@open-everywhere/provider-notion 0.1.0

package/dist/agent/channels/notion-webhook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"notion-webhook.js","sourceRoot":"","sources":["../../../agent/channels/notion-webhook.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,sFAAsF;AACtF,yFAAyF;AACzF,wFAAwF;AACxF,yFAAyF;AACzF,oDAAoD;AACpD,EAAE;AACF,+FAA+F;AAC/F,8FAA8F;AAC9F,gGAAgG;AAChG,iGAAiG;AACjG,gGAAgG;AAChG,0FAA0F;AAC1F,6FAA6F;AAC7F,kGAAkG;AAClG,8DAA8D;AAC9D,EAAE;AACF,4FAA4F;AAC5F,oGAAoG;AACpG,mGAAmG;AACnG,2FAA2F;AAC3F,iGAAiG;AACjG,4FAA4F;AAC5F,2EAA2E;AAC3E,mGAAmG;AACnG,kGAAkG;AAClG,mGAAmG;AACnG,kEAAkE;AAClE,oGAAoG;AACpG,gGAAgG;AAChG,yEAAyE;AACzE,mGAAmG;AACnG,kGAAkG;AAClG,gGAAgG;AAChG,iGAAiG;AACjG,EAAE;AACF,kGAAkG;AAClG,gGAAgG;AAChG,qGAAqG;AACrG,0FAA0F;AAC1F,EAAE;AACF,sGAAsG;AACtG,qGAAqG;AACrG,sGAAsG;AACtG,4FAA4F;AAC5F,2EAA2E;AAC3E,EAAE;AACF,8FAA8F;AAC9F,oGAAoG;AACpG,oGAAoG;AACpG,kGAAkG;AAClG,iGAAiG;AACjG,sFAAsF;AACtF,EAAE;AACF,iGAAiG;AACjG,2FAA2F;AAC3F,oGAAoG;AACpG,iGAAiG;AACjG,4BAA4B;AAC5B,EAAE;AACF,kGAAkG;AAClG,kGAAkG;AAClG,mGAAmG;AACnG,4FAA4F;AAC5F,mFAAmF;AAEnF,OAAO,EACL,wBAAwB,EACxB,0BAA0B,EAC1B,eAAe,EACf,kBAAkB,EAClB,eAAe,EACf,eAAe,EACf,iBAAiB,EACjB,sBAAsB,EACtB,mBAAmB,EACnB,gBAAgB,EAChB,oBAAoB,GAOrB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACzE,OAAO,EAAE,0BAA0B,EAAyB,MAAM,4BAA4B,CAAC;AAC/F,OAAO,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAC;AACrE,OAAO,EAAE,sBAAsB,EAAwB,MAAM,sBAAsB,CAAC;AACpF,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAC3E,OAAO,EAAE,qBAAqB,EAAyE,MAAM,wBAAwB,CAAC;AACtI,OAAO,EAAE,4BAA4B,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AACxF,OAAO,EAAE,4BAA4B,EAAE,uBAAuB,EAAmD,MAAM,wBAAwB,CAAC;AAGhJ,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAA4C,MAAM,4CAA4C,CAAC;AAmN3I;;;;;;;;;;;;;;;;;;GAkBG;AACH,SAAS,eAAe,CAAC,IAA8B,EAAE,IAA8B;IACrF,OAAO,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,GAAG,oBAAoB,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;AAClH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,OAAe,EACf,eAA8B,EAC9B,IAA8B;IAE9B,kGAAkG;IAClG,mGAAmG;IACnG,0EAA0E;IAC1E,MAAM,MAAM,GAA8B,EAAE,CAAC;IAC7C,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,EAAE,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACjF,kGAAkG;IAClG,2FAA2F;IAC3F,6FAA6F;IAC7F,mEAAmE;IACnE,8FAA8F;IAC9F,iFAAiF;IACjF,MAAM,QAAQ,GAAG,MAAM,KAAK,IAAI,IAAI,GAAG,CAAC,MAAM,KAAK,WAAW,IAAI,GAAG,CAAC,MAAM,KAAK,UAAU,CAAC;IAC5F,iGAAiG;IACjG,+FAA+F;IAC/F,iDAAiD;IACjD,OAAO,EAAE,GAAG,GAAG,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AACvH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,OAAe,EACf,kBAA0B,EAC1B,IAA8B;IAE9B,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,YAAY,KAAK,kBAAkB,CAAC,EAAE,CAAC;QAC7E,OAAO;YACL,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,IAAI;YACV,MAAM,EAAE,YAAY;YACpB,MAAM,EAAE,yDAAyD;YACjE,QAAQ,EAAE,IAAI;YACd,kBAAkB;YAClB,YAAY,EAAE,kBAAkB;SACjC,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,EAAE,YAAY,EAAE,kBAAkB,EAAE,CAAC;IACpD,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,GAAG,EAAE,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,kBAAkB,CAAC,CAAC;IACnG,OAAO,EAAE,GAAG,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC;AACxD,CAAC;AAMD,KAAK,UAAU,OAAO,CACpB,OAAe,EACf,eAA8B,EAC9B,IAA8B,EAC9B,MAAiC,EACjC,0BAAmC;IAEnC,2FAA2F;IAC3F,mFAAmF;IACnF,MAAM,SAAS,GAAG,0BAA0B,KAAK,SAAS,CAAC,CAAC,CAAC,0BAA0B,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7G,IAAI,SAAS,EAAE,CAAC;QACd,IAAI,CAAC,gBAAgB,EAAE,CAAC,SAAS,CAAC,CAAC;QACnC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAC1D,CAAC;IAED,2FAA2F;IAC3F,0EAA0E;IAC1E,MAAM,IAAI,GAAG,0BAA0B,KAAK,SAAS;QACnD,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAa,EAAE,YAAY,EAAE,0BAA0B,EAAE;QACvE,CAAC,CAAC,IAAI,CAAC,MAAM;YACX,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,YAAY,EAAE,GAAG,EAAE,CAAC,wBAAwB,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,eAAe,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;YACzI,CAAC,CAAC,wBAAwB,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,eAAe,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;IACjG,IAAI,WAAW,IAAI,IAAI,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QAC1C,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;IAC3F,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC;IAC7B,mGAAmG;IACnG,oDAAoD;IACpD,IAAI,IAAI,CAAC,YAAY;QAAE,MAAM,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;IAE/D,YAAY;IACZ,IAAI,EAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAuB,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;IACvE,CAAC;IAED,uDAAuD;IACvD,IAAI,eAAe,CAAC,EAAE,CAAC,KAAK,iBAAiB,EAAE,CAAC;QAC9C,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,eAAe,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC;IAClG,CAAC;IACD,MAAM,SAAS,GAAG,kBAAkB,CAAC,EAAE,CAAC,CAAC;IACzC,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC;IAE5G,uDAAuD;IACvD,EAAE;IACF,+FAA+F;IAC/F,8FAA8F;IAC9F,iGAAiG;IACjG,iGAAiG;IACjG,wFAAwF;IACxF,EAAE;IACF,sFAAsF;IACtF,kGAAkG;IAClG,kFAAkF;IAClF,EAAE;IACF,2FAA2F;IAC3F,2FAA2F;IAC3F,8FAA8F;IAC9F,2FAA2F;IAC3F,MAAM,WAAW,GAAG,eAAe,CAAC,EAAE,CAAC,CAAC;IACxC,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC,YAAY,EAAE,WAAW,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,YAAY,CAAC;IACpI,IAAI,CAAC,YAAY;QAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,qCAAqC,EAAE,MAAM,EAAE,CAAC;IAEnI,+FAA+F;IAC/F,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM;QACtB,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,YAAY,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;QACjF,CAAC,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;IAC3C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,0CAA0C,YAAY,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IACpJ,CAAC;IAED,kGAAkG;IAClG,gGAAgG;IAChG,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM;QAC3B,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,gBAAgB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;QACxF,CAAC,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;IAC9C,