@things-factory/ai-assistant 10.1.27 → 10.1.29

package/dist-server/service/chat-session-participant/mention-invite.js

@@ -0,0 +1,103 @@
+"use strict";
+/*
+ * Mentioning someone tells them (ADR-0071 decision 1, as amended by ADR-0073).
+ *
+ * The machinery existed in the board product only: `@name` in a board chat added a participant and
+ * sent them an invite, and the same `@name` in a twin deliberation added nobody. The person typing
+ * it had every reason to believe they had called a colleague in.
+ *
+ * ── What a mention is now ─────────────────────────────────────────────────────
+ * A conversation in the domain is open: anyone may walk in, with nothing to approve and nobody to
+ * ask (ADR-0073 decision 2). So a mention grants nothing — it points. It seats the named person so
+ * the conversation reaches their list, and it tells them their name came up. Somebody who was never
+ * mentioned can read the same room by opening it.
+ *
+ * Two rules survive the amendment:
+ *   ① only a door that stores **a person's turn** mentions — never the model, a tool, or the
+ *      assistant's own answer. What the assistant writes must not seat people.
+ *   ② whoever is named joins as a member and is told.
+ *
+ * What went: the inviter's own role (there is nothing to hand out), the refusal verdicts, and the
+ * notice shown before sending. A private conversation is the one place a mention cannot seat
+ * someone — there the named person is told and stays outside until an owner opens it.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.extractMentionUserIds = extractMentionUserIds;
+exports.newParticipantUserIds = newParticipantUserIds;
+exports.inviteMentionedUsers = inviteMentionedUsers;
+/** 본문에서 `@user{userId:UUID}` 마커의 userId 를 뽑는다 — 첫 등장 순, 중복 제거. */
+function extractMentionUserIds(text) {
+    if (!text)
+        return [];
+    const re = /\{userId:([^}\s]+)\}/g;
+    const seen = new Set();
+    const out = [];
+    let m;
+    while ((m = re.exec(text)) !== null) {
+        const id = m[1];
+        if (!seen.has(id)) {
+            seen.add(id);
+            out.push(id);
+        }
+    }
+    return out;
+}
+/** 멘션된 사람 중 **아직 참여자가 아니고 자기 자신도 아닌** 새 사람만. */
+function newParticipantUserIds(mentioned, existing, selfUserId) {
+    const have = new Set(existing);
+    if (selfUserId)
+        have.add(selfUserId);
+    const out = [];
+    const seen = new Set();
+    for (const id of mentioned) {
+        if (!id || have.has(id) || seen.has(id))
+            continue;
+        seen.add(id);
+        out.push(id);
+    }
+    return out;
+}
+/**
+ * 멘션된 사람을 참여자로 앉힌다.
+ *
+ * 나갔던 사람(soft delete)은 되살린다 — 다시 부른 것이지 새 사람이 아니다.
+ */
+async function inviteMentionedUsers(input) {
+    const mentioned = extractMentionUserIds(input.content);
+    if (mentioned.length === 0)
+        return { invited: [] };
+    const repo = input.participants;
+    const existing = await repo.find({
+        where: { session: { id: input.sessionId }, domain: { id: input.domainId } },
+        withDeleted: true
+    });
+    const activeIds = existing.filter((row) => !row.deletedAt).map((row) => row.userId).filter(Boolean);
+    const fresh = newParticipantUserIds(mentioned, activeIds, input.inviter?.id);
+    if (fresh.length === 0)
+        return { invited: [] };
+    /*
+     * 비공개 대화에서는 이름을 불러도 앉히지 않는다. 공개 대화에서는 앉히는 일이 아무것도 주지 않지만
+     * (누구나 들어온다), 비공개에서는 그것이 곧 접근을 주는 일이다. 부르는 사람이 아니라 owner 가 열
+     * 일이다 — 이름이 불렸다는 것만 알린다.
