@tangle-network/agent-app 0.44.11 → 0.44.13

package/dist/assistant/index.d.ts

@@ -4,15 +4,15 @@ import { ToolDetailRenderers, ChatUiMessage } from '../web-react/index.js';
 import '../contract-CEewO6DI.js';
 import '@tangle-network/agent-interface';
 import '../plans/index.js';
-import '../parts-DIKcC1p6.js';
-import '../types-DeEOhQbv.js';
+import '../parts-S1OINlRP.js';
+import '../types-DB82fktc.js';
 import '../agent-activity-C8ZG0F0M.js';
 import '../flow-types-CJxEmaRy.js';
-import '../queue-DBkulxW1.js';
+import '../queue-vRI0Qx3X.js';
 import '../sandbox-terminal-ChNEdHF8.js';
 import '../catalog/index.js';
 import '../harness/index.js';
-import '../attachment-validation-yJ6Id4pR.js';
+import '../attachment-validation-Zw8eslhN.js';
 import '../stream-normalizer-DnuqkZvw.js';
 
 /**

package/dist/assistant/index.js

@@ -3,14 +3,14 @@ import {
   ChatMessages,
   ModelPicker,
   ProviderLogo
-} from "../chunk-J6TNPRQN.js";
+} from "../chunk-7SMPAAIT.js";
 import "../chunk-FBVLEGEG.js";
-import "../chunk-72TPRENZ.js";
-import "../chunk-ZRSUCTST.js";
+import "../chunk-YTMKRL3L.js";
+import "../chunk-GEYACSFW.js";
 import "../chunk-HCOROIRT.js";
-import "../chunk-5GA3MKOC.js";
-import "../chunk-FEUW4G2L.js";
-import "../chunk-V3HO43PG.js";
+import "../chunk-VM6VLJH6.js";
+import "../chunk-DV2FA2PW.js";
+import "../chunk-ZVEEWGDK.js";
 import "../chunk-5EPIPT4V.js";
 import "../chunk-3ZK5IJSW.js";
 import "../chunk-YJMCRXQQ.js";

package/dist/{attachment-validation-yJ6Id4pR.d.ts → attachment-validation-Zw8eslhN.d.ts}

@@ -1,4 +1,4 @@
-import { M as FileMention } from './parts-DIKcC1p6.js';
+import { M as FileMention } from './parts-S1OINlRP.js';
 
 /**
  * `createSandboxFileIndexRoute` — server side of `@`-file-mentions

package/dist/chat-routes/index.d.ts

@@ -1,6 +1,6 @@
-import { C as ChatMessagePart, N as ChatTurnRequestPayload, O as ChatTurnPartInput, P as ChatTurnFilePartInput, b as ChatAttachmentPart, a as ChatAttachmentKind, g as ChatMentionPart } from '../parts-DIKcC1p6.js';
-export { Q as ChatAttachmentInput, f as ChatMentionKind, R as ChatTurnInputError, T as ChatTurnTextPartInput, U as DISPATCH_MAX_MEDIA_PARTS, V as DISPATCH_MAX_PARTS, W as DISPATCH_REQUEST_MAX_BYTES, X as DISPATCH_STRUCTURAL_RESERVE_BYTES, M as FileMention, Y as FileMentionsToPartsOptions, Z as INLINE_PARTS_MAX_BYTES, _ as MENTION_MAX_COUNT, $ as ProducerErrorEvent, a0 as ProducerNoticeEvent, a1 as ProducerPassthroughEvent, a2 as ProducerPassthroughEventType, a3 as ProducerReasoningEvent, a4 as ProducerTextEvent, a5 as ProducerToolCallEvent, a6 as ProducerToolResultEvent, a7 as ProducerUsageEvent, a8 as ProducerWireEvent, a9 as SandboxMentionPathCheck, aa as assertPromptPartsWithinCap, ab as base64WireLen, ac as buildMentionPromptBlock, ad as chatTurnRequestInit, ae as fileMentionsToParts, af as formatBytes, ag as mediaTypeForMentionPath, ah as mentionKindForPath, ai as parseChatTurnParts, aj as parseFileMentions, ak as promptPartsByteSize, al as validateSandboxMentionPath } from '../parts-DIKcC1p6.js';
-export { A as ALLOWED_ATTACHMENT_SNIFFED_MIMES, a as ATTACHMENT_ACCEPT, b as ATTACHMENT_MAX_COUNT, c as AttachmentTypeCheckResult, C as CreateSandboxFileIndexRouteOptions, F as FileIndexAuthorization, d as FileIndexCache, e as FileIndexReadyResponse, f as FileIndexResponse, g as FileIndexWarmingResponse, M as MAX_ATTACHMENT_TOTAL_BYTES, h as MAX_BINARY_ATTACHMENT_BYTES, i as MAX_TEXT_ATTACHMENT_BYTES, S as SandboxFileTreeSource, j as SandboxTreeFile, k as SandboxTreeResult, l as SniffResult, m as attachmentSizeErrorMessage, n as attachmentTotalSizeErrorMessage, o as checkAttachmentType, p as createSandboxFileIndexRoute, s as sanitizeAttachmentFileName, q as sniffBinary } from '../attachment-validation-yJ6Id4pR.js';
+import { C as ChatMessagePart, N as ChatTurnRequestPayload, O as ChatTurnPartInput, P as ChatTurnFilePartInput, b as ChatAttachmentPart, a as ChatAttachmentKind, g as ChatMentionPart } from '../parts-S1OINlRP.js';
+export { Q as ChatAttachmentInput, f as ChatMentionKind, R as ChatTurnInputError, T as ChatTurnTextPartInput, U as DISPATCH_MAX_MEDIA_PARTS, V as DISPATCH_MAX_PARTS, W as DISPATCH_REQUEST_MAX_BYTES, X as DISPATCH_STRUCTURAL_RESERVE_BYTES, M as FileMention, Y as FileMentionsToPartsOptions, Z as INLINE_PARTS_MAX_BYTES, _ as MENTION_MAX_COUNT, $ as ProducerErrorEvent, a0 as ProducerNoticeEvent, a1 as ProducerPassthroughEvent, a2 as ProducerPassthroughEventType, a3 as ProducerReasoningEvent, a4 as ProducerTextEvent, a5 as ProducerToolCallEvent, a6 as ProducerToolResultEvent, a7 as ProducerUsageEvent, a8 as ProducerWireEvent, a9 as SandboxMentionPathCheck, aa as assertPromptPartsWithinCap, ab as base64WireLen, ac as buildMentionPromptBlock, ad as chatTurnRequestInit, ae as fileMentionsToParts, af as formatBytes, ag as mediaTypeForMentionPath, ah as mentionKindForPath, ai as parseChatTurnParts, aj as parseFileMentions, ak as promptPartsByteSize, al as validateSandboxMentionPath } from '../parts-S1OINlRP.js';
+export { A as ALLOWED_ATTACHMENT_SNIFFED_MIMES, a as ATTACHMENT_ACCEPT, b as ATTACHMENT_MAX_COUNT, c as AttachmentTypeCheckResult, C as CreateSandboxFileIndexRouteOptions, F as FileIndexAuthorization, d as FileIndexCache, e as FileIndexReadyResponse, f as FileIndexResponse, g as FileIndexWarmingResponse, M as MAX_ATTACHMENT_TOTAL_BYTES, h as MAX_BINARY_ATTACHMENT_BYTES, i as MAX_TEXT_ATTACHMENT_BYTES, S as SandboxFileTreeSource, j as SandboxTreeFile, k as SandboxTreeResult, l as SniffResult, m as attachmentSizeErrorMessage, n as attachmentTotalSizeErrorMessage, o as checkAttachmentType, p as createSandboxFileIndexRoute, s as sanitizeAttachmentFileName, q as sniffBinary } from '../attachment-validation-Zw8eslhN.js';
 import { ChatTurnIdentity, ChatTurnProducer } from '@tangle-network/agent-runtime';
 import { InteractionAnswerRoute, InteractionAnswerRouteOptions } from '../interactions/index.js';
 import { PersistedChatMessageForTurn } from '../stream/index.js';
@@ -11,7 +11,7 @@ import { J as JsonRecord } from '../stream-normalizer-DnuqkZvw.js';
 import { SandboxExecChannel, PromptInputPart } from '../sandbox/index.js';
 import '@tangle-network/agent-interface';
 import '../contract-CEewO6DI.js';
-import '../types-DeEOhQbv.js';
+import '../types-DB82fktc.js';
 import '../plans/index.js';
 import '@tangle-network/sandbox';
 import '../auth-anc7mv2W.js';

