@open-everywhere/core 0.1.0

package/dist/agent/tools/unlink_identity.js

@@ -0,0 +1,97 @@
+// unlink_identity severs an account from the caller's OWN link-set, and is deliberately the easiest verb in the flow to reach: linking takes a challenge and a ratification, unlinking takes one call, because narrowing is always safe and a person must never need an admin's help to stop being associated with an account. A caller may remove ANY account from their own set, not only the one they are speaking from — restricting it to the current account fails exactly when it is needed most, for somebody who has LOST access to the account they want to detach. Removing an id from somebody else's set is an admin act.
+// A sever DELETES the row, so the account becomes joinable again and unlink-then-relink works; admin revocation tombstones instead, and that asymmetry is the offboarding property rather than an inconsistency. It also DESTROYS the severed account's stored credentials, because dropping the membership sends that account back to keying the vault by its own subject — the cost is one re-consent, and the alternative is a severed account quietly going on using a credential it earned while it still had standing. DM-only: the caller has to BE that person.
+import { defineTool } from "eve/tools";
+import { never } from "eve/tools/approval";
+import { z } from "zod";
+import { bindFrom } from "../identity/binding.js";
+import { linkTenantOf } from "../identity/link-tenant.js";
+import { actingPrincipalIdOf } from "../access/request.js";
+import { normalizePlatform } from "../identity/platform.js";
+import { principalKey } from "../identity/principal-key.js";
+import { humanAccountLabel } from "../identity/account-display-name.js";
+import { unlinkOwnId } from "../identity/link-store.js";
+import { canDeliverDirectMessage, dispatchDirectMessage, notifyLinkSetMembers } from "../channels/post-arms.js";
+export default defineTool({
+    description: "Remove a linked account from the caller's own identity link-set — their current account by default, or another account already on their set (platform + nativeId). DM only, and it can only ever touch the caller's OWN set. Takes effect immediately, and it also destroys any credentials stored for that account (its own OAuth or AWS sign-in), so re-linking it later with link_identity means signing in again.",
+    inputSchema: z.object({
+        platform: z.string().optional().describe("Platform of the account to unlink (e.g. \"github\"). Omit to unlink the account this person is speaking from."),
+        nativeId: z.string().optional().describe("That platform's native account id. Required when `platform` is given."),
+    }),
+    outputSchema: z.object({
+        unlinked: z.string(),
+        linkSetId: z.string(),
+        note: z.string(),
+    }),
+    approval: never(),
+    async execute(input, ctx) {
+        const binding = bindFrom(ctx);
+        if (binding.mode !== "dm") {
+            throw new Error(`unlink_identity is DM-only (this conversation is "${binding.mode}") — a person's identity links are theirs to change, and only they can be identified as themselves in a DM.`);
+        }
+        // principal-gate: presence — a HUMAN must be here, acting. The caller's own identity IS the
+        // authorisation here (there is no other check: you may only touch your own set), so the read
+        // has to be the one that is undefined on an unattended fire. A fire's attested creator would
+        // otherwise let a routine quietly detach its creator's accounts.
+        const actor = actingPrincipalIdOf(ctx);
+        if (!actor) {
+            throw new Error("unlink_identity needs a verified person on this turn — only the human whose links these are can remove them.");
+        }
+        if ((input.platform === undefined) !== (input.nativeId === undefined)) {
+            throw new Error("unlink_identity needs BOTH platform and nativeId, or neither (which unlinks the account you are speaking from).");
+        }
+        // `normalizePlatform` folds a surface alias so a person naming their account the way the agent showed it to them still matches the stored row's platform token.
+        // 🔴 The TARGET's workspace comes from CONFIG, not from the caller: the target platform is TOOL INPUT and may be a different platform from the one this DM is on, so a tenant taken from input would let a person aim an unlink at somebody else's workspace. The resolver REFUSES rather than guessing, and the refusal names the fix. The caller's OWN account keeps using the binding, which is the workspace they are demonstrably speaking from.
+        const targetPlatform = input.platform !== undefined ? (normalizePlatform(input.platform) ?? input.platform) : undefined;
+        const target = targetPlatform !== undefined && input.nativeId !== undefined ? { platform: targetPlatform, tenant: targetTenant(targetPlatform), nativeId: input.nativeId } : undefined;
+        const result = await unlinkOwnId({
+            org: binding.org,
+            actor: { platform: binding.platform, tenant: linkTenantOf(binding.platform, binding.workspace), nativeId: actor },
+            ...(target ? { target } : {}),
+        });
+        if (!result.ok)
+            throw new Error(result.reason);
+        const removedAccount = target ?? { platform: binding.platform, tenant: linkTenantOf(binding.platform, binding.workspace), nativeId: actor };
+        const removed = principalKey(removedAccount.platform, removedAccount.tenant, removedAccount.nativeId);
+        // NAMED for a human — a resolved display name and handle where a provider arm exists, else platform-named prose, never a bare key someone could rename their way past. The exact principal key stays the tool's own output field and log identifier.
+        // The resolved name is the account's OWN self-set profile string, sanitized before it reaches this notice, which is sufficient here because the notice is plain chat text a human reads rather than a model-facing sink.
+        const removedName = await humanAccountLabel(removedAccount.platform, removedAccount.nativeId, removedAccount.tenant);
+        // SEVERANCE is as consequential as growth, and its abuse shape is the sharper one: a compromised account can cut the person off from their own set — and from the shared credential reach it carries — without anyone else hearing. So the remaining members are told, and so is the REMOVED account, on the surfaces it still holds.
+        // The sever DELETED the row, so the removed account is notified separately rather than through the set read. The CALLER is excluded, because they are reading the tool's own answer.
+        const caller = { platform: binding.platform, tenant: linkTenantOf(binding.platform, binding.workspace), nativeId: actor };
+        // PLAIN TEXT, never `**bold**` — this notice reaches every DM-capable platform, and GitHub-
+        // flavoured markdown renders literally outside GitHub (measured live 2026-08-16, OPE-616).
+        const notice = `${removedName} was just removed from your linked identity. It no longer speaks as you, and ` +
+            `it no longer reaches anything this identity reaches.\n\nIf that was you, nothing to do. If ` +
+            `it was not, tell whoever runs this workspace — someone with access to one of your accounts ` +
+            `changed who you are here.`;
+        const n = await notifyLinkSetMembers(binding.org, result.linkSetId, notice, { except: [caller] });
+        if (target && !(target.platform === caller.platform && target.tenant === caller.tenant && target.nativeId === caller.nativeId) && canDeliverDirectMessage(target.platform)) {
+            // Best-effort, per the same rule as the set notice: a person's own unlink must never fail
+            // because the account they detached could not be reached.
+            try {
+                await dispatchDirectMessage(target.platform, { principalId: target.nativeId, text: notice });
+            }
+            catch (err) {
+                console.log(`[open-everywhere:identity] unlink ${removed}: the severed account could not be notified: ${String(err)}`);
+            }
+        }
+        if (n > 0)
+            console.log(`[open-everywhere:identity] link-set ${result.linkSetId} lost ${removed} — notified ${n} remaining member account(s).`);
+        return { unlinked: removed, linkSetId: result.linkSetId, note: result.note };
+    },
+});
+/**
+ * The workspace to key a NAMED target account by, or a person-readable refusal. Splitting this out of the call site is not decoration: the underlying resolver throws an OPERATOR-shaped message, while this is a sentence a person reads in their own DM — so they are told plainly that nothing was changed, with the operator detail riding along so the answer they paste to an admin is actionable.
+ * Refusing is the only safe answer: the target platform is tool INPUT and may not be the one this DM is on, so a guessed workspace could aim the unlink at somebody else's account entirely.
+ */
+function targetTenant(platform) {
+    try {
+        return linkTenantOf(platform);
+    }
+    catch (err) {
+        throw new Error(`I can't unlink a ${platform} account from here — I can't tell which ${platform} workspace it belongs to, and ` +
+            `guessing would risk detaching somebody else's account. Nothing was changed. Whoever runs this deployment can fix it: ` +
+            `${err instanceof Error ? err.message : String(err)}`);
+    }
+}
+//# sourceMappingURL=unlink_identity.js.map

