@xopcai/xopc 0.0.308 → 0.0.311

package/dist/src/proactive/actions/service.js

@@ -1,82 +0,0 @@
-import { getSqliteDatabase, init_transaction, runSqliteWriteTransaction } from "../../storage/sqlite/transaction.js";
-import { insightSourcesAuthorized, insightSourcesChanged } from "../execution/authorization.js";
-import { effectiveProactivePolicy } from "../policy/service.js";
-import { insightCorrelation } from "../inbox/lifecycle.js";
-import { TaskApplicationService } from "../../tasks/task-application-service.js";
-//#region src/proactive/actions/service.ts
-init_transaction();
-function projectIdFromAggregationKey(value) {
-	if (!value.startsWith("project:") || value.length === 8) throw new Error("Proactive action has no project scope");
-	return value.slice(8);
-}
-function executeClaimedAction(row, now = /* @__PURE__ */ new Date()) {
-	const action = JSON.parse(row.proposed_action_json);
-	try {
-		if (getSqliteDatabase().prepare("SELECT 1 FROM proactive_inbox_items WHERE insight_id = ? AND withdrawn_at IS NOT NULL").get(row.insight_id)) throw new Error("Card was withdrawn");
-		if (!insightSourcesAuthorized(row.insight_id)) throw new Error("Source permission is no longer available");
-		if (insightSourcesChanged(row.insight_id)) throw new Error("Source changed; review updated work before acting");
-		if (!effectiveProactivePolicy(row.subscription_id).enabled) throw new Error("Proactive subscription paused");
-		const permission = getSqliteDatabase().prepare(`SELECT mode, allowed_actions_json FROM project_monitoring_policies WHERE project_id = ?`).get(projectIdFromAggregationKey(row.aggregation_key));
-		if (!getSqliteDatabase().prepare(`SELECT 1 FROM proactive_decisions d JOIN proactive_inbox_items i USING(inbox_item_id) WHERE i.insight_id = ? AND d.choice = 'approve'`).get(row.insight_id) && !(permission?.mode === "auto_low_risk" && JSON.parse(permission.allowed_actions_json).includes(action.id))) throw new Error("Action permission is no longer available");
-		if (action.id !== "create_project_task") throw new Error(`Unsupported proactive action: ${action.id}`);
-		const result = new TaskApplicationService().create({
-			idempotencyKey: `proactive:${insightCorrelation(row.insight_id)}:${action.id}`,
-			title: action.input.title,
-			projectId: projectIdFromAggregationKey(row.aggregation_key),
-			priority: "normal",
-			contract: {
-				objective: action.input.objective,
-				expectedOutputs: [],
-				acceptanceCriteria: [],
-				constraints: [],
-				approvalRequired: [],
-				assumptions: [],
-				risks: [],
-				acceptancePolicy: "manual",
-				outputDestinations: []
-			},
-			dependencies: [],
-			context: [],
-			authorityGrants: [],
-			activation: {
-				mode: "capture",
-				phase: "backlog"
-			}
-		}, {
-			kind: "system",
-			id: "proactive"
-		});
-		if (!result.ok) throw new Error(`Task creation failed: ${"reason" in result ? result.reason : "unknown"}`);
-		getSqliteDatabase().prepare(`UPDATE proactive_insights
-      SET action_status = 'completed', action_result_json = ?, action_error = NULL, action_updated_at = ?
-      WHERE insight_id = ? AND action_status = 'executing'`).run(JSON.stringify({ taskId: result.model.task.id }), now.toISOString(), row.insight_id);
-		getSqliteDatabase().prepare("UPDATE proactive_inbox_items SET status = 'read', resolution = NULL, updated_at = ? WHERE insight_id = ?").run(now.toISOString(), row.insight_id);
-	} catch (error) {
-		getSqliteDatabase().prepare(`UPDATE proactive_insights
-      SET action_status = 'failed', action_error = ?, action_updated_at = ?
-      WHERE insight_id = ? AND action_status = 'executing'`).run(String(error instanceof Error ? error.message : error).slice(0, 2e3), now.toISOString(), row.insight_id);
-	}
-}
-function executePendingProactiveActions(now = /* @__PURE__ */ new Date()) {
-	const expired = (/* @__PURE__ */ new Date(now.getTime() - 5 * 6e4)).toISOString();
-	getSqliteDatabase().prepare(`UPDATE proactive_insights SET action_status = 'pending', action_updated_at = ?
-    WHERE action_status = 'executing' AND action_updated_at <= ?`).run(now.toISOString(), expired);
-	let executed = 0;
-	while (true) {
-		const row = runSqliteWriteTransaction((db) => {
-			const candidate = db.prepare(`SELECT x.insight_id, x.subscription_id, b.aggregation_key, x.proposed_action_json
-        FROM proactive_insights x
-        JOIN proactive_runs r ON r.run_id = x.run_id
-        JOIN proactive_signal_batches b ON b.batch_id = r.batch_id
-        WHERE x.action_status = 'pending' ORDER BY x.created_at LIMIT 1`).get();
-			if (!candidate) return void 0;
-			return db.prepare(`UPDATE proactive_insights SET action_status = 'executing', action_updated_at = ?
-        WHERE insight_id = ? AND action_status = 'pending'`).run(now.toISOString(), candidate.insight_id).changes === 1 ? candidate : void 0;
-		});
-		if (!row) return executed;
-		executeClaimedAction(row, now);
-		executed += 1;
-	}
-}
-//#endregion
-export { executePendingProactiveActions };

