@open-everywhere/provider-notion 0.1.0

package/dist/agent/memory/memory.js

@@ -0,0 +1,471 @@
+// The Notion memory backing — a domain's (or the org default's) memory living
+// in a Notion page subtree (docs/capabilities/memory.md "Notion backing"). The silo points at a
+// ROOT page (`container` = the page id). By default it pulls that page AND ALL its child
+// pages RECURSIVELY (containment only — child pages, never @-mentions/links, which would
+// explode), rendering each page's blocks to one markdown file keyed by its page-path, so
+// the Notion hierarchy becomes the memory file hierarchy. Set the silo's `recursive: false`
+// to pull JUST the one page (a single curated page whose sub-pages are noise).
+//
+// THE DEFAULT USE IS READ-ONLY: a curated, human-maintained baseline the agent READS as context
+// (the read-only org default / a read-only domain silo). Sharing the ROOT page with the integration
+// grants the whole subtree, matching the recursive pull.
+//
+// WRITE-BACK IS OPT-IN AND APPEND-ONLY (OPE-70). A silo the author declares WRITABLE (`readOnly`
+// unset) persists the session's added lines to the matching page through Notion's own block-append
+// API. Every other outcome THROWS: a read-only silo, a file with no page, an edit above the tail,
+// and a line the codec cannot store unchanged. Nothing here ever returns "saved" over bytes that
+// went nowhere — that silent loss is the defect this backing used to have.
+//
+// 🔴 THE OPT-IN HAS TWO HALVES, AND THE SECOND IS NOT IN THIS PACKAGE. The silo declares itself
+// writable, AND the deployment's notion `memory` credential must admit `PATCH` on `/v1/blocks/`.
+// The shipped entry (`agent/access/connector-credentials.ts`) admits GET ONLY, so on an unchanged
+// deployment the endpoint fence refuses every append BEFORE dispatch and the persist fails loud.
+// That is deliberate: widening a credential's method set is a capability expansion, which belongs
+// to the operator's own access config and never to a provider package. `write` below turns the
+// fence's bare refusal into an error that names the file to change.
+//
+// 🔴 WHAT A WRITABLE NOTION SILO CANNOT HOLD. Three host-minted file shapes have no Notion page and
+// therefore refuse the whole tier's write: `RECURRING.md` (the dream cycle's enrichment),
+// `<file>.conflict-<session>.md` (the merge's parked concurrent write) and
+// `<file>.rejected-<session>.md` (the write guard's parked destructive overwrite). A deployment that
+// runs the dream cycle, or that shares one silo across concurrent sessions, must keep its writable
+// memory on a backing that owns its files.
+//
+// Lives in @open-everywhere/adapters (Notion is a vendor integration). Uses the raw Notion
+// REST API via an injectable fetch (no SDK dependency needed; offline-testable). Core
+// stays vendor-free; this registers itself under the "notion" provider id.
+import { registerProvider, registerConnectorMemory, domainCredentialId, findConnectorCredential, getSecretVia, safeName, makeSelector, normalizeSelection, assertCredentialEndpointAllowed, withRetryAfterLoose, } from "@open-everywhere/core/agent/adapter-api.js";
+import { createHash } from "node:crypto";
+import { posix } from "node:path";
+import { renderBlocks, pageTitle, contentLines, blocksFromMarkdown, PAGE_BLOCK_TYPES, } from "./blocks.js";
+// The provider name has ONE definition, beside the channel role that shares it. `notion-credentials.ts`
+// imports nothing but the core adapter-api, so this costs the memory plane no channel machinery.
+import { NOTION_PROVIDER } from "../channels/notion-credentials.js";
+const API = "https://api.notion.com";
+const NOTION_VERSION = "2022-06-28";
+/**
+ * The ORG-DEFAULT memory credential id — the ROLE a domain override replaces, and the role name a
+ * `credentials` binding must name (`{ connector: "notion", credential: "memory", use: "<id>" }`).
+ *
+ * It is a SEPARATE role from the channel plumbing key on purpose. An operator may share a domain's
+ * BRAIN page tree with one integration and its WORK pages with another, and `Domain.credentials` is
+ * keyed on the role exactly so that stays expressible.
+ */
+export const NOTION_MEMORY_CREDENTIAL = "memory";
+// Bounds (the subtree is paginated + rate-limited; cap to avoid runaway pulls).
+const MAX_PAGES = Number(process.env.OE_NOTION_MAX_PAGES) || 200;
+const MAX_PAGE_DEPTH = Number(process.env.OE_NOTION_MAX_DEPTH) || 6;
+const MAX_BLOCK_DEPTH = 4;
+const TTL_MS = Number(process.env.OE_NOTION_TTL_MS) || 5 * 60_000;
+/** Notion's per-request cap on `children` for the block-append API. Longer appends are batched. */
+const MAX_APPEND_CHILDREN = 100;
+/**
+ * Wrap an {@link HttpFetch} so every call is checked against a credential's endpoint rules
+ * (OPE-505) BEFORE it is dispatched — this backing's own funnel, the same shape as
+ * `channels/notion-api.ts`'s `notionFetch`/`guardCredentialFetch`, adapted to `HttpFetch`'s
+ * (non-`Response`) return shape so the two can't be interchanged by accident.
+ *
+ * `endpoints` undefined returns `base` UNCHANGED, not a wrapper that always allows — an
+ * unnarrowed credential stays byte-identical to the pre-fence path, including object identity.