package/dist/agent/tools/unlink_identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"unlink_identity.js","sourceRoot":"","sources":["../../../agent/tools/unlink_identity.ts"],"names":[],"mappings":"AAAA,umBAAumB;AACvmB,wiBAAwiB;AAExiB,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AACxE,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAEhH,eAAe,UAAU,CAAC;IACxB,WAAW,EACT,uZAAuZ;IACzZ,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+GAA+G,CAAC;QACzJ,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uEAAuE,CAAC;KAClH,CAAC;IACF,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC;QACrB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;QACpB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;QACrB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;KACjB,CAAC;IACF,QAAQ,EAAE,KAAK,EAAE;IACjB,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG;QACtB,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,qDAAqD,OAAO,CAAC,IAAI,6GAA6G,CAAC,CAAC;QAClM,CAAC;QACD,4FAA4F;QAC5F,6FAA6F;QAC7F,6FAA6F;QAC7F,iEAAiE;QACjE,MAAM,KAAK,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,8GAA8G,CAAC,CAAC;QAClI,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,EAAE,CAAC;YACtE,MAAM,IAAI,KAAK,CAAC,iHAAiH,CAAC,CAAC;QACrI,CAAC;QACD,gKAAgK;QAChK,sbAAsb;QACtb,MAAM,cAAc,GAAG,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACxH,MAAM,MAAM,GACV,cAAc,KAAK,SAAS,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,YAAY,CAAC,cAAc,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1K,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC;YAC/B,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,KAAK,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE;YACjH,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9B,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC/C,MAAM,cAAc,GAAG,MAAM,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAC5I,MAAM,OAAO,GAAG,YAAY,CAAC,cAAc,CAAC,QAAQ,EAAE,cAAc,CAAC,MAAM,EAAE,cAAc,CAAC,QAAQ,CAAC,CAAC;QACtG,qPAAqP;QACrP,yNAAyN;QACzN,MAAM,WAAW,GAAG,MAAM,iBAAiB,CAAC,cAAc,CAAC,QAAQ,EAAE,cAAc,CAAC,QAAQ,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;QACrH,sUAAsU;QACtU,qLAAqL;QACrL,MAAM,MAAM,GAAG,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAC1H,4FAA4F;QAC5F,2FAA2F;QAC3F,MAAM,MAAM,GACV,GAAG,WAAW,+EAA+E;YAC7F,6FAA6F;YAC7F,6FAA6F;YAC7F,2BAA2B,CAAC;QAC9B,MAAM,CAAC,GAAG,MAAM,oBAAoB,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAClG,IAAI,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,CAAC,IAAI,uBAAuB,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3K,0FAA0F;YAC1F,0DAA0D;YAC1D,IAAI,CAAC;gBACH,MAAM,qBAAqB,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,WAAW,EAAE,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;YAC/F,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,GAAG,CAAC,qCAAqC,OAAO,gDAAgD,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACzH,CAAC;QACH,CAAC;QACD,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,uCAAuC,MAAM,CAAC,SAAS,SAAS,OAAO,eAAe,CAAC,+BAA+B,CAAC,CAAC;QAC/I,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;IAC/E,CAAC;CACF,CAAC,CAAC;AAEH;;;GAGG;AACH,SAAS,YAAY,CAAC,QAAgB;IACpC,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,oBAAoB,QAAQ,2CAA2C,QAAQ,gCAAgC;YAC7G,uHAAuH;YACvH,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACxD,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/agent/tools/update_status.d.ts

