@open-everywhere/provider-notion 0.1.0

package/dist/agent/channels/notion-ingress.d.ts

@@ -0,0 +1,64 @@
+import { type NotionSigningKey } from "./notion-api.js";
+export declare const NOTION_INGRESS_SOURCE = "notion";
+declare const NOTION_INGRESS_SCHEMA_VERSION: 1;
+export declare const NOTION_INGRESS_MAX_BODY_BYTES: number;
+export interface ProjectedNotionEvent {
+    readonly id: string;
+    readonly timestamp?: string;
+    readonly type?: string;
+    readonly event_type?: string;
+    readonly workspace_id?: string;
+    readonly entity?: {
+        readonly id?: string;
+        readonly type?: string;
+    };
+    readonly data?: {
+        readonly page_id?: string;
+        readonly parent?: {
+            readonly id?: string;
+            readonly type?: string;
+        };
+        readonly updated_blocks?: readonly {
+            readonly id?: string;
+        }[];
+    };
+    readonly authors?: readonly {
+        readonly id?: string;
+        readonly type?: string;
+    }[];
+}
+export interface NotionIngressPayload {
+    readonly schemaVersion: typeof NOTION_INGRESS_SCHEMA_VERSION;
+    readonly event: ProjectedNotionEvent;
+}
+export interface NotionIngressKey {
+    readonly source: typeof NOTION_INGRESS_SOURCE;
+    readonly authorityId: string;
+    readonly deliveryId: string;
+}
+export interface NotionIngressWrite extends NotionIngressKey {
+    readonly payloadJson: string;
+    readonly receivedAt: string;
+}
+export interface AcknowledgeNotionIngressDeps {
+    readonly org: string;
+    readonly signingKeys: readonly NotionSigningKey[];
+    readonly allowUnverified: boolean;
+    readonly enqueue: (org: string, write: NotionIngressWrite) => Promise<boolean>;
+    /** The internal recovery route has both durable secret custody and a resolvable own URL. */
+    readonly drainAvailable: boolean;
+    readonly drain: (key: NotionIngressKey) => Promise<void>;
+    readonly waitUntil: (promise: Promise<unknown>) => void;
+    readonly now?: () => Date;
+}
+export declare function decodeNotionIngressPayload(payloadJson: string): NotionIngressPayload | undefined;
+/**
+ * Authenticate, project and durably accept one public Notion delivery.
+ *
+ * `409 + x-oe-notion-ingress:synchronous` is an internal hand-off to the existing route for the
+ * subscription handshake and the explicit unsigned development hatch. The live route consumes it;
+ * it is never returned to Notion.
+ */
+export declare function acknowledgeNotionIngress(rawBody: string, signatureHeader: string | null, deps: AcknowledgeNotionIngressDeps): Promise<Response>;
+export {};
+//# sourceMappingURL=notion-ingress.d.ts.map

package/dist/agent/channels/notion-ingress.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"notion-ingress.d.ts","sourceRoot":"","sources":["../../../agent/channels/notion-ingress.ts"],"names":[],"mappings":"AAKA,OAAO,EAAwD,KAAK,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAE9G,eAAO,MAAM,qBAAqB,WAAW,CAAC;AAC9C,QAAA,MAAM,6BAA6B,EAAG,CAAU,CAAC;AACjD,eAAO,MAAM,6BAA6B,QAAa,CAAC;AAExD,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,MAAM,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACnE,QAAQ,CAAC,IAAI,CAAC,EAAE;QACd,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE;YAAE,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QACnE,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS;YAAE,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAA;SAAE,EAAE,CAAC;KAC/D,CAAC;IACF,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS;QAAE,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CAChF;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,aAAa,EAAE,OAAO,6BAA6B,CAAC;IAC7D,QAAQ,CAAC,KAAK,EAAE,oBAAoB,CAAC;CACtC;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,MAAM,EAAE,OAAO,qBAAqB,CAAC;IAC9C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,kBAAmB,SAAQ,gBAAgB;IAC1D,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,WAAW,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAClD,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;IAClC,QAAQ,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,kBAAkB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/E,4FAA4F;IAC5F,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,KAAK,EAAE,CAAC,GAAG,EAAE,gBAAgB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACzD,QAAQ,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC;IACxD,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAC3B;AAgED,wBAAgB,0BAA0B,CAAC,WAAW,EAAE,MAAM,GAAG,oBAAoB,GAAG,SAAS,CAShG;AAMD;;;;;;GAMG;AACH,wBAAsB,wBAAwB,CAC5C,OAAO,EAAE,MAAM,EACf,eAAe,EAAE,MAAM,GAAG,IAAI,EAC9B,IAAI,EAAE,4BAA4B,GACjC,OAAO,CAAC,QAAQ,CAAC,CAuCnB"}