8FAA8F;IAC9F,4FAA4F;IAC5F,kGAAkG;IAClG,kGAAkG;IAClG,4FAA4F;IAC5F,gGAAgG;IAChG,kGAAkG;IAClG,2FAA2F;IAC3F,oGAAoG;IACpG,MAAM,oBAAoB,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,YAAY,CAAC,CAAC;IAC7G,+FAA+F;IAC/F,+FAA+F;IAC/F,+FAA+F;IAC/F,6FAA6F;IAC7F,MAAM,UAAU,GAAG,GAAG,EAAE,CAAC,sBAAsB,CAC7C,SAAS,EACT,oBAAoB,EACpB,IAAI,CAAC,gBAAgB,EACrB,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,KAAK,SAAS,CAC3D,CAAC;IACF,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,gBAAgB,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,UAAU,EAAE,CAAC;IAC7G,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc;QACjC,CAAC,CAAC,IAAI,CAAC,MAAM;YACX,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,gBAAgB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,cAAe,CAAC,YAAY,CAAC,CAAC;YACvF,CAAC,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,YAAY,CAAC;QAC3C,CAAC,CAAC,SAAS,CAAC;IAEd,IAAI,OAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,MAAM;YACnB,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,gBAAgB,EAAE,GAAG,EAAE,CAAC,eAAe,CAAC,SAAS,EAAE,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;YAC5G,CAAC,CAAC,MAAM,eAAe,CAAC,SAAS,EAAE,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IACpE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,oBAAoB,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IACvH,CAAC;IAED,8CAA8C;IAC9C,EAAE;IACF,iGAAiG;IACjG,kGAAkG;IAClG,gGAAgG;IAChG,8FAA8F;IAC9F,iGAAiG;IACjG,kGAAkG;IAClG,gGAAgG;IAChG,6FAA6F;IAC7F,EAAE;IACF,yFAAyF;IACzF,oGAAoG;IACpG,8FAA8F;IAC9F,mGAAmG;IACnG,iDAAiD;IACjD,EAAE;IACF,oGAAoG;IACpG,mGAAmG;IACnG,+FAA+F;IAC/F,6EAA6E;IAC7E,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM;QAC9B,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,gBAAgB,EAAE,GAAG,EAAE,CAAC,mBAAmB,CAAC,OAAO,EAAE,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QAC9G,CAAC,CAAC,MAAM,mBAAmB,CAAC,OAAO,EAAE,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IACpE,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC;QACzB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IACnH,CAAC;IACD,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC;IACnC,MAAM,YAAY,GAAG,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC;IACjD,MAAM,kBAAkB,GAAG,EAAE,CAAC,YAAY,CAAC;IAE3C,uDAAuD;IACvD,EAAE;IACF,8FAA8F;IAC9F,6FAA6F;IAC7F,mGAAmG;IACnG,iGAAiG;IACjG,gGAAgG;IAChG,8FAA8F;IAC9F,gGAAgG;IAChG,iBAAiB;IACjB,EAAE;IACF,mGAAmG;IACnG,+FAA+F;IAC/F,kGAAkG;IAClG,mGAAmG;IACnG,wFAAwF;IACxF,6EAA6E;IAC7E,EAAE;IACF,+FAA+F;IAC/F,+FAA+F;IAC/F,EAAE;IACF,+FAA+F;IAC/F,qEAAqE;IACrE,EAAE;IACF,+FAA+F;IAC/F,mGAAmG;IACnG,mGAAmG;IACnG,gGAAgG;IAChG,6EAA6E;IAC7E,MAAM,KAAK,GAAG,0BAA0B,CAAC,kBAAkB,EAAE,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACtG,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QACd,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IAC1G,CAAC;IAED,0FAA0F;IAC1F,8FAA8F;IAC9F,qDAAqD;IACrD,EAAE;IACF,4FAA4F;IAC5F,iGAAiG;IACjG,kGAAkG;IAClG,iGAAiG;IACjG,qBAAqB;IACrB,EAAE;IACF,kGAAkG;IAClG,gGAAgG;IAChG,mGAAmG;IACnG,kGAAkG;IAClG,mGAAmG;IACnG,0FAA0F;IAC1F,EAAE;IACF,kGAAkG;IAClG,gGAAgG;IAChG,kGAAkG;IAClG,gGAAgG;IAChG,gGAAgG;IAChG,mFAAmF;IACnF,EAAE;IACF,8FAA8F;IAC9F,kGAAkG;IAClG,+FAA+F;IAC/F,8FAA8F;IAC9F,+FAA+F;IAC/F,MAAM,WAAW,GAAG,oBAAoB,CAAC,kBAAkB,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,kBAAkB,CAAC;IAEzG,MAAM,UAAU,GAAG,gBAAgB,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAEzD,wFAAwF;IACxF,EAAE;IACF,6FAA6F;IAC7F,6FAA6F;IAC7F,kGAAkG;IAClG,0EAA0E;IAC1E,kGAAkG;IAClG,kGAAkG;IAClG,6FAA6F;IAC7F,mGAAmG;IACnG,gGAAgG;IAChG,iGAAiG;IACjG,+FAA+F;IAC/F,mCAAmC;IACnC,EAAE;IACF,4FAA4F;IAC5F,2FAA2F;IAC3F,kGAAkG;IAClG,yCAAyC;IACzC,EAAE;IACF,gGAAgG;IAChG,kGAAkG;IAClG,8FAA8F;IAC9F,YAAY;IACZ,IAAI,4BAA4B,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,sBAAsB,CACvC,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,IAAI,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,OAAO,CAAC,UAAU,EAAE,EAAE,EAAE,EACnH,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CACtC,CAAC;QACF,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,kBAAkB,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC;QAChG,OAAO;YACL,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,IAAI;YACV,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM;YACvD,MAAM;YACN,YAAY;SACb,CAAC;IACJ,CAAC;IAED,gGAAgG;IAChG,iEAAiE;IACjE,EAAE;IACF,gGAAgG;IAChG,6FAA6F;IAC7F,4FAA4F;IAC5F,0FAA0F;IAC1F,8DAA8D;IAC9D,MAAM,cAAc,GAAG,qBAAqB,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IAC1E,MAAM,SAAS,GAAoB;QACjC,WAAW;QACX,MAAM;QACN,GAAG,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1C,CAAC;IACF,iGAAiG;IACjG,kGAAkG;IAClG,kGAAkG;IAClG,yFAAyF;IACzF,iGAAiG;IACjG,kDAAkD;IAClD,MAAM,IAAI,GAAG,cAAc,CAAC,UAAU,KAAK,eAAe;QACxD,CAAC,CAAC,IAAI,CAAC,MAAM;YACX,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,EAAE,CAAC,uBAAuB,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;YACjH,CAAC,CAAC,MAAM,uBAAuB,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC;QACpE,CAAC,CAAC,SAAS,CAAC;IAEd,+FAA+F;IAC/F,gGAAgG;IAChG,sFAAsF;IACtF,EAAE;IACF,qFAAqF;IACrF,6FAA6F;IAC7F,gGAAgG;IAChG,qFAAqF;IACrF,8FAA8F;IAC9F,gFAAgF;IAChF,EAAE;IACF,kGAAkG;IAClG,iGAAiG;IACjG,iGAAiG;IACjG,+FAA+F;IAC/F,iGAAiG;IACjG,iGAAiG;IACjG,kGAAkG;IAClG,0DAA0D;IAC1D,iGAAiG;IACjG,8FAA8F;IAC9F,gGAAgG;IAChG,kEAAkE;IAClE,EAAE;IACF,4FAA4F;IAC5F,8FAA8F;IAC9F,mFAAmF;IACnF,MAAM,UAAU,GAAG,gBAAgB,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACvE,MAAM,yBAAyB,GAAG,cAAc,CAAC,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,GAAG,KAAK,MAAM,CAAC;IACtG,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,IAAI,CAAC,yBAAyB,IAAI,IAAI,EAAE,IAAI,KAAK,SAAS,EAAE,CAAC;QAC/F,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,kBAAkB,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IAC3G,CAAC;IAED,uEAAuE;IACvE,IAAI,cAAc,CAAC,UAAU,KAAK,MAAM,EAAE,CAAC;QACzC,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC;QACrC,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;QACjH,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IACnF,CAAC;IACD,kGAAkG;IAClG,8FAA8F