@vess-id/ai-identity 0.19.0 → 0.20.0

package/dist/index.mjs

@@ -2576,6 +2576,8 @@ var CredentialType = /* @__PURE__ */ ((CredentialType2) => {
   CredentialType2["TEMPORARY"] = "TemporaryCredential";
   CredentialType2["ADMIN"] = "AdminCredential";
   CredentialType2["RECEIPT"] = "ReceiptCredential";
+  CredentialType2["ACCOUNT"] = "AccountCredential";
+  CredentialType2["AGENT_CARD"] = "AgentCardCredential";
   return CredentialType2;
 })(CredentialType || {});
 var CredentialStatus = /* @__PURE__ */ ((CredentialStatus2) => {
@@ -3022,6 +3024,38 @@ var DEFAULT_DISCLOSURE_CONFIGS = {
     mandatoryFields: [],
     neverDisclose: DEFAULT_NEVER_DISCLOSE
   },
+  // OEM ⑯ — account attributes an organisation asserts about the holder.
+  //
+  // Everything identifying is selective. An account credential is presented to
+  // decide whether an action is permitted, and that rarely requires knowing
+  // the account number or whose name is on it. Left always-disclosed, every
+  // verifier the holder ever presents to would learn both — and the fallback
+  // for an unregistered type is TEMPORARY, whose selectiveFields is empty,
+  // which is exactly that outcome. Hence this entry.
+  ["AccountCredential" /* ACCOUNT */]: {
+    selectiveFields: ["accountNumber", "accountHolderName", "branchCode"],
+    mandatoryFields: [],
+    neverDisclose: DEFAULT_NEVER_DISCLOSE
+  },
+  // OEM ⑯ Model C — the instance card.
+  //
+  // service_card_url and service_card_hash are absent from selectiveFields,
+  // which is what makes them always-disclosed: the hash proves the fetched
+  // card is the one the issuer signed over, and a holder able to withhold it
+  // could present a card body nobody attested to (AP2 binds checkout_hash for
+  // the same reason).
+  //
+  // 🔴 They are listed in mandatoryFields as documentation, NOT as
+  // enforcement. APIVCManager.issueSDJWTVC passes only `selectiveFields` to
+  // the SD-JWT builder — `mandatoryFields` and `neverDisclose` are not
+  // consumed on that path. Moving these three into selectiveFields would
+  // silently make the hash withholdable and nothing would fail, so the
+  // omission below is the actual guarantee.
+  ["AgentCardCredential" /* AGENT_CARD */]: {
+    selectiveFields: ["version"],
+    mandatoryFields: ["service_card_url", "service_card_hash", "service_id"],
+    neverDisclose: DEFAULT_NEVER_DISCLOSE
+  },
   ["ReceiptCredential" /* RECEIPT */]: {
     selectiveFields: ["action", "resource", "outcome", "amount", "description", "date", "transactionId"],
     mandatoryFields: ["grantId", "auditEventId", "receiptType"],
@@ -3938,6 +3972,13 @@ var actionMetaSchema = {
     },
     risk: { type: "string", enum: ["low", "medium", "high", "critical"] },
     target_bindings: { type: "object" },
+    // Approval-salient parameter names (P1 / #1205). Optional at the schema
+    // level (legacy/low-risk actions may omit it); the completeness test makes
+    // it mandatory for every high/critical action.
+    approval_salient_fields: {
+      type: "array",
+      items: { type: "string", minLength: 1 }
+    },
     version: { type: "string", minLength: 1 }
   }
 };
@@ -4372,6 +4413,16 @@ var ACTION_REGISTRY = {
       target_bindings: {
         resource_id: { source: "param", param: "channel" }
       },
+      // #1205 P1: `channel` IS approval-critical (the human approved posting to
+      // THAT channel) so it is declared salient. ⚠️ HOLE 2 (plan §0.5, resolved
+      // in Step 4.6): the server normalizes `channel` (#name → native Cxxx id)
+      // at execution via a LIVE Slack lookup, so the issued-time digest
+      // (hash of "#general") and the PEP-time digest (hash of "C09…") diverge and
+      // a legitimate approved post fail-closes. Step 4.6 must resolve the
+      // name→id AT APPROVAL TIME and freeze it into actionParams so all
+      // participants hash the same effective value. Do NOT drop `channel` from
+      // this set to paper over HOLE 2 — that would unbind the approved target.
+      approval_salient_fields: ["channel", "text", "blocks"],
       version: "1.0.0"
     },
     {
@@ -4513,6 +4564,7 @@ var ACTION_REGISTRY = {
       target_bindings: {
         resource_id: { source: "param", param: "channel" }
       },
+      approval_salient_fields: ["channel", "ts", "text"],
       version: "1.0.0"
     },
     {
@@ -4536,6 +4588,7 @@ var ACTION_REGISTRY = {
       target_bindings: {
         resource_id: { source: "param", param: "channel" }
       },
+      approval_salient_fields: ["channel", "ts"],
       version: "1.0.0"
     },
     // ─── GitHub Actions ───
@@ -4568,6 +4621,11 @@ var ACTION_REGISTRY = {
       target_bindings: {
         resource_id: { source: "param", param: "repo", fallback_param: "repository" }
       },
+      // #1205 P1: assignees (who the issue is assigned to) is approval-critical —
+      // an agent could otherwise reassign it post-approval. labels are part of
+      // the approved issue definition. (milestone is an integer id; not
+      // substance-of-approval so left out — see completeness-test allowlist.)
+      approval_salient_fields: ["owner", "repo", "title", "body", "assignees", "labels"],
       version: "1.0.0"
     },
     {
@@ -4658,6 +4716,10 @@ var ACTION_REGISTRY = {
       target_bindings: {
         resource_id: { source: "param", param: "repo", fallback_param: "repository" }
       },
+      // #1205 P1: assignees (who the issue is assigned to) is approval-critical —
+      // an agent could otherwise reassign it post-approval. labels are part of
+      // the approved change.
+      approval_salient_fields: ["owner", "repo", "issueNumber", "title", "body", "state", "assignees", "labels"],
       version: "1.0.0"
     },
     // ─── GitHub Pull Request Actions ───
@@ -4687,6 +4749,9 @@ var ACTION_REGISTRY = {
       target_bindings: {
         resource_id: { source: "context", key: "resource_id" }
       },
+      // #1205 P1: draft changes the real-world effect (a non-draft PR notifies
+      // reviewers / can be merged immediately), so it is approval-critical.
