@tangle-network/agent-app 0.44.42 → 0.44.47

package/dist/design-canvas/index.js

@@ -31,8 +31,8 @@ import {
   validateSceneOperation,
   validateSceneOperations,
   validateSlotValue
-} from "../chunk-VWOPOLVO.js";
-import "../chunk-PTUMBMVH.js";
+} from "../chunk-U4BXAZCN.js";
+import "../chunk-J25RST7G.js";
 import {
   buildScopedMcpServerEntry,
   createMcpToolHandler

package/dist/design-canvas-react/engine.js

@@ -18,7 +18,7 @@ import {
   mintElementId,
   nudgeDelta,
   resolveExportParams
-} from "../chunk-VYECQAGM.js";
+} from "../chunk-MYS7DHMM.js";
 import {
   SCENE_COMMAND_HISTORY_LIMIT,
   addElementCommand,
@@ -37,12 +37,12 @@ import {
   setPageGuidesCommand,
   setPagePropsCommand,
   ungroupElementCommand
-} from "../chunk-VTWKH4YU.js";
+} from "../chunk-O22STZ3P.js";
 import {
   bleedAwareExportBounds,
   scaleForPreset
-} from "../chunk-VWOPOLVO.js";
-import "../chunk-PTUMBMVH.js";
+} from "../chunk-U4BXAZCN.js";
+import "../chunk-J25RST7G.js";
 export {
   DEFAULT_INSERT_TEMPLATES,
   DUPLICATE_OFFSET,

package/dist/design-canvas-react/index.js

@@ -12,7 +12,7 @@ import {
   downloadDataUrl,
   exportDocumentJson,
   exportPageDataUrl
-} from "../chunk-Q3FONVAK.js";
+} from "../chunk-RMHZKMQ4.js";
 import {
   BTN,
   BTN_ACTIVE,
@@ -41,7 +41,7 @@ import {
   buildRulerTicks,
   formatRulerLabel,
   selectTickStep
-} from "../chunk-O63WWYET.js";
+} from "../chunk-KPRBFNGT.js";
 import "../chunk-TZO3SOUL.js";
 import "../chunk-ZN5J47UX.js";
 import {
@@ -63,7 +63,7 @@ import {
   mintElementId,
   nudgeDelta,
   resolveExportParams
-} from "../chunk-VYECQAGM.js";
+} from "../chunk-MYS7DHMM.js";
 import {
   SCENE_COMMAND_HISTORY_LIMIT,
   addElementCommand,
@@ -82,17 +82,17 @@ import {
   setPageGuidesCommand,
   setPagePropsCommand,
   ungroupElementCommand
-} from "../chunk-VTWKH4YU.js";
+} from "../chunk-O22STZ3P.js";
 import {
   assertSceneMediaSrc,
   bleedAwareExportBounds,
   scaleForPreset
-} from "../chunk-VWOPOLVO.js";
+} from "../chunk-U4BXAZCN.js";
 import {
   DesignCanvasChromeLazy,
   DesignCanvasLazy
-} from "../chunk-4TI7QWLW.js";
-import "../chunk-PTUMBMVH.js";
+} from "../chunk-OO4DROKM.js";
+import "../chunk-J25RST7G.js";
 
 // src/design-canvas-react/components/CanvasInsertPanel.tsx
 import { useEffect, useRef, useState } from "react";

package/dist/design-canvas-react/lazy.js

@@ -1,7 +1,7 @@
 import {
   DesignCanvasChromeLazy,
   DesignCanvasLazy
-} from "../chunk-4TI7QWLW.js";
+} from "../chunk-OO4DROKM.js";
 export {
   DesignCanvasChromeLazy,
   DesignCanvasLazy

package/dist/platform/index.js

@@ -10,8 +10,8 @@ import {
   parseAdminEmails,
   signSessionCookieValue,
   verifySignedSsoState
-} from "../chunk-YRMLYFVR.js";
-import "../chunk-PTUMBMVH.js";
+} from "../chunk-PCJHEZA7.js";
+import "../chunk-J25RST7G.js";
 import {
   resolveTangleDevOrUserKey
 } from "../chunk-JML7WKWU.js";

package/dist/preset-cloudflare/index.d.ts

@@ -40,6 +40,19 @@ declare function ensureCloudflareWorkflowInstance<TParams, TStatus, TInstance ex
     params: TParams;
 }): Promise<EnsureCloudflareWorkflowInstanceResult<TStatus, TInstance>>;
 
+/** One path rule in Cloudflare's static-asset `_headers` file. */
+interface CloudflareHeadersRule {
+    pattern: string;
+    headers: Readonly<Record<string, string>>;
+}
+/**
+ * Render native Cloudflare static-asset header rules.
+ *
+ * Values are validated before serialization so a product setting cannot add a
+ * second path rule or response header through a newline.
+ */
+declare function renderCloudflareHeadersFile(rules: readonly CloudflareHeadersRule[]): string;
+
 /**
  * `@tangle-network/agent-app/preset-cloudflare` — the batteries-included default
  * stack.
@@ -270,4 +283,4 @@ interface PresetBillingOptions {
  */
 declare function createPresetWorkspaceKeyManager(opts: PresetBillingOptions): WorkspaceKeyManager;
 
-export { type CloudflareWorkflowBindingLike, type CloudflareWorkflowInstanceLike, type D1Like, type D1PreparedLike, type DrizzleColumnLike, type DrizzleSqliteCoreLike, type EnsureCloudflareWorkflowInstanceResult, PRESET_MIGRATION_SQL, PRESET_TABLES, type PresetBillingOptions, type PresetKnowledgeAccessorOptions, type PresetToolHandlerOptions, type VaultKv, createD1KnowledgeStateAccessor, createPresetDrizzleSchema, createPresetFieldCrypto, createPresetToolHandlers, createPresetWorkspaceKeyManager, createPresetWorkspaceKeyStore, ensureCloudflareWorkflowInstance };
+export { type CloudflareHeadersRule, type CloudflareWorkflowBindingLike, type CloudflareWorkflowInstanceLike, type D1Like, type D1PreparedLike, type DrizzleColumnLike, type DrizzleSqliteCoreLike, type EnsureCloudflareWorkflowInstanceResult, PRESET_MIGRATION_SQL, PRESET_TABLES, type PresetBillingOptions, type PresetKnowledgeAccessorOptions, type PresetToolHandlerOptions, type VaultKv, createD1KnowledgeStateAccessor, createPresetDrizzleSchema, createPresetFieldCrypto, createPresetToolHandlers, createPresetWorkspaceKeyManager, createPresetWorkspaceKeyStore, ensureCloudflareWorkflowInstance, renderCloudflareHeadersFile };

package/dist/preset-cloudflare/index.js

@@ -23,6 +23,39 @@ async function ensureCloudflareWorkflowInstance(binding, input) {
   }
 }
 
+// src/preset-cloudflare/headers.ts
+var HEADER_NAME = /^[!#$%&'*+\-.^_`|~0-9A-Za-z]+$/;
+function assertSingleLine(value, label) {
+  if (value.length === 0 || /[\r\n]/.test(value)) {
+    throw new Error(`${label} must be a non-empty single line`);
+  }
+}
+function renderCloudflareHeadersFile(rules) {
+  if (rules.length === 0) {
+    throw new Error("At least one Cloudflare header rule is required");
+  }
+  const renderedRules = rules.map(({ pattern, headers }) => {
+    assertSingleLine(pattern, "Cloudflare header pattern");
+    if (!pattern.startsWith("/") || /\s/.test(pattern)) {
+      throw new Error("Cloudflare header patterns must start with / and contain no whitespace");
+    }
+    const entries = Object.entries(headers);
+    if (entries.length === 0) {
+      throw new Error(`Cloudflare header rule ${pattern} must contain at least one header`);
+    }
+    const renderedHeaders = entries.map(([name, value]) => {
+      if (!HEADER_NAME.test(name)) {
+        throw new Error(`Invalid HTTP header name: ${name}`);
+      }
+      assertSingleLine(value, `Cloudflare header ${name}`);
+      return `  ${name}: ${value}`;
+    });
+    return [pattern, ...renderedHeaders].join("\n");
+  });
+  return `${renderedRules.join("\n\n")}
+`;
+}
+
 // src/preset-cloudflare/index.ts
 var PRESET_TABLES = {
   proposals: {
@@ -310,6 +343,7 @@ export {
   createPresetToolHandlers,
   createPresetWorkspaceKeyManager,
   createPresetWorkspaceKeyStore,
-  ensureCloudflareWorkflowInstance
+  ensureCloudflareWorkflowInstance,
+  renderCloudflareHeadersFile
 };
 //# sourceMappingURL=index.js.map