+ */
+function guardHttpFetch(endpoints, base) {
+    if (endpoints === undefined)
+        return base;
+    return async (url, init) => {
+        assertCredentialEndpointAllowed(endpoints, url, init.method, "notion memory credential");
+        return base(url, init);
+    };
+}
+/** Minimal Notion REST client — lists a block's children (paginated) and appends new ones.
+ *
+ * `endpoints` (OPE-505) is the credential's declared endpoint narrowing, carried alongside the
+ * token so the fence travels with it — see {@link resolveNotionMemoryCredential}, the ONLY
+ * resolver, which returns the pair rather than a bare token for exactly this reason.
+ *
+ * 429/`Retry-After` BACKOFF (OPE-1255): `children` honours a 429 through `withRetryAfterLoose` —
+ * the same shared primitive `channels/notion-api.ts`'s `notionFetch` uses, adapted for `HttpFetch`'s
+ * response shape, which carries no `headers` accessor of its own. This was the ONE Notion transport
+ * OPE-1233 left uncovered — see `docs/extending/provider-rate-limits.md`. */
+export class NotionClient {
+    token;
+    apiBase;
+    retry;
+    fetchFn;
+    constructor(token, fetchFn = globalThis.fetch, apiBase = API, endpoints, 
+    /** Tightens or drives the 429 backoff (OPE-1255) — a test injects a stub `sleep`; omitted
+     *  takes the shared defaults from `channels/rate-limit-retry.ts`. */
+    retry) {
+        this.token = token;
+        this.apiBase = apiBase;
+        this.retry = retry;
+        this.fetchFn = guardHttpFetch(endpoints, fetchFn);
+    }
+    async children(blockId) {
+        const out = [];
+        let cursor;
+        do {
+            const qs = new URLSearchParams({ page_size: "100", ...(cursor ? { start_cursor: cursor } : {}) });
+            const res = await withRetryAfterLoose(() => this.fetchFn(`${this.apiBase}/v1/blocks/${blockId}/children?${qs}`, {
+                method: "GET",
+                headers: {
+                    authorization: `Bearer ${this.token}`,
+                    "Notion-Version": NOTION_VERSION,
+                    accept: "application/json",
+                },
+            }), { ...this.retry, surface: "notion", operation: "blocks.children.list" });
+            if (!res.ok)
+                throw new Error(`notion children ${blockId}: ${res.status} ${await res.text()}`);
+            const body = (await res.json());
+            out.push(...(body.results ?? []));
+            cursor = body.has_more && body.next_cursor ? body.next_cursor : undefined;
+        } while (cursor);
+        return out;
+    }
+    /**
+     * APPEND blocks to the end of a page (or of any block that takes children) — Notion's own
+     * `PATCH /v1/blocks/{id}/children`, the write half of this backing (OPE-70).
+     *
+     * It rides the SAME guarded fetch the read does, so a credential narrowed to `GET` refuses the
+     * append before it is dispatched, and it carries the same 429 backoff. Batched at Notion's
+     * 100-children cap; a batch that fails THROWS, so a partial append surfaces as a failed persist
+     * rather than a success line over lost bytes.
+     */
+    async appendChildren(blockId, children) {
+        for (let i = 0; i < children.length; i += MAX_APPEND_CHILDREN) {
+            const batch = children.slice(i, i + MAX_APPEND_CHILDREN);
+            const res = await withRetryAfterLoose(() => this.fetchFn(`${this.apiBase}/v1/blocks/${blockId}/children`, {
+                method: "PATCH",
+                headers: {
+                    authorization: `Bearer ${this.token}`,
+                    "Notion-Version": NOTION_VERSION,
+                    accept: "application/json",
+                    "content-type": "application/json",
+                },
+                body: JSON.stringify({ children: batch }),
+            }), { ...this.retry, surface: "notion", operation: "blocks.children.append" });
+            if (!res.ok)
+                throw new Error(`notion append ${blockId}: ${res.status} ${await res.text()}`);
+        }
+    }
+}
+/** Recursively fetch a block's content children (excluding sub-pages), bounded by depth. */
+async function loadBlockTree(client, blockId, depth) {
+    const blocks = await client.children(blockId);
+    if (depth >= MAX_BLOCK_DEPTH)
+        return blocks;
+    for (const b of blocks) {
+        if (b.has_children && b.id && !PAGE_BLOCK_TYPES.has(b.type)) {
+            b.children = await loadBlockTree(client, b.id, depth + 1);
+        }
+    }
+    return blocks;
+}
+/**
+ * PASS 1 — walk the page tree, loading each page's blocks and recording its on-disk file
+ * key (so PASS 2 can rewrite inter-page links). The root's title isn't known from a parent
+ * block, so it falls back to "index".
+ */
+async function collect(client, pageId, title, segs, stats, out, selector) {
+    if (stats.pages >= MAX_PAGES || segs.length > MAX_PAGE_DEPTH) {
+        stats.capped = true;
+        return;
+    }
+    stats.pages++;
+    // Blocks are loaded regardless (we need them to find child pages even when this page is
+    // a non-included pass-through on the way to a deeper selected page).