+      approval_salient_fields: ["owner", "repo", "title", "head", "base", "body", "draft"],
       version: "1.0.0"
     },
     {
@@ -4769,6 +4834,7 @@ var ACTION_REGISTRY = {
       target_bindings: {
         resource_id: { source: "context", key: "resource_id" }
       },
+      approval_salient_fields: ["owner", "repo", "pullNumber", "title", "body", "state", "base"],
       version: "1.0.0"
     },
     {
@@ -4796,6 +4862,9 @@ var ACTION_REGISTRY = {
       target_bindings: {
         resource_id: { source: "context", key: "resource_id" }
       },
+      // #1205 P1: commitTitle/commitMessage are persisted into the merge commit
+      // (permanent git history), so they are approval-critical.
+      approval_salient_fields: ["owner", "repo", "pullNumber", "mergeMethod", "commitTitle", "commitMessage"],
       version: "1.0.0"
     },
     {
@@ -4872,6 +4941,7 @@ var ACTION_REGISTRY = {
       target_bindings: {
         resource_id: { source: "context", key: "resource_id" }
       },
+      approval_salient_fields: ["owner", "repo", "pullNumber", "event", "body"],
       version: "1.0.0"
     },
     {
@@ -4898,6 +4968,7 @@ var ACTION_REGISTRY = {
       target_bindings: {
         resource_id: { source: "context", key: "resource_id" }
       },
+      approval_salient_fields: ["owner", "repo", "pullNumber", "commentId", "body"],
       version: "1.0.0"
     },
     {
@@ -4923,6 +4994,7 @@ var ACTION_REGISTRY = {
       target_bindings: {
         resource_id: { source: "context", key: "resource_id" }
       },
+      approval_salient_fields: ["owner", "repo", "pullNumber"],
       version: "1.0.0"
     },
     {
@@ -5301,6 +5373,7 @@ var ACTION_REGISTRY = {
       target_bindings: {
         resource_id: { source: "context", key: "resource_id" }
       },
+      approval_salient_fields: ["name", "org", "private"],
       version: "1.0.0"
     },
     {
@@ -5325,6 +5398,7 @@ var ACTION_REGISTRY = {
       target_bindings: {
         resource_id: { source: "context", key: "resource_id" }
       },
+      approval_salient_fields: ["owner", "repo", "organization"],
       version: "1.0.0"
     },
     {
@@ -5353,6 +5427,14 @@ var ACTION_REGISTRY = {
       target_bindings: {
         resource_id: { source: "context", key: "resource_id" }
       },
+      // #1205 P1: sha is a version pin (the blob revision being overwritten). The
+      // executor forwards params.sha verbatim — never recomputed/refetched between
+      // approval and execution (github.service.ts:1194) — so binding it causes NO
+      // false-fail-closed; an unbound sha would let an agent overwrite a different
+      // file revision than the human reviewed. On create sha is omitted → the
+      // serializer represents the missing key as JSON null (salient-digest rule 2),
+      // stable on both issued and PEP sides.
+      approval_salient_fields: ["owner", "repo", "path", "content", "message", "branch", "sha"],
       version: "1.0.0"
     },
     {
@@ -5380,6 +5462,11 @@ var ACTION_REGISTRY = {
       target_bindings: {
         resource_id: { source: "context", key: "resource_id" }
       },
+      // #1205 P1: sha (required here) pins the exact blob being deleted; forwarded
+      // verbatim to the API, so binding it prevents an agent from swapping the
+      // target revision post-approval. Same no-false-fail-closed reasoning as
+      // github.content.createOrUpdate.
+      approval_salient_fields: ["owner", "repo", "path", "message", "branch", "sha"],
       version: "1.0.0"
     },
     {
@@ -5405,6 +5492,7 @@ var ACTION_REGISTRY = {
       target_bindings: {
         resource_id: { source: "context", key: "resource_id" }
       },
+      approval_salient_fields: ["owner", "repo", "branch", "fromBranch"],
       version: "1.0.0"
     },
     // ─── GitHub Issues 拡張 & Labels Actions ───
@@ -5431,6 +5519,7 @@ var ACTION_REGISTRY = {
       target_bindings: {
         resource_id: { source: "context", key: "resource_id" }
       },
+      approval_salient_fields: ["owner", "repo", "issueNumber", "body"],
       version: "1.0.0"
     },
     {
@@ -5456,6 +5545,7 @@ var ACTION_REGISTRY = {
       target_bindings: {
         resource_id: { source: "context", key: "resource_id" }
       },
+      approval_salient_fields: ["owner", "repo", "issueNumber", "subIssueId"],
       version: "1.0.0"
     },
     {
@@ -5580,6 +5670,7 @@ var ACTION_REGISTRY = {
       target_bindings: {
         resource_id: { source: "context", key: "resource_id" }
       },
+      approval_salient_fields: ["owner", "repo", "name", "newName"],
       version: "1.0.0"
     },
     // ─── GitHub Actions(CI) / Stargazers / Context / Users Actions ───
@@ -5666,6 +5757,7 @@ var ACTION_REGISTRY = {
       target_bindings: {
         resource_id: { source: "context", key: "resource_id" }
       },
+      approval_salient_fields: ["owner", "repo", "workflowId", "ref"],
       version: "1.0.0"
     },
     {
@@ -5738,6 +5830,7 @@ var ACTION_REGISTRY = {
       target_bindings: {
         resource_id: { source: "context", key: "resource_id" }
       },
+      approval_salient_fields: ["owner", "repo"],
       version: "1.0.0"
     },
     {
@@ -5761,6 +5854,7 @@ var ACTION_REGISTRY = {
       target_bindings: {
         resource_id: { source: "context", key: "resource_id" }
       },
+      approval_salient_fields: ["owner", "repo"],
       version: "1.0.0"
     },
     {
@@ -5928,6 +6022,7 @@ var ACTION_REGISTRY = {
       target_bindings: {