package/dist/preset-cloudflare/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/preset-cloudflare/workflow-instance.ts","../../src/preset-cloudflare/index.ts"],"sourcesContent":["/**\n * The structural part of a Cloudflare Workflow instance used to prove that a\n * failed create call actually left an addressable durable instance behind.\n */\nexport interface CloudflareWorkflowInstanceLike<TStatus = unknown> {\n  status(): Promise<TStatus>\n}\n\n/** The structural binding implemented by Cloudflare's `Workflow<TParams>`. */\nexport interface CloudflareWorkflowBindingLike<\n  TParams,\n  TStatus = unknown,\n  TInstance extends CloudflareWorkflowInstanceLike<TStatus> =\n    CloudflareWorkflowInstanceLike<TStatus>,\n> {\n  create(input: { id: string; params: TParams }): Promise<TInstance>\n  get(id: string): Promise<TInstance>\n}\n\nexport interface EnsureCloudflareWorkflowInstanceResult<\n  TStatus,\n  TInstance extends CloudflareWorkflowInstanceLike<TStatus>,\n> {\n  instance: TInstance\n  /** False only when create failed but the same id was proven readable. */\n  created: boolean\n  /** Present on reuse because reading status is the proof the instance exists. */\n  status?: TStatus\n}\n\n/**\n * Create one durable Workflow instance, or prove an instance with the same id\n * already exists before accepting a create error as an idempotent retry.\n *\n * Cloudflare does not expose a stable duplicate-error class. Matching error\n * text can therefore swallow unrelated failures. This helper uses the durable\n * resource itself as proof: `get(id).status()` must succeed, otherwise the\n * original create error is rethrown.\n */\nexport async function ensureCloudflareWorkflowInstance<\n  TParams,\n  TStatus,\n  TInstance extends CloudflareWorkflowInstanceLike<TStatus>,\n>(\n  binding: CloudflareWorkflowBindingLike<TParams, TStatus, TInstance>,\n  input: { id: string; params: TParams },\n): Promise<EnsureCloudflareWorkflowInstanceResult<TStatus, TInstance>> {\n  try {\n    return {\n      instance: await binding.create(input),\n      created: true,\n    }\n  } catch (createError) {\n    try {\n      const instance = await binding.get(input.id)\n      const status = await instance.status()\n      return { instance, created: false, status }\n    } catch {\n      throw createError\n    }\n  }\n}\n","/**\n * `@tangle-network/agent-app/preset-cloudflare` — the batteries-included default\n * stack.\n *\n * Every fleet agent runs the SAME backend: Cloudflare D1 (SQLite) through\n * Drizzle for state, a KV namespace as the artifact vault, AES-GCM field crypto\n * for PII, and per-workspace budget-capped model keys. The other agent-app\n * modules are pure SEAMS — `./tools` needs an `AppToolHandlers`, `./knowledge`\n * needs a `KnowledgeStateAccessor`, `./billing` needs a `WorkspaceKeyStore` +\n * `KeyCrypto`. This module is the ONE implementation of those seams against the\n * house stack, so a consumer that runs D1 + KV stands the whole shell up with\n * config + bindings and ZERO handler code.\n *\n * Layering:\n *  - Drizzle is a PEER (the consumer installs `drizzle-orm`, never bundled). The\n *    schema is therefore expressed two ways that need no import here: the plain\n *    DDL ({@link PRESET_MIGRATION_SQL}) a consumer runs to create the tables, and\n *    a {@link createPresetDrizzleSchema} factory that takes the consumer's\n *    `drizzle-orm/sqlite-core` builder module and returns the typed tables. The\n *    column names in {@link PRESET_TABLES} are the contract the handlers,\n *    accessor, and DDL all agree on.\n *  - D1 + KV are STRUCTURAL: {@link D1Like} (Cloudflare `D1Database` satisfies it)\n *    and `KvLike` from `../web` (Cloudflare `KVNamespace` satisfies it). No\n *    `@cloudflare/workers-types` dependency.\n *  - Crypto/billing reuse `../crypto` + `../billing` exactly — this only wires\n *    them to the D1 key table.\n */\n\nimport { createFieldCrypto } from '../crypto/index'\nimport {\n  createWorkspaceKeyManager,\n  type KeyCrypto,\n  type KeyProvisioner,\n  type WorkspaceKeyManager,\n  type WorkspaceKeyRecord,\n  type WorkspaceKeyStore,\n} from '../billing/index'\nimport type { KnowledgeStateAccessor } from '../knowledge/index'\nimport type {\n  AddCitationArgs,\n  AddCitationResult,\n  AppToolContext,\n  AppToolHandlers,\n  RenderUiArgs,\n  RenderUiResult,\n  ScheduleFollowupArgs,\n  ScheduleFollowupResult,\n  SubmitProposalArgs,\n  SubmitProposalResult,\n} from '../tools/index'\nimport type { KvLike } from '../web/index'\n\nexport {\n  ensureCloudflareWorkflowInstance,\n  type CloudflareWorkflowBindingLike,\n  type CloudflareWorkflowInstanceLike,\n  type EnsureCloudflareWorkflowInstanceResult,\n} from './workflow-instance'\n\n// ---------------------------------------------------------------------------\n// D1 structural seam\n//\n// The minimal surface of Cloudflare's `D1Database` the handlers + accessor use.\n// `D1Database` satisfies it structurally, so the consumer passes `env.DB`\n// directly and tests pass an in-memory fake. We keep it to the\n// prepare/bind/first/run/all shape D1 already exposes — no Drizzle here, so the\n// default handlers run on a fresh Worker with only the D1 binding.\n// ---------------------------------------------------------------------------\n\n/** A prepared, bound D1 statement. */\nexport interface D1PreparedLike {\n  bind(...values: unknown[]): D1PreparedLike\n  first<T = Record<string, unknown>>(colName?: string): Promise<T | null>\n  run(): Promise<unknown>\n  all<T = Record<string, unknown>>(): Promise<{ results: T[] }>\n}\n\n/** The D1 surface the preset needs. Cloudflare `D1Database` satisfies it. */\nexport interface D1Like {\n  prepare(query: string): D1PreparedLike\n}\n\n// ---------------------------------------------------------------------------\n// Default schema\n//\n// The four tables the default handlers + accessor read/write. Column names are\n// the single source of truth shared by the DDL, the Drizzle factory, the\n// handlers, and the accessor. Every table is workspace-scoped on `workspace_id`\n// (the accessor's default `where` column) so the knowledge `count` rule and the\n// tool writes agree without per-consumer wiring.\n//\n// Deliberately NOT here: chat thread/message tables. `/chat-store` is the\n// single thread-schema owner (`createChatTables` + `createChatStore`); the\n// preset once declared an unconsumed `threads` DDL, removed so two schemas\n// can't drift.\n// ---------------------------------------------------------------------------\n\n/** The preset table + column names — the contract the DDL, Drizzle schema,\n *  handlers, and accessor share. Exposed so a consumer can reference a column\n *  without a string literal. */\nexport const PRESET_TABLES = {\n  proposals: {\n    name: 'proposals',\n    columns: {\n      id: 'id',\n      workspaceId: 'workspace_id',\n      threadId: 'thread_id',\n      type: 'type',\n      title: 'title',\n      description: 'description',\n      status: 'status',\n      createdBy: 'created_by',\n      createdAt: 'created_at',\n    },\n  },\n  knowledge: {\n    name: 'knowledge',\n    columns: {\n      id: 'id',\n      workspaceId: 'workspace_id',\n      path: 'path',\n      kind: 'kind',\n      label: 'label',\n      content: 'content',\n      createdAt: 'created_at',\n    },\n  },\n  deadlines: {\n    name: 'deadlines',\n    columns: {\n      id: 'id',\n      workspaceId: 'workspace_id',\n      threadId: 'thread_id',\n      title: 'title',\n      dueDate: 'due_date',\n      priority: 'priority',\n      status: 'status',\n      createdAt: 'created_at',\n    },\n  },\n  workspaceKeys: {\n    name: 'workspace_keys',\n    columns: {\n      id: 'id',\n      workspaceId: 'workspace_id',\n      keyId: 'key_id',\n      keyEncrypted: 'key_encrypted',\n      budgetUsd: 'budget_usd',\n      expiresAt: 'expires_at',\n      revokedAt: 'revoked_at',\n      createdAt: 'created_at',\n    },\n  },\n} as const\n\n/**\n * Plain DDL for the preset schema — run by a consumer to create the tables with\n * ZERO drizzle (`for (const sql of PRESET_MIGRATION_SQL) await db.prepare(sql).run()`,\n * or paste into a `.sql` migration). One statement per table so D1's\n * single-statement `prepare` accepts each. Matches {@link PRESET_TABLES} exactly.\n */\nexport const PRESET_MIGRATION_SQL: readonly string[] = [\n  `CREATE TABLE IF NOT EXISTS proposals (\n    id TEXT PRIMARY KEY,\n    workspace_id TEXT NOT NULL,\n    thread_id TEXT,\n    type TEXT NOT NULL,\n    title TEXT NOT NULL,\n    description TEXT,\n    status TEXT NOT NULL DEFAULT 'pending',\n    created_by TEXT,\n    created_at INTEGER NOT NULL\n  )`,\n  `CREATE TABLE IF NOT EXISTS knowledge (\n    id TEXT PRIMARY KEY,\n    workspace_id TEXT NOT NULL,\n    path TEXT NOT NULL,\n    kind TEXT NOT NULL,\n    label TEXT,\n    content TEXT,\n    created_at INTEGER NOT NULL\n  )`,\n  `CREATE TABLE IF NOT EXISTS deadlines (\n    id TEXT PRIMARY KEY,\n    workspace_id TEXT NOT NULL,\n    thread_id TEXT,\n    title TEXT NOT NULL,\n    due_date TEXT NOT NULL,\n    priority TEXT,\n    status TEXT NOT NULL DEFAULT 'scheduled',\n    created_at INTEGER NOT NULL\n  )`,\n  `CREATE TABLE IF NOT EXISTS workspace_keys (\n    id TEXT PRIMARY KEY,\n    workspace_id TEXT NOT NULL,\n    key_id TEXT NOT NULL,\n    key_encrypted TEXT NOT NULL,\n    budget_usd REAL NOT NULL,\n    expires_at INTEGER NOT NULL,\n    revoked_at INTEGER,\n    created_at INTEGER NOT NULL\n  )`,\n  `CREATE INDEX IF NOT EXISTS idx_proposals_ws ON proposals (workspace_id, status)`,\n  `CREATE INDEX IF NOT EXISTS idx_deadlines_ws ON deadlines (workspace_id, status)`,\n  `CREATE INDEX IF NOT EXISTS idx_knowledge_ws ON knowledge (workspace_id)`,\n  `CREATE INDEX IF NOT EXISTS idx_workspace_keys_ws ON workspace_keys (workspace_id, revoked_at)`,\n]\n\n/** A chainable column builder — every modifier returns the builder so calls\n *  like `.notNull().default('pending')` typecheck. The concrete drizzle builders\n *  satisfy this structurally. */\nexport interface DrizzleColumnLike {\n  primaryKey: () => DrizzleColumnLike\n  notNull: () => DrizzleColumnLike\n  default: (v: unknown) => DrizzleColumnLike\n}\n\n/** The shape of a `drizzle-orm/sqlite-core` module — the few builders the\n *  preset schema uses. The consumer passes the real module; agent-app never\n *  imports it (it stays a peer). */\nexport interface DrizzleSqliteCoreLike {\n  sqliteTable: (name: string, columns: Record<string, DrizzleColumnLike>) => unknown\n  text: (name?: string) => DrizzleColumnLike\n  integer: (name?: string, config?: unknown) => DrizzleColumnLike\n  real: (name?: string) => DrizzleColumnLike\n}\n\n/**\n * Build the typed Drizzle schema for the preset, given the consumer's\n * `drizzle-orm/sqlite-core` module. Returns one table object per\n * {@link PRESET_TABLES} entry — pass to `drizzle(db, { schema })` for typed\n * queries, or to drizzle-kit for migration generation. agent-app never imports\n * drizzle; the builder module is the seam.\n *\n * ```ts\n * import * as d from 'drizzle-orm/sqlite-core'\n * const schema = createPresetDrizzleSchema(d)\n * ```\n */\nexport function createPresetDrizzleSchema(d: DrizzleSqliteCoreLike) {\n  const { sqliteTable, text, integer, real } = d\n  const C = PRESET_TABLES\n  return {\n    proposals: sqliteTable(C.proposals.name, {\n      id: text(C.proposals.columns.id).primaryKey(),\n      workspaceId: text(C.proposals.columns.workspaceId).notNull(),\n      threadId: text(C.proposals.columns.threadId),\n      type: text(C.proposals.columns.type).notNull(),\n      title: text(C.proposals.columns.title).notNull(),\n      description: text(C.proposals.columns.description),\n      status: text(C.proposals.columns.status).notNull().default('pending'),\n      createdBy: text(C.proposals.columns.createdBy),\n      createdAt: integer(C.proposals.columns.createdAt).notNull(),\n    }),\n    knowledge: sqliteTable(C.knowledge.name, {\n      id: text(C.knowledge.columns.id).primaryKey(),\n      workspaceId: text(C.knowledge.columns.workspaceId).notNull(),\n      path: text(C.knowledge.columns.path).notNull(),\n      kind: text(C.knowledge.columns.kind).notNull(),\n      label: text(C.knowledge.columns.label),\n      content: text(C.knowledge.columns.content),\n      createdAt: integer(C.knowledge.columns.createdAt).notNull(),\n    }),\n    deadlines: sqliteTable(C.deadlines.name, {\n      id: text(C.deadlines.columns.id).primaryKey(),\n      workspaceId: text(C.deadlines.columns.workspaceId).notNull(),\n      threadId: text(C.deadlines.columns.threadId),\n      title: text(C.deadlines.columns.title).notNull(),\n      dueDate: text(C.deadlines.columns.dueDate).notNull(),\n      priority: text(C.deadlines.columns.priority),\n      status: text(C.deadlines.columns.status).notNull().default('scheduled'),\n      createdAt: integer(C.deadlines.columns.createdAt).notNull(),\n    }),\n    workspaceKeys: sqliteTable(C.workspaceKeys.name, {\n      id: text(C.workspaceKeys.columns.id).primaryKey(),\n      workspaceId: text(C.workspaceKeys.columns.workspaceId).notNull(),\n      keyId: text(C.workspaceKeys.columns.keyId).notNull(),\n      keyEncrypted: text(C.workspaceKeys.columns.keyEncrypted).notNull(),\n      budgetUsd: real(C.workspaceKeys.columns.budgetUsd).notNull(),\n      expiresAt: integer(C.workspaceKeys.columns.expiresAt).notNull(),\n      revokedAt: integer(C.workspaceKeys.columns.revokedAt),\n      createdAt: integer(C.workspaceKeys.columns.createdAt).notNull(),\n    }),\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Default AppToolHandlers over D1 + KV\n// ---------------------------------------------------------------------------\n\n/** The KV-backed vault. `KvLike` (from `../web`) is the structural KV contract;\n *  Cloudflare `KVNamespace` satisfies it. Artifacts are stored under their path. */\nexport type VaultKv = KvLike\n\n/** Define configuration options for handling preset tools including database, vault, and optional utilities */\nexport interface PresetToolHandlerOptions {\n  /** The D1 database (Cloudflare `D1Database` satisfies {@link D1Like}). */\n  db: D1Like\n  /** The KV namespace used as the artifact vault. */\n  vault: VaultKv\n  /** Id generator. Default `crypto.randomUUID`. Injectable for deterministic tests. */\n  newId?: () => string\n  /** Clock (epoch ms). Default `Date.now`. Injectable for deterministic tests. */\n  now?: () => number\n  /** Vault path prefix for `render_ui` artifacts. Default `'ui'`. */\n  uiPathPrefix?: string\n  /** Vault path prefix for `add_citation` artifacts. Default `'citations'`. */\n  citationPathPrefix?: string\n}\n\nfunction slug(value: string): string {\n  return value\n    .toLowerCase()\n    .replace(/[^a-z0-9]+/g, '-')\n    .replace(/^-+|-+$/g, '')\n    .slice(0, 64) || 'item'\n}\n\n/**\n * The default {@link AppToolHandlers} for the house stack:\n *  - `submit_proposal`   → insert a `proposals` row (`status='pending'`), deduped\n *                          on (workspace, title) so a retried turn doesn't double-queue.