+    const blocks = await loadBlockTree(client, pageId, 0);
+    if (selector.includes(segs, pageId)) {
+        const key = segs.length === 0 ? "MEMORY.md" : `${segs.join("/")}.md`;
+        out.push({ key, id: pageId, title, blocks });
+    }
+    if (!selector.descends(segs, pageId))
+        return; // selection says don't walk child pages
+    for (const b of blocks) {
+        if (PAGE_BLOCK_TYPES.has(b.type) && b.id) {
+            await collect(client, b.id, pageTitle(b), [...segs, safeName(pageTitle(b))], stats, out, selector);
+        }
+    }
+}
+/**
+ * PASS 2 — render each collected page, rewriting page mentions / link_to_page blocks to
+ * the RELATIVE on-disk path of the target file (when the target is in this subtree).
+ */
+function renderCollected(pages) {
+    const byId = new Map();
+    for (const pg of pages)
+        byId.set(pg.id, { path: pg.key, title: pg.title });
+    const files = {};
+    for (const pg of pages) {
+        const fromDir = posix.dirname(pg.key);
+        const resolve = (id) => {
+            const t = byId.get(id);
+            if (!t)
+                return undefined; // outside this silo's subtree → plain text
+            const rel = posix.relative(fromDir, t.path);
+            return { path: rel.length > 0 ? rel : t.path, title: t.title };
+        };
+        files[pg.key] = renderBlocks(pg.blocks, resolve);
+    }
+    return files;
+}
+/**
+ * Build the Notion memory provider. `deps.client(silo, credentialId)` yields a client for a silo
+ * under one integration's token. Reads are cached for TTL_MS — a curated baseline changes rarely,
+ * and the subtree pull is several API calls.
+ *
+ * 🔴 THE CACHE KEY CARRIES THE CREDENTIAL AND THE SELECTION, never the root page alone. Two
+ * integrations may both be shared a page and see DIFFERENT subtrees of it, because Notion shares per
+ * page tree; and two silos may name one page under one integration and select different subsets of
+ * it. Keying on the page alone let the first reader's files serve the second — the cross-domain read
+ * the per-domain credential exists to prevent, and the subset leak `recursive`/`select` exists to
+ * prevent. See {@link cacheKeyFor}.
+ */
+export function makeNotionProvider(deps) {
+    const cache = new Map();
+    /**
+     * The cache key. 🔴 IT CARRIES THE SELECTION, not just (credential, root page). Two silos may
+     * name the SAME root page under the SAME integration and select different subsets of it
+     * (`recursive: false`, or a `select` set) — keying on the page alone served the first reader's
+     * subset to the second, which is a silo reading files its own config excluded.
+     */
+    function cacheKeyFor(silo, credentialId) {
+        return `${credentialId} ${silo.container} ${JSON.stringify(normalizeSelection(silo))}`;
+    }
+    function requireContainer(silo) {
+        if (!silo?.container) {
+            throw new Error("notion memory backing needs a silo with container = the root page id (memory/silo.ts).");
+        }
+        return silo;
+    }
+    /** Pull the subtree, serving a cache hit unless `fresh` is set. The WRITE path always asks for
+     *  `fresh`: it diffs against the page's CURRENT content, and a five-minute-old copy would make it
+     *  append lines the page already carries. */
+    async function pull(silo, access, fresh) {
+        const root = silo.container;
+        const credentialId = deps.credentialFor?.(access) ?? NOTION_MEMORY_CREDENTIAL;
+        const cacheKey = cacheKeyFor(silo, credentialId);
+        const hit = cache.get(cacheKey);
+        if (!fresh && hit && Date.now() - hit.atMs < TTL_MS)
+            return hit.pull;
+        const pages = [];
+        const stats = { pages: 0, capped: false };
+        const selector = makeSelector(normalizeSelection(silo)); // recursive/select → which pages
+        await collect(await deps.client(silo, credentialId), root, "index", [], stats, pages, selector);
+        if (stats.capped) {
+            console.warn(`[open-everywhere:notion] page "${root}" pull hit the cap (${MAX_PAGES} pages / depth ${MAX_PAGE_DEPTH}); some pages omitted.`);
+        }
+        const result = { files: renderCollected(pages), pageIds: new Map(pages.map((pg) => [pg.key, pg.id])) };
+        cache.set(cacheKey, { pull: result, atMs: Date.now() });
+        return result;
+    }
+    async function read(_p, _tier, silo, access) {
+        return (await pull(requireContainer(silo), access, false)).files;
+    }
+    /**
+     * WRITE ONE TIER BACK TO NOTION (OPE-70) — an APPEND of the lines the session added, through
+     * Notion's own block-append API, for a silo the author declared WRITABLE.
+     *
+     * 🔴 THE DEFECT THIS CLOSES IS SILENT LOSS. `writeTier` used to return `null` for every silo. A
+     * silo declared writable on provider `notion` is in the session's WRITE plan (memory/resolve.ts:
+     * `writes = reads.filter(!readOnly)`), so the write fence ALLOWS the sandbox edit, the persist
+     * logs a normal success line, and the bytes reach nothing. `null` also means the `memory.write`
+     * audit row never fires, so the write left no trace anywhere.
+     *
+     * THE THREE RULES, and each one throws rather than dropping bytes:
+     *   1. A READ-ONLY silo is REFUSED. It is a projection of Notion, and its update route is the
+     *      Notion tools — see the banner in core's `memory/readonly.ts`.
+     *   2. A file key with no page in the pulled subtree is REFUSED. Creating pages is a different
+     *      API and a different decision (where in the tree? under what title?), so v1 appends to
+     *      pages that already exist.