;IAC9F,MAAM,UAAU,GAAG,cAAc,CAAC,UAAU,CAAC;IAE7C,+FAA+F;IAC/F,mGAAmG;IACnG,iGAAiG;IACjG,+FAA+F;IAC/F,0EAA0E;IAC1E,EAAE;IACF,gGAAgG;IAChG,8FAA8F;IAC9F,gGAAgG;IAChG,6FAA6F;IAC7F,6BAA6B;IAC7B,IAAI,cAAc,CAAC,UAAU,KAAK,QAAQ,IAAI,IAAI,EAAE,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACpF,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IACtG,CAAC;IAED,2DAA2D;IAC3D,EAAE;IACF,iGAAiG;IACjG,0FAA0F;IAC1F,gGAAgG;IAChG,kBAAkB;IAClB,EAAE;IACF,mGAAmG;IACnG,0FAA0F;IAC1F,mGAAmG;IACnG,mGAAmG;IACnG,EAAE;IACF,gGAAgG;IAChG,oGAAoG;IACpG,sDAAsD;IACtD,EAAE;IACF,gGAAgG;IAChG,6FAA6F;IAC7F,+FAA+F;IAC/F,iGAAiG;IACjG,wFAAwF;IACxF,gGAAgG;IAChG,+EAA+E;IAC/E,EAAE;IACF,oGAAoG;IACpG,oFAAoF;IACpF,MAAM,YAAY,GAAG,GAAG,EAAE,CAAC,0BAA0B,CAAC,MAAM,EAAE,WAAW,IAAI,EAAE,EAAE,IAAI,CAAC,UAAU,EAAE;QAChG,QAAQ,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,gBAAgB,CAAC,EAAE,EAAE,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;KACpE,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,sBAAsB,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,MAAM,YAAY,EAAE,CAAC;IAEnH,iFAAiF;IACjF,MAAM,WAAW,GAAG,mBAAmB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC3D,MAAM,OAAO,GAA8B;QACzC,IAAI,EAAE,OAAO,EAAE,uCAAuC;QACtD,kGAAkG;QAClG,0FAA0F;QAC1F,gGAAgG;QAChG,2FAA2F;QAC3F,iGAAiG;QACjG,iGAAiG;QACjG,4FAA4F;QAC5F,6FAA6F;QAC7F,2FAA2F;QAC3F,eAAe;QACf,EAAE,EAAE,OAAO,CAAC,EAAE,IAAI,SAAS;QAC3B,QAAQ,EAAE,OAAO,CAAC,UAAU,EAAE,EAAE;QAChC,MAAM,EAAE,OAAO,CAAC,YAAY,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACxD,IAAI,EAAE,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,sCAAsC;QACnF,gGAAgG;QAChG,+FAA+F;QAC/F,4CAA4C;QAC5C,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3E,CAAC;IACF,MAAM,YAAY,GAAG,GAAG,EAAE,CAAC,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IACrH,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM;QAChC,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,sBAAsB,EAAE,YAAY,CAAC;QACjE,CAAC,CAAC,MAAM,YAAY,EAAE,CAAC;IACzB,MAAM,IAAI,GAAG,eAAe,CAAC;QAC3B,WAAW;QACX,MAAM;QACN,YAAY,EAAE,YAAY,IAAI,SAAS;QACvC,SAAS;QACT,WAAW,EAAE,OAAO,CAAC,UAAU,EAAE,EAAE;QACnC,gGAAgG;QAChG,qFAAqF;QACrF,YAAY;QACZ,gGAAgG;QAChG,iFAAiF;QACjF,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChF,CAAC,CAAC;IACH,qGAAqG;IACrG,qGAAqG;IACrG,mGAAmG;IACnG,kGAAkG;IAClG,iGAAiG;IACjG,qGAAqG;IACrG,iGAAiG;IACjG,mGAAmG;IACnG,gGAAgG;IAChG,IAAI,cAAc,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;QAC3C,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,GAAG,GAAG,CAAC;QACzC,IAAI,OAAO,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,IAAI,CAAC;YAAE,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAChG,CAAC;IAED,oFAAoF;IACpF,IAAI,cAAiE,CAAC;IACtE,IAAI,CAAC;QACH,cAAc,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC,UAAU,CAAC,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,cAAc,GAAG,SAAS,CAAC;IAC7B,CAAC;IAED,6EAA6E;IAC7E,EAAE;IACF,iGAAiG;IACjG,gGAAgG;IAChG,iGAAiG;IACjG,kGAAkG;IAClG,kGAAkG;IAClG,EAAE;IACF,mGAAmG;IACnG,+FAA+F;IAC/F,+FAA+F;IAC/F,4FAA4F;IAC5F,gGAAgG;IAChG,+FAA+F;IAC/F,oCAAoC;IACpC,gGAAgG;IAChG,gGAAgG;IAChG,MAAM,aAAa,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,aAAa;QAC5C,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC;QACrC,CAAC,CAAC,4BAA4B,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IACxE,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,kBAAkB,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,MAAM,aAAa,EAAE,CAAC;IACjH,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,oBAAoB,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IAC5G,CAAC;IAED,MAAM,QAAQ,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC;QACnC,UAAU;QACV,YAAY;QACZ,UAAU;QACV,MAAM;QACN,YAAY;QACZ,WAAW,EAAE,WAAW,IAAI,IAAI;QAChC,IAAI;QACJ,OAAO;QACP,cAAc;QACd,cAAc;QACd,gGAAgG;QAChG,gGAAgG;QAChG,+FAA+F;QAC/F,GAAG,CAAC,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,6FAA6F;QAC7F,0FAA0F;QAC1F,uFAAuF;QACvF,wFAAwF;QACxF,8EAA8E;QAC9E,SAAS,EAAE,UAAU,CAAC,GAAG;QACzB,iGAAiG;QACjG,0FAA0F;QAC1F,gGAAgG;QAChG,gGAAgG;QAChG,+EAA+E;QAC/E,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;KAClD,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;;QAC5D,MAAM,QAAQ,EAAE,CAAC;IACtB,IAAI,IAAI,CAAC,aAAa;QAAE,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAErE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;AACpH,CAAC;AAUD;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,OAAsB,EACtB,IAAoB;IAEpB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC9B,IAAI,MAAM,EAAE,OAAO;QAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;IACvD,IAAI,MAAM,EAAE,QAAQ,EAAE,CAAC;QACrB,MAAM,KAAK,GAAG,MAAM,sBAAsB,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAClE,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,yBAAyB,MAAM,CAAC,QAAQ,2BAA2B,EAAE,CAAC;IACrH,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,uDAAuD,EAAE,CAAC;AAC7E,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,kBAAkB,CAC/B,OAAsB,EACtB,MAAc,EACd,YAAoB,EACpB,GAAoB,EACpB,IAAoB;IAEpB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,IAAI,MAAM,EAAE,IAAI,CAAC,CAAC;QAC9E,OAAO,GAAG;aACP,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,KAAK,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;aAC9F,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YACT,4FAA4F;YAC5F,wFAAwF;YACxF,kEAAkE;YAClE,MAAM,QAAQ,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC;YAClC,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,KAAK,SAAS,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;YACxE,oFAAoF;YACpF,sFAAsF;YACtF,uFAAuF;YACvF,kFAAkF;YAClF,oFAAoF;YACpF,MAAM,QAAQ,GAAG,CAAC,CAAC,UAAU,EAAE,IAAI,KAAK,QAAQ,CAAC;YACjD,OAAO;gBACL,IAAI,EAAE,MAAM,CAAC,CAAC,CAAE,MAAgB,CAAC,CAAC,CAAE,OAAiB;gBACrD,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE;gBACd,QAAQ,EAAE,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ;gBACpD,MAAM,EAAE,CAAC,CAAC,YAAY,IAAI,EAAE;gBAC5B,IAAI,EAAE,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC;aACvC,CAAC;QACJ,CAAC,CAAC;aACD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/agent/channels/notion-work-search.d.ts

