntry("purge_memory", "_single", purgeEntry);
+// Mounted everywhere: the card routes to the domain's card-capable channel, so the verb works from Teams and Linear too.
+// The dynamic wrapper stays only because `preRegisterDynamicEntry` needs it to make the tool replay-immune on a resumed session; there is no surface gate.
+export default defineDynamic({
+    events: {
+        "session.started": () => purgeEntry,
+    },
+});
+//# sourceMappingURL=purge_memory.js.map

package/dist/agent/tools/purge_memory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"purge_memory.js","sourceRoot":"","sources":["../../../agent/tools/purge_memory.ts"],"names":[],"mappings":"AAAA,4eAA4e;AAC5e,8SAA8S;AAE9S,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACtD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,gBAAgB,EAAkB,MAAM,wBAAwB,CAAC;AAC1E,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,QAAQ,EAAuB,MAAM,wBAAwB,CAAC;AACvE,OAAO,EAAE,OAAO,EAAuB,MAAM,sBAAsB,CAAC;AACpE,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAC5D,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,2FAA2F;AAC3F,0FAA0F;AAC1F,kDAAkD;AAClD,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACzE,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AACxH,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,EAAE,0BAA0B,EAAE,MAAM,wBAAwB,CAAC;AA+BpE;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAOpC;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAiC,EAAE,KAAa;IAClF,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC1C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA2B,CAAC;IAEpD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACzD,IAAI,CAAC,OAAO;gBAAE,SAAS;YACvB,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC;oBAAE,SAAS;gBACxC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;gBAC5B,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC;oBAAE,SAAS;gBACnD,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACpC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;oBACjE,EAAE,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC3F,CAAC;gBACD,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAqB,CAAC,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IACrG,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACrD,IAAI,UAAU,CAAC,MAAM,GAAG,iBAAiB;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;IAChI,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;AACtC,CAAC;AA2BD;;;;GAIG;AACH,MAAM,wBAAwB,GAAwB,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC;AAEtF;;;;;GAKG;AACH,MAAM,4BAA4B,GAAwB,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;AAE9E;;;;;;GAMG;AACH,SAAS,iBAAiB,CAAC,SAAmC;IAC5D,MAAM,UAAU,GAAG,CAAC,IAAmC,EAAY,EAAE,CACnE,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IACjF,MAAM,IAAI,GAAG,CAAC,KAAwB,EAAU,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAE3F,MAAM,OAAO,GAAG,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,4BAA4B,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACvE,MAAM,SAAS,GAAG,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,4BAA4B,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9G,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,sEAAsE,CAAC,CAAC;IAEpI,KAAK,CAAC,IAAI,CAAC,oHAAoH,CAAC,CAAC;IACjI,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC;QACpC,KAAK,CAAC,IAAI,CAAC,6BAA6B,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,+HAA+H,CAAC,CAAC;IAC7M,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC;QAClC,KAAK,CAAC,IAAI,CAAC,kCAAkC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,oHAAoH,CAAC,CAAC;IACrM,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,SAAS,CACvB,OAAuB,EACvB,SAAoB,EACpB,KAAiC,EACjC,KAAiB,EACjB,MAAqB;IAErB,gGAAgG;IAChG,iGAAiG;IACjG,+DAA+D;IAC/D,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,qIAAqI,CAAC,CAAC;IACzJ,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IACjC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,+FAA+F,CAAC,CAAC;IACnH,CAAC;IAED,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACjD,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CACb,sDAAsD,KAAK,6EAA6E;YACtI,+FAA+F,CAClG,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpE,MAAM,IAAI,KAAK,CACb,IAAI,KAAK,aAAa,MAAM,CAAC,KAAK,0DAA0D,iBAAiB,KAAK;YAChH,wCAAwC,IAAI,EAAE,CACjD,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;IACrC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACpG,4FAA4F;IAC5F,sCAAsC;IACtC,MAAM,SAAS,GAAoB,EAAE,CAAC;IACtC,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC;YACrB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,CAAC;gBAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC7D,OAAO;QACL,IAAI,EAAE,cAAc;QACpB,IAAI,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE;QACzD,QAAQ,EAAE,SAAS,CAAC,UAAU;QAC9B,MAAM;QACN,SAAS,EAAE;YACT,SAAS,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,MAAM,mBAAmB,UAAU,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YACpL,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;YACzC,YAAY,SAAS,CAAC,MAAM,aAAa,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YACnG,GAAG,iBAAiB,CAAC,SAAS,CAAC;SAChC;KACF,CAAC;AACJ,CAAC;AAED,oGAAoG;AACpG,mGAAmG;AACnG,MAAM,UAAU,GAAG,UAAU,CAAC;IAC5B,WAAW,EACT,knCAAknC;IACpnC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,uIAAuI,CAAC;KAC3K,CAAC;IACF,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC;QACrB,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;QACtB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAChC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAChC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kFAAkF,CAAC;KAClI,CAAC;IACF,uQAAuQ;IACvQ,mGAAmG;IACnG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG;QACtB,qFAAqF;QACrF,0EAA0E;QAC1E,MAAM,0BAA0B,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QACtD,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,SAAS,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;QAE/C,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QACzC,2HAA2H;QAC3H,uKAAuK;QACvK,MAAM,QAAQ,GAA8B,IAAI,CAAC,MAAM,CAAC;QACxD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CACb,mDAAmD,IAAI,CAAC,MAAM,IAAI;gBAChE,yGAAyG,CAC5G,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,UAAU,EAAE,CAAC;QACvC,MAAM,KAAK,GAAsB,EAAE,CAAC;QACpC,KAAK,MAAM,EAAE,IAAI,QAAQ,EAAE,CAAC;YAC1B,KAAK,CAAC,IAAI,CAAC;gBACT,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI;gBACtB,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ;gBAC1B,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC;gBACvB,KAAK,EAAE,MAAM,mBAAmB,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC;aACnD,CAAC,CAAC;QACL,CAAC;QAED,MAAM,SAAS,GAAG,SAAS,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QAEtE,wOAAwO;QACxO,8GAA8G;QAC9G,MAAM,WAAW,GAAG,MAAM,kBAAkB,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QAClG,IAAI,SAAS,IAAI,WAAW,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE,wBAAwB,CAAC,CAAC,CAAC;QACzG,CAAC;QACD,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC;QAEhC,MAAM,MAAM,GAAG,MAAM,eAAe,CAClC;YACE,GAAG,EAAE,SAAS,CAAC,IAAI,CAAC,GAAG;YACvB,IAAI,EAAE,SAAS,CAAC,IAAI;YACpB,IAAI,EAAE,SAAS,CAAC,IAAI;YACpB,6FAA6F;YAC7F,uFAAuF;YACvF,8FAA8F;YAC9F,8FAA8F;YAC9F,4FAA4F;YAC5F,0FAA0F;YAC1F,6FAA6F;YAC7F,qFAAqF;YACrF,6FAA6F;YAC7F,0FAA0F;YAC1F,yFAAyF;YACzF,sFAAsF;YACtF,gFAAgF;YAChF,0FAA0F;YAC1F,gFAAgF;YAChF,QAAQ,EAAE,MAAM,gBAAgB,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,EAAE,SAAS,CAAC,QAAQ,EAAE,CAAC;YAClG,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,WAAW,EAAE,aAAa,CAAC,GAAG,CAAE;YAChC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,wFAAwF;YACxF,4FAA4F;YAC5F,yEAAyE;YACzE,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI;YAC1D,wFAAwF;YACxF,QAAQ,EAAE,KAAK,CAAC,UAAU;YAC1B,6FAA6F;YAC7F,8FAA8F;YAC9F,KAAK,EAAE,EAAE,UAAU,EAAE,YAAY,CAAC,GAAG,CAAC,EAAE;YACxC,oFAAoF;YACpF,iFAAiF;YACjF,YAAY,EAAE,SAAS,CAAC,SAAS;SAClC;QACD,8FAA8F;QAC9F,0FAA0F;QAC1F,gBAAgB,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC,CACtC,CAAC;QAEF,8FAA8F;QAC9F,4EAA4E;QAC5E,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC;QACzC,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACpG,MAAM,OAAO,GAAG,SAAS,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;QAC7D,+FAA+F;QAC/F,0DAA0D;QAC1D,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YACxB,OAAO;gBACL,SAAS,EAAE,KAAK;gBAChB,YAAY,EAAE,IAAI;gBAClB,SAAS,EAAE,MAAM,CAAC,EAAE;gBACpB,IAAI,EAAE,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,YAAY,CAAC;aACrD,CAAC;QACJ,CAAC;QACD,OAAO;YACL,SAAS,EAAE,IAAI;YACf,SAAS,EAAE,MAAM,CAAC,EAAE;YACpB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,uFAAuF;YACvF,6FAA6F;YAC7F,0EAA0E;YAC1E,IAAI,EAAE,GAAG,gBAAgB,CAAC,KAAK,CAAC,MAAM,OAAO,aAAa,MAAM,CAAC,EAAE,IAAI,GAAG,cAAc,CAAC,KAAK,EAAE,YAAY,EAAE,MAAM,CAAC;SACtH,CAAC;IACJ,CAAC;CACF,CAAC,CAAC;AACH,uBAAuB,CAAC,cAAc,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;AAE/D,yHAAyH;AACzH,2JAA2J;AAC3J,eAAe,aAAa,CAAC;IAC3B,MAAM,EAAE;QACN,iBAAiB,EAAE,GAAG,EAAE,CAAC,UAAU;KACpC;CACF,CAAC,CAAC"}