package/dist/chat-routes/index.js

@@ -11,7 +11,7 @@ import {
   createSandboxFileIndexRoute,
   sanitizeAttachmentFileName,
   sniffBinary
-} from "../chunk-5GA3MKOC.js";
+} from "../chunk-VM6VLJH6.js";
 import {
   coalesceDeltas,
   createBufferedTurnTap,
@@ -55,8 +55,8 @@ import {
   promptPartsByteSize,
   toChatMessageParts,
   validateSandboxMentionPath
-} from "../chunk-FEUW4G2L.js";
-import "../chunk-V3HO43PG.js";
+} from "../chunk-DV2FA2PW.js";
+import "../chunk-ZVEEWGDK.js";
 import {
   asRecord,
   asString,

package/dist/chat-store/index.d.ts

@@ -1,12 +1,12 @@
-import { C as ChatMessagePart } from '../parts-DIKcC1p6.js';
-export { a as ChatAttachmentKind, b as ChatAttachmentPart, c as ChatFilePart, d as ChatImagePart, e as ChatInteractionPart, f as ChatMentionKind, g as ChatMentionPart, h as ChatNoticePart, i as ChatPartTime, j as ChatPlanPart, k as ChatReasoningPart, l as ChatStepFinishPart, m as ChatStepStartPart, n as ChatSubtaskPart, o as ChatTextPart, p as ChatToolPart, q as ChatToolState, r as ChatToolStatus, s as ChatUsageTokens, t as ChatWorkProductPart, D as DEFAULT_ATTACHMENT_PROMPT_HEADER, S as StorableHarnessPartKind, u as attachmentInputToPart, v as attachmentKindForMime, w as attachmentPartsFromMessageParts, x as buildAttachmentPromptBlock, y as historyContentWithAttachments, z as isChatAttachmentPart, A as isChatInteractionPart, B as isChatMentionPart, E as isChatPlanPart, F as isChatStepFinishPart, G as isChatTextPart, H as isChatToolPart, I as isChatWorkProductPart, J as mentionInputToPart, K as mentionPartsFromMessageParts, L as toChatMessageParts } from '../parts-DIKcC1p6.js';
+import { C as ChatMessagePart } from '../parts-S1OINlRP.js';
+export { a as ChatAttachmentKind, b as ChatAttachmentPart, c as ChatFilePart, d as ChatImagePart, e as ChatInteractionPart, f as ChatMentionKind, g as ChatMentionPart, h as ChatNoticePart, i as ChatPartTime, j as ChatPlanPart, k as ChatReasoningPart, l as ChatStepFinishPart, m as ChatStepStartPart, n as ChatSubtaskPart, o as ChatTextPart, p as ChatToolPart, q as ChatToolState, r as ChatToolStatus, s as ChatUsageTokens, t as ChatWorkProductPart, D as DEFAULT_ATTACHMENT_PROMPT_HEADER, S as StorableHarnessPartKind, u as attachmentInputToPart, v as attachmentKindForMime, w as attachmentPartsFromMessageParts, x as buildAttachmentPromptBlock, y as historyContentWithAttachments, z as isChatAttachmentPart, A as isChatInteractionPart, B as isChatMentionPart, E as isChatPlanPart, F as isChatStepFinishPart, G as isChatTextPart, H as isChatToolPart, I as isChatWorkProductPart, J as mentionInputToPart, K as mentionPartsFromMessageParts, L as toChatMessageParts } from '../parts-S1OINlRP.js';
 import * as drizzle_orm from 'drizzle-orm';
 import * as drizzle_orm_sqlite_core from 'drizzle-orm/sqlite-core';
 import { SQLiteColumnBuilderBase, AnySQLiteTable, AnySQLiteColumn, BaseSQLiteDatabase } from 'drizzle-orm/sqlite-core';
 export { a as attachmentPartKey } from '../stream-normalizer-DnuqkZvw.js';
 import '@tangle-network/agent-interface';
 import '../contract-CEewO6DI.js';
-import '../types-DeEOhQbv.js';
+import '../types-DB82fktc.js';
 import '../plans/index.js';
 
 /**

package/dist/chat-store/index.js

@@ -16,8 +16,8 @@ import {
   mentionInputToPart,
   mentionPartsFromMessageParts,
   toChatMessageParts
-} from "../chunk-FEUW4G2L.js";
-import "../chunk-V3HO43PG.js";
+} from "../chunk-DV2FA2PW.js";
+import "../chunk-ZVEEWGDK.js";
 import {
   attachmentPartKey
 } from "../chunk-5EPIPT4V.js";

package/dist/{chunk-J6TNPRQN.js → chunk-7SMPAAIT.js}

@@ -4,7 +4,7 @@ import {
 import {
   WorkProductCard,
   workProductPartsFromMessageParts
-} from "./chunk-72TPRENZ.js";
+} from "./chunk-YTMKRL3L.js";
 import {
   ATTACHMENT_ACCEPT,
   ATTACHMENT_MAX_COUNT,
@@ -16,11 +16,11 @@ import {
   checkAttachmentType,
   sanitizeAttachmentFileName,
   sniffBinary
-} from "./chunk-5GA3MKOC.js";
+} from "./chunk-VM6VLJH6.js";
 import {
   attachmentPartsFromMessageParts,
   formatBytes
-} from "./chunk-FEUW4G2L.js";
+} from "./chunk-DV2FA2PW.js";
 import {
   cancelStatusFor,
   fieldAcceptsFreeText,
@@ -3956,4 +3956,4 @@ export {
   useThinkingSeconds,
   ChatMessages
 };
-//# sourceMappingURL=chunk-J6TNPRQN.js.map
+//# sourceMappingURL=chunk-7SMPAAIT.js.map

package/dist/{chunk-FEUW4G2L.js → chunk-DV2FA2PW.js}

@@ -1,6 +1,6 @@
 import {
   persistedPartToWorkProduct
-} from "./chunk-V3HO43PG.js";
+} from "./chunk-ZVEEWGDK.js";
 import {
   persistedPartToInteraction
 } from "./chunk-3ZK5IJSW.js";
@@ -367,4 +367,4 @@ export {
   buildAttachmentPromptBlock,
   historyContentWithAttachments
 };
-//# sourceMappingURL=chunk-FEUW4G2L.js.map
+//# sourceMappingURL=chunk-DV2FA2PW.js.map

package/dist/{chunk-ZRSUCTST.js → chunk-GEYACSFW.js}

@@ -1,6 +1,6 @@
 import {
   unresolvedBlockingExceptions
-} from "./chunk-V3HO43PG.js";
+} from "./chunk-ZVEEWGDK.js";
 
 // src/work-product/queue.ts
 var OPEN_STATUSES = /* @__PURE__ */ new Set(["draft", "blocked", "ready", "changes_requested"]);
@@ -138,4 +138,4 @@ export {
   projectReviewQueue,
   parseReviewQueueItem
 };
-//# sourceMappingURL=chunk-ZRSUCTST.js.map
+//# sourceMappingURL=chunk-GEYACSFW.js.map

package/dist/{chunk-5GA3MKOC.js → chunk-VM6VLJH6.js}

@@ -1,6 +1,6 @@
 import {
   formatBytes
-} from "./chunk-FEUW4G2L.js";
+} from "./chunk-DV2FA2PW.js";
 
 // src/chat-routes/binary-sniff.ts
 function bytesStartWith(bytes, offset, signature) {
@@ -236,4 +236,4 @@ export {
   attachmentTotalSizeErrorMessage,
   createSandboxFileIndexRoute
 };
-//# sourceMappingURL=chunk-5GA3MKOC.js.map
+//# sourceMappingURL=chunk-VM6VLJH6.js.map

package/dist/{chunk-72TPRENZ.js → chunk-YTMKRL3L.js}

@@ -1,9 +1,9 @@
 import {
   parseReviewQueueItem
-} from "./chunk-ZRSUCTST.js";
+} from "./chunk-GEYACSFW.js";
 import {
   persistedPartToWorkProduct
-} from "./chunk-V3HO43PG.js";
+} from "./chunk-ZVEEWGDK.js";
 