         resource_id: { source: "context", key: "resource_id" }
       },
+      approval_salient_fields: ["threadId"],
       version: "1.0.0"
     },
     {
@@ -5950,6 +6045,7 @@ var ACTION_REGISTRY = {
       target_bindings: {
         resource_id: { source: "context", key: "resource_id" }
       },
+      approval_salient_fields: ["lastReadAt"],
       version: "1.0.0"
     },
     {
@@ -5973,6 +6069,7 @@ var ACTION_REGISTRY = {
       target_bindings: {
         resource_id: { source: "context", key: "resource_id" }
       },
+      approval_salient_fields: ["threadId", "ignored"],
       version: "1.0.0"
     },
     {
@@ -5998,6 +6095,7 @@ var ACTION_REGISTRY = {
       target_bindings: {
         resource_id: { source: "context", key: "resource_id" }
       },
+      approval_salient_fields: ["owner", "repo", "subscribed", "ignored"],
       version: "1.0.0"
     },
     {
@@ -6026,6 +6124,7 @@ var ACTION_REGISTRY = {
       target_bindings: {
         resource_id: { source: "context", key: "resource_id" }
       },
+      approval_salient_fields: ["files", "description", "public"],
       version: "1.0.0"
     },
     {
@@ -6101,6 +6200,7 @@ var ACTION_REGISTRY = {
       target_bindings: {
         resource_id: { source: "context", key: "resource_id" }
       },
+      approval_salient_fields: ["gistId", "files", "description"],
       version: "1.0.0"
     },
     // ─── Gmail Actions ───
@@ -6180,6 +6280,7 @@ var ACTION_REGISTRY = {
           { name: "bcc", source: { source: "param", param: "bcc" }, type: "recipient" }
         ]
       },
+      approval_salient_fields: ["to", "cc", "bcc", "subject", "body"],
       version: "1.0.0"
     },
     {
@@ -6213,6 +6314,7 @@ var ACTION_REGISTRY = {
           { name: "bcc", source: { source: "param", param: "bcc" }, type: "recipient" }
         ]
       },
+      approval_salient_fields: ["to", "cc", "bcc", "subject", "body"],
       version: "1.0.0"
     },
     {
@@ -6281,6 +6383,7 @@ var ACTION_REGISTRY = {
       target_bindings: {
         resource_id: { source: "param", param: "messageId" }
       },
+      approval_salient_fields: ["messageId"],
       version: "1.0.0"
     },
     {
@@ -6303,6 +6406,7 @@ var ACTION_REGISTRY = {
       target_bindings: {
         resource_id: { source: "param", param: "messageId" }
       },
+      approval_salient_fields: ["messageId"],
       version: "1.0.0"
     },
     // ─── Calendar Actions ───
@@ -6427,6 +6531,9 @@ var ACTION_REGISTRY = {
           { name: "attendees", source: { source: "param", param: "attendees" }, type: "participant" }
         ]
       },
+      // #1205 P1: addMeet changes the real-world effect (attaches a Google Meet
+      // link / video conference), so it is approval-critical.
+      approval_salient_fields: ["calendarId", "summary", "description", "start", "end", "attendees", "location", "addMeet"],
       version: "1.0.0"
     },
     {
@@ -6477,6 +6584,9 @@ var ACTION_REGISTRY = {
           { name: "attendees", source: { source: "param", param: "attendees" }, type: "participant" }
         ]
       },
+      // #1205 P1: addMeet changes the real-world effect (attaches a Google Meet
+      // link), so it is approval-critical.
+      approval_salient_fields: ["calendarId", "eventId", "summary", "description", "start", "end", "attendees", "location", "addMeet"],
       version: "1.0.0"
     },
     {
@@ -6500,6 +6610,7 @@ var ACTION_REGISTRY = {
       target_bindings: {
         resource_id: { source: "param", param: "calendarId", default: "primary" }
       },
+      approval_salient_fields: ["calendarId", "eventId"],
       version: "1.0.0"
     },
     // ─── Jira Actions ───
@@ -6692,6 +6803,10 @@ var ACTION_REGISTRY = {
       target_bindings: {
         resource_id: { source: "param", param: "projectKey" }
       },
+      // #1205 P1: assigneeAccountId (who the issue is assigned to) is
+      // approval-critical — an agent could otherwise reassign it post-approval.
+      // labels are part of the approved issue definition.
+      approval_salient_fields: ["projectKey", "summary", "description", "issueTypeName", "assigneeAccountId", "labels"],
       version: "1.0.0"
     },
     {
@@ -6703,6 +6818,15 @@ var ACTION_REGISTRY = {
       input_schema: {
         type: "object",
         properties: {
+          // #1205 P1 / HOLE 2 audit (Step 4.7): issueIdOrKey accepts EITHER a
+          // project key form ("PROJ-123") OR a numeric internal id. VERIFIED:
+          // it is passed VERBATIM into the Jira REST URL path
+          // `/api/3/issue/{issueIdOrKey}` (jira.service.ts) — the API accepts
+          // both forms and nothing canonicalizes one to the other, and no pre-PEP
+          // mutation touches jira params (only normalizeSlackChannelParam mutates,
+          // slack-only). So issuance digest == PEP digest for whichever form the
+          // approver approved — NO resolve-at-approval-time needed (unlike slack
+          // channel). Regression guard: salient-digest.test.ts Step 4.7 block.
           issueIdOrKey: { type: "string", minLength: 1 },
           summary: { type: "string" },
           description: {
@@ -6725,6 +6849,9 @@ var ACTION_REGISTRY = {
       target_bindings: {
         resource_id: { source: "param", param: "issueIdOrKey", fallback_param: "issueKey", derive: "project_key" }
       },
+      // #1205 P1: assigneeAccountId (reassignment) is approval-critical; labels
+      // are part of the approved change. Same rationale as jira.issue.create.