package/dist/agent/tools/query_analytics.d.ts

@@ -0,0 +1,59 @@
+declare const _default: import("eve/tools").ToolDefinition<{
+    dataset: "audit" | "spend" | "usage";
+    scope: "domain" | "org" | "self";
+    mode: "aggregate" | "rows";
+    select?: string[] | undefined;
+    groupBy?: string[] | undefined;
+    filters?: {
+        dim: string;
+        op: "eq" | "in" | "prefix";
+        value: string | string[];
+    }[] | undefined;
+    since?: string | undefined;
+    until?: string | undefined;
+    tsBucket?: "day" | "hour" | "month" | "week" | undefined;
+    orderBy?: {
+        by: string;
+        dir: "asc" | "desc";
+    } | undefined;
+    limit?: number | undefined;
+}, {
+    dataset: string;
+    scope: "domain" | "org" | "self";
+    mode: "aggregate" | "rows";
+    rowCount: number;
+    truncated: boolean;
+    rows: Record<string, unknown>[];
+    notes: string[];
+}> & {
+    execute(input: {
+        dataset: "audit" | "spend" | "usage";
+        scope: "domain" | "org" | "self";
+        mode: "aggregate" | "rows";
+        select?: string[] | undefined;
+        groupBy?: string[] | undefined;
+        filters?: {
+            dim: string;
+            op: "eq" | "in" | "prefix";
+            value: string | string[];
+        }[] | undefined;
+        since?: string | undefined;
+        until?: string | undefined;
+        tsBucket?: "day" | "hour" | "month" | "week" | undefined;
+        orderBy?: {
+            by: string;
+            dir: "asc" | "desc";
+        } | undefined;
+        limit?: number | undefined;
+    }, ctx: import("eve/tools").ToolContext): Promise<{
+        dataset: string;
+        scope: "domain" | "org" | "self";
+        mode: "aggregate" | "rows";
+        rowCount: number;
+        truncated: boolean;
+        rows: Record<string, unknown>[];
+        notes: string[];
+    }>;
+};
+export default _default;
+//# sourceMappingURL=query_analytics.d.ts.map

package/dist/agent/tools/query_analytics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"query_analytics.d.ts","sourceRoot":"","sources":["../../../agent/tools/query_analytics.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAgF0J,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE"}