 // src/web-react/work-product.tsx
 import { useCallback, useEffect, useState } from "react";
@@ -341,4 +341,4 @@ export {
   QualityCheckList,
   ProvenanceStamp
 };
-//# sourceMappingURL=chunk-72TPRENZ.js.map
+//# sourceMappingURL=chunk-YTMKRL3L.js.map

package/dist/{chunk-V3HO43PG.js → chunk-ZVEEWGDK.js}

@@ -46,6 +46,19 @@ function parseEvidenceInput(raw, path = "entry") {
     if (typeof locatorRaw.quote !== "string") return fail(`${path}.locator.quote`, "must be a string when present");
     locator.quote = locatorRaw.quote;
   }
+  if (locatorRaw.find !== void 0) {
+    if (typeof locatorRaw.find !== "string" || locatorRaw.find.trim().length === 0) {
+      return fail(`${path}.locator.find`, "must be a non-empty string \u2014 the value or text to locate in the source");
+    }
+    locator.find = locatorRaw.find;
+  }
+  if (locatorRaw.findOccurrence !== void 0) {
+    const value = locatorRaw.findOccurrence;
+    if (typeof value !== "number" || !Number.isInteger(value) || value < 1) {
+      return fail(`${path}.locator.findOccurrence`, "must be a positive integer (1 = the first occurrence)");
+    }
+    locator.findOccurrence = value;
+  }
   if (locatorRaw.span !== void 0) {
     const spanRaw = asRecord(locatorRaw.span);
     if (!spanRaw) return fail(`${path}.locator.span`, "must be an object { start, end } when present");
@@ -204,4 +217,4 @@ export {
   workProductToPersistedPart,
   persistedPartToWorkProduct
 };
-//# sourceMappingURL=chunk-V3HO43PG.js.map
+//# sourceMappingURL=chunk-ZVEEWGDK.js.map