package/dist/src/proactive/events/envelope.d.ts

@@ -1,2 +0,0 @@
-import { type EventEnvelope, type PublishEventInput } from './types.js';
-export declare function normalizeEventEnvelope(input: PublishEventInput, now?: Date): EventEnvelope;

package/dist/src/proactive/events/envelope.js

@@ -1,54 +0,0 @@
-import { EVENT_ACTOR_KINDS, EVENT_SENSITIVITIES } from "./types.js";
-import { randomUUID } from "node:crypto";
-//#region src/proactive/events/envelope.ts
-const EVENT_TYPE_PATTERN = /^[a-z][a-z0-9_]*(?:\.[a-z][a-z0-9_]*)+\.v[1-9][0-9]*$/;
-function required(value, field) {
-	const normalized = value.trim();
-	if (!normalized) throw new Error(`${field} is required`);
-	if (normalized.length > 300) throw new Error(`${field} is too long`);
-	return normalized;
-}
-function timestamp(value, field) {
-	const time = Date.parse(value);
-	if (!Number.isFinite(time)) throw new Error(`${field} must be an ISO timestamp`);
-	return new Date(time).toISOString();
-}
-function normalizeEventEnvelope(input, now = /* @__PURE__ */ new Date()) {
-	if (!EVENT_TYPE_PATTERN.test(input.type)) throw new Error("type must use the domain.event.vN convention");
-	if (!Number.isInteger(input.schemaVersion) || input.schemaVersion < 1) throw new Error("schemaVersion must be a positive integer");
-	if (!EVENT_ACTOR_KINDS.includes(input.actor.kind)) throw new Error("actor.kind is invalid");
-	if (!EVENT_SENSITIVITIES.includes(input.sensitivity)) throw new Error("sensitivity is invalid");
-	if (!input.payload || Array.isArray(input.payload) || typeof input.payload !== "object") throw new Error("payload must be an object");
-	return {
-		id: required(input.id ?? randomUUID(), "id"),
-		type: input.type,
-		schemaVersion: input.schemaVersion,
-		source: {
-			kind: required(input.source.kind, "source.kind"),
-			id: required(input.source.id, "source.id"),
-			...input.source.deviceId ? { deviceId: required(input.source.deviceId, "source.deviceId") } : {}
-		},
-		subject: {
-			kind: required(input.subject.kind, "subject.kind"),
-			id: required(input.subject.id, "subject.id")
-		},
-		actor: {
-			kind: input.actor.kind,
-			...input.actor.id ? { id: required(input.actor.id, "actor.id") } : {}
-		},
-		scope: {
-			workspaceId: required(input.scope.workspaceId, "scope.workspaceId"),
-			...input.scope.projectId ? { projectId: required(input.scope.projectId, "scope.projectId") } : {},
-			...input.scope.agentId ? { agentId: required(input.scope.agentId, "scope.agentId") } : {}
-		},
-		occurredAt: timestamp(input.occurredAt, "occurredAt"),
-		observedAt: timestamp(input.observedAt ?? now.toISOString(), "observedAt"),
-		correlationId: required(input.correlationId ?? randomUUID(), "correlationId"),
-		...input.causationId ? { causationId: required(input.causationId, "causationId") } : {},
-		dedupeKey: required(input.dedupeKey, "dedupeKey"),
-		sensitivity: input.sensitivity,
-		payload: input.payload
-	};
-}
-//#endregion
-export { normalizeEventEnvelope };