package/dist/agent/channels/notion-ingress.js

@@ -0,0 +1,130 @@
+// DURABLE NOTION INGRESS — the authenticated acceptance boundary in front of the expensive
+// comment enrichment and Eve dispatch path. A 200 from this module means the verified, projected
+// event is in the operational store. `waitUntil` is only a low-latency nudge; recovery comes from
+// the persisted row and the minute drain schedule, never from the lifetime of this invocation.
+import { gateNotionDeliveryAcross, parseVerificationHandshake } from "./notion-api.js";
+export const NOTION_INGRESS_SOURCE = "notion";
+const NOTION_INGRESS_SCHEMA_VERSION = 1;
+export const NOTION_INGRESS_MAX_BODY_BYTES = 256 * 1024;
+function text(value) {
+    return typeof value === "string" && value.length > 0 ? value : undefined;
+}
+function record(value) {
+    return value !== null && typeof value === "object" && !Array.isArray(value)
+        ? value
+        : undefined;
+}
+/** Project exactly the fields consumed by the conversational and structural processors. */
+function projectNotionIngressEvent(value) {
+    const input = record(value);
+    const id = text(input?.id);
+    if (!input || !id)
+        return undefined;
+    const entityIn = record(input.entity);
+    const entityId = text(entityIn?.id);
+    const entityType = text(entityIn?.type);
+    const entity = entityIn ? { ...(entityId ? { id: entityId } : {}), ...(entityType ? { type: entityType } : {}) } : undefined;
+    const dataIn = record(input.data);
+    const parentIn = record(dataIn?.parent);
+    const parentId = text(parentIn?.id);
+    const parentType = text(parentIn?.type);
+    const parent = parentIn ? { ...(parentId ? { id: parentId } : {}), ...(parentType ? { type: parentType } : {}) } : undefined;
+    const updatedBlocks = Array.isArray(dataIn?.updated_blocks)
+        ? dataIn.updated_blocks.map((item) => {
+            const id = text(record(item)?.id);
+            return id ? { id } : {};
+        })
+        : undefined;
+    const pageId = text(dataIn?.page_id);
+    const data = dataIn
+        ? {
+            ...(pageId ? { page_id: pageId } : {}),
+            ...(parent ? { parent } : {}),
+            ...(updatedBlocks ? { updated_blocks: updatedBlocks } : {}),
+        }
+        : undefined;
+    const authors = Array.isArray(input.authors)
+        ? input.authors.map((item) => {
+            const author = record(item);
+            const authorId = text(author?.id);
+            const authorType = text(author?.type);
+            return { ...(authorId ? { id: authorId } : {}), ...(authorType ? { type: authorType } : {}) };
+        })
+        : undefined;
+    return {
+        id,
+        ...(text(input.timestamp) ? { timestamp: text(input.timestamp) } : {}),
+        ...(text(input.type) ? { type: text(input.type) } : {}),
+        ...(text(input.event_type) ? { event_type: text(input.event_type) } : {}),
+        ...(text(input.workspace_id) ? { workspace_id: text(input.workspace_id) } : {}),
+        ...(entity ? { entity } : {}),
+        ...(data ? { data } : {}),
+        ...(authors ? { authors } : {}),
+    };
+}
+export function decodeNotionIngressPayload(payloadJson) {
+    try {
+        const parsed = record(JSON.parse(payloadJson));
+        if (parsed?.schemaVersion !== NOTION_INGRESS_SCHEMA_VERSION)
+            return undefined;
+        const event = projectNotionIngressEvent(parsed.event);
+        return event ? { schemaVersion: NOTION_INGRESS_SCHEMA_VERSION, event } : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+function synchronousResponse() {
+    return new Response("synchronous", { status: 409, headers: { "x-oe-notion-ingress": "synchronous" } });
+}
+/**
+ * Authenticate, project and durably accept one public Notion delivery.
+ *
+ * `409 + x-oe-notion-ingress:synchronous` is an internal hand-off to the existing route for the
+ * subscription handshake and the explicit unsigned development hatch. The live route consumes it;
+ * it is never returned to Notion.
+ */
+export async function acknowledgeNotionIngress(rawBody, signatureHeader, deps) {
+    if (Buffer.byteLength(rawBody, "utf8") > NOTION_INGRESS_MAX_BODY_BYTES) {
+        return new Response("payload too large", { status: 413 });
+    }
+    if (parseVerificationHandshake(rawBody))
+        return synchronousResponse();
+    const gate = gateNotionDeliveryAcross(deps.signingKeys, rawBody, signatureHeader, deps.allowUnverified);
+    if (gate.rejection)
+        return new Response(gate.rejection, { status: 401 });
+    if (!gate.verified || !gate.credentialId)
+        return synchronousResponse();
+    if (!deps.drainAvailable)
+        return new Response("durable ingress drain unavailable", { status: 503 });
+    let parsed;
+    try {
+        parsed = JSON.parse(rawBody);
+    }
+    catch {
+        return new Response("bad json", { status: 400 });
+    }
+    const event = projectNotionIngressEvent(parsed);
+    if (!event)
+        return new Response("missing event id", { status: 400 });
+    const key = {
+        source: NOTION_INGRESS_SOURCE,
+        authorityId: gate.credentialId,
+        deliveryId: event.id,
+    };
+    const write = {
+        ...key,
+        payloadJson: JSON.stringify({ schemaVersion: NOTION_INGRESS_SCHEMA_VERSION, event }),
+        receivedAt: (deps.now ?? (() => new Date()))().toISOString(),
+    };
+    try {
+        await deps.enqueue(deps.org, write);
+    }
+    catch {
+        return new Response("durable ingress unavailable", { status: 503 });
+    }
+    const drain = Promise.resolve().then(() => deps.drain(key));
+    deps.waitUntil(drain);
+    return new Response("ok", { status: 200 });
+}
+//# sourceMappingURL=notion-ingress.js.map

package/dist/agent/channels/notion-ingress.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"notion-ingress.js","sourceRoot":"","sources":["../../../agent/channels/notion-ingress.ts"],"names":[],"mappings":"AAAA,2FAA2F;AAC3F,iGAAiG;AACjG,kGAAkG;AAClG,+FAA+F;AAE/F,OAAO,EAAE,wBAAwB,EAAE,0BAA0B,EAAyB,MAAM,iBAAiB,CAAC;AAE9G,MAAM,CAAC,MAAM,qBAAqB,GAAG,QAAQ,CAAC;AAC9C,MAAM,6BAA6B,GAAG,CAAU,CAAC;AACjD,MAAM,CAAC,MAAM,6BAA6B,GAAG,GAAG,GAAG,IAAI,CAAC;AA6CxD,SAAS,IAAI,CAAC,KAAc;IAC1B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3E,CAAC;AAED,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACzE,CAAC,CAAE,KAA2C;QAC9C,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,2FAA2F;AAC3F,SAAS,yBAAyB,CAAC,KAAc;IAC/C,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5B,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC3B,IAAI,CAAC,KAAK,IAAI,CAAC,EAAE;QAAE,OAAO,SAAS,CAAC;IAEpC,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACpC,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAE7H,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACpC,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7H,MAAM,aAAa,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,cAAc,CAAC;QACzD,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YACjC,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;YAClC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1B,CAAC,CAAC;QACJ,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,MAAM;QACjB,CAAC,CAAC;YACE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7B,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5D;QACH,CAAC,CAAC,SAAS,CAAC;IAEd,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;QAC1C,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YACzB,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;YAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAClC,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACtC,OAAO,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QAChG,CAAC,CAAC;QACJ,CAAC,CAAC,SAAS,CAAC;IAEd,OAAO;QACL,EAAE;QACF,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/E,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7B,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzB,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,WAAmB;IAC5D,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;QAC/C,IAAI,MAAM,EAAE,aAAa,KAAK,6BAA6B;YAAE,OAAO,SAAS,CAAC;QAC9E,MAAM,KAAK,GAAG,yBAAyB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACtD,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,6BAA6B,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACrF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB;IAC1B,OAAO,IAAI,QAAQ,CAAC,aAAa,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,qBAAqB,EAAE,aAAa,EAAE,EAAE,CAAC,CAAC;AACzG,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,OAAe,EACf,eAA8B,EAC9B,IAAkC;IAElC,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,6BAA6B,EAAE,CAAC;QACvE,OAAO,IAAI,QAAQ,CAAC,mBAAmB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,0BAA0B,CAAC,OAAO,CAAC;QAAE,OAAO,mBAAmB,EAAE,CAAC;IAEtE,MAAM,IAAI,GAAG,wBAAwB,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,eAAe,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;IACxG,IAAI,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IACzE,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,YAAY;QAAE,OAAO,mBAAmB,EAAE,CAAC;IACvE,IAAI,CAAC,IAAI,CAAC,cAAc;QAAE,OAAO,IAAI,QAAQ,CAAC,mCAAmC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAEpG,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,QAAQ,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IACnD,CAAC;IACD,MAAM,KAAK,GAAG,yBAAyB,CAAC,MAAM,CAAC,CAAC;IAChD,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,QAAQ,CAAC,kBAAkB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAErE,MAAM,GAAG,GAAqB;QAC5B,MAAM,EAAE,qBAAqB;QAC7B,WAAW,EAAE,IAAI,CAAC,YAAY;QAC9B,UAAU,EAAE,KAAK,CAAC,EAAE;KACrB,CAAC;IACF,MAAM,KAAK,GAAuB;QAChC,GAAG,GAAG;QACN,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,aAAa,EAAE,6BAA6B,EAAE,KAAK,EAAiC,CAAC;QACnH,UAAU,EAAE,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,WAAW,EAAE;KAC7D,CAAC;IACF,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,QAAQ,CAAC,6BAA6B,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IACtE,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5D,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACtB,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;AAC7C,CAAC"}