@@ -0,0 +1,9 @@
+import { type WorkSearchAdapter, type Domain } from "@open-everywhere/core/agent/adapter-api.js";
+/** The canonical page ids this domain names OUTRIGHT — the EXACT `reach` entries shaped
+ *  `notion/<workspace>/<pageId>`. Any workspace segment counts: an exact entry belongs to exactly
+ *  one domain (config-load exclusivity), so no workspace cross-check is needed here the way
+ *  `notionPageDomain`'s CALLER-vs-TARGET comparison needs one. */
+export declare function domainOwnPageIds(domain: Domain): ReadonlySet<string>;
+export declare const notionWorkSearchAdapter: WorkSearchAdapter;
+export declare function registerNotionWorkSearch(): void;
+//# sourceMappingURL=notion-work-search.d.ts.map

package/dist/agent/channels/notion-work-search.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"notion-work-search.d.ts","sourceRoot":"","sources":["../../../agent/channels/notion-work-search.ts"],"names":[],"mappings":"AAkBA,OAAO,EAEL,KAAK,iBAAiB,EAGtB,KAAK,MAAM,EACZ,MAAM,4CAA4C,CAAC;AAOpD;;;kEAGkE;AAClE,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAOpE;AAED,eAAO,MAAM,uBAAuB,EAAE,iBAyBrC,CAAC;AAEF,wBAAgB,wBAAwB,IAAI,IAAI,CAE/C"}

package/dist/agent/channels/notion-work-search.js

@@ -0,0 +1,69 @@
+// Notion's WORK-SEARCH adapter (OPE-961) — wraps notion_search.ts's own `searchNotion` call behind
+// the federating `search` tool's registry (@open-everywhere/core `channels/work-search.ts`).
+//
+// 🔴 NO RESULT FILTER AS A BOUNDARY, unconditionally — the ratified rule this bundle's
+// `notion_search.ts` already states: Notion's own integration-share IS the reach, and OE never
+// narrows it as enforcement. That rule governs the UNSCOPED call.
+//
+// `insideDomain: true` IS a real narrowing here, and it is legitimate for the reason OPE-961 exists
+// at all: it is OPT-IN, documented as a convenience, and it can only ever DROP hits, never add one
+// the credential could not already reach. It keeps only the pages this domain names outright —
+// the EXACT `domain.reach` entries of the form `notion/<workspace>/<pageId>` (the same set
+// `read_notion_page`'s fence reads, via `notionPageDomain` — see notion-scope.ts). A shared Notion
+// integration used by several domains therefore lets each ask "just MY declared pages" without
+// touching what the credential itself can see.
+//
+// Registered GATED (`registerWorkSearchAdapter`), mirroring `registerReadAdapter` — Notion is a
+// provider bundle and participates in provider selection like every other bundle seam.
+import { registerWorkSearchAdapter, } from "@open-everywhere/core/agent/adapter-api.js";
+import { resolveNotionCredential, searchNotion } from "./notion-api.js";
+import { notionWorkGrant } from "./notion-work.js";
+import { assertNotionActingIdentity } from "./notion-acting-identity.js";
+import { canonicalNotionId } from "./notion-scope.js";
+import { domainRoster } from "@open-everywhere/core/agent/adapter-api.js";
+/** The canonical page ids this domain names OUTRIGHT — the EXACT `reach` entries shaped
+ *  `notion/<workspace>/<pageId>`. Any workspace segment counts: an exact entry belongs to exactly
+ *  one domain (config-load exclusivity), so no workspace cross-check is needed here the way
+ *  `notionPageDomain`'s CALLER-vs-TARGET comparison needs one. */
+export function domainOwnPageIds(domain) {
+    const ids = new Set();
+    for (const key of domainRoster(domain)) {
+        const parts = key.split("/");
+        if (parts.length === 3 && parts[0] === "notion" && parts[2].length > 0)
+            ids.add(canonicalNotionId(parts[2]));
+    }
+    return ids;
+}
+export const notionWorkSearchAdapter = {
+    connector: "notion",
+    async search(ctx, domain, query, opts) {
+        // Notion's grant is a `Domain.credentials` declaration (never domain-free like GitHub's repo
+        // grant), so `domain` is undefined here only if the federator's grant-set derivation and this
+        // adapter ever disagreed about what grants Notion — a defensive backstop, not a reachable path.
+        if (!domain)
+            throw new Error("this domain holds no Notion work grant.");
+        const grant = notionWorkGrant(ctx, [domain]);
+        if (!grant)
+            throw new Error("this domain holds no Notion work grant.");
+        // 🔴 OPE-1525 — THE OWN-ACCOUNT GATE, on the line below's behalf. This is the federated `search`
+        // tool's Notion arm and it spends the same `install`-family work key `notion_search` does, so it
+        // takes the same gate. See channels/notion-acting-identity.ts.
+        await assertNotionActingIdentity(ctx, "notion_work_search");
+        const cred = await resolveNotionCredential(grant.credential);
+        if (!cred)
+            throw new Error(`no value stored for this domain's Notion work credential "${grant.credential}".`);
+        const hits = await searchNotion(query, { ...cred, pageSize: Math.min(Math.max(opts.limit, 1), 100) });
+        const ownIds = opts.insideDomain ? domainOwnPageIds(domain) : undefined;
+        const scoped = ownIds ? hits.filter((h) => ownIds.has(canonicalNotionId(h.id))) : hits;
+        return scoped.slice(0, opts.limit).map((h) => ({
+            connector: "notion",
+            id: h.id,
+            title: h.title || "(untitled)",
+            ...(h.url ? { url: h.url } : {}),
+        }));
+    },
+};
+export function registerNotionWorkSearch() {
+    registerWorkSearchAdapter(notionWorkSearchAdapter);
+}
+//# sourceMappingURL=notion-work-search.js.map

