@undefineds.co/linx 0.3.26 → 0.3.27

package/dist/lib/auto-mode/pod-approval.js

@@ -1,20 +1,16 @@
 import { setTimeout as delay } from 'node:timers/promises';
 import { parsePodResourceRef, resolvePodBaseUrl } from '@undefineds.co/drizzle-solid';
 import { getDefaultPodDataSession } from '../pod-data-session.js';
-import { agentResource, approvalResource, auditResource, chatResource, claimApprovalRequest, claimInputRequest, drizzle, grantResource, inboxNotificationResource, inputRequestResource, solidResources, threadRepository, } from '../models.js';
-import { AS, ODRL, UDFS } from '@undefineds.co/models/namespaces';
-import { ApprovalVocab, AuditVocab, GrantReadVocab, GrantVocab, InboxNotificationVocab } from '@undefineds.co/models/vocab/sidecar';
-import { autoModeApprovalActionUri, autoModeApprovalDecisionForStoredApproval, autoModeApprovalRequestMessage, autoModeApprovalRisk, autoModeApprovalToolName, buildAutoModeApprovalDecisionReason, encodeAutoModeApprovalOptions, parseAutoModeApprovalDecisionReason, parseAutoModeApprovalOptions, shouldMaterializeAutoModeGrant, } from '../../../vendor/agent-runtime/dist/auto-mode.js';
+import { agentResource, approvalResource, chatResource, claimApprovalRequest, claimInputRequest, drizzle, inboxNotificationResource, inputRequestResource, solidResources, threadRepository, } from '../models.js';
+import { autoModeApprovalActionUri, autoModeApprovalDecisionForStoredApproval, autoModeApprovalRequestMessage, autoModeApprovalRisk, autoModeApprovalToolName, buildAutoModeApprovalDecisionReason, encodeAutoModeApprovalOptions, parseAutoModeApprovalOptions, shouldMaterializeAutoModeGrant, } from '../../../vendor/agent-runtime/dist/auto-mode.js';
 import { resolveAutoModeGrantCoverage } from './secretary.js';
-import { buildApprovalDocumentUrl, RDF_TYPE, buildApprovalResourceUrl, buildAuditDocumentUrl, buildAuditResourceUrl, buildGrantResourceUrl, buildInboxResourceUrl, firstIri, firstLiteral, iri, listTurtleResources, listTurtleResourcesRecursive, literal, parseManagedTurtleBlocks, readTurtleResource, subjectIdFromResourceUrl, upsertManagedTurtleBlock, } from '../pi-adapter/pod-native.js';
+import { buildGrantResourceUrl } from '../pod-native.js';
+import { MAX_APPROVAL_CONTEXT_LENGTH, MAX_GRANT_POLICY_LENGTH, approvalIriForCreatedAt, createNativeRemoteApprovalStore, createSharedModelRemoteApprovalStore, normalizeString, toIsoString, } from './pod-approval-store.js';
 const AUTO_MODE_CHAT_ID_PREFIX = 'linx-auto-mode';
 const AUTO_MODE_AGENT_ID = '__secretary__';
 const REMOTE_APPROVAL_POLICY_VERSION = 'linx-auto-mode-remote-approval/v1';
 const DEFAULT_REMOTE_APPROVAL_POLL_MS = 1000;
 const DEFAULT_WARN_ONLY_TIMEOUT_MS = 5000;
-const DEFAULT_APPROVAL_LIST_DAYS = 7;
-const MAX_GRANT_POLICY_LENGTH = 1200;
-const MAX_APPROVAL_CONTEXT_LENGTH = 1400;
 const MIN_GRANT_COVERAGE_CONFIDENCE = 0.75;
 const MAX_GRANT_COVERAGE_CANDIDATES = 5;
 const remoteApprovalClientCache = new WeakMap();
@@ -24,21 +20,9 @@ function createAbortError() {
     error.name = 'AbortError';
     return error;
 }
-function normalizeString(value) {
-    return typeof value === 'string' && value.trim() ? value.trim() : undefined;
-}
 function isRecord(value) {
     return typeof value === 'object' && value !== null && !Array.isArray(value);
 }
-function toIsoString(value, fallback) {
-    if (value instanceof Date) {
-        return value.toISOString();
-    }
-    if (typeof value === 'string' && value.trim()) {
-        return value;
-    }
-    return fallback;
-}
 function buildAutoModeChatId(record) {
     return `${AUTO_MODE_CHAT_ID_PREFIX}-${record.backend}`;
 }
@@ -48,15 +32,6 @@ function buildAutoModeChatUri(webId, record) {
 function autoModeThreadUri(webId, record) {
     return threadRepository.iriForChat(webId, buildAutoModeChatId(record), record.id);
 }
-function approvalIriForCreatedAt(webIdOrUri, approvalId, createdAt) {
-    return approvalResource.buildIri(webIdOrUri, {
-        id: approvalId,
-        createdAt,
-    });
-}
-function documentUrlFromResourceUri(resourceUri) {
-    return resourceUri.split('#', 1)[0] ?? resourceUri;
-}
 function grantIri(webIdOrUri, grantId) {
     return buildGrantResourceUrl(webIdOrUri, grantId);
 }