+     */
+    if ((input.visibility ?? 'open') !== 'open')
+        return { invited: [], notSeated: fresh };
+    for (const userId of fresh) {
+        const prior = existing.find((row) => row.userId === userId && row.deletedAt);
+        if (prior) {
+            await repo.update(prior.id, { deletedAt: null, role: 'member', updater: input.inviter });
+        }
+        else {
+            await repo.save({
+                domain: { id: input.domainId },
+                session: { id: input.sessionId },
+                user: { id: userId },
+                role: 'member',
+                creator: input.inviter,
+                updater: input.inviter
+            });
+        }
+    }
+    return { invited: fresh };
+}
+//# sourceMappingURL=mention-invite.js.map

package/dist-server/service/chat-session-participant/mention-invite.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mention-invite.js","sourceRoot":"","sources":["../../../server/service/chat-session-participant/mention-invite.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;;AAGH,sDAcC;AAGD,sDAeC;AA0BD,oDAsCC;AAjGD,kEAAkE;AAClE,SAAgB,qBAAqB,CAAC,IAA+B;IACnE,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAA;IACpB,MAAM,EAAE,GAAG,uBAAuB,CAAA;IAClC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,MAAM,GAAG,GAAa,EAAE,CAAA;IACxB,IAAI,CAAyB,CAAA;IAC7B,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACpC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;QACf,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YAClB,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YACZ,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACd,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,gDAAgD;AAChD,SAAgB,qBAAqB,CACnC,SAAgC,EAChC,QAA+B,EAC/B,UAA0B;IAE1B,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAA;IAC9B,IAAI,UAAU;QAAE,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;IACpC,MAAM,GAAG,GAAa,EAAE,CAAA;IACxB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,KAAK,MAAM,EAAE,IAAI,SAAS,EAAE,CAAC;QAC3B,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,SAAQ;QACjD,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACZ,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACd,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAqBD;;;;GAIG;AACI,KAAK,UAAU,oBAAoB,CAAC,KAAyB;IAClE,MAAM,SAAS,GAAG,qBAAqB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IACtD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAA;IAElD,MAAM,IAAI,GAAG,KAAK,CAAC,YAAY,CAAA;IAC/B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC;QAC/B,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,SAAS,EAAS,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,QAAQ,EAAS,EAAE;QACzF,WAAW,EAAE,IAAI;KAClB,CAAC,CAAA;IAEF,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAQ,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,GAAQ,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IAC7G,MAAM,KAAK,GAAG,qBAAqB,CAAC,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,CAAA;IAC5E,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAA;IAE9C;;;;OAIG;IACH,IAAI,CAAC,KAAK,CAAC,UAAU,IAAI,MAAM,CAAC,KAAK,MAAM;QAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAA;IAErF,KAAK,MAAM,MAAM,IAAI,KAAK,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAQ,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,SAAS,CAAC,CAAA;QACjF,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAS,CAAC,CAAA;QACjG,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,CAAC,IAAI,CAAC;gBACd,MAAM,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,QAAQ,EAAS;gBACrC,OAAO,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,SAAS,EAAS;gBACvC,IAAI,EAAE,EAAE,EAAE,EAAE,MAAM,EAAS;gBAC3B,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,OAAO,EAAE,KAAK,CAAC,OAAO;aAChB,CAAC,CAAA;QACX,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;AAC3B,CAAC","sourcesContent":["/*\n * Mentioning someone tells them (ADR-0071 decision 1, as amended by ADR-0073).\n *\n * The machinery existed in the board product only: `@name` in a board chat added a participant and\n * sent them an invite, and the same `@name` in a twin deliberation added nobody. The person typing\n * it had every reason to believe they had called a colleague in.\n *\n * ── What a mention is now ─────────────────────────────────────────────────────\n * A conversation in the domain is open: anyone may walk in, with nothing to approve and nobody to\n * ask (ADR-0073 decision 2). So a mention grants nothing — it points. It seats the named person so\n * the conversation reaches their list, and it tells them their name came up. Somebody who was never\n * mentioned can read the same room by opening it.\n *\n * Two rules survive the amendment:\n *   ① only a door that stores **a person's turn** mentions — never the model, a tool, or the\n *      assistant's own answer. What the assistant writes must not seat people.\n *   ② whoever is named joins as a member and is told.\n *\n * What went: the inviter's own role (there is nothing to hand out), the refusal verdicts, and the\n * notice shown before sending. A private conversation is the one place a mention cannot seat\n * someone — there the named person is told and stays outside until an owner opens it.\n */\n\n/** 본문에서 `@user{userId:UUID}` 마커의 userId 를 뽑는다 — 첫 등장 순, 중복 제거. */\nexport function extractMentionUserIds(text: string | null | undefined): string[] {\n  if (!text) return []\n  const re = /\\{userId:([^}\\s]+)\\}/g\n  const seen = new Set<string>()\n  const out: string[] = []\n  let m: RegExpExecArray | null\n  while ((m = re.exec(text)) !