@@ -0,0 +1,17 @@
+declare const _default: import("eve/tools").ToolDefinition<{
+    state: "blocked" | "done" | "needs_input" | "working";
+    summary: string;
+}, {
+    updated: boolean;
+    state: string;
+}> & {
+    execute(input: {
+        state: "blocked" | "done" | "needs_input" | "working";
+        summary: string;
+    }, ctx: import("eve/tools").ToolContext): Promise<{
+        updated: boolean;
+        state: "blocked" | "done" | "needs_input" | "working";
+    }>;
+};
+export default _default;
+//# sourceMappingURL=update_status.d.ts.map

package/dist/agent/tools/update_status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"update_status.d.ts","sourceRoot":"","sources":["../../../agent/tools/update_status.ts"],"names":[],"mappings":""}

package/dist/agent/tools/update_status.js

@@ -0,0 +1,59 @@
+// update_status records what the agent is currently doing as ONE line, keyed by this session, in the surface-tier STATUS.md that every thread in the surface shares and the channel mirrors to a pinned message.
+// Not consequential, so no approval. Thread-root status emoji are the channel's own job; this is the higher-level "what's in flight" view.
+import { defineTool } from "eve/tools";
+import { never } from "eve/tools/approval";
+import { z } from "zod";
+import { resolvePartition } from "../memory/partition.js";
+import { SURFACE } from "../memory/store.js";
+import { surfaceProvider } from "../memory/resolve.js";
+import { bindFrom, currentTurnId } from "../identity/binding.js";
+import { writeMemoryTier } from "../memory/write-road.js";
+import { writeTierFile } from "../memory/sandbox-sync.js";
+import { withMemoryRootWritable } from "../memory/root-fence.js";
+import { statusItemLine, upsertStatusItem, statusSeed } from "../status/status.js";
+export default defineTool({
+    description: "Record your current work status so the team can see it at a glance (it's mirrored to a pinned status message in the channel, shared across all threads). Call when you start a substantial task, when you finish, or when you're blocked / need input. One status per thread.",
+    inputSchema: z.object({
+        state: z
+            .enum(["working", "done", "needs_input", "blocked"])
+            .describe("working = in progress; done = finished; needs_input = waiting on a human; blocked = stuck."),
+        summary: z.string().min(1).describe("One short line: what you're doing / did / are blocked on."),
+    }),
+    outputSchema: z.object({ updated: z.boolean(), state: z.string() }),
+    approval: never(),
+    async execute(input, ctx) {
+        const p = resolvePartition(ctx);
+        const sessionId = ctx.session.id;
+        const when = new Date().toISOString().slice(0, 16).replace("T", " ") + "Z";
+        const line = statusItemLine(sessionId, input.state, input.summary, when);
+        // 🔴 The provider is the one the SESSION'S OWN PLAN names. A DM's SURFACE tier IS its per-user personal silo, hard-pinned to the DB provider, so reading and writing it through the env-selected singleton instead would split a DM's status line from its own memory and land personal DM content in the shared durable store that pin exists to keep it out of.
+        // A channel's surface tier carries no plan pin, so there it still resolves to the same env-selected singleton.
+        const provider = surfaceProvider(bindFrom(ctx));
+        // 🔴 The base is the DURABLE tier, never the sandbox, for two independent reasons. First, this tool is not a memory persist path: handing the writer the whole sandbox surface directory let any file under it reach the durable tier through a status call — including on a channel session whose plan holds no surface tier at all, which is a door the write fence closes and a status tool must not reopen.
+        // Second, the board is CROSS-THREAD state: every thread upserts its own line into one STATUS.md, and a channel session's sandbox has no copy, so a sandbox base dropped every other thread's line on each call. Naming ONE file is safe because the tier write is upsert-only on every provider.
+        const durable = await provider.readTier(p, SURFACE);
+        const current = durable["STATUS.md"] ?? statusSeed(p.surfaceKey);
+        const updated = upsertStatusItem(current, sessionId, line);
+        const sandbox = await ctx.getSandbox();
+        // Write it live in this session, then persist to the durable store so the channel's pinned-message sync and other threads see it.
+        // 🔴 This write can CREATE the surface directory: every session gets a status, including a channel session whose plan holds no surface tier, and creating it needs write on the memory root that the root fence takes away at session start. So it runs with the root unlocked and re-locked — and unlike the flush-time callers, this one runs INSIDE a model step, so the unlock is a window.
+        await withMemoryRootWritable(sandbox, () => writeTierFile(sandbox, SURFACE, "STATUS.md", updated));
+        // THE ONE ROAD (OPE-1873), as an OPERATIONAL write. The status board is host bookkeeping on the
+        // surface tier, not a fact the agent remembered, so it files under `memory.operational_write`:
+        // a `memory.write` row here would answer "did the note reach the silo?" with a status update.
+        await writeMemoryTier({
+            provider,
+            partition: p,
+            tier: SURFACE,
+            files: { "STATUS.md": updated },
+            message: `status [${input.state}] ${sessionId}`,
+            road: "status-board",
+            kind: "operational",
+            principalId: bindFrom(ctx).principalId,
+            turnId: currentTurnId(ctx),
+            extra: { state: input.state, sessionId },
+        });
+        return { updated: true, state: input.state };
+    },
+});
+//# sourceMappingURL=update_status.js.map

package/dist/agent/tools/update_status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update_status.js","sourceRoot":"","sources":["../../../agent/tools/update_status.ts"],"names":[],"mappings":"AAAA,iNAAiN;AACjN,2IAA2I;AAE3I,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,UAAU,EAAkB,MAAM,qBAAqB,CAAC;AAEnG,eAAe,UAAU,CAAC;IACxB,WAAW,EACT,+QAA+Q;IACjR,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,KAAK,EAAE,CAAC;aACL,IAAI,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC;aACnD,QAAQ,CAAC,4FAA4F,CAAC;QACzG,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,2DAA2D,CAAC;KACjG,CAAC;IACF,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IACnE,QAAQ,EAAE,KAAK,EAAE;IACjB,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG;QACtB,MAAM,CAAC,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,GAAG,CAAC;QAC3E,MAAM,IAAI,GAAG,cAAc,CAAC,SAAS,EAAE,KAAK,CAAC,KAAkB,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAEtF,kWAAkW;QAClW,+GAA+G;QAC/G,MAAM,QAAQ,GAAG,eAAe,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QAEhD,gZAAgZ;QAChZ,iSAAiS;QACjS,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QACpD,MAAM,OAAO,GAAG,OAAO,CAAC,WAAW,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;QACjE,MAAM,OAAO,GAAG,gBAAgB,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;QAE3D,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,UAAU,EAAE,CAAC;QACvC,kIAAkI;QAClI,gYAAgY;QAChY,MAAM,sBAAsB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;QACnG,gGAAgG;QAChG,+FAA+F;QAC/F,8FAA8F;QAC9F,MAAM,eAAe,CAAC;YACpB,QAAQ;YACR,SAAS,EAAE,CAAC;YACZ,IAAI,EAAE,OAAO;YACb,KAAK,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE;YAC/B,OAAO,EAAE,WAAW,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE;YAC/C,IAAI,EAAE,cAAc;YACpB,IAAI,EAAE,aAAa;YACnB,WAAW,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,WAAW;YACtC,MAAM,EAAE,aAAa,CAAC,GAAG,CAAC;YAC1B,KAAK,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,SAAS,EAAE;SACzC,CAAC,CAAC;QAEH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;IAC/C,CAAC;CACF,CAAC,CAAC"}