\n *  - `schedule_followup` → insert a `deadlines` row, deduped on (workspace, title, due_date).\n *  - `render_ui`         → write the schema JSON as a `ui/<thread>/<slug>.json`\n *                          vault artifact AND a `knowledge` row pointing at it.\n *  - `add_citation`      → write the quote as a `citations/<slug>.json` artifact AND\n *                          a `knowledge` row.\n *\n * Returns the EXACT persisted content from `render_ui` (per the seam contract) so\n * a completion oracle sees real bytes. Pure seam wiring: a consumer that runs\n * D1 + KV gets all four tools with no handler code.\n */\nexport function createPresetToolHandlers(opts: PresetToolHandlerOptions): AppToolHandlers {\n  const { db, vault } = opts\n  const newId = opts.newId ?? (() => crypto.randomUUID())\n  const now = opts.now ?? (() => Date.now())\n  const uiPrefix = opts.uiPathPrefix ?? 'ui'\n  const citationPrefix = opts.citationPathPrefix ?? 'citations'\n  const P = PRESET_TABLES.proposals\n  const D = PRESET_TABLES.deadlines\n  const K = PRESET_TABLES.knowledge\n\n  async function persistArtifact(path: string, body: string): Promise<void> {\n    await vault.put(path, body)\n  }\n\n  async function insertKnowledge(workspaceId: string, path: string, kind: string, label: string | null, content: string): Promise<void> {\n    await db\n      .prepare(\n        `INSERT INTO ${K.name} (${K.columns.id}, ${K.columns.workspaceId}, ${K.columns.path}, ${K.columns.kind}, ${K.columns.label}, ${K.columns.content}, ${K.columns.createdAt}) VALUES (?, ?, ?, ?, ?, ?, ?)`,\n      )\n      .bind(newId(), workspaceId, path, kind, label, content, now())\n      .run()\n  }\n\n  return {\n    async submitProposal(args: SubmitProposalArgs, ctx: AppToolContext): Promise<SubmitProposalResult> {\n      const existing = await db\n        .prepare(`SELECT ${P.columns.id} AS id FROM ${P.name} WHERE ${P.columns.workspaceId} = ? AND ${P.columns.title} = ? LIMIT 1`)\n        .bind(ctx.workspaceId, args.title)\n        .first<{ id: string }>()\n      if (existing) return { proposalId: existing.id, deduped: true }\n\n      const id = newId()\n      await db\n        .prepare(\n          `INSERT INTO ${P.name} (${P.columns.id}, ${P.columns.workspaceId}, ${P.columns.threadId}, ${P.columns.type}, ${P.columns.title}, ${P.columns.description}, ${P.columns.status}, ${P.columns.createdBy}, ${P.columns.createdAt}) VALUES (?, ?, ?, ?, ?, ?, 'pending', ?, ?)`,\n        )\n        .bind(id, ctx.workspaceId, ctx.threadId, args.type, args.title, args.description ?? null, ctx.userId, now())\n        .run()\n      return { proposalId: id, deduped: false }\n    },\n\n    async scheduleFollowup(args: ScheduleFollowupArgs, ctx: AppToolContext): Promise<ScheduleFollowupResult> {\n      const existing = await db\n        .prepare(\n          `SELECT ${D.columns.id} AS id, ${D.columns.dueDate} AS dueDate FROM ${D.name} WHERE ${D.columns.workspaceId} = ? AND ${D.columns.title} = ? AND ${D.columns.dueDate} = ? LIMIT 1`,\n        )\n        .bind(ctx.workspaceId, args.title, args.dueDate)\n        .first<{ id: string; dueDate: string }>()\n      if (existing) return { id: existing.id, dueDate: existing.dueDate, deduped: true }\n\n      const id = newId()\n      await db\n        .prepare(\n          `INSERT INTO ${D.name} (${D.columns.id}, ${D.columns.workspaceId}, ${D.columns.threadId}, ${D.columns.title}, ${D.columns.dueDate}, ${D.columns.priority}, ${D.columns.status}, ${D.columns.createdAt}) VALUES (?, ?, ?, ?, ?, ?, 'scheduled', ?)`,\n        )\n        .bind(id, ctx.workspaceId, ctx.threadId, args.title, args.dueDate, args.priority ?? null, now())\n        .run()\n      return { id, dueDate: args.dueDate, deduped: false }\n    },\n\n    async renderUi(args: RenderUiArgs, ctx: AppToolContext): Promise<RenderUiResult> {\n      const content = JSON.stringify(args.schema)\n      const path = `${uiPrefix}/${ctx.threadId ?? 'global'}/${slug(args.title)}.json`\n      await persistArtifact(path, content)\n      await insertKnowledge(ctx.workspaceId, path, 'ui', args.title, content)\n      return { path, content }\n    },\n\n    async addCitation(args: AddCitationArgs, ctx: AppToolContext): Promise<AddCitationResult> {\n      const citationId = newId()\n      const path = `${citationPrefix}/${slug(args.label ?? args.path)}-${citationId.slice(0, 8)}.json`\n      const body = JSON.stringify({ sourcePath: args.path, quote: args.quote, label: args.label ?? null })\n      await persistArtifact(path, body)\n      await insertKnowledge(ctx.workspaceId, path, 'citation', args.label ?? null, body)\n      return { citationId, path }\n    },\n  }\n}\n\n// ---------------------------------------------------------------------------\n// D1-backed KnowledgeStateAccessor\n// ---------------------------------------------------------------------------\n\n/** Define options for accessing preset knowledge scoped to a specific workspace and configuration */\nexport interface PresetKnowledgeAccessorOptions {\n  db: D1Like\n  /** The active workspace — every `count` is scoped to it. */\n  workspaceId: string\n  /** Workspace config the `satisfiedBy: { config }` rules read. A resolved\n   *  object (dot-path lookup), or a function the accessor calls per path. */\n  config: Record<string, unknown> | ((path: string) => unknown)\n  /** The default workspace fk column a `count` rule scopes on when its rule\n   *  omits `where`. Default `'workspace_id'` (the preset schema convention). */\n  defaultWhereColumn?: string\n}\n\nfunction readDotPath(obj: Record<string, unknown>, path: string): unknown {\n  let cur: unknown = obj\n  for (const part of path.split('.')) {\n    if (cur == null || typeof cur !== 'object') return undefined\n    cur = (cur as Record<string, unknown>)[part]\n  }\n  return cur\n}\n\n/**\n * The {@link KnowledgeStateAccessor} over the preset D1 schema — the seam that\n * lets the declarative `satisfiedBy` rules resolve with ZERO consumer code:\n *  - `config(path)` reads the supplied workspace config by dot-path.\n *  - `count({ table, where, statusIn })` runs `SELECT count(*)` scoped to the\n *    active workspace (the rule's `where` column, default `workspace_id`),\n *    optionally filtered to `statusIn` via a parameterized `IN (...)`.\n *\n * Identifiers (table/column) are validated against a safe pattern before\n * interpolation — they originate from the product's own config, never model\n * input, but we fail loud rather than build a malformed/injectable query.\n */\nexport function createD1KnowledgeStateAccessor(opts: PresetKnowledgeAccessorOptions): KnowledgeStateAccessor {\n  const { db, workspaceId } = opts\n  const defaultWhere = opts.defaultWhereColumn ?? 'workspace_id'\n  const configFn = typeof opts.config === 'function' ? opts.config : (path: string) => readDotPath(opts.config as Record<string, unknown>, path)\n\n  const isIdentifier = (s: string) => /^[A-Za-z_][A-Za-z0-9_]*$/.test(s)\n\n  return {\n    config: configFn,\n    async count(query) {\n      if (!isIdentifier(query.table)) throw new Error(`unsafe table identifier: ${query.table}`)\n      const whereCol = query.where ?? defaultWhere\n      if (!isIdentifier(whereCol)) throw new Error(`unsafe where identifier: ${whereCol}`)\n\n      let sql = `SELECT count(*) AS n FROM ${query.table} WHERE ${whereCol} = ?`\n      const binds: unknown[] = [workspaceId]\n      if (query.statusIn && query.statusIn.length > 0) {\n        sql += ` AND status IN (${query.statusIn.map(() => '?').join(', ')})`\n        binds.push(...query.statusIn)\n      }\n      const row = await db.prepare(sql).bind(...binds).first<{ n: number }>()\n      return row?.n ?? 0\n    },\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Crypto + per-workspace key wiring\n// ---------------------------------------------------------------------------\n\n/** Build the {@link KeyCrypto} the billing key store uses — AES-256-GCM field\n *  crypto bound to the product's 64-char-hex `ENCRYPTION_KEY` (or a resolver).\n *  This is the concrete impl behind the `../billing` `KeyCrypto` seam. */\nexport function createPresetFieldCrypto(key: string | (() => string)): KeyCrypto {\n  return createFieldCrypto(key)\n}\n\n/**\n * The {@link WorkspaceKeyStore} over the preset `workspace_keys` table — the\n * persistence seam the per-workspace key manager needs. \"Active\" = a row with a\n * null `revoked_at`. Pure D1 wiring; no key minting (that's the provisioner).\n */\nexport function createPresetWorkspaceKeyStore(db: D1Like): WorkspaceKeyStore {\n  const W = PRESET_TABLES.workspaceKeys\n  return {\n    async getActive(workspaceId: string): Promise<WorkspaceKeyRecord | null> {\n      const row = await db\n        .prepare(\n          `SELECT ${W.columns.id} AS id, ${W.columns.keyId} AS keyId, ${W.columns.keyEncrypted} AS keyEncrypted, ${W.columns.budgetUsd} AS budgetUsd, ${W.columns.expiresAt} AS expiresAt FROM ${W.name} WHERE ${W.columns.workspaceId} = ? AND ${W.columns.revokedAt} IS NULL ORDER BY ${W.columns.createdAt} DESC LIMIT 1`,\n        )\n        .bind(workspaceId)\n        .first<{ id: string; keyId: string; keyEncrypted: string; budgetUsd: number; expiresAt: number | null }>()\n      if (!row) return null\n      return {\n        id: row.id,\n        keyId: row.keyId,\n        keyEncrypted: row.keyEncrypted,\n        budgetUsd: row.budgetUsd,\n        expiresAt: row.expiresAt == null ? null : new Date(row.expiresAt),\n      }\n    },\n    async listActive(workspaceId: string): Promise<Array<{ id: string; keyId: string }>> {\n      const res = await db\n        .prepare(`SELECT ${W.columns.id} AS id, ${W.columns.keyId} AS keyId FROM ${W.name} WHERE ${W.columns.workspaceId} = ? AND ${W.columns.revokedAt} IS NULL`)\n        .bind(workspaceId)\n        .all<{ id: string; keyId: string }>()\n      return res.results\n    },\n    async insert(record): Promise<void> {\n      await db\n        .prepare(\n          `INSERT INTO ${W.name} (${W.columns.id}, ${W.columns.workspaceId}, ${W.columns.keyId}, ${W.columns.keyEncrypted}, ${W.columns.budgetUsd}, ${W.columns.expiresAt}, ${W.columns.revokedAt}, ${W.columns.createdAt}) VALUES (?, ?, ?, ?, ?, ?, NULL, ?)`,\n        )\n        .bind(crypto.randomUUID(), record.workspaceId, record.keyId, record.keyEncrypted, record.budgetUsd, record.expiresAt.getTime(), Date.now())\n        .run()\n    },\n    async markRevoked(id: string, now: Date): Promise<void> {\n      await db\n        .prepare(`UPDATE ${W.name} SET ${W.columns.revokedAt} = ? WHERE ${W.columns.id} = ?`)\n        .bind(now.getTime(), id)\n        .run()\n    },\n  }\n}\n\n/** Define preset billing options including database, provisioner, encryption key, budget, and optional settings */\nexport interface PresetBillingOptions {\n  db: D1Like\n  /** The key provisioner (`@tangle-network/tcloud`'s client satisfies it structurally). */\n  provisioner: KeyProvisioner\n  /** Field-crypto key (64-char hex) or resolver — encrypts the minted key at rest. */\n  encryptionKey: string | (() => string)\n  /** Default monthly USD allowance when a call doesn't specify one. */\n  defaultBudgetUsd: number\n  /** Injectable clock. */\n  now?: () => Date\n  /** tcloud product the key is scoped to. Default `'router'`. */\n  product?: string\n}\n\n/**\n * Stand up the per-workspace budget-capped {@link WorkspaceKeyManager} on the\n * house stack: the preset `workspace_keys` D1 store + AES-GCM field crypto +\n * the consumer's tcloud provisioner. The mint/rotate/rollover/usage LOGIC lives\n * in `../billing`; this only binds it to the preset table + crypto.\n */\nexport function createPresetWorkspaceKeyManager(opts: PresetBillingOptions): WorkspaceKeyManager {\n  return createWorkspaceKeyManager({\n    provisioner: opts.provisioner,\n    store: createPresetWorkspaceKeyStore(opts.db),\n    crypto: createPresetFieldCrypto(opts.encryptionKey),\n    defaultBudgetUsd: opts.defaultBudgetUsd,\n    now: opts.now,\n    product: opts.product,\n  })\n}\n"],"mappings":";;;;;;;;AAuCA,eAAsB,iCAKpB,SACA,OACqE;AACrE,MAAI;AACF,WAAO;AAAA,MACL,UAAU,MAAM,QAAQ,OAAO,KAAK;AAAA,MACpC,SAAS;AAAA,IACX;AAAA,EACF,SAAS,aAAa;AACpB,QAAI;AACF,YAAM,WAAW,MAAM,QAAQ,IAAI,MAAM,EAAE;AAC3C,YAAM,SAAS,MAAM,SAAS,OAAO;AACrC,aAAO,EAAE,UAAU,SAAS,OAAO,OAAO;AAAA,IAC5C,QAAQ;AACN,YAAM;AAAA,IACR;AAAA,EACF;AACF;;;ACuCO,IAAM,gBAAgB;AAAA,EAC3B,WAAW;AAAA,IACT,MAAM;AAAA,IACN,SAAS;AAAA,MACP,IAAI;AAAA,MACJ,aAAa;AAAA,MACb,UAAU;AAAA,MACV,MAAM;AAAA,MACN,OAAO;AAAA,MACP,aAAa;AAAA,MACb,QAAQ;AAAA,MACR,WAAW;AAAA,MACX,WAAW;AAAA,IACb;AAAA,EACF;AAAA,EACA,WAAW;AAAA,IACT,MAAM;AAAA,IACN,SAAS;AAAA,MACP,IAAI;AAAA,MACJ,aAAa;AAAA,MACb,MAAM;AAAA,MACN,MAAM;AAAA,MACN,OAAO;AAAA,MACP,SAAS;AAAA,MACT,WAAW;AAAA,IACb;AAAA,EACF;AAAA,EACA,WAAW;AAAA,IACT,MAAM;AAAA,IACN,SAAS;AAAA,MACP,IAAI;AAAA,MACJ,aAAa;AAAA,MACb,UAAU;AAAA,MACV,OAAO;AAAA,MACP,SAAS;AAAA,MACT,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,WAAW;AAAA,IACb;AAAA,EACF;AAAA,EACA,eAAe;AAAA,IACb,MAAM;AAAA,IACN,SAAS;AAAA,MACP,IAAI;AAAA,MACJ,aAAa;AAAA,MACb,OAAO;AAAA,MACP,cAAc;AAAA,MACd,WAAW;AAAA,MACX,WAAW;AAAA,MACX,WAAW;AAAA,MACX,WAAW;AAAA,IACb;AAAA,EACF;AACF;AAQO,IAAM,uBAA0C;AAAA,EACrD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAiCO,SAAS,0BAA0B,GAA0B;AAClE,QAAM,EAAE,aAAa,MAAM,SAAS,KAAK,IAAI;AAC7C,QAAM,IAAI;AACV,SAAO;AAAA,IACL,WAAW,YAAY,EAAE,UAAU,MAAM;AAAA,MACvC,IAAI,KAAK,EAAE,UAAU,QAAQ,EAAE,EAAE,WAAW;AAAA,MAC5C,aAAa,KAAK,EAAE,UAAU,QAAQ,WAAW,EAAE,QAAQ;AAAA,MAC3D,UAAU,KAAK,EAAE,UAAU,QAAQ,QAAQ;AAAA,MAC3C,MAAM,KAAK,EAAE,UAAU,QAAQ,IAAI,EAAE,QAAQ;AAAA,MAC7C,OAAO,KAAK,EAAE,UAAU,QAAQ,KAAK,EAAE,QAAQ;AAAA,MAC/C,aAAa,KAAK,EAAE,UAAU,QAAQ,WAAW;AAAA,MACjD,QAAQ,KAAK,EAAE,UAAU,QAAQ,MAAM,EAAE,QAAQ,EAAE,QAAQ,SAAS;AAAA,MACpE,WAAW,KAAK,EAAE,UAAU,QAAQ,SAAS;AAAA,MAC7C,WAAW,QAAQ,EAAE,UAAU,QAAQ,SAAS,EAAE,QAAQ;AAAA,IAC5D,CAAC;AAAA,IACD,WAAW,YAAY,EAAE,UAAU,MAAM;AAAA,MACvC,IAAI,KAAK,EAAE,UAAU,QAAQ,EAAE,EAAE,WAAW;AAAA,MAC5C,aAAa,KAAK,EAAE,UAAU,QAAQ,WAAW,EAAE,QAAQ;AAAA,MAC3D,MAAM,KAAK,EAAE,UAAU,QAAQ,IAAI,EAAE,QAAQ;AAAA,MAC7C,MAAM,KAAK,EAAE,UAAU,QAAQ,IAAI,EAAE,QAAQ;AAAA,MAC7C,OAAO,KAAK,EAAE,UAAU,QAAQ,KAAK;AAAA,MACrC,SAAS,KAAK,EAAE,UAAU,QAAQ,OAAO;AAAA,MACzC,WAAW,QAAQ,EAAE,UAAU,QAAQ,SAAS,EAAE,QAAQ;AAAA,IAC5D,CAAC;AAAA,IACD,WAAW,YAAY,EAAE,UAAU,MAAM;AAAA,MACvC,IAAI,KAAK,EAAE,UAAU,QAAQ,EAAE,EAAE,WAAW;AAAA,MAC5C,aAAa,KAAK,EAAE,UAAU,QAAQ,WAAW,EAAE,QAAQ;AAAA,MAC3D,UAAU,KAAK,EAAE,UAAU,QAAQ,QAAQ;AAAA,MAC3C,OAAO,KAAK,EAAE,UAAU,QAAQ,KAAK,EAAE,QAAQ;AAAA,MAC/C,SAAS,KAAK,EAAE,UAAU,QAAQ,OAAO,EAAE,QAAQ;AAAA,MACnD,UAAU,KAAK,EAAE,UAAU,QAAQ,QAAQ;AAAA,MAC3C,QAAQ,KAAK,EAAE,UAAU,QAAQ,MAAM,EAAE,QAAQ,EAAE,QAAQ,WAAW;AAAA,MACtE,WAAW,QAAQ,EAAE,UAAU,QAAQ,SAAS,EAAE,QAAQ;AAAA,IAC5D,CAAC;AAAA,IACD,eAAe,YAAY,EAAE,cAAc,MAAM;AAAA,MAC/C,IAAI,KAAK,EAAE,cAAc,QAAQ,EAAE,EAAE,WAAW;AAAA,MAChD,aAAa,KAAK,EAAE,cAAc,QAAQ,WAAW,EAAE,QAAQ;AAAA,MAC/D,OAAO,KAAK,EAAE,cAAc,QAAQ,KAAK,EAAE,QAAQ;AAAA,MACnD,cAAc,KAAK,EAAE,cAAc,QAAQ,YAAY,EAAE,QAAQ;AAAA,MACjE,WAAW,KAAK,EAAE,cAAc,QAAQ,SAAS,EAAE,QAAQ;AAAA,MAC3D,WAAW,QAAQ,EAAE,cAAc,QAAQ,SAAS,EAAE,QAAQ;AAAA,MAC9D,WAAW,QAAQ,EAAE,cAAc,QAAQ,SAAS;AAAA,MACpD,WAAW,QAAQ,EAAE,cAAc,QAAQ,SAAS,EAAE,QAAQ;AAAA,IAChE,CAAC;AAAA,EACH;AACF;AA0BA,SAAS,KAAK,OAAuB;AACnC,SAAO,MACJ,YAAY,EACZ,QAAQ,eAAe,GAAG,EAC1B,QAAQ,YAAY,EAAE,EACtB,MAAM,GAAG,EAAE,KAAK;AACrB;AAgBO,SAAS,yBAAyB,MAAiD;AACxF,QAAM,EAAE,IAAI,MAAM,IAAI;AACtB,QAAM,QAAQ,KAAK,UAAU,MAAM,OAAO,WAAW;AACrD,QAAM,MAAM,KAAK,QAAQ,MAAM,KAAK,IAAI;AACxC,QAAM,WAAW,KAAK,gBAAgB;AACtC,QAAM,iBAAiB,KAAK,sBAAsB;AAClD,QAAM,IAAI,cAAc;AACxB,QAAM,IAAI,cAAc;AACxB,QAAM,IAAI,cAAc;AAExB,iBAAe,gBAAgB,MAAc,MAA6B;AACxE,UAAM,MAAM,IAAI,MAAM,IAAI;AAAA,EAC5B;AAEA,iBAAe,gBAAgB,aAAqB,MAAc,MAAc,OAAsB,SAAgC;AACpI,UAAM,GACH;AAAA,MACC,eAAe,EAAE,IAAI,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,WAAW,KAAK,EAAE,QAAQ,IAAI,KAAK,EAAE,QAAQ,IAAI,KAAK,EAAE,QAAQ,KAAK,KAAK,EAAE,QAAQ,OAAO,KAAK,EAAE,QAAQ,SAAS;AAAA,IAC1K,EACC,KAAK,MAAM,GAAG,aAAa,MAAM,MAAM,OAAO,SAAS,IAAI,CAAC,EAC5D,IAAI;AAAA,EACT;AAEA,SAAO;AAAA,IACL,MAAM,eAAe,MAA0B,KAAoD;AACjG,YAAM,WAAW,MAAM,GACpB,QAAQ,UAAU,EAAE,QAAQ,EAAE,eAAe,EAAE,IAAI,UAAU,EAAE,QAAQ,WAAW,YAAY,EAAE,QAAQ,KAAK,cAAc,EAC3H,KAAK,IAAI,aAAa,KAAK,KAAK,EAChC,MAAsB;AACzB,UAAI,SAAU,QAAO,EAAE,YAAY,SAAS,IAAI,SAAS,KAAK;AAE9D,YAAM,KAAK,MAAM;AACjB,YAAM,GACH;AAAA,QACC,eAAe,EAAE,IAAI,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,WAAW,KAAK,EAAE,QAAQ,QAAQ,KAAK,EAAE,QAAQ,IAAI,KAAK,EAAE,QAAQ,KAAK,KAAK,EAAE,QAAQ,WAAW,KAAK,EAAE,QAAQ,MAAM,KAAK,EAAE,QAAQ,SAAS,KAAK,EAAE,QAAQ,SAAS;AAAA,MAC/N,EACC,KAAK,IAAI,IAAI,aAAa,IAAI,UAAU,KAAK,MAAM,KAAK,OAAO,KAAK,eAAe,MAAM,IAAI,QAAQ,IAAI,CAAC,EAC1G,IAAI;AACP,aAAO,EAAE,YAAY,IAAI,SAAS,MAAM;AAAA,IAC1C;AAAA,IAEA,MAAM,iBAAiB,MAA4B,KAAsD;AACvG,YAAM,WAAW,MAAM,GACpB;AAAA,QACC,UAAU,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,OAAO,oBAAoB,EAAE,IAAI,UAAU,EAAE,QAAQ,WAAW,YAAY,EAAE,QAAQ,KAAK,YAAY,EAAE,QAAQ,OAAO;AAAA,MACrK,EACC,KAAK,IAAI,aAAa,KAAK,OAAO,KAAK,OAAO,EAC9C,MAAuC;AAC1C,UAAI,SAAU,QAAO,EAAE,IAAI,SAAS,IAAI,SAAS,SAAS,SAAS,SAAS,KAAK;AAEjF,YAAM,KAAK,MAAM;AACjB,YAAM,GACH;AAAA,QACC,eAAe,EAAE,IAAI,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,WAAW,KAAK,EAAE,QAAQ,QAAQ,KAAK,EAAE,QAAQ,KAAK,KAAK,EAAE,QAAQ,OAAO,KAAK,EAAE,QAAQ,QAAQ,KAAK,EAAE,QAAQ,MAAM,KAAK,EAAE,QAAQ,SAAS;AAAA,MACvM,EACC,KAAK,IAAI,IAAI,aAAa,IAAI,UAAU,KAAK,OAAO,KAAK,SAAS,KAAK,YAAY,MAAM,IAAI,CAAC,EAC9F,IAAI;AACP,aAAO,EAAE,IAAI,SAAS,KAAK,SAAS,SAAS,MAAM;AAAA,IACrD;AAAA,IAEA,MAAM,SAAS,MAAoB,KAA8C;AAC/E,YAAM,UAAU,KAAK,UAAU,KAAK,MAAM;AAC1C,YAAM,OAAO,GAAG,QAAQ,IAAI,IAAI,YAAY,QAAQ,IAAI,KAAK,KAAK,KAAK,CAAC;AACxE,YAAM,gBAAgB,MAAM,OAAO;AACnC,YAAM,gBAAgB,IAAI,aAAa,MAAM,MAAM,KAAK,OAAO,OAAO;AACtE,aAAO,EAAE,MAAM,QAAQ;AAAA,IACzB;AAAA,IAEA,MAAM,YAAY,MAAuB,KAAiD;AACxF,YAAM,aAAa,MAAM;AACzB,YAAM,OAAO,GAAG,cAAc,IAAI,KAAK,KAAK,SAAS,KAAK,IAAI,CAAC,IAAI,WAAW,MAAM,GAAG,CAAC,CAAC;AACzF,YAAM,OAAO,KAAK,UAAU,EAAE,YAAY,KAAK,MAAM,OAAO,KAAK,OAAO,OAAO,KAAK,SAAS,KAAK,CAAC;AACnG,YAAM,gBAAgB,MAAM,IAAI;AAChC,YAAM,gBAAgB,IAAI,aAAa,MAAM,YAAY,KAAK,SAAS,MAAM,IAAI;AACjF,aAAO,EAAE,YAAY,KAAK;AAAA,IAC5B;AAAA,EACF;AACF;AAmBA,SAAS,YAAY,KAA8B,MAAuB;AACxE,MAAI,MAAe;AACnB,aAAW,QAAQ,KAAK,MAAM,GAAG,GAAG;AAClC,QAAI,OAAO,QAAQ,OAAO,QAAQ,SAAU,QAAO;AACnD,UAAO,IAAgC,IAAI;AAAA,EAC7C;AACA,SAAO;AACT;AAcO,SAAS,+BAA+B,MAA8D;AAC3G,QAAM,EAAE,IAAI,YAAY,IAAI;AAC5B,QAAM,eAAe,KAAK,sBAAsB;AAChD,QAAM,WAAW,OAAO,KAAK,WAAW,aAAa,KAAK,SAAS,CAAC,SAAiB,YAAY,KAAK,QAAmC,IAAI;AAE7I,QAAM,eAAe,CAAC,MAAc,2BAA2B,KAAK,CAAC;AAErE,SAAO;AAAA,IACL,QAAQ;AAAA,IACR,MAAM,MAAM,OAAO;AACjB,UAAI,CAAC,aAAa,MAAM,KAAK,EAAG,OAAM,IAAI,MAAM,4BAA4B,MAAM,KAAK,EAAE;AACzF,YAAM,WAAW,MAAM,SAAS;AAChC,UAAI,CAAC,aAAa,QAAQ,EAAG,OAAM,IAAI,MAAM,4BAA4B,QAAQ,EAAE;AAEnF,UAAI,MAAM,6BAA6B,MAAM,KAAK,UAAU,QAAQ;AACpE,YAAM,QAAmB,CAAC,WAAW;AACrC,UAAI,MAAM,YAAY,MAAM,SAAS,SAAS,GAAG;AAC/C,eAAO,mBAAmB,MAAM,SAAS,IAAI,MAAM,GAAG,EAAE,KAAK,IAAI,CAAC;AAClE,cAAM,KAAK,GAAG,MAAM,QAAQ;AAAA,MAC9B;AACA,YAAM,MAAM,MAAM,GAAG,QAAQ,GAAG,EAAE,KAAK,GAAG,KAAK,EAAE,MAAqB;AACtE,aAAO,KAAK,KAAK;AAAA,IACnB;AAAA,EACF;AACF;AASO,SAAS,wBAAwB,KAAyC;AAC/E,SAAO,kBAAkB,GAAG;AAC9B;AAOO,SAAS,8BAA8B,IAA+B;AAC3E,QAAM,IAAI,cAAc;AACxB,SAAO;AAAA,IACL,MAAM,UAAU,aAAyD;AACvE,YAAM,MAAM,MAAM,GACf;AAAA,QACC,UAAU,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,KAAK,cAAc,EAAE,QAAQ,YAAY,qBAAqB,EAAE,QAAQ,SAAS,kBAAkB,EAAE,QAAQ,SAAS,sBAAsB,EAAE,IAAI,UAAU,EAAE,QAAQ,WAAW,YAAY,EAAE,QAAQ,SAAS,qBAAqB,EAAE,QAAQ,SAAS;AAAA,MACrS,EACC,KAAK,WAAW,EAChB,MAAwG;AAC3G,UAAI,CAAC,IAAK,QAAO;AACjB,aAAO;AAAA,QACL,IAAI,IAAI;AAAA,QACR,OAAO,IAAI;AAAA,QACX,cAAc,IAAI;AAAA,QAClB,WAAW,IAAI;AAAA,QACf,WAAW,IAAI,aAAa,OAAO,OAAO,IAAI,KAAK,IAAI,SAAS;AAAA,MAClE;AAAA,IACF;AAAA,IACA,MAAM,WAAW,aAAoE;AACnF,YAAM,MAAM,MAAM,GACf,QAAQ,UAAU,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,KAAK,kBAAkB,EAAE,IAAI,UAAU,EAAE,QAAQ,WAAW,YAAY,EAAE,QAAQ,SAAS,UAAU,EACxJ,KAAK,WAAW,EAChB,IAAmC;AACtC,aAAO,IAAI;AAAA,IACb;AAAA,IACA,MAAM,OAAO,QAAuB;AAClC,YAAM,GACH;AAAA,QACC,eAAe,EAAE,IAAI,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,WAAW,KAAK,EAAE,QAAQ,KAAK,KAAK,EAAE,QAAQ,YAAY,KAAK,EAAE,QAAQ,SAAS,KAAK,EAAE,QAAQ,SAAS,KAAK,EAAE,QAAQ,SAAS,KAAK,EAAE,QAAQ,SAAS;AAAA,MACjN,EACC,KAAK,OAAO,WAAW,GAAG,OAAO,aAAa,OAAO,OAAO,OAAO,cAAc,OAAO,WAAW,OAAO,UAAU,QAAQ,GAAG,KAAK,IAAI,CAAC,EACzI,IAAI;AAAA,IACT;AAAA,IACA,MAAM,YAAY,IAAY,KAA0B;AACtD,YAAM,GACH,QAAQ,UAAU,EAAE,IAAI,QAAQ,EAAE,QAAQ,SAAS,cAAc,EAAE,QAAQ,EAAE,MAAM,EACnF,KAAK,IAAI,QAAQ,GAAG,EAAE,EACtB,IAAI;AAAA,IACT;AAAA,EACF;AACF;AAuBO,SAAS,gCAAgC,MAAiD;AAC/F,SAAO,0BAA0B;AAAA,IAC/B,aAAa,KAAK;AAAA,IAClB,OAAO,8BAA8B,KAAK,EAAE;AAAA,IAC5C,QAAQ,wBAAwB,KAAK,aAAa;AAAA,IAClD,kBAAkB,KAAK;AAAA,IACvB,KAAK,KAAK;AAAA,IACV,SAAS,KAAK;AAAA,EAChB,CAAC;AACH;","names":[]}
+{"version":3,"sources":["../../src/preset-cloudflare/workflow-instance.ts","../../src/preset-cloudflare/headers.ts","../../src/preset-cloudflare/index.ts"],"sourcesContent":["/**\n * The structural part of a Cloudflare Workflow instance used to prove that a\n * failed create call actually left an addressable durable instance behind.\n */\nexport interface CloudflareWorkflowInstanceLike<TStatus = unknown> {\n  status(): Promise<TStatus>\n}\n\n/** The structural binding implemented by Cloudflare's `Workflow<TParams>`. */\nexport interface CloudflareWorkflowBindingLike<\n  TParams,\n  TStatus = unknown,\n  TInstance extends CloudflareWorkflowInstanceLike<TStatus> =\n    CloudflareWorkflowInstanceLike<TStatus>,\n> {\n  create(input: { id: string; params: TParams }): Promise<TInstance>\n  get(id: string): Promise<TInstance>\n}\n\nexport interface EnsureCloudflareWorkflowInstanceResult<\n  TStatus,\n  TInstance extends CloudflareWorkflowInstanceLike<TStatus>,\n> {\n  instance: TInstance\n  /** False only when create failed but the same id was proven readable. */\n  created: boolean\n  /** Present on reuse because reading status is the proof the instance exists. */\n  status?: TStatus\n}\n\n/**\n * Create one durable Workflow instance, or prove an instance with the same id\n * already exists before accepting a create error as an idempotent retry.\n *\n * Cloudflare does not expose a stable duplicate-error class. Matching error\n * text can therefore swallow unrelated failures. This helper uses the durable\n * resource itself as proof: `get(id).status()` must succeed, otherwise the\n * original create error is rethrown.\n */\nexport async function ensureCloudflareWorkflowInstance<\n  TParams,\n  TStatus,\n  TInstance extends CloudflareWorkflowInstanceLike<TStatus>,\n>(\n  binding: CloudflareWorkflowBindingLike<TParams, TStatus, TInstance>,\n  input: { id: string; params: TParams },\n): Promise<EnsureCloudflareWorkflowInstanceResult<TStatus, TInstance>> {\n  try {\n    return {\n      instance: await binding.create(input),\n      created: true,\n    }\n  } catch (createError) {\n    try {\n      const instance = await binding.get(input.id)\n      const status = await instance.status()\n      return { instance, created: false, status }\n    } catch {\n      throw createError\n    }\n  }\n}\n","const HEADER_NAME = /^[!#$%&'*+\\-.^_`|~0-9A-Za-z]+$/\n\n/** One path rule in Cloudflare's static-asset `_headers` file. */\nexport interface CloudflareHeadersRule {\n  pattern: string\n  headers: Readonly<Record<string, string>>\n}\n\nfunction assertSingleLine(value: string, label: string): void {\n  if (value.length === 0 || /[\\r\\n]/.test(value)) {\n    throw new Error(`${label} must be a non-empty single line`)\n  }\n}\n\n/**\n * Render native Cloudflare static-asset header rules.\n *\n * Values are validated before serialization so a product setting cannot add a\n * second path rule or response header through a newline.\n */\nexport function renderCloudflareHeadersFile(\n  rules: readonly CloudflareHeadersRule[],\n): string {\n  if (rules.length === 0) {\n    throw new Error('At least one Cloudflare header rule is required')\n  }\n\n  const renderedRules = rules.map(({ pattern, headers }) => {\n    assertSingleLine(pattern, 'Cloudflare header pattern')\n    if (!pattern.startsWith('/') || /\\s/.test(pattern)) {\n      throw new Error('Cloudflare header patterns must start with / and contain no whitespace')\n    }\n\n    const entries = Object.entries(headers)\n    if (entries.length === 0) {\n      throw new Error(`Cloudflare header rule ${pattern} must contain at least one header`)\n    }\n\n    const renderedHeaders = entries.map(([name, value]) => {\n      if (!HEADER_NAME.test(name)) {\n        throw new Error(`Invalid HTTP header name: ${name}`)\n      }\n      assertSingleLine(value, `Cloudflare header ${name}`)\n      return `  ${name}: ${value}`\n    })\n\n    return [pattern, ...renderedHeaders].join('\\n')\n  })\n\n  return `${renderedRules.join('\\n\\n')}\\n`\n}\n","/**\n * `@tangle-network/agent-app/preset-cloudflare` — the batteries-included default\n * stack.\n *\n * Every fleet agent runs the SAME backend: Cloudflare D1 (SQLite) through\n * Drizzle for state, a KV namespace as the artifact vault, AES-GCM field crypto\n * for PII, and per-workspace budget-capped model keys. The other agent-app\n * modules are pure SEAMS — `./tools` needs an `AppToolHandlers`, `./knowledge`\n * needs a `KnowledgeStateAccessor`, `./billing` needs a `WorkspaceKeyStore` +\n * `KeyCrypto`. This module is the ONE implementation of those seams against the\n * house stack, so a consumer that runs D1 + KV stands the whole shell up with\n * config + bindings and ZERO handler code.\n *\n * Layering:\n *  - Drizzle is a PEER (the consumer installs `drizzle-orm`, never bundled). The\n *    schema is therefore expressed two ways that need no import here: the plain\n *    DDL ({@link PRESET_MIGRATION_SQL}) a consumer runs to create the tables, and\n *    a {@link createPresetDrizzleSchema} factory that takes the consumer's\n *    `drizzle-orm/sqlite-core` builder module and returns the typed tables. The\n *    column names in {@link PRESET_TABLES} are the contract the handlers,\n *    accessor, and DDL all agree on.\n *  - D1 + KV are STRUCTURAL: {@link D1Like} (Cloudflare `D1Database` satisfies it)\n *    and `KvLike` from `../web` (Cloudflare `KVNamespace` satisfies it). No\n *    `@cloudflare/workers-types` dependency.\n *  - Crypto/billing reuse `../crypto` + `../billing` exactly — this only wires\n *    them to the D1 key table.\n */\n\nimport { createFieldCrypto } from '../crypto/index'\nimport {\n  createWorkspaceKeyManager,\n  type KeyCrypto,\n  type KeyProvisioner,\n  type WorkspaceKeyManager,\n  type WorkspaceKeyRecord,\n  type WorkspaceKeyStore,\n} from '../billing/index'\nimport type { KnowledgeStateAccessor } from '../knowledge/index'\nimport type {\n  AddCitationArgs,\n  AddCitationResult,\n  AppToolContext,\n  AppToolHandlers,\n  RenderUiArgs,\n  RenderUiResult,\n  ScheduleFollowupArgs,\n  ScheduleFollowupResult,\n  SubmitProposalArgs,\n  SubmitProposalResult,\n} from '../tools/index'\nimport type { KvLike } from '../web/index'\n\nexport {\n  ensureCloudflareWorkflowInstance,\n  type CloudflareWorkflowBindingLike,\n  type CloudflareWorkflowInstanceLike,\n  type EnsureCloudflareWorkflowInstanceResult,\n} from './workflow-instance'\n\nexport {\n  renderCloudflareHeadersFile,\n  type CloudflareHeadersRule,\n} from './headers'\n\n// ---------------------------------------------------------------------------\n// D1 structural seam\n//\n// The minimal surface of Cloudflare's `D1Database` the handlers + accessor use.\n// `D1Database` satisfies it structurally, so the consumer passes `env.DB`\n// directly and tests pass an in-memory fake. We keep it to the\n// prepare/bind/first/run/all shape D1 already exposes — no Drizzle here, so the\n// default handlers run on a fresh Worker with only the D1 binding.\n// ---------------------------------------------------------------------------\n\n/** A prepared, bound D1 statement. */\nexport interface D1PreparedLike {\n  bind(...values: unknown[]): D1PreparedLike\n  first<T = Record<string, unknown>>(colName?: string): Promise<T | null>\n  run(): Promise<unknown>\n  all<T = Record<string, unknown>>(): Promise<{ results: T[] }>\n}\n\n/** The D1 surface the preset needs. Cloudflare `D1Database` satisfies it. */\nexport interface D1Like {\n  prepare(query: string): D1PreparedLike\n}\n\n// ---------------------------------------------------------------------------\n// Default schema\n//\n// The four tables the default handlers + accessor read/write. Column names are\n// the single source of truth shared by the DDL, the Drizzle factory, the\n// handlers, and the accessor. Every table is workspace-scoped on `workspace_id`\n// (the accessor's default `where` column) so the knowledge `count` rule and the\n// tool writes agree without per-consumer wiring.\n//\n// Deliberately NOT here: chat thread/message tables. `/chat-store` is the\n// single thread-schema owner (`createChatTables` + `createChatStore`); the\n// preset once declared an unconsumed `threads` DDL, removed so two schemas\n// can't drift.