package/dist/agent/channels/notion-work-search.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"notion-work-search.js","sourceRoot":"","sources":["../../../agent/channels/notion-work-search.ts"],"names":[],"mappings":"AAAA,mGAAmG;AACnG,6FAA6F;AAC7F,EAAE;AACF,uFAAuF;AACvF,+FAA+F;AAC/F,kEAAkE;AAClE,EAAE;AACF,oGAAoG;AACpG,mGAAmG;AACnG,+FAA+F;AAC/F,2FAA2F;AAC3F,mGAAmG;AACnG,+FAA+F;AAC/F,+CAA+C;AAC/C,EAAE;AACF,gGAAgG;AAChG,uFAAuF;AAEvF,OAAO,EACL,yBAAyB,GAK1B,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,uBAAuB,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACxE,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAC;AACzE,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,4CAA4C,CAAC;AAE1E;;;kEAGkE;AAClE,MAAM,UAAU,gBAAgB,CAAC,MAAc;IAC7C,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/G,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,CAAC,MAAM,uBAAuB,GAAsB;IACxD,SAAS,EAAE,QAAQ;IACnB,KAAK,CAAC,MAAM,CAAC,GAAoB,EAAE,MAA0B,EAAE,KAAa,EAAE,IAA8C;QAC1H,6FAA6F;QAC7F,8FAA8F;QAC9F,gGAAgG;QAChG,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QACxE,MAAM,KAAK,GAAG,eAAe,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;QAC7C,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QACvE,iGAAiG;QACjG,iGAAiG;QACjG,+DAA+D;QAC/D,MAAM,0BAA0B,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;QAC5D,MAAM,IAAI,GAAG,MAAM,uBAAuB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC7D,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,6DAA6D,KAAK,CAAC,UAAU,IAAI,CAAC,CAAC;QAC9G,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QACtG,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACxE,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACvF,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC7C,SAAS,EAAE,QAAQ;YACnB,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,YAAY;YAC9B,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjC,CAAC,CAAC,CAAC;IACN,CAAC;CACF,CAAC;AAEF,MAAM,UAAU,wBAAwB;IACtC,yBAAyB,CAAC,uBAAuB,CAAC,CAAC;AACrD,CAAC"}

package/dist/agent/channels/notion-work.d.ts

@@ -0,0 +1,68 @@
+import { type BindableContext, type Domain } from "@open-everywhere/core/agent/adapter-api.js";
+/**
+ * The ORG-DEFAULT credential id that plays Notion's WORK role — the role a domain's
+ * `Domain.credentials` entry names to hold the work grant.
+ *
+ * It is `team-key` because that is what the credential catalogue already calls it, in those words:
+ * "This is the WORK-SURFACE credential ONLY … The COMMUNICATION-CHANNEL plumbing … is a DISTINCT
+ * credential — `channel-key`". The role split predates this module; what was missing was any path
+ * that read it as a GRANT.
+ */
+export declare const NOTION_WORK_CREDENTIAL = "team-key";
+/** A resolved Notion work grant: the domain that holds it and the credential id it runs under. */
+export interface NotionWorkGrant {
+    readonly domain: Domain;
+    /** The `ConnectorCredential.id` this domain's Notion work calls run under. */
+    readonly credential: string;
+}
+/**
+ * The domain a CALLING SESSION belongs to, whatever surface it was woken on.
+ *
+ * Two resolvers, because a Notion page id is not compared the way every other surface key is:
+ * `notionPageDomain` canonicalises the UUID (dashes are cosmetic in Notion ids) and is
+ * workspace-blind on its roster leg, while `resolveDomainForChannel` compares whole keys verbatim.
+ * Sending a `notion/…` key through the verbatim comparison would miss a roster entry written with
+ * the other dash convention — a silent "no domain", i.e. a silent loss of the grant.
+ *
+ * Pure: `domains` is injected, like every other decision in this bundle.
+ */
+export declare function notionCallerDomain(surfaceKey: string, domains: readonly Domain[]): Domain | undefined;
+/**
+ * This session's Notion WORK grant, or `undefined` when its domain holds none.
+ *
+ * FAIL-SOFT ON AN UNRESOLVABLE CONTEXT, and that is the fail-CLOSED direction here: a synthetic or
+ * identity-less ctx has no partition, so it resolves no domain, so it holds no grant, so no work
+ * tool mounts. There is no arm in which an unreadable context widens the surface. Core's
+ * {@link callerWorkDomain} owns that chain and that fail direction for every provider (OPE-951);
+ * Notion passes {@link notionCallerDomain} as the resolver because of the UUID rule above. The guard
+ * now covers the RESOLVER too, not only the partition read: a throw out of the roster comparison
+ * also resolves to no grant, which is the same direction.
+ */
+export declare function notionWorkGrant(ctx: BindableContext, domains: readonly Domain[]): NotionWorkGrant | undefined;
+/**
+ * The MOUNT predicate for a Notion work tool — {@link notionWorkGrant} as a boolean, with `domains`
+ * as a LAZY thunk and every failure absorbed.
+ *
+ * Both properties matter at a `session.started` resolver. The thunk is the same dependency-injection
+ * shape `sourceScopedMount` uses, so a resolver that runs before the app registers its config does
+ * not throw on `getConfig()`. And an absorbed failure resolves FALSE: an unreadable config hides the
+ * work tools rather than mounting them, which is the fail-closed direction.
+ */
+export declare function notionWorkMount(ctx: BindableContext, domains: () => readonly Domain[]): boolean;
+/** The credential id a work-granted domain's Notion calls run under, or undefined when it holds no
+ *  grant. Never falls back to the org default — see the header. */
+export declare function notionWorkCredential(domain: Domain | undefined): string | undefined;
+/**
+ * The Notion WORKSPACE ids a domain names for itself — every `notion/<workspace>/…` entry in its
+ * roster and its claims, de-duplicated.
+ *
+ * WHY A WORK READ NEEDS THIS. `notionPageDomain`'s CLAIM leg needs a workspace to build the key it
+ * matches; its roster leg does not. A Notion-woken caller supplies its own workspace from its
+ * surface key, but a Slack-woken worker has none — so without this, a work-granted domain that
+ * expresses its Notion membership as a CONTAINER would resolve nothing cross-surface, and the
+ * grant would silently work for pages the config names outright ONLY. Reading the candidates off the CALLER's
+ * OWN domain keeps that strictly inside what the domain already declares: it can never introduce a
+ * workspace nobody wrote down.
+ */
+export declare function notionWorkspacesOf(domain: Domain): readonly string[];
+//# sourceMappingURL=notion-work.d.ts.map