+     *   3. The backing is APPEND-ONLY. A page's current content must still be a PREFIX of the new
+     *      content; an edit or a deletion above the tail cannot be expressed as an append, so it is
+     *      refused rather than half-applied.
+     */
+    async function write(_p, _tier, files, _message, siloArg, access) {
+        const silo = requireContainer(siloArg);
+        if (silo.readOnly === true) {
+            const via = silo.skill ? `the \`${silo.skill}\` skill` : "the Notion tools";
+            throw new Error(`notion memory: silo "${silo.name}" is READ-ONLY (memory/silo.ts \`readOnly\`), so this write of ` +
+                `${Object.keys(files).length} file(s) was REFUSED and NOTHING was saved. Update the Notion source with ` +
+                `${via} and the projection refreshes from it, or declare the silo writable to let memory append to its pages.`);
+        }
+        const credentialId = deps.credentialFor?.(access) ?? NOTION_MEMORY_CREDENTIAL;
+        const current = await pull(silo, access, true);
+        const appends = [];
+        for (const [key, content] of Object.entries(files)) {
+            const pageId = current.pageIds.get(key);
+            if (pageId === undefined) {
+                throw new Error(`notion memory: silo "${silo.name}" has no Notion page for "${key}", and this backing appends to ` +
+                    `EXISTING pages only — it does not create them. NOTHING was saved, including the other file(s) in ` +
+                    `this write: the whole tier is refused together so no half-written state reaches Notion. Add the ` +
+                    `page under root page "${silo.container}" in Notion (it becomes writable on the next pull), or move ` +
+                    `this silo to a backing that owns its files (github/postgres/sqlite). 🔴 THREE FILE SHAPES ARE ` +
+                    `HOST-MINTED and can never map to a page: "RECURRING.md" (the dream cycle's enrichment), ` +
+                    `"<file>.conflict-<session>.md" (a concurrent write parked by the merge) and ` +
+                    `"<file>.rejected-<session>.md" (a destructive overwrite parked by the write guard). A deployment ` +
+                    `that runs any of those must not hold its writable memory on this backing.`);
+            }
+            const cur = contentLines(current.files[key] ?? "");
+            const next = contentLines(content);
+            // The page's current lines must still be a PREFIX of the new ones. A DELETION lands here too:
+            // the shorter `next` has `undefined` where a current line was, so it diverges at that index.
+            const diverges = cur.findIndex((line, i) => line !== next[i]);
+            if (diverges !== -1) {
+                throw new Error(`notion memory: "${key}" in silo "${silo.name}" changed at line ${diverges + 1}, and this backing is ` +
+                    `APPEND-ONLY — it adds blocks to the end of a page and cannot edit or remove one. Nothing was saved. ` +
+                    `Change that content in Notion itself, or move this silo to a backing that owns its files ` +
+                    `(github/postgres/sqlite).`);
+            }
+            const added = next.slice(cur.length);
+            if (added.length > 0)
+                appends.push({ pageId, key, lines: added });
+        }
+        if (appends.length === 0)
+            return null; // nothing changed — the provider contract's null
+        // Every batch is BUILT and round-trip-proven before ANY of them is dispatched, so a line this
+        // codec cannot store leaves the page untouched rather than half-appended.
+        const batches = appends.map((a) => ({ ...a, blocks: blocksFromMarkdown(a.lines) }));
+        const client = await deps.client(silo, credentialId);
+        // 🔴 DROP THE CACHE BEFORE THE FIRST APPEND, never after the last. The fresh pull above put the
+        // PRE-append snapshot in the cache. A batch that throws part-way leaves earlier batches' blocks
+        // in Notion, and a cache dropped only on success would then serve that stale snapshot for the
+        // rest of the TTL — a reader seeing memory Notion already holds.
+        cache.delete(cacheKeyFor(silo, credentialId));
+        const version = createHash("sha256");
+        for (const batch of batches) {
+            try {
+                await client.appendChildren(batch.pageId, batch.blocks);
+            }
+            catch (err) {
+                // The likeliest cause is the credential's own endpoint narrowing: the shipped `memory`
+                // credential admits GET only, and the fence refuses the PATCH before dispatch. That refusal
+                // reads as a bare "BLOCKED PATCH …", which does not tell an operator where the fix lives.
+                throw new Error(`notion memory: appending to silo "${silo.name}" failed for "${batch.key}" — ${String(err)}. ` +
+                    `Nothing further was written. If this is an endpoint refusal, the notion "memory" credential ` +
+                    `must admit PATCH on /v1/blocks/ (agent/access/connector-credentials.ts): write-back is a ` +
+                    `deliberate capability expansion, so a deployment opts into it in that file, not here.`, { cause: err });
+            }
+            version.update(`${batch.key}\n${batch.lines.join("\n")}\n`);
+        }
+        return version.digest("hex");
+    }
+    return {
+        id: "notion",
+        readTier: read,
+        // Never seeds: a Notion page tree is authored in Notion, so "ensure" is just the pull. A silo
+        // whose root page is empty materialises empty rather than having a seed written into someone's
+        // Notion workspace.
+        ensureTier: read,
+        writeTier: write,
+        deleteTier: async (_p, _tier, silo) => {
+            // A read-only projection has nothing of ours to erase — the source is authored in Notion.
+            if (silo?.readOnly === true)
+                return;
+            // A WRITABLE silo does hold bytes this backing appended, and v1 cannot remove them: block
+            // deletion is a separate API and a separate decision. Refuse rather than report an erasure
+            // that did not happen — a purge that silently no-ops is the worst version of this defect.