\n// ---------------------------------------------------------------------------\n\n/** The preset table + column names — the contract the DDL, Drizzle schema,\n *  handlers, and accessor share. Exposed so a consumer can reference a column\n *  without a string literal. */\nexport const PRESET_TABLES = {\n  proposals: {\n    name: 'proposals',\n    columns: {\n      id: 'id',\n      workspaceId: 'workspace_id',\n      threadId: 'thread_id',\n      type: 'type',\n      title: 'title',\n      description: 'description',\n      status: 'status',\n      createdBy: 'created_by',\n      createdAt: 'created_at',\n    },\n  },\n  knowledge: {\n    name: 'knowledge',\n    columns: {\n      id: 'id',\n      workspaceId: 'workspace_id',\n      path: 'path',\n      kind: 'kind',\n      label: 'label',\n      content: 'content',\n      createdAt: 'created_at',\n    },\n  },\n  deadlines: {\n    name: 'deadlines',\n    columns: {\n      id: 'id',\n      workspaceId: 'workspace_id',\n      threadId: 'thread_id',\n      title: 'title',\n      dueDate: 'due_date',\n      priority: 'priority',\n      status: 'status',\n      createdAt: 'created_at',\n    },\n  },\n  workspaceKeys: {\n    name: 'workspace_keys',\n    columns: {\n      id: 'id',\n      workspaceId: 'workspace_id',\n      keyId: 'key_id',\n      keyEncrypted: 'key_encrypted',\n      budgetUsd: 'budget_usd',\n      expiresAt: 'expires_at',\n      revokedAt: 'revoked_at',\n      createdAt: 'created_at',\n    },\n  },\n} as const\n\n/**\n * Plain DDL for the preset schema — run by a consumer to create the tables with\n * ZERO drizzle (`for (const sql of PRESET_MIGRATION_SQL) await db.prepare(sql).run()`,\n * or paste into a `.sql` migration). One statement per table so D1's\n * single-statement `prepare` accepts each. Matches {@link PRESET_TABLES} exactly.\n */\nexport const PRESET_MIGRATION_SQL: readonly string[] = [\n  `CREATE TABLE IF NOT EXISTS proposals (\n    id TEXT PRIMARY KEY,\n    workspace_id TEXT NOT NULL,\n    thread_id TEXT,\n    type TEXT NOT NULL,\n    title TEXT NOT NULL,\n    description TEXT,\n    status TEXT NOT NULL DEFAULT 'pending',\n    created_by TEXT,\n    created_at INTEGER NOT NULL\n  )`,\n  `CREATE TABLE IF NOT EXISTS knowledge (\n    id TEXT PRIMARY KEY,\n    workspace_id TEXT NOT NULL,\n    path TEXT NOT NULL,\n    kind TEXT NOT NULL,\n    label TEXT,\n    content TEXT,\n    created_at INTEGER NOT NULL\n  )`,\n  `CREATE TABLE IF NOT EXISTS deadlines (\n    id TEXT PRIMARY KEY,\n    workspace_id TEXT NOT NULL,\n    thread_id TEXT,\n    title TEXT NOT NULL,\n    due_date TEXT NOT NULL,\n    priority TEXT,\n    status TEXT NOT NULL DEFAULT 'scheduled',\n    created_at INTEGER NOT NULL\n  )`,\n  `CREATE TABLE IF NOT EXISTS workspace_keys (\n    id TEXT PRIMARY KEY,\n    workspace_id TEXT NOT NULL,\n    key_id TEXT NOT NULL,\n    key_encrypted TEXT NOT NULL,\n    budget_usd REAL NOT NULL,\n    expires_at INTEGER NOT NULL,\n    revoked_at INTEGER,\n    created_at INTEGER NOT NULL\n  )`,\n  `CREATE INDEX IF NOT EXISTS idx_proposals_ws ON proposals (workspace_id, status)`,\n  `CREATE INDEX IF NOT EXISTS idx_deadlines_ws ON deadlines (workspace_id, status)`,\n  `CREATE INDEX IF NOT EXISTS idx_knowledge_ws ON knowledge (workspace_id)`,\n  `CREATE INDEX IF NOT EXISTS idx_workspace_keys_ws ON workspace_keys (workspace_id, revoked_at)`,\n]\n\n/** A chainable column builder — every modifier returns the builder so calls\n *  like `.notNull().default('pending')` typecheck. The concrete drizzle builders\n *  satisfy this structurally. */\nexport interface DrizzleColumnLike {\n  primaryKey: () => DrizzleColumnLike\n  notNull: () => DrizzleColumnLike\n  default: (v: unknown) => DrizzleColumnLike\n}\n\n/** The shape of a `drizzle-orm/sqlite-core` module — the few builders the\n *  preset schema uses. The consumer passes the real module; agent-app never\n *  imports it (it stays a peer). */\nexport interface DrizzleSqliteCoreLike {\n  sqliteTable: (name: string, columns: Record<string, DrizzleColumnLike>) => unknown\n  text: (name?: string) => DrizzleColumnLike\n  integer: (name?: string, config?: unknown) => DrizzleColumnLike\n  real: (name?: string) => DrizzleColumnLike\n}\n\n/**\n * Build the typed Drizzle schema for the preset, given the consumer's\n * `drizzle-orm/sqlite-core` module. Returns one table object per\n * {@link PRESET_TABLES} entry — pass to `drizzle(db, { schema })` for typed\n * queries, or to drizzle-kit for migration generation. agent-app never imports\n * drizzle; the builder module is the seam.\n *\n * ```ts\n * import * as d from 'drizzle-orm/sqlite-core'\n * const schema = createPresetDrizzleSchema(d)\n * ```\n */\nexport function createPresetDrizzleSchema(d: DrizzleSqliteCoreLike) {\n  const { sqliteTable, text, integer, real } = d\n  const C = PRESET_TABLES\n  return {\n    proposals: sqliteTable(C.proposals.name, {\n      id: text(C.proposals.columns.id).primaryKey(),\n      workspaceId: text(C.proposals.columns.workspaceId).notNull(),\n      threadId: text(C.proposals.columns.threadId),\n      type: text(C.proposals.columns.type).notNull(),\n      title: text(C.proposals.columns.title).notNull(),\n      description: text(C.proposals.columns.description),\n      status: text(C.proposals.columns.status).notNull().default('pending'),\n      createdBy: text(C.proposals.columns.createdBy),\n      createdAt: integer(C.proposals.columns.createdAt).notNull(),\n    }),\n    knowledge: sqliteTable(C.knowledge.name, {\n      id: text(C.knowledge.columns.id).primaryKey(),\n      workspaceId: text(C.knowledge.columns.workspaceId).notNull(),\n      path: text(C.knowledge.columns.path).notNull(),\n      kind: text(C.knowledge.columns.kind).notNull(),\n      label: text(C.knowledge.columns.label),\n      content: text(C.knowledge.columns.content),\n      createdAt: integer(C.knowledge.columns.createdAt).notNull(),\n    }),\n    deadlines: sqliteTable(C.deadlines.name, {\n      id: text(C.deadlines.columns.id).primaryKey(),\n      workspaceId: text(C.deadlines.columns.workspaceId).notNull(),\n      threadId: text(C.deadlines.columns.threadId),\n      title: text(C.deadlines.columns.title).notNull(),\n      dueDate: text(C.deadlines.columns.dueDate).notNull(),\n      priority: text(C.deadlines.columns.priority),\n      status: text(C.deadlines.columns.status).notNull().default('scheduled'),\n      createdAt: integer(C.deadlines.columns.createdAt).notNull(),\n    }),\n    workspaceKeys: sqliteTable(C.workspaceKeys.name, {\n      id: text(C.workspaceKeys.columns.id).primaryKey(),\n      workspaceId: text(C.workspaceKeys.columns.workspaceId).notNull(),\n      keyId: text(C.workspaceKeys.columns.keyId).notNull(),\n      keyEncrypted: text(C.workspaceKeys.columns.keyEncrypted).notNull(),\n      budgetUsd: real(C.workspaceKeys.columns.budgetUsd).notNull(),\n      expiresAt: integer(C.workspaceKeys.columns.expiresAt).notNull(),\n      revokedAt: integer(C.workspaceKeys.columns.revokedAt),\n      createdAt: integer(C.workspaceKeys.columns.createdAt).notNull(),\n    }),\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Default AppToolHandlers over D1 + KV\n// ---------------------------------------------------------------------------\n\n/** The KV-backed vault. `KvLike` (from `../web`) is the structural KV contract;\n *  Cloudflare `KVNamespace` satisfies it. Artifacts are stored under their path. */\nexport type VaultKv = KvLike\n\n/** Define configuration options for handling preset tools including database, vault, and optional utilities */\nexport interface PresetToolHandlerOptions {\n  /** The D1 database (Cloudflare `D1Database` satisfies {@link D1Like}). */\n  db: D1Like\n  /** The KV namespace used as the artifact vault. */\n  vault: VaultKv\n  /** Id generator. Default `crypto.randomUUID`. Injectable for deterministic tests. */\n  newId?: () => string\n  /** Clock (epoch ms). Default `Date.now`. Injectable for deterministic tests. */\n  now?: () => number\n  /** Vault path prefix for `render_ui` artifacts. Default `'ui'`. */\n  uiPathPrefix?: string\n  /** Vault path prefix for `add_citation` artifacts. Default `'citations'`. */\n  citationPathPrefix?: string\n}\n\nfunction slug(value: string): string {\n  return value\n    .toLowerCase()\n    .replace(/[^a-z0-9]+/g, '-')\n    .replace(/^-+|-+$/g, '')\n    .slice(0, 64) || 'item'\n}\n\n/**\n * The default {@link AppToolHandlers} for the house stack:\n *  - `submit_proposal`   → insert a `proposals` row (`status='pending'`), deduped\n *                          on (workspace, title) so a retried turn doesn't double-queue.\n *  - `schedule_followup` → insert a `deadlines` row, deduped on (workspace, title, due_date).\n *  - `render_ui`         → write the schema JSON as a `ui/<thread>/<slug>.json`\n *                          vault artifact AND a `knowledge` row pointing at it.\n *  - `add_citation`      → write the quote as a `citations/<slug>.json` artifact AND\n *                          a `knowledge` row.\n *\n * Returns the EXACT persisted content from `render_ui` (per the seam contract) so\n * a completion oracle sees real bytes. Pure seam wiring: a consumer that runs\n * D1 + KV gets all four tools with no handler code.\n */\nexport function createPresetToolHandlers(opts: PresetToolHandlerOptions): AppToolHandlers {\n  const { db, vault } = opts\n  const newId = opts.newId ?? (() => crypto.randomUUID())\n  const now = opts.now ?? (() => Date.now())\n  const uiPrefix = opts.uiPathPrefix ?? 'ui'\n  const citationPrefix = opts.citationPathPrefix ?? 'citations'\n  const P = PRESET_TABLES.proposals\n  const D = PRESET_TABLES.deadlines\n  const K = PRESET_TABLES.knowledge\n\n  async function persistArtifact(path: string, body: string): Promise<void> {\n    await vault.put(path, body)\n  }\n\n  async function insertKnowledge(workspaceId: string, path: string, kind: string, label: string | null, content: string): Promise<void> {\n    await db\n      .prepare(\n        `INSERT INTO ${K.name} (${K.columns.id}, ${K.columns.workspaceId}, ${K.columns.path}, ${K.columns.kind}, ${K.columns.label}, ${K.columns.content}, ${K.columns.createdAt}) VALUES (?, ?, ?, ?, ?, ?, ?)`,\n      )\n      .bind(newId(), workspaceId, path, kind, label, content, now())\n      .run()\n  }\n\n  return {\n    async submitProposal(args: SubmitProposalArgs, ctx: AppToolContext): Promise<SubmitProposalResult> {\n      const existing = await db\n        .prepare(`SELECT ${P.columns.id} AS id FROM ${P.name} WHERE ${P.columns.workspaceId} = ? AND ${P.columns.title} = ? LIMIT 1`)\n        .bind(ctx.workspaceId, args.title)\n        .first<{ id: string }>()\n      if (existing) return { proposalId: existing.id, deduped: true }\n\n      const id = newId()\n      await db\n        .prepare(\n          `INSERT INTO ${P.name} (${P.columns.id}, ${P.columns.workspaceId}, ${P.columns.threadId}, ${P.columns.type}, ${P.columns.title}, ${P.columns.description}, ${P.columns.status}, ${P.columns.createdBy}, ${P.columns.createdAt}) VALUES (?, ?, ?, ?, ?, ?, 'pending', ?, ?)`,\n        )\n        .bind(id, ctx.workspaceId, ctx.threadId, args.type, args.title, args.description ?? null, ctx.userId, now())\n        .run()\n      return { proposalId: id, deduped: false }\n    },\n\n    async scheduleFollowup(args: ScheduleFollowupArgs, ctx: AppToolContext): Promise<ScheduleFollowupResult> {\n      const existing = await db\n        .prepare(\n          `SELECT ${D.columns.id} AS id, ${D.columns.dueDate} AS dueDate FROM ${D.name} WHERE ${D.columns.workspaceId} = ? AND ${D.columns.title} = ? AND ${D.columns.dueDate} = ? LIMIT 1`,\n        )\n        .bind(ctx.workspaceId, args.title, args.dueDate)\n        .first<{ id: string; dueDate: string }>()\n      if (existing) return { id: existing.id, dueDate: existing.dueDate, deduped: true }\n\n      const id = newId()\n      await db\n        .prepare(\n          `INSERT INTO ${D.name} (${D.columns.id}, ${D.columns.workspaceId}, ${D.columns.threadId}, ${D.columns.title}, ${D.columns.dueDate}, ${D.columns.priority}, ${D.columns.status}, ${D.columns.createdAt}) VALUES (?, ?, ?, ?, ?, ?, 'scheduled', ?)`,\n        )\n        .bind(id, ctx.workspaceId, ctx.threadId, args.title, args.dueDate, args.priority ?? null, now())\n        .run()\n      return { id, dueDate: args.dueDate, deduped: false }\n    },\n\n    async renderUi(args: RenderUiArgs, ctx: AppToolContext): Promise<RenderUiResult> {\n      const content = JSON.stringify(args.schema)\n      const path = `${uiPrefix}/${ctx.threadId ?? 'global'}/${slug(args.title)}.json`\n      await persistArtifact(path, content)\n      await insertKnowledge(ctx.workspaceId, path, 'ui', args.title, content)\n      return { path, content }\n    },\n\n    async addCitation(args: AddCitationArgs, ctx: AppToolContext): Promise<AddCitationResult> {\n      const citationId = newId()\n      const path = `${citationPrefix}/${slug(args.label ?? args.path)}-${citationId.slice(0, 8)}.json`\n      const body = JSON.stringify({ sourcePath: args.path, quote: args.quote, label: args.label ?? null })\n      await persistArtifact(path, body)\n      await insertKnowledge(ctx.workspaceId, path, 'citation', args.label ?? null, body)\n      return { citationId, path }\n    },\n  }\n}\n\n// ---------------------------------------------------------------------------\n// D1-backed KnowledgeStateAccessor\n// ---------------------------------------------------------------------------\n\n/** Define options for accessing preset knowledge scoped to a specific workspace and configuration */\nexport interface PresetKnowledgeAccessorOptions {\n  db: D1Like\n  /** The active workspace — every `count` is scoped to it. */\n  workspaceId: string\n  /** Workspace config the `satisfiedBy: { config }` rules read. A resolved\n   *  object (dot-path lookup), or a function the accessor calls per path. */\n  config: Record<string, unknown> | ((path: string) => unknown)\n  /** The default workspace fk column a `count` rule scopes on when its rule\n   *  omits `where`. Default `'workspace_id'` (the preset schema convention). */\n  defaultWhereColumn?: string\n}\n\nfunction readDotPath(obj: Record<string, unknown>, path: string): unknown {\n  let cur: unknown = obj\n  for (const part of path.split('.')) {\n    if (cur == null || typeof cur !== 'object') return undefined\n    cur = (cur as Record<string, unknown>)[part]\n  }\n  return cur\n}\n\n/**\n * The {@link KnowledgeStateAccessor} over the preset D1 schema — the seam that\n * lets the declarative `satisfiedBy` rules resolve with ZERO consumer code:\n *  - `config(path)` reads the supplied workspace config by dot-path.\n *  - `count({ table, where, statusIn })` runs `SELECT count(*)` scoped to the\n *    active workspace (the rule's `where` column, default `workspace_id`),\n *    optionally filtered to `statusIn` via a parameterized `IN (...)`.\n *\n * Identifiers (table/column) are validated against a safe pattern before\n * interpolation — they originate from the product's own config, never model\n * input, but we fail loud rather than build a malformed/injectable query.