+      approval_salient_fields: ["issueIdOrKey", "summary", "description", "assigneeAccountId", "labels"],
       version: "1.0.0"
     },
     {
@@ -6747,6 +6874,7 @@ var ACTION_REGISTRY = {
       target_bindings: {
         resource_id: { source: "param", param: "issueIdOrKey", fallback_param: "issueKey", derive: "project_key" }
       },
+      approval_salient_fields: ["issueIdOrKey"],
       version: "1.0.0"
     },
     {
@@ -6777,6 +6905,7 @@ var ACTION_REGISTRY = {
       target_bindings: {
         resource_id: { source: "param", param: "issueIdOrKey", fallback_param: "issueKey", derive: "project_key" }
       },
+      approval_salient_fields: ["issueIdOrKey", "body"],
       version: "1.0.0"
     },
     {
@@ -6805,6 +6934,7 @@ var ACTION_REGISTRY = {
       target_bindings: {
         resource_id: { source: "param", param: "issueIdOrKey", fallback_param: "issueKey", derive: "project_key" }
       },
+      approval_salient_fields: ["issueIdOrKey", "commentId"],
       version: "1.0.0"
     },
     {
@@ -6850,6 +6980,7 @@ var ACTION_REGISTRY = {
       target_bindings: {
         resource_id: { source: "param", param: "issueIdOrKey", fallback_param: "issueKey", derive: "project_key" }
       },
+      approval_salient_fields: ["issueIdOrKey", "transitionId"],
       version: "1.0.0"
     },
     {
@@ -6924,6 +7055,7 @@ var ACTION_REGISTRY = {
         // 完全な制御をしたい場合は別途 inwardIssueKey 側も grant チェックする運用を要する。
         resource_id: { source: "param", param: "outwardIssueKey", derive: "project_key" }
       },
+      approval_salient_fields: ["typeName", "inwardIssueKey", "outwardIssueKey", "commentBody"],
       version: "1.0.0"
     },
     {
@@ -6946,6 +7078,7 @@ var ACTION_REGISTRY = {
       target_bindings: {
         resource_id: { source: "param", param: "linkId" }
       },
+      approval_salient_fields: ["linkId"],
       version: "1.0.0"
     },
     {
@@ -7027,6 +7160,7 @@ var ACTION_REGISTRY = {
       target_bindings: {
         resource_id: { source: "param", param: "file_path" }
       },
+      approval_salient_fields: ["file_path"],
       version: "1.0.0"
     },
     {
@@ -7048,6 +7182,7 @@ var ACTION_REGISTRY = {
       target_bindings: {
         resource_id: { source: "param", param: "file_path" }
       },
+      approval_salient_fields: ["file_path", "content"],
       version: "1.0.0"
     },
     {
@@ -7084,6 +7219,7 @@ var ACTION_REGISTRY = {
       target_bindings: {
         resource_id: { source: "param", param: "command" }
       },
+      approval_salient_fields: ["command", "working_directory", "env_profile"],
       version: "1.0.0"
     },
     // ─── HubSpot CRM Objects (objectType 汎用) ───
@@ -7204,6 +7340,7 @@ var ACTION_REGISTRY = {
       target_bindings: {
         resource_id: { source: "param", param: "objectType" }
       },
+      approval_salient_fields: ["objectType", "inputs"],
       version: "1.0.0"
     },
     {
@@ -7236,6 +7373,7 @@ var ACTION_REGISTRY = {
       target_bindings: {
         resource_id: { source: "param", param: "objectType" }
       },
+      approval_salient_fields: ["objectType", "inputs"],
       version: "1.0.0"
     },
     {
@@ -7325,6 +7463,7 @@ var ACTION_REGISTRY = {
       effects: ["Create:CrmProperty"],
       risk: "high",
       target_bindings: { resource_id: { source: "param", param: "objectType" } },
+      approval_salient_fields: ["objectType", "name", "label", "type", "fieldType"],
       version: "1.0.0"
     },
     {
@@ -7352,6 +7491,7 @@ var ACTION_REGISTRY = {
       effects: ["Update:CrmProperty"],
       risk: "high",
       target_bindings: { resource_id: { source: "param", param: "objectType" } },
+      approval_salient_fields: ["objectType", "propertyName", "label"],
       version: "1.0.0"
     },
     // ─── HubSpot Associations (v4) ───
@@ -7420,6 +7560,7 @@ var ACTION_REGISTRY = {
       effects: ["Create:CrmAssociation"],
       risk: "high",
       target_bindings: { resource_id: { source: "param", param: "fromObjectType" } },
+      approval_salient_fields: ["fromObjectType", "toObjectType", "inputs"],
       version: "1.0.0"
     },
     // ─── HubSpot Engagements (legacy v1: NOTE / TASK) ───
@@ -7451,8 +7592,20 @@ var ACTION_REGISTRY = {
         type: "object",
         properties: {
           type: { type: "string", enum: ["NOTE", "TASK"] },
-          ownerId: { type: "number" },
-          timestamp: { type: "number" },
+          // #1205 P1: HubSpot owner ids are integers; retyped from `number` to
+          // `integer` so this ownership field is bindable (float-ban rule 5).
+          // DRIFT (follow-up, out of Step 2 scope): the API adapter still types
+          // ownerId/timestamp as `number` (hubspot.adapter.ts:294-295,317-318).
+          // No test enforces registry↔adapter type identity, so nothing breaks;
+          // a later step should align the adapter schemas to `integer`.
+          ownerId: { type: "integer" },
+          // #1205 P1: caller-supplied epoch-ms activity time when present, else
+          // the service defaults to Date.now() (hubspot.service.ts:555
+          // `params.timestamp ?? Date.now()`). Retyped to `integer` (epoch ms)
+          // so it is bindable; when the caller omits it both the issued and PEP
+          // digests see the same JSON null (the default is applied server-side
+          // AFTER the salient params are read), so binding it is safe.
+          timestamp: { type: "integer" },
           associations: { type: "object" },
           metadata: { type: "object" }
         },
@@ -7465,6 +7618,10 @@ var ACTION_REGISTRY = {
       // Bind to the engagement type (NOTE/TASK) as the container that exists at
       // call time, consistent with other create actions (see CREATE-binding note above).
       target_bindings: { resource_id: { source: "param", param: "type" } },
+      // #1205 P1: ownerId (who owns the engagement) is approval-critical — an
+      // agent could otherwise reassign ownership post-approval. timestamp binds
+      // the activity time. associations/metadata carry the note/task substance.
+      approval_salient_fields: ["type", "ownerId", "timestamp", "associations", "metadata"],
       version: "1.0.0"
     },
     {
@@ -7477,8 +7634,13 @@ var ACTION_REGISTRY = {
         type: "object",
         properties: {
           engagementId: { type: "string" },
-          ownerId: { type: "number" },
-          timestamp: { type: "number" },
+          // #1205 P1: retyped `number` → `integer` (HubSpot owner id) so this
+          // ownership field is bindable (float-ban rule 5).
+          ownerId: { type: "integer" },
+          // #1205 P1: caller-supplied epoch-ms activity time (update sets it
+          // directly, no default here — hubspot.service.ts:577 only assigns when
+          // provided). Retyped to `integer` so it is bindable.
+          timestamp: { type: "integer" },
           associations: { type: "object" },
           metadata: { type: "object" }
         },
@@ -7489,6 +7651,9 @@ var ACTION_REGISTRY = {
       effects: ["Update:CrmEngagement"],
       risk: "high",
       target_bindings: { resource_id: { source: "param", param: "engagementId" } },
+      // #1205 P1: ownerId (reassignment) + timestamp are approval-critical on
+      // update, same as create.