@@ -214,29 +189,6 @@ function grantContextFromApproval(row) {
         approvalContext: row.context,
     }, MAX_APPROVAL_CONTEXT_LENGTH);
 }
-function literalValues(predicates, predicate) {
-    return (predicates.get(predicate) ?? [])
-        .map((object) => isRecord(object) && object.type === 'literal' && typeof object.value === 'string' ? object.value : '')
-        .filter(Boolean);
-}
-function firstLiteralValue(predicates, predicatesToTry) {
-    for (const predicate of predicatesToTry) {
-        const [value] = literalValues(predicates, predicate);
-        if (value) {
-            return value;
-        }
-    }
-    return undefined;
-}
-function iriValues(predicates, predicate) {
-    return (predicates.get(predicate) ?? [])
-        .map((object) => isRecord(object) && object.type === 'iri' && typeof object.value === 'string' ? object.value : '')
-        .filter(Boolean);
-}
-function iriValuesFrom(predicates, predicatesToTry) {
-    const values = predicatesToTry.flatMap((predicate) => iriValues(predicates, predicate));
-    return [...new Set(values)];
-}
 function grantSourceHash(row) {
     return `approval:${row.id}:${row.toolCallId}:${row.risk}`;
 }
@@ -406,65 +358,6 @@ function createOrmRemoteApprovalStore(podSession) {
     };
     return createSharedModelRemoteApprovalStore(podSession.webId, getDb);
 }
-function createSharedModelRemoteApprovalStore(webId, getDb) {
-    const listApprovals = async () => {
-        const rows = await modelList(getDb, approvalResource);
-        return rows.map((row) => enrichApprovalRow(webId, row));
-    };
-    return {
-        listApprovals,
-        findApproval: async (id, options = {}) => {
-            if (options.resourceUri) {
-                const row = await modelFindByIri(getDb, approvalResource, options.resourceUri);
-                return row ? enrichApprovalRow(webId, row, options.resourceUri) : null;
-            }
-            if (options.createdAt) {
-                const createdAt = new Date(toIsoString(options.createdAt, new Date().toISOString()));
-                const iri = approvalIriForCreatedAt(webId, id, createdAt);
-                const row = await modelFindByIri(getDb, approvalResource, iri);
-                return row ? enrichApprovalRow(webId, row, iri) : null;
-            }
-            const row = await modelFindById(getDb, approvalResource, id);
-            return row ? enrichApprovalRow(webId, row) : null;
-        },
-        insertApproval: async (row) => {
-            await modelInsert(getDb, approvalResource, omitInternalFields(row));
-        },
-        updateApproval: async (id, patch, options = {}) => {
-            const explicitIri = options.resourceUri
-                ?? normalizeString(patch.approvalUri)
-                ?? (options.createdAt ? approvalIriForCreatedAt(webId, id, new Date(toIsoString(options.createdAt, new Date().toISOString()))) : undefined);
-            if (explicitIri) {
-                await modelUpdateByIri(getDb, approvalResource, explicitIri, omitInternalFields(patch));
-                return;
-            }
-            const updated = await modelUpdateById(getDb, approvalResource, id, omitInternalFields(patch));
-            if (!updated) {
-                throw new Error(`Remote approval not found: ${id}`);
-            }
-        },
-        claimApproval: async (input) => {
-            const db = await getDb();
-            return claimApprovalRequest(db, {
-                approval: input.approvalUri,
-                leaseOwner: input.leaseOwner,
-                leaseDurationMs: input.leaseDurationMs,
-                now: input.now,
-            });
-        },
-        listAudits: () => modelList(getDb, auditResource),
-        insertAudit: async (row) => {
-            await modelInsert(getDb, auditResource, omitInternalFields(row));
-        },
-        listGrants: () => modelList(getDb, grantResource),
-        insertGrant: async (row) => {
-            await modelInsert(getDb, grantResource, omitInternalFields(row));
-        },
-        insertInboxNotification: async (row) => {
-            await modelInsert(getDb, inboxNotificationResource, omitInternalFields(row));
-        },
-    };
-}
 export function createInboxNotificationControlResourceClaimHandler(input) {