package/dist/agent/channels/notion-message-ops.d.ts

@@ -0,0 +1,3 @@
+import type { SurfaceMessageOps } from "@open-everywhere/core/agent/adapter-api.js";
+export declare const notionMessageOps: SurfaceMessageOps;
+//# sourceMappingURL=notion-message-ops.d.ts.map

package/dist/agent/channels/notion-message-ops.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"notion-message-ops.d.ts","sourceRoot":"","sources":["../../../agent/channels/notion-message-ops.ts"],"names":[],"mappings":"AA0CA,OAAO,KAAK,EAAE,iBAAiB,EAAgB,MAAM,4CAA4C,CAAC;AAsClG,eAAO,MAAM,gBAAgB,EAAE,iBA2D9B,CAAC"}

package/dist/agent/channels/notion-message-ops.js

@@ -0,0 +1,126 @@
+// notion-message-ops — Notion's SurfaceMessageOps (OPE-1043, the remaining slice of OPE-899's
+// class): the ancillary message ops core features dispatch through channels/surface-message-ops.ts.
+// Before this file, Notion registered none, so the stop acknowledgement (hooks/turn-anchor.ts's
+// `postSurfaceText`) resolved nothing on a Notion turn — OPE-989 shipped the stop CONTROL itself
+// (notion-stop.ts, a bare `stop` comment), it was just invisible: a person who used it saw the agent
+// go quiet and read nothing telling them it had stood down.
+//
+//   - postText    → a FRESH top-level comment on the page (`createPageComment`, notion-api.ts) when
+//                   `opts?.replyToMessageId` is absent — the shape every call on this ticket's own
+//                   path takes (turn-anchor.ts never passes a reply anchor for a stop note). When
+//                   present, this arm resolves the NAMED comment's own `discussion_id` (one extra
+//                   fetch, `retrieveComment`) and replies into that same discussion instead
+//                   (`createCommentReply`) — falling back to a fresh page comment only when that
+//                   comment carries no discussion (never silently drops the anchor request).
+//   - editMessage → `updateComment` (`PATCH /v1/comments/{id}`), confirmed live 2026-08-23
+//                   (developers.notion.com/reference/update-a-comment). `edit_reply`'s own seam
+//                   (`PostArm.editMessage`, a model-facing tool capability with its own ownership/
+//                   locus rules) now wires to the same endpoint too — notion-post-arm.ts's
+//                   `liveNotionEditComment` (OPE-1046) — a separate, reviewable change from this one.
+//   - postFiles   → uploads each file through Notion's two-step flow (`uploadNotionFile`,
+//                   notion-api.ts: create-file-upload, then send the bytes) and attaches the
+//                   resulting `file_upload` ids to a FRESH top-level page comment
+//                   (`createPageComment`'s `attachments`) — OPE-1047. Notion caps a single comment
+//                   at 3 attachments; a larger batch is refused up front, before any byte uploads,
+//                   so a caller never pays for uploads it then has to discard.
+//   - NO `setReaction`: confirmed (2026-08-23, developers.notion.com) — Notion's public API has no
+//     reaction resource for comments at all, the same finding OPE-989 made for the stop trigger
+//     itself. Matches the manifest's existing `reactions: false` (register.ts).
+//
+// `channelId` IS THE STOP REGISTRY'S CONVERSATION KEY — `<workspace>/<page>`, not a
+// notion-message-ops-specific pair invented here. `turn-anchor.ts`'s `turnAnchorAddress` reads it off
+// `binding.anchorChannelId`, which `bindNotion` (notion-identity.ts) mints through
+// `notionConversationKey` — the SAME key `notion-stop.ts`'s `routeNotionStopComment` parses to
+// resolve the cancel. This file reuses `parseNotionConversationKey`, the composer's own documented
+// inverse, rather than writing a second parser: two derivations of the same address is exactly the
+// "silently miss" trap notion-identity.ts's own header warns about.
+//
+// CREDENTIAL RESOLUTION mirrors notion-post-arm.ts's `notionReplyCredential` (a page's domain binding
+// picks its own Notion integration; no binding falls through to the org default) — copied rather than
+// imported, for the same reason notion-identity.ts's `notionAttr`/`notionAuthOf` are local copies: a
+// three-line structural read a caller outside the post-arm's own module is expected to make itself.
+import { getConfig } from "@open-everywhere/core/agent/adapter-api.js";
+import { createPageComment, createCommentReply, updateComment, resolveNotionCredential, retrieveComment, uploadNotionFile, NOTION_MAX_ATTACHMENTS, } from "./notion-api.js";
+import { notionChannelCredentialFor } from "./notion-credentials.js";
+import { parseNotionConversationKey } from "./notion-identity.js";
+function notionDomains() {
+    try {
+        return getConfig().loadDomains();
+    }
+    catch {
+        return [];
+    }
+}
+/** Parse the `<workspace>/<page>` conversation id, or throw the same honest, naming refusal every
+ *  other surface-message-ops call gives on a malformed address — never a guessed target. */
+function requireConversation(channelId) {
+    const parsed = parseNotionConversationKey(channelId);
+    if (!parsed)
+        throw new Error(`Notion surface message ops: "${channelId}" is not a conversation id (expected "<workspace>/<page>").`);
+    return parsed;
+}
+async function requireCredential(workspaceId, pageId) {
+    const credentialId = notionChannelCredentialFor(workspaceId, pageId, notionDomains());
+    const cred = await resolveNotionCredential(credentialId);
+    if (!cred)
+        throw new Error(`Notion surface message ops: no value stored for notion credential "${credentialId ?? "channel-key"}".`);
+    return cred;
+}
+export const notionMessageOps = {
+    platform: "notion",
+    /**
+     * A fresh top-level comment on the page, or — when `opts?.replyToMessageId` names a comment that
+     * carries a `discussion_id` — a reply into that SAME discussion instead. Never guesses a
+     * discussion: a named comment this call cannot resolve (fetch failure, or a comment with no
+     * discussion of its own) falls back to the fresh-comment shape rather than dropping the request.
+     */
+    async postText(channelId, text, opts) {
+        const { workspaceId, pageId } = requireConversation(channelId);
+        const cred = await requireCredential(workspaceId, pageId);
+        if (opts?.replyToMessageId) {
+            let discussionId;
+            try {
+                discussionId = (await retrieveComment(opts.replyToMessageId, cred)).discussion_id;
+            }
+            catch {
+                discussionId = undefined;
+            }
+            if (discussionId)
+                return createCommentReply({ discussionId, text, ...cred });
+        }
+        return createPageComment({ pageId, text, ...cred });
+    },
+    /** `PATCH /v1/comments/{id}` — rewrite the comment's body in place (`updateComment`). */
+    async editMessage(channelId, messageId, text) {
+        const { workspaceId, pageId } = requireConversation(channelId);
+        const cred = await requireCredential(workspaceId, pageId);
+        await updateComment({ commentId: messageId, text, ...cred });
+    },
+    /**
+     * Upload each file through Notion's two-step flow (`uploadNotionFile`), then land them all on
+     * ONE fresh top-level page comment via `createPageComment`'s `attachments` (OPE-1047). Notion
+     * caps a single comment at {@link NOTION_MAX_ATTACHMENTS} attachments — refused up front, before
+     * any upload runs, so a too-large batch never pays for bytes it then has to discard.
+     *
+     * Always a PAGE comment, never a reply into a named discussion: `SurfaceMessageOps.postFiles`
+     * carries no `replyToMessageId` (unlike `postText`), the same "current channel" shape Discord's
+     * `postFiles` posts into.
+     *
+     * Returns the created comment's id (Notion echoes it, same as `postText`) — undefined only if
+     * the response carries none, never a guessed id.
+     */
+    async postFiles(channelId, files, comment) {
+        if (files.length > NOTION_MAX_ATTACHMENTS) {
+            throw new Error(`Notion surface message ops: at most ${NOTION_MAX_ATTACHMENTS} files per post; got ${files.length}.`);
+        }
+        const { workspaceId, pageId } = requireConversation(channelId);
+        const cred = await requireCredential(workspaceId, pageId);
+        const fileUploadIds = [];
+        for (const file of files) {
+            fileUploadIds.push(await uploadNotionFile({ filename: file.filename, contentType: file.contentType, bytes: file.bytes, ...cred }));
+        }
+        const id = await createPageComment({ pageId, text: comment ?? "", attachments: fileUploadIds, ...cred });
+        return id.length > 0 ? id : undefined;
+    },
+};
+//# sourceMappingURL=notion-message-ops.js.map