package/dist/chunk-ZVEEWGDK.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/work-product/types.ts"],"sourcesContent":["/**\n * The reviewable work-product contract — the one durable object every Tangle\n * agent product converges on: an artifact plus its evidence map (source→field\n * lineage), exceptions, quality checks, version history, and run provenance,\n * produced by an agent and signed off by a professional.\n *\n * Import-free and client-safe by construction: the queue projection and the\n * React surfaces re-validate these shapes at JSON boundaries, so every type\n * and codec here must load in a browser bundle. Every domain word — artifact\n * `kind`, evidence `target`, exception `kind`, check `name`, `scopeKey`\n * format — is a STRING PARAMETER validated against product-supplied\n * vocabularies in the tool layer; nothing domain-specific is baked here.\n */\n\n// ── identity / status ────────────────────────────────────────────────────────\n\n/** Stable pointer at one version of one work product. */\nexport interface WorkProductRef {\n  id: string\n  version: number\n}\n\nexport type WorkProductStatus =\n  | 'draft' //              agent is emitting incrementally (queue: working)\n  | 'blocked' //            unresolved blocking exception (queue: blocked / missing-info)\n  | 'ready' //              submit_work_product accepted (queue: ready-for-review)\n  | 'changes_requested' //  reviewer verdict; the correction re-enters chat as a turn\n  | 'approved' //           reviewer sign-off on THIS version\n  | 'superseded' //         a newer version replaced this one\n\nconst WORK_PRODUCT_STATUSES: readonly WorkProductStatus[] = [\n  'draft',\n  'blocked',\n  'ready',\n  'changes_requested',\n  'approved',\n  'superseded',\n]\n\n/** Runtime guard for re-validating a status read off a JSON boundary. */\nexport function isWorkProductStatus(value: unknown): value is WorkProductStatus {\n  return typeof value === 'string' && (WORK_PRODUCT_STATUSES as readonly string[]).includes(value)\n}\n\n// ── artifact ─────────────────────────────────────────────────────────────────\n\n/** Define the reviewable artifact body with its kind, sources, and structured field map */\nexport interface WorkProductArtifact {\n  /** PARAMETER: 'return_package' | 'redline' | 'outreach_campaign' — validated\n   *  against the product's `artifactKinds` vocabulary at submit. */\n  kind: string\n  title: string\n  /** Vault/object-store ref for the rendered document (large bodies). */\n  path?: string\n  /** Inline body when small (markdown/JSON). */\n  content?: string\n  mediaType?: string\n  /** Diff-first products (legal): the source document the artifact redlines. */\n  baseline?: { path?: string; content?: string }\n  /** The structured field map lineage targets anchor to (tax: form-line ids). */\n  fields?: Record<string, unknown>\n}\n\n// ── evidence / lineage: source doc + locator → field/claim ───────────────────\n\n/** A half-open `[start, end)` character range into the source document's text.\n *  Offsets index exactly the string the product's `readSourceText` seam\n *  returns for the same `sourceRef` — which is the string its document-reading\n *  tool pages with an `offset`. The PLATFORM slices `locator.quote` out of it,\n *  so a span citation cannot name text the document does not contain. */\nexport interface EvidenceSpan {\n  start: number\n  end: number\n}\n\n/** How `locator.quote` got there. Server-set on every path — never read from\n *  model args, because the whole value of the distinction is that a reviewer\n *  can trust it:\n *   - `span`  the platform sliced it out of the source bytes (unfalsifiable)\n *   - `model` the model supplied the text and the platform PROVED it occurs */\nexport type QuoteBasis = 'span' | 'model'\n\n/** Point into a source document: page, free-form range, span, verbatim quote */\nexport interface EvidenceLocator {\n  page?: number\n  /** 'L120-L134' | 'B7' | '¶4' — free-form, non-empty when present. */\n  range?: string\n  /** Verbatim supporting quote from the source. Model-supplied and verified,\n   *  or platform-sliced from {@link EvidenceLocator.span} — read `quoteBasis`\n   *  to tell which. */\n  quote?: string\n  /** Character range the quote is sliced from. Correct when the offsets are\n   *  computed by a tool; see {@link EvidenceLocator.find} for the form a model\n   *  should use, because models do not count characters reliably. */\n  span?: EvidenceSpan\n  /** The value or distinctive text to LOCATE in the source. The platform finds\n   *  the line containing it and derives both `span` and `quote` from that —\n   *  so the model neither retypes the quote nor computes an offset, and a\n   *  citation that lands on the wrong line becomes unrepresentable rather than\n   *  merely wrong. The preferred citation form for an agent. */\n  find?: string\n  /** Which occurrence of `find` to cite when the value appears more than once\n   *  (1-based, default 1). */\n  findOccurrence?: number\n  /** Server-set provenance for `quote`; a model-supplied value is discarded. */\n  quoteBasis?: QuoteBasis\n}\n\n/** One lineage row: a source document location supporting one artifact claim */\nexport interface EvidenceEntry {\n  /** Agent-supplied stable id — the same id re-emitted is an upsert/replace. */\n  id: string\n  /** Vault path / attachment id / object-store key of the SOURCE document. */\n  sourceRef: string\n  locator: EvidenceLocator\n  /** Artifact field/claim the evidence supports: '1040.line_9' |\n   *  'clause:indemnification' | 'icp.employee_count' — product vocabulary. */\n  target: string\n  /** The value/assertion at the target. */\n  claim: string\n  /** 0..1; absent = unstated (never defaulted). */\n  confidence?: number\n}\n\n// ── exceptions ───────────────────────────────────────────────────────────────\n\nexport type ExceptionSeverity = 'blocking' | 'material' | 'advisory'\n\n/** One flagged problem with the work product, resolvable by agent or reviewer */\nexport interface ExceptionEntry {\n  id: string\n  severity: ExceptionSeverity\n  /** PARAMETER: 'missing_document' | 'inconsistent_source' | … — validated\n   *  against the product's `exceptionKinds` vocabulary. */\n  kind: string\n  message: string\n  /** Affected artifact targets. */\n  targets?: string[]\n  resolved: boolean\n  resolvedBy?: 'agent' | 'reviewer'\n  resolutionNote?: string\n}\n\n/** Unresolved blocking exceptions are what park a work product in `blocked`. */\nexport function unresolvedBlockingExceptions(exceptions: readonly ExceptionEntry[]): ExceptionEntry[] {\n  return exceptions.filter((entry) => entry.severity === 'blocking' && !entry.resolved)\n}\n\n// ── quality checks ───────────────────────────────────────────────────────────\n\n/** One named quality verdict on the work product, tagged with who computed it */\nexport interface QualityCheck {\n  id: string\n  /** Product vocabulary: 'totals_reconcile', 'evidence_coverage', … */\n  name: string\n  passed: boolean\n  detail?: string\n  /** agent self-report | shell-computed | eval-ensemble verdict. */\n  source: 'agent' | 'platform' | 'judge'\n}\n\n// ── provenance (the backtest spine) ──────────────────────────────────────────\n\n/** The audit triple binding a work product to the exact configuration and run\n *  that produced it. `profileHash` is agent-eval's `agentProfileHash()` of the\n *  EXACT shipped profile — the same hash that keys scorecard cells, so a\n *  reviewer can see the measured backtest history of the configuration that\n *  produced the document. */\nexport interface WorkProductProvenance {\n  profileHash: string\n  /** Chat turnId or mission-step run id. */\n  runId: string\n  /** Back-filled from the usage receipt / serving-model header at turn\n   *  completion — only the completed turn knows what actually served. */\n  servingModels: string[]\n  sessionId?: string\n  missionRef?: { missionId: string; stepId: string }\n  costUsd?: number\n  producedAt: number\n}\n\n/** The product-resolved backtest summary for one profile hash (from its own\n *  eval artifacts via agent-eval's `loadScorecard`) — the shell defines only\n *  this TYPE and the `ProvenanceStamp` slot that renders it. */\nexport interface ProfileBacktestSummary {\n  profileHash: string\n  /** Backtest cases behind the composite. */\n  cases: number\n  composite: number\n  /** The eval-campaign trust gate's verdict on whether the composite is\n   *  allowed to be believed; 'fail' renders as \"quality: unverified\". */\n  trust: 'pass' | 'fail'\n  trustReasons: string[]\n}\n\n// ── version history ──────────────────────────────────────────────────────────\n\n/** Frozen milestone row for one version of the work product */\nexport interface WorkProductVersionEntry {\n  version: number\n  status: WorkProductStatus\n  provenance: WorkProductProvenance\n  /** Frozen snapshot ref of this version's body (object-store key) — the\n   *  DiffView input for vN-1 vs vN. */\n  artifactPath?: string\n  reviewedBy?: string\n  reviewNote?: string\n  at: number\n}\n\n// ── the durable row ──────────────────────────────────────────────────────────\n\n/** Define the durable work product row accumulating artifact, lineage, exceptions, checks, and history */\nexport interface WorkProductRecord {\n  /** Minted server-side; the model NEVER supplies ids — it addresses work by\n   *  `scopeKey`. */\n  id: string\n  workspaceId: string\n  /** The chat thread that drives it (chat stays first). */\n  threadId: string | null\n  /** Product engagement key: 'return:acme:2025' | 'contract:acme-msa' |\n   *  'campaign:cpa-pilots'. */\n  scopeKey: string\n  status: WorkProductStatus\n  version: number\n  /** `null` while the draft accumulates (evidence streams in before the\n   *  artifact arrives); non-null from the submit transition onward. Typed\n   *  honestly rather than forcing a placeholder artifact on every draft. */\n  artifact: WorkProductArtifact | null\n  evidence: EvidenceEntry[]\n  exceptions: ExceptionEntry[]\n  checks: QualityCheck[]\n  provenance: WorkProductProvenance\n  history: WorkProductVersionEntry[]\n  createdAt: number\n  updatedAt: number\n}\n\n// ── store port — the /missions MissionStorePort pattern ──────────────────────\n\n/** Fields a guarded write compares against the values the caller read. An\n *  absent field is unguarded. A SQL implementation compares like-for-like\n *  scalar columns; the in-memory store does the same. */\nexport interface WorkProductUpdateGuard {\n  status?: WorkProductStatus\n  version?: number\n}\n\n/** Fields a guarded write sets when the guard holds. */\nexport interface WorkProductPatch {\n  status?: WorkProductStatus\n  version?: number\n  artifact?: WorkProductArtifact\n  evidence?: EvidenceEntry[]\n  exceptions?: ExceptionEntry[]\n  checks?: QualityCheck[]\n  provenance?: WorkProductProvenance\n  history?: WorkProductVersionEntry[]\n  updatedAt?: number\n}\n\n/** One audit-trail row, appended after every committed state change. */\nexport interface WorkProductAuditEvent {\n  workProductId: string\n  workspaceId: string\n  /** Machine-readable transition name ('wp.created' | 'wp.evidence' |\n   *  'wp.ready' | 'wp.verdict' | …). */\n  step: string\n  message: string\n  metadata: Record<string, unknown>\n  at: number\n}\n\n/**\n * Persistence seam — the product implements this over its own tables. The\n * invariant the implementation MUST keep: `update` applies `patch` ONLY when\n * every guard field still equals the stored value, and returns `null` when\n * the guard misses — a typed conflict, never a clobber.\n */\nexport interface WorkProductStorePort {\n  load(id: string): Promise<WorkProductRecord | null>\n  /** The scope's single OPEN accumulator row — status `draft` or `blocked` —\n   *  or null when the scope has only reviewed/terminal rows (or none). The\n   *  `changes_requested` row is found via {@link listByWorkspace}; reopening\n   *  it is the service's job. */\n  findDraft(workspaceId: string, scopeKey: string): Promise<WorkProductRecord | null>\n  listByWorkspace(workspaceId: string, opts?: { status?: WorkProductStatus[] }): Promise<WorkProductRecord[]>\n  /** `extras` are opaque product-column values written in the SAME statement\n   *  as the record (single-write creation), or ignored when the table has no\n   *  extra columns. */\n  insert(record: WorkProductRecord, extras?: Record<string, unknown>): Promise<WorkProductRecord>\n  /** CAS: apply `patch` ONLY when guard fields equal stored values; null on a\n   *  miss — typed conflict, never a clobber. */\n  update(id: string, guard: WorkProductUpdateGuard, patch: WorkProductPatch): Promise<WorkProductRecord | null>\n  appendEvent(event: WorkProductAuditEvent): Promise<void>\n}\n\n// ── input codecs (strict, named-field errors) ────────────────────────────────\n\n/** Validation result whose failure names the exact field, so a tool layer can\n *  hand the model a correctable error it can act on. */\nexport type WorkProductParseResult<T> =\n  | { ok: true; value: T }\n  | { ok: false; field: string; error: string }\n\nfunction fail<T>(field: string, error: string): WorkProductParseResult<T> {\n  return { ok: false, field, error }\n}\n\nfunction nonEmptyString(value: unknown): value is string {\n  return typeof value === 'string' && value.trim().length > 0\n}\n\nfunction asRecord(value: unknown): Record<string, unknown> | null {\n  return value && typeof value === 'object' && !Array.isArray(value) ? (value as Record<string, unknown>) : null\n}\n\n/** Validate one raw evidence entry field-by-field. `path` prefixes the failure\n *  field name (e.g. `entries[3]`) so batched calls name the exact offender. */\nexport function parseEvidenceInput(raw: unknown, path = 'entry'): WorkProductParseResult<EvidenceEntry> {\n  const record = asRecord(raw)\n  if (!record) return fail(path, 'must be an object')\n  if (!nonEmptyString(record.id)) return fail(`${path}.id`, 'must be a non-empty string (stable per entry; re-emitting the same id replaces it)')\n  if (!nonEmptyString(record.sourceRef)) return fail(`${path}.sourceRef`, 'must be a non-empty source document ref')\n  if (!nonEmptyString(record.target)) return fail(`${path}.target`, 'must name the artifact field/claim this evidence supports')\n  if (!nonEmptyString(record.claim)) return fail(`${path}.claim`, 'must state the value/assertion at the target')\n  const locatorRaw = record.locator === undefined ? {} : asRecord(record.locator)\n  if (!locatorRaw) return fail(`${path}.locator`, 'must be an object when present')\n  const locator: EvidenceLocator = {}\n  if (locatorRaw.page !== undefined) {\n    if (typeof locatorRaw.page !== 'number' || !Number.isFinite(locatorRaw.page)) {\n      return fail(`${path}.locator.page`, 'must be a finite number when present')\n    }\n    locator.page = locatorRaw.page\n  }\n  if (locatorRaw.range !== undefined) {\n    if (!nonEmptyString(locatorRaw.range)) return fail(`${path}.locator.range`, 'must be a non-empty string when present')\n    locator.range = locatorRaw.range\n  }\n  if (locatorRaw.quote !== undefined) {\n    if (typeof locatorRaw.quote !== 'string') return fail(`${path}.locator.quote`, 'must be a string when present')\n    locator.quote = locatorRaw.quote\n  }\n  if (locatorRaw.find !== undefined) {\n    if (typeof locatorRaw.find !== 'string' || locatorRaw.find.trim().length === 0) {\n      return fail(`${path}.locator.find`, 'must be a non-empty string — the value or text to locate in the source')\n    }\n    locator.find = locatorRaw.find\n  }\n  if (locatorRaw.findOccurrence !== undefined) {\n    const value = locatorRaw.findOccurrence\n    if (typeof value !== 'number' || !Number.isInteger(value) || value < 1) {\n      return fail(`${path}.locator.findOccurrence`, 'must be a positive integer (1 = the first occurrence)')\n    }\n    locator.findOccurrence = value\n  }\n  if (locatorRaw.span !