== null) {\n    const id = m[1]\n    if (!seen.has(id)) {\n      seen.add(id)\n      out.push(id)\n    }\n  }\n  return out\n}\n\n/** 멘션된 사람 중 **아직 참여자가 아니고 자기 자신도 아닌** 새 사람만. */\nexport function newParticipantUserIds(\n  mentioned: ReadonlyArray<string>,\n  existing: ReadonlyArray<string>,\n  selfUserId?: string | null\n): string[] {\n  const have = new Set(existing)\n  if (selfUserId) have.add(selfUserId)\n  const out: string[] = []\n  const seen = new Set<string>()\n  for (const id of mentioned) {\n    if (!id || have.has(id) || seen.has(id)) continue\n    seen.add(id)\n    out.push(id)\n  }\n  return out\n}\n\nexport interface MentionInviteResult {\n  /** 이번에 새로 앉은 사람들. 알림은 이들에게 간다. */\n  invited: string[]\n  /** 비공개 대화라 앉히지 못한 사람들 — 이름은 불렸고 방에는 못 들어온다. 화면이 그대로 말한다. */\n  notSeated?: string[]\n}\n\nexport interface MentionInviteInput {\n  /** 저장된 **사람의 말**. 어시스턴트의 답이나 도구 결과를 여기에 넘기지 않는다(조건 ①). */\n  content: string\n  sessionId: string\n  domainId: string\n  inviter: { id?: string } | undefined | null\n  /** 참여자 저장소 — 시험이 가짜를 넣는다. */\n  participants: any\n  /** 이 대화가 공개인가(ADR-0073 판정 2). 비공개면 이름만 알리고 앉히지 않는다. */\n  visibility?: string | null\n}\n\n/**\n * 멘션된 사람을 참여자로 앉힌다.\n *\n * 나갔던 사람(soft delete)은 되살린다 — 다시 부른 것이지 새 사람이 아니다.\n */\nexport async function inviteMentionedUsers(input: MentionInviteInput): Promise<MentionInviteResult> {\n  const mentioned = extractMentionUserIds(input.content)\n  if (mentioned.length === 0) return { invited: [] }\n\n  const repo = input.participants\n  const existing = await repo.find({\n    where: { session: { id: input.sessionId } as any, domain: { id: input.domainId } as any },\n    withDeleted: true\n  })\n\n  const activeIds = existing.filter((row: any) => !row.deletedAt).map((row: any) => row.userId).filter(Boolean)\n  const fresh = newParticipantUserIds(mentioned, activeIds, input.inviter?.id)\n  if (fresh.length === 0) return { invited: [] }\n\n  /*\n   * 비공개 대화에서는 이름을 불러도 앉히지 않는다. 공개 대화에서는 앉히는 일이 아무것도 주지 않지만\n   * (누구나 들어온다), 비공개에서는 그것이 곧 접근을 주는 일이다. 부르는 사람이 아니라 owner 가 열\n   * 일이다 — 이름이 불렸다는 것만 알린다.\n   */\n  if ((input.visibility ?? 'open') !== 'open') return { invited: [], notSeated: fresh }\n\n  for (const userId of fresh) {\n    const prior = existing.find((row: any) => row.userId === userId && row.deletedAt)\n    if (prior) {\n      await repo.update(prior.id, { deletedAt: null, role: 'member', updater: input.inviter } as any)\n    } else {\n      await repo.save({\n        domain: { id: input.domainId } as any,\n        session: { id: input.sessionId } as any,\n        user: { id: userId } as any,\n        role: 'member',\n        creator: input.inviter,\n        updater: input.inviter\n      } as any)\n    }\n  }\n\n  return { invited: fresh }\n}\n"]}

package/dist-server/service/chat-session-resolver.d.ts

@@ -1,15 +1,20 @@
 import { User } from '@things-factory/auth-base';
 import { ChatSession } from './chat-session/chat-session.js';
+import { type ProposalOutcome } from './chat-message/proposal-outcome.js';
 import { ChatMessage } from './chat-message/chat-message.js';
 import { ChatSessionParticipant } from './chat-session-participant/chat-session-participant.js';
 declare class ChatSessionInboxEntry {
     id?: string;
     name?: string;
+    /** 어느 대화인가 — 목록에서 고른 것이 지금 열린 대화와 다르면 화면이 그 대화로 따라간다. */
+    kind?: string;
     anchorType?: string;
     anchorId?: string;
     boardId?: string;
     lastMessageAt?: Date;
     lastMessagePreview?: string;
+    /** 미리보기가 이 사람에게 가려져 나갔는가 — 목록도 대화와 같은 관문을 지난다(ADR-0073 판정 1). */
+    previewRedacted?: boolean;
     createdAt?: Date;
     unread: boolean;
     participant: boolean;
@@ -71,6 +76,16 @@ export declare class ChatSessionResolver {
      * 변경은 **meta 활동**으로 방송한다 — 모든 참여자 목록에 즉시 반영되지만 안 읽음 배지는 올리지 않는다
      * (이름 변경을 "새 소식" 으로 알리면 소음이다).
      */
+    /**
+     * 이 대화를 도메인 안 누구나 읽게 할 것인가 — ADR-0073 판정 2.
+     *
+     * owner 만 바꾼다. 이름 바꾸기는 어느 참여자나 하지만(되돌릴 수 있고 값을 드러내지 않는다), 공개로
+     * 바꾸는 일은 이미 쓰인 글을 도메인 전체에 여는 일이다 — 되돌려도 읽힌 것은 읽힌 것이다.
+     *
+     * 화면은 공개로 바꾸기 전에 한 줄을 먼저 보인다(문구는 클라이언트가 가진다). 그 한 줄은 이 문이
+     * 강제하지 않는다 — 문이 막을 수 있는 것은 누가 바꾸느냐까지다.
+     */
+    setSessionVisibility(sessionId: string, visibility: string, context: ResolverContext): Promise<boolean>;
     renameAISession(sessionId: string, name: string, context: ResolverContext): Promise<boolean>;
     /**
      * 읽은 지점 갱신 — 이 세션을 여기까지 읽었다. 멱등(여러 번 호출해도 최신 시각으로만 이동).
@@ -84,6 +99,8 @@ export declare class ChatSessionResolver {
     startAISession(anchorType: string, anchorId: string, context: ResolverContext): Promise<ChatSession>;
     createAISession(anchorType: string, anchorId: string, name: string | undefined, context: ResolverContext): Promise<ChatSession>;
     renameChatSession(sessionId: string, name: string, context: ResolverContext): Promise<boolean>;
+    reportProposalOutcome(sessionId: string, proposalKey: string, outcome: ProposalOutcome, context: ResolverContext): Promise<boolean>;
+    sayToRoom(sessionId: string, content: string, context: ResolverContext): Promise<string | null>;
     appendSessionNote(sessionId: string, content: string, context: ResolverContext): Promise<boolean>;
     appendSessionTurns(sessionId: string, turns: {
         role?: string;

package/dist-server/service/chat-session-resolver.js

@@ -17,6 +17,32 @@ const typeorm_1 = require("typeorm");
 const chat_session_js_1 = require("./chat-session/chat-session.js");
 const session_anchor_js_1 = require("./chat-session/session-anchor.js");
 const session_inbox_js_1 = require("./chat-session/session-inbox.js");
+const carried_turns_js_1 = require("./chat-message/carried-turns.js");
+const room_message_js_1 = require("./chat-message/room-message.js");
+const reader_gate_js_1 = require("./chat-message/reader-gate.js");
+const session_visibility_js_1 = require("./chat-session/session-visibility.js");
+const mention_invite_js_1 = require("./chat-session-participant/mention-invite.js");
+const invite_notification_js_1 = require("./chat-session-participant/invite-notification.js");
+/**
+ * 초대 알림 — 발송은 호스트의 기전을 그대로 쓴다(중복 구현 금지).