package/dist/agent/tools/usage_report.d.ts

@@ -0,0 +1,59 @@
+declare const _default: import("eve/tools").ToolDefinition<{
+    scope: "domain" | "org";
+    sinceDays?: number | undefined;
+}, {
+    scope: "domain" | "org";
+    org: string;
+    domain?: string | undefined;
+    sinceDays: number;
+    since: string;
+    conversations: number;
+    turns: number;
+    byUser: {
+        principalId: string;
+        name?: string | undefined;
+        events: number;
+        inputTokens: number;
+        outputTokens: number;
+    }[];
+    busiestSurfaces: {
+        surfaceKey: string;
+        channel?: string | undefined;
+        events: number;
+        sessions: number;
+        inputTokens: number;
+        outputTokens: number;
+    }[];
+    note: string;
+}> & {
+    execute(input: {
+        scope: "domain" | "org";
+        sinceDays?: number | undefined;
+    }, ctx: import("eve/tools").ToolContext): Promise<{
+        scope: "domain" | "org";
+        org: string;
+        domain?: string | undefined;
+        sinceDays: number;
+        since: string;
+        conversations: number;
+        turns: number;
+        byUser: {
+            principalId: string;
+            events: number;
+            inputTokens: number;
+            outputTokens: number;
+            name?: string | undefined;
+        }[];
+        busiestSurfaces: {
+            surfaceKey: string;
+            events: number;
+            sessions: number;
+            inputTokens: number;
+            outputTokens: number;
+            channel?: string | undefined;
+        }[];
+        note: string;
+    }>;
+};
+export default _default;
+//# sourceMappingURL=usage_report.d.ts.map

package/dist/agent/tools/usage_report.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"usage_report.d.ts","sourceRoot":"","sources":["../../../agent/tools/usage_report.ts"],"names":[],"mappings":""}

package/dist/agent/tools/usage_report.js

@@ -0,0 +1,91 @@
+// usage_report is activity analytics for a domain or the whole org: conversations, turns, a per-user breakdown and the busiest surfaces. It ships AGGREGATES only, and reports counts rather than judgments.
+// Scope gating is identical to the spend report: domain scope is anyone in a memory domain, and org scope needs an org admin. "Conversations" is an APPROXIMATION derived from grouped data, while turns, per-user counts and busiest surfaces are exact.
+import { defineTool } from "eve/tools";
+import { never } from "eve/tools/approval";
+import { z } from "zod";
+import { usageSummary } from "../spend/usage-events.js";
+import { getConfig } from "../access/config.js";
+import { resolveReportScope, filterToDomain, approxConversationCount, aggregateByUser, aggregateBySurface, resolveSlackLabels } from "../spend/reporting.js";
+import { maskDmSurfaceKey } from "../spend/dm-mask.js";
+import { fulfilPaneRead } from "../access/pane-venue.js";
+import { bridgeFetchUserDisplayName, bridgeFetchChannelDisplayName } from "../channels/slack-bridge.js";
+function isoDaysAgo(days) {
+    return new Date(Date.now() - days * 24 * 60 * 60 * 1000).toISOString();
+}
+/** The DM rendering of an org-scope usage report (OPE-44's delivery arm). Plain text, top rows only
+ *  — a DM is a reading room, not a spreadsheet; the full table stays available in a governance
+ *  channel or via the control MCP. */
+function renderUsageReportForDm(r) {
+    const lines = [
+        `Usage — org "${r.org}", last ${r.sinceDays} days`,
+        `conversations ≈ ${r.conversations} · turns ${r.turns}`,
+        "",
+        "Most active people:",
+        ...(r.byUser.length ? r.byUser.slice(0, 5).map((u) => `  • ${u.name ?? u.principalId} — ${u.events} turns`) : ["  (none in window)"]),
+        "",
+        "Busiest surfaces:",
+        ...(r.busiestSurfaces.length ? r.busiestSurfaces.slice(0, 5).map((s) => `  • ${s.channel ?? s.surfaceKey} — ${s.events} turns`) : ["  (none in window)"]),
+        "",
+        'Top rows only; "conversations" is an estimate. Ask again in a governance channel (or use the control plane) for the full breakdown.',
+    ];
+    return lines.join("\n");
+}
+export default defineTool({
+    description: "Activity analytics for your memory domain, or (org admins only) the whole org: conversation count (an estimate — see note), turns, a per-user activity breakdown, and the busiest surfaces, over a time window. scope=\"domain\" works for anyone in a memory domain; scope=\"org\" requires an org admin.",
+    inputSchema: z.object({
+        scope: z.enum(["domain", "org"]).describe('"domain" = your own resolved memory domain (anyone in it); "org" = the whole org (org-admin only).'),
+        sinceDays: z.number().int().positive().max(365).optional().describe("Window in days, default 30."),
+    }),
+    outputSchema: z.object({
+        scope: z.enum(["domain", "org"]),
+        org: z.string(),
+        domain: z.string().optional(),
+        sinceDays: z.number(),
+        since: z.string(),
+        conversations: z.number().describe("Distinct-session estimate — see note."),
+        turns: z.number().describe("Non-sandbox usage-event count (~model calls)."),
+        byUser: z.array(z.object({ principalId: z.string(), name: z.string().optional(), events: z.number(), inputTokens: z.number(), outputTokens: z.number() })),
+        busiestSurfaces: z.array(z.object({ surfaceKey: z.string(), channel: z.string().optional(), events: z.number(), sessions: z.number(), inputTokens: z.number(), outputTokens: z.number() })),
+        note: z.string(),
+    }),
+    approval: never(),
+    async execute(input, ctx) {
+        const resolved = resolveReportScope(ctx, input.scope);
+        // Dual gate. The scope resolver is the ROLE half — org scope needs an org admin. Org-grain output is also pane-scoped, so the pane read is the VENUE half: it returns the build's value in the right venue, redirects WITHOUT running the build, or runs it and delivers the result to the requester's DM itself, throwing so nothing reaches the room.
+        // Domain scope is room-safe in that domain's channels and takes no venue gate.
+        const build = async () => {
+            const sinceDays = input.sinceDays ?? 30;
+            const since = isoDaysAgo(sinceDays);
+            const allRows = await usageSummary(resolved.org, { sinceTs: since });
+            const scopedRows = resolved.domain ? filterToDomain(allRows, resolved.domain, getConfig().loadDomains()) : allRows;
+            // Anti-doxxing: DM rows report under one "(dms)" bucket per workspace — masked
+            // BEFORE aggregation so they group naturally. The store keeps full resolution.
+            const maskedRows = scopedRows.map(maskDmSurfaceKey);
+            const conversations = approxConversationCount(maskedRows);
+            const surfaces = aggregateBySurface(maskedRows);
+            const turns = surfaces.reduce((sum, s) => sum + s.events, 0);
+            const users = aggregateByUser(scopedRows);
+            // Best-effort display labels (Slack users.info / conversations.info, memoized) so
+            // the report reads as names, not raw ids. The raw id always stays in the row.
+            const labels = await resolveSlackLabels(users.map((u) => u.principalId), surfaces.map((s) => s.surfaceKey), { userName: bridgeFetchUserDisplayName, channelName: bridgeFetchChannelDisplayName });
+            const byUser = users.map((u) => ({ ...u, ...(labels.users.has(u.principalId) ? { name: labels.users.get(u.principalId) } : {}) }));
+            const busiestSurfaces = surfaces.map((s) => ({ ...s, ...(labels.channels.has(s.surfaceKey) ? { channel: labels.channels.get(s.surfaceKey) } : {}) }));
+            return {
+                scope: input.scope,
+                org: resolved.org,
+                ...(resolved.domain ? { domain: resolved.domain } : {}),
+                sinceDays,
+                since,
+                conversations,
+                turns,
+                byUser,
+                busiestSurfaces,
+                note: 'conversations is an approximation: usage rows are grouped by (surface, user, kind), and a single conversation CAN carry more than one sender (per-turn identity changes turn to turn), so this can overcount a multi-sender thread — turns/byUser/busiestSurfaces event counts are exact (plain sums), only the distinct-session figures ("conversations" and each surface\'s "sessions") share this caveat. name/channel labels are best-effort Slack lookups — prefer them when presenting, but the raw ids are the ground truth (a row without a label is a non-Slack principal, a DM, or a failed lookup). DM usage is aggregated into a single "(dms)" bucket per workspace — individual DM surfaces are deliberately never listed in reports (the underlying rows keep full resolution). A row written before the conversation-mode stamp existed cannot be classified, so it reports under a separate "(unclassified)" bucket per workspace: masked rather than named, and kept apart from "(dms)" so a channel\'s spend is never reported as DM spend.',
+            };
+        };
+        if (input.scope !== "org")
+            return await build();
+        return await fulfilPaneRead(ctx, { kind: "usage.report.org", render: renderUsageReportForDm }, build);
+    },
+});
+//# sourceMappingURL=usage_report.js.map