== undefined) {\n    const spanRaw = asRecord(locatorRaw.span)\n    if (!spanRaw) return fail(`${path}.locator.span`, 'must be an object { start, end } when present')\n    for (const field of ['start', 'end'] as const) {\n      const value = spanRaw[field]\n      if (typeof value !== 'number' || !Number.isInteger(value) || value < 0) {\n        return fail(`${path}.locator.span.${field}`, 'must be a non-negative integer character offset')\n      }\n    }\n    if ((spanRaw.end as number) <= (spanRaw.start as number)) {\n      return fail(`${path}.locator.span`, `end (${String(spanRaw.end)}) must be greater than start (${String(spanRaw.start)}) — the range is half-open [start, end)`)\n    }\n    locator.span = { start: spanRaw.start as number, end: spanRaw.end as number }\n  }\n  // `quoteBasis` is server-set. A model-supplied value is DROPPED rather than\n  // rejected: it is not a correctable mistake the model should burn a turn on,\n  // and silently honouring it would let a model label an unverified quote\n  // 'span'. The tool layer stamps the real basis after resolution.\n  const entry: EvidenceEntry = {\n    id: (record.id as string).trim(),\n    sourceRef: (record.sourceRef as string).trim(),\n    locator,\n    target: (record.target as string).trim(),\n    claim: record.claim as string,\n  }\n  if (record.confidence !== undefined) {\n    if (typeof record.confidence !== 'number' || !(record.confidence >= 0 && record.confidence <= 1)) {\n      return fail(`${path}.confidence`, 'must be a number in 0..1 when present')\n    }\n    entry.confidence = record.confidence\n  }\n  return { ok: true, value: entry }\n}\n\nconst EXCEPTION_SEVERITIES: readonly ExceptionSeverity[] = ['blocking', 'material', 'advisory']\n\n/** Validate one raw exception entry field-by-field. Kind MEMBERSHIP in the\n *  product vocabulary is the tool layer's check (it owns the config). */\nexport function parseExceptionInput(raw: unknown, path = 'exception'): WorkProductParseResult<ExceptionEntry> {\n  const record = asRecord(raw)\n  if (!record) return fail(path, 'must be an object')\n  if (!nonEmptyString(record.id)) return fail(`${path}.id`, 'must be a non-empty string (stable per entry; re-emitting the same id replaces it)')\n  if (!EXCEPTION_SEVERITIES.includes(record.severity as ExceptionSeverity)) {\n    return fail(`${path}.severity`, `must be one of: ${EXCEPTION_SEVERITIES.join(', ')}`)\n  }\n  if (!nonEmptyString(record.kind)) return fail(`${path}.kind`, 'must be a non-empty exception kind')\n  if (!nonEmptyString(record.message)) return fail(`${path}.message`, 'must describe the problem')\n  const entry: ExceptionEntry = {\n    id: (record.id as string).trim(),\n    severity: record.severity as ExceptionSeverity,\n    kind: (record.kind as string).trim(),\n    message: record.message as string,\n    resolved: record.resolved === true,\n  }\n  if (record.targets !== undefined) {\n    if (!Array.isArray(record.targets) || !record.targets.every(nonEmptyString)) {\n      return fail(`${path}.targets`, 'must be an array of non-empty strings when present')\n    }\n    entry.targets = record.targets as string[]\n  }\n  if (record.resolvedBy !== undefined) {\n    if (record.resolvedBy !== 'agent' && record.resolvedBy !== 'reviewer') {\n      return fail(`${path}.resolvedBy`, \"must be 'agent' or 'reviewer' when present\")\n    }\n    entry.resolvedBy = record.resolvedBy\n  }\n  if (record.resolutionNote !== undefined) {\n    if (typeof record.resolutionNote !== 'string') return fail(`${path}.resolutionNote`, 'must be a string when present')\n    entry.resolutionNote = record.resolutionNote\n  }\n  return { ok: true, value: entry }\n}\n\n/** Validate a raw artifact. Kind MEMBERSHIP in `artifactKinds` is the tool\n *  layer's check. An artifact must carry a body: at least one of `path`,\n *  `content`, or `fields`. */\nexport function parseArtifactInput(raw: unknown, path = 'artifact'): WorkProductParseResult<WorkProductArtifact> {\n  const record = asRecord(raw)\n  if (!record) return fail(path, 'must be an object')\n  if (!nonEmptyString(record.kind)) return fail(`${path}.kind`, 'must be a non-empty artifact kind')\n  if (!nonEmptyString(record.title)) return fail(`${path}.title`, 'must be a non-empty title')\n  for (const key of ['path', 'content', 'mediaType'] as const) {\n    if (record[key] !== undefined && !nonEmptyString(record[key])) {\n      return fail(`${path}.${key}`, 'must be a non-empty string when present')\n    }\n  }\n  let baseline: WorkProductArtifact['baseline']\n  if (record.baseline !== undefined) {\n    const baselineRecord = asRecord(record.baseline)\n    if (!baselineRecord) return fail(`${path}.baseline`, 'must be an object when present')\n    baseline = {}\n    if (baselineRecord.path !== undefined) {\n      if (!nonEmptyString(baselineRecord.path)) return fail(`${path}.baseline.path`, 'must be a non-empty string when present')\n      baseline.path = (baselineRecord.path as string).trim()\n    }\n    if (baselineRecord.content !== undefined) {\n      if (typeof baselineRecord.content !== 'string') return fail(`${path}.baseline.content`, 'must be a string when present')\n      baseline.content = baselineRecord.content\n    }\n  }\n  let fields: Record<string, unknown> | undefined\n  if (record.fields !== undefined) {\n    const fieldsRecord = asRecord(record.fields)\n    if (!fieldsRecord) return fail(`${path}.fields`, 'must be an object when present')\n    fields = fieldsRecord\n  }\n  if (record.path === undefined && record.content === undefined && fields === undefined) {\n    return fail(path, 'must carry a body: at least one of path, content, or fields')\n  }\n  const artifact: WorkProductArtifact = {\n    kind: (record.kind as string).trim(),\n    title: (record.title as string).trim(),\n  }\n  if (record.path !== undefined) artifact.path = (record.path as string).trim()\n  if (record.content !== undefined) artifact.content = record.content as string\n  if (record.mediaType !== undefined) artifact.mediaType = (record.mediaType as string).trim()\n  if (baseline !== undefined) artifact.baseline = baseline\n  if (fields !== undefined) artifact.fields = fields\n  return { ok: true, value: artifact }\n}\n\n/** Agent self-reported check input for `submit_work_product` (persisted with\n *  `source: 'agent'`; `platform`/`judge` sources are never model-suppliable). */\nexport interface AgentCheckInput {\n  id: string\n  name: string\n  passed: boolean\n  detail?: string\n}\n\n/** Validate one agent self-check ensuring identifiers, verdict flag, and optional detail are well formed */\nexport function parseAgentCheckInput(raw: unknown, path = 'check'): WorkProductParseResult<AgentCheckInput> {\n  const record = asRecord(raw)\n  if (!record) return fail(path, 'must be an object')\n  if (!nonEmptyString(record.id)) return fail(`${path}.id`, 'must be a non-empty string')\n  if (!nonEmptyString(record.name)) return fail(`${path}.name`, 'must be a non-empty check name')\n  if (typeof record.passed !== 'boolean') return fail(`${path}.passed`, 'must be a boolean')\n  const check: AgentCheckInput = {\n    id: (record.id as string).trim(),\n    name: (record.name as string).trim(),\n    passed: record.passed,\n  }\n  if (record.detail !== undefined) {\n    if (typeof record.detail !== 'string') return fail(`${path}.detail`, 'must be a string when present')\n    check.detail = record.detail\n  }\n  return { ok: true, value: check }\n}\n\n// ── chat transcript anchor (system-authored) ─────────────────────────────────\n\n/**\n * The persisted `type:'work_product'` transcript anchor — the chat card that\n * keeps chat the driver surface for review. The PLATFORM writes it on the\n * ready transition (and updates it on a verdict); no prompt ever teaches an\n * agent to author one. `/chat-store` aliases this as `ChatWorkProductPart` in\n * its stored-part union, exactly like the `interaction`/`plan` members.