     return async (request) => claimInboxNotificationControlResource({
         controlResourceUri: request.controlResource,
@@ -563,481 +456,6 @@ function mapModelsControlClaimStatus(status) {
     }
     return 'display_only';
 }
-async function modelList(getDb, resource) {
-    const db = await getDb();
-    return await db.select().from(resource).execute();
-}
-async function modelFindByIri(getDb, resource, iri) {
-    const db = await getDb();
-    return await db.findByIri(resource, iri);
-}
-async function modelFindById(getDb, resource, id) {
-    const db = await getDb();
-    return await db.findById(resource, id);
-}
-async function modelInsert(getDb, resource, row) {
-    const db = await getDb();
-    await db.insert(resource).values(stripUndefined(row)).execute();
-}
-async function modelUpdateByIri(getDb, resource, iri, patch) {
-    const db = await getDb();
-    const update = stripUndefined(patch);
-    delete update.id;
-    delete update.approvalUri;
-    await db.updateByIri(resource, iri, update);
-}
-async function modelUpdateById(getDb, resource, id, patch) {
-    const db = await getDb();
-    const update = stripUndefined(patch);
-    delete update.id;
-    delete update.approvalUri;
-    return await db.updateById(resource, id, update);
-}
-function stripUndefined(row) {
-    const next = {};
-    for (const [key, value] of Object.entries(row)) {
-        if (value !== undefined) {
-            next[key] = value;
-        }
-    }
-    return next;
-}
-function omitInternalFields(row) {
-    const next = stripUndefined(row);
-    delete next.approvalUri;
-    delete next['@id'];
-    delete next.subject;
-    delete next.uri;
-    return next;
-}
-function rowSubject(row) {
-    return normalizeString(row['@id'])
-        ?? normalizeString(row.subject)
-        ?? normalizeString(row.uri);
-}
-function enrichApprovalRow(webId, row, explicitIri) {
-    const createdAt = new Date(toIsoString(row.createdAt, new Date().toISOString()));
-    return {
-        ...row,
-        approvalUri: explicitIri
-            ?? normalizeString(row.approvalUri)
-            ?? rowSubject(row)
-            ?? approvalIriForCreatedAt(webId, row.id, createdAt),
-    };
-}
-function createNativeRemoteApprovalStore(webId, fetcher) {
-    return {
-        listApprovals: () => listApprovalRows(webId, fetcher),
-        findApproval: (id, options) => findApprovalRow(webId, fetcher, id, options),
-        insertApproval: (row) => writeApprovalRow(webId, fetcher, row),
-        async updateApproval(id, patch, options = {}) {
-            const explicitIri = options.resourceUri
-                ?? normalizeString(patch.approvalUri)
-                ?? (options.createdAt ? buildApprovalResourceUrl(webId, id, new Date(toIsoString(options.createdAt, new Date().toISOString()))) : undefined);
-            const existing = explicitIri
-                ? await readApprovalRowFromResource(fetcher, explicitIri)
-                : (await listApprovalRows(webId, fetcher)).find((row) => row.id === id);
-            if (!existing) {
-                throw new Error(`Remote approval not found: ${id}`);
-            }
-            await writeApprovalRow(webId, fetcher, { ...existing, ...patch });
-        },
-        claimApproval: async (input) => claimNativeApproval(webId, fetcher, input),
-        listAudits: () => listAuditRows(webId, fetcher),
-        insertAudit: (row) => writeAuditRow(webId, fetcher, row),
-        listGrants: () => listGrantRows(webId, fetcher),
-        insertGrant: (row) => writeGrantRow(webId, fetcher, row),
-        insertInboxNotification: (row) => writeInboxNotificationRow(webId, fetcher, row),
-    };
-}
-async function claimNativeApproval(webId, fetcher, input) {
-    const now = normalizeClaimDate(input.now);
-    const leaseDurationMs = input.leaseDurationMs ?? 60_000;
-    if (!Number.isFinite(leaseDurationMs) || leaseDurationMs <= 0) {
-        throw new Error('Approval claim leaseDurationMs must be a positive finite number.');
-    }
-    const leaseExpiresAt = new Date(now.getTime() + leaseDurationMs);
-    const missingResult = {
-        status: 'not_found',
-        approval: null,
-        leaseOwner: input.leaseOwner,