package/dist/src/proactive/events/product-event-bridge.d.ts

@@ -1,7 +0,0 @@
-import type { AutomationEvent } from '../../automations/domain/types.js';
-import type { PublishEventInput } from './types.js';
-export declare function mapProductEventToProactive(input: {
-    event: AutomationEvent;
-    workspaceId: string;
-    defaultAgentId: string;
-}): PublishEventInput | null;

package/dist/src/proactive/events/product-event-bridge.js

@@ -1,87 +0,0 @@
-//#region src/proactive/events/product-event-bridge.ts
-const PROACTIVE_EVENT_TYPE_BY_PRODUCT_EVENT = new Map([
-	["task.created.v2", "task.created.v2"],
-	["task.commanded.v2", "task.commanded.v2"],
-	["task.phase_changed.v2", "task.phase_changed.v2"],
-	["task.attention_required.v2", "task.attention_required.v2"],
-	["note.created", "note.created.v1"],
-	["note.updated", "note.updated.v1"],
-	["workflow.run.completed", "workflow.run.completed.v1"],
-	["session.transcript.updated", "session.transcript.updated.v1"],
-	["discussion.completed", "discussion.completed.v1"]
-]);
-function stringValue(payload, key) {
-	const value = payload[key];
-	return typeof value === "string" && value.trim() ? value : void 0;
-}
-function subjectFor(event) {
-	const payload = event.payload ?? {};
-	if (event.type.startsWith("task.")) {
-		const id = stringValue(payload, "taskId");
-		return id ? {
-			kind: "task",
-			id
-		} : null;
-	}
-	if (event.type.startsWith("note.")) {
-		const id = stringValue(payload, "noteId");
-		return id ? {
-			kind: "note",
-			id
-		} : null;
-	}
-	if (event.type === "workflow.run.completed") {
-		const id = stringValue(payload, "runId");
-		return id ? {
-			kind: "workflow_run",
-			id
-		} : null;
-	}
-	if (event.type === "session.transcript.updated") {
-		const id = stringValue(payload, "conversationId");
-		return id ? {
-			kind: "session",
-			id
-		} : null;
-	}
-	if (event.type === "discussion.completed") {
-		const id = stringValue(payload, "discussionId");
-		return id ? {
-			kind: "discussion",
-			id
-		} : null;
-	}
-	return null;
-}
-function mapProductEventToProactive(input) {
-	const proactiveEventType = PROACTIVE_EVENT_TYPE_BY_PRODUCT_EVENT.get(input.event.type);
-	if (!proactiveEventType) return null;
-	const subject = subjectFor(input.event);
-	if (!subject) return null;
-	const payload = input.event.payload ?? {};
-	const occurredAtMs = Number.isFinite(input.event.occurredAtMs) ? input.event.occurredAtMs : Date.now();
-	const versionId = stringValue(payload, "messageId") ?? stringValue(payload, "runId") ?? String(occurredAtMs);
-	const agentId = stringValue(payload, "agentId") ?? input.defaultAgentId;
-	const projectId = stringValue(payload, "projectId");
-	return {
-		type: proactiveEventType,
-		schemaVersion: 1,
-		source: {
-			kind: "internal",
-			id: input.event.source ?? "xopc"
-		},
-		subject,
-		actor: { kind: "system" },
-		scope: {
-			workspaceId: input.workspaceId,
-			agentId,
-			...projectId ? { projectId } : {}
-		},
-		occurredAt: new Date(occurredAtMs).toISOString(),
-		dedupeKey: `product-event:${proactiveEventType}:${subject.id}:${versionId}`,
-		sensitivity: "personal",
-		payload
-	};
-}
-//#endregion
-export { mapProductEventToProactive };

package/dist/src/proactive/events/publisher.d.ts

@@ -1,4 +0,0 @@
-import type { PublishEventInput, PublishedEvent } from './types.js';
-export interface ProactiveSignalPublisher {
-    publish(input: PublishEventInput, observedAt?: Date): PublishedEvent;
-}

