aimeat 3.2.0 → 3.3.0

package/dist/src/services/skill-bundle/generator.js

@@ -359,7 +359,7 @@ When the owner sends one of these slash-prefixed messages, treat it as a command
 When the owner assigns shared tags in the Data Access tab, use those tags as same-owner collaboration areas. Write shared project state, handoff notes, queues, and team context under \`agents.tag.<tag>.*\` with \`visibility: "owner"\` and \`tags: ["<tag>"]\`. Read the area with \`GET /v1/memory?owner_scope=true&prefix=agents.tag.<tag>.&tags=<tag>\` or the equivalent \`aimeat_memory_list\` parameters. Do not put private local secrets in shared tag memory.
 
 ### Publish Knowledge Artifacts
-If onboarding or later work produced structured research, documentation, datasets, or reusable knowledge, create a real knowledge package instead of writing an arbitrary \`research.*\` memory placeholder. Follow \`/llms.txt\` and use \`POST /v1/knowledge/import\` for a new package, \`aimeat_knowledge_contribute\` for entries in an existing package, and \`aimeat_storage_upload\` for large source files or attachments.
+If onboarding or later work produced structured research, documentation, datasets, or reusable knowledge, create a real knowledge package instead of writing an arbitrary \`research.*\` memory placeholder. Follow \`/llms-full.txt\` and use \`POST /v1/knowledge/import\` for a new package, \`aimeat_knowledge_contribute\` for entries in an existing package, and \`aimeat_storage_upload\` for large source files or attachments.
 
 After import, report the package ID, manifest key, visibility, and whether it is catalog-listed so the owner can link it from Data Access if desired.
 

package/dist/src/services/skill-bundle/generic-adapter.js

@@ -200,7 +200,7 @@ POST ${ctx.nodeUrl}/v1/memory
 If the owner assigns shared tags in the Data Access tab, those tags are collaboration labels for same-owner agents. Use \`agents.tag.<tag>.*\` keys for shared project state, handoff notes, queues, and team context. Write shared entries with \`visibility: "owner"\` and \`tags: ["<tag>"]\`, then list the area with \`owner_scope=true\`, \`prefix=agents.tag.<tag>.\`, and the same tag filter. Do not store private agent-local secrets in shared tag memory.
 
 ### Publish Knowledge Artifacts
-If setup or work produced structured research, documentation, datasets, or reusable knowledge, create a real knowledge package instead of a placeholder memory key. Follow \`/llms.txt\`: use \`POST /v1/knowledge/import\` for new packages, \`aimeat_knowledge_contribute\` for entries in existing packages, and \`aimeat_storage_upload\` for large source files or attachments. Report the package ID and manifest key to the owner.
+If setup or work produced structured research, documentation, datasets, or reusable knowledge, create a real knowledge package instead of a placeholder memory key. Follow \`/llms-full.txt\`: use \`POST /v1/knowledge/import\` for new packages, \`aimeat_knowledge_contribute\` for entries in existing packages, and \`aimeat_storage_upload\` for large source files or attachments. Report the package ID and manifest key to the owner.
 
 ## References
 - references/api-overview.md -- Endpoints, auth, response format

package/dist/src/services/skill-bundle/hermes-adapter.js

@@ -150,7 +150,7 @@ POST ${ctx.nodeUrl}/v1/memory
 If the owner assigns shared tags in the Data Access tab, those tags are collaboration labels for same-owner agents. Use \`agents.tag.<tag>.*\` keys for shared project state, handoff notes, queues, and team context. Write shared entries with \`visibility: "owner"\` and \`tags: ["<tag>"]\`, then list the area with \`owner_scope=true\`, \`prefix=agents.tag.<tag>.\`, and the same tag filter. Do not store private agent-local secrets in shared tag memory.
 
 ### Publish Knowledge Artifacts
-If setup or work produced structured research, documentation, datasets, or reusable knowledge, create a real knowledge package instead of a placeholder memory key. Follow \`/llms.txt\`: use \`POST /v1/knowledge/import\` for new packages, \`aimeat_knowledge_contribute\` for entries in existing packages, and \`aimeat_storage_upload\` for large source files or attachments. Report the package ID and manifest key to the owner.
+If setup or work produced structured research, documentation, datasets, or reusable knowledge, create a real knowledge package instead of a placeholder memory key. Follow \`/llms-full.txt\`: use \`POST /v1/knowledge/import\` for new packages, \`aimeat_knowledge_contribute\` for entries in existing packages, and \`aimeat_storage_upload\` for large source files or attachments. Report the package ID and manifest key to the owner.
 
 ## References
 See references/ directory for detailed API documentation:

package/dist/src/services/storage-file-write.d.ts

@@ -1,6 +1,6 @@
 /**
  * @file src/services/storage-file-write.ts
- * @description Storing one binary file, once, for every surface that can store one.
+ * @description Storing and removing one binary file, once, for every surface that can do either.
  *
  *   WHY THIS FILE EXISTS. `POST /v1/storage` and `aimeat_storage_upload` are the same capability, and
  *   the two copies had drifted in the way that costs money and access rather than tidiness:
@@ -28,12 +28,19 @@
  *   - StorageWriteDeps / StorageFileInput / StorageFileWriteResult — the contract
  *   - writeStorageFile() — the inline write, in order, with the fence first
  *   - mintStorageUploadUrl() — the presigned representation of the same write
+ *   - removeStorageFile() — the delete, sharing the same key fence and change events
  * @usage
  *   const out = await writeStorageFile({ storage, config, emitResourceUpdated }, gaii, input);
  *   if (!out.ok) return renderRefusal(out);   // each door renders its own way
  * @version-history
  *   v1.0.0 — 2026-08-11 — Initial (August 2026 audit step 8, unit storage-files). Collapses
  *     POST /v1/storage and aimeat_storage_upload onto one write.
+ *   v1.1.0 — 2026-08-15 — removeStorageFile(): the delete, which had one door (DELETE /v1/storage)
+ *     and no tool, so an agent could store a file over MCP and never take it back. Written here
+ *     rather than in the new tool because the anonymous key fence was already a hand-copied second
+ *     copy on that route, and because the route emitted only `files` while the upload emits `files`
+ *     and `memory` — a delete moves the byte budget the memory view renders exactly as an upload
+ *     does, and the two views disagreed about it.
  */
 import type { AimeatConfig } from '../config.js';
 import type { Storage, StorageFileRecord } from '../storage/interface.js';
@@ -78,6 +85,34 @@ export type StorageFileWriteResult = {
 } | StorageWriteRefusal;
 /** Store one file under `ownerGaii`, with every gate and side effect the capability carries. */
 export declare function writeStorageFile(deps: StorageWriteDeps, ownerGaii: string, input: StorageFileInput): Promise<StorageFileWriteResult>;
+export interface StorageDeleteRefusal {
+    ok: false;
+    status: number;
+    code: 'INVALID_INPUT' | 'FORBIDDEN' | 'NOT_FOUND' | 'ACCESS_DENIED';
+    message: string;
+}
+export type StorageFileDeleteResult = {
+    ok: true;
+    key: string;
+    size: number;
+    mimeType: string;
+    visibility: StorageFileRecord['visibility'];
+} | StorageDeleteRefusal;
+/**
+ * Remove one file from `ownerGaii`'s namespace. Irreversible: there is no version history behind a
+ * stored file the way there is behind a memory record, so what this deletes is gone.
+ *
+ * THE ORDER IS THE POINT. Fence, then read, then compare, then delete — a refusal must happen before
+ * anything is removed, which is the same rule the write follows for the quota. It also lets the
+ * caller be told WHAT it deleted (size, type), because those are read before the row goes.
+ *
+ * WHY NO CROSS-OWNER FORM. Reading has one, and it is the reason aimeat_storage_download takes a
+ * reference: a file is keyed by (owner, key) and an agent legitimately reads its owner's uploads.
+ * Deleting does not get the same door. `getStorageFile(ownerGaii, key)` is namespaced to the caller,
+ * so a file belonging to anyone else is simply absent here, and the ownership comparison below is a
+ * second lock on a door that is already shut rather than the lock that shuts it.
+ */
+export declare function removeStorageFile(deps: StorageWriteDeps, ownerGaii: string, key: string): Promise<StorageFileDeleteResult>;
 export interface StorageUploadUrlInput {
     key: string;
     mimeType?: string;