\n */\nexport function createD1KnowledgeStateAccessor(opts: PresetKnowledgeAccessorOptions): KnowledgeStateAccessor {\n  const { db, workspaceId } = opts\n  const defaultWhere = opts.defaultWhereColumn ?? 'workspace_id'\n  const configFn = typeof opts.config === 'function' ? opts.config : (path: string) => readDotPath(opts.config as Record<string, unknown>, path)\n\n  const isIdentifier = (s: string) => /^[A-Za-z_][A-Za-z0-9_]*$/.test(s)\n\n  return {\n    config: configFn,\n    async count(query) {\n      if (!isIdentifier(query.table)) throw new Error(`unsafe table identifier: ${query.table}`)\n      const whereCol = query.where ?? defaultWhere\n      if (!isIdentifier(whereCol)) throw new Error(`unsafe where identifier: ${whereCol}`)\n\n      let sql = `SELECT count(*) AS n FROM ${query.table} WHERE ${whereCol} = ?`\n      const binds: unknown[] = [workspaceId]\n      if (query.statusIn && query.statusIn.length > 0) {\n        sql += ` AND status IN (${query.statusIn.map(() => '?').join(', ')})`\n        binds.push(...query.statusIn)\n      }\n      const row = await db.prepare(sql).bind(...binds).first<{ n: number }>()\n      return row?.n ?? 0\n    },\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Crypto + per-workspace key wiring\n// ---------------------------------------------------------------------------\n\n/** Build the {@link KeyCrypto} the billing key store uses — AES-256-GCM field\n *  crypto bound to the product's 64-char-hex `ENCRYPTION_KEY` (or a resolver).\n *  This is the concrete impl behind the `../billing` `KeyCrypto` seam. */\nexport function createPresetFieldCrypto(key: string | (() => string)): KeyCrypto {\n  return createFieldCrypto(key)\n}\n\n/**\n * The {@link WorkspaceKeyStore} over the preset `workspace_keys` table — the\n * persistence seam the per-workspace key manager needs. \"Active\" = a row with a\n * null `revoked_at`. Pure D1 wiring; no key minting (that's the provisioner).\n */\nexport function createPresetWorkspaceKeyStore(db: D1Like): WorkspaceKeyStore {\n  const W = PRESET_TABLES.workspaceKeys\n  return {\n    async getActive(workspaceId: string): Promise<WorkspaceKeyRecord | null> {\n      const row = await db\n        .prepare(\n          `SELECT ${W.columns.id} AS id, ${W.columns.keyId} AS keyId, ${W.columns.keyEncrypted} AS keyEncrypted, ${W.columns.budgetUsd} AS budgetUsd, ${W.columns.expiresAt} AS expiresAt FROM ${W.name} WHERE ${W.columns.workspaceId} = ? AND ${W.columns.revokedAt} IS NULL ORDER BY ${W.columns.createdAt} DESC LIMIT 1`,\n        )\n        .bind(workspaceId)\n        .first<{ id: string; keyId: string; keyEncrypted: string; budgetUsd: number; expiresAt: number | null }>()\n      if (!row) return null\n      return {\n        id: row.id,\n        keyId: row.keyId,\n        keyEncrypted: row.keyEncrypted,\n        budgetUsd: row.budgetUsd,\n        expiresAt: row.expiresAt == null ? null : new Date(row.expiresAt),\n      }\n    },\n    async listActive(workspaceId: string): Promise<Array<{ id: string; keyId: string }>> {\n      const res = await db\n        .prepare(`SELECT ${W.columns.id} AS id, ${W.columns.keyId} AS keyId FROM ${W.name} WHERE ${W.columns.workspaceId} = ? AND ${W.columns.revokedAt} IS NULL`)\n        .bind(workspaceId)\n        .all<{ id: string; keyId: string }>()\n      return res.results\n    },\n    async insert(record): Promise<void> {\n      await db\n        .prepare(\n          `INSERT INTO ${W.name} (${W.columns.id}, ${W.columns.workspaceId}, ${W.columns.keyId}, ${W.columns.keyEncrypted}, ${W.columns.budgetUsd}, ${W.columns.expiresAt}, ${W.columns.revokedAt}, ${W.columns.createdAt}) VALUES (?, ?, ?, ?, ?, ?, NULL, ?)`,\n        )\n        .bind(crypto.randomUUID(), record.workspaceId, record.keyId, record.keyEncrypted, record.budgetUsd, record.expiresAt.getTime(), Date.now())\n        .run()\n    },\n    async markRevoked(id: string, now: Date): Promise<void> {\n      await db\n        .prepare(`UPDATE ${W.name} SET ${W.columns.revokedAt} = ? WHERE ${W.columns.id} = ?`)\n        .bind(now.getTime(), id)\n        .run()\n    },\n  }\n}\n\n/** Define preset billing options including database, provisioner, encryption key, budget, and optional settings */\nexport interface PresetBillingOptions {\n  db: D1Like\n  /** The key provisioner (`@tangle-network/tcloud`'s client satisfies it structurally). */\n  provisioner: KeyProvisioner\n  /** Field-crypto key (64-char hex) or resolver — encrypts the minted key at rest. */\n  encryptionKey: string | (() => string)\n  /** Default monthly USD allowance when a call doesn't specify one. */\n  defaultBudgetUsd: number\n  /** Injectable clock. */\n  now?: () => Date\n  /** tcloud product the key is scoped to. Default `'router'`. */\n  product?: string\n}\n\n/**\n * Stand up the per-workspace budget-capped {@link WorkspaceKeyManager} on the\n * house stack: the preset `workspace_keys` D1 store + AES-GCM field crypto +\n * the consumer's tcloud provisioner. The mint/rotate/rollover/usage LOGIC lives\n * in `../billing`; this only binds it to the preset table + crypto.\n */\nexport function createPresetWorkspaceKeyManager(opts: PresetBillingOptions): WorkspaceKeyManager {\n  return createWorkspaceKeyManager({\n    provisioner: opts.provisioner,\n    store: createPresetWorkspaceKeyStore(opts.db),\n    crypto: createPresetFieldCrypto(opts.encryptionKey),\n    defaultBudgetUsd: opts.defaultBudgetUsd,\n    now: opts.now,\n    product: opts.product,\n  })\n}\n"],"mappings":";;;;;;;;AAuCA,eAAsB,iCAKpB,SACA,OACqE;AACrE,MAAI;AACF,WAAO;AAAA,MACL,UAAU,MAAM,QAAQ,OAAO,KAAK;AAAA,MACpC,SAAS;AAAA,IACX;AAAA,EACF,SAAS,aAAa;AACpB,QAAI;AACF,YAAM,WAAW,MAAM,QAAQ,IAAI,MAAM,EAAE;AAC3C,YAAM,SAAS,MAAM,SAAS,OAAO;AACrC,aAAO,EAAE,UAAU,SAAS,OAAO,OAAO;AAAA,IAC5C,QAAQ;AACN,YAAM;AAAA,IACR;AAAA,EACF;AACF;;;AC7DA,IAAM,cAAc;AAQpB,SAAS,iBAAiB,OAAe,OAAqB;AAC5D,MAAI,MAAM,WAAW,KAAK,SAAS,KAAK,KAAK,GAAG;AAC9C,UAAM,IAAI,MAAM,GAAG,KAAK,kCAAkC;AAAA,EAC5D;AACF;AAQO,SAAS,4BACd,OACQ;AACR,MAAI,MAAM,WAAW,GAAG;AACtB,UAAM,IAAI,MAAM,iDAAiD;AAAA,EACnE;AAEA,QAAM,gBAAgB,MAAM,IAAI,CAAC,EAAE,SAAS,QAAQ,MAAM;AACxD,qBAAiB,SAAS,2BAA2B;AACrD,QAAI,CAAC,QAAQ,WAAW,GAAG,KAAK,KAAK,KAAK,OAAO,GAAG;AAClD,YAAM,IAAI,MAAM,wEAAwE;AAAA,IAC1F;AAEA,UAAM,UAAU,OAAO,QAAQ,OAAO;AACtC,QAAI,QAAQ,WAAW,GAAG;AACxB,YAAM,IAAI,MAAM,0BAA0B,OAAO,mCAAmC;AAAA,IACtF;AAEA,UAAM,kBAAkB,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM;AACrD,UAAI,CAAC,YAAY,KAAK,IAAI,GAAG;AAC3B,cAAM,IAAI,MAAM,6BAA6B,IAAI,EAAE;AAAA,MACrD;AACA,uBAAiB,OAAO,qBAAqB,IAAI,EAAE;AACnD,aAAO,KAAK,IAAI,KAAK,KAAK;AAAA,IAC5B,CAAC;AAED,WAAO,CAAC,SAAS,GAAG,eAAe,EAAE,KAAK,IAAI;AAAA,EAChD,CAAC;AAED,SAAO,GAAG,cAAc,KAAK,MAAM,CAAC;AAAA;AACtC;;;ACuDO,IAAM,gBAAgB;AAAA,EAC3B,WAAW;AAAA,IACT,MAAM;AAAA,IACN,SAAS;AAAA,MACP,IAAI;AAAA,MACJ,aAAa;AAAA,MACb,UAAU;AAAA,MACV,MAAM;AAAA,MACN,OAAO;AAAA,MACP,aAAa;AAAA,MACb,QAAQ;AAAA,MACR,WAAW;AAAA,MACX,WAAW;AAAA,IACb;AAAA,EACF;AAAA,EACA,WAAW;AAAA,IACT,MAAM;AAAA,IACN,SAAS;AAAA,MACP,IAAI;AAAA,MACJ,aAAa;AAAA,MACb,MAAM;AAAA,MACN,MAAM;AAAA,MACN,OAAO;AAAA,MACP,SAAS;AAAA,MACT,WAAW;AAAA,IACb;AAAA,EACF;AAAA,EACA,WAAW;AAAA,IACT,MAAM;AAAA,IACN,SAAS;AAAA,MACP,IAAI;AAAA,MACJ,aAAa;AAAA,MACb,UAAU;AAAA,MACV,OAAO;AAAA,MACP,SAAS;AAAA,MACT,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,WAAW;AAAA,IACb;AAAA,EACF;AAAA,EACA,eAAe;AAAA,IACb,MAAM;AAAA,IACN,SAAS;AAAA,MACP,IAAI;AAAA,MACJ,aAAa;AAAA,MACb,OAAO;AAAA,MACP,cAAc;AAAA,MACd,WAAW;AAAA,MACX,WAAW;AAAA,MACX,WAAW;AAAA,MACX,WAAW;AAAA,IACb;AAAA,EACF;AACF;AAQO,IAAM,uBAA0C;AAAA,EACrD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAiCO,SAAS,0BAA0B,GAA0B;AAClE,QAAM,EAAE,aAAa,MAAM,SAAS,KAAK,IAAI;AAC7C,QAAM,IAAI;AACV,SAAO;AAAA,IACL,WAAW,YAAY,EAAE,UAAU,MAAM;AAAA,MACvC,IAAI,KAAK,EAAE,UAAU,QAAQ,EAAE,EAAE,WAAW;AAAA,MAC5C,aAAa,KAAK,EAAE,UAAU,QAAQ,WAAW,EAAE,QAAQ;AAAA,MAC3D,UAAU,KAAK,EAAE,UAAU,QAAQ,QAAQ;AAAA,MAC3C,MAAM,KAAK,EAAE,UAAU,QAAQ,IAAI,EAAE,QAAQ;AAAA,MAC7C,OAAO,KAAK,EAAE,UAAU,QAAQ,KAAK,EAAE,QAAQ;AAAA,MAC/C,aAAa,KAAK,EAAE,UAAU,QAAQ,WAAW;AAAA,MACjD,QAAQ,KAAK,EAAE,UAAU,QAAQ,MAAM,EAAE,QAAQ,EAAE,QAAQ,SAAS;AAAA,MACpE,WAAW,KAAK,EAAE,UAAU,QAAQ,SAAS;AAAA,MAC7C,WAAW,QAAQ,EAAE,UAAU,QAAQ,SAAS,EAAE,QAAQ;AAAA,IAC5D,CAAC;AAAA,IACD,WAAW,YAAY,EAAE,UAAU,MAAM;AAAA,MACvC,IAAI,KAAK,EAAE,UAAU,QAAQ,EAAE,EAAE,WAAW;AAAA,MAC5C,aAAa,KAAK,EAAE,UAAU,QAAQ,WAAW,EAAE,QAAQ;AAAA,MAC3D,MAAM,KAAK,EAAE,UAAU,QAAQ,IAAI,EAAE,QAAQ;AAAA,MAC7C,MAAM,KAAK,EAAE,UAAU,QAAQ,IAAI,EAAE,QAAQ;AAAA,MAC7C,OAAO,KAAK,EAAE,UAAU,QAAQ,KAAK;AAAA,MACrC,SAAS,KAAK,EAAE,UAAU,QAAQ,OAAO;AAAA,MACzC,WAAW,QAAQ,EAAE,UAAU,QAAQ,SAAS,EAAE,QAAQ;AAAA,IAC5D,CAAC;AAAA,IACD,WAAW,YAAY,EAAE,UAAU,MAAM;AAAA,MACvC,IAAI,KAAK,EAAE,UAAU,QAAQ,EAAE,EAAE,WAAW;AAAA,MAC5C,aAAa,KAAK,EAAE,UAAU,QAAQ,WAAW,EAAE,QAAQ;AAAA,MAC3D,UAAU,KAAK,EAAE,UAAU,QAAQ,QAAQ;AAAA,MAC3C,OAAO,KAAK,EAAE,UAAU,QAAQ,KAAK,EAAE,QAAQ;AAAA,MAC/C,SAAS,KAAK,EAAE,UAAU,QAAQ,OAAO,EAAE,QAAQ;AAAA,MACnD,UAAU,KAAK,EAAE,UAAU,QAAQ,QAAQ;AAAA,MAC3C,QAAQ,KAAK,EAAE,UAAU,QAAQ,MAAM,EAAE,QAAQ,EAAE,QAAQ,WAAW;AAAA,MACtE,WAAW,QAAQ,EAAE,UAAU,QAAQ,SAAS,EAAE,QAAQ;AAAA,IAC5D,CAAC;AAAA,IACD,eAAe,YAAY,EAAE,cAAc,MAAM;AAAA,MAC/C,IAAI,KAAK,EAAE,cAAc,QAAQ,EAAE,EAAE,WAAW;AAAA,MAChD,aAAa,KAAK,EAAE,cAAc,QAAQ,WAAW,EAAE,QAAQ;AAAA,MAC/D,OAAO,KAAK,EAAE,cAAc,QAAQ,KAAK,EAAE,QAAQ;AAAA,MACnD,cAAc,KAAK,EAAE,cAAc,QAAQ,YAAY,EAAE,QAAQ;AAAA,MACjE,WAAW,KAAK,EAAE,cAAc,QAAQ,SAAS,EAAE,QAAQ;AAAA,MAC3D,WAAW,QAAQ,EAAE,cAAc,QAAQ,SAAS,EAAE,QAAQ;AAAA,MAC9D,WAAW,QAAQ,EAAE,cAAc,QAAQ,SAAS;AAAA,MACpD,WAAW,QAAQ,EAAE,cAAc,QAAQ,SAAS,EAAE,QAAQ;AAAA,IAChE,CAAC;AAAA,EACH;AACF;AA0BA,SAAS,KAAK,OAAuB;AACnC,SAAO,MACJ,YAAY,EACZ,QAAQ,eAAe,GAAG,EAC1B,QAAQ,YAAY,EAAE,EACtB,MAAM,GAAG,EAAE,KAAK;AACrB;AAgBO,SAAS,yBAAyB,MAAiD;AACxF,QAAM,EAAE,IAAI,MAAM,IAAI;AACtB,QAAM,QAAQ,KAAK,UAAU,MAAM,OAAO,WAAW;AACrD,QAAM,MAAM,KAAK,QAAQ,MAAM,KAAK,IAAI;AACxC,QAAM,WAAW,KAAK,gBAAgB;AACtC,QAAM,iBAAiB,KAAK,sBAAsB;AAClD,QAAM,IAAI,cAAc;AACxB,QAAM,IAAI,cAAc;AACxB,QAAM,IAAI,cAAc;AAExB,iBAAe,gBAAgB,MAAc,MAA6B;AACxE,UAAM,MAAM,IAAI,MAAM,IAAI;AAAA,EAC5B;AAEA,iBAAe,gBAAgB,aAAqB,MAAc,MAAc,OAAsB,SAAgC;AACpI,UAAM,GACH;AAAA,MACC,eAAe,EAAE,IAAI,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,WAAW,KAAK,EAAE,QAAQ,IAAI,KAAK,EAAE,QAAQ,IAAI,KAAK,EAAE,QAAQ,KAAK,KAAK,EAAE,QAAQ,OAAO,KAAK,EAAE,QAAQ,SAAS;AAAA,IAC1K,EACC,KAAK,MAAM,GAAG,aAAa,MAAM,MAAM,OAAO,SAAS,IAAI,CAAC,EAC5D,IAAI;AAAA,EACT;AAEA,SAAO;AAAA,IACL,MAAM,eAAe,MAA0B,KAAoD;AACjG,YAAM,WAAW,MAAM,GACpB,QAAQ,UAAU,EAAE,QAAQ,EAAE,eAAe,EAAE,IAAI,UAAU,EAAE,QAAQ,WAAW,YAAY,EAAE,QAAQ,KAAK,cAAc,EAC3H,KAAK,IAAI,aAAa,KAAK,KAAK,EAChC,MAAsB;AACzB,UAAI,SAAU,QAAO,EAAE,YAAY,SAAS,IAAI,SAAS,KAAK;AAE9D,YAAM,KAAK,MAAM;AACjB,YAAM,GACH;AAAA,QACC,eAAe,EAAE,IAAI,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,WAAW,KAAK,EAAE,QAAQ,QAAQ,KAAK,EAAE,QAAQ,IAAI,KAAK,EAAE,QAAQ,KAAK,KAAK,EAAE,QAAQ,WAAW,KAAK,EAAE,QAAQ,MAAM,KAAK,EAAE,QAAQ,SAAS,KAAK,EAAE,QAAQ,SAAS;AAAA,MAC/N,EACC,KAAK,IAAI,IAAI,aAAa,IAAI,UAAU,KAAK,MAAM,KAAK,OAAO,KAAK,eAAe,MAAM,IAAI,QAAQ,IAAI,CAAC,EAC1G,IAAI;AACP,aAAO,EAAE,YAAY,IAAI,SAAS,MAAM;AAAA,IAC1C;AAAA,IAEA,MAAM,iBAAiB,MAA4B,KAAsD;AACvG,YAAM,WAAW,MAAM,GACpB;AAAA,QACC,UAAU,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,OAAO,oBAAoB,EAAE,IAAI,UAAU,EAAE,QAAQ,WAAW,YAAY,EAAE,QAAQ,KAAK,YAAY,EAAE,QAAQ,OAAO;AAAA,MACrK,EACC,KAAK,IAAI,aAAa,KAAK,OAAO,KAAK,OAAO,EAC9C,MAAuC;AAC1C,UAAI,SAAU,QAAO,EAAE,IAAI,SAAS,IAAI,SAAS,SAAS,SAAS,SAAS,KAAK;AAEjF,YAAM,KAAK,MAAM;AACjB,YAAM,GACH;AAAA,QACC,eAAe,EAAE,IAAI,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,WAAW,KAAK,EAAE,QAAQ,QAAQ,KAAK,EAAE,QAAQ,KAAK,KAAK,EAAE,QAAQ,OAAO,KAAK,EAAE,QAAQ,QAAQ,KAAK,EAAE,QAAQ,MAAM,KAAK,EAAE,QAAQ,SAAS;AAAA,MACvM,EACC,KAAK,IAAI,IAAI,aAAa,IAAI,UAAU,KAAK,OAAO,KAAK,SAAS,KAAK,YAAY,MAAM,IAAI,CAAC,EAC9F,IAAI;AACP,aAAO,EAAE,IAAI,SAAS,KAAK,SAAS,SAAS,MAAM;AAAA,IACrD;AAAA,IAEA,MAAM,SAAS,MAAoB,KAA8C;AAC/E,YAAM,UAAU,KAAK,UAAU,KAAK,MAAM;AAC1C,YAAM,OAAO,GAAG,QAAQ,IAAI,IAAI,YAAY,QAAQ,IAAI,KAAK,KAAK,KAAK,CAAC;AACxE,YAAM,gBAAgB,MAAM,OAAO;AACnC,YAAM,gBAAgB,IAAI,aAAa,MAAM,MAAM,KAAK,OAAO,OAAO;AACtE,aAAO,EAAE,MAAM,QAAQ;AAAA,IACzB;AAAA,IAEA,MAAM,YAAY,MAAuB,KAAiD;AACxF,YAAM,aAAa,MAAM;AACzB,YAAM,OAAO,GAAG,cAAc,IAAI,KAAK,KAAK,SAAS,KAAK,IAAI,CAAC,IAAI,WAAW,MAAM,GAAG,CAAC,CAAC;AACzF,YAAM,OAAO,KAAK,UAAU,EAAE,YAAY,KAAK,MAAM,OAAO,KAAK,OAAO,OAAO,KAAK,SAAS,KAAK,CAAC;AACnG,YAAM,gBAAgB,MAAM,IAAI;AAChC,YAAM,gBAAgB,IAAI,aAAa,MAAM,YAAY,KAAK,SAAS,MAAM,IAAI;AACjF,aAAO,EAAE,YAAY,KAAK;AAAA,IAC5B;AAAA,EACF;AACF;AAmBA,SAAS,YAAY,KAA8B,MAAuB;AACxE,MAAI,MAAe;AACnB,aAAW,QAAQ,KAAK,MAAM,GAAG,GAAG;AAClC,QAAI,OAAO,QAAQ,OAAO,QAAQ,SAAU,QAAO;AACnD,UAAO,IAAgC,IAAI;AAAA,EAC7C;AACA,SAAO;AACT;AAcO,SAAS,+BAA+B,MAA8D;AAC3G,QAAM,EAAE,IAAI,YAAY,IAAI;AAC5B,QAAM,eAAe,KAAK,sBAAsB;AAChD,QAAM,WAAW,OAAO,KAAK,WAAW,aAAa,KAAK,SAAS,CAAC,SAAiB,YAAY,KAAK,QAAmC,IAAI;AAE7I,QAAM,eAAe,CAAC,MAAc,2BAA2B,KAAK,CAAC;AAErE,SAAO;AAAA,IACL,QAAQ;AAAA,IACR,MAAM,MAAM,OAAO;AACjB,UAAI,CAAC,aAAa,MAAM,KAAK,EAAG,OAAM,IAAI,MAAM,4BAA4B,MAAM,KAAK,EAAE;AACzF,YAAM,WAAW,MAAM,SAAS;AAChC,UAAI,CAAC,aAAa,QAAQ,EAAG,OAAM,IAAI,MAAM,4BAA4B,QAAQ,EAAE;AAEnF,UAAI,MAAM,6BAA6B,MAAM,KAAK,UAAU,QAAQ;AACpE,YAAM,QAAmB,CAAC,WAAW;AACrC,UAAI,MAAM,YAAY,MAAM,SAAS,SAAS,GAAG;AAC/C,eAAO,mBAAmB,MAAM,SAAS,IAAI,MAAM,GAAG,EAAE,KAAK,IAAI,CAAC;AAClE,cAAM,KAAK,GAAG,MAAM,QAAQ;AAAA,MAC9B;AACA,YAAM,MAAM,MAAM,GAAG,QAAQ,GAAG,EAAE,KAAK,GAAG,KAAK,EAAE,MAAqB;AACtE,aAAO,KAAK,KAAK;AAAA,IACnB;AAAA,EACF;AACF;AASO,SAAS,wBAAwB,KAAyC;AAC/E,SAAO,kBAAkB,GAAG;AAC9B;AAOO,SAAS,8BAA8B,IAA+B;AAC3E,QAAM,IAAI,cAAc;AACxB,SAAO;AAAA,IACL,MAAM,UAAU,aAAyD;AACvE,YAAM,MAAM,MAAM,GACf;AAAA,QACC,UAAU,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,KAAK,cAAc,EAAE,QAAQ,YAAY,qBAAqB,EAAE,QAAQ,SAAS,kBAAkB,EAAE,QAAQ,SAAS,sBAAsB,EAAE,IAAI,UAAU,EAAE,QAAQ,WAAW,YAAY,EAAE,QAAQ,SAAS,qBAAqB,EAAE,QAAQ,SAAS;AAAA,MACrS,EACC,KAAK,WAAW,EAChB,MAAwG;AAC3G,UAAI,CAAC,IAAK,QAAO;AACjB,aAAO;AAAA,QACL,IAAI,IAAI;AAAA,QACR,OAAO,IAAI;AAAA,QACX,cAAc,IAAI;AAAA,QAClB,WAAW,IAAI;AAAA,QACf,WAAW,IAAI,aAAa,OAAO,OAAO,IAAI,KAAK,IAAI,SAAS;AAAA,MAClE;AAAA,IACF;AAAA,IACA,MAAM,WAAW,aAAoE;AACnF,YAAM,MAAM,MAAM,GACf,QAAQ,UAAU,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,KAAK,kBAAkB,EAAE,IAAI,UAAU,EAAE,QAAQ,WAAW,YAAY,EAAE,QAAQ,SAAS,UAAU,EACxJ,KAAK,WAAW,EAChB,IAAmC;AACtC,aAAO,IAAI;AAAA,IACb;AAAA,IACA,MAAM,OAAO,QAAuB;AAClC,YAAM,GACH;AAAA,QACC,eAAe,EAAE,IAAI,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,WAAW,KAAK,EAAE,QAAQ,KAAK,KAAK,EAAE,QAAQ,YAAY,KAAK,EAAE,QAAQ,SAAS,KAAK,EAAE,QAAQ,SAAS,KAAK,EAAE,QAAQ,SAAS,KAAK,EAAE,QAAQ,SAAS;AAAA,MACjN,EACC,KAAK,OAAO,WAAW,GAAG,OAAO,aAAa,OAAO,OAAO,OAAO,cAAc,OAAO,WAAW,OAAO,UAAU,QAAQ,GAAG,KAAK,IAAI,CAAC,EACzI,IAAI;AAAA,IACT;AAAA,IACA,MAAM,YAAY,IAAY,KAA0B;AACtD,YAAM,GACH,QAAQ,UAAU,EAAE,IAAI,QAAQ,EAAE,QAAQ,SAAS,cAAc,EAAE,QAAQ,EAAE,MAAM,EACnF,KAAK,IAAI,QAAQ,GAAG,EAAE,EACtB,IAAI;AAAA,IACT;AAAA,EACF;AACF;AAuBO,SAAS,gCAAgC,MAAiD;AAC/F,SAAO,0BAA0B;AAAA,IAC/B,aAAa,KAAK;AAAA,IAClB,OAAO,8BAA8B,KAAK,EAAE;AAAA,IAC5C,QAAQ,wBAAwB,KAAK,aAAa;AAAA,IAClD,kBAAkB,KAAK;AAAA,IACvB,KAAK,KAAK;AAAA,IACV,SAAS,KAAK;AAAA,EAChB,CAAC;AACH;","names":[]}