+            throw new Error(`notion memory: silo "${silo?.name ?? "(unnamed)"}" is writable, and this backing cannot erase a tier — ` +
+                `it appends blocks and never deletes them. NOTHING was erased. Remove the content in Notion itself, or ` +
+                `hold erasable memory in a backing with real deletion (postgres/sqlite).`);
+        },
+    };
+}
+/**
+ * The Notion credential ONE memory read runs under — the org default, or a bound domain's own
+ * integration — together with its endpoint rules. THE ONLY way to resolve a Notion memory
+ * credential.
+ *
+ * TWO PATHS, and the difference is the whole rule (OPE-467, applied to memory by OPE-485):
+ *   • `credentialId` IS the org-default role ⇒ the deployment key, resolved through the explicit
+ *     broker + ref stamp `registerNotionMemory` carries. Unchanged behaviour for every deployment
+ *     that binds nothing, which is nearly all of them. Its endpoint rules come from the SAME-named
+ *     `"memory"` entry in the registered provider set (agent/access/providers.ts) — that entry's
+ *     `secretRef` is not what this path reads (see the comment there), but its `endpoints` is, so
+ *     the org-default read is narrowed exactly as the entry declares.
+ *   • `credentialId` is a BOUND domain's own credential ⇒ that `ConnectorCredential`'s own
+ *     `secretRef` + `broker` + `endpoints`, resolved through the same seam `channels/notion-api.ts`
+ *     uses.
+ *
+ * 🔴 A BOUND DOMAIN NEVER FALLS BACK TO THE ORG KEY. When the named credential is absent from the
+ * provider set, or carries no `secretRef`, this THROWS. Quietly serving the deployment key there
+ * would hand the domain the exact integration it was bound away from, which is the isolation the
+ * binding was created to buy. `assertDomainCredentialsResolvable` already refuses such a config at
+ * boot, so this throw is the second line, not the first.
+ */
+export async function resolveNotionMemoryCredential(credentialId, broker, secretRef) {
+    if (credentialId === NOTION_MEMORY_CREDENTIAL) {
+        const token = await getSecretVia(broker, secretRef);
+        return { token, endpoints: findConnectorCredential(NOTION_PROVIDER, NOTION_MEMORY_CREDENTIAL)?.endpoints };
+    }
+    const cred = findConnectorCredential(NOTION_PROVIDER, credentialId);
+    if (!cred?.secretRef) {
+        throw new Error(`notion memory backing: domain credential "${credentialId}" is not a declared notion credential with a secretRef ` +
+            `(agent/access/providers.ts). A bound domain never falls back to the org default "${NOTION_MEMORY_CREDENTIAL}" key.`);
+    }
+    const token = await getSecretVia(cred.broker, cred.secretRef);
+    return { token, endpoints: cred.endpoints };
+}
+/**
+ * THE PRODUCTION WIRING of the credential seam, as a value — the deps {@link registerNotionMemory}
+ * registers. It is exported so a test drives the REAL wiring with only the HTTP call replaced,
+ * rather than restating `credentialFor` and getting a green from its own copy of the rule.
+ *
+ * `fetchFn` is the ONLY injected part. Leave it undefined in production and `NotionClient` uses
+ * `globalThis.fetch`.
+ */
+export function notionMemoryDeps(secretRef, broker, fetchFn) {
+    return {
+        credentialFor: (access) => domainCredentialId(access?.domain, NOTION_PROVIDER, NOTION_MEMORY_CREDENTIAL),
+        client: async (_silo, credentialId) => {
+            const { token, endpoints } = await resolveNotionMemoryCredential(credentialId, broker, secretRef);
+            return new NotionClient(token, fetchFn, API, endpoints);
+        },
+    };
+}
+/**
+ * Register the Notion memory backing, and DECLARE it as a connector-owned memory capability
+ * (OPE-390) so the prefetch invariant applies: a domain may only project a Notion subtree if it
+ * holds the `notion` connector grant. Memory rides the same route as connector access.
+ *
+ * MODE `"materialise"` — the DEFAULT posture: the files are a read-only PROJECTION, not the source
+ * of truth. The subtree is pulled to Markdown, chmod-locked in the sandbox, and the banner routes
+ * writes to Notion's own connector ops. A silo the author declares WRITABLE opts out of that
+ * posture per silo and persists through the append path above (OPE-70); the mode names what a
+ * Notion silo is unless its author says otherwise, and it stays the recommended shape.
+ *
+ * SUBJECT `"app-principal"` — structurally pinned (memory/connector-memory.ts). Materialisation is
+ * host-side at session.started, outside any session and any approval flow, and a shared domain
+ * brain must never be projected through one person's user-subject OAuth token: doing so would bake
+ * their personal access into a cache every session in the domain then reads.
+ *
+ * CREDENTIAL (OPE-485, completing the symmetry ruling's credential half). The domain that OWNS the
+ * silo picks the integration, and a domain that binds none uses the org default — the same one rule
+ * `channels/notion-credentials.ts` states for the channel plane. The seam that carries the domain is
+ * `MemoryAccess` (core `memory/provider.ts`); this backing turns it into a credential id with
+ * `domainCredentialId(access.domain, "notion", "memory")`.