package/dist/agent/tools/query_analytics.js

@@ -0,0 +1,80 @@
+// query_analytics is the conversational analytics surface: the model names datasets, dimensions, measures and filters from CLOSED enums, the host compiles them to parameterized SQL through fixed fragment tables, and the SCOPE predicate is injected host-side from the VERIFIED caller. The model NEVER writes SQL, and never supplies the scope.
+// Tier `open` with in-tool gating: domain scope works for anyone in a memory domain, org scope requires an org admin, and self scope is the caller's own rows. One addressing belt: an AMBIENT wake cannot list rows and degrades to aggregates. Taint does NOT change this tool's behaviour — a read that returns data into the conversation is not the exfiltration point, and the consequential sinks downstream are gated. Every call and every refusal is audited, so "who queried audit data about whom" is answerable through this same tool.
+import { defineTool } from "eve/tools";
+import { never } from "eve/tools/approval";
+import { getConfig } from "../access/config.js";
+import { resolveAnalyticsScope, isAmbientNonAddressedTurn } from "../access/analytics-scope.js";
+import { analyticsQuerySchema, compileAnalyticsQuery } from "../analytics/compile.js";
+import { schemaCard } from "../analytics/registry.js";
+import { executeAnalytics } from "../analytics/execute.js";
+import { resolveAssumedModel } from "../spend/reporting.js";
+import { getOperationalStore } from "../operational/provider.js";
+import { auditToolAction } from "../audit/tool-action.js";
+import { z } from "zod";
+export default defineTool({
+    description: "Query your org's own operational analytics in natural language — you form a STRUCTURED query object (never SQL) over a fixed schema, the host compiles + scopes it, and returns the answer. Restricted to what your access lets you see: scope=\"self\" (your own rows), scope=\"domain\" (anyone in a memory domain — aggregates; domain/org admins also get raw rows), scope=\"org\" (org admins). Datasets/dimensions/measures:\n" +
+        schemaCard() +
+        "\nmode \"aggregate\" (default) returns grouped measures; mode \"rows\" returns a raw listing and follows your standing — scope \"self\" lists your own rows, while scope \"domain\" and scope \"org\" list rows only for an admin. filters: [{dim, op:\"eq\"|\"in\"|\"prefix\", value}]. since/until are ISO-8601 (audit/usage). tsBucket buckets the \"ts\" group dim (hour|day|week|month). Note: DM usage is bucketed as \"(dms)\", $ figures are estimates, and audit records ACTIONS only (silences aren't rows).",
+    inputSchema: analyticsQuerySchema,
+    outputSchema: z.object({
+        dataset: z.string(),
+        scope: z.enum(["org", "domain", "self"]),
+        mode: z.enum(["aggregate", "rows"]),
+        rowCount: z.number(),
+        truncated: z.boolean(),
+        rows: z.array(z.record(z.string(), z.unknown())),
+        notes: z.array(z.string()),
+    }),
+    approval: never(),
+    async execute(input, ctx) {
+        const notes = [];
+        let scope;
+        try {
+            scope = resolveAnalyticsScope(ctx, input.scope);
+        }
+        catch (err) {
+            // A refused read is itself visible (mirrors connector.refused), so scope-probing shows up.
+            await auditToolAction(ctx, "analytics.refused", { dataset: input.dataset, scope: input.scope, mode: input.mode, reason: String(err instanceof Error ? err.message : err) });
+            throw err;
+        }
+        // The addressing belt: rows mode requires a DIRECTLY-ADDRESSED turn, and an ambient supervisor wake degrades to aggregates rather than failing.
+        const ambient = isAmbientNonAddressedTurn(ctx);
+        let effective = input;
+        let ambientDegraded = false;
+        if (effective.mode === "rows" && ambient) {
+            effective = { ...effective, mode: "aggregate" };
+            ambientDegraded = true;
+            notes.push("Degraded to aggregates: rows mode requires a directly-addressed turn (this was an ambient supervisor wake).");
+        }
+        let result;
+        try {
+            const domains = getConfig().loadDomains();
+            const compiled = compileAnalyticsQuery(effective, scope, domains);
+            result = await executeAnalytics(compiled, { store: getOperationalStore(), domains, assumed: resolveAssumedModel() });
+        }
+        catch (err) {
+            await auditToolAction(ctx, "analytics.refused", { dataset: input.dataset, scope: input.scope, mode: effective.mode, reason: String(err instanceof Error ? err.message : err) });
+            throw err;
+        }
+        // Audit the query — watching the watchers is first-class.
+        await auditToolAction(ctx, "analytics.query", {
+            dataset: effective.dataset,
+            grain: scope.grain,
+            mode: result.mode,
+            ...(effective.groupBy && effective.groupBy.length ? { groupBy: effective.groupBy } : {}),
+            ...(effective.filters && effective.filters.length ? { filterDims: effective.filters.map((f) => f.dim) } : {}),
+            ...(effective.since ? { since: effective.since } : {}),
+            ...(effective.until ? { until: effective.until } : {}),
+            rowCount: result.rowCount,
+            ...(ambientDegraded ? { ambientDegraded: true } : {}),
+        });
+        if (result.truncated)
+            notes.push("Result truncated to the row cap — narrow the window or add filters for a complete answer.");
+        if (effective.dataset === "audit")
+            notes.push('audit records ACTIONS only — a low reply/no-reply rate is NOT derivable here (silence isn\'t a row); ask about the session transcript for "why quiet".');
+        if (result.rows.some((r) => "est_usd" in r))
+            notes.push(resolveAssumedModel().note);
+        return { dataset: result.dataset, scope: scope.grain, mode: result.mode, rowCount: result.rowCount, truncated: result.truncated, rows: result.rows, notes };
+    },
+});
+//# sourceMappingURL=query_analytics.js.map