package/dist/agent/channels/notion-message-ops.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"notion-message-ops.js","sourceRoot":"","sources":["../../../agent/channels/notion-message-ops.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,oGAAoG;AACpG,gGAAgG;AAChG,iGAAiG;AACjG,qGAAqG;AACrG,4DAA4D;AAC5D,EAAE;AACF,oGAAoG;AACpG,mGAAmG;AACnG,kGAAkG;AAClG,kGAAkG;AAClG,4FAA4F;AAC5F,iGAAiG;AACjG,6FAA6F;AAC7F,2FAA2F;AAC3F,gGAAgG;AAChG,mGAAmG;AACnG,2FAA2F;AAC3F,sGAAsG;AACtG,0FAA0F;AAC1F,6FAA6F;AAC7F,kFAAkF;AAClF,mGAAmG;AACnG,mGAAmG;AACnG,+EAA+E;AAC/E,mGAAmG;AACnG,gGAAgG;AAChG,gFAAgF;AAChF,EAAE;AACF,oFAAoF;AACpF,sGAAsG;AACtG,mFAAmF;AACnF,+FAA+F;AAC/F,mGAAmG;AACnG,mGAAmG;AACnG,oEAAoE;AACpE,EAAE;AACF,sGAAsG;AACtG,sGAAsG;AACtG,qGAAqG;AACrG,oGAAoG;AAGpG,OAAO,EAAE,SAAS,EAAe,MAAM,4CAA4C,CAAC;AACpF,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,aAAa,EACb,uBAAuB,EACvB,eAAe,EACf,gBAAgB,EAChB,sBAAsB,GAEvB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAC;AACrE,OAAO,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AAElE,SAAS,aAAa;IACpB,IAAI,CAAC;QACH,OAAO,SAAS,EAAE,CAAC,WAAW,EAAE,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;4FAC4F;AAC5F,SAAS,mBAAmB,CAAC,SAAiB;IAC5C,MAAM,MAAM,GAAG,0BAA0B,CAAC,SAAS,CAAC,CAAC;IACrD,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,SAAS,6DAA6D,CAAC,CAAC;IACrI,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,WAAmB,EAAE,MAAc;IAClE,MAAM,YAAY,GAAG,0BAA0B,CAAC,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;IACtF,MAAM,IAAI,GAAG,MAAM,uBAAuB,CAAC,YAAY,CAAC,CAAC;IACzD,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,sEAAsE,YAAY,IAAI,aAAa,IAAI,CAAC,CAAC;IACpI,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAsB;IACjD,QAAQ,EAAE,QAAQ;IAElB;;;;;OAKG;IACH,KAAK,CAAC,QAAQ,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI;QAClC,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;QAC/D,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAC1D,IAAI,IAAI,EAAE,gBAAgB,EAAE,CAAC;YAC3B,IAAI,YAAgC,CAAC;YACrC,IAAI,CAAC;gBACH,YAAY,GAAG,CAAC,MAAM,eAAe,CAAC,IAAI,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC;YACpF,CAAC;YAAC,MAAM,CAAC;gBACP,YAAY,GAAG,SAAS,CAAC;YAC3B,CAAC;YACD,IAAI,YAAY;gBAAE,OAAO,kBAAkB,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;QAC/E,CAAC;QACD,OAAO,iBAAiB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,yFAAyF;IACzF,KAAK,CAAC,WAAW,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI;QAC1C,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;QAC/D,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAC1D,MAAM,aAAa,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,SAAS,CAAC,SAAS,EAAE,KAA8B,EAAE,OAAO;QAChE,IAAI,KAAK,CAAC,MAAM,GAAG,sBAAsB,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CAAC,uCAAuC,sBAAsB,wBAAwB,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;QACxH,CAAC;QACD,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;QAC/D,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAC1D,MAAM,aAAa,GAAa,EAAE,CAAC;QACnC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,aAAa,CAAC,IAAI,CAChB,MAAM,gBAAgB,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,IAAI,EAAE,CAAC,CAC/G,CAAC;QACJ,CAAC;QACD,MAAM,EAAE,GAAG,MAAM,iBAAiB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,IAAI,EAAE,EAAE,WAAW,EAAE,aAAa,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;QACzG,OAAO,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACxC,CAAC;CACF,CAAC"}