+ *
+ * 알림이 안 가도 초대 자체는 이미 일어났다. 그래서 실패를 삼키되, 초대를 되돌리지는 않는다 —
+ * 참여자 목록이 정본이고 알림은 그것을 알리는 편지다.
+ */
+async function notifyInvited(context, invited, inviter) {
+    if (invited.length === 0)
+        return;
+    const payload = (0, invite_notification_js_1.buildInviteNotification)(invited, undefined, inviter);
+    if (!payload)
+        return;
+    try {
+        await context.state?.notify?.(payload);
+    }
+    catch {
+        /* 편지가 못 갔다고 방에 들어온 사실이 취소되지는 않는다. */
+    }
+}
+const proposal_outcome_js_1 = require("./chat-message/proposal-outcome.js");
 const session_activity_publish_js_1 = require("./chat-session/session-activity-publish.js");
 const chat_message_js_1 = require("./chat-message/chat-message.js");
 const chat_session_participant_js_1 = require("./chat-session-participant/chat-session-participant.js");
@@ -31,6 +57,10 @@ tslib_1.__decorate([
     (0, type_graphql_1.Field)({ nullable: true, description: 'User-given session name (tab label).' }),
     tslib_1.__metadata("design:type", String)
 ], ChatSessionInboxEntry.prototype, "name", void 0);
+tslib_1.__decorate([
+    (0, type_graphql_1.Field)({ nullable: true, description: 'Which conversation this session is — the registered mode kind.' }),
+    tslib_1.__metadata("design:type", String)
+], ChatSessionInboxEntry.prototype, "kind", void 0);
 tslib_1.__decorate([
     (0, type_graphql_1.Field)({ nullable: true, description: "What the session is anchored to: 'board' | 'space' | 'instance' | 'none'." }),
     tslib_1.__metadata("design:type", String)
@@ -51,6 +81,10 @@ tslib_1.__decorate([
     (0, type_graphql_1.Field)({ nullable: true, description: 'Short preview of the last message.' }),
     tslib_1.__metadata("design:type", String)
 ], ChatSessionInboxEntry.prototype, "lastMessagePreview", void 0);
+tslib_1.__decorate([
+    (0, type_graphql_1.Field)({ nullable: true, description: 'True when the preview was replaced because this reader does not pass the doors of the message it came from.' }),
+    tslib_1.__metadata("design:type", Boolean)
+], ChatSessionInboxEntry.prototype, "previewRedacted", void 0);
 tslib_1.__decorate([
     (0, type_graphql_1.Field)({ nullable: true, description: 'Session creation timestamp.' }),
     tslib_1.__metadata("design:type", Date)
@@ -152,7 +186,19 @@ let ChatSessionResolver = class ChatSessionResolver {
             mine: createdByMe.has(entry.id)
         }));
         /* showHidden=true 로 불러 **전체**를 얻는다 — 숨김 여부 판정을 두 곳에 복제하지 않기 위함. */
-        return (0, session_inbox_js_1.applyHidden)(entries, hiddenAt, true);
+        const shown = (0, session_inbox_js_1.applyHidden)(entries, hiddenAt, true);
+        /*
+         * 목록도 같은 관문을 지난다 — ADR-0073 판정 1. 미리보기는 그 답을 **다시 읽는 두 번째 길**이고,
+         * 한 길만 막으면 같은 문장이 다른 길로 그대로 나간다. 미리보기 자리를 `content` 로 바꿔 넣고
+         * 가려진 것만 되돌려 담는다.
+         */
+        const gate = (0, reader_gate_js_1.readerGate)(context);
+        const judged = await gate(shown.map(entry => ({ doors: entry.lastMessageDoors, content: entry.lastMessagePreview ?? '' })));
+        return shown.map((entry, index) => ({
+            ...entry,
+            lastMessagePreview: judged[index].content,
+            previewRedacted: judged[index].redacted === true
+        }));
     }
     /**
      * 세션 삭제 — **만든 사람만.**
@@ -231,6 +277,41 @@ let ChatSessionResolver = class ChatSessionResolver {
      * 변경은 **meta 활동**으로 방송한다 — 모든 참여자 목록에 즉시 반영되지만 안 읽음 배지는 올리지 않는다
      * (이름 변경을 "새 소식" 으로 알리면 소음이다).
      */
+    /**
+     * 이 대화를 도메인 안 누구나 읽게 할 것인가 — ADR-0073 판정 2.
+     *
+     * owner 만 바꾼다. 이름 바꾸기는 어느 참여자나 하지만(되돌릴 수 있고 값을 드러내지 않는다), 공개로
+     * 바꾸는 일은 이미 쓰인 글을 도메인 전체에 여는 일이다 — 되돌려도 읽힌 것은 읽힌 것이다.