package/dist/src/proactive/events/repository.d.ts

@@ -1,9 +0,0 @@
-import type { EventEnvelope } from './types.js';
-export declare function getEventByDedupeKey(dedupeKey: string): EventEnvelope | null;
-export declare function insertEvent(event: EventEnvelope): boolean;
-export declare function isEventRouted(eventId: string): boolean;
-export declare function markEventRouted(eventId: string, routedAt: string): void;
-export declare function listEvents(input?: {
-    limit?: number;
-    type?: string;
-}): EventEnvelope[];

package/dist/src/proactive/events/repository.js

@@ -1,63 +0,0 @@
-import { getSqliteDatabase, init_transaction, runSqliteWriteTransaction } from "../../storage/sqlite/transaction.js";
-//#region src/proactive/events/repository.ts
-init_transaction();
-function fromRow(row) {
-	return {
-		id: row.event_id,
-		type: row.type,
-		schemaVersion: row.schema_version,
-		source: {
-			kind: row.source_kind,
-			id: row.source_id,
-			...row.device_id ? { deviceId: row.device_id } : {}
-		},
-		subject: {
-			kind: row.subject_kind,
-			id: row.subject_id
-		},
-		actor: {
-			kind: row.actor_kind,
-			...row.actor_id ? { id: row.actor_id } : {}
-		},
-		scope: {
-			workspaceId: row.workspace_id,
-			...row.project_id ? { projectId: row.project_id } : {},
-			...row.agent_id ? { agentId: row.agent_id } : {}
-		},
-		occurredAt: row.occurred_at,
-		observedAt: row.observed_at,
-		correlationId: row.correlation_id,
-		...row.causation_id ? { causationId: row.causation_id } : {},
-		dedupeKey: row.dedupe_key,
-		sensitivity: row.sensitivity,
-		payload: JSON.parse(row.payload_json)
-	};
-}
-function getEventByDedupeKey(dedupeKey) {
-	const row = getSqliteDatabase().prepare("SELECT * FROM proactive_events WHERE dedupe_key = ?").get(dedupeKey);
-	return row ? fromRow(row) : null;
-}
-function insertEvent(event) {
-	return runSqliteWriteTransaction((db) => {
-		return db.prepare(`INSERT OR IGNORE INTO proactive_events (
-      event_id, type, schema_version, source_kind, source_id, device_id,
-      subject_kind, subject_id, actor_kind, actor_id, workspace_id, project_id, agent_id,
-      occurred_at, observed_at, correlation_id, causation_id, dedupe_key, sensitivity, payload_json
-    ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`).run(event.id, event.type, event.schemaVersion, event.source.kind, event.source.id, event.source.deviceId ?? null, event.subject.kind, event.subject.id, event.actor.kind, event.actor.id ?? null, event.scope.workspaceId, event.scope.projectId ?? null, event.scope.agentId ?? null, event.occurredAt, event.observedAt, event.correlationId, event.causationId ?? null, event.dedupeKey, event.sensitivity, JSON.stringify(event.payload)).changes === 1;
-	});
-}
-function isEventRouted(eventId) {
-	const row = getSqliteDatabase().prepare("SELECT routed_at FROM proactive_events WHERE event_id = ?").get(eventId);
-	return Boolean(row?.routed_at);
-}
-function markEventRouted(eventId, routedAt) {
-	runSqliteWriteTransaction((db) => {
-		db.prepare("UPDATE proactive_events SET routed_at = COALESCE(routed_at, ?) WHERE event_id = ?").run(routedAt, eventId);
-	});
-}
-function listEvents(input = {}) {
-	const limit = Math.min(200, Math.max(1, input.limit ?? 50));
-	return (input.type ? getSqliteDatabase().prepare("SELECT * FROM proactive_events WHERE type = ? ORDER BY observed_at DESC LIMIT ?").all(input.type, limit) : getSqliteDatabase().prepare("SELECT * FROM proactive_events ORDER BY observed_at DESC LIMIT ?").all(limit)).map(fromRow);
-}
-//#endregion
-export { getEventByDedupeKey, insertEvent, isEventRouted, listEvents, markEventRouted };