package/dist/src/services/storage-file-write.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"storage-file-write.d.ts","sourceRoot":"","sources":["../../../src/services/storage-file-write.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAM1E;+EAC+E;AAC/E,eAAO,MAAM,8BAA8B,OAAO,CAAC;AAEnD,0EAA0E;AAC1E,MAAM,WAAW,gBAAgB;IAC7B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,YAAY,CAAC;IACrB,gFAAgF;IAChF,mBAAmB,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IAC1D,uBAAuB,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CACpD;AAED,MAAM,WAAW,mBAAmB;IAChC,EAAE,EAAE,KAAK,CAAC;IACV,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,eAAe,GAAG,WAAW,GAAG,gBAAgB,CAAC;IACvD,OAAO,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,KAAK,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;CAClC;AAED,MAAM,WAAW,gBAAgB;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,iBAAiB,CAAC,YAAY,CAAC,CAAC;IAC7C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,wFAAwF;IACxF,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,MAAM,sBAAsB,GAC5B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,iBAAiB,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE,GAC7D,mBAAmB,CAAC;AAmB1B,gGAAgG;AAChG,wBAAsB,gBAAgB,CAClC,IAAI,EAAE,gBAAgB,EACtB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,gBAAgB,GACxB,OAAO,CAAC,sBAAsB,CAAC,CA2DjC;AAED,MAAM,WAAW,qBAAqB;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,0EAA0E;IAC1E,YAAY,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,MAAM,sBAAsB,GAC5B;IACE,EAAE,EAAE,IAAI,CAAC;IACT,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,gBAAgB,EAAE,MAAM,CAAC;CAC5B,GACC,mBAAmB,CAAC;AAE1B;;;;GAIG;AACH,wBAAsB,oBAAoB,CACtC,IAAI,EAAE,gBAAgB,EACtB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,qBAAqB,GAC7B,OAAO,CAAC,sBAAsB,CAAC,CAgCjC"}
+{"version":3,"file":"storage-file-write.d.ts","sourceRoot":"","sources":["../../../src/services/storage-file-write.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAM1E;+EAC+E;AAC/E,eAAO,MAAM,8BAA8B,OAAO,CAAC;AAEnD,0EAA0E;AAC1E,MAAM,WAAW,gBAAgB;IAC7B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,YAAY,CAAC;IACrB,gFAAgF;IAChF,mBAAmB,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IAC1D,uBAAuB,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CACpD;AAED,MAAM,WAAW,mBAAmB;IAChC,EAAE,EAAE,KAAK,CAAC;IACV,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,eAAe,GAAG,WAAW,GAAG,gBAAgB,CAAC;IACvD,OAAO,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,KAAK,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;CAClC;AAED,MAAM,WAAW,gBAAgB;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,iBAAiB,CAAC,YAAY,CAAC,CAAC;IAC7C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,wFAAwF;IACxF,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,MAAM,sBAAsB,GAC5B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,iBAAiB,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE,GAC7D,mBAAmB,CAAC;AAgC1B,gGAAgG;AAChG,wBAAsB,gBAAgB,CAClC,IAAI,EAAE,gBAAgB,EACtB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,gBAAgB,GACxB,OAAO,CAAC,sBAAsB,CAAC,CA2DjC;AAED,MAAM,WAAW,oBAAoB;IACjC,EAAE,EAAE,KAAK,CAAC;IACV,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,eAAe,GAAG,WAAW,GAAG,WAAW,GAAG,eAAe,CAAC;IACpE,OAAO,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,uBAAuB,GAC7B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,iBAAiB,CAAC,YAAY,CAAC,CAAA;CAAE,GACtG,oBAAoB,CAAC;AAE3B;;;;;;;;;;;;;GAaG;AACH,wBAAsB,iBAAiB,CACnC,IAAI,EAAE,gBAAgB,EACtB,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,GACZ,OAAO,CAAC,uBAAuB,CAAC,CAmClC;AAED,MAAM,WAAW,qBAAqB;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,0EAA0E;IAC1E,YAAY,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,MAAM,sBAAsB,GAC5B;IACE,EAAE,EAAE,IAAI,CAAC;IACT,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,gBAAgB,EAAE,MAAM,CAAC;CAC5B,GACC,mBAAmB,CAAC;AAE1B;;;;GAIG;AACH,wBAAsB,oBAAoB,CACtC,IAAI,EAAE,gBAAgB,EACtB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,qBAAqB,GAC7B,OAAO,CAAC,sBAAsB,CAAC,CAgCjC"}