+     *
+     * 화면은 공개로 바꾸기 전에 한 줄을 먼저 보인다(문구는 클라이언트가 가진다). 그 한 줄은 이 문이
+     * 강제하지 않는다 — 문이 막을 수 있는 것은 누가 바꾸느냐까지다.
+     */
+    async setSessionVisibility(sessionId, visibility, context) {
+        const { domain, user } = context.state;
+        if (!session_visibility_js_1.SESSION_VISIBILITIES.includes(visibility)) {
+            throw new Error(`unknown visibility '${visibility}' — use ${session_visibility_js_1.SESSION_VISIBILITIES.join(' or ')}`);
+        }
+        const session = await (0, shell_1.getRepository)(chat_session_js_1.ChatSession).findOneBy({ id: sessionId, domain: { id: domain.id } });
+        if (!session)
+            return false;
+        const mine = await (0, shell_1.getRepository)(chat_session_participant_js_1.ChatSessionParticipant).findOne({
+            where: { domain: { id: domain.id }, session: { id: sessionId }, user: { id: user.id } }
+        });
+        if (mine?.role !== 'owner')
+            return false;
+        if (session.visibility === visibility)
+            return true;
+        await (0, shell_1.getRepository)(chat_session_js_1.ChatSession).update(sessionId, { visibility, updater: user });
+        (0, session_activity_publish_js_1.publishSessionActivity)({
+            domainId: domain.id,
+            sessionId,
+            kind: 'meta',
+            anchorType: session.anchorType,
+            anchorId: session.anchorId,
+            actorId: user?.id
+        });
+        return true;
+    }
     async renameAISession(sessionId, name, context) {
         const { domain, user } = context.state;
         const trimmed = (name ?? '').trim().slice(0, 200);
@@ -306,14 +387,25 @@ let ChatSessionResolver = class ChatSessionResolver {
         return true;
     }
     async chatMessages(sessionId, limit, offset, context) {
-        const { domain } = context.state;
+        const { domain, user } = context.state;
         const session = await (0, shell_1.getRepository)(chat_session_js_1.ChatSession).findOneBy({
             id: sessionId,
             domain: { id: domain.id }
         });
         if (!session)
             return [];
-        return await (0, shell_1.getRepository)(chat_message_js_1.ChatMessage).find({
+        /*
+         * 공개 대화는 도메인 안이면 누구나 읽는다 — 초대 절차가 없다(ADR-0073 판정 2). 비공개 대화는
+         * 참여자만. 여기서 막히는 것은 **방**이고, 방에 들어온 뒤 값을 읽는 일은 아래 문 판정이 따로 본다.
+         */
+        if (session.visibility === 'private') {
+            const part = await (0, shell_1.getRepository)(chat_session_participant_js_1.ChatSessionParticipant).findOne({
+                where: { session: { id: sessionId }, user: { id: user.id }, domain: { id: domain.id } }
+            });
+            if (!(0, session_visibility_js_1.mayReadSession)(session.visibility, !!part))
+                return [];
+        }
+        const rows = await (0, shell_1.getRepository)(chat_message_js_1.ChatMessage).find({
             where: { session: { id: sessionId } },
             // creator: 그룹챗 발신자 표시(name) + 자기 여부 판정(email). 내부 관리키(id)에 의존하지 않는다.
             relations: { creator: true },
@@ -321,6 +413,11 @@ let ChatSessionResolver = class ChatSessionResolver {
             take: limit,
             skip: offset
         });
+        /*
+         * 어시스턴트의 답은 도구 결과를 평문으로 옮겨 적은 것이다. 읽는 사람이 그 도구가 지난 문을 못 지나면
+         * 본문 대신 한 줄이 나간다 — 행이 있다는 사실은 보이고 값만 안 보인다(ADR-0073 판정 1).
+         */
+        return await (0, reader_gate_js_1.readerGate)(context)(rows);
     }
     async startAISession(anchorType, anchorId, context) {
         const { domain, user, tx } = context.state;
@@ -331,6 +428,8 @@ let ChatSessionResolver = class ChatSessionResolver {
         const session = await repo.save({
             domain,
             ...(0, session_anchor_js_1.anchorColumns)(anchorType, anchorId),
+            /* 앵커가 있는 대화는 공개로 태어난다 — ADR-0073 판정 2. */
+            visibility: (0, session_visibility_js_1.initialVisibility)({ anchorType }),
             creator: user,
             updater: user
         });
@@ -352,11 +451,13 @@ let ChatSessionResolver = class ChatSessionResolver {
         let finalName = name?.trim();
         if (!finalName) {
             const count = await repo.count({ where: (0, session_anchor_js_1.anchorWhere)(domain.id, anchorType, anchorId) });
-            finalName = `세션 ${count + 1}`;
+            /* The name is stored, so it is written in the language of whoever created it (context.t), and read back as is. */
+            finalName = context.t('ai-assistant.session.default-name', { n: count + 1, defaultValue: 'conversation {n}' });
         }
         const session = await repo.save({
             domain,
             ...(0, session_anchor_js_1.anchorColumns)(anchorType, anchorId),
+            visibility: (0, session_visibility_js_1.initialVisibility)({ anchorType }),
             creator: user,
             updater: user,
             name: finalName
@@ -381,6 +482,93 @@ let ChatSessionResolver = class ChatSessionResolver {
         await repo.update(sessionId, { name: name.trim() || null, updater: user });
         return true;
     }
+    async reportProposalOutcome(sessionId, proposalKey, outcome, context) {
+        const { domain, user, tx } = context.state;
+        const session = await (0, shell_1.getRepository)(chat_session_js_1.ChatSession, tx).findOneBy({ id: sessionId, domain: { id: domain.id } });
+        if (!session)
+            throw new Error(`ChatSession ${sessionId} not found`);
+        const key = (proposalKey ?? '').trim();
+        if (!key)
+            return false;
+        /*
+         * 낱말은 ADR-0042 의 것에 `declined` 하나다. 모르는 낱말을 받으면 그대로 적지 않는다 — 카드가
+         * 읽지 못하는 상태가 되고, 그때 화면은 아무 말도 못 한다.
