@open-everywhere/core 0.1.0

package/dist/agent/tools/spend_report.js

@@ -0,0 +1,372 @@
+// Token spend, and dollars where a model can be assumed, for a domain or the whole org, plus a routine-fired cost projection. scope="domain" is "anyone in the domain" — the caller's channel resolving to a memory domain IS the gate — and scope="org" requires an org admin; both refuse clearly rather than returning a silent empty report.
+// Sandbox-kind rows are excluded from the usage-window figures: a scope-wide sandbox dollar total would need summing each row's detail JSON, which the SQL rollup does not carry. An honest gap, not fudged here.
+import { defineTool } from "eve/tools";
+import { never } from "eve/tools/approval";
+import { z } from "zod";
+import { usageSummary } from "../spend/usage-events.js";
+import { spendRollup } from "../spend/store.js";
+import { periodOf } from "../spend/spend.js";
+import { resolveCaps, applyCapOverrides, activeSpendLimitsForOrg, domainNameForScope, userCapInventory } from "../spend/caps.js";
+import { getConfig } from "../access/config.js";
+import { resolveReportScope, filterToDomain, domainOfUsageRow, resolveAssumedModel, rowCostUsd, pricingMix, pricingNote, buildRoutinePredictions, resolveSlackLabels, summariseCostDrift, costDriftNote, tokenAttribution, tokenAttributionNote, } from "../spend/reporting.js";
+import { maskDmSurfaceKey, maskSurfaceKey } from "../spend/dm-mask.js";
+import { bridgeFetchUserDisplayName, bridgeFetchChannelDisplayName } from "../channels/slack-bridge.js";
+import { fulfilPaneRead } from "../access/pane-venue.js";
+function isoDaysAgo(days) {
+    return new Date(Date.now() - days * 24 * 60 * 60 * 1000).toISOString();
+}
+/** The DM rendering of an org-scope spend report (OPE-44's delivery arm). Plain text, headline
+ *  figures + the top spenders — a DM is a reading room, not a spreadsheet; the full table stays
+ *  available in a governance channel or via the control MCP. */
+function renderSpendReportForDm(r) {
+    const usd = (n) => (n === undefined ? "—" : `$${n.toFixed(2)}`);
+    const over = r.ledger.surfaces.filter((s) => s.over);
+    // Per-person allowances are COUNTED, not listed, in the DM render: this is the one block whose rows are named individuals.
+    // The count tells the reader the axis is in play at all; the roster itself belongs in the structured result an admin reads in a governance channel or through the control plane.
+    const userCapLine = r.userCaps === undefined || r.userCaps.length === 0
+        ? "No per-person allowances declared."
+        : `Per-person allowances: ${r.userCaps.length} declared (${r.userCaps.filter((c) => c.source === "override").length} live override(s)) — see the full report for who.`;
+    return [
+        `Spend — org "${r.org}", last ${r.sinceDays} days`,
+        `tokens in ${r.totals.inputTokens} / out ${r.totals.outputTokens} · estimated ${usd(r.totals.costUsd)}`,
+        `ledger ${r.ledger.period}: ${r.ledger.totalTokens} tokens · ${usd(r.ledger.totalUsd)}`,
+        "",
+        "Top surfaces in window:",
+        ...(r.bySurfaceAndKind.length
+            ? r.bySurfaceAndKind.slice(0, 5).map((s) => `  • ${s.channel ?? s.surfaceKey} (${s.kind}) — ${s.inputTokens + s.outputTokens} tokens, ${usd(s.costUsd)}`)
+            : ["  (none in window)"]),
+        "",
+        over.length ? `Over cap: ${over.map((s) => s.channel ?? s.surfaceKey).join(", ")}` : "Nothing over its cap.",
+        userCapLine,
+        "",
+        "Top rows only, $ figures are estimates. Ask again in a governance channel (or use the control plane) for the full breakdown.",
+    ].join("\n");
+}
+export default defineTool({
+    description: "Token spend rollup for your memory domain, or (org admins only) the whole org: tokens + estimated $ by surface and turn-origin kind, the existing monthly ledger totals (tokens AND $) against EFFECTIVE caps (config-as-code overlaid with any active admin override — the same numbers the spend gate enforces), per surface and per workspace, and a routine-fired cost PROJECTION (7d/30d) where a surface has enough history. At org scope it also lists PER-PERSON monthly allowances (`userCaps` — the perUser budget axis, config-declared and live-override alike, with which layer each came from); that roster is org-admin business and is omitted at domain scope. scope=\"domain\" works for anyone in a memory domain (reports that domain only); scope=\"org\" requires an org admin. $ figures are estimates, always labelled with the assumption behind them.",
+    inputSchema: z.object({
+        scope: z.enum(["domain", "org"]).describe('"domain" = your own resolved memory domain (anyone in it); "org" = the whole org (org-admin only).'),
+        sinceDays: z.number().int().positive().max(365).optional().describe("Usage window in days, default 30."),
+        period: z
+            .string()
+            .regex(/^\d{4}-\d{2}$/)
+            .optional()
+            .describe('Calendar month ("YYYY-MM") for the ledger-continuity totals, default the current month.'),
+        assumedModelId: z.string().optional().describe("Price token usage as if it were this model id (hook-written usage rows carry no model field). Omit to let the deploy's sole configured model price it, if there is exactly one."),
+    }),
+    outputSchema: z.object({
+        scope: z.enum(["domain", "org"]),
+        org: z.string(),
+        domain: z.string().optional(),
+        sinceDays: z.number(),
+        since: z.string(),
+        bySurfaceAndKind: z.array(z.object({
+            surfaceKey: z.string(),
+            channel: z.string().optional(),
+            kind: z.string(),
+            events: z.number(),
+            inputTokens: z.number(),
+            outputTokens: z.number(),
+            cacheReadTokens: z.number(),
+            cacheWriteTokens: z.number(),
+            costUsd: z.number().optional(),
+        })),
+        totals: z.object({
+            events: z.number(),
+            inputTokens: z.number(),
+            outputTokens: z.number(),
+            cacheReadTokens: z.number(),
+            cacheWriteTokens: z.number(),
+            costUsd: z.number().optional(),
+        }),
+        tokenAttribution: z
+            .object({
+            calls: z.number(),
+            cacheReadTokens: z.number(),
+            cacheWriteTokens: z.number(),
+            reasoningTokens: z.number(),
+            cacheReportedCalls: z.number().describe("Calls whose source PUBLISHED a cache field at all — NOT a claim that the figure is informative, since a published value may be zero."),
+            reasoningReportedCalls: z.number().describe("Calls that reported a reasoning-token count at all."),
+        })