package/dist/src/services/storage-file-write.js

@@ -6,8 +6,9 @@ import { isAnonymousGaii } from '../routes/memory/shared.js';
  *  the token is signed with are the same value, so they cannot drift apart. */
 export const STORAGE_UPLOAD_URL_TTL_SECONDS = 3600;
 /**
- * May this principal write this key at all. Both representations of the upload run it, which is the
- * point: the fence is on the write, not on the shape the caller happens to ask for.
+ * May this principal touch this key at all. Every representation of the upload runs it, and so does
+ * the delete, which is the point: the fence is on the act, not on the shape the caller happens to
+ * ask for. The DELETE route carried its own copy of this until v1.1.0.
  */
 function checkKey(ownerGaii, key) {
     if (!key) {
@@ -16,7 +17,7 @@ function checkKey(ownerGaii, key) {
     if (isAnonymousGaii(ownerGaii) && !key.startsWith('anonymous/')) {
         return {
             ok: false, status: 403, code: 'FORBIDDEN',
-            message: 'Anonymous agents can only upload to keys prefixed with "anonymous/"',
+            message: 'Anonymous agents can only use keys prefixed with "anonymous/"',
         };
     }
     return null;
@@ -74,6 +75,51 @@ export async function writeStorageFile(deps, ownerGaii, input) {
     emitChange('memory');
     return { ok: true, file, overageMorsels: quota.overageMorsels };
 }
+/**
+ * Remove one file from `ownerGaii`'s namespace. Irreversible: there is no version history behind a
+ * stored file the way there is behind a memory record, so what this deletes is gone.
+ *
+ * THE ORDER IS THE POINT. Fence, then read, then compare, then delete — a refusal must happen before
+ * anything is removed, which is the same rule the write follows for the quota. It also lets the
+ * caller be told WHAT it deleted (size, type), because those are read before the row goes.
+ *
+ * WHY NO CROSS-OWNER FORM. Reading has one, and it is the reason aimeat_storage_download takes a
+ * reference: a file is keyed by (owner, key) and an agent legitimately reads its owner's uploads.
+ * Deleting does not get the same door. `getStorageFile(ownerGaii, key)` is namespaced to the caller,
+ * so a file belonging to anyone else is simply absent here, and the ownership comparison below is a
+ * second lock on a door that is already shut rather than the lock that shuts it.
+ */
+export async function removeStorageFile(deps, ownerGaii, key) {
+    const { storage } = deps;
+    const fenced = checkKey(ownerGaii, key);
+    if (fenced)
+        return fenced;
+    const existing = await storage.getStorageFile(ownerGaii, key);
+    if (!existing) {
+        return {
+            ok: false, status: 404, code: 'NOT_FOUND',
+            message: `File not found in your namespace: ${key}. This deletes only your own files — a file someone else owns is not reachable here, whatever you may be allowed to read.`,
+        };
+    }
+    if (existing.ownerGaii !== ownerGaii) {
+        return { ok: false, status: 403, code: 'ACCESS_DENIED', message: 'You can only delete your own files' };
+    }
+    const deleted = await storage.deleteStorageFile(ownerGaii, key);
+    if (!deleted) {
+        // The row was there a moment ago and is not now. Another door removed it in between, which
+        // is the caller's desired end state, but saying "deleted" would claim work we did not do.
+        return { ok: false, status: 404, code: 'NOT_FOUND', message: `File not found: ${key}` };
+    }
+    deps.emitResourceUpdated?.(ownerGaii, `aimeat://storage/${encodeURIComponent(key)}`);
+    deps.emitResourceListChanged?.(ownerGaii);
+    // Both views, for the same reason the write emits both: the file leaves the files list AND frees
+    // bytes in the budget the memory view renders. The route emitted only 'files'.
+    emitChange('files');
+    emitChange('memory');
+    return {
+        ok: true, key, size: existing.size, mimeType: existing.mimeType, visibility: existing.visibility,
+    };
+}
 /**
  * Mint a presigned URL for the same write. The options the caller states here ride in the SIGNED
  * token (PRESIGNED_META_KEYS.storage) and are applied by PUT /v1/upload/:token, so what was asked