package/dist/agent/tools/usage_report.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"usage_report.js","sourceRoot":"","sources":["../../../agent/tools/usage_report.ts"],"names":[],"mappings":"AAAA,6MAA6M;AAC7M,0PAA0P;AAE1P,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,uBAAuB,EAAE,eAAe,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC7J,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,EAAE,0BAA0B,EAAE,6BAA6B,EAAE,MAAM,6BAA6B,CAAC;AAExG,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;AACzE,CAAC;AAED;;sCAEsC;AACtC,SAAS,sBAAsB,CAAC,CAA4O;IAC1Q,MAAM,KAAK,GAAG;QACZ,gBAAgB,CAAC,CAAC,GAAG,WAAW,CAAC,CAAC,SAAS,OAAO;QAClD,mBAAmB,CAAC,CAAC,aAAa,YAAY,CAAC,CAAC,KAAK,EAAE;QACvD,EAAE;QACF,qBAAqB;QACrB,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,WAAW,MAAM,CAAC,CAAC,MAAM,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC;QACrI,EAAE;QACF,mBAAmB;QACnB,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,UAAU,MAAM,CAAC,CAAC,MAAM,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC;QACzJ,EAAE;QACF,qIAAqI;KACtI,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,eAAe,UAAU,CAAC;IACxB,WAAW,EACT,4SAA4S;IAC9S,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,oGAAoG,CAAC;QAC/I,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6BAA6B,CAAC;KACnG,CAAC;IACF,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC;QACrB,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAChC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;QACf,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC7B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;QACrB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uCAAuC,CAAC;QAC3E,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,+CAA+C,CAAC;QAC3E,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC1J,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC3L,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;KACjB,CAAC;IACF,QAAQ,EAAE,KAAK,EAAE;IACjB,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG;QACtB,MAAM,QAAQ,GAAG,kBAAkB,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QACtD,wVAAwV;QACxV,+EAA+E;QAC/E,MAAM,KAAK,GAAG,KAAK,IAAI,EAAE;YACvB,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC;YACxC,MAAM,KAAK,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;YAEpC,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;YACrE,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YACnH,+EAA+E;YAC/E,+EAA+E;YAC/E,MAAM,UAAU,GAAG,UAAU,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;YAEpD,MAAM,aAAa,GAAG,uBAAuB,CAAC,UAAU,CAAC,CAAC;YAC1D,MAAM,QAAQ,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;YAChD,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YAC7D,MAAM,KAAK,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;YAE1C,kFAAkF;YAClF,8EAA8E;YAC9E,MAAM,MAAM,GAAG,MAAM,kBAAkB,CACrC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,EAC/B,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,EACjC,EAAE,QAAQ,EAAE,0BAA0B,EAAE,WAAW,EAAE,6BAA6B,EAAE,CACrF,CAAC;YACF,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;YACpI,MAAM,eAAe,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;YAEvJ,OAAO;gBACL,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,GAAG,EAAE,QAAQ,CAAC,GAAG;gBACjB,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvD,SAAS;gBACT,KAAK;gBACL,aAAa;gBACb,KAAK;gBACL,MAAM;gBACN,eAAe;gBACf,IAAI,EACF,ggCAAggC;aACngC,CAAC;QACJ,CAAC,CAAC;QACF,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK;YAAE,OAAO,MAAM,KAAK,EAAE,CAAC;QAChD,OAAO,MAAM,cAAc,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,MAAM,EAAE,sBAAsB,EAAE,EAAE,KAAK,CAAC,CAAC;IACxG,CAAC;CACF,CAAC,CAAC"}