package/dist/src/proactive/events/types.d.ts

@@ -1,44 +0,0 @@
-export declare const EVENT_SENSITIVITIES: readonly ["public", "personal", "confidential", "restricted"];
-export type EventSensitivity = (typeof EVENT_SENSITIVITIES)[number];
-export declare const EVENT_ACTOR_KINDS: readonly ["user", "agent", "system", "integration"];
-export type EventActorKind = (typeof EVENT_ACTOR_KINDS)[number];
-export interface EventEnvelope<TPayload extends Record<string, unknown> = Record<string, unknown>> {
-    id: string;
-    type: string;
-    schemaVersion: number;
-    source: {
-        kind: string;
-        id: string;
-        deviceId?: string;
-    };
-    subject: {
-        kind: string;
-        id: string;
-    };
-    actor: {
-        kind: EventActorKind;
-        id?: string;
-    };
-    scope: {
-        workspaceId: string;
-        projectId?: string;
-        agentId?: string;
-    };
-    occurredAt: string;
-    observedAt: string;
-    correlationId: string;
-    causationId?: string;
-    dedupeKey: string;
-    sensitivity: EventSensitivity;
-    payload: TPayload;
-}
-export type PublishEventInput<TPayload extends Record<string, unknown> = Record<string, unknown>> = Omit<EventEnvelope<TPayload>, 'id' | 'observedAt' | 'correlationId'> & {
-    id?: string;
-    observedAt?: string;
-    correlationId?: string;
-};
-export interface PublishedEvent {
-    event: EventEnvelope;
-    inserted: boolean;
-    batchIds: string[];
-}

package/dist/src/proactive/events/types.js

@@ -1,15 +0,0 @@
-//#region src/proactive/events/types.ts
-const EVENT_SENSITIVITIES = [
-	"public",
-	"personal",
-	"confidential",
-	"restricted"
-];
-const EVENT_ACTOR_KINDS = [
-	"user",
-	"agent",
-	"system",
-	"integration"
-];
-//#endregion
-export { EVENT_ACTOR_KINDS, EVENT_SENSITIVITIES };

package/dist/src/proactive/execution/agent-executor.d.ts

@@ -1,21 +0,0 @@
-import type { Config } from '../../config/schema.js';
-import type { ProactiveAgentExecutor } from './types.js';
-/** Runs an isolated, read-only agent over only the context authorized by the signal batch. */
-export declare class ReadonlyProactiveAgentExecutor implements ProactiveAgentExecutor {
-    private readonly config;
-    constructor(config: () => Config | undefined);
-    execute(input: {
-        systemPrompt: string;
-        userPrompt: string;
-        authorizedContext: Record<string, unknown>;
-        signal?: AbortSignal;
-    }): Promise<{
-        text: string;
-        modelRef: string;
-        usage: {
-            inputTokens: number;
-            outputTokens: number;
-            estimatedCostUsd?: number;
-        };
-    }>;
-}