package/dist/src/services/storage-file-write.js.map

@@ -1 +1 @@
-{"version":3,"file":"storage-file-write.js","sourceRoot":"","sources":["../../../src/services/storage-file-write.ts"],"names":[],"mappings":"AAuCA,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC9D,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACzE,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAE7D;+EAC+E;AAC/E,MAAM,CAAC,MAAM,8BAA8B,GAAG,IAAI,CAAC;AAwCnD;;;GAGG;AACH,SAAS,QAAQ,CAAC,SAAiB,EAAE,GAAW;IAC5C,IAAI,CAAC,GAAG,EAAE,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC;IACzF,CAAC;IACD,IAAI,eAAe,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9D,OAAO;YACH,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW;YACzC,OAAO,EAAE,qEAAqE;SACjF,CAAC;IACN,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,gGAAgG;AAChG,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAClC,IAAsB,EACtB,SAAiB,EACjB,KAAuB;IAEvB,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAEjC,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9C,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAE1B,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,SAAS,CAAC;IACjD,gGAAgG;IAChG,6CAA6C;IAC7C,IAAI,UAAU,KAAK,WAAW,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;QACpD,OAAO;YACH,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,eAAe;YAC7C,OAAO,EAAE,+GAA+G;SAC3H,CAAC;IACN,CAAC;IAED,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,oBAAoB,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;QAChE,OAAO;YACH,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,UAAU;YACjE,OAAO,EAAE,qBAAqB,MAAM,CAAC,oBAAoB,UAAU;SACtE,CAAC;IACN,CAAC;IAED,+FAA+F;IAC/F,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACrF,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QACjB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,MAAO,EAAE,CAAC;IACxG,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC;QACzC,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,SAAS;QACT,UAAU;QACV,OAAO,EAAE,UAAU,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;QAC3D,YAAY,EAAE,UAAU,KAAK,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;QACzE,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,0BAA0B;QACtD,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM;QACvB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,QAAQ,EAAE,KAAK,CAAC,QAAQ,KAAK,IAAI;QACjC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACtC,CAAC,CAAC;IAEH,6FAA6F;IAC7F,wDAAwD;IACxD,IAAI,KAAK,CAAC,cAAc,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,aAAa,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,cAAc,EAAE,iBAAiB,CAAC,CAAC;IACrF,CAAC;IAED,IAAI,CAAC,mBAAmB,EAAE,CAAC,SAAS,EAAE,oBAAoB,kBAAkB,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC3F,IAAI,CAAC,uBAAuB,EAAE,CAAC,SAAS,CAAC,CAAC;IAE1C,6FAA6F;IAC7F,8FAA8F;IAC9F,8FAA8F;IAC9F,UAAU,CAAC,OAAO,CAAC,CAAC;IACpB,UAAU,CAAC,QAAQ,CAAC,CAAC;IAErB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC;AACpE,CAAC;AAsBD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACtC,IAAsB,EACtB,SAAiB,EACjB,KAA4B;IAE5B,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAExB,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9C,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAE1B,6FAA6F;IAC7F,6FAA6F;IAC7F,MAAM,QAAQ,GAAG,MAAM,CAAC,oBAAoB,GAAG,IAAI,GAAG,IAAI,CAAC;IAC3D,MAAM,WAAW,GAAG,KAAK,CAAC,QAAQ,IAAI,0BAA0B,CAAC;IACjE,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC;QACpC,GAAG,EAAE,SAAS;QACd,KAAK,EAAE,SAAS;QAChB,IAAI,EAAE,eAAe,CAAC,SAAS,EAAE;YAC7B,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,SAAS,EAAE,WAAW;YACtB,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,SAAS;YACzC,QAAQ,EAAE,KAAK,CAAC,OAAO;YACvB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,cAAc,EAAE,KAAK,CAAC,YAAY,IAAI,SAAS;SAClD,CAAC;QACF,QAAQ;QACR,WAAW;KACd,EAAE,8BAA8B,CAAC,CAAC;IAEnC,OAAO;QACH,EAAE,EAAE,IAAI;QACR,SAAS,EAAE,GAAG,MAAM,CAAC,OAAO,cAAc,KAAK,EAAE;QACjD,WAAW;QACX,QAAQ;QACR,gBAAgB,EAAE,8BAA8B;KACnD,CAAC;AACN,CAAC"}
+{"version":3,"file":"storage-file-write.js","sourceRoot":"","sources":["../../../src/services/storage-file-write.ts"],"names":[],"mappings":"AA8CA,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC9D,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACzE,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAE7D;+EAC+E;AAC/E,MAAM,CAAC,MAAM,8BAA8B,GAAG,IAAI,CAAC;AAoDnD;;;;GAIG;AACH,SAAS,QAAQ,CAAC,SAAiB,EAAE,GAAW;IAC5C,IAAI,CAAC,GAAG,EAAE,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC;IACzF,CAAC;IACD,IAAI,eAAe,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9D,OAAO;YACH,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW;YACzC,OAAO,EAAE,+DAA+D;SAC3E,CAAC;IACN,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,gGAAgG;AAChG,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAClC,IAAsB,EACtB,SAAiB,EACjB,KAAuB;IAEvB,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAEjC,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9C,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAE1B,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,SAAS,CAAC;IACjD,gGAAgG;IAChG,6CAA6C;IAC7C,IAAI,UAAU,KAAK,WAAW,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;QACpD,OAAO;YACH,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,eAAe;YAC7C,OAAO,EAAE,+GAA+G;SAC3H,CAAC;IACN,CAAC;IAED,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,oBAAoB,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;QAChE,OAAO;YACH,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,UAAU;YACjE,OAAO,EAAE,qBAAqB,MAAM,CAAC,oBAAoB,UAAU;SACtE,CAAC;IACN,CAAC;IAED,+FAA+F;IAC/F,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACrF,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QACjB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,MAAO,EAAE,CAAC;IACxG,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC;QACzC,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,SAAS;QACT,UAAU;QACV,OAAO,EAAE,UAAU,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;QAC3D,YAAY,EAAE,UAAU,KAAK,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;QACzE,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,0BAA0B;QACtD,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM;QACvB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,QAAQ,EAAE,KAAK,CAAC,QAAQ,KAAK,IAAI;QACjC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACtC,CAAC,CAAC;IAEH,6FAA6F;IAC7F,wDAAwD;IACxD,IAAI,KAAK,CAAC,cAAc,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,aAAa,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,cAAc,EAAE,iBAAiB,CAAC,CAAC;IACrF,CAAC;IAED,IAAI,CAAC,mBAAmB,EAAE,CAAC,SAAS,EAAE,oBAAoB,kBAAkB,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC3F,IAAI,CAAC,uBAAuB,EAAE,CAAC,SAAS,CAAC,CAAC;IAE1C,6FAA6F;IAC7F,8FAA8F;IAC9F,8FAA8F;IAC9F,UAAU,CAAC,OAAO,CAAC,CAAC;IACpB,UAAU,CAAC,QAAQ,CAAC,CAAC;IAErB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC;AACpE,CAAC;AAaD;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACnC,IAAsB,EACtB,SAAiB,EACjB,GAAW;IAEX,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAEzB,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IACxC,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAE1B,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IAC9D,IAAI,CAAC,QAAQ,EAAE,CAAC;QACZ,OAAO;YACH,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW;YACzC,OAAO,EAAE,qCAAqC,GAAG,2HAA2H;SAC/K,CAAC;IACN,CAAC;IACD,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACnC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,oCAAoC,EAAE,CAAC;IAC5G,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IAChE,IAAI,CAAC,OAAO,EAAE,CAAC;QACX,2FAA2F;QAC3F,0FAA0F;QAC1F,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,mBAAmB,GAAG,EAAE,EAAE,CAAC;IAC5F,CAAC;IAED,IAAI,CAAC,mBAAmB,EAAE,CAAC,SAAS,EAAE,oBAAoB,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACrF,IAAI,CAAC,uBAAuB,EAAE,CAAC,SAAS,CAAC,CAAC;IAE1C,iGAAiG;IACjG,+EAA+E;IAC/E,UAAU,CAAC,OAAO,CAAC,CAAC;IACpB,UAAU,CAAC,QAAQ,CAAC,CAAC;IAErB,OAAO;QACH,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU;KACnG,CAAC;AACN,CAAC;AAsBD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACtC,IAAsB,EACtB,SAAiB,EACjB,KAA4B;IAE5B,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAExB,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9C,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAE1B,6FAA6F;IAC7F,6FAA6F;IAC7F,MAAM,QAAQ,GAAG,MAAM,CAAC,oBAAoB,GAAG,IAAI,GAAG,IAAI,CAAC;IAC3D,MAAM,WAAW,GAAG,KAAK,CAAC,QAAQ,IAAI,0BAA0B,CAAC;IACjE,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC;QACpC,GAAG,EAAE,SAAS;QACd,KAAK,EAAE,SAAS;QAChB,IAAI,EAAE,eAAe,CAAC,SAAS,EAAE;YAC7B,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,SAAS,EAAE,WAAW;YACtB,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,SAAS;YACzC,QAAQ,EAAE,KAAK,CAAC,OAAO;YACvB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,cAAc,EAAE,KAAK,CAAC,YAAY,IAAI,SAAS;SAClD,CAAC;QACF,QAAQ;QACR,WAAW;KACd,EAAE,8BAA8B,CAAC,CAAC;IAEnC,OAAO;QACH,EAAE,EAAE,IAAI;QACR,SAAS,EAAE,GAAG,MAAM,CAAC,OAAO,cAAc,KAAK,EAAE;QACjD,WAAW;QACX,QAAQ;QACR,gBAAgB,EAAE,8BAA8B;KACnD,CAAC;AACN,CAAC"}