package/dist/agent/channels/notion-origin-codec.d.ts

@@ -0,0 +1,7 @@
+import type { UnifiedWakeOrigin, WakeOriginCodec } from "@open-everywhere/core/agent/adapter-api.js";
+type NotionOrigin = Extract<UnifiedWakeOrigin, {
+    platform: "notion";
+}>;
+export declare const notionWakeOriginCodec: WakeOriginCodec<NotionOrigin>;
+export {};
+//# sourceMappingURL=notion-origin-codec.d.ts.map

package/dist/agent/channels/notion-origin-codec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"notion-origin-codec.d.ts","sourceRoot":"","sources":["../../../agent/channels/notion-origin-codec.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,4CAA4C,CAAC;AAErG,KAAK,YAAY,GAAG,OAAO,CAAC,iBAAiB,EAAE;IAAE,QAAQ,EAAE,QAAQ,CAAA;CAAE,CAAC,CAAC;AAMvE,eAAO,MAAM,qBAAqB,EAAE,eAAe,CAAC,YAAY,CAgB/D,CAAC"}

package/dist/agent/channels/notion-origin-codec.js

@@ -0,0 +1,32 @@
+// The Notion UnifiedWakeOrigin codec — MOVED VERBATIM out of core's
+// channels/wake-origin-codecs.ts (OPE-114 stage 3, the first extracted arm). STORED-DATA
+// COMPATIBILITY IS THE CONTRACT: a Notion origin is JSON-serialised into the durable
+// operational store and fail-closed re-validated on read, so every behaviour here is frozen
+// by core's scripts/wake-origin-fixtures-test.ts (run from the app root with this bundle's
+// boot wiring — scripts/wake-origin-fixtures-boot.ts). Validator tolerances (typeof-only
+// optional checks, extra unknown fields) are LOAD-BEARING for rows already on disk — never
+// tighten them here.
+//
+// The `UnifiedWakeOrigin` TYPE union (including its notion arm) stays in core — it is the
+// wire schema for stored rows; only the codec BEHAVIOUR lives in the bundle, registered by
+// registerNotionProvider() (../register.ts).
+/** COLON-FREE by construction (a task windowId is `[^:]+` — core channels/window-key.ts): any colon
+ *  in a raw surface id is folded to `_`, deterministically, so spawn + ingress agree on identity. */
+const noColon = (s) => s.replace(/:/g, "_");
+export const notionWakeOriginCodec = {
+    validate: (o) => typeof o.discussionId === "string" &&
+        o.discussionId.length > 0 &&
+        (o.pageId === undefined || typeof o.pageId === "string") &&
+        (o.workspaceId === undefined || typeof o.workspaceId === "string"),
+    threadRef: (origin) => ({ channelKey: noColon(`notion/${origin.pageId ?? origin.discussionId}`), threadKey: noColon(origin.discussionId) }),
+    isThreadScoped: () => true,
+    containerId: (origin) => origin.discussionId,
+    // NO `placementRef` AND NO `carryPlacement`, AND THAT ABSENCE IS THE DECLARATION (OPE-1826). Notion
+    // keeps its placement INSIDE the conversation identity: a reply targets `discussionId`, which is
+    // exactly what `threadRef` keys on, so two origins that pass `sameUnifiedConversation` name the same
+    // discussion and cannot disagree about where the answer lands. `credentialId` is not a
+    // counter-example: it selects the integration the post is made under, never where the post lands.
+    // The position is recorded, and held to account against the live registry, by the
+    // `origin-placement-carry` row in core's identity/surface-parity.ts.
+};
+//# sourceMappingURL=notion-origin-codec.js.map

package/dist/agent/channels/notion-origin-codec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"notion-origin-codec.js","sourceRoot":"","sources":["../../../agent/channels/notion-origin-codec.ts"],"names":[],"mappings":"AAAA,oEAAoE;AACpE,yFAAyF;AACzF,qFAAqF;AACrF,4FAA4F;AAC5F,2FAA2F;AAC3F,yFAAyF;AACzF,2FAA2F;AAC3F,qBAAqB;AACrB,EAAE;AACF,0FAA0F;AAC1F,2FAA2F;AAC3F,6CAA6C;AAM7C;qGACqG;AACrG,MAAM,OAAO,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AAE5D,MAAM,CAAC,MAAM,qBAAqB,GAAkC;IAClE,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CACd,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ;QAClC,CAAC,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;QACzB,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC;QACxD,CAAC,CAAC,CAAC,WAAW,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,CAAC;IACpE,SAAS,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;IAC3I,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI;IAC1B,WAAW,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,YAAY;IAC5C,oGAAoG;IACpG,iGAAiG;IACjG,qGAAqG;IACrG,uFAAuF;IACvF,kGAAkG;IAClG,kFAAkF;IAClF,qEAAqE;CACtE,CAAC"}

package/dist/agent/channels/notion-post-arm.d.ts

@@ -0,0 +1,3 @@
+import type { PostArm } from "@open-everywhere/core/agent/adapter-api.js";
+export declare const notionPostArm: PostArm;
+//# sourceMappingURL=notion-post-arm.d.ts.map

package/dist/agent/channels/notion-post-arm.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"notion-post-arm.d.ts","sourceRoot":"","sources":["../../../agent/channels/notion-post-arm.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,OAAO,EAAiF,MAAM,4CAA4C,CAAC;AAoGzJ,eAAO,MAAM,aAAa,EAAE,OAoE3B,CAAC"}