+ *
+ * The ORG DEFAULT still resolves through its explicit home credential BROKER (`getSecretVia`) —
+ * `"db"` + `db:notion:memory` (OPE-408 step 2, re-stamped from `"env"` + `NOTION_TOKEN`),
+ * overridable via `OE_NOTION_SECRET_BROKER`/`OE_NOTION_SECRET_REF`. A BOUND domain resolves its own
+ * `ConnectorCredential` instead, through the same `findConnectorCredential` → `getSecretVia` seam the
+ * channel key uses, and FAILS CLOSED — see {@link resolveNotionMemoryCredential}.
+ *
+ * Resolution stays LAZY (per read, inside makeNotionProvider's client factory): registering is cheap
+ * and side-effect-free, and a missing secret fails loud at read time only when a `notion` silo is
+ * actually used.
+ */
+export function registerNotionMemory(secretRef = process.env.OE_NOTION_SECRET_REF ?? "db:notion:memory", broker = process.env.OE_NOTION_SECRET_BROKER ?? "db") {
+    registerProvider(makeNotionProvider(notionMemoryDeps(secretRef, broker)));
+    registerConnectorMemory({
+        provider: "notion",
+        connector: "notion",
+        mode: "materialise",
+        subject: "app-principal",
+        containerLabel: "the root page id",
+        // No container-level grant check: a Notion page id is not a member of any grant plane the
+        // access resolver models (unlike a GitHub repo, which the `repos` grant enumerates). The
+        // connector grant IS the whole invariant here — deliberately, rather than inventing a
+        // page-level grant vocabulary with no evidence behind it.
+    });
+}
+//# sourceMappingURL=memory.js.map

package/dist/agent/memory/memory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory.js","sourceRoot":"","sources":["../../../agent/memory/memory.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,gGAAgG;AAChG,yFAAyF;AACzF,yFAAyF;AACzF,yFAAyF;AACzF,4FAA4F;AAC5F,+EAA+E;AAC/E,EAAE;AACF,gGAAgG;AAChG,oGAAoG;AACpG,yDAAyD;AACzD,EAAE;AACF,iGAAiG;AACjG,mGAAmG;AACnG,kGAAkG;AAClG,iGAAiG;AACjG,2EAA2E;AAC3E,EAAE;AACF,gGAAgG;AAChG,iGAAiG;AACjG,kGAAkG;AAClG,iGAAiG;AACjG,kGAAkG;AAClG,+FAA+F;AAC/F,oEAAoE;AACpE,EAAE;AACF,oGAAoG;AACpG,0FAA0F;AAC1F,2EAA2E;AAC3E,qGAAqG;AACrG,mGAAmG;AACnG,2CAA2C;AAC3C,EAAE;AACF,2FAA2F;AAC3F,sFAAsF;AACtF,2EAA2E;AAE3E,OAAO,EAGL,gBAAgB,EAChB,uBAAuB,EACvB,kBAAkB,EAClB,uBAAuB,EACvB,YAAY,EACZ,QAAQ,EAGR,YAAY,EACZ,kBAAkB,EAIlB,+BAA+B,EAE/B,mBAAmB,GAEpB,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAClC,OAAO,EACL,YAAY,EACZ,SAAS,EACT,YAAY,EACZ,kBAAkB,EAClB,gBAAgB,GAIjB,MAAM,aAAa,CAAC;AACrB,wGAAwG;AACxG,iGAAiG;AACjG,OAAO,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AAEpE,MAAM,GAAG,GAAG,wBAAwB,CAAC;AACrC,MAAM,cAAc,GAAG,YAAY,CAAC;AAEpC;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,QAAQ,CAAC;AAEjD,gFAAgF;AAChF,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,GAAG,CAAC;AACjE,MAAM,cAAc,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;AACpE,MAAM,eAAe,GAAG,CAAC,CAAC;AAC1B,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC;AAOlE,mGAAmG;AACnG,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAQhC;;;;;;;;GAQG;AACH,SAAS,cAAc,CAAC,SAA8C,EAAE,IAAe;IACrF,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACzC,OAAO,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACzB,+BAA+B,CAAC,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,0BAA0B,CAAC,CAAC;QACzF,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACzB,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;;;6EAS6E;AAC7E,MAAM,OAAO,YAAY;IAIJ,KAAK;IAEL,OAAO;IAIP,KAAK;IATP,OAAO,CAAY;IAEpC,YACmB,KAAa,EAC9B,OAAO,GAAc,UAAU,CAAC,KAA6B,EAC5C,OAAO,GAAW,GAAG,EACtC,SAAmC;IACnC;yEACqE;IACpD,KAAmB;qBANnB,KAAK;uBAEL,OAAO;qBAIP,KAAK;QAEtB,IAAI,CAAC,OAAO,GAAG,cAAc,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IACpD,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,OAAe;QAC5B,MAAM,GAAG,GAAgB,EAAE,CAAC;QAC5B,IAAI,MAA0B,CAAC;QAC/B,GAAG,CAAC;YACF,MAAM,EAAE,GAAG,IAAI,eAAe,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YAClG,MAAM,GAAG,GAAG,MAAM,mBAAmB,CACnC,GAAG,EAAE,CACH,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,cAAc,OAAO,aAAa,EAAE,EAAE,EAAE;gBAClE,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE;oBACP,aAAa,EAAE,UAAU,IAAI,CAAC,KAAK,EAAE;oBACrC,gBAAgB,EAAE,cAAc;oBAChC,MAAM,EAAE,kBAAkB;iBAC3B;aACF,CAAC,EACJ,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,sBAAsB,EAAE,CACxE,CAAC;YACF,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,OAAO,KAAK,GAAG,CAAC,MAAM,IAAI,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC9F,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAqB,CAAC;YACpD,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC;YAClC,MAAM,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;QAC5E,CAAC,QAAQ,MAAM,EAAE;QACjB,OAAO,GAAG,CAAC;IACb,