package/dist/src/services/task-outcome.d.ts

@@ -0,0 +1,53 @@
+/**
+ * @file src/services/task-outcome.ts
+ * @description What a finished task actually produced, in one place, for every door that reports a
+ *   task.
+ *
+ *   THE HOLE THIS CLOSES, and it was found by a crew rather than by us. A task-runner completed a
+ *   real job in 104 seconds, the task went to `done`, and the answer could not be read back from
+ *   anywhere: `aimeat_task_get` returns fifteen fields and not one of them is the output. The
+ *   completion MESSAGE — the agent's own sentence about what it did — is written to the 'completed'
+ *   event and nowhere else, and `deliverableKey` is on the record but was never returned. So the
+ *   caller saw `status: "done"` and had to already know that a second, differently-shaped endpoint
+ *   exists before it could find out what happened. A finished task whose result nobody can reach is
+ *   indistinguishable from one that produced nothing.
+ *
+ *   WHY NOT A NEW COLUMN. The two facts already exist: the sentence is on the terminal event, the
+ *   pointer is on the record. A `completionMessage` column would be a third copy of something
+ *   stored twice, on both providers, with a migration — to fix a READ. The read is what was broken.
+ *
+ *   The deliverable is returned as an ADDRESS, not as content. It is a memory key under the agent's
+ *   own namespace and may be any size; a task read that inlined it would make every listing as
+ *   expensive as its largest output.
+ * @structure taskOutcome() — the terminal event plus the deliverable pointer, or null while running
+ * @usage
+ *   import { taskOutcome } from '../services/task-outcome.js';
+ *   const outcome = await taskOutcome(storage, task);   // null unless done/failed
+ * @version-history
+ *   v1.0.0 — 2026-08-16 — Initial. Reported by crewaimeat-dev against aimeat-crewai 0.20.0: a
+ *     completed task-runner leaves its output where the caller cannot read it.
+ */
+import type { Storage, AgentTaskRecord } from '../storage/interface.js';
+/** What a finished task produced. Null while it is still running — an unfinished task has no
+ *  outcome, and reporting an empty one would read as "finished with nothing". */
+export interface TaskOutcome {
+    /** 'done' or 'failed' — the same word the terminal event carries. */
+    state: 'done' | 'failed';
+    /** The agent's own sentence about what it did, from the terminal event. */
+    message: string;
+    at: string;
+    /** Memory key under the AGENT's namespace where the deliverable was published, when one was
+     *  named. The pointer, never the content: an output may be megabytes. */
+    deliverable_key?: string;
+    /** A ready-to-follow address for that key, so a caller does not have to assemble one. */
+    deliverable_url?: string;
+}
+/**
+ * The outcome of a task, or null if it has not finished.
+ *
+ * Reads the events newest-first and takes the first terminal one, so a task that was completed,
+ * reopened and completed again reports the LATEST completion rather than the first — which is what
+ * "what happened" means to whoever is asking.
+ */
+export declare function taskOutcome(storage: Storage, task: AgentTaskRecord): Promise<TaskOutcome | null>;
+//# sourceMappingURL=task-outcome.d.ts.map

package/dist/src/services/task-outcome.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"task-outcome.d.ts","sourceRoot":"","sources":["../../../src/services/task-outcome.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAExE;iFACiF;AACjF,MAAM,WAAW,WAAW;IACxB,qEAAqE;IACrE,KAAK,EAAE,MAAM,GAAG,QAAQ,CAAC;IACzB,2EAA2E;IAC3E,OAAO,EAAE,MAAM,CAAC;IAChB,EAAE,EAAE,MAAM,CAAC;IACX;6EACyE;IACzE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,yFAAyF;IACzF,eAAe,CAAC,EAAE,MAAM,CAAC;CAC5B;AAID;;;;;;GAMG;AACH,wBAAsB,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAmBtG"}

package/dist/src/services/task-outcome.js

@@ -0,0 +1,28 @@
+const TERMINAL = new Set(['completed', 'failed']);
+/**
+ * The outcome of a task, or null if it has not finished.
+ *
+ * Reads the events newest-first and takes the first terminal one, so a task that was completed,
+ * reopened and completed again reports the LATEST completion rather than the first — which is what
+ * "what happened" means to whoever is asking.
+ */
+export async function taskOutcome(storage, task) {
+    if (task.status !== 'done' && task.status !== 'failed')
+        return null;
+    const { events } = await storage.listTaskEvents(task.id, { page: 1, perPage: 50 });
+    // listTaskEvents orders oldest-first; the terminal one is at the end.
+    const terminal = [...events].reverse().find(e => TERMINAL.has(e.type));
+    return {
+        state: task.status,
+        // A task can reach a terminal state without a terminal event — an owner-side cancel, an
+        // older record from before the event existed. Saying so beats an empty string that reads
+        // like an agent who had nothing to report.
+        message: terminal?.message ?? '(no completion message was recorded)',
+        at: terminal?.timestamp ?? task.completedAt ?? task.updatedAt,
+        ...(task.deliverableKey ? {
+            deliverable_key: task.deliverableKey,
+            deliverable_url: `/v1/memory/${encodeURIComponent(task.agentGaii)}/${encodeURIComponent(task.deliverableKey)}`,
+        } : {}),
+    };
+}
+//# sourceMappingURL=task-outcome.js.map

package/dist/src/services/task-outcome.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"task-outcome.js","sourceRoot":"","sources":["../../../src/services/task-outcome.ts"],"names":[],"mappings":"AA8CA,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC;AAElD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAgB,EAAE,IAAqB;IACrE,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAEpE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;IACnF,sEAAsE;IACtE,MAAM,QAAQ,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAEvE,OAAO;QACH,KAAK,EAAE,IAAI,CAAC,MAAM;QAClB,wFAAwF;QACxF,yFAAyF;QACzF,2CAA2C;QAC3C,OAAO,EAAE,QAAQ,EAAE,OAAO,IAAI,sCAAsC;QACpE,EAAE,EAAE,QAAQ,EAAE,SAAS,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,SAAS;QAC7D,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;YACtB,eAAe,EAAE,IAAI,CAAC,cAAc;YACpC,eAAe,EAAE,cAAc,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE;SACjH,CAAC,CAAC,CAAC,EAAE,CAAC;KACV,CAAC;AACN,CAAC"}