package/dist/agent/channels/notion-post-arm.js

@@ -0,0 +1,185 @@
+// notion-post-arm — Notion's POST arm for the post-arms registry (OPE-114 stage 1c). Absorbs,
+// VERBATIM, Notion's arms out of the three reply/delivery spines: reply-post.ts (resolveReplyTarget's
+// notion case + dispatchReply's createCommentReply branch), unified-reply.ts (liveNotionPost), and
+// unified-redrive.ts (the notion describe/container cases). Every Notion reply funnels through
+// notion-api.ts createCommentReply — a NEW comment in the triggering discussion thread — under the
+// integration key resolved by resolveNotionCredential, which carries that credential's endpoint
+// rules alongside the key so the guarded fetch can refuse a call outside them.
+//
+// EDIT (OPE-1046). `PATCH /v1/comments/{id}` (`updateComment`, notion-api.ts) exists — confirmed live
+// 2026-08-23, correcting this tree's earlier "no comment-update endpoint" claim. `editMessage` below
+// resolves the credential the SAME way `notion-message-ops.ts`'s `SurfaceMessageOps.editMessage`
+// already does (OPE-1043): parse the `<workspace>/<page>` conversation key back into its two ids
+// (`parseNotionConversationKey`) and look up that page's own credential (`notionReplyCredential`,
+// already defined below for the reply arms). `messageId` is the comment id itself — the one field
+// `edit_reply`'s own-post ledger checked before this arm is ever called (channels/reply-edit.ts).
+import { createCommentReply, updateComment, resolveNotionCredential } from "./notion-api.js";
+import { notionChannelCredentialFor, NOTION_CHANNEL_CREDENTIAL, NOTION_PROVIDER } from "./notion-credentials.js";
+import { parseNotionConversationKey } from "./notion-identity.js";
+import { getConfig, resolvePartition, markNotApplied, carryFailureSignals, findConnectorCredential } from "@open-everywhere/core/agent/adapter-api.js";
+// OPE-467 — THE CREDENTIAL A REPLY POSTS UNDER, in one sentence: the credential the DELIVERY ran
+// under, which the wake stowed on the binding target / wake origin (notion-identity.ts's
+// `credential_id` attribute). The credential that fetched the comment is the credential that
+// answers it — a page shared with an integration its domain does not bind would otherwise fetch
+// under one key and reply under another whose integration was never shared the page, and
+// `createCommentReply` would throw with nobody watching.
+//
+// The page's domain binding is the FALLBACK, for a target minted before the stamp existed and for
+// proactive posts that no delivery woke. Fail-soft on a config-load error: no domains ⇒ no binding
+// ⇒ the org default, which is the pre-OPE-467 behaviour rather than a refusal.
+function notionDomains() {
+    try {
+        return getConfig().loadDomains();
+    }
+    catch {
+        return [];
+    }
+}
+function notionReplyCredential(workspaceId, pageId) {
+    return notionChannelCredentialFor(workspaceId, pageId, notionDomains());
+}
+/** MID-TURN: post back into the SAME discussion thread as a new comment (createCommentReply). */
+async function dispatchNotionReply(target, text) {
+    const credentialId = target.credentialId ?? notionReplyCredential(target.workspaceId, target.pageId);
+    // OPE-505: resolve the key WITH its endpoint rules and spread both, so the credential's fence
+    // travels with it into createCommentReply's guarded fetch.
+    const cred = await resolveNotionCredential(credentialId);
+    if (!cred) {
+        // DEFINITIVE (OPE-825): the call never leaves this host — no credential, no request — so
+        // nothing reached Notion and an identical retry is legitimate.
+        throw markNotApplied(new Error(`reply couldn't post to Notion — no value stored for notion credential "${credentialId ?? "channel-key"}".`));
+    }
+    return createCommentReply({ discussionId: target.discussionId, text, ...cred });
+}
+/** UNIFIED: POST /v1/comments { discussion_id } — the exact helper (and Notion-Version header) every
+ *  per-doc Notion reply already goes through; a supervisor session on the synthetic unified channel
+ *  has no notion channel state, so the REST call under the integration token (db:notion:channel-key)
+ *  is the reply route. The target discussionId is the frozen wake origin's — host-side, never
+ *  model-authored. */
+async function liveNotionPost(origin, text) {
+    const credentialId = origin.credentialId ?? notionReplyCredential(origin.workspaceId, origin.pageId);
+    // OPE-505: key + endpoint rules together (see dispatchNotionReply).
+    const cred = await resolveNotionCredential(credentialId);
+    if (!cred) {
+        // DEFINITIVE (OPE-825): no credential ⇒ no request ever left this host.
+        throw markNotApplied(new Error(`unified reply couldn't post to Notion — no value stored for notion credential "${credentialId ?? "channel-key"}" (discussion ${origin.discussionId})`));
+    }
+    let id;
+    try {
+        id = await createCommentReply({ discussionId: origin.discussionId, text, ...cred });
+    }
+    catch (err) {
+        // Token-free error: never echo the transport error body (defensive parity with the Linear arm).
+        // carryFailureSignals (OPE-825) carries the numeric status createCommentReply attached, so this
+        // re-wrap doesn't silently downgrade a DEFINITIVE 4xx refusal to AMBIGUOUS.
+        throw carryFailureSignals(err, new Error(`unified reply couldn't post to Notion — createCommentReply failed on discussion ${origin.discussionId}`));
+    }
+    return id || "unknown";
+}
+/**
+ * `PATCH /v1/comments/{id}` — rewrite a comment THIS deployment already posted, in place (OPE-1046).
+ * `locus.channelId` is the `<workspace>/<page>` conversation key `replyEditLocus`/`unifiedEditLocus`
+ * (channels/reply-post.ts / unified-reply.ts) compose from the target/origin's `workspaceId`/`pageId`
+ * — parsed back apart here rather than carried as two separate `EditLocus` fields, matching the
+ * SAME composite `notion-message-ops.ts` already parses for its own `editMessage` (OPE-1043).
+ *
+ * Notion 404s a comment the calling connection did not create and 403s a connection lacking
+ * insert-comment capability — both DEFINITIVE (a 4xx `updateComment` already attaches to the thrown
+ * error's `.status`, OPE-825's classifier reads it with no help from this function); a timeout or a