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,cAAc,CAAC,OAAe,EAAE,QAA8B;QAClE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,mBAAmB,EAAE,CAAC;YAC9D,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,mBAAmB,CAAC,CAAC;YACzD,MAAM,GAAG,GAAG,MAAM,mBAAmB,CACnC,GAAG,EAAE,CACH,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,cAAc,OAAO,WAAW,EAAE;gBAC5D,MAAM,EAAE,OAAO;gBACf,OAAO,EAAE;oBACP,aAAa,EAAE,UAAU,IAAI,CAAC,KAAK,EAAE;oBACrC,gBAAgB,EAAE,cAAc;oBAChC,MAAM,EAAE,kBAAkB;oBAC1B,cAAc,EAAE,kBAAkB;iBACnC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;aAC1C,CAAC,EACJ,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,wBAAwB,EAAE,CAC1E,CAAC;YACF,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,OAAO,KAAK,GAAG,CAAC,MAAM,IAAI,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC9F,CAAC;IACH,CAAC;CACF;AAOD,4FAA4F;AAC5F,KAAK,UAAU,aAAa,CAAC,MAAoB,EAAE,OAAe,EAAE,KAAa;IAC/E,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC9C,IAAI,KAAK,IAAI,eAAe;QAAE,OAAO,MAAM,CAAC;IAC5C,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3D,CAAyC,CAAC,QAAQ,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QACrG,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAUD;;;;GAIG;AACH,KAAK,UAAU,OAAO,CACpB,MAAoB,EACpB,MAAc,EACd,KAAa,EACb,IAAc,EACd,KAAgB,EAChB,GAAoB,EACpB,QAAkB;IAElB,IAAI,KAAK,CAAC,KAAK,IAAI,SAAS,IAAI,IAAI,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;QAC7D,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC;QACpB,OAAO;IACT,CAAC;IACD,KAAK,CAAC,KAAK,EAAE,CAAC;IACd,wFAAwF;IACxF,qEAAqE;IACrE,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IACtD,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;QACpC,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;QACrE,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IAC/C,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAE,OAAO,CAAC,wCAAwC;IACtF,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC;YACzC,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;QACrG,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,eAAe,CAAC,KAA+B;IACtD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC3C,KAAK,MAAM,EAAE,IAAI,KAAK;QAAE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC;IAE3E,MAAM,KAAK,GAAgB,EAAE,CAAC;IAC9B,KAAK,MAAM,EAAE,IAAI,KAAK,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;QACtC,MAAM,OAAO,GAAiB,CAAC,EAAE,EAAE,EAAE;YACnC,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACvB,IAAI,CAAC,CAAC;gBAAE,OAAO,SAAS,CAAC,CAAC,2CAA2C;YACrE,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YAC5C,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;QACjE,CAAC,CAAC;QACF,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AA2BD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAsB;IACvD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAC;IAE5C;;;;;OAKG;IACH,SAAS,WAAW,CAAC,IAAgB,EAAE,YAAoB;QACzD,OAAO,GAAG,YAAY,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;IACzF,CAAC;IAED,SAAS,gBAAgB,CAAC,IAAiB;QACzC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,wFAAwF,CAAC,CAAC;QAC5G,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;iDAE6C;IAC7C,KAAK,UAAU,IAAI,CAAC,IAAgB,EAAE,MAAgC,EAAE,KAAc;QACpF,MAAM,IAAI,GAAG,IAAI,CAAC,SAAU,CAAC;QAC7B,MAAM,YAAY,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC,MAAM,CAAC,IAAI,wBAAwB,CAAC;QAC9E,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QACjD,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAChC,IAAI,CAAC,KAAK,IAAI,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,IAAI,GAAG,MAAM;YAAE,OAAO,GAAG,CAAC,IAAI,CAAC;QAErE,MAAM,KAAK,GAAoB,EAAE,CAAC;QAClC,MAAM,KAAK,GAAc,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QACrD,MAAM,QAAQ,GAAG,YAAY,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,iCAAiC;QAC1F,MAAM,OAAO,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;QAChG,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YACjB,OAAO,CAAC,IAAI,CAAC,kCAAkC,IAAI,uBAAuB,SAAS,kBAAkB,cAAc,wBAAwB,CAAC,CAAC;QAC/I,CAAC;QACD,MAAM,MAAM,GAAS,EAAE,KAAK,EAAE,eAAe,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7G,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACxD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,UAAU,IAAI,CAAC,EAAa,EAAE,KAAW,EAAE,IAAiB,EAAE,MAAqB;QACtF,OAAO,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;IACnE,CAAC;IAED;;;;;;;;;;;;;;;;;;;OAmBG;IACH,KAAK,UAAU,KAAK,CAClB,EAAa,EACb,KAAW,EACX,KAAkB,EAClB,QAAgB,EAChB,OAAoB,EACpB,MAAqB;QAErB,MAAM,IAAI,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACvC,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;YAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,KAAK,UAAU,CAAC,CAAC,CAAC,kBAAkB,CAAC;YAC5E,MAAM,IAAI,KAAK,CACb,wBAAwB,IAAI,CAAC,IAAI,iEAAiE;gBAChG,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