package/dist/src/proactive/execution/agent-executor.js

@@ -1,125 +0,0 @@
-import { init_sync_provider_auth, resolveProviderApiKeySync } from "../../auth/sync-provider-auth.js";
-import { getApiKeySync, getDefaultModelSync, init_providers, resolveModel } from "../../providers/index.js";
-import { createExtensionAwareStreamFn } from "../../providers/extension-stream-bridge.js";
-import { isAssistantTurnAborted, isAssistantTurnFailed } from "../../agent/orchestration/llm-turn-retry.js";
-import { runAgentTurnWithTimeout } from "../../agent/orchestration/run-agent-turn-with-timeout.js";
-import { Agent } from "@earendil-works/pi-agent-core";
-import { Type } from "@sinclair/typebox";
-//#region src/proactive/execution/agent-executor.ts
-init_sync_provider_auth();
-init_providers();
-const MAX_TOOL_CALLS = 6;
-const AGENT_TIMEOUT_MS = 9e4;
-function assistantText(messages) {
-	for (let index = messages.length - 1; index >= 0; index -= 1) {
-		const message = messages[index];
-		if (message.role !== "assistant") continue;
-		if (Array.isArray(message.content)) return message.content.flatMap((block) => block && typeof block === "object" && block.type === "text" ? [String(block.text ?? "")] : []).join("").trim();
-	}
-	return "";
-}
-function inspectionTool(context) {
-	return {
-		name: "inspect_authorized_context",
-		label: "Inspect authorized work context",
-		description: "Read one authorized evidence section. This tool cannot write or trigger any action.",
-		parameters: Type.Object({ section: Type.String({ description: "A top-level section name from the availableSections list." }) }),
-		async execute(_toolCallId, args) {
-			const values = args;
-			const section = typeof values.section === "string" ? values.section : "";
-			if (!Object.prototype.hasOwnProperty.call(context, section)) return {
-				content: [{
-					type: "text",
-					text: `Unknown section. Available: ${Object.keys(context).join(", ")}`
-				}],
-				details: { found: false }
-			};
-			return {
-				content: [{
-					type: "text",
-					text: JSON.stringify({
-						section,
-						evidence: context[section]
-					}, null, 2).slice(0, 6e4)
-				}],
-				details: {
-					found: true,
-					section
-				}
-			};
-		}
-	};
-}
-/** Runs an isolated, read-only agent over only the context authorized by the signal batch. */
-var ReadonlyProactiveAgentExecutor = class {
-	constructor(config) {
-		this.config = config;
-	}
-	async execute(input) {
-		input.signal?.throwIfAborted();
-		const model = resolveModel(getDefaultModelSync(this.config()));
-		let toolCalls = 0;
-		const agent = new Agent({
-			initialState: {
-				systemPrompt: `${input.systemPrompt}\n\nYou are an autonomous background analysis agent. You MUST inspect relevant authorized context with the provided read-only tool before reaching a conclusion. You have no mutation, messaging, shell, network, or filesystem tools.`,
-				model,
-				thinkingLevel: "low",
-				tools: [inspectionTool(input.authorizedContext)],
-				messages: []
-			},
-			streamFn: createExtensionAwareStreamFn(),
-			getApiKey: (provider) => resolveProviderApiKeySync(provider) ?? getApiKeySync(provider) ?? "",
-			beforeToolCall: async () => {
-				if (toolCalls >= MAX_TOOL_CALLS) return {
-					block: true,
-					reason: `Maximum inspection calls reached (${MAX_TOOL_CALLS}).`
-				};
-			},
-			afterToolCall: async () => {
-				toolCalls += 1;
-			}
-		});
-		const abort = () => agent.abort();
-		input.signal?.addEventListener("abort", abort, { once: true });
-		try {
-			const sections = Object.keys(input.authorizedContext);
-			await runAgentTurnWithTimeout(agent, async () => {
-				await agent.prompt(`${input.userPrompt}\n\nAvailable authorized evidence sections: ${sections.join(", ") || "(none)"}.`);
-				await agent.waitForIdle();
-			}, AGENT_TIMEOUT_MS);
-			if (isAssistantTurnAborted(agent)) throw new Error("Proactive agent execution aborted");
-			if (isAssistantTurnFailed(agent)) throw new Error("Proactive agent execution failed");
-			const text = assistantText(agent.state.messages);
-			if (!text) throw new Error("Proactive agent returned empty output");
-			if (toolCalls === 0) throw new Error("Proactive agent did not inspect authorized evidence");
-			const usage = {
-				inputTokens: 0,
-				outputTokens: 0,
-				estimatedCostUsd: 0
-			};
-			for (const message of agent.state.messages) {
-				if (message.role !== "assistant") continue;
-				const reported = message.usage;
-				if (reported) {
-					usage.inputTokens += reported.input ?? 0;
-					usage.outputTokens += reported.output ?? 0;
-					usage.estimatedCostUsd += reported.cost?.total ?? 0;
-				}
-			}
-			const priced = Object.values(model.cost).some((value) => value > 0);
-			return {
-				text,
-				usage: {
-					inputTokens: usage.inputTokens,
-					outputTokens: usage.outputTokens,
-					...priced ? { estimatedCostUsd: usage.estimatedCostUsd } : {}
-				},
-				modelRef: `${model.provider}/${model.id}`
-			};
-		} finally {
-			input.signal?.removeEventListener("abort", abort);
-		}
-	}
-};
-//#endregion
-export { ReadonlyProactiveAgentExecutor };

package/dist/src/proactive/execution/authorization.d.ts

@@ -1,7 +0,0 @@
-/** Recheck connector consent for stored cards and actions, not just model input. */
-export declare function insightSourcesAuthorized(insightId: string): boolean;
-/** Compare versions, not generated prose, before showing or executing prepared work. */
-export declare function insightSourcesChanged(insightId: string): boolean;
-export declare function authorizedConnectedSource(itemId: string, workspaceId: string, scenarioKey: string, agentId?: string | null): import("../../knowledge/types.js").KnowledgeSourceItem;
-/** Delivery eligibility is stricter than reading historical artifacts. */
-export declare function insightSourcesFresh(insightId: string): boolean;