package/dist/src/services/workflow/engine-human.d.ts

@@ -6,6 +6,13 @@
  *   Extracted from engine.ts to satisfy max-file-lines.
  * @usage import { validateHumanAnswer, applyHumanAnswer } from './engine-human.js';
  * @version-history
+ *   v1.2.0 — 2026-08-15 — The upgrade requires a PERSON, which the paragraph guarding it always
+ *     said and the code never asked. An agent could call aimeat_workflow_answer on the step holding
+ *     its own draft and the node stamped that content 'editorial-control' with the note "reviewed
+ *     by <the agent>", turning the public disclosure label from "no human editorial review" into
+ *     the reviewed wording with nobody having read the bytes. `byIsHuman` is set by the door that
+ *     knows the principal class and absent everywhere else, so agents keep answering and stop
+ *     upgrading. E2E test-quality audit finding A18.
  *   v1.1.0 — 2026-08-01 — TARGET-058 Phase 4: a human-input step that names `reviews_key` re-stamps
  *     the reviewed content with humanInvolvement 'editorial-control'. This is the ONLY place in
  *     the engine that may upgrade that field, and a watchdog timeout default never does — nobody
@@ -20,6 +27,14 @@ export interface HumanAnswerValue {
     pick: string;
     other?: string;
     by: string;
+    /**
+     * Was the answerer a PERSON? Absent means no, deliberately: the upgrade below is the one thing in
+     * the engine that can turn "no human editorial review" into "reviewed by a person", so a caller
+     * has to say so on purpose. `by` alone cannot answer it — an agent's GAII and a human's GHII are
+     * both just strings here, and inferring humanness from their shape would break the moment a new
+     * principal class arrives.
+     */
+    byIsHuman?: boolean;
 }
 /**
  * Validate an incoming answer against the question PINNED at ask time (not the current def — a

package/dist/src/services/workflow/engine-human.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"engine-human.d.ts","sourceRoot":"","sources":["../../../../src/services/workflow/engine-human.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAGpD,OAAO,KAAK,EAAE,WAAW,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AAE3F,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,EAAE,EAAE,MAAM,CAAC;CACZ;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,qBAAqB,EAAE,MAAM,EAAE;IAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,GAAG,IAAI,CAOxH;AAED;;;;GAIG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,gBAAgB,GACjH,OAAO,CAAC,IAAI,CAAC,CAwDf"}
+{"version":3,"file":"engine-human.d.ts","sourceRoot":"","sources":["../../../../src/services/workflow/engine-human.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAGpD,OAAO,KAAK,EAAE,WAAW,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AAE3F,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,EAAE,EAAE,MAAM,CAAC;IACX;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,qBAAqB,EAAE,MAAM,EAAE;IAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,GAAG,IAAI,CAOxH;AAED;;;;GAIG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,gBAAgB,GACjH,OAAO,CAAC,IAAI,CAAC,CAiEf"}

package/dist/src/services/workflow/engine-human.js

@@ -52,7 +52,16 @@ export async function applyHumanAnswer(storage, config, ownerGhii, run, stepId,
     // A TIMEOUT DEFAULT IS NOT REVIEW. When the watchdog synthesises an answer (`by: 'timeout-default'`)
     // nobody read anything, and upgrading on that path would manufacture editorial control out of
     // silence — which is the precise failure this whole design exists to prevent.
-    if (action?.reviews_key && ans.by && ans.by !== 'timeout-default') {
+    //
+    // AND NEITHER IS AN AGENT ANSWERING ITS OWN STEP. The paragraph above says "a person reads the
+    // substance", and until 2026-08-15 nothing enforced the person: the very agent whose draft was
+    // parked for review called aimeat_workflow_answer on it and the node stamped that content
+    // `humanInvolvement: 'editorial-control'` with the note "reviewed by <the agent>", flipping the
+    // public disclosure label from "no human editorial review" to the reviewed wording with nobody
+    // having seen the bytes. That is a false statement about provenance, which is the one thing this
+    // record exists to make true. `byIsHuman` is set by the door that knows the principal class; the
+    // agent surface and the watchdog leave it unset, so both keep answering and neither upgrades.
+    if (action?.reviews_key && ans.by && ans.by !== 'timeout-default' && ans.byIsHuman === true) {
         const reviewedKey = (run.keyPrefix ?? '') + template(action.reviews_key, run.vars);
         const reviewed = await storage.getMemory(ownerGhii, reviewedKey);
         if (reviewed) {