+            .describe("WHERE the tokens went, beside what they cost (OPE-1611) — cache-read, cache-write and reasoning counts over the same usage window, each with the number of calls that published the dimension at all. Deliberately carries NO dollar figure: the billed cost is costDrift.measuredUsd / totals.costUsd and nothing here re-derives it, because a saving inferred from a token count nothing billed against would be a guess. 🔴 A ZERO TOKEN COUNT MEANS UNKNOWN, NOT UNCACHED, whatever cacheReportedCalls says: on the Vercel AI Gateway backend a cached call is billed at the discount while the cached-token count reads 0, so on that backend the saving lands in the cost and never in the split. ModelBackend is swappable, so that sentence is about that backend and not about every deployment; where cacheReportedCalls is 0 no source published the dimension at all and nothing is claimed about caching. The `note` field states which of the two silences this window carries — quote it rather than reading the numbers alone."),
+        pricedModel: z.string().optional(),
+        costDrift: z
+            .object({
+            measuredUsd: z.number().describe("What the gateway actually billed, over the calls it measured."),
+            derivedUsd: z.number().describe("What this deployment's rate table derived for those SAME calls."),
+            divergenceUsd: z.number().describe("derived - measured. Positive = the rate table over-states the bill."),
+            divergencePct: z.number().optional(),
+            measuredCalls: z.number(),
+            totalCalls: z.number().describe("Calls in scope overall — the denominator the divergence must be read against."),
+        })
+            .describe("Measured-vs-derived cost divergence for the ledger period (OPE-369). Gateway-measured cost is stored alongside the rate-derived figure on every row that had one, so this compares the two over exactly the same calls. The caps enforce the DERIVED figure, always — a divergence here is a signal that the price table needs re-measuring, never that enforcement is off."),
+        ledger: z.object({
+            period: z.string(),
+            totalTokens: z.number(),
+            totalUsd: z.number(),
+            surfaces: z.array(z.object({
+                surfaceKey: z.string(),
+                channel: z.string().optional(),
+                tokens: z.number(),
+                tokenCap: z.number().nullable(),
+                tokenOver: z.boolean(),
+                usd: z.number(),
+                usdCap: z.number().nullable(),
+                usdOver: z.boolean(),
+                over: z.boolean(),
+            })),
+            workspaces: z.array(z.object({
+                workspaceKey: z.string(),
+                tokens: z.number(),
+                tokenCap: z.number().nullable(),
+                tokenOver: z.boolean(),
+                usd: z.number(),
+                usdCap: z.number().nullable(),
+                usdOver: z.boolean(),
+                over: z.boolean(),
+            })),
+        }),
+        userCaps: z
+            .array(z.object({
+            principal: z.string().describe('Who: "user:<platform>/<id>" for an override, the config key for a perUser.overrides entry, "*" for the blanket perUser.default.'),
+            source: z.enum(["config:default", "config:overrides", "override"]),
+            monthlyTokens: z.number().nullable(),
+            monthlyUsd: z.number().nullable(),
+            expiresAt: z.number().optional().describe("Overrides only — epoch ms when the temporary bridge reverts to config."),
+            reason: z.string().optional(),
+            setBy: z.string().optional(),
+        }))
+            .optional()
+            .describe('scope="org" only — every PER-PERSON monthly allowance, config-declared and runtime-override alike. Omitted for scope="domain" (see note).'),
+        routinePredictions: z.array(z.object({
+            surfaceKey: z.string(),
+            channel: z.string().optional(),
+            observedFires: z.number(),
+            avgTokensPerFire: z.number(),
+            cadencePerDay: z.number().optional(),
+            projected: z
+                .object({
+                tokens7d: z.number(),
+                tokens30d: z.number(),
+                costUsd7d: z.number().optional(),
+                costUsd30d: z.number().optional(),
+            })
+                .nullable(),
+            skippedReason: z.string().optional(),
+        })),
+        note: z.string(),
+    }),
+    approval: never(),
+    async execute(input, ctx) {
+        const resolved = resolveReportScope(ctx, input.scope);
+        // Dual gate. `resolveReportScope` is the ROLE half — org scope needs an org admin. Org-grain output is also pane-scoped, so `fulfilPaneRead` is the VENUE half: it returns build()'s value in the right venue, redirects WITHOUT running build(), or runs build() and delivers the result to the requester's DM itself, throwing so nothing reaches the room.
+        // `scope="domain"` is room-safe in that domain's channels and takes no venue gate.
+        const build = async () => {
+            const domains = getConfig().loadDomains();
+            const sinceDays = input.sinceDays ?? 30;
+            const since = isoDaysAgo(sinceDays);
+            const allRows = await usageSummary(resolved.org, { sinceTs: since });
+            const scopedRows = resolved.domain ? filterToDomain(allRows, resolved.domain, domains) : allRows;
+            // Anti-doxxing: DM rows report under one "(dms)" bucket per workspace — masked
+            // BEFORE grouping so they aggregate naturally. The store keeps full resolution.
+            const nonSandbox = scopedRows.filter((r) => r.kind !== "sandbox").map(maskDmSurfaceKey);
+            const assumed = resolveAssumedModel(input.assumedModelId);
+            // The rows arrive already grouped by (surfaceKey, principalId, kind, surfaceMode, MODEL), and a row's own model prices it exactly; regrouping here to (surfaceKey, kind) affects only the DISPLAY bucketing.
+            // So cost is priced PER ROW before being summed into the coarser group, never averaged across models sharing a group.
+            const grouped = new Map();
+            for (const r of nonSandbox) {
+                const kind = r.kind ?? "unknown";
+                const key = `${r.surfaceKey} ${kind}`;
+                const acc = grouped.get(key) ?? { surfaceKey: r.surfaceKey, kind, events: 0, inputTokens: 0, outputTokens: 0, cacheReadTokens: 0, cacheWriteTokens: 0 };
+                acc.events += r.events;
+                acc.inputTokens += r.inputTokens;
+                acc.outputTokens += r.outputTokens;
+                acc.cacheReadTokens += r.cacheReadTokens;
+                acc.cacheWriteTokens += r.cacheWriteTokens;
+                // 🔴 "aggregate", NOT "one-call". `r` already sums `r.events` model calls, so `r.inputTokens`
+                // is a total and NOT any call's prompt size. Pricing it as one call would charge the
+                // long-context tier to any group whose MONTH crossed 272,000 input tokens — 40 ordinary
+                // 7,000-token turns reach that — and report roughly double what the gateway billed
+                // (OPE-2055). The per-row exactness this block is about is unchanged; only the tier is
+                // withheld, because there is no prompt size here to test.