package/dist/src/proactive/execution/authorization.js

@@ -1,71 +0,0 @@
-import { getSqliteDatabase, init_transaction } from "../../storage/sqlite/transaction.js";
-import { getKnowledgeSourceItem } from "../../storage/sqlite/knowledge-repository.js";
-import { getConnectorSyncPolicyForConnection } from "../../storage/sqlite/connector-sync-policy-repository.js";
-import { sourceFreshness } from "../source-freshness.js";
-import { readMailThread } from "../mail-thread.js";
-//#region src/proactive/execution/authorization.ts
-init_transaction();
-/** Recheck connector consent for stored cards and actions, not just model input. */
-function insightSourcesAuthorized(insightId) {
-	const snapshot = getSqliteDatabase().prepare(`SELECT s.workspace_id, x.scenario_key, c.evidence_ids_json
-    FROM proactive_insights x JOIN proactive_scenario_subscriptions s USING(subscription_id)
-    JOIN proactive_runs r USING(run_id) LEFT JOIN proactive_context_snapshots c ON c.snapshot_id = r.context_snapshot_id
-    WHERE x.insight_id = ?`).get(insightId);
-	if (snapshot?.evidence_ids_json) {
-		if (JSON.parse(snapshot.evidence_ids_json).some((id) => id.startsWith("source-item:") && !authorizedConnectedSource(id.slice(12), snapshot.workspace_id, snapshot.scenario_key))) return false;
-	}
-	return getSqliteDatabase().prepare(`SELECT e.subject_id, e.workspace_id, x.scenario_key
-    FROM proactive_insights x JOIN proactive_runs r USING(run_id)
-    JOIN proactive_batch_events be ON be.batch_id = r.batch_id JOIN proactive_events e USING(event_id)
-    WHERE x.insight_id = ? AND e.type LIKE 'connected_source.%'`).all(insightId).every((row) => Boolean(authorizedConnectedSource(row.subject_id, row.workspace_id, row.scenario_key)));
-}
-/** Compare versions, not generated prose, before showing or executing prepared work. */
-function insightSourcesChanged(insightId) {
-	const db = getSqliteDatabase();
-	const row = db.prepare(`SELECT c.content_json FROM proactive_insights x JOIN proactive_runs r USING(run_id)
-    JOIN proactive_context_snapshots c ON c.snapshot_id = r.context_snapshot_id WHERE x.insight_id = ?`).get(insightId);
-	if (!row) return false;
-	const snapshot = JSON.parse(row.content_json);
-	if (snapshot.follow_up?.followUpId) {
-		const follow = db.prepare("SELECT source_item_id, revision, status, due_at FROM proactive_follow_ups WHERE id = ?").get(snapshot.follow_up.followUpId);
-		if (!follow || follow.status !== "watching" || follow.revision !== snapshot.follow_up.revision || Date.parse(follow.due_at) <= Date.now() !== snapshot.follow_up.deadlinePassed || readMailThread(follow.source_item_id)?.fingerprint !== snapshot.follow_up.fingerprint) return true;
-	}
-	for (const source of [...snapshot.connected_source?.items ?? [], ...snapshot.follow_up?.items ?? []]) {
-		const current = getKnowledgeSourceItem(source.sourceItemId);
-		if (!current || current.deletedAt || current.contentHash !== source.contentHash || current.occurredAt !== source.occurredAt) return true;
-	}
-	const project = snapshot.project_state?.project;
-	if (project) {
-		const current = db.prepare("SELECT updated_at FROM projects WHERE project_id = ?").get(project.project_id);
-		if (!current || current.updated_at !== project.updated_at) return true;
-	}
-	for (const task of [...snapshot.project_state?.activeTasks ?? [], ...snapshot.meeting_workspace?.activeTasks ?? []]) {
-		const current = db.prepare("SELECT updated_at FROM tasks WHERE task_id = ?").get(task.task_id);
-		if (!current || current.updated_at !== task.updated_at) return true;
-	}
-	for (const note of snapshot.meeting_workspace?.recentNotes ?? []) {
-		const current = db.prepare("SELECT updated_at FROM notes WHERE note_id = ?").get(note.note_id);
-		if (!current || current.updated_at !== note.updated_at) return true;
-	}
-	return false;
-}
-function authorizedConnectedSource(itemId, workspaceId, scenarioKey, agentId) {
-	const item = getKnowledgeSourceItem(itemId);
-	if (!item || item.deletedAt || item.metadata.workspaceId !== workspaceId || item.sensitivity === "secret" || item.sensitivity === "regulated") return null;
-	if (agentId && item.metadata.agentId && item.metadata.agentId !== agentId) return null;
-	const connectionId = item.metadata.connectionId;
-	if (typeof connectionId !== "string") return null;
-	if (!getSqliteDatabase().prepare("SELECT 1 FROM connector_connections WHERE id = ? AND status = 'active'").get(connectionId)) return null;
-	const policy = getConnectorSyncPolicyForConnection(connectionId);
-	return policy?.scanEnabled && policy.proactiveEnabled && (!policy.allowedScenarioKeys.length || policy.allowedScenarioKeys.includes(scenarioKey)) ? item : null;
-}
-/** Delivery eligibility is stricter than reading historical artifacts. */
-function insightSourcesFresh(insightId) {
-	const row = getSqliteDatabase().prepare(`SELECT c.evidence_ids_json, c.content_json FROM proactive_insights x JOIN proactive_runs r USING(run_id)
-    JOIN proactive_context_snapshots c ON c.snapshot_id = r.context_snapshot_id WHERE x.insight_id = ?`).get(insightId);
-	if (!row) return true;
-	const follow = JSON.parse(row.content_json).follow_up;
-	return JSON.parse(row.evidence_ids_json).every((id) => !id.startsWith("source-item:") || sourceFreshness(id.slice(12), follow?.deadlinePassed ? follow.dueAt : void 0).fresh);
-}
-//#endregion
-export { authorizedConnectedSource, insightSourcesAuthorized, insightSourcesChanged, insightSourcesFresh };