+ * 5xx is AMBIGUOUS. Re-wrapped token-free, matching `liveNotionPost`'s own re-wrap discipline above.
+ */
+async function liveNotionEditComment(locus, messageId, text) {
+    const parsed = parseNotionConversationKey(locus.channelId);
+    if (!parsed) {
+        // DEFINITIVE (OPE-825): a malformed locus is a host refusal before any byte leaves.
+        throw markNotApplied(new Error(`edit_reply couldn't edit the Notion comment ${messageId} — "${locus.channelId}" is not a conversation id.`));
+    }
+    const credentialId = notionReplyCredential(parsed.workspaceId, parsed.pageId);
+    const cred = await resolveNotionCredential(credentialId);
+    if (!cred) {
+        // DEFINITIVE (OPE-825): no credential ⇒ no request ever left this host.
+        throw markNotApplied(new Error(`edit_reply couldn't edit the Notion comment ${messageId} — no value stored for notion credential "${credentialId ?? "channel-key"}".`));
+    }
+    try {
+        await updateComment({ commentId: messageId, text, ...cred });
+    }
+    catch (err) {
+        // Token-free re-wrap; carryFailureSignals keeps the numeric status (and any `applied:false`)
+        // from downgrading to AMBIGUOUS across the wrap — the same discipline dispatchNotionReply/
+        // liveNotionPost above already apply.
+        throw carryFailureSignals(err, new Error(`edit_reply couldn't edit the Notion comment ${messageId} — updateComment failed`));
+    }
+}
+export const notionPostArm = {
+    platform: "notion",
+    resolveTarget: (bag) => {
+        // Notion posts into the triggering comment's discussion (bindNotion.target.discussionId).
+        const discussionId = bag.str("discussionId");
+        if (!discussionId)
+            return null;
+        // `pageId` rides the binding target (notion-identity.ts bindNotion); the workspace comes off the
+        // partition. Both are CONTEXT for credential selection only — the post target stays the
+        // discussion. Fail-soft: an unresolvable partition leaves the workspace absent, and the page
+        // alone still resolves a domain through the roster tier.
+        let workspaceId;
+        try {
+            workspaceId = resolvePartition(bag.ctx).workspace;
+        }
+        catch {
+            workspaceId = undefined;
+        }
+        const pageId = bag.str("pageId");
+        // The delivery's own integration (bindNotion carries it off the `credential_id` auth attribute)
+        // — the reply posts under the credential that fetched, never a re-derivation that agrees by luck.
+        const credentialId = bag.str("credentialId");
+        return {
+            platform: "notion",
+            discussionId,
+            ...(pageId ? { pageId } : {}),
+            ...(workspaceId ? { workspaceId } : {}),
+            ...(credentialId ? { credentialId } : {}),
+        };
+    },
+    dispatchReply: (target, text) => dispatchNotionReply(target, text),
+    dispatchUnified: (origin, text, deps) => (deps.postNotion ?? liveNotionPost)(origin, text),
+    // EDIT (OPE-1046): `updateComment` on the address `replyEditLocus`/`unifiedEditLocus` compose from
+    // the target/origin's `workspaceId`/`pageId` — see `liveNotionEditComment` above.
+    editMessage: (locus, messageId, text) => liveNotionEditComment(locus, messageId, text),
+    // 🔴 CAN THAT EDIT ACTUALLY BE ISSUED HERE? (OPE-1753.) `editMessage` above PATCHes
+    // `/v1/comments/{id}`, and this deployment's Notion channel key declares `GET,POST` on purpose —
+    // "a DELETE or PATCH can never be issued under the channel key" is that rule's own stated point.
+    // So the endpoint fence refuses every edit before a byte leaves, and the should-be-edit policy,
+    // which could only see that `editMessage` EXISTS, went on steering the seat at a verb that cannot
+    // work: on soak `soak-2026-09-12-a` that cost a refusal loop and the duplicate post behind it.
+    // This answers the narrower question the policy actually needs — is PATCH within the resolved
+    // credential's declared methods?
+    // 🔴 IT READS THE RULES, IT DOES NOT WIDEN THEM. The endpoint declaration is security posture and
+    // stays exactly as it is; this only stops the host OFFERING an edit the fence will refuse.
+    // FAIL-OPEN in both directions that are not a positive refusal: an unresolvable locus or credential
+    // answers true and leaves the pre-OPE-1753 behaviour, and a credential with NO declared methods is
+    // unnarrowed, so every method is allowed.
+    // 🔴 IT READS THE DECLARATION, NEVER THE SECRET. `resolveNotionCredential` would answer the same
+    // question, but it calls `getSecretVia` — a broker read that fetches the live integration key,
+    // holds it in memory, and on an unstamped broker appends a `credential unresolved` audit row. This
+    // predicate runs on every fold evaluation in a Notion conversation, and the question it asks is
+    // answerable from the static catalogue alone: which methods did the operator declare? The member's
+    // own contract in `channels/post-arms.ts` says READ-ONLY and cheap, and fetching a key to read a
+    // config field is neither.
+    editReachable: async (locus) => {
+        const parsed = parseNotionConversationKey(locus.channelId);
+        if (!parsed)
+            return true;
+        // 🔴 `undefined` MEANS THE DEFAULT KEY, NOT "NO KEY". `notionChannelCredentialFor` answers
+        // undefined whenever the page's domain declares no per-domain override, which is the ORDINARY
+        // case — and `resolveNotionCredential` reads that as `NOTION_CHANNEL_CREDENTIAL`, the very key
+        // whose GET,POST rules this predicate exists to read. Treating undefined as "cannot tell" and
+        // failing open here disabled the whole fix on every default-credential page; `notion-post-arm-
+        // test.ts` §5 caught exactly that.
+        const credentialId = notionReplyCredential(parsed.workspaceId, parsed.pageId) ?? NOTION_CHANNEL_CREDENTIAL;
+        const methods = findConnectorCredential(NOTION_PROVIDER, credentialId)?.endpoints?.methods;
+        return methods === undefined || methods.includes("PATCH");
+    },
+    describeRedriveTarget: (origin) => `notion discussion ${origin.discussionId}`,
+    redriveContainerId: (origin) => origin.discussionId,
+};
+//# sourceMappingURL=notion-post-arm.js.map