-        leaseExpiresAt: leaseExpiresAt.toISOString(),
-        reason: 'Approval request was not found.',
-    };
-    const existing = await readApprovalRowFromResource(fetcher, input.approvalUri);
-    if (!existing) {
-        return missingResult;
-    }
-    if (!isClaimableControlStatus(existing.status)) {
-        return {
-            status: 'not_actionable',
-            approval: existing,
-            leaseOwner: input.leaseOwner,
-            leaseExpiresAt: leaseExpiresAt.toISOString(),
-            reason: `Approval request status is ${String(existing.status || 'empty')}.`,
-        };
-    }
-    if (isPastDate(existing.expiresAt, now)) {
-        return {
-            status: 'not_actionable',
-            approval: existing,
-            leaseOwner: input.leaseOwner,
-            leaseExpiresAt: leaseExpiresAt.toISOString(),
-            reason: 'Approval request is past expiresAt.',
-        };
-    }
-    if (hasActiveForeignLease(existing, input.leaseOwner, now)) {
-        return {
-            status: 'lost',
-            approval: existing,
-            leaseOwner: input.leaseOwner,
-            leaseExpiresAt: leaseExpiresAt.toISOString(),
-            reason: 'Approval request is leased by another client.',
-        };
-    }
-    await writeApprovalRow(webId, fetcher, {
-        ...existing,
-        status: 'handling',
-        leaseOwner: input.leaseOwner,
-        leaseExpiresAt,
-    });
-    const claimed = await readApprovalRowFromResource(fetcher, input.approvalUri);
-    if (claimed?.leaseOwner === input.leaseOwner && !isPastDate(claimed.leaseExpiresAt, now)) {
-        return {
-            status: 'claimed',
-            approval: claimed,
-            leaseOwner: input.leaseOwner,
-            leaseExpiresAt: leaseExpiresAt.toISOString(),
-        };
-    }
-    return {
-        status: 'lost',
-        approval: (claimed ?? existing),
-        leaseOwner: input.leaseOwner,
-        leaseExpiresAt: leaseExpiresAt.toISOString(),
-        reason: 'Approval request lease was not retained after update.',
-    };
-}
-function normalizeClaimDate(value) {
-    const date = value instanceof Date ? value : new Date(value ?? Date.now());
-    if (Number.isNaN(date.getTime())) {
-        throw new Error('Invalid approval claim timestamp.');
-    }
-    return date;
-}
-function isClaimableControlStatus(status) {
-    if (typeof status !== 'string' || !status.trim()) {
-        return true;
-    }
-    const normalized = status.trim();
-    return normalized === 'pending' || normalized === 'handling';
-}
-function hasActiveForeignLease(row, leaseOwner, now) {
-    if (row.leaseOwner === leaseOwner) {
-        return false;
-    }
-    const currentOwner = normalizeString(row.leaseOwner);
-    if (!currentOwner) {
-        return false;
-    }
-    return !isPastDate(row.leaseExpiresAt, now);
-}
-function isPastDate(value, now) {
-    if (!value) {
-        return false;
-    }
-    const date = value instanceof Date ? value : new Date(value);
-    return !Number.isNaN(date.getTime()) && date.getTime() <= now.getTime();
-}
-async function findApprovalRow(webId, fetcher, id, options = {}) {
-    if (options.resourceUri) {
-        return readApprovalRowFromResource(fetcher, options.resourceUri);
-    }
-    if (options.createdAt) {
-        const createdAt = new Date(toIsoString(options.createdAt, new Date().toISOString()));
-        return readApprovalRowFromResource(fetcher, buildApprovalResourceUrl(webId, id, createdAt));
-    }
-    return (await listApprovalRows(webId, fetcher)).find((row) => row.id === id) ?? null;
-}
-async function readApprovalRowFromResource(fetcher, resourceUri) {
-    const turtle = await readTurtleResource(fetcher, documentUrlFromResourceUri(resourceUri));
-    if (!turtle) {
-        return null;
-    }
-    for (const [subject, predicates] of parseManagedTurtleBlocks(turtle, documentUrlFromResourceUri(resourceUri))) {
-        if (subject !== resourceUri) {
-            continue;
-        }
-        const row = approvalRowFromPredicates(subject, predicates);
-        if (row) {
-            return row;
-        }
-    }
-    return null;
-}
-async function listApprovalRows(webId, fetcher) {