package/dist/agent/tools/walk_pr.d.ts

@@ -0,0 +1,79 @@
+/** The keys this tool accepts. Exported so a test can pin that there is no third one — the
+ *  "no channel for the proposer's framing" property is only real while this set is {repo, number}. */
+export declare const WALK_PR_INPUT_KEYS: readonly string[];
+export declare const walkPrEntry: import("eve/tools").ToolDefinition<{
+    repo: string;
+    number: number;
+}, {
+    repo: string;
+    number: number;
+    headSha: string;
+    prSummary: string;
+    factsState: "artifact" | "cloud-status" | "not-triggered" | "unavailable";
+    factsRunId?: number | undefined;
+    factsNote: string;
+    diffChars: number;
+    diffClipped: boolean;
+    filesTouched: number;
+    narratorBrief: string;
+    factsOnlyWalkthrough: string;
+    nextStep: string;
+}> & {
+    execute(input: {
+        repo: string;
+        number: number;
+    }, ctx: import("eve/tools").ToolContext): Promise<{
+        repo: string;
+        number: number;
+        headSha: string;
+        prSummary: string;
+        factsState: "artifact" | "cloud-status" | "not-triggered" | "unavailable";
+        factsRunId?: number | undefined;
+        factsNote: string;
+        diffChars: number;
+        diffClipped: boolean;
+        filesTouched: number;
+        narratorBrief: string;
+        factsOnlyWalkthrough: string;
+        nextStep: string;
+    }>;
+};
+declare const _default: import("eve/tools").DynamicSentinel<(import("eve/tools").ToolDefinition<{
+    repo: string;
+    number: number;
+}, {
+    repo: string;
+    number: number;
+    headSha: string;
+    prSummary: string;
+    factsState: "artifact" | "cloud-status" | "not-triggered" | "unavailable";
+    factsRunId?: number | undefined;
+    factsNote: string;
+    diffChars: number;
+    diffClipped: boolean;
+    filesTouched: number;
+    narratorBrief: string;
+    factsOnlyWalkthrough: string;
+    nextStep: string;
+}> & {
+    execute(input: {
+        repo: string;
+        number: number;
+    }, ctx: import("eve/tools").ToolContext): Promise<{
+        repo: string;
+        number: number;
+        headSha: string;
+        prSummary: string;
+        factsState: "artifact" | "cloud-status" | "not-triggered" | "unavailable";
+        factsRunId?: number | undefined;
+        factsNote: string;
+        diffChars: number;
+        diffClipped: boolean;
+        filesTouched: number;
+        narratorBrief: string;
+        factsOnlyWalkthrough: string;
+        nextStep: string;
+    }>;
+}) | null>;
+export default _default;
+//# sourceMappingURL=walk_pr.d.ts.map

package/dist/agent/tools/walk_pr.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"walk_pr.d.ts","sourceRoot":"","sources":["../../../agent/tools/walk_pr.ts"],"names":[],"mappings":"AAgBA;sGACsG;AACtG,eAAO,MAAM,kBAAkB,EAAE,SAAS,MAAM,EAAuB,CAAC;AAQxE,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAoHtB,CAAC"}