,4EAA4E;gBACxG,GAAG,GAAG,wGAAwG,CACjH,CAAC;QACJ,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC,MAAM,CAAC,IAAI,wBAAwB,CAAC;QAC9E,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QAC/C,MAAM,OAAO,GAAuD,EAAE,CAAC;QACvE,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACnD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACxC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,MAAM,IAAI,KAAK,CACb,wBAAwB,IAAI,CAAC,IAAI,6BAA6B,GAAG,iCAAiC;oBAChG,mGAAmG;oBACnG,kGAAkG;oBAClG,yBAAyB,IAAI,CAAC,SAAS,8DAA8D;oBACrG,gGAAgG;oBAChG,0FAA0F;oBAC1F,8EAA8E;oBAC9E,mGAAmG;oBACnG,2EAA2E,CAC9E,CAAC;YACJ,CAAC;YACD,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;YACnD,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;YACnC,8FAA8F;YAC9F,6FAA6F;YAC7F,MAAM,QAAQ,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9D,IAAI,QAAQ,KAAK,CAAC,CAAC,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CACb,mBAAmB,GAAG,cAAc,IAAI,CAAC,IAAI,qBAAqB,QAAQ,GAAG,CAAC,wBAAwB;oBACpG,sGAAsG;oBACtG,2FAA2F;oBAC3F,2BAA2B,CAC9B,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACrC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QACpE,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC,CAAC,iDAAiD;QAExF,8FAA8F;QAC9F,0EAA0E;QAC1E,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,kBAAkB,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QACpF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QACrD,gGAAgG;QAChG,gGAAgG;QAChG,8FAA8F;QAC9F,iEAAiE;QACjE,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC;QAC9C,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;QACrC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;YAC1D,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,uFAAuF;gBACvF,4FAA4F;gBAC5F,0FAA0F;gBAC1F,MAAM,IAAI,KAAK,CACb,qCAAqC,IAAI,CAAC,IAAI,iBAAiB,KAAK,CAAC,GAAG,OAAO,MAAM,CAAC,GAAG,CAAC,IAAI;oBAC5F,8FAA8F;oBAC9F,2FAA2F;oBAC3F,uFAAuF,EACzF,EAAE,KAAK,EAAE,GAAG,EAAE,CACf,CAAC;YACJ,CAAC;YACD,OAAO,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,KAAK,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9D,CAAC;QACD,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IAED,OAAO;QACL,EAAE,EAAE,QAAQ;QACZ,QAAQ,EAAE,IAAI;QACd,8FAA8F;QAC9F,+FAA+F;QAC/F,oBAAoB;QACpB,UAAU,EAAE,IAAI;QAChB,SAAS,EAAE,KAAK;QAChB,UAAU,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACpC,0FAA0F;YAC1F,IAAI,IAAI,EAAE,QAAQ,KAAK,IAAI;gBAAE,OAAO;YACpC,0FAA0F;YAC1F,2FAA2F;YAC3F,0FAA0F;YAC1F,MAAM,IAAI,KAAK,CACb,wBAAwB,IAAI,EAAE,IAAI,IAAI,WAAW,wDAAwD;gBACvG,wGAAwG;gBACxG,yEAAyE,CAC5E,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAmBD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,YAAoB,EACpB,MAAc,EACd,SAAiB;IAEjB,IAAI,YAAY,KAAK,wBAAwB,EAAE,CAAC;QAC9C,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACpD,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,uBAAuB,CAAC,eAAe,EAAE,wBAAwB,CAAC,EAAE,SAAS,EAAE,CAAC;IAC7G,CAAC;IACD,MAAM,IAAI,GAAG,uBAAuB,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC;IACpE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CACb,6CAA6C,YAAY,yDAAyD;YAChH,oFAAoF,wBAAwB,QAAQ,CACvH,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IAC9D,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;AAC9C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,SAAiB,EAAE,MAAc,EAAE,OAAmB;IACrF,OAAO;QACL,aAAa,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,wBAAwB,CAAC;QACxG,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE;YACpC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,MAAM,6BAA6B,CAAC,YAAY,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;YAClG,OAAO,IAAI,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;QAC1D,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,UAAU,oBAAoB,CAClC,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,kBAAkB,EAClE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,IAAI;IAEpD,gBAAgB,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAC1E,uBAAuB,CAAC;QACtB,QAAQ,EAAE,QAAQ;QAClB,SAAS,EAAE,QAAQ;QACnB,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,eAAe;QACxB,cAAc,EAAE,kBAAkB;QAClC,0FAA0F;QAC1F,yFAAyF;QACzF,sFAAsF;QACtF,0DAA0D;KAC3D,CAAC,CAAC;AACL,CAAC"}

package/dist/agent/provider-events.d.ts

@@ -0,0 +1,3 @@
+import type { ProviderEventDeclaration } from "@open-everywhere/core/agent/adapter-api.js";
+export declare const NOTION_PROVIDER_EVENTS: ProviderEventDeclaration;
+//# sourceMappingURL=provider-events.d.ts.map

package/dist/agent/provider-events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-events.d.ts","sourceRoot":"","sources":["../../agent/provider-events.ts"],"names":[],"mappings":"AA6BA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,4CAA4C,CAAC;AAE3F,eAAO,MAAM,sBAAsB,EAAE,wBAsKpC,CAAC"}