+      approval_salient_fields: ["engagementId", "ownerId", "timestamp", "metadata"],
       version: "1.0.0"
     },
     // ─── HubSpot Workflows (automation v4 flows, read-only) ───
@@ -7659,7 +7824,11 @@ var ACTION_REGISTRY = {
           description: { type: "string", description: "Issue description (Markdown)" },
           assigneeId: { type: "string", description: "Assignee user ID" },
           stateId: { type: "string", description: "Workflow state ID" },
-          priority: { type: "number", minimum: 0, maximum: 4, description: "0=No priority, 1=Urgent, 2=High, 3=Medium, 4=Low" },
+          // #1205 P1: priority is always an integer 0-4; retyped `number` →
+          // `integer` so it is bindable (float-ban rule 5). DRIFT (follow-up): the
+          // API adapter still types priority as `number` (linear.adapter.ts:93,112);
+          // align in a later step (no test enforces the mirror, nothing breaks).
+          priority: { type: "integer", minimum: 0, maximum: 4, description: "0=No priority, 1=Urgent, 2=High, 3=Medium, 4=Low" },
           labelIds: { type: "array", items: { type: "string" }, description: "Label IDs to attach" }
         },
         required: ["teamId", "title"],
@@ -7671,6 +7840,10 @@ var ACTION_REGISTRY = {
       target_bindings: {
         resource_id: { source: "param", param: "teamId" }
       },
+      // #1205 P1: assigneeId (who the issue is assigned to) is approval-critical
+      // — an agent could otherwise reassign the issue post-approval. priority and
+      // labelIds are part of the approved issue definition.
+      approval_salient_fields: ["teamId", "title", "description", "assigneeId", "priority", "labelIds"],
       version: "1.0.0"
     },
     {
@@ -7682,12 +7855,23 @@ var ACTION_REGISTRY = {
       input_schema: {
         type: "object",
         properties: {
+          // #1205 P1 / HOLE 2 audit (Step 4.7): issueId accepts EITHER a uuid OR
+          // a human identifier like "ENG-123". VERIFIED: it is passed VERBATIM
+          // into the Linear GraphQL `issue(id: $issueId)` / `issueUpdate(id:)`
+          // arg (linear.service.ts) — the API accepts both forms and nothing
+          // canonicalizes identifier→uuid, and no pre-PEP mutation touches linear
+          // params (only normalizeSlackChannelParam mutates, slack-only). So
+          // issuance digest == PEP digest for whichever form the approver
+          // approved — NO resolve-at-approval-time needed (unlike slack channel).
+          // Regression guard: salient-digest.test.ts Step 4.7 block. Do NOT drop
+          // issueId (it IS the target).
           issueId: { type: "string", minLength: 1, description: "Issue ID or identifier (e.g. ENG-123)" },
           title: { type: "string", description: "New title" },
           description: { type: "string", description: "New description (Markdown)" },
           assigneeId: { type: "string", description: "Assignee user ID (null to unassign)" },
           stateId: { type: "string", description: "Workflow state ID" },
-          priority: { type: "number", minimum: 0, maximum: 4, description: "0=No priority, 1=Urgent, 2=High, 3=Medium, 4=Low" },
+          // #1205 P1: retyped `number` → `integer` (priority is always int 0-4).
+          priority: { type: "integer", minimum: 0, maximum: 4, description: "0=No priority, 1=Urgent, 2=High, 3=Medium, 4=Low" },
           labelIds: { type: "array", items: { type: "string" }, description: "New set of label IDs" }
         },
         required: ["issueId"],
@@ -7699,6 +7883,9 @@ var ACTION_REGISTRY = {
       target_bindings: {
         resource_id: { source: "param", param: "issueId" }
       },
+      // #1205 P1: assigneeId (reassignment) is approval-critical; priority and
+      // labelIds are part of the approved change.
+      approval_salient_fields: ["issueId", "title", "description", "assigneeId", "stateId", "priority", "labelIds"],
       version: "1.0.0"
     },
     {
@@ -7722,6 +7909,7 @@ var ACTION_REGISTRY = {
       target_bindings: {
         resource_id: { source: "param", param: "issueId" }
       },
+      approval_salient_fields: ["issueId", "body"],
       version: "1.0.0"
     },
     {
@@ -7923,6 +8111,7 @@ var ACTION_REGISTRY = {
       target_bindings: {
         resource_id: { source: "param", param: "issueId" }
       },
+      approval_salient_fields: ["issueId"],
       version: "1.0.0"
     },
     {
@@ -7958,6 +8147,7 @@ var ACTION_REGISTRY = {
         // resource binding 必須契約を明示 (teamIds は minItems:1 なので常に解決する)。
         resource_id: { source: "param", param: "teamId", fallback_param: "teamIds", required: true }
       },
+      approval_salient_fields: ["teamId", "teamIds", "name", "description"],
       version: "1.0.0"
     },
     {
@@ -7985,6 +8175,7 @@ var ACTION_REGISTRY = {
       target_bindings: {
         resource_id: { source: "param", param: "projectId" }
       },
+      approval_salient_fields: ["projectId", "name", "description"],
       version: "1.0.0"
     },
     // ─── Linear Comment ops ───
@@ -8009,6 +8200,7 @@ var ACTION_REGISTRY = {
       target_bindings: {
         resource_id: { source: "param", param: "commentId" }
       },
+      approval_salient_fields: ["commentId", "body"],
       version: "1.0.0"
     },
     {
@@ -8031,6 +8223,7 @@ var ACTION_REGISTRY = {
       target_bindings: {
         resource_id: { source: "param", param: "commentId" }
       },
+      approval_salient_fields: ["commentId"],
       version: "1.0.0"
     },
     {
@@ -8053,6 +8246,7 @@ var ACTION_REGISTRY = {
       target_bindings: {
         resource_id: { source: "param", param: "commentId" }
       },
+      approval_salient_fields: ["commentId"],
       version: "1.0.0"
     },
     {
@@ -8075,6 +8269,7 @@ var ACTION_REGISTRY = {
       target_bindings: {
         resource_id: { source: "param", param: "commentId" }
       },
+      approval_salient_fields: ["commentId"],
       version: "1.0.0"
     },
     // ─── Linear Issue ops ───
@@ -8098,6 +8293,7 @@ var ACTION_REGISTRY = {
       target_bindings: {
         resource_id: { source: "param", param: "issueId" }
       },
+      approval_salient_fields: ["issueId"],
       version: "1.0.0"
     },
     {
@@ -8121,6 +8317,7 @@ var ACTION_REGISTRY = {
       target_bindings: {
         resource_id: { source: "param", param: "issueId" }
       },
+      approval_salient_fields: ["issueId", "labelId"],
       version: "1.0.0"
     },
     {
@@ -8144,6 +8341,7 @@ var ACTION_REGISTRY = {
       target_bindings: {
         resource_id: { source: "param", param: "issueId" }
       },
+      approval_salient_fields: ["issueId", "labelId"],
       version: "1.0.0"
     },
     {
@@ -8166,6 +8364,7 @@ var ACTION_REGISTRY = {
       target_bindings: {