package/dist/src/services/workflow/engine-human.js.map

@@ -1 +1 @@
-{"version":3,"file":"engine-human.js","sourceRoot":"","sources":["../../../../src/services/workflow/engine-human.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAU5C;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,CAAwB,EAAE,MAA2C;IACvG,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9C,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK;QAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,OAAO,sBAAsB,CAAC,GAAG,CAAC;IACjF,IAAI,CAAC,CAAC,CAAC,WAAW,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,qCAAqC,CAAC;IAC5F,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,UAAU,KAAK,KAAK;QAAE,OAAO,oDAAoD,CAAC;IACtH,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK;QAAE,OAAO,+CAA+C,CAAC;IACvG,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAgB,EAAE,MAAoB,EAAE,SAAiB,EAAE,GAAgB,EAAE,MAAc,EAAE,GAAqB;IAElH,MAAM,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7B,MAAM,IAAI,GAAG,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC;IAC9D,MAAM,MAAM,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9E,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,EAAE,CAAC,KAAK,GAAG,EAAE,GAAG,EAAE,CAAC,KAAM,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IAC1D,IAAI,MAAM,EAAE,aAAa,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,aAAa,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QAC7E,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QACzD,MAAM,OAAO,CAAC,SAAS,CAAC;YACtB,GAAG,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,GAAG,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE;YAC7D,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,uBAAuB,CAAC,EAAE,QAAQ,EAAE,IAAI;YACtE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5C,SAAS,EAAE,QAAQ,EAAE,SAAS,IAAI,GAAG,EAAE,SAAS,EAAE,GAAG;SACtD,CAAC,CAAC;QACH,EAAE,CAAC,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IAChD,CAAC;IAED,kFAAkF;IAClF,EAAE;IACF,8FAA8F;IAC9F,4FAA4F;IAC5F,gCAAgC;IAChC,EAAE;IACF,iGAAiG;IACjG,iGAAiG;IACjG,sEAAsE;IACtE,EAAE;IACF,qGAAqG;IACrG,8FAA8F;IAC9F,8EAA8E;IAC9E,IAAI,MAAM,EAAE,WAAW,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,EAAE,KAAK,iBAAiB,EAAE,CAAC;QAClE,MAAM,WAAW,GAAG,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QACnF,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QACjE,IAAI,QAAQ,EAAE,CAAC;YACb,6FAA6F;YAC7F,yFAAyF;YACzF,MAAM,YAAY,GAAG,MAAM,qBAAqB,CAAC,OAAO,EAAE;gBACxD,SAAS,EAAE,SAAS;gBACpB,OAAO,EAAE,OAAO,QAAQ,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,IAAI,IAAI,CAAC;gBACrG,KAAK,EAAE,cAAc;gBACrB,QAAQ,EAAE,YAAY,GAAG,CAAC,WAAW,CAAC,EAAE,IAAI,MAAM,EAAE;gBACpD,UAAU,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;gBACzC,OAAO,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,aAAa,EAAE,IAAI,EAAE;gBACjE,WAAW,EAAE,MAAM,CAAC,aAAa;gBACjC,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,OAAO,EAAE,MAAM,CAAC,YAAY;aAC7B,CAAC,CAAC;YACH,IAAI,YAAY,EAAE,CAAC;gBACjB,MAAM,OAAO,CAAC,SAAS,CAAC,EAAE,GAAG,QAAQ,EAAE,cAAc,EAAE,YAAY,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;gBACvF,EAAE,CAAC,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC;YACxD,CAAC;QACH,CAAC;IACH,CAAC;IACD,EAAE,CAAC,KAAK,GAAG,OAAO,CAAC;IAAC,EAAE,CAAC,OAAO,GAAG,GAAG,CAAC;AACvC,CAAC"}
+{"version":3,"file":"engine-human.js","sourceRoot":"","sources":["../../../../src/services/workflow/engine-human.ts"],"names":[],"mappings":"AAuBA,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAkB5C;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,CAAwB,EAAE,MAA2C;IACvG,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9C,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK;QAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,OAAO,sBAAsB,CAAC,GAAG,CAAC;IACjF,IAAI,CAAC,CAAC,CAAC,WAAW,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,qCAAqC,CAAC;IAC5F,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,UAAU,KAAK,KAAK;QAAE,OAAO,oDAAoD,CAAC;IACtH,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK;QAAE,OAAO,+CAA+C,CAAC;IACvG,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAgB,EAAE,MAAoB,EAAE,SAAiB,EAAE,GAAgB,EAAE,MAAc,EAAE,GAAqB;IAElH,MAAM,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7B,MAAM,IAAI,GAAG,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC;IAC9D,MAAM,MAAM,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9E,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,EAAE,CAAC,KAAK,GAAG,EAAE,GAAG,EAAE,CAAC,KAAM,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IAC1D,IAAI,MAAM,EAAE,aAAa,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,aAAa,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QAC7E,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QACzD,MAAM,OAAO,CAAC,SAAS,CAAC;YACtB,GAAG,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,GAAG,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE;YAC7D,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,uBAAuB,CAAC,EAAE,QAAQ,EAAE,IAAI;YACtE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5C,SAAS,EAAE,QAAQ,EAAE,SAAS,IAAI,GAAG,EAAE,SAAS,EAAE,GAAG;SACtD,CAAC,CAAC;QACH,EAAE,CAAC,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IAChD,CAAC;IAED,kFAAkF;IAClF,EAAE;IACF,8FAA8F;IAC9F,4FAA4F;IAC5F,gCAAgC;IAChC,EAAE;IACF,iGAAiG;IACjG,iGAAiG;IACjG,sEAAsE;IACtE,EAAE;IACF,qGAAqG;IACrG,8FAA8F;IAC9F,8EAA8E;IAC9E,EAAE;IACF,+FAA+F;IAC/F,+FAA+F;IAC/F,0FAA0F;IAC1F,gGAAgG;IAChG,+FAA+F;IAC/F,iGAAiG;IACjG,iGAAiG;IACjG,8FAA8F;IAC9F,IAAI,MAAM,EAAE,WAAW,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,EAAE,KAAK,iBAAiB,IAAI,GAAG,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;QAC5F,MAAM,WAAW,GAAG,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QACnF,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QACjE,IAAI,QAAQ,EAAE,CAAC;YACb,6FAA6F;YAC7F,yFAAyF;YACzF,MAAM,YAAY,GAAG,MAAM,qBAAqB,CAAC,OAAO,EAAE;gBACxD,SAAS,EAAE,SAAS;gBACpB,OAAO,EAAE,OAAO,QAAQ,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,IAAI,IAAI,CAAC;gBACrG,KAAK,EAAE,cAAc;gBACrB,QAAQ,EAAE,YAAY,GAAG,CAAC,WAAW,CAAC,EAAE,IAAI,MAAM,EAAE;gBACpD,UAAU,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;gBACzC,OAAO,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,aAAa,EAAE,IAAI,EAAE;gBACjE,WAAW,EAAE,MAAM,CAAC,aAAa;gBACjC,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,OAAO,EAAE,MAAM,CAAC,YAAY;aAC7B,CAAC,CAAC;YACH,IAAI,YAAY,EAAE,CAAC;gBACjB,MAAM,OAAO,CAAC,SAAS,CAAC,EAAE,GAAG,QAAQ,EAAE,cAAc,EAAE,YAAY,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;gBACvF,EAAE,CAAC,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC;YACxD,CAAC;QACH,CAAC;IACH,CAAC;IACD,EAAE,CAAC,KAAK,GAAG,OAAO,CAAC;IAAC,EAAE,CAAC,OAAO,GAAG,GAAG,CAAC;AACvC,CAAC"}