package/dist/src/proactive/execution/context.d.ts

@@ -1,49 +0,0 @@
-import type { ContextProvider, ResolvedContext } from './types.js';
-import type { ScenarioDefinition } from '../scenarios/types.js';
-type ContextInput = Parameters<ContextProvider['collect']>[0];
-export declare class EventBatchContextProvider implements ContextProvider {
-    readonly id = "event_batch";
-    collect(input: ContextInput): Promise<ResolvedContext>;
-}
-export declare class ConnectedSourceContextProvider implements ContextProvider {
-    readonly id = "connected_source";
-    collect(input: ContextInput): Promise<ResolvedContext>;
-}
-export declare class InternalObjectContextProvider implements ContextProvider {
-    readonly id = "internal_objects";
-    collect(input: ContextInput): Promise<ResolvedContext>;
-}
-export declare class UserModelContextProvider implements ContextProvider {
-    readonly id = "user_model";
-    collect(input: ContextInput): Promise<ResolvedContext>;
-}
-export declare class MeetingWorkspaceContextProvider implements ContextProvider {
-    readonly id = "meeting_workspace";
-    collect(input: ContextInput): Promise<ResolvedContext>;
-}
-export declare class ProjectStateContextProvider implements ContextProvider {
-    readonly id = "project_state";
-    collect(input: ContextInput): Promise<ResolvedContext>;
-}
-export declare class AutomationStateContextProvider implements ContextProvider {
-    readonly id = "automation_state";
-    collect(input: ContextInput): Promise<ResolvedContext>;
-}
-export declare class DiscussionContextProvider implements ContextProvider {
-    readonly id = "discussion";
-    collect(input: ContextInput): Promise<ResolvedContext>;
-}
-export declare class MailFollowUpContextProvider implements ContextProvider {
-    readonly id = "follow_up";
-    collect(input: ContextInput): Promise<ResolvedContext>;
-}
-export declare class ContextProviderRegistry {
-    private readonly providers;
-    constructor(providers?: ContextProvider[]);
-    collect(scenario: ScenarioDefinition, input: {
-        batchId: string;
-        eventIds: string[];
-        subscriptionId: string;
-    }): Promise<ResolvedContext>;
-}
-export {};