package/dist/agent/channels/notion-post-arm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"notion-post-arm.js","sourceRoot":"","sources":["../../../agent/channels/notion-post-arm.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,sGAAsG;AACtG,mGAAmG;AACnG,+FAA+F;AAC/F,mGAAmG;AACnG,gGAAgG;AAChG,+EAA+E;AAC/E,EAAE;AACF,sGAAsG;AACtG,qGAAqG;AACrG,iGAAiG;AACjG,iGAAiG;AACjG,kGAAkG;AAClG,kGAAkG;AAClG,kGAAkG;AAElG,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAC7F,OAAO,EAAE,0BAA0B,EAAE,yBAAyB,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AACjH,OAAO,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AAClE,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,cAAc,EAAE,mBAAmB,EAAE,uBAAuB,EAAe,MAAM,4CAA4C,CAAC;AAGpK,iGAAiG;AACjG,yFAAyF;AACzF,6FAA6F;AAC7F,gGAAgG;AAChG,yFAAyF;AACzF,yDAAyD;AACzD,EAAE;AACF,kGAAkG;AAClG,mGAAmG;AACnG,+EAA+E;AAC/E,SAAS,aAAa;IACpB,IAAI,CAAC;QACH,OAAO,SAAS,EAAE,CAAC,WAAW,EAAE,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,WAA+B,EAAE,MAA0B;IACxF,OAAO,0BAA0B,CAAC,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;AAC1E,CAAC;AAKD,iGAAiG;AACjG,KAAK,UAAU,mBAAmB,CAAC,MAAoB,EAAE,IAAY;IACnE,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,IAAI,qBAAqB,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IACrG,8FAA8F;IAC9F,2DAA2D;IAC3D,MAAM,IAAI,GAAG,MAAM,uBAAuB,CAAC,YAAY,CAAC,CAAC;IACzD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,yFAAyF;QACzF,+DAA+D;QAC/D,MAAM,cAAc,CAAC,IAAI,KAAK,CAAC,0EAA0E,YAAY,IAAI,aAAa,IAAI,CAAC,CAAC,CAAC;IAC/I,CAAC;IACD,OAAO,kBAAkB,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;AAClF,CAAC;AAED;;;;sBAIsB;AACtB,KAAK,UAAU,cAAc,CAAC,MAAoB,EAAE,IAAY;IAC9D,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,IAAI,qBAAqB,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IACrG,oEAAoE;IACpE,MAAM,IAAI,GAAG,MAAM,uBAAuB,CAAC,YAAY,CAAC,CAAC;IACzD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,wEAAwE;QACxE,MAAM,cAAc,CAAC,IAAI,KAAK,CAAC,kFAAkF,YAAY,IAAI,aAAa,iBAAiB,MAAM,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC;IAC1L,CAAC;IACD,IAAI,EAAU,CAAC;IACf,IAAI,CAAC;QACH,EAAE,GAAG,MAAM,kBAAkB,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;IACtF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,gGAAgG;QAChG,gGAAgG;QAChG,4EAA4E;QAC5E,MAAM,mBAAmB,CAAC,GAAG,EAAE,IAAI,KAAK,CAAC,mFAAmF,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;IACtJ,CAAC;IACD,OAAO,EAAE,IAAI,SAAS,CAAC;AACzB,CAAC;AAED;;;;;;;;;;;GAWG;AACH,KAAK,UAAU,qBAAqB,CAAC,KAAgB,EAAE,SAAiB,EAAE,IAAY;IACpF,MAAM,MAAM,GAAG,0BAA0B,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC3D,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,oFAAoF;QACpF,MAAM,cAAc,CAAC,IAAI,KAAK,CAAC,+CAA+C,SAAS,OAAO,KAAK,CAAC,SAAS,6BAA6B,CAAC,CAAC,CAAC;IAC/I,CAAC;IACD,MAAM,YAAY,GAAG,qBAAqB,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC9E,MAAM,IAAI,GAAG,MAAM,uBAAuB,CAAC,YAAY,CAAC,CAAC;IACzD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,wEAAwE;QACxE,MAAM,cAAc,CAAC,IAAI,KAAK,CAAC,+CAA+C,SAAS,6CAA6C,YAAY,IAAI,aAAa,IAAI,CAAC,CAAC,CAAC;IAC1K,CAAC;IACD,IAAI,CAAC;QACH,MAAM,aAAa,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;IAC/D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,6FAA6F;QAC7F,2FAA2F;QAC3F,sCAAsC;QACtC,MAAM,mBAAmB,CAAC,GAAG,EAAE,IAAI,KAAK,CAAC,+CAA+C,SAAS,yBAAyB,CAAC,CAAC,CAAC;IAC/H,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,aAAa,GAAY;IACpC,QAAQ,EAAE,QAAQ;IAClB,aAAa,EAAE,CAAC,GAAqB,EAAsB,EAAE;QAC3D,0FAA0F;QAC1F,MAAM,YAAY,GAAG,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAC7C,IAAI,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC;QAC/B,iGAAiG;QACjG,wFAAwF;QACxF,6FAA6F;QAC7F,yDAAyD;QACzD,IAAI,WAA+B,CAAC;QACpC,IAAI,CAAC;YACH,WAAW,GAAG,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC;YACP,WAAW,GAAG,SAAS,CAAC;QAC1B,CAAC;QACD,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACjC,gGAAgG;QAChG,kGAAkG;QAClG,MAAM,YAAY,GAAG,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAC7C,OAAO;YACL,QAAQ,EAAE,QAAQ;YAClB,YAAY;YACZ,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7B,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1C,CAAC;IACJ,CAAC;IACD,aAAa,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,mBAAmB,CAAC,MAAsB,EAAE,IAAI,CAAC;IAClF,eAAe,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,IAAsB,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,IAAI,cAAc,CAAC,CAAC,MAAsB,EAAE,IAAI,CAAC;IAC5H,mGAAmG;IACnG,kFAAkF;IAClF,WAAW,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,qBAAqB,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC;IACtF,oFAAoF;IACpF,iGAAiG;IACjG,iGAAiG;IACjG,gGAAgG;IAChG,kGAAkG;IAClG,+FAA+F;IAC/F,8FAA8F;IAC9F,iCAAiC;IACjC,kGAAkG;IAClG,2FAA2F;IAC3F,oGAAoG;IACpG,mGAAmG;IACnG,0CAA0C;IAC1C,iGAAiG;IACjG,+FAA+F;IAC/F,mGAAmG;IACnG,gGAAgG;IAChG,mGAAmG;IACnG,iGAAiG;IACjG,2BAA2B;IAC3B,aAAa,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;QAC7B,MAAM,MAAM,GAAG,0BAA0B,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC3D,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,2FAA2F;QAC3F,8FAA8F;QAC9F,+FAA+F;QAC/F,8FAA8F;QAC9F,+FAA+F;QAC/F,mCAAmC;QACnC,MAAM,YAAY,GAAG,qBAAqB,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,yBAAyB,CAAC;QAC3G,MAAM,OAAO,GAAG,uBAAuB,CAAC,eAAe,EAAE,YAAY,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC;QAC3F,OAAO,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC5D,CAAC;IACD,qBAAqB,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,qBAAsB,MAAuB,CAAC,YAAY,EAAE;IAC/F,kBAAkB,EAAE,CAAC,MAAM,EAAE,EAAE,CAAE,MAAuB,CAAC,YAAY;CACtE,CAAC"}