package/dist/src/services/workflow/engine-steps.d.ts

@@ -24,10 +24,55 @@ export declare function dispatchStep(deps: StepDeps, ownerGhii: string, run: Wor
  * under the lock by tick(), so onPushTerminal (which also locks) advances it safely on the reply.
  * The workflow owner is the caller GHII (the human pays / is the AIMEAT-side principal).
  */
-export declare function dispatchEcosystemStep(deps: StepDeps, ownerGhii: string, run: WorkflowRun, step: WorkflowStep, action: Exclude<WorkflowStep['action'], undefined | {
-    kind: 'agent';
+export declare function dispatchEcosystemStep(deps: StepDeps, ownerGhii: string, run: WorkflowRun, step: WorkflowStep, action: Extract<NonNullable<WorkflowStep['action']>, {
+    kind: 'export-out';
 } | {
-    kind: 'human-input';
+    kind: 'trigger-geai';
+}>, onPushTerminal: OnPushTerminal): void;
+/**
+ * Run an `extension` step: one of the OWNER'S OWN extension actions, here on this node, in the
+ * QuickJS sandbox. No agent has to be online, no tunnel has to be up, and no model is called.
+ *
+ * WHY THIS EXISTS. An extension action was already callable over HTTP, over MCP and on a clock, and
+ * was the one capability a workflow could not reach — so a pipeline whose deterministic half lives
+ * in an extension had to route it through an agent that did nothing but relay, which needs the agent
+ * to be online and puts a model in the path of work that has no judgement in it.
+ *
+ * IDENTITY. The caller is the RUN'S OWNER GHII (an ecosystem step already names them for the same
+ * reason: the human is the AIMEAT-side principal), with the role 'operator' because nobody is
+ * sitting at a screen. Files land in the owner's namespace, so a package produced by a workflow step
+ * sits at the same permanent address as one produced on a clock, by an agent, or from the app.
+ *
+ * Fire-and-forget, exactly like the ecosystem path: tick() has already marked the step 'dispatched'
+ * and persisted it under the run lock, and onPushTerminal takes the lock again to advance the run.
+ * A throw becomes `ok: false`, which is `output-red` (or a retry) — never a quiet green.
+ */
+export declare function dispatchExtensionStep(deps: StepDeps, ownerGhii: string, run: WorkflowRun, step: WorkflowStep, action: Extract<NonNullable<WorkflowStep['action']>, {
+    kind: 'extension';
+}>, onPushTerminal: OnPushTerminal): void;
+/**
+ * Run a `datapackage` step: publish one version from what an earlier step wrote.
+ *
+ * THIS IS THE BINDING A REPEATING PACKAGE NEEDS, and it is the join no other component could make.
+ * An extension step lands its return value in the OWNER'S namespace as a private record — right,
+ * because an intermediate result is not something to publish — and that is precisely what the
+ * sandbox cannot read back: `ctx.memory.get` sees `ext:{name}`, `ctx.memory.getPublic` returns only
+ * public records. So the two halves, "call the producer" and "publish what it returned", can only
+ * meet in the engine, which already runs as the owner and already wrote that key.
+ *
+ * It calls the same publishPackage() the REST route and the sandbox capability call, so a package a
+ * workflow refreshes weekly is the same object, at the same kind of address, as one a person
+ * published from the app. The producer block records that a workflow made it, and the schedule that
+ * drives the workflow rides along — a buyer choosing between two packages can see which is which.
+ *
+ * REFUSALS ARE RED, and loudly. A quality-gate refusal throws with the coordinates in the message:
+ * nothing was written, the package still stands on its previous version, and the step is red rather
+ * than green-with-nothing-produced. `recordFailure` puts the same sentence on the package's own
+ * pointer, so an owner looking at the package — not at a run log — learns that the latest attempt
+ * broke and which version they are still on.
+ */
+export declare function dispatchDataPackageStep(deps: StepDeps, ownerGhii: string, run: WorkflowRun, step: WorkflowStep, action: Extract<NonNullable<WorkflowStep['action']>, {
+    kind: 'datapackage';
 }>, onPushTerminal: OnPushTerminal): void;
 /**
  * Deliver a human-input step's question to the owner and return the human bookkeeping record the

package/dist/src/services/workflow/engine-steps.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"engine-steps.d.ts","sourceRoot":"","sources":["../../../../src/services/workflow/engine-steps.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,KAAK,EAAE,OAAO,EAAmC,MAAM,4BAA4B,CAAC;AAC3F,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AACxE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAKhD,OAAO,EAA6B,KAAK,YAAY,EAAE,MAAM,YAAY,CAAC;AAK1E,OAAO,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAEnG,KAAK,iBAAiB,GAAG,UAAU,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAEpE,0FAA0F;AAC1F,MAAM,WAAW,QAAQ;IACvB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,YAAY,CAAC;IACrB,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,YAAY,CAAC,EAAE,YAAY,CAAC;CAC7B;AAED,oFAAoF;AACpF,MAAM,MAAM,cAAc,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAKzI,2FAA2F;AAC3F,wBAAsB,YAAY,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,YAAY,GAAG,SAAS,EAAE,cAAc,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAwCjM;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,SAAS,GAAG;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,aAAa,CAAA;CAAE,CAAC,EAAE,cAAc,EAAE,cAAc,GAAG,IAAI,CAuBrP;AAED;;;;;;;GAOG;AACH,wBAAsB,aAAa,CACjC,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,YAAY,EACvE,MAAM,EAAE,OAAO,CAAC,WAAW,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,EAAE;IAAE,IAAI,EAAE,aAAa,CAAA;CAAE,CAAC,GAC5E,OAAO,CAAC,WAAW,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,CAehD;AAED;;;;GAIG;AACH,wBAAsB,UAAU,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAiBrJ;AAED;;;;;GAKG;AACH,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAmCxL;AAED;;;;GAIG;AACH,wBAAsB,sBAAsB,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAgBnI;AAED;;;;;;;;GAQG;AACH,wBAAsB,aAAa,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAkDzG;AAED;;;;;;;;;GASG;AACH,wBAAsB,eAAe,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAoCxG"}
+{"version":3,"file":"engine-steps.d.ts","sourceRoot":"","sources":["../../../../src/services/workflow/engine-steps.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,KAAK,EAAE,OAAO,EAAmC,MAAM,4BAA4B,CAAC;AAC3F,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AACxE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAKhD,OAAO,EAA6B,KAAK,YAAY,EAAE,MAAM,YAAY,CAAC;AAO1E,OAAO,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAEnG,KAAK,iBAAiB,GAAG,UAAU,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAEpE,0FAA0F;AAC1F,MAAM,WAAW,QAAQ;IACvB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,YAAY,CAAC;IACrB,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,YAAY,CAAC,EAAE,YAAY,CAAC;CAC7B;AAED,oFAAoF;AACpF,MAAM,MAAM,cAAc,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAKzI,2FAA2F;AAC3F,wBAAsB,YAAY,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,YAAY,GAAG,SAAS,EAAE,cAAc,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAqDjM;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,WAAW,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,EAAE;IAAE,IAAI,EAAE,YAAY,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,cAAc,CAAA;CAAE,CAAC,EAAE,cAAc,EAAE,cAAc,GAAG,IAAI,CAuB5P;AAiBD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,YAAY,EACvE,MAAM,EAAE,OAAO,CAAC,WAAW,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,EAAE;IAAE,IAAI,EAAE,WAAW,CAAA;CAAE,CAAC,EAC3E,cAAc,EAAE,cAAc,GAC7B,IAAI,CA0DN;AA8JD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,YAAY,EACvE,MAAM,EAAE,OAAO,CAAC,WAAW,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,EAAE;IAAE,IAAI,EAAE,aAAa,CAAA;CAAE,CAAC,EAC7E,cAAc,EAAE,cAAc,GAC7B,IAAI,CA4FN;AAED;;;;;;;GAOG;AACH,wBAAsB,aAAa,CACjC,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,YAAY,EACvE,MAAM,EAAE,OAAO,CAAC,WAAW,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,EAAE;IAAE,IAAI,EAAE,aAAa,CAAA;CAAE,CAAC,GAC5E,OAAO,CAAC,WAAW,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,CAehD;AAED;;;;GAIG;AACH,wBAAsB,UAAU,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAiBrJ;AAED;;;;;GAKG;AACH,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAmCxL;AAED;;;;GAIG;AACH,wBAAsB,sBAAsB,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAgBnI;AAED;;;;;;;;GAQG;AACH,wBAAsB,aAAa,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAkDzG;AAED;;;;;;;;;GASG;AACH,wBAAsB,eAAe,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAoCxG"}