+         */
+        if (!proposal_outcome_js_1.PROPOSAL_VERDICTS.includes(outcome?.verdict)) {
+            throw new Error(`[ai-assistant] '${outcome?.verdict}' is not a proposal verdict. Use one of ${proposal_outcome_js_1.PROPOSAL_VERDICTS.join(', ')}.`);
+        }
+        const body = (0, proposal_outcome_js_1.formatProposalOutcomeLine)(key, outcome);
+        const previousLast = await (0, shell_1.getRepository)(chat_message_js_1.ChatMessage, tx).findOne({
+            where: { session: { id: session.id } },
+            order: { createdAt: 'DESC' }
+        });
+        const sysMsg = await (0, shell_1.getRepository)(chat_message_js_1.ChatMessage, tx).save({
+            session: { id: session.id },
+            role: 'system',
+            content: body,
+            creator: user,
+            updater: user,
+            parentMessage: previousLast ? { id: previousLast.id } : undefined
+        });
+        /* 목록의 미리보기는 사람의 말로 두는 편이 낫다 — 이 줄은 기계의 기록이다. 방송만 한다. */
+        (0, chat_message_publish_js_1.publishChatMessage)({ domainId: domain.id, sessionId: session.id, message: sysMsg });
+        return true;
+    }
+    async sayToRoom(sessionId, content, context) {
+        const { domain, user, tx } = context.state;
+        const session = await (0, shell_1.getRepository)(chat_session_js_1.ChatSession, tx).findOneBy({ id: sessionId, domain: { id: domain.id } });
+        if (!session)
+            throw new Error(`ChatSession ${sessionId} not found`);
+        const body = (0, room_message_js_1.roomMessageBody)(content);
+        if (!body)
+            return null;
+        const previousLast = await (0, shell_1.getRepository)(chat_message_js_1.ChatMessage, tx).findOne({
+            where: { session: { id: session.id } },
+            order: { createdAt: 'DESC' }
+        });
+        const saved = await (0, shell_1.getRepository)(chat_message_js_1.ChatMessage, tx).save({
+            session: { id: session.id },
+            role: 'user',
+            content: body,
+            /* 대상은 문이 정한다 — 이 문은 사람들에게 하는 말이다(ADR-0070 A15 결정 ①). */
+            addressee: 'room',
+            creator: user,
+            updater: user,
+            parentMessage: previousLast ? { id: previousLast.id } : undefined
+        });
+        /*
+         * 멘션은 사람을 불러들인다 — **사람의 말을 저장하는 문**만 이것을 한다(ADR-0071 결정 1 ①).
+         * 초대는 방에 있는 사람(owner · member)만 할 수 있고, 거절되면 그 사실이 화면으로 돌아간다.
+         */
+        const invite = await (0, mention_invite_js_1.inviteMentionedUsers)({
+            content: body,
+            sessionId: session.id,
+            domainId: domain.id,
+            inviter: user,
+            participants: (0, shell_1.getRepository)(chat_session_participant_js_1.ChatSessionParticipant, tx),
+            /* 비공개 대화에서는 이름만 닿는다 — ADR-0073 판정 2. */
+            visibility: session.visibility
+        });
+        await notifyInvited(context, invite.invited, user);
+        /* 사람의 말이다 — 목록의 최근 활동과 다른 참여자의 안 읽음이 이것으로 움직인다. */
+        try {
+            await (0, shell_1.getRepository)(chat_session_js_1.ChatSession, tx).update(session.id, (0, session_inbox_js_1.activityPatch)(body));
+        }
+        catch {
+            /* 목록이 한 박자 늦는 것이 말을 못 하게 할 이유는 아니다. */
+        }
+        (0, session_activity_publish_js_1.publishSessionActivity)({
+            domainId: domain.id,
+            sessionId: session.id,
+            kind: 'message',
+            anchorType: session.anchorType,
+            anchorId: session.anchorId,
+            preview: body,
+            actorId: user?.id
+        });
+        (0, chat_message_publish_js_1.publishChatMessage)({ domainId: domain.id, sessionId: session.id, message: saved });
+        return saved.id ?? null;
+    }
     async appendSessionNote(sessionId, content, context) {
         const { domain, user, tx } = context.state;
         const session = await (0, shell_1.getRepository)(chat_session_js_1.ChatSession, tx).findOneBy({ id: sessionId, domain: { id: domain.id } });
@@ -429,13 +617,35 @@ let ChatSessionResolver = class ChatSessionResolver {
         /* 옮겨온 대화는 **그 대화의 발언 그대로** 들어간다 — 한 덩어리 기록으로 뭉치면 사람이 읽을 수 없고
          * (화면 하나를 잡아먹는 이탤릭 덩어리), 마크다운도 죽는다. 대신 개수·길이는 제한한다: 맥락 전달이
          * 목적이고 전문 보존이 아니다. */
-        const rows = (Array.isArray(turns) ? turns : [])
-            .map(t => ({
-            role: t?.role === 'ai' || t?.role === 'assistant' ? 'assistant' : t?.role === 'user' ? 'user' : 'system',