+                const cost = rowCostUsd(r, assumed, "aggregate");
+                if (cost !== undefined)
+                    acc.costUsd = (acc.costUsd ?? 0) + cost;
+                grouped.set(key, acc);
+            }
+            const bySurfaceAndKind = [...grouped.values()].sort((a, b) => b.inputTokens + b.outputTokens - (a.inputTokens + a.outputTokens));
+            const totals = bySurfaceAndKind.reduce((acc, r) => ({
+                events: acc.events + r.events,
+                inputTokens: acc.inputTokens + r.inputTokens,
+                outputTokens: acc.outputTokens + r.outputTokens,
+                cacheReadTokens: acc.cacheReadTokens + r.cacheReadTokens,
+                cacheWriteTokens: acc.cacheWriteTokens + r.cacheWriteTokens,
+            }), { events: 0, inputTokens: 0, outputTokens: 0, cacheReadTokens: 0, cacheWriteTokens: 0 });
+            // Sum only the groups that resolved a cost — a group with none contributes
+            // nothing (never fabricated); the total itself is omitted only when NO group
+            // anywhere resolved a cost (mirrors the pre-item-17 all-or-nothing shape).
+            const pricedGroups = bySurfaceAndKind.filter((r) => r.costUsd !== undefined);
+            const totalsWithCost = { ...totals, ...(pricedGroups.length > 0 ? { costUsd: pricedGroups.reduce((sum, r) => sum + r.costUsd, 0) } : {}) };
+            const mix = pricingMix(nonSandbox, assumed);
+            // OPE-1611 — the attribution half, over the SAME non-sandbox rows the dollars above came
+            // from, so the two halves of the answer describe one set of calls. Sandbox runtime rows are
+            // excluded for the same reason they are excluded from the token totals: they are not model
+            // calls and have no prompt to cache or reason over.
+            const attribution = tokenAttribution(nonSandbox);
+            // The ledger rollup shows EFFECTIVE caps — config-as-code overlaid with any active admin override — and takes both denominations from the ONE spend ledger, so these numbers AGREE with what the spend gate enforces for the same period.
+            // The override read happens ONCE per org rather than once per surface, and the same pure overlay is then applied per scope.
+            const nowISO = new Date().toISOString();
+            const currentPeriod = periodOf(nowISO);
+            const period = input.period ?? currentPeriod;
+            // The org is the STORE filter, not only a filter over the answer (OPE-1446): `resolved.org`
+            // is `resolvePartition(ctx).org`, so the read is narrowed before a foreign tenant's rows
+            // enter the process. The `l.org` conjunct below is kept as the second belt — the two agree
+            // by construction, and the rollup's shape does not depend on which one narrows it.
+            // The PERIOD is a store filter too (OPE-1653): the read is bounded to the one month this
+            // report renders, instead of loading the org's whole ledger history and keeping one month
+            // of it. The `l.period` conjunct below stays as the second belt, like the `l.org` one.
+            const orgLedgers = (await spendRollup(resolved.org, { period }))
+                .filter((l) => l.org === resolved.org && l.period === period)
+                .filter((l) => !resolved.domain || domainOfUsageRow(l.surfaceKey, undefined, domains) === resolved.domain);
+            // OPE-369 drift: computed off the raw (unmasked) scoped rollup, because it is an ORG/PERIOD
+            // aggregate — no surface, no principal, nothing a DM could be identified from — so the
+            // anti-doxxing masking below is irrelevant to it and would only lose rows.
+            const costDrift = summariseCostDrift(orgLedgers);
+            const overrideLimits = await activeSpendLimitsForOrg(resolved.org);
+            const effCapsForScope = (workspaceKey, surfaceKey) => {
+                // Same explicit-domain-only note as control/views.ts's spendView: this is a batch
+                // rollup over raw ledger surfaceKeys, no live mode/trust to classify a dm/public
+                // criteria layer from.
+                // The SAME domain name reaches both halves: the config resolution's perDomain layer AND
+                // the runtime override overlay's domain-level bridge. Dropping it from the second half
+                // made an active level:"domain" override invisible here while the gate enforced it
+                // (OPE-1804) — the exact drift the note below promises this read does not have.
+                const domainName = domainNameForScope(surfaceKey);
+                const config = resolveCaps(workspaceKey, surfaceKey, domainName);
+                return overrideLimits.length ? applyCapOverrides(config, overrideLimits, workspaceKey, surfaceKey, domainName) : config;
+            };
+            const workspaceKeysInScope = [...new Set(orgLedgers.map((l) => l.surfaceKey.split("/").slice(0, 2).join("/")))];
+            const rawLedgerSurfaces = orgLedgers.map((l) => {
+                const workspaceKey = l.surfaceKey.split("/").slice(0, 2).join("/");
+                const caps = effCapsForScope(workspaceKey, l.surfaceKey);
+                const tokenCap = caps.surfaceMonthlyTokens ?? null;
+                const tokenOver = tokenCap != null && l.tokens >= tokenCap;
+                const usdCap = caps.surfaceMonthlyUsd ?? null;
+                const usdOver = usdCap != null && l.usd >= usdCap;
+                // `disclosure` rides along from the rollup (OPE-1862): it is what the mask below routes
+                // on, and a ledger line that lost it would be unclassifiable and would mask to nothing
+                // useful.
+                return { surfaceKey: l.surfaceKey, disclosure: l.disclosure, tokens: l.tokens, tokenCap, tokenOver, usd: l.usd, usdCap, usdOver, over: tokenOver || usdOver };
+            });
+            // MASKED ledger rows merge into one shared bucket per masked key, with tokens and dollars
+            // summed and per-row caps hidden, because a shared bucket has no single cap.
+            // `over` (and its token/usd halves) is true if ANY member was over its own cap: over-budget must never be masked into silence.
+            // OPE-1862: which rows merge is the mask's decision — the row's stamped
+            // conversation mode, on every platform — so a Discord or Teams DM merges exactly as a Slack
+            // one does, and an UNSTAMPED row merges into its own `(unclassified)` bucket rather than
+            // being published under a key nothing classified.
+            const maskedLedger = new Map();
+            const ledgerSurfaces = [];
+            for (const s of rawLedgerSurfaces) {
+                const key = maskSurfaceKey(s.surfaceKey, s.disclosure);
+                if (key === s.surfaceKey) {
+                    ledgerSurfaces.push(s);
+                    continue;
+                }
+                const acc = maskedLedger.get(key) ?? { surfaceKey: key, disclosure: s.disclosure, tokens: 0, tokenCap: null, tokenOver: false, usd: 0, usdCap: null, usdOver: false, over: false };
+                maskedLedger.set(key, {
+                    surfaceKey: key,
+                    // Already masked: the bucket reports under `key`, and re-masking it is a no-op.