         resource_id: { source: "param", param: "issueId" }
       },
+      approval_salient_fields: ["issueId"],
       version: "1.0.0"
     },
     {
@@ -8188,6 +8387,7 @@ var ACTION_REGISTRY = {
       target_bindings: {
         resource_id: { source: "param", param: "issueId" }
       },
+      approval_salient_fields: ["issueId"],
       version: "1.0.0"
     },
     // ─── Linear Issue Relations ───
@@ -8213,6 +8413,7 @@ var ACTION_REGISTRY = {
       target_bindings: {
         resource_id: { source: "param", param: "issueId" }
       },
+      approval_salient_fields: ["issueId", "relatedIssueId", "type"],
       version: "1.0.0"
     },
     {
@@ -8257,6 +8458,7 @@ var ACTION_REGISTRY = {
       target_bindings: {
         resource_id: { source: "param", param: "relationId" }
       },
+      approval_salient_fields: ["relationId"],
       version: "1.0.0"
     },
     // ─── Linear Cycles ───
@@ -8328,6 +8530,7 @@ var ACTION_REGISTRY = {
       target_bindings: {
         resource_id: { source: "param", param: "teamId" }
       },
+      approval_salient_fields: ["teamId", "name", "startsAt", "endsAt"],
       version: "1.0.0"
     },
     {
@@ -8355,6 +8558,7 @@ var ACTION_REGISTRY = {
       target_bindings: {
         resource_id: { source: "param", param: "cycleId" }
       },
+      approval_salient_fields: ["cycleId", "name", "startsAt", "endsAt"],
       version: "1.0.0"
     },
     // ─── Linear Labels ───
@@ -8381,6 +8585,7 @@ var ACTION_REGISTRY = {
       target_bindings: {
         resource_id: { source: "param", param: "teamId", required: false }
       },
+      approval_salient_fields: ["teamId", "name"],
       version: "1.0.0"
     },
     {
@@ -8406,6 +8611,7 @@ var ACTION_REGISTRY = {
       target_bindings: {
         resource_id: { source: "param", param: "labelId" }
       },
+      approval_salient_fields: ["labelId", "name"],
       version: "1.0.0"
     },
     // ─── Linear Attachments ───
@@ -8432,6 +8638,7 @@ var ACTION_REGISTRY = {
       target_bindings: {
         resource_id: { source: "param", param: "issueId" }
       },
+      approval_salient_fields: ["issueId", "title", "url"],
       version: "1.0.0"
     },
     {
@@ -8476,6 +8683,7 @@ var ACTION_REGISTRY = {
       target_bindings: {
         resource_id: { source: "param", param: "attachmentId" }
       },
+      approval_salient_fields: ["attachmentId"],
       version: "1.0.0"
     },
     // ─── Agent Inbox Actions (internal) ───
@@ -8506,6 +8714,7 @@ var ACTION_REGISTRY = {
       target_bindings: {
         resource_id: { source: "param", param: "to" }
       },
+      approval_salient_fields: ["to", "taskType", "payload", "message"],
       version: "1.0.0"
     },
     {
@@ -8536,6 +8745,7 @@ var ACTION_REGISTRY = {
       target_bindings: {
         resource_id: { source: "param", param: "id" }
       },
+      approval_salient_fields: ["id", "action", "data"],
       version: "1.0.0"
     },
     {
@@ -8708,6 +8918,10 @@ var ACTION_REGISTRY = {
       target_bindings: {
         resource_id: { source: "param", param: "to" }
       },
+      // #1205 P1: hold changes the real-world effect — when true it tentatively
+      // books [仮] events on the sender's calendar for every offered slot, so it
+      // is approval-critical.
+      approval_salient_fields: ["to", "topic", "durationMinutes", "candidates", "candidateWindow", "hold"],
       version: "1.0.0"
     },
     // ─── PR-R2 (design §3.2): the raw booking executor's ONE new action ───
@@ -8768,6 +8982,46 @@ var ACTION_REGISTRY = {
       target_bindings: {
         resource_id: { source: "param", param: "itemId" }
       },
+      approval_salient_fields: ["itemId", "decision", "slots"],
+      version: "1.0.0"
+    },
+    {
+      action: "doc_review.submit_response",
+      resource_type: "inbox:item",
+      required_relations: ["editor", "act_as"],
+      required_scopes: ["inbox"],
+      capability: "inbox.write",
+      input_schema: {
+        type: "object",
+        properties: {
+          itemId: { type: "string", minLength: 1, description: "The inbox item the review answers" },
+          decision: { type: "string", enum: ["reviewed", "declined"], description: "Whether the agent returns review findings or declines" },
+          findings: {
+            type: "array",
+            maxItems: 50,
+            description: "Review findings (empty for a decline). Each cites a verbatim quote from the document.",
+            items: {
+              type: "object",
+              properties: {
+                quote: { type: "string", description: "Verbatim excerpt from the reviewed document that the comment refers to" },
+                comment: { type: "string", description: "The reviewer comment on that excerpt" }
+              },
+              required: ["quote", "comment"],
+              additionalProperties: false
+            }
+          },
+          summary: { type: "string", description: "Optional overall summary of the review" }
+        },
+        required: ["itemId", "decision"],
+        additionalProperties: false
+      },
+      constraints: { rate_bucket: "inbox.write" },
+      effects: ["Update:InboxItem"],
+      risk: "high",
+      target_bindings: {
+        resource_id: { source: "param", param: "itemId" }
+      },
+      approval_salient_fields: ["itemId", "decision", "findings", "summary"],
       version: "1.0.0"
     }
   ],
@@ -8865,7 +9119,7 @@ var ACTION_REGISTRY = {
     {
       capability: "inbox.write",
       description: "Send and respond to agent inbox tasks",
-      includes: ["inbox.send", "inbox.respond", "inbox.complete", "scheduling.request", "scheduling.submit_response"],
+      includes: ["inbox.send", "inbox.respond", "inbox.complete", "scheduling.request", "scheduling.submit_response", "doc_review.submit_response"],
       version: "1.0.0"
     },
     {
@@ -9254,6 +9508,27 @@ var GATEWAY_ERROR_CODE = {
   APPROVAL_REQUIRED: "APPROVAL_REQUIRED"
 };
 
+// src/resolver/approval-time-resolution.ts
+var RESOLVED_PARAMS_KEY = "__resolvedParams";
+function stripResolvedParams(params) {
+  if (!params || typeof params !== "object") return params;
+  if (!Object.prototype.hasOwnProperty.call(params, RESOLVED_PARAMS_KEY)) return params;
+  const { [RESOLVED_PARAMS_KEY]: _dropped, ...rest } = params;
+  return rest;
+}
+var RESOLVER_BACKED_FIELDS = {
+  "slack.message.post": [{ field: "channel", kind: "slack-channel" }],
+  "slack.message.update": [{ field: "channel", kind: "slack-channel" }],
+  "slack.message.delete": [{ field: "channel", kind: "slack-channel" }]
+  // jira `issueIdOrKey` / linear `issueId` are intentionally NOT here — verified
+  // verbatim passthrough, no pre-PEP server canonicalization (see the block
+  // above). Do not add them without a real, demonstrated pre-PEP rewrite.