package/dist/sandbox/index.d.ts

@@ -942,11 +942,9 @@ interface SandboxRuntimeConfig {
     provider?: ProviderResolutionConfig;
     /**
      * Product-declared outbound network policy. Applied when a sandbox is
-     * created and reconciled before a reused or resumed sandbox is returned.
-     * This keeps product tools and other required endpoints reachable without
-     * product-local lifecycle calls. Adopting or changing the policy on an
-     * existing sandbox restarts its egress proxy once; matching explicit
-     * policies are left untouched.
+     * created. A reused or resumed sandbox is returned only when its explicit
+     * policy already matches; existing mismatches are rejected without updating
+     * or deleting the sandbox.
      */
     egressPolicy?: EgressPolicy;
     storage?: (ctx: SandboxBuildContext) => StorageConfig | undefined;
@@ -1028,10 +1026,25 @@ declare function splitDeferredProfileFiles(profile: AgentProfile): {
     leanProfile: AgentProfile;
     deferredFiles: AgentProfileFileMount[];
 };
-type ExistingBoxStage = 'reused' | 'resumed';
+type SandboxExistingBoxStage = 'reused' | 'resumed';
+type SandboxEgressPolicySource = Awaited<ReturnType<SandboxInstance['egress']['get']>>['source'];
+/**
+ * Thrown when an existing sandbox cannot be proven to have the requested
+ * outbound network policy. The sandbox is preserved and its policy is not
+ * changed. The caller explicitly decides whether to preserve, migrate, or
+ * replace the sandbox.
+ */
+declare class SandboxEgressPolicyMismatchError extends Error {
+    readonly stage: SandboxExistingBoxStage;
+    readonly boxName: string;
+    readonly currentPolicy: EgressPolicy;
+    readonly currentSource: SandboxEgressPolicySource;
+    readonly desiredPolicy: EgressPolicy;
+    constructor(stage: SandboxExistingBoxStage, boxName: string, currentPolicy: EgressPolicy, currentSource: SandboxEgressPolicySource, desiredPolicy: EgressPolicy);
+}
 /** Represent an error thrown when sandbox runtime authentication refresh fails for a specific stage and name */
 declare class SandboxRuntimeAuthRefreshError extends Error {
-    constructor(stage: ExistingBoxStage, name: string, detail: string, cause?: unknown);
+    constructor(stage: SandboxExistingBoxStage, name: string, detail: string, cause?: unknown);
 }
 /** Which step of the state-preserving stop→resume recovery failed. `stop` with a
  *  driver-unsupported cause means the platform cannot restart this box (the
@@ -1046,9 +1059,9 @@ type SandboxRecoveryPhase = 'stop' | 'resume' | 'probe';
  */
 declare class SandboxRecoveryFailedError extends Error {
     readonly boxKey: string;
-    readonly stage: ExistingBoxStage;
+    readonly stage: SandboxExistingBoxStage;
     readonly phase: SandboxRecoveryPhase;
-    constructor(stage: ExistingBoxStage, boxKey: string, phase: SandboxRecoveryPhase, detail: string, cause?: unknown);
+    constructor(stage: SandboxExistingBoxStage, boxKey: string, phase: SandboxRecoveryPhase, detail: string, cause?: unknown);
 }
 /** Define options to control execution timeout, pacing, and retry behavior when writing profile files */
 interface WriteProfileFilesOptions {
@@ -1318,4 +1331,4 @@ declare function isTerminalPromptEvent(event: unknown): boolean;
 /** Resolve the interactive question text from a structured event or return null if none found */
 declare function detectInteractiveQuestion(event: unknown): string | null;
 