-    const urls = [
-        ...recentApprovalDocumentUrls(webId),
-        ...await listTurtleResources(fetcher, `${resolvePodBaseUrl(webId)}/.data/approvals/`).catch(() => []),
-    ];
-    const rows = [];
-    for (const url of [...new Set(urls)].filter((entry) => entry.endsWith('.ttl'))) {
-        const turtle = await readTurtleResource(fetcher, url).catch(() => null);
-        if (!turtle)
-            continue;
-        for (const [subject, predicates] of parseManagedTurtleBlocks(turtle, url)) {
-            const row = approvalRowFromPredicates(subject, predicates);
-            if (row)
-                rows.push(row);
-        }
-    }
-    return rows;
-}
-function recentApprovalDocumentUrls(webId, days = DEFAULT_APPROVAL_LIST_DAYS) {
-    const urls = [];
-    const base = Date.now();
-    for (let offset = 0; offset < days; offset += 1) {
-        const date = new Date(base - offset * 24 * 60 * 60 * 1000);
-        urls.push(buildApprovalDocumentUrl(webId, date));
-    }
-    return urls;
-}
-async function writeApprovalRow(webId, fetcher, row) {
-    const createdAt = new Date(toIsoString(row.createdAt, new Date().toISOString()));
-    const documentUrl = buildApprovalDocumentUrl(webId, createdAt);
-    const subjectUrl = buildApprovalResourceUrl(webId, row.id, createdAt);
-    await upsertManagedTurtleBlock(fetcher, documentUrl, {
-        subject: subjectUrl,
-        triples: [
-            { predicate: RDF_TYPE, object: iri(UDFS.ApprovalRequest) },
-            { predicate: ApprovalVocab.session, object: iri(row.session) },
-            { predicate: ApprovalVocab.toolCallId, object: literal(row.toolCallId) },
-            { predicate: ApprovalVocab.toolName, object: literal(row.toolName) },
-            { predicate: ApprovalVocab.target, object: iri(row.target) },
-            { predicate: ApprovalVocab.action, object: iri(row.action) },
-            { predicate: ApprovalVocab.risk, object: literal(row.risk) },
-            { predicate: ApprovalVocab.status, object: literal(row.status) },
-            ...(row.leaseOwner ? [{ predicate: ApprovalVocab.leaseOwner, object: literal(row.leaseOwner) }] : []),
-            ...(row.leaseExpiresAt ? [{ predicate: ApprovalVocab.leaseExpiresAt, object: literal(toIsoString(row.leaseExpiresAt, new Date().toISOString())) }] : []),
-            ...(row.assignedTo ? [{ predicate: ApprovalVocab.assignedTo, object: iri(row.assignedTo) }] : []),
-            ...(row.decisionBy ? [{ predicate: ApprovalVocab.decisionBy, object: iri(row.decisionBy) }] : []),
-            ...(row.decisionRole ? [{ predicate: ApprovalVocab.decisionRole, object: literal(row.decisionRole) }] : []),
-            ...(row.onBehalfOf ? [{ predicate: ApprovalVocab.onBehalfOf, object: iri(row.onBehalfOf) }] : []),
-            ...(row.reason ? [{ predicate: ApprovalVocab.reason, object: literal(row.reason) }] : []),
-            ...(row.context ? [{ predicate: ApprovalVocab.context, object: literal(row.context) }] : []),
-            ...(row.approvalOptions ? [{ predicate: ApprovalVocab.approvalOptions, object: literal(row.approvalOptions) }] : []),
-            ...(row.policyVersion ? [{ predicate: ApprovalVocab.policyVersion, object: literal(row.policyVersion) }] : []),
-            { predicate: ApprovalVocab.createdAt, object: literal(toIsoString(row.createdAt, new Date().toISOString())) },
-            ...(row.expiresAt ? [{ predicate: ApprovalVocab.expiresAt, object: literal(toIsoString(row.expiresAt, new Date().toISOString())) }] : []),
-            ...(row.resolvedAt ? [{ predicate: ApprovalVocab.resolvedAt, object: literal(toIsoString(row.resolvedAt, new Date().toISOString())) }] : []),
-        ],
-    });
-}
-async function listAuditRows(webId, fetcher) {
-    const urls = await listTurtleResourcesRecursive(fetcher, `${resolvePodBaseUrl(webId)}/.data/audits/`);
-    const rows = [];
-    for (const url of urls.filter((entry) => entry.endsWith('.ttl'))) {
-        const turtle = await readTurtleResource(fetcher, url).catch(() => null);
-        if (!turtle)
-            continue;
-        for (const [subject, predicates] of parseManagedTurtleBlocks(turtle, url)) {
-            const row = auditRowFromPredicates(subject, predicates);