package/dist/agent/tools/query_analytics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"query_analytics.js","sourceRoot":"","sources":["../../../agent/tools/query_analytics.ts"],"names":[],"mappings":"AAAA,sVAAsV;AACtV,qhBAAqhB;AAErhB,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAC;AAChG,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAuB,MAAM,yBAAyB,CAAC;AAC3G,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAe,UAAU,CAAC;IACxB,WAAW,EACT,saAAsa;QACta,UAAU,EAAE;QACZ,wfAAwf;IAC1f,WAAW,EAAE,oBAAoB;IACjC,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC;QACrB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;QACnB,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QACxC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QACnC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;QACpB,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;QACtB,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QAChD,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;KAC3B,CAAC;IACF,QAAQ,EAAE,KAAK,EAAE;IACjB,KAAK,CAAC,OAAO,CAAC,KAAqB,EAAE,GAAG;QACtC,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,IAAI,KAAK,CAAC;QACV,IAAI,CAAC;YACH,KAAK,GAAG,qBAAqB,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,2FAA2F;YAC3F,MAAM,eAAe,CAAC,GAAG,EAAE,mBAAmB,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC5K,MAAM,GAAG,CAAC;QACZ,CAAC;QAED,gJAAgJ;QAChJ,MAAM,OAAO,GAAG,yBAAyB,CAAC,GAAG,CAAC,CAAC;QAC/C,IAAI,SAAS,GAAmB,KAAK,CAAC;QACtC,IAAI,eAAe,GAAG,KAAK,CAAC;QAE5B,IAAI,SAAS,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,EAAE,CAAC;YACzC,SAAS,GAAG,EAAE,GAAG,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;YAChD,eAAe,GAAG,IAAI,CAAC;YACvB,KAAK,CAAC,IAAI,CAAC,6GAA6G,CAAC,CAAC;QAC5H,CAAC;QAED,IAAI,MAAM,CAAC;QACX,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,SAAS,EAAE,CAAC,WAAW,EAAE,CAAC;YAC1C,MAAM,QAAQ,GAAG,qBAAqB,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;YAClE,MAAM,GAAG,MAAM,gBAAgB,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,mBAAmB,EAAE,EAAE,CAAC,CAAC;QACvH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,eAAe,CAAC,GAAG,EAAE,mBAAmB,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChL,MAAM,GAAG,CAAC;QACZ,CAAC;QAED,0DAA0D;QAC1D,MAAM,eAAe,CAAC,GAAG,EAAE,iBAAiB,EAAE;YAC5C,OAAO,EAAE,SAAS,CAAC,OAAO;YAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,GAAG,CAAC,SAAS,CAAC,OAAO,IAAI,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxF,GAAG,CAAC,SAAS,CAAC,OAAO,IAAI,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7G,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtD,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtD,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtD,CAAC,CAAC;QAEH,IAAI,MAAM,CAAC,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,2FAA2F,CAAC,CAAC;QAC9H,IAAI,SAAS,CAAC,OAAO,KAAK,OAAO;YAAE,KAAK,CAAC,IAAI,CAAC,wJAAwJ,CAAC,CAAC;QACxM,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,IAAI,CAAC,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC,IAAI,CAAC,CAAC;QAEpF,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,IAAiC,EAAE,KAAK,EAAE,CAAC;IAC3L,CAAC;CACF,CAAC,CAAC"}

package/dist/agent/tools/react.d.ts

@@ -0,0 +1,23 @@
+declare const _default: import("eve/tools").DynamicSentinel<(import("eve/tools").ToolDefinition<{
+    emoji: string;
+    ts?: string | undefined;
+    reason?: "ack" | "noise" | undefined;
+}, {
+    reacted: boolean;
+    emoji: string;
+    ts: string;
+    note: string;
+}> & {
+    execute(input: {
+        emoji: string;
+        ts?: string | undefined;
+        reason?: "ack" | "noise" | undefined;
+    }, ctx: import("eve/tools").ToolContext): Promise<{
+        reacted: boolean;
+        emoji: string;
+        ts: string;
+        note: string;
+    }>;
+}) | null>;
+export default _default;
+//# sourceMappingURL=react.d.ts.map

package/dist/agent/tools/react.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"react.d.ts","sourceRoot":"","sources":["../../../agent/tools/react.ts"],"names":[],"mappings":""}