package/dist/agent/channels/notion-work.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"notion-work.d.ts","sourceRoot":"","sources":["../../../agent/channels/notion-work.ts"],"names":[],"mappings":"AA6BA,OAAO,EAKL,KAAK,eAAe,EACpB,KAAK,MAAM,EACZ,MAAM,4CAA4C,CAAC;AAIpD;;;;;;;;GAQG;AACH,eAAO,MAAM,sBAAsB,aAAa,CAAC;AAEjD,kGAAkG;AAClG,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,8EAA8E;IAC9E,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,GAAG,SAAS,CAMrG;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,eAAe,EAAE,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,eAAe,GAAG,SAAS,CAG7G;AAED;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,SAAS,MAAM,EAAE,GAAG,OAAO,CAM/F;AAUD;mEACmE;AACnE,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAEnF;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAOpE"}

package/dist/agent/channels/notion-work.js

@@ -0,0 +1,126 @@
+// NOTION AS A WORK SURFACE (OPE-913) — the domain-granted half of the provider chat/work split.
+//
+// THE FINDING THIS EXISTS FOR. A soak run asked the agent to open a PR whose content came from a
+// spec page on Notion. The seat delegated; the delegated worker reported that it had no authorized
+// Notion connection and — correctly — refused to invent the spec. The seat had read that same page
+// an hour earlier, from a NOTION wake. Nothing about the page had changed; the WAKE SURFACE had.
+// Every Notion tool in this bundle is fenced to a Notion-origin turn (`assertTurnSurface`) and
+// mounted on `notion ∈ sources`, so a Slack-woken worker in the same domain, holding the same
+// credential, could not read it.
+//
+// THE RULE, Tommy 2026-08-21 (OPE-926 comment, generalized here): **capability derives from the
+// DOMAIN's connectors, not from the wake surface.** A domain that binds a Notion work credential
+// may read Notion from any of its surfaces; a domain that binds none may not, from any of them —
+// including from Notion itself, where the CHAT plane still serves the wake container.
+//
+// THE TWO PLANES, and which credential each runs on:
+//
+//   • CHAT plane — `read_notion_page` / `read_notion_comments` on a NOTION-origin turn, plus the
+//     reply arm. Credential: `channel-key` (notion-credentials.ts). Bounded to the wake container
+//     and its domain; unchanged by this module.
+//   • WORK plane — the same two reads from ANY surface in a work-granted domain, plus
+//     `notion_search`, the cross-container read. Credential: the domain's declared WORK credential
+//     ({@link notionWorkCredential}). Mounted only where {@link notionWorkGrant} resolves.
+//
+// 🔴 THE GRANT IS THE DECLARATION, AND ABSENCE IS A REFUSAL. `hasWorkGrant` (core
+// access/work-grant.ts) reads `Domain.credentials` by the OPPOSITE rule to `domainCredentialId`:
+// no entry for the work role ⇒ no grant ⇒ the work tools do not mount. Do not "fall back to the
+// org default" anywhere in this file; that is the hole the split closes.
+import { callerWorkDomain, hasWorkGrant, resolveDomainForChannel, workGrantCredential, } from "@open-everywhere/core/agent/adapter-api.js";
+import { NOTION_PROVIDER } from "./notion-credentials.js";
+import { notionPageDomain } from "./notion-scope.js";
+/**
+ * The ORG-DEFAULT credential id that plays Notion's WORK role — the role a domain's
+ * `Domain.credentials` entry names to hold the work grant.
+ *
+ * It is `team-key` because that is what the credential catalogue already calls it, in those words:
+ * "This is the WORK-SURFACE credential ONLY … The COMMUNICATION-CHANNEL plumbing … is a DISTINCT
+ * credential — `channel-key`". The role split predates this module; what was missing was any path
+ * that read it as a GRANT.
+ */
+export const NOTION_WORK_CREDENTIAL = "team-key";
+/**
+ * The domain a CALLING SESSION belongs to, whatever surface it was woken on.
+ *
+ * Two resolvers, because a Notion page id is not compared the way every other surface key is:
+ * `notionPageDomain` canonicalises the UUID (dashes are cosmetic in Notion ids) and is
+ * workspace-blind on its roster leg, while `resolveDomainForChannel` compares whole keys verbatim.
+ * Sending a `notion/…` key through the verbatim comparison would miss a roster entry written with
+ * the other dash convention — a silent "no domain", i.e. a silent loss of the grant.
+ *
+ * Pure: `domains` is injected, like every other decision in this bundle.
+ */
+export function notionCallerDomain(surfaceKey, domains) {
+    const parts = surfaceKey.split("/");
+    if (parts[0] === "notion" && parts.length === 3 && parts[2]) {
+        return notionPageDomain(parts[1] || undefined, parts[2], domains).domain;
+    }
+    return resolveDomainForChannel(surfaceKey, domains).domain;
+}
+/**
+ * This session's Notion WORK grant, or `undefined` when its domain holds none.
+ *
+ * FAIL-SOFT ON AN UNRESOLVABLE CONTEXT, and that is the fail-CLOSED direction here: a synthetic or
+ * identity-less ctx has no partition, so it resolves no domain, so it holds no grant, so no work
+ * tool mounts. There is no arm in which an unreadable context widens the surface. Core's
+ * {@link callerWorkDomain} owns that chain and that fail direction for every provider (OPE-951);
+ * Notion passes {@link notionCallerDomain} as the resolver because of the UUID rule above. The guard
+ * now covers the RESOLVER too, not only the partition read: a throw out of the roster comparison
+ * also resolves to no grant, which is the same direction.
+ */
+export function notionWorkGrant(ctx, domains) {
+    const domain = callerWorkDomain(ctx, () => domains, notionCallerDomain);
+    return domain ? notionWorkGrantForDomain(domain) : undefined;
+}
+/**
+ * The MOUNT predicate for a Notion work tool — {@link notionWorkGrant} as a boolean, with `domains`
+ * as a LAZY thunk and every failure absorbed.
+ *
+ * Both properties matter at a `session.started` resolver. The thunk is the same dependency-injection
+ * shape `sourceScopedMount` uses, so a resolver that runs before the app registers its config does
+ * not throw on `getConfig()`. And an absorbed failure resolves FALSE: an unreadable config hides the
+ * work tools rather than mounting them, which is the fail-closed direction.
+ */
+export function notionWorkMount(ctx, domains) {
+    try {
+        return notionWorkGrant(ctx, domains()) !== undefined;
+    }
+    catch {
+        return false;
+    }
+}
+/** {@link notionWorkGrant} for a domain already in hand — the form {@link notionWorkGrant} and
+ *  {@link notionWorkCredential} share, and the one place the (connector, role) pair is named. */
+function notionWorkGrantForDomain(domain) {
+    if (!hasWorkGrant(domain, NOTION_PROVIDER, NOTION_WORK_CREDENTIAL))
+        return undefined;
+    const credential = workGrantCredential(domain, NOTION_PROVIDER, NOTION_WORK_CREDENTIAL);
+    return credential ? { domain, credential } : undefined;
+}
+/** The credential id a work-granted domain's Notion calls run under, or undefined when it holds no
+ *  grant. Never falls back to the org default — see the header. */
+export function notionWorkCredential(domain) {
+    return domain ? notionWorkGrantForDomain(domain)?.credential : undefined;
+}
+/**
+ * The Notion WORKSPACE ids a domain names for itself — every `notion/<workspace>/…` entry in its
+ * roster and its claims, de-duplicated.
+ *
+ * WHY A WORK READ NEEDS THIS. `notionPageDomain`'s CLAIM leg needs a workspace to build the key it
+ * matches; its roster leg does not. A Notion-woken caller supplies its own workspace from its
+ * surface key, but a Slack-woken worker has none — so without this, a work-granted domain that
+ * expresses its Notion membership as a CONTAINER would resolve nothing cross-surface, and the
+ * grant would silently work for pages the config names outright ONLY. Reading the candidates off the CALLER's
+ * OWN domain keeps that strictly inside what the domain already declares: it can never introduce a
+ * workspace nobody wrote down.
+ */
+export function notionWorkspacesOf(domain) {
+    const out = new Set();
+    for (const key of domain.reach ?? []) {
+        const parts = key.split("/");
+        if (parts[0] === "notion" && parts.length >= 2 && parts[1])
+            out.add(parts[1]);
+    }
+    return [...out];
+}
+//# sourceMappingURL=notion-work.js.map