-            if (row)
-                rows.push(row);
-        }
-    }
-    return rows;
-}
-async function writeAuditRow(webId, fetcher, row) {
-    const createdAt = new Date(toIsoString(row.createdAt, new Date().toISOString()));
-    const documentUrl = buildAuditDocumentUrl(webId, createdAt);
-    const subjectUrl = buildAuditResourceUrl(webId, row.id, createdAt);
-    await upsertManagedTurtleBlock(fetcher, documentUrl, {
-        subject: subjectUrl,
-        triples: [
-            { predicate: RDF_TYPE, object: iri(UDFS.AuditEntry) },
-            { predicate: AuditVocab.action, object: literal(row.action) },
-            { predicate: AuditVocab.actor, object: iri(row.actor) },
-            { predicate: AuditVocab.actorRole, object: literal(row.actorRole) },
-            ...(row.onBehalfOf ? [{ predicate: AuditVocab.onBehalfOf, object: iri(row.onBehalfOf) }] : []),
-            ...(row.session ? [{ predicate: AuditVocab.session, object: iri(row.session) }] : []),
-            ...(row.entry ? [{ predicate: AuditVocab.entry, object: iri(row.entry) }] : []),
-            ...(row.toolCallId ? [{ predicate: AuditVocab.toolCallId, object: literal(row.toolCallId) }] : []),
-            ...(row.toolName ? [{ predicate: AuditVocab.toolName, object: literal(row.toolName) }] : []),
-            ...(row.approval ? [{ predicate: AuditVocab.approval, object: iri(row.approval) }] : []),
-            ...(row.policyVersion ? [{ predicate: AuditVocab.policyVersion, object: literal(row.policyVersion) }] : []),
-            { predicate: AuditVocab.createdAt, object: literal(toIsoString(row.createdAt, new Date().toISOString())) },
-        ],
-    });
-}
-async function listGrantRows(webId, fetcher) {
-    const urls = [
-        ...await listTurtleResources(fetcher, `${resolvePodBaseUrl(webId)}/settings/autonomy/grants/`).catch(() => []),
-    ];
-    const rows = [];
-    for (const url of urls.filter((entry) => entry.endsWith('.ttl'))) {
-        const turtle = await readTurtleResource(fetcher, url).catch(() => null);
-        if (!turtle)
-            continue;
-        for (const [subject, predicates] of parseManagedTurtleBlocks(turtle, url)) {
-            const row = grantRowFromPredicates(subject, predicates);
-            if (row)
-                rows.push(row);
-        }
-    }
-    return rows;
-}
-async function writeGrantRow(webId, fetcher, row) {
-    const id = normalizeString(row.id) ?? crypto.randomUUID();
-    const subjectUrl = buildGrantResourceUrl(webId, id);
-    const documentUrl = subjectUrl;
-    const target = normalizeString(row.target);
-    const action = normalizeString(row.action);
-    const effect = normalizeString(row.effect);
-    const decisionBy = normalizeString(row.decisionBy);
-    const decisionRole = normalizeString(row.decisionRole);
-    if (!target || !action || !effect || !decisionBy || !decisionRole) {
-        throw new Error(`Invalid remote approval grant row: ${id}`);
-    }
-    await upsertManagedTurtleBlock(fetcher, documentUrl, {
-        subject: subjectUrl,
-        triples: [
-            { predicate: RDF_TYPE, object: iri(ODRL.Policy) },
-            { predicate: RDF_TYPE, object: iri(UDFS.AutonomyGrant) },
-            { predicate: GrantVocab.target, object: iri(target) },
-            { predicate: GrantVocab.action, object: iri(action) },
-            ...(normalizeString(row.title) ? [{ predicate: GrantVocab.title, object: literal(truncatePodLiteral(normalizeString(row.title), 160)) }] : []),
-            ...(normalizeString(row.summary) ? [{ predicate: GrantVocab.summary, object: literal(truncatePodLiteral(normalizeString(row.summary), 500)) }] : []),
-            ...(normalizeString(row.body) ? [{ predicate: GrantVocab.description, object: literal(truncatePodLiteral(normalizeString(row.body), MAX_GRANT_POLICY_LENGTH)) }] : []),
-            ...(normalizeString(row.schema) ? [{ predicate: GrantVocab.schema, object: iri(normalizeString(row.schema)) }] : []),
-            ...(normalizeString(row.pageKind) ? [{ predicate: GrantVocab.pageKind, object: literal(normalizeString(row.pageKind)) }] : []),
-            ...(normalizeString(row.wikiStatus) ? [{ predicate: GrantVocab.wikiStatus, object: literal(normalizeString(row.wikiStatus)) }] : []),