\n */\nexport interface WorkProductPersistedPart {\n  type: 'work_product'\n  ref: WorkProductRef\n  kind: string\n  title: string\n  status: WorkProductStatus\n}\n\n/** Project the transcript anchor part from a record. Requires the submitted\n *  artifact (the anchor is written on the ready transition, after which\n *  `artifact` is always non-null); falls back to the scopeKey label for\n *  defensive callers on an accumulating draft. */\nexport function workProductToPersistedPart(record: WorkProductRecord): WorkProductPersistedPart {\n  return {\n    type: 'work_product',\n    ref: { id: record.id, version: record.version },\n    kind: record.artifact?.kind ?? '',\n    title: record.artifact?.title ?? record.scopeKey,\n    status: record.status,\n  }\n}\n\n/** Re-validate a stored/wire part into the typed anchor; null for junk. */\nexport function persistedPartToWorkProduct(part: Record<string, unknown>): WorkProductPersistedPart | null {\n  if (!part || part.type !== 'work_product') return null\n  const ref = asRecord(part.ref)\n  if (!ref || !nonEmptyString(ref.id) || typeof ref.version !== 'number' || !Number.isFinite(ref.version)) return null\n  if (typeof part.kind !== 'string' || !nonEmptyString(part.title) || !isWorkProductStatus(part.status)) return null\n  return {\n    type: 'work_product',\n    ref: { id: ref.id as string, version: ref.version },\n    kind: part.kind,\n    title: part.title as string,\n    status: part.status,\n  }\n}\n"],"mappings":";AA8BA,IAAM,wBAAsD;AAAA,EAC1D;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAGO,SAAS,oBAAoB,OAA4C;AAC9E,SAAO,OAAO,UAAU,YAAa,sBAA4C,SAAS,KAAK;AACjG;AAsGO,SAAS,6BAA6B,YAAyD;AACpG,SAAO,WAAW,OAAO,CAAC,UAAU,MAAM,aAAa,cAAc,CAAC,MAAM,QAAQ;AACtF;AA+JA,SAAS,KAAQ,OAAe,OAA0C;AACxE,SAAO,EAAE,IAAI,OAAO,OAAO,MAAM;AACnC;AAEA,SAAS,eAAe,OAAiC;AACvD,SAAO,OAAO,UAAU,YAAY,MAAM,KAAK,EAAE,SAAS;AAC5D;AAEA,SAAS,SAAS,OAAgD;AAChE,SAAO,SAAS,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAK,QAAoC;AAC5G;AAIO,SAAS,mBAAmB,KAAc,OAAO,SAAgD;AACtG,QAAM,SAAS,SAAS,GAAG;AAC3B,MAAI,CAAC,OAAQ,QAAO,KAAK,MAAM,mBAAmB;AAClD,MAAI,CAAC,eAAe,OAAO,EAAE,EAAG,QAAO,KAAK,GAAG,IAAI,OAAO,oFAAoF;AAC9I,MAAI,CAAC,eAAe,OAAO,SAAS,EAAG,QAAO,KAAK,GAAG,IAAI,cAAc,yCAAyC;AACjH,MAAI,CAAC,eAAe,OAAO,MAAM,EAAG,QAAO,KAAK,GAAG,IAAI,WAAW,2DAA2D;AAC7H,MAAI,CAAC,eAAe,OAAO,KAAK,EAAG,QAAO,KAAK,GAAG,IAAI,UAAU,8CAA8C;AAC9G,QAAM,aAAa,OAAO,YAAY,SAAY,CAAC,IAAI,SAAS,OAAO,OAAO;AAC9E,MAAI,CAAC,WAAY,QAAO,KAAK,GAAG,IAAI,YAAY,gCAAgC;AAChF,QAAM,UAA2B,CAAC;AAClC,MAAI,WAAW,SAAS,QAAW;AACjC,QAAI,OAAO,WAAW,SAAS,YAAY,CAAC,OAAO,SAAS,WAAW,IAAI,GAAG;AAC5E,aAAO,KAAK,GAAG,IAAI,iBAAiB,sCAAsC;AAAA,IAC5E;AACA,YAAQ,OAAO,WAAW;AAAA,EAC5B;AACA,MAAI,WAAW,UAAU,QAAW;AAClC,QAAI,CAAC,eAAe,WAAW,KAAK,EAAG,QAAO,KAAK,GAAG,IAAI,kBAAkB,yCAAyC;AACrH,YAAQ,QAAQ,WAAW;AAAA,EAC7B;AACA,MAAI,WAAW,UAAU,QAAW;AAClC,QAAI,OAAO,WAAW,UAAU,SAAU,QAAO,KAAK,GAAG,IAAI,kBAAkB,+BAA+B;AAC9G,YAAQ,QAAQ,WAAW;AAAA,EAC7B;AACA,MAAI,WAAW,SAAS,QAAW;AACjC,QAAI,OAAO,WAAW,SAAS,YAAY,WAAW,KAAK,KAAK,EAAE,WAAW,GAAG;AAC9E,aAAO,KAAK,GAAG,IAAI,iBAAiB,6EAAwE;AAAA,IAC9G;AACA,YAAQ,OAAO,WAAW;AAAA,EAC5B;AACA,MAAI,WAAW,mBAAmB,QAAW;AAC3C,UAAM,QAAQ,WAAW;AACzB,QAAI,OAAO,UAAU,YAAY,CAAC,OAAO,UAAU,KAAK,KAAK,QAAQ,GAAG;AACtE,aAAO,KAAK,GAAG,IAAI,2BAA2B,uDAAuD;AAAA,IACvG;AACA,YAAQ,iBAAiB;AAAA,EAC3B;AACA,MAAI,WAAW,SAAS,QAAW;AACjC,UAAM,UAAU,SAAS,WAAW,IAAI;AACxC,QAAI,CAAC,QAAS,QAAO,KAAK,GAAG,IAAI,iBAAiB,+CAA+C;AACjG,eAAW,SAAS,CAAC,SAAS,KAAK,GAAY;AAC7C,YAAM,QAAQ,QAAQ,KAAK;AAC3B,UAAI,OAAO,UAAU,YAAY,CAAC,OAAO,UAAU,KAAK,KAAK,QAAQ,GAAG;AACtE,eAAO,KAAK,GAAG,IAAI,iBAAiB,KAAK,IAAI,iDAAiD;AAAA,MAChG;AAAA,IACF;AACA,QAAK,QAAQ,OAAmB,QAAQ,OAAkB;AACxD,aAAO,KAAK,GAAG,IAAI,iBAAiB,QAAQ,OAAO,QAAQ,GAAG,CAAC,iCAAiC,OAAO,QAAQ,KAAK,CAAC,8CAAyC;AAAA,IAChK;AACA,YAAQ,OAAO,EAAE,OAAO,QAAQ,OAAiB,KAAK,QAAQ,IAAc;AAAA,EAC9E;AAKA,QAAM,QAAuB;AAAA,IAC3B,IAAK,OAAO,GAAc,KAAK;AAAA,IAC/B,WAAY,OAAO,UAAqB,KAAK;AAAA,IAC7C;AAAA,IACA,QAAS,OAAO,OAAkB,KAAK;AAAA,IACvC,OAAO,OAAO;AAAA,EAChB;AACA,MAAI,OAAO,eAAe,QAAW;AACnC,QAAI,OAAO,OAAO,eAAe,YAAY,EAAE,OAAO,cAAc,KAAK,OAAO,cAAc,IAAI;AAChG,aAAO,KAAK,GAAG,IAAI,eAAe,uCAAuC;AAAA,IAC3E;AACA,UAAM,aAAa,OAAO;AAAA,EAC5B;AACA,SAAO,EAAE,IAAI,MAAM,OAAO,MAAM;AAClC;AAEA,IAAM,uBAAqD,CAAC,YAAY,YAAY,UAAU;AAIvF,SAAS,oBAAoB,KAAc,OAAO,aAAqD;AAC5G,QAAM,SAAS,SAAS,GAAG;AAC3B,MAAI,CAAC,OAAQ,QAAO,KAAK,MAAM,mBAAmB;AAClD,MAAI,CAAC,eAAe,OAAO,EAAE,EAAG,QAAO,KAAK,GAAG,IAAI,OAAO,oFAAoF;AAC9I,MAAI,CAAC,qBAAqB,SAAS,OAAO,QAA6B,GAAG;AACxE,WAAO,KAAK,GAAG,IAAI,aAAa,mBAAmB,qBAAqB,KAAK,IAAI,CAAC,EAAE;AAAA,EACtF;AACA,MAAI,CAAC,eAAe,OAAO,IAAI,EAAG,QAAO,KAAK,GAAG,IAAI,SAAS,oCAAoC;AAClG,MAAI,CAAC,eAAe,OAAO,OAAO,EAAG,QAAO,KAAK,GAAG,IAAI,YAAY,2BAA2B;AAC/F,QAAM,QAAwB;AAAA,IAC5B,IAAK,OAAO,GAAc,KAAK;AAAA,IAC/B,UAAU,OAAO;AAAA,IACjB,MAAO,OAAO,KAAgB,KAAK;AAAA,IACnC,SAAS,OAAO;AAAA,IAChB,UAAU,OAAO,aAAa;AAAA,EAChC;AACA,MAAI,OAAO,YAAY,QAAW;AAChC,QAAI,CAAC,MAAM,QAAQ,OAAO,OAAO,KAAK,CAAC,OAAO,QAAQ,MAAM,cAAc,GAAG;AAC3E,aAAO,KAAK,GAAG,IAAI,YAAY,oDAAoD;AAAA,IACrF;AACA,UAAM,UAAU,OAAO;AAAA,EACzB;AACA,MAAI,OAAO,eAAe,QAAW;AACnC,QAAI,OAAO,eAAe,WAAW,OAAO,eAAe,YAAY;AACrE,aAAO,KAAK,GAAG,IAAI,eAAe,4CAA4C;AAAA,IAChF;AACA,UAAM,aAAa,OAAO;AAAA,EAC5B;AACA,MAAI,OAAO,mBAAmB,QAAW;AACvC,QAAI,OAAO,OAAO,mBAAmB,SAAU,QAAO,KAAK,GAAG,IAAI,mBAAmB,+BAA+B;AACpH,UAAM,iBAAiB,OAAO;AAAA,EAChC;AACA,SAAO,EAAE,IAAI,MAAM,OAAO,MAAM;AAClC;AAKO,SAAS,mBAAmB,KAAc,OAAO,YAAyD;AAC/G,QAAM,SAAS,SAAS,GAAG;AAC3B,MAAI,CAAC,OAAQ,QAAO,KAAK,MAAM,mBAAmB;AAClD,MAAI,CAAC,eAAe,OAAO,IAAI,EAAG,QAAO,KAAK,GAAG,IAAI,SAAS,mCAAmC;AACjG,MAAI,CAAC,eAAe,OAAO,KAAK,EAAG,QAAO,KAAK,GAAG,IAAI,UAAU,2BAA2B;AAC3F,aAAW,OAAO,CAAC,QAAQ,WAAW,WAAW,GAAY;AAC3D,QAAI,OAAO,GAAG,MAAM,UAAa,CAAC,eAAe,OAAO,GAAG,CAAC,GAAG;AAC7D,aAAO,KAAK,GAAG,IAAI,IAAI,GAAG,IAAI,yCAAyC;AAAA,IACzE;AAAA,EACF;AACA,MAAI;AACJ,MAAI,OAAO,aAAa,QAAW;AACjC,UAAM,iBAAiB,SAAS,OAAO,QAAQ;AAC/C,QAAI,CAAC,eAAgB,QAAO,KAAK,GAAG,IAAI,aAAa,gCAAgC;AACrF,eAAW,CAAC;AACZ,QAAI,eAAe,SAAS,QAAW;AACrC,UAAI,CAAC,eAAe,eAAe,IAAI,EAAG,QAAO,KAAK,GAAG,IAAI,kBAAkB,yCAAyC;AACxH,eAAS,OAAQ,eAAe,KAAgB,KAAK;AAAA,IACvD;AACA,QAAI,eAAe,YAAY,QAAW;AACxC,UAAI,OAAO,eAAe,YAAY,SAAU,QAAO,KAAK,GAAG,IAAI,qBAAqB,+BAA+B;AACvH,eAAS,UAAU,eAAe;AAAA,IACpC;AAAA,EACF;AACA,MAAI;AACJ,MAAI,OAAO,WAAW,QAAW;AAC/B,UAAM,eAAe,SAAS,OAAO,MAAM;AAC3C,QAAI,CAAC,aAAc,QAAO,KAAK,GAAG,IAAI,WAAW,gCAAgC;AACjF,aAAS;AAAA,EACX;AACA,MAAI,OAAO,SAAS,UAAa,OAAO,YAAY,UAAa,WAAW,QAAW;AACrF,WAAO,KAAK,MAAM,6DAA6D;AAAA,EACjF;AACA,QAAM,WAAgC;AAAA,IACpC,MAAO,OAAO,KAAgB,KAAK;AAAA,IACnC,OAAQ,OAAO,MAAiB,KAAK;AAAA,EACvC;AACA,MAAI,OAAO,SAAS,OAAW,UAAS,OAAQ,OAAO,KAAgB,KAAK;AAC5E,MAAI,OAAO,YAAY,OAAW,UAAS,UAAU,OAAO;AAC5D,MAAI,OAAO,cAAc,OAAW,UAAS,YAAa,OAAO,UAAqB,KAAK;AAC3F,MAAI,aAAa,OAAW,UAAS,WAAW;AAChD,MAAI,WAAW,OAAW,UAAS,SAAS;AAC5C,SAAO,EAAE,IAAI,MAAM,OAAO,SAAS;AACrC;AAYO,SAAS,qBAAqB,KAAc,OAAO,SAAkD;AAC1G,QAAM,SAAS,SAAS,GAAG;AAC3B,MAAI,CAAC,OAAQ,QAAO,KAAK,MAAM,mBAAmB;AAClD,MAAI,CAAC,eAAe,OAAO,EAAE,EAAG,QAAO,KAAK,GAAG,IAAI,OAAO,4BAA4B;AACtF,MAAI,CAAC,eAAe,OAAO,IAAI,EAAG,QAAO,KAAK,GAAG,IAAI,SAAS,gCAAgC;AAC9F,MAAI,OAAO,OAAO,WAAW,UAAW,QAAO,KAAK,GAAG,IAAI,WAAW,mBAAmB;AACzF,QAAM,QAAyB;AAAA,IAC7B,IAAK,OAAO,GAAc,KAAK;AAAA,IAC/B,MAAO,OAAO,KAAgB,KAAK;AAAA,IACnC,QAAQ,OAAO;AAAA,EACjB;AACA,MAAI,OAAO,WAAW,QAAW;AAC/B,QAAI,OAAO,OAAO,WAAW,SAAU,QAAO,KAAK,GAAG,IAAI,WAAW,+BAA+B;AACpG,UAAM,SAAS,OAAO;AAAA,EACxB;AACA,SAAO,EAAE,IAAI,MAAM,OAAO,MAAM;AAClC;AAuBO,SAAS,2BAA2B,QAAqD;AAC9F,SAAO;AAAA,IACL,MAAM;AAAA,IACN,KAAK,EAAE,IAAI,OAAO,IAAI,SAAS,OAAO,QAAQ;AAAA,IAC9C,MAAM,OAAO,UAAU,QAAQ;AAAA,IAC/B,OAAO,OAAO,UAAU,SAAS,OAAO;AAAA,IACxC,QAAQ,OAAO;AAAA,EACjB;AACF;AAGO,SAAS,2BAA2B,MAAgE;AACzG,MAAI,CAAC,QAAQ,KAAK,SAAS,eAAgB,QAAO;AAClD,QAAM,MAAM,SAAS,KAAK,GAAG;AAC7B,MAAI,CAAC,OAAO,CAAC,eAAe,IAAI,EAAE,KAAK,OAAO,IAAI,YAAY,YAAY,CAAC,OAAO,SAAS,IAAI,OAAO,EAAG,QAAO;AAChH,MAAI,OAAO,KAAK,SAAS,YAAY,CAAC,eAAe,KAAK,KAAK,KAAK,CAAC,oBAAoB,KAAK,MAAM,EAAG,QAAO;AAC9G,SAAO;AAAA,IACL,MAAM;AAAA,IACN,KAAK,EAAE,IAAI,IAAI,IAAc,SAAS,IAAI,QAAQ;AAAA,IAClD,MAAM,KAAK;AAAA,IACX,OAAO,KAAK;AAAA,IACZ,QAAQ,KAAK;AAAA,EACf;AACF;","names":[]}