+                    disclosure: s.disclosure,
+                    tokens: acc.tokens + s.tokens,
+                    tokenCap: null,
+                    tokenOver: acc.tokenOver || s.tokenOver,
+                    usd: acc.usd + s.usd,
+                    usdCap: null,
+                    usdOver: acc.usdOver || s.usdOver,
+                    over: acc.over || s.over,
+                });
+            }
+            ledgerSurfaces.push(...maskedLedger.values());
+            const ledgerTotalTokens = ledgerSurfaces.reduce((sum, s) => sum + s.tokens, 0);
+            const ledgerTotalUsd = ledgerSurfaces.reduce((sum, s) => sum + s.usd, 0);
+            const ledgerWorkspaces = workspaceKeysInScope.map((workspaceKey) => {
+                const inWorkspace = orgLedgers.filter((l) => l.surfaceKey.split("/").slice(0, 2).join("/") === workspaceKey);
+                const tokens = inWorkspace.reduce((sum, l) => sum + l.tokens, 0);
+                const usd = inWorkspace.reduce((sum, l) => sum + l.usd, 0);
+                const caps = effCapsForScope(workspaceKey, "");
+                const tokenCap = caps.workspaceMonthlyTokens ?? null;
+                const tokenOver = tokenCap != null && tokens >= tokenCap;
+                const usdCap = caps.workspaceMonthlyUsd ?? null;
+                const usdOver = usdCap != null && usd >= usdCap;
+                return { workspaceKey, tokens, tokenCap, tokenOver, usd, usdCap, usdOver, over: tokenOver || usdOver };
+            });
+            // Predictions need the REAL surfaceKey, because the routine listing is keyed by it, so only the OUTPUT rows are masked.
+            // Two DM predictions may then both render under the same bucket. That is acceptable for an estimates table; merging their averages would fabricate a number.
+            const routineRows = scopedRows.filter((r) => r.kind === "routine");
+            // The prediction rows are built from `routineRows` — usage rows with kind "routine", which is
+            // exactly the tag that says NOTHING about the conversation (OPE-1862). Each prediction
+            // therefore carries its source rows' FOLDED disclosure, and the mask routes on that: a
+            // routine fired inside a DM masks on every platform, and one with no stamp masks too.
+            const routinePredictions = (await buildRoutinePredictions(resolved.org, routineRows, assumed.pricing)).map((p) => {
+                const key = maskSurfaceKey(p.surfaceKey, p.disclosure);
+                return key === p.surfaceKey ? p : { ...p, surfaceKey: key };
+            });
+            const labels = await resolveSlackLabels([], [...bySurfaceAndKind.map((r) => r.surfaceKey), ...ledgerSurfaces.map((s) => s.surfaceKey), ...routinePredictions.map((p) => p.surfaceKey)], { userName: bridgeFetchUserDisplayName, channelName: bridgeFetchChannelDisplayName });
+            const labelled = (row) => ({
+                ...row,
+                ...(labels.channels.has(row.surfaceKey) ? { channel: labels.channels.get(row.surfaceKey) } : {}),
+            });
+            // Which people have their own monthly allowance, what it is, and whether it came from config or from a live override — the third governance question after tokens and dollars.
+            // 🔴 ORG SCOPE ONLY, and that is an audience decision rather than a plumbing one: this is a roster of NAMED INDIVIDUALS, while "domain" scope is anyone in the domain, so shipping it there would hand every member the deployment's whole per-person governance roster. No spend figures ride along — it says what is DECLARED, not what anybody has used.
+            const userCaps = resolved.domain ? undefined : userCapInventory(overrideLimits);
+            const notes = [
+                pricingNote(mix, assumed),
+                costDriftNote(costDrift),
+                tokenAttributionNote(attribution),
+                "the bySurfaceAndKind usage-window figures exclude sandbox runtime (see session_cost for a conversation's sandbox seconds/$); the monthly ledger.*.usd figures DO include sandbox runtime (OPE-266) — an estimate priced at stop time from the platform rate, assuming the configured/default sandbox memory size.",
+                "routinePredictions project future spend from this window's history and each surface's CURRENT active cron/interval routines — always an estimate, not a bill.",
+                "ledger.surfaces/ledger.workspaces use the existing monthly spend ledger (the caps engine), which may cover a different window than sinceDays (it's keyed by calendar month).",
+                "ledger caps are EFFECTIVE caps — config-as-code overlaid with any currently-active admin override (set_spend_limit) — the same numbers the spend gate enforces; an expired override has already reverted to config here, same as at the gate.",
+                "ledger.*.usd is the spend ledger's own stored figure — priced evidence-only at WRITE time (a call's stamped model's rate, the sole-priced-model fallback for a stampless call, $0 for an unpriced model, never a guessed rate) — the EXACT sum the gate enforces for the same period; it is independent of any assumedModelId you passed above (that only re-prices the usage-window figures).",
+                "channel labels are best-effort Slack lookups — prefer them when presenting; the surfaceKey stays the ground truth.",
+                'DM spend is aggregated into a single "(dms)" bucket per workspace — individual DM surfaces are deliberately never listed in reports (the stored rows keep full resolution); tokenCap/usdCap are hidden as null for that bucket (a shared bucket has no single cap) but over/tokenOver/usdOver are never masked.' +
+                    'A row written before the conversation-mode stamp existed cannot be classified, so it reports under a separate "(unclassified)" bucket per workspace: masked rather than named, and kept apart from "(dms)" so a channel\'s spend is never reported as DM spend.',
+            ];
+            if (userCaps) {
+                notes.push('userCaps lists PER-PERSON monthly allowances (the perUser budget axis), not spend: source "config:default"/"config:overrides" come from the spend-budgets registry and change by PR; source "override" is a temporary runtime bridge set through set_spend_limit level:"user" and expires back to config (expiresAt). A person\'s allowance is checked INDEPENDENTLY of the surface and workspace caps above — it never replaces them, so somebody can be within their own allowance and still declined by the room\'s cap. It applies to their DM usage.');
+            }
+            if (resolved.domain) {
+                notes.push("domain scoping is approximate for the ledger continuity figures above (they aren't kind-tagged, so a DM surface with no explicit domain can appear under the org-domain bucket) — the bySurfaceAndKind/totals figures above don't have this issue (dm-kind rows are excluded from domain buckets).", 'userCaps (the per-person allowance roster) is omitted at domain scope on purpose: scope="domain" is "anyone in the domain", and a roster of named individuals and what the org decided about each is org-admin business. Ask with scope="org" (it renders in a governance channel or your DM).');
+            }
+            return {
+                scope: input.scope,
+                org: resolved.org,
+                ...(resolved.domain ? { domain: resolved.domain } : {}),
+                sinceDays,
+                since,
+                bySurfaceAndKind: bySurfaceAndKind.map(labelled),
+                totals: totalsWithCost,
+                tokenAttribution: attribution,
+                ...(assumed.model ? { pricedModel: assumed.model } : {}),
+                costDrift,
+                ledger: {
+                    period,
+                    totalTokens: ledgerTotalTokens,
+                    totalUsd: ledgerTotalUsd,
+                    // `disclosure` is the MASK's input, not a report field — it is dropped here so the
+                    // rendered row carries exactly the declared output shape (OPE-1862).