-            ...(normalizeString(row.tags) ? [{ predicate: GrantVocab.tags, object: literal(truncatePodLiteral(normalizeString(row.tags), 500)) }] : []),
-            ...(normalizeString(row.source) ? [{ predicate: GrantVocab.source, object: literal(normalizeString(row.source)) }] : []),
-            ...(normalizeString(row.sourceHash) ? [{ predicate: GrantVocab.sourceHash, object: literal(normalizeString(row.sourceHash)) }] : []),
-            ...(row.compiledAt ? [{ predicate: GrantVocab.compiledAt, object: literal(toIsoString(row.compiledAt, new Date().toISOString())) }] : []),
-            ...(row.compiledFrom ?? []).map((value) => ({ predicate: GrantVocab.compiledFrom, object: iri(value) })),
-            ...(row.related ?? []).map((value) => ({ predicate: GrantVocab.related, object: iri(value) })),
-            { predicate: GrantVocab.effect, object: literal(effect) },
-            ...(normalizeString(row.riskCeiling) ? [{ predicate: GrantVocab.riskCeiling, object: literal(normalizeString(row.riskCeiling)) }] : []),
-            ...(normalizeString(row.policy) ? [{ predicate: GrantVocab.policy, object: literal(truncatePodLiteral(normalizeString(row.policy), MAX_GRANT_POLICY_LENGTH)) }] : []),
-            ...(normalizeString(row.context) ? [{ predicate: GrantVocab.context, object: literal(truncatePodLiteral(normalizeString(row.context), MAX_APPROVAL_CONTEXT_LENGTH)) }] : []),
-            { predicate: GrantVocab.decisionBy, object: iri(decisionBy) },
-            { predicate: GrantVocab.decisionRole, object: literal(decisionRole) },
-            ...(normalizeString(row.onBehalfOf) ? [{ predicate: GrantVocab.onBehalfOf, object: iri(normalizeString(row.onBehalfOf)) }] : []),
-            { predicate: GrantVocab.createdAt, object: literal(toIsoString(row.createdAt, new Date().toISOString())) },
-            ...(normalizeString(row.revokedAt) ? [{ predicate: GrantVocab.revokedAt, object: literal(normalizeString(row.revokedAt)) }] : []),
-        ],
-    });
-}
-async function writeInboxNotificationRow(webId, fetcher, row) {
-    const url = buildInboxResourceUrl(webId, row.id);
-    await upsertManagedTurtleBlock(fetcher, url, {
-        subject: url,
-        triples: [
-            { predicate: RDF_TYPE, object: iri(AS.Announce) },
-            ...(row.actor ? [{ predicate: InboxNotificationVocab.actor, object: iri(row.actor) }] : []),
-            { predicate: InboxNotificationVocab.object, object: iri(row.object) },
-            { predicate: InboxNotificationVocab.createdAt, object: literal(toIsoString(row.createdAt, new Date().toISOString())) },
-        ],
-    });
-}
-function approvalRowFromPredicates(url, predicates) {
-    const session = firstIri(predicates, ApprovalVocab.session);
-    const toolCallId = firstLiteral(predicates, ApprovalVocab.toolCallId);
-    const toolName = firstLiteral(predicates, ApprovalVocab.toolName);
-    const target = firstIri(predicates, ApprovalVocab.target);
-    const action = firstIri(predicates, ApprovalVocab.action);
-    const risk = firstLiteral(predicates, ApprovalVocab.risk);
-    const status = firstLiteral(predicates, ApprovalVocab.status);
-    const createdAt = firstLiteral(predicates, ApprovalVocab.createdAt);
-    if (!session || !toolCallId || !toolName || !target || !action || !risk || !status || !createdAt) {
-        return null;
-    }
-    return {
-        id: subjectIdFromResourceUrl(url),
-        session,
-        toolCallId,
-        toolName,
-        target,
-        action,
-        risk,
-        status,
-        leaseOwner: firstLiteral(predicates, ApprovalVocab.leaseOwner),
-        leaseExpiresAt: firstLiteral(predicates, ApprovalVocab.leaseExpiresAt),
-        assignedTo: firstIri(predicates, ApprovalVocab.assignedTo),
-        decisionBy: firstIri(predicates, ApprovalVocab.decisionBy),
-        decisionRole: firstLiteral(predicates, ApprovalVocab.decisionRole),
-        onBehalfOf: firstIri(predicates, ApprovalVocab.onBehalfOf),
-        reason: firstLiteral(predicates, ApprovalVocab.reason),
-        context: firstLiteral(predicates, ApprovalVocab.context),
-        approvalOptions: firstLiteral(predicates, ApprovalVocab.approvalOptions),
-        policyVersion: firstLiteral(predicates, ApprovalVocab.policyVersion),
-        createdAt,
-        expiresAt: firstLiteral(predicates, ApprovalVocab.expiresAt),
-        resolvedAt: firstLiteral(predicates, ApprovalVocab.resolvedAt),
-    };
-}
-function auditRowFromPredicates(url, predicates) {
-    const action = firstLiteral(predicates, AuditVocab.action);
-    const actor = firstIri(predicates, AuditVocab.actor);
-    const actorRole = firstLiteral(predicates, AuditVocab.actorRole);
-    const createdAt = firstLiteral(predicates, AuditVocab.createdAt);
-    if (!action || !actor || !actorRole || !createdAt) {
-        return null;
-    }
-    return {
-        id: subjectIdFromResourceUrl(url),
-        action,
-        actor,
-        actorRole,
-        onBehalfOf: firstIri(predicates, AuditVocab.onBehalfOf),
-        session: firstIri(predicates, AuditVocab.session),
-        entry: firstIri(predicates, AuditVocab.entry),
-        toolCallId: firstLiteral(predicates, AuditVocab.toolCallId),
-        toolName: firstLiteral(predicates, AuditVocab.toolName),
-        approval: firstIri(predicates, AuditVocab.approval),
-        policyVersion: firstLiteral(predicates, AuditVocab.policyVersion),
-        createdAt,
-    };
-}
-function grantRowFromPredicates(url, predicates) {
-    const target = firstIri(predicates, GrantVocab.target);
-    const action = firstIri(predicates, GrantVocab.action);
-    const effect = firstLiteral(predicates, GrantVocab.effect);
-    const decisionBy = firstIri(predicates, GrantVocab.decisionBy);
-    const decisionRole = firstLiteral(predicates, GrantVocab.decisionRole);
-    const createdAt = firstLiteral(predicates, GrantVocab.createdAt);
-    if (!target || !action || !effect || !decisionBy || !decisionRole || !createdAt) {
-        return null;
-    }
-    return {
-        id: subjectIdFromResourceUrl(url),
-        target,
-        action,
-        title: firstLiteral(predicates, GrantVocab.title),
-        summary: firstLiteralValue(predicates, GrantReadVocab.summary),
-        body: firstLiteralValue(predicates, GrantReadVocab.description),
-        schema: firstIri(predicates, GrantVocab.schema),
-        pageKind: firstLiteral(predicates, GrantVocab.pageKind),
-        wikiStatus: firstLiteral(predicates, GrantVocab.wikiStatus),
-        tags: firstLiteral(predicates, GrantVocab.tags),
-        source: firstLiteralValue(predicates, GrantReadVocab.source),
-        sourceHash: firstLiteral(predicates, GrantVocab.sourceHash),
-        compiledAt: firstLiteral(predicates, GrantVocab.compiledAt),
-        compiledFrom: iriValues(predicates, GrantVocab.compiledFrom),
-        related: iriValuesFrom(predicates, GrantReadVocab.related),
-        effect,
-        riskCeiling: firstLiteral(predicates, GrantVocab.riskCeiling),
-        policy: firstLiteral(predicates, GrantVocab.policy),
-        context: firstLiteral(predicates, GrantVocab.context),
-        decisionBy,
-        decisionRole,
-        onBehalfOf: firstIri(predicates, GrantVocab.onBehalfOf),
-        createdAt,
-        revokedAt: firstLiteral(predicates, GrantVocab.revokedAt),
-    };
-}
 function isActiveAllowGrant(grant) {
     return grant.effect === 'allow' && !grant.revokedAt && !!(normalizeString(grant.body) || normalizeString(grant.policy));
 }
@@ -1482,25 +900,4 @@ async function readRemoteApprovalRow(store, options) {
     const approvals = await store.listApprovals();
     return approvals.find((entry) => entry.id === options.approvalId) ?? null;
 }
-export const __podApprovalInternal = {
-    createAbortError,
-    createDefaultRuntime,
-    buildActionUri,
-    buildRisk,
-    buildToolName,
-    claimInboxNotificationControlResource,
-    createInboxNotificationControlResourceClaimHandler,
-    createSharedModelRemoteApprovalStore,
-    createNativeRemoteApprovalStore,
-    classifyInboxNotificationControlResource,
-    extractToolCallId,
-    decisionFromApprovalRow,
-    encodeDecisionReason: buildAutoModeApprovalDecisionReason,
-    formatSummaryHeadline,
-    grantSourceHash,
-    readRemoteApprovalRow,
-    isRemoteApprovalAbortError,
-    normalizeApprovalSummary,
-    parseDecisionReason: parseAutoModeApprovalDecisionReason,
-};
 //# sourceMappingURL=pod-approval.js.map