-            content: (t?.content ?? '').trim().slice(0, 4000)
-        }))
-            .filter(t => t.content)
-            .slice(-40);
+        /* **역할은 서버가 쓴다**(ADR-0070 A15 결정 ③). 어시스턴트의 답은 원본을 읽어 복사하고, 원본이 없으면
+         * 인용문으로 `system` 행에 남긴다 — 클라이언트가 보낸 글자를 어시스턴트의 말로 저장하지 않는다. */
+        const planned = (0, carried_turns_js_1.planCarriedTurns)(turns);
+        const rows = [];
+        /* 옮겨 적힌 원문이 소급해서 공개되지 않게, 받는 대화는 이 순간부터 비공개다 — ADR-0073 판정 2. */
+        let carried = false;
+        for (const row of planned) {
+            if (!row.copyOf) {
+                rows.push({ role: row.role, content: row.content, addressee: row.addressee });
+                continue;
+            }
+            /* 원본은 이 테넌트 안에서만 찾는다 — 남의 도메인 메시지를 옮겨 오는 길이 되지 않게. */
+            const original = await (0, shell_1.getRepository)(chat_message_js_1.ChatMessage, tx).findOne({
+                where: (0, carried_turns_js_1.carriedOriginalWhere)(domain.id, row.copyOf),
+                relations: ['session']
+            });
+            carried = true;
+            if (original && original.role === 'assistant') {
+                /*
+                 * 답과 함께 **그 답이 지나온 문**을 옮긴다 — ADR-0073 판정 1. 문을 두고 글만 옮기면, 문 하나를
+                 * 지나 얻은 값이 문 없는 행이 되어 아무나 읽는다. 옮겨 적기가 권한을 씻는 길이 된다.
+                 */
+                rows.push({ role: 'assistant', content: original.content, doors: original.doors ?? [] });
+            }
+            else {
+                /* 인용문에도 원문의 문을 실어 둔다 — 인용이라고 값이 달라지지 않는다. */
+                rows.push({ role: 'system', content: (0, carried_turns_js_1.quoteCarriedAnswer)(row.content), doors: original?.doors ?? [] });
+            }
+        }
         if (!rows.length)
             return false;
         let previous = await (0, shell_1.getRepository)(chat_message_js_1.ChatMessage, tx).findOne({
@@ -448,12 +658,18 @@ let ChatSessionResolver = class ChatSessionResolver {
                 session: { id: session.id },
                 role: row.role,
                 content: row.content,
+                /* 사람의 말은 방을 향한 것이다 — 이 문은 어시스턴트를 부르는 문이 아니다. */
+                addressee: row.addressee,
+                doors: row.doors,
                 creator: user,
                 updater: user,
                 parentMessage: previous ? { id: previous.id } : undefined
             });
             saved.push(previous);
         }
+        if (carried && session.visibility !== 'private') {
+            await (0, shell_1.getRepository)(chat_session_js_1.ChatSession, tx).update(session.id, { visibility: 'private', updater: user });
+        }
         /* 활동은 마지막 발언 기준 한 번만 — 옮긴 줄마다 목록을 흔들 이유가 없다. */
         const last = rows[rows.length - 1];
         try {
@@ -566,6 +782,18 @@ tslib_1.__decorate([
     tslib_1.__metadata("design:paramtypes", [String, Object, Boolean]),
     tslib_1.__metadata("design:returntype", Promise)
 ], ChatSessionResolver.prototype, "hideAISession", null);
+tslib_1.__decorate([
+    (0, type_graphql_1.Mutation)(() => Boolean, {
+        description: "Open this conversation to everyone in the domain, or close it to its participants. Only the owner may change it. Opening exposes what is already written — the screen says so before asking. Door checks on assistant answers are unaffected (ADR-0073)."
+    }),
+    (0, type_graphql_1.Directive)('@privilege(category: "ai-assistant", privilege: "mutation")'),
+    tslib_1.__param(0, (0, type_graphql_1.Arg)('sessionId')),
+    tslib_1.__param(1, (0, type_graphql_1.Arg)('visibility')),
+    tslib_1.__param(2, (0, type_graphql_1.Ctx)()),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [String, String, Object]),
+    tslib_1.__metadata("design:returntype", Promise)
+], ChatSessionResolver.prototype, "setSessionVisibility", null);
 tslib_1.__decorate([
     (0, type_graphql_1.Mutation)(() => Boolean, {
         description: 'Rename a chat session. Any participant may rename it — the name is the topic label of a shared deliberation and the change is reversible. Broadcast as meta activity so every participant sees it without raising unread badges.'
@@ -591,7 +819,7 @@ tslib_1.__decorate([
 ], ChatSessionResolver.prototype, "markSessionRead", null);
 tslib_1.__decorate([
     (0, type_graphql_1.Query)(() => [auth_base_1.User], {
-        description: 'List users in the current domain for `@` mention popup. board-ai 권한이면 누구나 멘션용 검색 가능 (관리자 전용 users() 와 별도).'