package/dist/agent/tools/walk_pr.js

@@ -0,0 +1,133 @@
+// walk_pr GATHERS the decision inputs for "walk me through PR #N". Read-only, open tier, host-side with a READ-scoped credential. ⭐ It is PHASE ONE OF TWO, and the split is the SECURITY DESIGN rather than a UX choice: the session that authored a change is the least-trusted context for vouching for it, so it cannot SUPPLY the facts — there is no input field, and they are fetched host-side from a provenance the session cannot author: a CODEOWNED workflow's own artifact, or a document a commit status vouches for by sha256 — cannot FRAME the review, because the schema is exactly `{repo, number}` and a test pins the key set, and cannot RENDER the answer, because phase two re-derives the facts and code-renders the document.
+// The narrator is an isolated declared subagent with no parent history whose own tools are all disabled, so an instruction embedded in the diff cannot make it fetch the proposer's context. The DELEGATION is a model act, because eve exposes no host-side seam for invoking a declared subagent — so THAT the model delegates is MEASURED from spend rows no tool input can author, while THAT the verdict is relayed faithfully stays relayed, and the document says so rather than implying otherwise.
+import { defineDynamic, defineTool } from "eve/tools";
+import { z } from "zod";
+import { resolveAccessFor } from "../access/request.js";
+import { preRegisterDynamicEntry } from "../access/window-gated.js";
+import { repoAllowed } from "../scm/provider.js";
+import { assertGithubActingIdentity } from "../scm/github-acting-identity.js";
+import { githubWorkMount } from "../scm/github-work.js";
+import { describePrStatus, fetchPullRequestStatus, prStateLabel, resolveReadToken } from "../scm/pr-status.js";
+import { fetchPrDiff } from "../scm/pr-diff.js";
+import { fetchConfigFacts } from "../review/facts-artifact.js";
+import { buildNarratorBrief, renderWalkthrough } from "../review/pr-walkthrough.js";
+/** The keys this tool accepts. Exported so a test can pin that there is no third one — the
+ *  "no channel for the proposer's framing" property is only real while this set is {repo, number}. */
+export const WALK_PR_INPUT_KEYS = ["repo", "number"];
+const inputSchema = z.object({
+    repo: z.string().describe("Repository as 'owner/repo'."),
+    number: z.number().int().positive().describe("PR number."),
+});
+// FACTORED (see check_pr_status.ts): a top-level const, never an inline literal in the resolver.
+export const walkPrEntry = defineTool({
+    description: "Gather everything needed to walk a human through a pull request before they merge it: the PR's state, its diff, and the resolved-config FACTS (effective access per scope, domain rosters, declared webhooks, standing instructions) read either from the config-diff workflow's own artifact or from the `oe/config-diff` commit status that vouches for a cloud run's output by sha256. Returns a `narratorBrief` — pass it verbatim as `message` to fresh_eyes_review, then call post_pr_walkthrough with that verdict. Read-only, no approval needed. It deliberately takes no free-text input: you cannot add your own framing to what the independent reviewer sees.",
+    inputSchema,
+    outputSchema: z.object({
+        repo: z.string(),
+        number: z.number(),
+        headSha: z.string(),
+        prSummary: z.string(),
+        factsState: z
+            .enum(["artifact", "cloud-status", "not-triggered", "unavailable"])
+            .describe("artifact = real config facts from a CODEOWNED Actions workflow run; cloud-status = real config facts from a cloud run, vouched for by an " +
+            "`oe/config-diff` commit status and verified against the sha256 it names; not-triggered = this PR changes no config (a computed absence); unavailable = UNKNOWN."),
+        factsRunId: z.number().optional().describe("The config-diff workflow run the facts came from. Actions provenance only — a cloud-status walkthrough has no run id. Pass to post_pr_walkthrough so a staleness check is possible."),
+        factsNote: z.string().describe("One line: where the facts came from, or why there are none."),
+        diffChars: z.number(),
+        diffClipped: z.boolean(),
+        filesTouched: z.number(),
+        narratorBrief: z.string().describe("Pass this verbatim to fresh_eyes_review as `message`. Do not edit, summarize or add to it."),
+        factsOnlyWalkthrough: z.string().describe("The walkthrough as it stands with NO narration — every interpretive section renders NOT COMPUTABLE."),
+        nextStep: z.string(),
+    }),
+    // NO `approval:` — see check_pr_status.ts. Read-only, so an absent approval is the same answer
+    // `never()` gave, and a dynamic-tool approval fn would not survive a replay lookup.
+    async execute(input, ctx) {
+        const access = resolveAccessFor(ctx);
+        if (!repoAllowed(input.repo, access.repos)) {
+            throw new Error(`repo "${input.repo}" is not granted to this channel. Allowed: ${access.repos.length ? access.repos.join(", ") : "(none)"}. ` +
+                `Grant it via a bundle's repos (see agent/access/bundles.ts).`);
+        }
+        // The acting-identity gate, after the repo fence and before the token — see check_pr_status.ts
+        // for why that order, and scm/github-acting-identity.ts for what the gate decides. This verb
+        // returns the PR's whole DIFF, so an unrefused own-account ask here reads the org's view of the
+        // member's own question in more detail than any other GitHub read.
+        await assertGithubActingIdentity(ctx, "walk_pr");
+        const token = await resolveReadToken(input.repo);
+        // Both reads hit the same endpoint family and neither depends on the other's result, so they run
+        // together — a walkthrough is an interactive ask and two serial round trips is a visible stall.
+        const [status, diff] = await Promise.all([
+            fetchPullRequestStatus({ repo: input.repo, number: input.number, token }),
+            fetchPrDiff({ repo: input.repo, number: input.number, token }),
+        ]);
+        const facts = await fetchConfigFacts({
+            repo: input.repo,
+            headSha: diff.headSha,
+            token,
+            // A CAPPED file list must not be used to conclude "this PR touches no config" — that would be
+            // a computed-absence claim derived from an incomplete list, i.e. exactly a green produced by
+            // blindness. Withholding the list makes the outcome `unavailable` (an UNKNOWN) instead.
+            ...(diff.filesCapped ? {} : { changedPaths: diff.files }),
+        });
+        const pr = {
+            repo: input.repo,
+            number: input.number,
+            url: status.url,
+            title: status.title,
+            stateLabel: prStateLabel(status),
+            baseRef: diff.baseRef,
+            headSha: diff.headSha,
+        };
+        return {
+            repo: input.repo,
+            number: input.number,
+            headSha: diff.headSha,
+            prSummary: describePrStatus(status),
+            factsState: facts.kind,
+            ...(facts.kind === "artifact" ? { factsRunId: facts.provenance.runId } : {}),
+            factsNote: facts.kind === "artifact"
+                ? `config-diff run ${facts.provenance.runId} (${facts.provenance.runUrl}), artifact "${facts.provenance.artifactName}", conclusion ${facts.provenance.runConclusion ?? "pending"}`
+                : facts.kind === "cloud-status"
+                    ? `the "${facts.provenance.statusContext}" commit status on ${facts.provenance.headSha.slice(0, 12)}` +
+                        `${facts.provenance.postedBy ? ` (posted by ${facts.provenance.postedBy})` : ""}, vouching for ${facts.provenance.documentUrl} ` +
+                        `by sha256:${facts.provenance.digest} — verified before the facts were read`
+                    : facts.reason,
+            diffChars: diff.diffChars,
+            diffClipped: diff.diffClipped,
+            filesTouched: diff.files.length,
+            narratorBrief: buildNarratorBrief({ pr, diff, facts }),
+            factsOnlyWalkthrough: renderWalkthrough({ pr, diff, facts }),
+            nextStep: `Call fresh_eyes_review with message = narratorBrief (verbatim), then post_pr_walkthrough with repo, number, ` +
+                `narration = that verdict, and factsRunId = ${facts.kind === "artifact"
+                    ? facts.provenance.runId
+                    : facts.kind === "cloud-status"
+                        ? "(omit — these facts come from a commit status, which has no workflow run id)"
+                        : "(omit — there are no facts)"}. ` +
+                `Do not write the walkthrough yourself: post_pr_walkthrough renders it from the facts it fetches itself, and your prose would not be labelled as a model opinion.`,
+        };
+    },
+    // The DIFF inside the narrator brief is already wrapped in the untrusted envelope by the builder, so the structural scaffold here stays trusted text and only third-party bytes are fenced.
+    // This is a DYNAMIC tool, so the authored projection survives replay only through the durable descriptor the pre-registration below fills; the same call records the mounted name for the connector-wrap classification (access/untrusted-projection.ts). There is no patch-side backstop — OPE-378 retired it.
+    toModelOutput(output) {
+        const o = output;
+        return {
+            type: "text",
+            value: [
+                `PR: ${o.prSummary}`,
+                `Config facts: ${o.factsState} — ${o.factsNote}`,
+                "",
+                "── BRIEF FOR fresh_eyes_review (pass as `message`, verbatim) ──",
+                o.narratorBrief,
+                "",
+                `── NEXT ── ${o.nextStep}`,
+            ].join("\n"),
+        };
+    },
+});
+preRegisterDynamicEntry("walk_pr", "_single", walkPrEntry);
+export default defineDynamic({
+    events: {
+        "session.started": (_event, ctx) => (githubWorkMount(ctx) ? walkPrEntry : null),
+    },
+});
+//# sourceMappingURL=walk_pr.js.map

