@vess-id/ai-identity 0.18.0 → 0.19.0

package/dist/index.js

@@ -8887,6 +8887,66 @@ var ACTION_REGISTRY = {
         resource_id: { source: "param", param: "to" }
       },
       version: "1.0.0"
+    },
+    // ─── PR-R2 (design §3.2): the raw booking executor's ONE new action ───
+    // The booking agent submits its scheduling proposal through a REAL PEP
+    // crossing instead of a managed custom_tool. Registered here in R2; the
+    // adapter dispatch case lands in R3.
+    //
+    // 🔴 risk: 'high' is deliberate and must NOT be downgraded. Every writing
+    // sibling (inbox.send / inbox.respond / scheduling.request) is high, and
+    // inbox.respond's own comment states that agent-mediated responses must
+    // always go through human approval. The approval basis here is the
+    // visitor's explicit "AIで日程調整する" click (or the flag-gated OIDC
+    // auto-consent), captured at mint time as a first-class ApprovalToken
+    // ledger row — NOT an absence of approval.
+    //
+    // 🪤 target_bindings.resource_id binds the BARE `itemId`. It must equal
+    // canonicalResourceId('scheduling.submit_response', { itemId }) exactly.
+    // A prefixed value (e.g. 'inbox:item/<id>') does not match the approval
+    // assertion at invoke time and the call SILENTLY falls through to
+    // auth_required (202) — no error surfaces, which is why the api side
+    // carries a preflight-parity spec asserting three-way equality
+    // (migration grant resource == assertion resource_id == invoke-time
+    // canonicalResourceId).
+    {
+      action: "scheduling.submit_response",
+      resource_type: "inbox:item",
+      required_relations: ["editor", "act_as"],
+      required_scopes: ["inbox"],
+      capability: "inbox.write",
+      input_schema: {
+        type: "object",
+        properties: {
+          itemId: { type: "string", minLength: 1, description: "The inbox item the proposal answers" },
+          decision: { type: "string", enum: ["propose", "decline"], description: "Whether the agent proposes slots or declines" },
+          slots: {
+            type: "array",
+            maxItems: 10,
+            description: "Proposed candidate slots (empty for a decline)",
+            items: {
+              type: "object",
+              properties: {
+                start: { type: "string", description: "ISO 8601 start" },
+                end: { type: "string", description: "ISO 8601 end" }
+              },
+              required: ["start", "end"],
+              additionalProperties: false
+            }
+          },
+          recommendedSlotIndex: { type: ["integer", "null"], description: "Index into slots of the recommended option, or null" },
+          recommendationReason: { type: "string", description: "Short rationale shown to the visitor" }
+        },
+        required: ["itemId", "decision"],
+        additionalProperties: false
+      },
+      constraints: { rate_bucket: "inbox.write" },
+      effects: ["Update:InboxItem"],
+      risk: "high",
+      target_bindings: {
+        resource_id: { source: "param", param: "itemId" }
+      },
+      version: "1.0.0"
     }
   ],
   capabilities: [
@@ -8983,7 +9043,7 @@ var ACTION_REGISTRY = {
     {
       capability: "inbox.write",
       description: "Send and respond to agent inbox tasks",
-      includes: ["inbox.send", "inbox.respond", "inbox.complete", "scheduling.request"],
+      includes: ["inbox.send", "inbox.respond", "inbox.complete", "scheduling.request", "scheduling.submit_response"],
       version: "1.0.0"
     },
     {
@@ -9043,18 +9103,6 @@ var ACTION_REGISTRY = {
         "linear.attachment.delete"
       ],
       version: "1.0.0"
-    },
-    {
-      capability: "inbox.write",
-      description: "Send and respond to agent inbox tasks",
-      includes: ["inbox.send", "inbox.respond", "inbox.complete", "scheduling.request"],
-      version: "1.0.0"
-    },
-    {
-      capability: "inbox.read",
-      description: "Read agent inbox tasks",
-      includes: ["inbox.check", "inbox.checkByToken"],
-      version: "1.0.0"
     }
   ]
 };
@@ -10267,6 +10315,21 @@ var ACTION_DISPLAY_CONFIGS = {
       { key: "candidates", label: "Candidates" },
       { key: "message", label: "Message" }
     ]
+  },
+  // PR-R2 (design §3.2), registry checklist B. This action is risk:'high', so
+  // its summary/displayFields are what a human actually reads in the approval
+  // and audit surfaces — the string is user-facing, not decoration. Names the
+  // item being answered (the counterpart anchor available on this action's
+  // params) the way scheduling.request names its topic.
+  "scheduling.submit_response": {
+    summaryTemplate: (p) => p.decision === "decline" ? `Decline the scheduling request for item ${p.itemId ?? "(unknown)"}` : `Submit a scheduling proposal for item ${p.itemId ?? "(unknown)"}`,
+    displayFields: [
+      { key: "itemId", label: "Inbox item" },
+      { key: "decision", label: "Decision" },
+      { key: "slots", label: "Proposed slots" },
+      { key: "recommendedSlotIndex", label: "Recommended index" },
+      { key: "recommendationReason", label: "Reason" }
+    ]
   }
 };
 function truncate(text, maxLength) {