+                    surfaces: ledgerSurfaces.map(({ disclosure: _disclosure, ...row }) => labelled(row)),
+                    workspaces: ledgerWorkspaces,
+                },
+                ...(userCaps ? { userCaps } : {}),
+                routinePredictions: routinePredictions.map(({ disclosure: _disclosure, ...row }) => labelled(row)),
+                note: notes.join(" "),
+            };
+        };
+        if (input.scope !== "org")
+            return await build();
+        return await fulfilPaneRead(ctx, { kind: "spend.report.org", render: renderSpendReportForDm }, build);
+    },
+});
+//# sourceMappingURL=spend_report.js.map

package/dist/agent/tools/spend_report.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"spend_report.js","sourceRoot":"","sources":["../../../agent/tools/spend_report.ts"],"names":[],"mappings":"AAAA,iVAAiV;AACjV,kNAAkN;AAElN,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,QAAQ,EAAa,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACjI,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,gBAAgB,EAChB,mBAAmB,EACnB,UAAU,EACV,UAAU,EACV,WAAW,EACX,uBAAuB,EACvB,kBAAkB,EAClB,kBAAkB,EAClB,aAAa,EACb,gBAAgB,EAChB,oBAAoB,GACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACvE,OAAO,EAAE,0BAA0B,EAAE,6BAA6B,EAAE,MAAM,6BAA6B,CAAC;AACxG,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAEzD,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;AACzE,CAAC;AAED;;gEAEgE;AAChE,SAAS,sBAAsB,CAAC,CAO/B;IACC,MAAM,GAAG,GAAG,CAAC,CAAqB,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACpF,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACrD,2HAA2H;IAC3H,iLAAiL;IACjL,MAAM,WAAW,GACf,CAAC,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;QACjD,CAAC,CAAC,oCAAoC;QACtC,CAAC,CAAC,0BAA0B,CAAC,CAAC,QAAQ,CAAC,MAAM,cAAc,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,MAAM,mDAAmD,CAAC;IAC3K,OAAO;QACL,gBAAgB,CAAC,CAAC,GAAG,WAAW,CAAC,CAAC,SAAS,OAAO;QAClD,aAAa,CAAC,CAAC,MAAM,CAAC,WAAW,UAAU,CAAC,CAAC,MAAM,CAAC,YAAY,gBAAgB,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE;QACvG,UAAU,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,CAAC,WAAW,aAAa,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE;QACvF,EAAE;QACF,yBAAyB;QACzB,GAAG,CAAC,CAAC,CAAC,gBAAgB,CAAC,MAAM;YAC3B,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,YAAY,YAAY,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;YACzJ,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC;QAC3B,EAAE;QACF,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,uBAAuB;QAC5G,WAAW;QACX,EAAE;QACF,8HAA8H;KAC/H,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,eAAe,UAAU,CAAC;IACxB,WAAW,EACT,i1BAAi1B;IACn1B,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,oGAAoG,CAAC;QAC/I,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC;QACxG,MAAM,EAAE,CAAC;aACN,MAAM,EAAE;aACR,KAAK,CAAC,eAAe,CAAC;aACtB,QAAQ,EAAE;aACV,QAAQ,CAAC,yFAAyF,CAAC;QACtG,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iLAAiL,CAAC;KAClO,CAAC;IACF,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC;QACrB,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAChC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;QACf,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC7B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;QACrB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB,gBAAgB,EAAE,CAAC,CAAC,KAAK,CACvB,CAAC,CAAC,MAAM,CAAC;YACP,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;YACtB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;YAC9B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;YAChB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;YAClB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;YACvB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;YACxB,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE;YAC3B,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE;YAC5B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;SAC/B,CAAC,CACH;QACD,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;YACf,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;YAClB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;YACvB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;YACxB,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE;YAC3B,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE;YAC5B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;SAC/B,CAAC;QACF,gBAAgB,EAAE,CAAC;aAChB,MAAM,CAAC;YACN,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;YACjB,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE;YAC3B,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE;YAC5B,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE;YAC3B,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,sIAAsI,CAAC;YAC/K,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,qDAAqD,CAAC;SACnG,CAAC;aACD,QAAQ,CACP,i/BAAi/B,CACl/B;QACH,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAClC,SAAS,EAAE,CAAC;aACT,MAAM,CAAC;YACN,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,+DAA+D,CAAC;YACjG,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iEAAiE,CAAC;YAClG,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,qEAAqE,CAAC;YACzG,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;YACpC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;YACzB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,+EAA+E,CAAC;SACjH,CAAC;aACD,QAAQ,CACP,6WAA6W,CAC9W;QACH,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;YACf,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;YAClB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;YACvB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;YACpB,QAAQ,EAAE,CAAC,CAAC,KAAK,CACf,CAAC,CAAC,MAAM,CAAC;gBACP,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;gBACtB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;gBAC9B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;gBAClB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;gBAC/B,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;gBACtB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;gBACf,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;gBAC7B,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;gBACpB,