package/dist/{parts-DIKcC1p6.d.ts → parts-S1OINlRP.d.ts}

@@ -1,6 +1,6 @@
 import { Part } from '@tangle-network/agent-interface';
 import { a as ChatInteractionField, C as ChatInteractionStatus, I as InteractionAnswers, N as NoticeKind } from './contract-CEewO6DI.js';
-import { c as WorkProductPersistedPart } from './types-DeEOhQbv.js';
+import { c as WorkProductPersistedPart } from './types-DB82fktc.js';
 import { ChatPlanPersistedPart } from './plans/index.js';
 
 /**

package/dist/{queue-DBkulxW1.d.ts → queue-vRI0Qx3X.d.ts}

@@ -1,4 +1,4 @@
-import { W as WorkProductRef, a as WorkProductProvenance, b as WorkProductRecord } from './types-DeEOhQbv.js';
+import { W as WorkProductRef, a as WorkProductProvenance, b as WorkProductRecord } from './types-DB82fktc.js';
 
 /**
  * The review queue is a PROJECTION, not a store — a client-safe pure fold of

package/dist/turn-health/index.d.ts

@@ -153,7 +153,11 @@ interface TurnHealthVerdict {
      *  reported so a WINDOW can be judged: a product whose deliverable is tool
      *  output and which produced zero tool calls across every turn in the
      *  lookback has a dead tool surface, and that is the shape no per-turn rule
-     *  can see. (Measured: tax-agent, 129 of 129 assistant rows all-time.) */
+     *  can see.
+     *
+     *  Only meaningful alongside {@link interpretedParts} > 0. Zero tool calls
+     *  read off a row that persisted NO parts is not an observation about the
+     *  tool surface — it is the absence of one. */
     toolCalls: number;
     /** True when nothing about this turn could be judged — no interpretable part
      *  AND no visible text. Callers MUST exclude these from any healthy/unhealthy
@@ -177,6 +181,19 @@ interface TurnHealthVerdict {
      *  {@link partsReadable}. Named in the alert so a reader can see EXACTLY what
      *  the detector was blind to instead of taking "unreadable" on faith. */
     opaquePartTypes: string[];
+    /** How many parts this module actually READ (text, artifact, tool, or a known
+     *  non-output kind).
+     *
+     *  The third blindness, and the one that shipped a false page. `partsReadable`
+     *  only says nothing was *uninterpretable*; a row that persisted NO parts at
+     *  all satisfies that vacuously. Production: 97 of tax-agent's 156 assistant
+     *  rows predate parts persistence entirely and store `[]`, and reading "zero
+     *  tool calls" off them raised a critical `dead_tool_surface` against a
+     *  product whose own `turn_events` table holds 243 `tool_call` frames.
+     *
+     *  So a tool verdict requires BOTH `partsReadable` AND this being > 0 —
+     *  evidence that was read, not merely evidence that failed to be unreadable. */
+    interpretedParts: number;
 }
 /**
  * Judge one settled turn.
@@ -480,12 +497,36 @@ interface SweepOptions {
      *  returns fluent prose and HTTP 200.
      *
      *  This is the fourth failure shape, and the only one no per-turn rule can
-     *  see. Measured on production: tax-agent has 129 assistant turns across 64
-     *  threads, all-time, with zero tool parts — while every other detector in
-     *  this module reports it healthy. */
+     *  see.
+     *
+     *  The verdict is drawn ONLY over turns whose parts were present and
+     *  readable. An earlier revision counted rows that stored no parts, and the
+     *  production example this comment used to cite was that bug rather than a
+     *  finding: tax-agent's 97 parts-less rows all predate its parts persistence
+     *  (they stop at 2026-07-17T02:20Z, the encrypted rows start 02:58Z), while
+     *  the same database's `turn_events` table holds 243 `tool_call` frames over
+     *  15 turns. The tool surface was never dead; the rows were empty. */
     expectsToolCalls?: boolean;
     /** Turns needed before a dead tool surface is called. Default 10. */
     minTurnsForToolSurface?: number;
+    /**
+     * Make an at-rest parts encoding readable, so this sweep can judge a product
+     * that does not store parts in the clear.
+     *
+     * Without it, a product that encrypts `parts` (tax-agent wraps the whole
+     * array in one `__encrypted_parts__` part) is permanently UNMEASURABLE by the
+     * tool-surface rule: every row is opaque, so the honest verdict is "cannot
+     * certify" forever. This seam is how such a product gets a real verdict
+     * instead of permanent blindness — the sweep stays domain-free and the
+     * product supplies the decoder.
+     *
+     * Return the decoded parts value (it is parsed exactly like a stored one).
+     * Returning `null`/`undefined` or THROWING leaves the row's stored value in
+     * place, so a decoder that fails reports the row as opaque. It must never
+     * report success as an empty array: that manufactures the exact absent-parts
+     * blindness this module now refuses to draw conclusions from.
+     */
+    decodeParts?: (raw: unknown, row: PersistedTurnRow) => Promise<unknown> | unknown;
     now?: number;
 }
 /** What the sweep found. Returned as well as alerted, so a cron can log it and
@@ -515,6 +556,13 @@ interface SweepResult {
      *  {@link unreadableTurns} (a row can have readable text and opaque parts).
      *  No tool verdict is drawn over these. */
     opaquePartsTurns: number;
+    /** Turns that persisted NO parts at all. Distinct from
+     *  {@link opaquePartsTurns}: nothing failed to parse, there was simply
+     *  nothing there. Also excluded from every tool verdict. */
+    noPartsTurns: number;
+    /** Turns a tool verdict may actually be drawn from — parts present AND
+     *  interpretable. The denominator behind `dead_tool_surface`. */
+    toolReadableTurns: number;
     alerts: TurnHealthAlert[];
 }
 declare const SHELL_ERROR_REPLY_PREFIXES: readonly string[];

package/dist/turn-health/index.js

@@ -105,7 +105,11 @@ function classifyTurnOutcome(input) {
       toolCalls,
       unreadable: true,
       partsReadable: false,
-      opaquePartTypes: uniqueOpaque
+      opaquePartTypes: uniqueOpaque,
+      // Structurally 0 here — `unreadable` is only reached when
+      // `interpretedParts === 0`. Carried rather than hardcoded so the field
+      // has one source on every return path.
+      interpretedParts
     };
   }
   if (input.gated) {
@@ -125,7 +129,8 @@ function classifyTurnOutcome(input) {
     toolCalls,
     unreadable: false,
     partsReadable,
-    opaquePartTypes: uniqueOpaque
+    opaquePartTypes: uniqueOpaque,
+    interpretedParts
   };
 }
 function severityOf(reasons) {
@@ -339,6 +344,15 @@ function createTurnHealthLifecycle(options) {
 }
 
 // src/turn-health/sweep.ts
+async function decodeRowParts(decode, row) {
+  if (!decode) return row.parts;
+  try {
+    const decoded = await decode(row.parts, row);
+    return decoded ?? row.parts;
+  } catch {
+    return row.parts;
+  }
+}
 function parseParts(raw) {
   if (Array.isArray(raw)) return raw;
   if (typeof raw !== "string" || raw.trim().length === 0) return [];
@@ -404,18 +418,20 @@ async function sweepSilentFailures(options) {
   let unreadableTurns = 0;
   let toolReadableTurns = 0;
   let opaquePartsTurns = 0;
+  let noPartsTurns = 0;
   const opaqueTypes = /* @__PURE__ */ new Set();
   const malformedSamples = [];
   const rejectedSamples = [];
   for (const row of turns) {
     const verdict = classifyTurnOutcome({
       finalText: row.content,
-      parts: parseParts(row.parts),
+      parts: parseParts(await decodeRowParts(options.decodeParts, row)),
       outputTokens: row.outputTokens ?? null
     });
     toolCalls += verdict.toolCalls;
     if (verdict.toolCalls > 0) turnsWithToolCalls += 1;
-    if (verdict.partsReadable) toolReadableTurns += 1;
+    if (verdict.partsReadable && verdict.interpretedParts > 0) toolReadableTurns += 1;
+    else if (verdict.partsReadable) noPartsTurns += 1;
     else {
       opaquePartsTurns += 1;
       for (const t of verdict.opaquePartTypes) opaqueTypes.add(t);
@@ -488,13 +504,39 @@ async function sweepSilentFailures(options) {
       details: [
         `${toolReadableTurns} assistant turns with readable parts in the lookback, none of which called a tool`,
         "the product declares its deliverable comes from tool calls, so it has answered without doing anything",
-        ...opaquePartsTurns > 0 ? [`${opaquePartsTurns} further turn(s) had unreadable parts and were not judged`] : []
+        ...opaquePartsTurns > 0 ? [`${opaquePartsTurns} further turn(s) had unreadable parts and were not judged`] : [],
+        ...noPartsTurns > 0 ? [`${noPartsTurns} further turn(s) persisted no parts at all and were not judged`] : []
       ],
       data: {
         turnsJudged: toolReadableTurns,
         toolCalls: 0,
         turnsWithToolCalls: 0,
-        turnsNotJudged: opaquePartsTurns
+        turnsNotJudged: opaquePartsTurns + noPartsTurns,
+        opaquePartsTurns,
+        noPartsTurns
+      },
+      at: now
+    });
+  }
+  if (options.expectsToolCalls && toolReadableTurns < minTurnsForToolSurface && opaquePartsTurns + noPartsTurns > 0) {
+    alerts.push({
+      product: options.product,
+      severity: "warning",
+      key: `sweep:${options.product}:tool_surface_unmeasurable`,
+      title: `${options.product}: tool surface could not be certified \u2014 only ${toolReadableTurns} of ${turns.length} turns carried readable parts`,
+      details: [
+        ...noPartsTurns > 0 ? [`${noPartsTurns} turn(s) persisted no parts at all \u2014 nothing to read a tool call from`] : [],
+        ...opaquePartsTurns > 0 ? [
+          `${opaquePartsTurns} turn(s) stored parts this sweep cannot interpret (${[...opaqueTypes].join(", ") || "unnamed"}) \u2014 supply \`decodeParts\` to make them readable`
+        ] : [],
+        "this is NOT a dead tool surface finding; it is the absence of evidence either way"
+      ],
+      data: {
+        toolReadableTurns,
+        noPartsTurns,
+        opaquePartsTurns,
+        turnsSeen: turns.length,
+        opaqueTypes: [...opaqueTypes]
       },
       at: now
     });
@@ -534,6 +576,8 @@ async function sweepSilentFailures(options) {
     toolCalls,
     unreadableTurns,
     opaquePartsTurns,
+    noPartsTurns,
+    toolReadableTurns,
     alerts
   };
 }