+};
+function resolverBackedFieldsFor(action) {
+  const fields = RESOLVER_BACKED_FIELDS[action];
+  return fields && fields.length > 0 ? fields : void 0;
+}
+
 // src/registry/action-summary.ts
 function extractJiraAssigneeDisplay(params) {
   const pickFromShape = (value) => {
@@ -9308,6 +9583,37 @@ var ACTION_DISPLAY_CONFIGS = {
       { key: "text", label: "Message" }
     ]
   },
+  // #1205 P1 Step 4.6 — update / delete need explicit display configs so the
+  // approval UI renders a labeled `Channel` field (which the API-side enricher
+  // upserts the frozen id→name mapping into) instead of falling through to the
+  // all-keys fallback branch, which would (a) render a raw lowercase `channel`
+  // id row that the enricher then DUPLICATES with a `Channel` name row, and
+  // (b) risk leaking the reserved __resolvedParams key.
+  "slack.message.update": {
+    summaryTemplate: (p) => {
+      const parts = [];
+      if (p.channel) parts.push(p.channel + ":");
+      if (p.text) parts.push(String(p.text));
+      return parts.join(" ");
+    },
+    displayFields: [
+      { key: "channel", label: "Channel" },
+      { key: "ts", label: "Timestamp" },
+      { key: "text", label: "Message" }
+    ]
+  },
+  "slack.message.delete": {
+    summaryTemplate: (p) => {
+      const parts = [];
+      if (p.channel) parts.push(p.channel + ":");
+      if (p.ts) parts.push(String(p.ts));
+      return parts.join(" ");
+    },
+    displayFields: [
+      { key: "channel", label: "Channel" },
+      { key: "ts", label: "Timestamp" }
+    ]
+  },
   "gmail.message.send": {
     summaryTemplate: (p) => {
       const parts = [];
@@ -10152,6 +10458,20 @@ var ACTION_DISPLAY_CONFIGS = {
       { key: "recommendedSlotIndex", label: "Recommended index" },
       { key: "recommendationReason", label: "Reason" }
     ]
+  },
+  // Phase D D0 (doc-review design §3.1), registry checklist B. Like
+  // scheduling.submit_response this is risk:'high', so its summary/displayFields
+  // are what a human actually reads in the approval and audit surfaces — the
+  // string is user-facing, not decoration. Names the item being answered the way
+  // scheduling.submit_response does.
+  "doc_review.submit_response": {
+    summaryTemplate: (p) => p.decision === "declined" ? `Decline the document review for item ${p.itemId ?? "(unknown)"}` : `Submit a document review for item ${p.itemId ?? "(unknown)"}`,
+    displayFields: [
+      { key: "itemId", label: "Inbox item" },
+      { key: "decision", label: "Decision" },
+      { key: "findings", label: "Findings" },
+      { key: "summary", label: "Summary" }
+    ]
   }
 };
 function truncate(text, maxLength) {
@@ -10314,6 +10634,7 @@ function generateActionSummary(action, params, maxLength = 50) {
     return raw ? truncate(raw, maxLength) : "";
   }
   for (const [key, val] of Object.entries(params)) {
+    if (key === RESOLVED_PARAMS_KEY) continue;
     if (val !== null && val !== void 0 && typeof val !== "object") {
       return truncate(`${key}: ${String(val)}`, maxLength);
     }
@@ -10329,7 +10650,7 @@ function generateActionParamsDisplay(action, params) {
       return { label: f.label, raw };
     }).filter((item) => item.raw !== void 0).map((item) => ({ label: item.label, value: formatValueFull(item.raw) }));
   }
-  return Object.entries(params).filter(([, v]) => v !== void 0 && v !== null).map(([key, val]) => ({
+  return Object.entries(params).filter(([key, v]) => key !== RESOLVED_PARAMS_KEY && v !== void 0 && v !== null).map(([key, val]) => ({
     label: key,
     value: formatValueFull(val)
   }));
@@ -10433,6 +10754,102 @@ function canonicalResourceId(action, params, ctx) {
   return id;
 }
 
+// src/resolver/salient-digest.ts
+import { createHash } from "crypto";
+function serializeValue(value) {
+  if (value === null || value === void 0) return "null";
+  const t = typeof value;
+  if (t === "boolean") return value ? "true" : "false";
+  if (t === "number") {
+    const n = value;
+    if (!Number.isFinite(n)) {
+      throw new Error(`salient-digest: non-finite number is not allowed in salient params: ${String(n)}`);
+    }
+    if (!Number.isInteger(n)) {
+      throw new Error(
+        `salient-digest: float value is not allowed in salient params (phase 1 forbids non-integer numbers): ${String(n)}`
+      );
+    }
+    if (!Number.isSafeInteger(n)) {
+      throw new Error(
+        `salient-digest: unsafe integer is not allowed in salient params (exceeds 2^53-1, cannot round-trip losslessly): ${String(n)}`
+      );
+    }
+    return String(n);
+  }
+  if (t === "string") return JSON.stringify(value.normalize("NFC"));
+  if (Array.isArray(value)) {
+    return "[" + value.map(serializeValue).join(",") + "]";
+  }
+  if (t === "object") {
+    const obj = value;
+    const seen = /* @__PURE__ */ new Map();
+    for (const rawKey of Object.keys(obj)) {
+      const normKey = rawKey.normalize("NFC");
+      const prior = seen.get(normKey);
+      if (prior !== void 0 && prior !== rawKey) {
+        throw new Error(