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE;aAClB,CAAC,CACH;YACD,UAAU,EAAE,CAAC,CAAC,KAAK,CACjB,CAAC,CAAC,MAAM,CAAC;gBACP,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;gBACxB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;gBAClB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;gBAC/B,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;gBACtB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;gBACf,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;gBAC7B,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;gBACpB,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE;aAClB,CAAC,CACH;SACF,CAAC;QACF,QAAQ,EAAE,CAAC;aACR,KAAK,CACJ,CAAC,CAAC,MAAM,CAAC;YACP,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iIAAiI,CAAC;YACjK,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,kBAAkB,EAAE,UAAU,CAAC,CAAC;YAClE,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;YACpC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;YACjC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wEAAwE,CAAC;YACnH,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;YAC7B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;SAC7B,CAAC,CACH;aACA,QAAQ,EAAE;aACV,QAAQ,CAAC,2IAA2I,CAAC;QACxJ,kBAAkB,EAAE,CAAC,CAAC,KAAK,CACzB,CAAC,CAAC,MAAM,CAAC;YACP,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;YACtB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;YAC9B,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;YACzB,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE;YAC5B,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;YACpC,SAAS,EAAE,CAAC;iBACT,MAAM,CAAC;gBACN,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;gBACpB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;gBACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;gBAChC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;aAClC,CAAC;iBACD,QAAQ,EAAE;YACb,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;SACrC,CAAC,CACH;QACD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;KACjB,CAAC;IACF,QAAQ,EAAE,KAAK,EAAE;IACjB,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG;QACtB,MAAM,QAAQ,GAAG,kBAAkB,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QACtD,8VAA8V;QAC9V,mFAAmF;QACnF,MAAM,KAAK,GAAG,KAAK,IAAI,EAAE;YACvB,MAAM,OAAO,GAAG,SAAS,EAAE,CAAC,WAAW,EAAE,CAAC;YAC1C,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC;YACxC,MAAM,KAAK,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;YAEpC,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;YACrE,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YACjG,+EAA+E;YAC/E,gFAAgF;YAChF,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;YAExF,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;YAE1D,6MAA6M;YAC7M,sHAAsH;YACtH,MAAM,OAAO,GAAG,IAAI,GAAG,EAGpB,CAAC;YACJ,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;gBAC3B,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,IAAI,SAAS,CAAC;gBACjC,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,UAAU,IAAI,IAAI,EAAE,CAAC;gBACtC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAAE,CAAC;gBACxJ,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC;gBACvB,GAAG,CAAC,WAAW,IAAI,CAAC,CAAC,WAAW,CAAC;gBACjC,GAAG,CAAC,YAAY,IAAI,CAAC,CAAC,YAAY,CAAC;gBACnC,GAAG,CAAC,eAAe,IAAI,CAAC,CAAC,eAAe,CAAC;gBACzC,GAAG,CAAC,gBAAgB,IAAI,CAAC,CAAC,gBAAgB,CAAC;gBAC3C,8FAA8F;gBAC9F,qFAAqF;gBACrF,wFAAwF;gBACxF,mFAAmF;gBACnF,uFAAuF;gBACvF,0DAA0D;gBAC1D,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;gBACjD,IAAI,IAAI,KAAK,SAAS;oBAAE,GAAG,CAAC,OAAO,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC;gBAChE,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACxB,CAAC;YACD,MAAM,gBAAgB,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;YAEjI,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,CACpC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;gBACX,MAAM,EAAE,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM;gBAC7B,WAAW,EAAE,GAAG,CAAC,WAAW,GAAG,CAAC,CAAC,WAAW;gBAC5C,YAAY,EAAE,GAAG,CAAC,YAAY,GAAG,CAAC,CAAC,YAAY;gBAC/C,eAAe,EAAE,GAAG,CAAC,eAAe,GAAG,CAAC,CAAC,eAAe;gBACxD,gBAAgB,EAAE,GAAG,CAAC,gBAAgB,GAAG,CAAC,CAAC,gBAAgB;aAC5D,CAAC,EACF,EAAE,MAAM,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAAE,CACxF,CAAC;YACF,2EAA2E;YAC3E,6EAA6E;YAC7E,2EAA2E;YAC3E,MAAM,YAAY,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC;YAC7E,MAAM,cAAc,GAAG,EAAE,GAAG,MAAM,EAAE,GAAG,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,OAAQ,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YAC5I,MAAM,GAAG,GAAG,UAAU,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YAC5C,yFAAyF;YACzF,4FAA4F;YAC5F,2FAA2F;YAC3F,oDAAoD;YACpD,MAAM,WAAW,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;YAEjD,0OAA0O;YAC1O,4HAA4H;YAC5H,MAAM,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACxC,MAAM,aAAa,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;YACvC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,aAAa,CAAC;YAC7C,4FAA4F;YAC5F,yFAAyF;YACzF,2FAA2F;YAC3F,mFAAmF;YACnF,yFAAyF;YACzF,0FAA0F;YAC1F,uFAAuF;YACvF,MAAM,UAAU,GAAG,CAAC,MAAM,WAAW,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;iBAC7D,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC;iBAC5D,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM,IAAI,gBAAgB,CAAC,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,OAAO,CAAC,KAAK,QAAQ,CAAC,MAAM,CAAC,CAAC;YAE7G,4FAA4F;YAC5F,uFAAuF;YACvF,2EAA2E;YAC3E,MAAM,SAAS,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;YAEjD,MAAM,cAAc,GAAG,MAAM,uBAAuB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YACnE,MAAM,eAAe,GAAG,CAAC,YAAoB,EAAE,UAAkB,EAAQ,EAAE;gBACzE,kFAAkF;gBAClF,iFAAiF;gBACjF,uBAAuB;gBACvB,wFAAwF;gBACxF,uFAAuF;gBACvF,mFAAmF;gBACnF,gFAAgF;gBAChF,MAAM,UAAU,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;gBAClD,MAAM,MAAM,GAAG,WAAW,CAAC,YAAY,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;gBACjE,OAAO,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,iBAAiB,CAAC,MAAM,EAAE,cAAc,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YAC1H,CAAC,CAAC;YAEF,MAAM,oBAAoB,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAEhH,MAAM,iBAAiB,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;gBAC7C,MAAM,YAAY,GAAG,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACnE,MAAM,IAAI,GAAG,eAAe,CAAC,YAAY,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC;gBACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,oBAAoB,IAAI,IAAI,CAAC;gBACnD,MAAM,SAAS,GAAG,QAAQ,IAAI,IAAI,IAAI,CAAC,CAAC,MAAM,IAAI,QAAQ,CAAC;gBAC3D,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC;gBAC9C,MAAM,OAAO,GAAG,MAAM,IAAI,IAAI,IAAI,CAAC,CAAC,GAAG,IAAI,MAAM,CAAC;gBAClD,wFAAwF;gBACxF,uFAAuF;gBACvF,UAAU;gBACV,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,IAAI,OAAO,EAAE,CAAC;YAChK,CAAC,CAAC,CAAC;YACH,0FAA0F;YAC1F,6EAA6E;YAC7E,+HAA+H;YAC/H,wEAAwE;YACxE,4FAA4F;YAC5F,yFAAyF;YACzF,kDAAkD;YAClD,MAAM,YAAY,GAAG,IAAI,GAAG,EAA8C,CAAC;YAC3E,MAAM,cAAc,GAA6B,EAAE,CAAC;YACpD,KAAK,MAAM,CAAC,IAAI,iBAAiB,EAAE,CAAC;gBAClC,MAAM,GAAG,GAAG,cAAc,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC;gBACvD,IAAI,GAAG,KAAK,CAAC,CAAC,UAAU,EAAE,CAAC;oBACzB,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBACvB,SAAS;gBACX,CAAC;gBACD,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;gBACnL,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE;oBACpB,UAAU,EAAE,GAAG;oBACf,gFAAgF;oBAChF,UAAU,EAAE,CAAC,CAAC,UAAU;oBACxB,MAAM,EAAE,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM;oBAC7B,QAAQ,EAAE,IAAI;oBACd,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,CAAC,CAAC,SAAS;oBACvC,GAAG,EAAE,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG;oBACpB,MAAM,EAAE,IAAI;oBACZ,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO;oBACjC,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI;iBACzB,CAAC,CAAC;YACL,CAAC;YACD,cAAc,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC;YAC9C,MAAM,iBAAiB,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YAC/E,MAAM,cAAc,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YAEzE,MAAM,gBAAgB,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC,YAAY,EAAE,EAAE;gBACjE,MAAM,WAAW,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,YAAY,CAAC,CAAC;gBAC7G,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;gBACjE,MAAM,GAAG,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;gBAC3D,MAAM,IAAI,GAAG,eAAe,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;gBAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,sBAAsB,IAAI,IAAI,CAAC;gBACrD,MAAM,SAAS,GAAG,QAAQ,IAAI,IAAI,IAAI,MAAM,IAAI,QAAQ,CAAC;gBACzD,MAAM,MAAM,GAAG,IAAI,CAAC,mBAAmB,IAAI,IAAI,CAAC;gBAChD,MAAM,OAAO,GAAG,MAAM,IAAI,IAAI,IAAI,GAAG,IAAI,MAAM,CAAC;gBAChD,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,IAAI,OAAO,EAAE,CAAC;YACzG,CAAC,CAAC,CAAC;YAEH,wHAAwH;YACxH,6JAA6J;YAC7J,MAAM,WAAW,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;YACnE,8FAA8F;YAC9F,uFAAuF;YACvF,uFAAuF;YACvF,sFAAsF;YACtF,MAAM,kBAAkB,GAAG,CAAC,MAAM,uBAAuB,CAAC,QAAQ,CAAC,GAAG,EAAE,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;gBAC/G,MAAM,GAAG,GAAG,cAAc,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC;gBACvD,OAAO,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;YAC9D,CAAC,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,MAAM,kBAAkB,CACrC,EAAE,EACF,CAAC,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,EAC1I,EAAE,QAAQ,EAAE,0BAA0B,EAAE,WAAW,EAAE,6BAA6B,EAAE,CACrF,CAAC;YACF,MAAM,QAAQ,GAAG,CAAmC,GAAM,EAA4B,EAAE,CAAC,CAAC;gBACxF,GAAG,GAAG;gBACN,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAClG,CAAC,CAAC;YAEH,+KAA+K;YAC/K,4VAA4V;YAC5V,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,cAAc,CAAC,CAAC;YAEhF,MAAM,KAAK,GAAG;gBACZ,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC;gBACzB,aAAa,CAAC,SAAS,CAAC;gBACxB,oBAAoB,CAAC,WAAW,CAAC;gBACjC,mTAAmT;gBACnT,+JAA+J;gBAC/J,8KAA8K;gBAC9K,+OAA+O;gBAC/O,gYAAgY;gBAChY,oHAAoH;gBACpH,iTAAiT;oBAC/S,iQAAiQ;aACpQ,CAAC;YACF,IAAI,QAAQ,EAAE,CAAC;gBACb,KAAK,CAAC,IAAI,CACR,2hBAA2hB,CAC5hB,CAAC;YACJ,CAAC;YACD,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACpB,KAAK,CAAC,IAAI,CACR,oSAAoS,EACpS,gSAAgS,CACjS,CAAC;YACJ,CAAC;YAED,OAAO;gBACL,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,GAAG,EAAE,QAAQ,CAAC,GAAG;gBACjB,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvD,SAAS;gBACT,KAAK;gBACL,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAChD,MAAM,EAAE,cAAc;gBACtB,gBAAgB,EAAE,WAAW;gBAC7B,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxD,SAAS;gBACT,MAAM,EAAE;oBACN,MAAM;oBACN,WAAW,EAAE,iBAAiB;oBAC9B,QAAQ,EAAE,cAAc;oBACxB,mFAAmF;oBACnF,qEAAqE;oBACrE,QAAQ,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,GAAG,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;oBACpF,UAAU,EAAE,gBAAgB;iBAC7B;gBACD,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjC,kBAAkB,EAAE,kBAAkB,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,GAAG,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;gBAClG,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC;aACtB,CAAC;QACJ,CAAC,CAAC;QACF,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK;YAAE,OAAO,MAAM,KAAK,EAAE,CAAC;QAChD,OAAO,MAAM,cAAc,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,MAAM,EAAE,sBAAsB,EAAE,EAAE,KAAK,CAAC,CAAC;IACxG,CAAC;CACF,CAAC,CAAC"}

package/dist/agent/tools/stand_down.d.ts

@@ -0,0 +1,91 @@
+/** The audit action a stand-down writes. Named for what happened, not for the verb, so the row
+ *  survives the verb being renamed — and so the e2e pack can gate on the EFFECT rather than on
+ *  model-authored copy (the acknowledgement is written by the model and must stay free to vary). */
+export declare const STAND_DOWN_ACTION = "engagement.stood_down";
+/**
+ * WHY A REFUSED STAND-DOWN LEAVES A ROW, AND WHAT ITS `detail.refused` CODE NAMES (OPE-1885).
+ *
+ * 🔴 ZERO ROWS AND A REFUSAL USED TO READ ALIKE, AND THE COST IS MEASURED. The registry-miss refusal
+ * below already writes its row FIRST — "the ATTEMPT is worth a row" — but the three refusals ABOVE it
+ * wrote nothing at all, so the audit trail said the same thing for "the verb refused on this turn's
+ * shape" and "the verb was never called". Ship #214's report read `J-ENGAGED-notion`'s zero
+ * `engagement.stood_down` rows as "the registry did not hold the conversation" (OPE-1885), which is
+ * the one reading zero rows CANNOT carry: a registry miss writes `marked: false`. Every refusal
+ * leaves a row now, and a refusal row says WHICH shape refused it.