package/dist/agent/channels/notion-work.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"notion-work.js","sourceRoot":"","sources":["../../../agent/channels/notion-work.ts"],"names":[],"mappings":"AAAA,gGAAgG;AAChG,EAAE;AACF,iGAAiG;AACjG,mGAAmG;AACnG,mGAAmG;AACnG,iGAAiG;AACjG,+FAA+F;AAC/F,8FAA8F;AAC9F,iCAAiC;AACjC,EAAE;AACF,gGAAgG;AAChG,iGAAiG;AACjG,iGAAiG;AACjG,sFAAsF;AACtF,EAAE;AACF,qDAAqD;AACrD,EAAE;AACF,iGAAiG;AACjG,kGAAkG;AAClG,gDAAgD;AAChD,sFAAsF;AACtF,mGAAmG;AACnG,2FAA2F;AAC3F,EAAE;AACF,kFAAkF;AAClF,iGAAiG;AACjG,gGAAgG;AAChG,yEAAyE;AAEzE,OAAO,EACL,gBAAgB,EAChB,YAAY,EACZ,uBAAuB,EACvB,mBAAmB,GAGpB,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,UAAU,CAAC;AASjD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,kBAAkB,CAAC,UAAkB,EAAE,OAA0B;IAC/E,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,OAAO,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC;IAC3E,CAAC;IACD,OAAO,uBAAuB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC;AAC7D,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,eAAe,CAAC,GAAoB,EAAE,OAA0B;IAC9E,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;IACxE,OAAO,MAAM,CAAC,CAAC,CAAC,wBAAwB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/D,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,eAAe,CAAC,GAAoB,EAAE,OAAgC;IACpF,IAAI,CAAC;QACH,OAAO,eAAe,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,KAAK,SAAS,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;iGACiG;AACjG,SAAS,wBAAwB,CAAC,MAAc;IAC9C,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,eAAe,EAAE,sBAAsB,CAAC;QAAE,OAAO,SAAS,CAAC;IACrF,MAAM,UAAU,GAAG,mBAAmB,CAAC,MAAM,EAAE,eAAe,EAAE,sBAAsB,CAAC,CAAC;IACxF,OAAO,UAAU,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACzD,CAAC;AAED;mEACmE;AACnE,MAAM,UAAU,oBAAoB,CAAC,MAA0B;IAC7D,OAAO,MAAM,CAAC,CAAC,CAAC,wBAAwB,CAAC,MAAM,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3E,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAc;IAC/C,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC;YAAE,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC;AAClB,CAAC"}