package/dist/agent/tools/walk_pr.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"walk_pr.js","sourceRoot":"","sources":["../../../agent/tools/walk_pr.ts"],"names":[],"mappings":"AAAA,wtBAAwtB;AACxtB,4eAA4e;AAE5e,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACtD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAEpE,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,0BAA0B,EAAE,MAAM,kCAAkC,CAAC;AAC9E,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAC/G,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAEpF;sGACsG;AACtG,MAAM,CAAC,MAAM,kBAAkB,GAAsB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AAExE,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,6BAA6B,CAAC;IACxD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC;CAC3D,CAAC,CAAC;AAEH,iGAAiG;AACjG,MAAM,CAAC,MAAM,WAAW,GAAG,UAAU,CAAC;IACpC,WAAW,EACT,4oBAA4oB;IAC9oB,WAAW;IACX,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC;QACrB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;QAClB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;QACnB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;QACrB,UAAU,EAAE,CAAC;aACV,IAAI,CAAC,CAAC,UAAU,EAAE,cAAc,EAAE,eAAe,EAAE,aAAa,CAAC,CAAC;aAClE,QAAQ,CACP,2IAA2I;YACzI,iKAAiK,CACpK;QACH,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qLAAqL,CAAC;QACjO,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,6DAA6D,CAAC;QAC7F,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;QACrB,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE;QACxB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;QACxB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,4FAA4F,CAAC;QAChI,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,qGAAqG,CAAC;QAChJ,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;KACrB,CAAC;IACF,+FAA+F;IAC/F,oFAAoF;IACpF,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG;QACtB,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CACb,SAAS,KAAK,CAAC,IAAI,8CAA8C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI;gBAC3H,8DAA8D,CACjE,CAAC;QACJ,CAAC;QACD,+FAA+F;QAC/F,6FAA6F;QAC7F,gGAAgG;QAChG,mEAAmE;QACnE,MAAM,0BAA0B,CAAC,GAAsB,EAAE,SAAS,CAAC,CAAC;QACpE,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACjD,iGAAiG;QACjG,gGAAgG;QAChG,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACvC,sBAAsB,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC;YACzE,WAAW,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC;SAC/D,CAAC,CAAC;QAEH,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC;YACnC,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,KAAK;YACL,8FAA8F;YAC9F,6FAA6F;YAC7F,wFAAwF;YACxF,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;SAC1D,CAAC,CAAC;QAEH,MAAM,EAAE,GAAG;YACT,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,UAAU,EAAE,YAAY,CAAC,MAAM,CAAC;YAChC,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAC;QAEF,OAAO;YACL,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,SAAS,EAAE,gBAAgB,CAAC,MAAM,CAAC;YACnC,UAAU,EAAE,KAAK,CAAC,IAAI;YACtB,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5E,SAAS,EACP,KAAK,CAAC,IAAI,KAAK,UAAU;gBACvB,CAAC,CAAC,mBAAmB,KAAK,CAAC,UAAU,CAAC,KAAK,KAAK,KAAK,CAAC,UAAU,CAAC,MAAM,gBAAgB,KAAK,CAAC,UAAU,CAAC,YAAY,iBAAiB,KAAK,CAAC,UAAU,CAAC,aAAa,IAAI,SAAS,EAAE;gBAClL,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,cAAc;oBAC7B,CAAC,CAAC,QAAQ,KAAK,CAAC,UAAU,CAAC,aAAa,sBAAsB,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;wBACnG,GAAG,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,eAAe,KAAK,CAAC,UAAU,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,EAAE,kBAAkB,KAAK,CAAC,UAAU,CAAC,WAAW,GAAG;wBAChI,aAAa,KAAK,CAAC,UAAU,CAAC,MAAM,wCAAwC;oBAC9E,CAAC,CAAC,KAAK,CAAC,MAAM;YACpB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM;YAC/B,aAAa,EAAE,kBAAkB,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;YACtD,oBAAoB,EAAE,iBAAiB,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;YAC5D,QAAQ,EACN,8GAA8G;gBAC9G,8CACE,KAAK,CAAC,IAAI,KAAK,UAAU;oBACvB,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK;oBACxB,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,cAAc;wBAC7B,CAAC,CAAC,8EAA8E;wBAChF,CAAC,CAAC,6BACR,IAAI;gBACJ,kKAAkK;SACrK,CAAC;IACJ,CAAC;IACD,4LAA4L;IAC5L,gTAAgT;IAChT,aAAa,CAAC,MAAM;QAClB,MAAM,CAAC,GAAG,MAA+G,CAAC;QAC1H,OAAO;YACL,IAAI,EAAE,MAAe;YACrB,KAAK,EAAE;gBACL,OAAO,CAAC,CAAC,SAAS,EAAE;gBACpB,iBAAiB,CAAC,CAAC,UAAU,MAAM,CAAC,CAAC,SAAS,EAAE;gBAChD,EAAE;gBACF,iEAAiE;gBACjE,CAAC,CAAC,aAAa;gBACf,EAAE;gBACF,cAAc,CAAC,CAAC,QAAQ,EAAE;aAC3B,CAAC,IAAI,CAAC,IAAI,CAAC;SACb,CAAC;IACJ,CAAC;CACF,CAAC,CAAC;AACH,uBAAuB,CAAC,SAAS,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;AAE3D,eAAe,aAAa,CAAC;IAC3B,MAAM,EAAE;QACN,iBAAiB,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,eAAe,CAAC,GAAsB,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;KACnG;CACF,CAAC,CAAC"}