+ * 🔴 WHAT AN EMPTY WINDOW MEANS AFTERWARDS, SAID EXACTLY. Two readings, not one: the verb was never
+ * reached — a turn that did not run, or a model that did not call it — OR the row was written and
+ * DROPPED. `appendAudit` (`agent/audit/audit.ts`) never throws: it retries once, then warns and
+ * discards, and both write sites here swallow with `.catch()` besides. So an empty window narrows
+ * from four readings to two, and reading it as one is the same confident-wrong move pointed the
+ * other way. The refusal copy three guards down already words it honestly — "either this
+ * conversation was never enrolled … or the registry could not be written to just now".
+ *
+ * 🔴 A REFUSAL ROW CARRIES NO `marked` FIELD, and that is load-bearing rather than tidy. `marked`
+ * reports {@link markThreadStopped}'s own answer, and these three paths never reach the registry to
+ * get one. The e2e pack's negative control asks for `detail.marked === false` exactly
+ * (`packages/core/scripts/e2e/engaged-rows.ts` `standDownAttemptedButUnmarked`), so writing
+ * `marked: false` here would make a refused DM in one journey's window falsify another journey's
+ * enrolment claim. An absent field reads as neither verdict, which is the truth.
+ */
+export declare const STAND_DOWN_REFUSALS: {
+    /** `binding.mode === "dm"` — no DM wake gate anywhere reads a `stopped` marker. */
+    readonly dm: "dm";
+    /** A group conversation whose surface publishes no `engagementKey`, so its wake never reads the row. */
+    readonly group: "group-wake-ignores-registry";
+    /** The turn carries neither an `engagementKey` nor a `threadTs`, so there is no row to address. */
+    readonly anchorless: "no-conversation-anchor";
+};
+/** The 1:1 refusal copy. Its reason clause is a platform truth about a 1:1 and about nothing else.
+ *  Exported for the anchor test, which pins it. */
+export declare const DM_REFUSAL = "stand_down: a direct message cannot be stood down, so nothing was marked \u2014 reply that you could NOT stop following here, because a DM has no @mention to bring you back.";
+/** The GROUP-conversation refusal copy, and it needed its own sentence. A group chat CAN be
+ *  @mentioned, so reusing the 1:1 reason above would have told the model something false about the
+ *  platform and pointed the person at the wrong remedy. The true cause is narrower: on this surface
+ *  the group wake answers every message without consulting the engagement registry, so a mark here
+ *  would be a write nobody reads. */
+export declare const GROUP_REFUSAL = "stand_down: this surface answers every message in a group conversation without checking whether you asked it to stop, so nothing was marked \u2014 reply that you could NOT stop following here, and that this is a limit of how the agent is built on this surface rather than something anyone in the conversation can change.";
+/**
+ * THE ARM-CORRECT ACKNOWLEDGEMENT SENTENCE FOR THIS SEAT (OPE-1580). Read from the seam
+ * instructions/access.ts stamps (channels/reply-signal.ts §ARM) and rendered by the one renderer that
+ * owns the four arms' delivery prose (instructions/seat-prompt.ts).
+ *
+ * Exported because `no_reply` says the same sentence in its own refusal: one word, one meaning, and
+ * the two must never drift into naming different routes on one seat.
+ *
+ * 🔴 THE PREMISE THAT MADE `dual-mode` THE DEFAULT IS GONE (OPE-2006). It was: an unstamped session
+ * is a seat rendering no persona — a plain native `@mention` seat, where the turn's closing text
+ * really does post. That seat's closing text is now DROPPED on every surface that declares the
+ * surface-wide fact — all but Linear, whose native arm still publishes it
+ * (`channels/closing-prose-drop.ts`), so the `dual-mode` sentence — "end the turn with the
+ * acknowledgement as your final text" — would name a route that delivers nothing, and the person who
+ * asked the agent to leave would get no acknowledgement at all. That is the ship #180 loss OPE-1580
+ * exists to stop, on the one seat shape OPE-1580 did not reach.
+ *
+ * SO THE SEAT IS STAMPED INSTEAD OF GUESSED. `renderDeliverySlot` (`instructions/access.ts`) resolves
+ * and STAMPS an arm for every conversational session that renders no persona, so a native seat now
+ * arrives here stamped `reply-only` on a surface that declares `closingProseDropped`.
+ *
+ * THE DEFAULT STAYS `dual-mode`, AND IT IS NOW A TRUE LAST RESORT rather than a described case. It is
+ * reached only where the stamp is unreadable — no session context, a slot that threw — and there the
+ * seam knows nothing about the surface at all. `dual-mode` is what the resolver itself falls to in
+ * that same blindness (`readDeliveryArm`'s own fail-soft), so the two agree rather than disagreeing
+ * about a seat neither can read. It is NOT a guess about a unified seat: the unified path resolves
+ * its arm on every render (`renderUnifiedScope` passes `messageToolOnly`), so a live wake-addressed
+ * seat is always stamped.
+ */
+export declare function standDownAckRoute(): string;
+declare const _default: import("eve/tools").ToolDefinition<{
+    reason?: string | undefined;
+}, {
+    standingDown: boolean;
+    note: string;
+}> & {
+    execute(input: {
+        reason?: string | undefined;
+    }, ctx: import("eve/tools").ToolContext): Promise<{
+        standingDown: boolean;
+        note: string;
+    }>;
+};
+export default _default;
+//# sourceMappingURL=stand_down.d.ts.map

package/dist/agent/tools/stand_down.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stand_down.d.ts","sourceRoot":"","sources":["../../../agent/tools/stand_down.ts"],"names":[],"mappings":"AAeA;;oGAEoG;AACpG,eAAO,MAAM,iBAAiB,0BAA0B,CAAC;AAEzD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,eAAO,MAAM,mBAAmB;IAC9B,mFAAmF;aACnF,EAAE,EAAE,IAAI;IACR,wGAAwG;aACxG,KAAK,EAAE,6BAA6B;IACpC,mGAAmG;aACnG,UAAU,EAAE,wBAAwB;CAC5B,CAAC;AAEX;mDACmD;AACnD,eAAO,MAAM,UAAU,kLACqJ,CAAC;AAE7K;;;;qCAIqC;AACrC,eAAO,MAAM,aAAa,qUACqS,CAAC;AAehU;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAI1C"}