-export { type AppToolDescriptor, type AuthenticatedSandboxUser, type BuildAppToolMcpServersOptions, type BuildSandboxToolFileMountsOptions, type D1PrewarmClaimStoreOptions, DEFAULT_PREWARM_CLAIM_TABLE, DEFAULT_SANDBOX_RESOURCES, type DriveSandboxTurnOptions, ENV_TOTAL_MAX_BYTES, ENV_VALUE_MAX_BYTES, type EnsureWorkspaceSandboxOptions, type LivenessProbeConfig, type MemberSyncSeam, type ModelSelection, type ModelSelectionError, type ModelSelectionFailure, type ModelSelectionSource, type Outcome, PREWARM_CLAIM_TABLE_DDL, PROVISION_PAYLOAD_MAX_BYTES, type PeekWorkspaceSandboxOutcome, type PrewarmClaimD1Like, type PrewarmClaimStore, type PrewarmDecision, type PrewarmEvent, type PrewarmOutcome, type PrewarmResult, type ProfileComposeOptions, type PromptInputPart, type ProviderResolutionConfig, type ProvisionPayloadSections, type ProvisionProfileSection, type ResolveSandboxClientCredentialsOptions, type ResolvedModel, type SandboxApiCredentials, type SandboxBuildContext, type SandboxClientCredentials, type SandboxCredentialEnvironment, type SandboxExecChannel, type SandboxExecOptions, type SandboxFileBytesOutcome, type SandboxFileSizeOutcome, SandboxModelResolutionError, type SandboxPermissionLevel, type SandboxPrewarmScope, type SandboxPrewarmer, type SandboxPrewarmerOptions, type SandboxReadiness, SandboxRecoveryFailedError, type SandboxRecoveryPhase, type SandboxResourceConfig, type SandboxRestoreSpec, SandboxRuntimeAuthRefreshError, type SandboxRuntimeConfig, type SandboxRuntimeConnection, type SandboxScope, type SandboxStepTransition, type SandboxTerminalTokenOptions, type SandboxTerminalTokenResult, type SandboxTerminalTokenSubject, type SandboxTerminalWsMatch, type SandboxToolPathOptions, type SandboxToolSpec, type ScopedTokenResult, type SecretStore, type StoppedSandboxResumeFailure, type StoppedSandboxResumeRecovery, type StreamSandboxPromptOptions, type TerminalProxyIdentity, type TerminalUpgradeResponseLike, type WorkspaceSandboxConnectionArgs, type WorkspaceSandboxConnectionHandlerOptions, type WorkspaceSandboxEnsureContext, type WorkspaceSandboxInstanceLike, type WorkspaceSandboxManager, type WorkspaceSandboxManagerOptions, type WorkspaceSandboxRuntimeProxyArgs, type WorkspaceSandboxRuntimeProxyHandlerOptions, type WorkspaceSandboxTerminalUpgradeHandlerOptions, type WriteProfileFilesOptions, assertEnvWithinLimits, assertProvisionPayloadWithinCap, attachReasoningEffort, bearerSubprotocolToken, bearerToken, buildAppToolMcpServers, buildSandboxRuntimeProxyHeaders, buildSandboxToolFileMounts, buildSandboxToolPathSetupScript, classifySeveredStream, collectSandboxPromptText, createD1PrewarmClaimStore, createSandboxPrewarmer, createSandboxTerminalToken, createWorkspaceSandboxConnectionHandler, createWorkspaceSandboxManager, createWorkspaceSandboxRuntimeProxyHandler, createWorkspaceSandboxTerminalUpgradeHandler, deferredCorpusHash, deleteSecret, detectInteractiveQuestion, driveSandboxTurn, encodeSandboxRuntimePath, ensureWorkspaceSandbox, flattenHistory, getClient, isSandboxTerminalWsUpgrade, isTerminalPromptEvent, matchSandboxTerminalWsPath, mergeExtraMcp, mergeHistoryIntoParts, mintSandboxScopedToken, mintTerminalProxyToken, peekWorkspaceSandbox, readSandboxBinaryBytes, readSecret, requireTransportableModel, resetClientCache, resolveModel, resolveModelSelection, resolveSandboxClientCredentials, runSandboxPrompt, runSandboxToolPathSetup, sandboxSidecarProxyUrl, sandboxToolBinDir, sandboxToolPath, sandboxToolRootDir, secretStoreFromClient, selectedBearerSubprotocol, shellQuote, splitDeferredProfileFiles, statSandboxFileSize, storeSecret, streamSandboxPrompt, syncSandboxMemberAdd, syncSandboxMemberRemove, syncSandboxMemberRole, terminalTokenFromRequest, terminalUpgradeSubprotocolEcho, verifySandboxTerminalToken, verifyTerminalProxyToken, writeProfileFilesToBox };
+export { type AppToolDescriptor, type AuthenticatedSandboxUser, type BuildAppToolMcpServersOptions, type BuildSandboxToolFileMountsOptions, type D1PrewarmClaimStoreOptions, DEFAULT_PREWARM_CLAIM_TABLE, DEFAULT_SANDBOX_RESOURCES, type DriveSandboxTurnOptions, ENV_TOTAL_MAX_BYTES, ENV_VALUE_MAX_BYTES, type EnsureWorkspaceSandboxOptions, type LivenessProbeConfig, type MemberSyncSeam, type ModelSelection, type ModelSelectionError, type ModelSelectionFailure, type ModelSelectionSource, type Outcome, PREWARM_CLAIM_TABLE_DDL, PROVISION_PAYLOAD_MAX_BYTES, type PeekWorkspaceSandboxOutcome, type PrewarmClaimD1Like, type PrewarmClaimStore, type PrewarmDecision, type PrewarmEvent, type PrewarmOutcome, type PrewarmResult, type ProfileComposeOptions, type PromptInputPart, type ProviderResolutionConfig, type ProvisionPayloadSections, type ProvisionProfileSection, type ResolveSandboxClientCredentialsOptions, type ResolvedModel, type SandboxApiCredentials, type SandboxBuildContext, type SandboxClientCredentials, type SandboxCredentialEnvironment, SandboxEgressPolicyMismatchError, type SandboxEgressPolicySource, type SandboxExecChannel, type SandboxExecOptions, type SandboxExistingBoxStage, type SandboxFileBytesOutcome, type SandboxFileSizeOutcome, SandboxModelResolutionError, type SandboxPermissionLevel, type SandboxPrewarmScope, type SandboxPrewarmer, type SandboxPrewarmerOptions, type SandboxReadiness, SandboxRecoveryFailedError, type SandboxRecoveryPhase, type SandboxResourceConfig, type SandboxRestoreSpec, SandboxRuntimeAuthRefreshError, type SandboxRuntimeConfig, type SandboxRuntimeConnection, type SandboxScope, type SandboxStepTransition, type SandboxTerminalTokenOptions, type SandboxTerminalTokenResult, type SandboxTerminalTokenSubject, type SandboxTerminalWsMatch, type SandboxToolPathOptions, type SandboxToolSpec, type ScopedTokenResult, type SecretStore, type StoppedSandboxResumeFailure, type StoppedSandboxResumeRecovery, type StreamSandboxPromptOptions, type TerminalProxyIdentity, type TerminalUpgradeResponseLike, type WorkspaceSandboxConnectionArgs, type WorkspaceSandboxConnectionHandlerOptions, type WorkspaceSandboxEnsureContext, type WorkspaceSandboxInstanceLike, type WorkspaceSandboxManager, type WorkspaceSandboxManagerOptions, type WorkspaceSandboxRuntimeProxyArgs, type WorkspaceSandboxRuntimeProxyHandlerOptions, type WorkspaceSandboxTerminalUpgradeHandlerOptions, type WriteProfileFilesOptions, assertEnvWithinLimits, assertProvisionPayloadWithinCap, attachReasoningEffort, bearerSubprotocolToken, bearerToken, buildAppToolMcpServers, buildSandboxRuntimeProxyHeaders, buildSandboxToolFileMounts, buildSandboxToolPathSetupScript, classifySeveredStream, collectSandboxPromptText, createD1PrewarmClaimStore, createSandboxPrewarmer, createSandboxTerminalToken, createWorkspaceSandboxConnectionHandler, createWorkspaceSandboxManager, createWorkspaceSandboxRuntimeProxyHandler, createWorkspaceSandboxTerminalUpgradeHandler, deferredCorpusHash, deleteSecret, detectInteractiveQuestion, driveSandboxTurn, encodeSandboxRuntimePath, ensureWorkspaceSandbox, flattenHistory, getClient, isSandboxTerminalWsUpgrade, isTerminalPromptEvent, matchSandboxTerminalWsPath, mergeExtraMcp, mergeHistoryIntoParts, mintSandboxScopedToken, mintTerminalProxyToken, peekWorkspaceSandbox, readSandboxBinaryBytes, readSecret, requireTransportableModel, resetClientCache, resolveModel, resolveModelSelection, resolveSandboxClientCredentials, runSandboxPrompt, runSandboxToolPathSetup, sandboxSidecarProxyUrl, sandboxToolBinDir, sandboxToolPath, sandboxToolRootDir, secretStoreFromClient, selectedBearerSubprotocol, shellQuote, splitDeferredProfileFiles, statSandboxFileSize, storeSecret, streamSandboxPrompt, syncSandboxMemberAdd, syncSandboxMemberRemove, syncSandboxMemberRole, terminalTokenFromRequest, terminalUpgradeSubprotocolEcho, verifySandboxTerminalToken, verifyTerminalProxyToken, writeProfileFilesToBox };

package/dist/sandbox/index.js

@@ -5,6 +5,7 @@ import {
   ENV_VALUE_MAX_BYTES,
   PREWARM_CLAIM_TABLE_DDL,
   PROVISION_PAYLOAD_MAX_BYTES,
+  SandboxEgressPolicyMismatchError,
   SandboxModelResolutionError,
   SandboxRecoveryFailedError,
   SandboxRuntimeAuthRefreshError,
@@ -70,7 +71,7 @@ import {
   verifySandboxTerminalToken,
   verifyTerminalProxyToken,
   writeProfileFilesToBox
-} from "../chunk-HUBACCOP.js";
+} from "../chunk-VGATER6G.js";
 import "../chunk-LWSJK546.js";
 import "../chunk-CQZSAR77.js";
 import "../chunk-ICOHEZK6.js";
@@ -85,6 +86,7 @@ export {
   ENV_VALUE_MAX_BYTES,
   PREWARM_CLAIM_TABLE_DDL,
   PROVISION_PAYLOAD_MAX_BYTES,
+  SandboxEgressPolicyMismatchError,
   SandboxModelResolutionError,
   SandboxRecoveryFailedError,
   SandboxRuntimeAuthRefreshError,

package/dist/sequences/index.js

@@ -13,7 +13,7 @@ import {
 } from "../chunk-BVKQKGRK.js";
 import {
   assertMediaUrl
-} from "../chunk-PTUMBMVH.js";
+} from "../chunk-J25RST7G.js";
 import {
   MCP_PROTOCOL_VERSIONS,
   buildScopedMcpServerEntry,

package/dist/sequences-react/index.d.ts

@@ -710,15 +710,9 @@ interface TimelinePlayheadProps {
 declare function TimelinePlayhead({ frame, zoom }: TimelinePlayheadProps): react.JSX.Element;
 
 /**
- * Lazy boundary around the Tangle knot from `../../brand`.
- *
- * `/brand` re-exports the mark from `@tangle-network/sandbox-ui`, an OPT-IN peer
- * (see brand/index.tsx). Static-importing it would pull the peer into every
- * module that renders the timeline — breaking substrate-free environments (and
- * products that haven't installed the peer) at module-eval time. Code-splitting
- * it (the repo's `lazy.tsx` convention) keeps the peer out of the editor's
- * static graph: the knot streams in only when an empty/phone state actually
- * renders, and its absence degrades to empty space rather than a crash.
+ * Load the canonical Tangle knot only when a sequence surface renders it.
+ * `/brand` imports the optional `@tangle-network/brand` peer, so a failed load
+ * renders a fixed-size spacer instead of crashing the editor.
  */
 interface BrandMarkProps {
     size: number;

package/dist/sequences-react/index.js

@@ -52,7 +52,7 @@ import {
   trimClipCommand,
   trimEndDrag,
   trimStartDrag
-} from "../chunk-4KKXZQPT.js";
+} from "../chunk-MLACJ6DB.js";
 import "../chunk-BVKQKGRK.js";
 
 // src/sequences-react/media/transcription.ts
@@ -187,7 +187,7 @@ function createWhisperTranscriptionProvider(opts) {
 
 // src/sequences-react/lazy.tsx
 import React from "react";
-var SequenceTimelineEditorLazy = React.lazy(() => import("../TimelineEditor-2ECKSU6P.js"));
+var SequenceTimelineEditorLazy = React.lazy(() => import("../TimelineEditor-6PV42FLG.js"));
 export {
   BrandMark,
   COMMAND_HISTORY_LIMIT,

package/dist/web/index.d.ts

@@ -79,6 +79,16 @@ interface SecurityHeaderOptions {
     /** Extra headers to set. */
     extra?: Record<string, string>;
 }
+/** Canonical generic response headers used by {@link addSecurityHeaders}.
+ * Exported so static-asset hosts can apply the same policy without copying
+ * values that silently drift from Worker/API responses. */
+declare const STANDARD_SECURITY_HEADERS: Readonly<{
+    readonly 'Strict-Transport-Security': "max-age=31536000; includeSubDomains; preload";
+    readonly 'X-Content-Type-Options': "nosniff";
+    readonly 'X-Frame-Options': "SAMEORIGIN";
+    readonly 'Referrer-Policy': "same-origin";
+    readonly 'X-XSS-Protection': "1; mode=block";
+}>;
 /** Set standard security headers on a response (HSTS, nosniff, frame-options,
  *  referrer-policy, XSS) + optional product disclaimer/retention. The security
  *  set is generic; the disclaimer/retention are the product's. */
@@ -96,4 +106,4 @@ declare function addSecurityHeaders(response: Response, opts?: SecurityHeaderOpt
  */
 declare function assertMediaUrl(url: string, what?: string): void;
 
-export { type CookieOptions, type JsonObject, type KvLike, type RateLimitResult, type RequestContext, type SecurityHeaderOptions, addSecurityHeaders, assertMediaUrl, checkRateLimit, clearCookieHeader, extractRequestContext, parseJsonObjectBody, readCookieValue, requireString, serializeCookie };
+export { type CookieOptions, type JsonObject, type KvLike, type RateLimitResult, type RequestContext, STANDARD_SECURITY_HEADERS, type SecurityHeaderOptions, addSecurityHeaders, assertMediaUrl, checkRateLimit, clearCookieHeader, extractRequestContext, parseJsonObjectBody, readCookieValue, requireString, serializeCookie };

package/dist/web/index.js

@@ -1,4 +1,5 @@
 import {
+  STANDARD_SECURITY_HEADERS,
   addSecurityHeaders,
   assertMediaUrl,
   checkRateLimit,
@@ -8,8 +9,9 @@ import {
   readCookieValue,
   requireString,
   serializeCookie
-} from "../chunk-PTUMBMVH.js";
+} from "../chunk-J25RST7G.js";
 export {
+  STANDARD_SECURITY_HEADERS,
   addSecurityHeaders,
   assertMediaUrl,
   checkRateLimit,

package/dist/web-react/index.js

@@ -78,7 +78,7 @@ import {
   useSmoothText,
   useThinkingSeconds,
   waterfallLayout
-} from "../chunk-YYV3EZSF.js";
+} from "../chunk-T3TYG3VW.js";
 import "../chunk-FBVLEGEG.js";
 import "../chunk-3E4MW5LR.js";
 import {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tangle-network/agent-app",
-  "version": "0.44.42",
+  "version": "0.44.47",
   "packageManager": "pnpm@10.33.4",
   "description": "Application-shell framework for Tangle agent products: a bounded tool loop, the structured agent→app tool side channel, integration-hub client, per-workspace billing, and crypto — composed over the Tangle agent substrate through typed seams.",
   "keywords": [

package/dist/DesignCanvas-Z362I3R3.js

@@ -1,10 +0,0 @@
-import {
-  DesignCanvas
-} from "./chunk-O63WWYET.js";
-import "./chunk-VTWKH4YU.js";
-import "./chunk-VWOPOLVO.js";
-import "./chunk-PTUMBMVH.js";
-export {
-  DesignCanvas
-};
-//# sourceMappingURL=DesignCanvas-Z362I3R3.js.map

package/dist/DesignCanvasEditor-ZFE2W4OJ.js

@@ -1,13 +0,0 @@
-import {
-  DesignCanvasEditor
-} from "./chunk-Q3FONVAK.js";
-import "./chunk-O63WWYET.js";
-import "./chunk-TZO3SOUL.js";
-import "./chunk-VYECQAGM.js";
-import "./chunk-VTWKH4YU.js";
-import "./chunk-VWOPOLVO.js";
-import "./chunk-PTUMBMVH.js";
-export {
-  DesignCanvasEditor
-};
-//# sourceMappingURL=DesignCanvasEditor-ZFE2W4OJ.js.map