+          `salient-digest: duplicate object key after NFC normalization ("${prior}" and "${rawKey}" both normalize to "${normKey}")`
+        );
+      }
+      seen.set(normKey, rawKey);
+    }
+    const normKeys = [...seen.keys()].sort();
+    const parts = normKeys.map((normKey) => {
+      const rawKey = seen.get(normKey);
+      return JSON.stringify(normKey) + ":" + serializeValue(obj[rawKey]);
+    });
+    return "{" + parts.join(",") + "}";
+  }
+  throw new Error(`salient-digest: unsupported value type in salient params: ${t}`);
+}
+function canonicalizeWithFields(fields, params) {
+  const seen = /* @__PURE__ */ new Map();
+  for (const field of fields) {
+    const normField = field.normalize("NFC");
+    const prior = seen.get(normField);
+    if (prior !== void 0 && prior !== field) {
+      throw new Error(
+        `salient-digest: duplicate salient field after NFC normalization ("${prior}" and "${field}" both normalize to "${normField}")`
+      );
+    }
+    seen.set(normField, field);
+  }
+  const normFields = [...seen.keys()].sort();
+  const parts = normFields.map((normField) => {
+    const field = seen.get(normField);
+    const present = Object.prototype.hasOwnProperty.call(params, field);
+    const value = present ? params[field] : null;
+    return JSON.stringify(normField) + ":" + serializeValue(value);
+  });
+  return "{" + parts.join(",") + "}";
+}
+function digestWithFields(fields, params) {
+  const canonical = canonicalizeWithFields(fields, params);
+  const hex = createHash("sha256").update(canonical, "utf8").digest("hex");
+  return `sha256:${hex}`;
+}
+function salientFieldsFor(action) {
+  const def = ACTION_REGISTRY.actions.find((a) => a.action === action);
+  if (!def) return void 0;
+  const fields = def.approval_salient_fields;
+  if (!Array.isArray(fields)) return void 0;
+  if (!fields.every((f) => typeof f === "string")) return void 0;
+  return fields;
+}
+function canonicalizeSalient(action, params) {
+  const fields = salientFieldsFor(action);
+  if (!fields) {
+    throw new Error(`salient-digest: action "${action}" has no declared approval-salient fields`);
+  }
+  return canonicalizeWithFields(fields, params);
+}
+function salientDigest(action, params) {
+  const fields = salientFieldsFor(action);
+  if (!fields) return void 0;
+  return digestWithFields(fields, params);
+}
+
 // src/resolver/compare-resource-id.ts
 function looksLikeNativeId(value) {
   if (/^[CDG][A-Z0-9]{8,}$/.test(value)) return true;
@@ -10517,11 +10934,11 @@ function isFreemailDomain(domain) {
 }
 
 // src/internal-signature/canonical.ts
-import { createHash } from "crypto";
+import { createHash as createHash2 } from "crypto";
 var SIGNATURE_HEADER = "x-internal-signature";
 var SIGNATURE_VERSION_PREFIX = "v1=";
 function sha256Hex(input) {
-  return createHash("sha256").update(input).digest("hex");
+  return createHash2("sha256").update(input).digest("hex");
 }
 function buildCanonicalString(args) {
   const { method, path: path4, unixSeconds, rawBody } = args;
@@ -10768,6 +11185,7 @@ function parseEntityUid(uid) {
 }
 
 // src/registry/action-risk.ts
+var UNCLASSIFIED_ACTION_RISK = "high";
 var HIGH_RISK_SUFFIXES = /* @__PURE__ */ new Set([
   "send",
   "post",
@@ -10811,13 +11229,13 @@ var REGISTRY_RISK_BY_ACTION = (() => {
 function resolveActionRiskBySuffix(lowerAction) {
   const segments = lowerAction.split(".");
   const last = segments[segments.length - 1] ?? "";
-  if (!last) return "medium";
+  if (!last) return UNCLASSIFIED_ACTION_RISK;
   if (HIGH_RISK_SUFFIXES.has(last)) return "high";
   if (LOW_RISK_SUFFIXES.has(last)) return "low";
-  return "medium";
+  return UNCLASSIFIED_ACTION_RISK;
 }
 function resolveActionRisk(action) {
-  if (!action || typeof action !== "string") return "medium";
+  if (!action || typeof action !== "string") return UNCLASSIFIED_ACTION_RISK;
   const lower = action.toLowerCase();
   const registryRisk = REGISTRY_RISK_BY_ACTION.get(lower);
   if (registryRisk) return registryRisk;
@@ -10908,6 +11326,7 @@ export {
   PHASE_1_VC_LAYER,
   PROVIDER_ALIASES,
   REAUTH_REQUIRED_ACTION,
+  RESOLVED_PARAMS_KEY,
   RESOURCE_TYPES,
   RESOURCE_TYPE_LABELS,
   ReceiptStatus,
@@ -10920,6 +11339,7 @@ export {
   TIER_LIMITS,
   TargetResolver,
   ToolManager,
+  UNCLASSIFIED_ACTION_RISK,
   UserIdentityManager,
   UserKeyPairManager,
   VALID_MCP_ACTIONS,
@@ -10939,6 +11359,8 @@ export {
   buildValidationErrors,
   canonicalResourceId,
   canonicalizeAction,
+  canonicalizeSalient,
+  canonicalizeWithFields,
   checkPermissionWithVP,
   classifyCedarErrorMessage,
   compareResourceIds,
@@ -10948,6 +11370,7 @@ export {
   createDidJwk,
   credentialStatusToVCStatus,
   defaultConstraintEvaluator,
+  digestWithFields,
   evaluateConstraints,
   extractProjectKey,
   extractPublicKey,
@@ -10997,9 +11420,13 @@ export {
   resolveProvider,
   resolveResourceType,
   resolveUserTier,
+  resolverBackedFieldsFor,
+  salientDigest,
+  salientFieldsFor,
   sha256Hex,
   signJWT,
   signRequest,
+  stripResolvedParams,
   validateActionInput,
   validateRegistryObject,
   vcStatusToCredentialStatus,