+        description: 'List users in the current domain for the `@` mention popup. Anyone with the chat privilege may search here; this is separate from the admin-only users().'
     }),
     (0, type_graphql_1.Directive)('@privilege(category: "ai-assistant", privilege: "query")'),
     tslib_1.__param(0, (0, type_graphql_1.Arg)('query', { nullable: true, description: 'Substring to match against name/email (case-insensitive). Empty → all.' })),
@@ -650,12 +878,12 @@ tslib_1.__decorate([
 tslib_1.__decorate([
     (0, type_graphql_1.Directive)('@transaction'),
     (0, type_graphql_1.Mutation)(() => chat_session_js_1.ChatSession, {
-        description: 'Always create a new AI chat session anchored to a target (no idempotent reuse). For multi-session UX — 새 탭 열기.'
+        description: 'Always create a new AI chat session anchored to a target (no idempotent reuse). For multi-session UX — opening another tab.'
     }),
     (0, type_graphql_1.Directive)('@privilege(category: "ai-assistant", privilege: "mutation")'),
     tslib_1.__param(0, (0, type_graphql_1.Arg)('anchorType')),
     tslib_1.__param(1, (0, type_graphql_1.Arg)('anchorId')),
-    tslib_1.__param(2, (0, type_graphql_1.Arg)('name', { nullable: true, description: 'Optional name (defaults to auto-generated `세션 N`).' })),
+    tslib_1.__param(2, (0, type_graphql_1.Arg)('name', { nullable: true, description: 'Optional name. Defaults to a generated one, numbered within the anchor.' })),
     tslib_1.__param(3, (0, type_graphql_1.Ctx)()),
     tslib_1.__metadata("design:type", Function),
     tslib_1.__metadata("design:paramtypes", [String, String, String, Object]),
@@ -674,6 +902,34 @@ tslib_1.__decorate([
     tslib_1.__metadata("design:paramtypes", [String, String, Object]),
     tslib_1.__metadata("design:returntype", Promise)
 ], ChatSessionResolver.prototype, "renameChatSession", null);
+tslib_1.__decorate([
+    (0, type_graphql_1.Directive)('@transaction'),
+    (0, type_graphql_1.Mutation)(() => Boolean, {
+        description: "What the host did with a proposal the assistant made. The host calls this once per card it was asked to run; the server records it as a system row, so the panel shows it, a refreshed panel still shows it, and the model reads on its next turn that its proposal was refused instead of assuming it landed (ADR-0070)."
+    }),
+    (0, type_graphql_1.Directive)('@privilege(category: "ai-assistant", privilege: "mutation")'),
+    tslib_1.__param(0, (0, type_graphql_1.Arg)('sessionId')),
+    tslib_1.__param(1, (0, type_graphql_1.Arg)('proposalKey')),
+    tslib_1.__param(2, (0, type_graphql_1.Arg)('outcome', () => graphql_scalars_1.GraphQLJSON)),
+    tslib_1.__param(3, (0, type_graphql_1.Ctx)()),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [String, String, Object, Object]),
+    tslib_1.__metadata("design:returntype", Promise)
+], ChatSessionResolver.prototype, "reportProposalOutcome", null);
+tslib_1.__decorate([
+    (0, type_graphql_1.Directive)('@transaction'),
+    (0, type_graphql_1.Mutation)(() => String, {
+        nullable: true,
+        description: "Say something to the people in this session. The turn is stored as the speaker's, addressed to the room, and the assistant is not called — it reads the line as context the next time someone asks it something. Returns the stored message id, or null when there was nothing to say (ADR-0070)."
+    }),
+    (0, type_graphql_1.Directive)('@privilege(category: "ai-assistant", privilege: "mutation")'),
+    tslib_1.__param(0, (0, type_graphql_1.Arg)('sessionId')),
+    tslib_1.__param(1, (0, type_graphql_1.Arg)('content')),
+    tslib_1.__param(2, (0, type_graphql_1.Ctx)()),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [String, String, Object]),
+    tslib_1.__metadata("design:returntype", Promise)
+], ChatSessionResolver.prototype, "sayToRoom", null);
 tslib_1.__decorate([
     (0, type_graphql_1.Directive)('@transaction'),
     (0, type_graphql_1.Mutation)(() => Boolean, {
@@ -690,7 +946,7 @@ tslib_1.__decorate([
 tslib_1.__decorate([
     (0, type_graphql_1.Directive)('@transaction'),
     (0, type_graphql_1.Mutation)(() => Boolean, {
-        description: 'Carry a conversation from another surface into this session as its own turns (user / assistant), preserving order. Use when a lightweight exchange is promoted into a persistent discussion — the participants should read it as the conversation continuing, not as a machine dump.'
+        description: "Carry a conversation from another surface into this session as its own turns, preserving order. A person's turns are stored as theirs, addressed to the room. An assistant turn is stored as the assistant's only when it names its original (sourceSessionId, sourceMessageId) and the server can read it; otherwise it is kept as a quotation on a system row — roles are the server's to write (ADR-0070)."
     }),
     (0, type_graphql_1.Directive)('@privilege(category: "ai-assistant", privilege: "mutation")'),
     tslib_1.__param(0, (0, type_graphql_1.Arg)('sessionId')),