package/dist/agent/channels/notion.d.ts

@@ -0,0 +1,95 @@
+import { type RouteHandlerArgs } from "eve/channels";
+import { type SurfaceTrust } from "@open-everywhere/core/agent/adapter-api.js";
+import { type NotionSessionState } from "./notion-webhook.js";
+import { type NotionWebhookTimingRecorder } from "./notion-webhook-timing.js";
+import { type NotionSupervisorDeps } from "./notion-supervisor.js";
+/** Reset the cached bot users (tests only) — re-exported at its historical name. */
+export { _resetNotionBotUserCache } from "./notion-bot-user.js";
+/**
+ * The Notion arm of the SINGLE-WINDOW PRIVACY FLOOR — the one decision that admits a page into the
+ * shared cross-surface window. Pure and SYNCHRONOUS: every input is a fact the pipeline already
+ * resolved, so no network call enters this gate. It holds the same role as the Discord and Teams
+ * arms (discordSingleWindowPrivacyOk / teamsSingleWindowPrivacyOk) and is a unit-tested truth table
+ * the same way. It takes a `declared` resolver where those take a boolean `vouched` one, because
+ * this floor must tell a `public` DEMOTION apart from "nothing declared" — see below.
+ *
+ * THREE POSITIVE SIGNALS, and each one is an OPERATOR DECLARATION. None is an inference from a
+ * Notion API field: a page's `public_url` is null for the common guest-shared vector, so a floor
+ * that read it would leak private cross-surface context to an external guest.
+ *   1. `OE_TRUST=internal`, the blanket switch for an internal-only deployment;
+ *   2. the per-surface VOUCH (identity/trust.ts) — an `internal` declaration on the workspaceKey
+ *      `notion/<ws>` or on the full surfaceKey `notion/<ws>/<page>`, most-specific-wins;
+ *   3. the ANCESTOR-TRUST verdict for this delivery (OPE-492): the page sits under a page the
+ *      operator declared a TRUST ROOT.
+ *
+ * 🔴 SIGNAL 3 IS HANDED DOWN, NEVER RE-DERIVED (OPE-540). The webhook core walks the parent chain
+ * ONCE per delivery, under the credential that verified it, and the dispatch carries the verdict
+ * here — the same value the `notion.dispatched` audit row records. The floor only reads it, so the
+ * floor stays a synchronous predicate.
+ *
+ * 🔴 FAIL-CLOSED ON ABSENCE. `trust` is undefined on the `no-roots` verdict, because the webhook
+ * core omits the field there. `trusted` is false on every other refusal. Both read as "not
+ * internal": no throw, no pass.
+ *
+ * 🔴 A `public` DECLARATION DEMOTES ABOVE THE TRUST-ROOT VERDICT, as it does on the binding plane:
+ * identity/binding.ts orders `declaredExternal ?? raw.trust ?? … ?? vouched`, so `bindFrom` puts the
+ * operator's `public` carve-out above the walk's `internal`. A page declared `public` inside a
+ * trusted subtree keeps the shared org brain switched off, and this floor keeps it out of the shared
+ * window for the same reason.
+ *
+ * ⚠️ THE TWO PLANES STILL DIVERGE UNDER `OE_TRUST=internal`. The blanket switch is this floor's FIRST
+ * leg, above the demotion — exactly as on the Discord and Teams floors — while on the binding plane
+ * `local.trust` sits BELOW the demotion. So under the blanket, a `public`-declared page is admitted
+ * to the shared window while its org-brain binding stays external. Pre-existing admission-gate
+ * behaviour, kept deliberately for cross-platform consistency (docs/how-it-works/identity.md).
+ */
+export declare function notionSingleWindowPrivacyOk(input: {
+    /** `notion/<ws>` — a workspace-level declaration covers every page in the workspace. */
+    readonly workspaceKey: string;
+    /** `notion/<ws>/<page>` — a page-level declaration narrows to one page and beats the workspace. */
+    readonly surfaceKey: string;
+    /** The ancestor-walk verdict this delivery carries. Undefined ⇒ the operator declared no roots. */
+    readonly trust?: {
+        readonly trusted: boolean;
+    };
+}, deps?: {
+    /** The declaration resolver, injected by tests. Returns the most-specific declared value, or
+     *  undefined when the operator declared nothing for this page. */
+    readonly declared?: (workspaceKey: string, surfaceKey: string) => SurfaceTrust | undefined;
+    readonly trustEnv?: string | undefined;
+}): boolean;
+type NotionState = NotionSessionState;
+/**
+ * Live supervisor deps (mirrors slack-events.ts liveSupervisorDeps): create-or-fetch / rotate /
+ * force-rotate over the (org, surfaceKey) channel_session registry with the reserved :oe-sup:g
+ * token, and a `wake` that continues the session under that token. org is the deployment org (a
+ * deployment fact — never crosses the eve-free core boundary). Rotation reuses shouldRotate AS-IS.
+ * A rotation carries the OUTGOING generation's recorded TAIL forward (OPE-794).
+ */
+export declare function liveNotionSupervisorDeps(send: SendFn, surfaceKey: string, to?: RouteHandlerArgs["to"], respond?: RespondFn, timing?: NotionWebhookTimingRecorder): NotionSupervisorDeps;
+/** The channel `send` shape this route uses (structural — avoids importing eve's SendPayload, and
+ *  since eve 0.31 there is no public `SendFn` to import at all: the address moved onto
+ *  `from(address)` and `context` moved from the payload into the send options. {@link notionSendFrom}
+ *  is the one adapter that bridges the two shapes). */
+type SendFn = (payload: {
+    message: string;
+    context?: string[];
+}, opts: {
+    auth: unknown;
+    continuationToken: string;
+    state: NotionState;
+}) => Promise<void>;
+/** The ANSWER delivery (OPE-1305) — `from(token).respond([{requestId, text}])`, the one primitive
+ *  that reaches a delegated worker. Structural, for the same reason {@link SendFn} is: eve exports no
+ *  public type for it. */
+type RespondFn = (input: {
+    requestId: string;
+    text: string;
+}, opts: {
+    auth: unknown;
+    continuationToken: string;
+    context?: readonly string[];
+}) => Promise<void>;
+declare const _default: import("eve/channels").Channel<NotionSessionState, Record<string, unknown>, Record<string, unknown>>;
+export default _default;
+//# sourceMappingURL=notion.d.ts.map

package/dist/agent/channels/notion.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"notion.d.ts","sourceRoot":"","sources":["../../../agent/channels/notion.ts"],"names":[],"mappings":"AA4DA,OAAO,EAAuB,KAAK,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAC1E,OAAO,EAkCL,KAAK,YAAY,EAYlB,MAAM,4CAA4C,CAAC;AAapD,OAAO,EAA0G,KAAK,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAYtK,OAAO,EAKL,KAAK,2BAA2B,EACjC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAKL,KAAK,oBAAoB,EAG1B,MAAM,wBAAwB,CAAC;AAwBhC,oFAAoF;AACpF,OAAO,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AA2DhE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,wBAAgB,2BAA2B,CACzC,KAAK,EAAE;IACL,wFAAwF;IACxF,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,mGAAmG;IACnG,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,mGAAmG;IACnG,QAAQ,CAAC,KAAK,CAAC,EAAE;QAAE,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;CAChD,EACD,IAAI,GAAE;IACJ;sEACkE;IAClE,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,KAAK,YAAY,GAAG,SAAS,CAAC;IAC3F,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACnC,GACL,OAAO,CAOT;AAID,KAAK,WAAW,GAAG,kBAAkB,CAAC;AAEtC;;;;;;GAMG;AAQH,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,MAAM,EAClB,EAAE,CAAC,EAAE,gBAAgB,CAAC,IAAI,CAAC,EAC3B,OAAO,CAAC,EAAE,SAAS,EACnB,MAAM,CAAC,EAAE,2BAA2B,GACnC,oBAAoB,CA0ItB;AAED;;;uDAGuD;AACvD,KAAK,MAAM,GAAG,CACZ,OAAO,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,EAChD,IAAI,EAAE;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,iBAAiB,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,WAAW,CAAA;CAAE,KACnE,OAAO,CAAC,IAAI,CAAC,CAAC;AAanB;;0BAE0B;AAC1B,KAAK,SAAS,GAAG,CAAC,KAAK,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,EAAE,IAAI,EAAE;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,iBAAiB,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC"}