instar 1.3.441 → 1.3.443

package/dist/coordination/MandateStore.d.ts

@@ -16,8 +16,18 @@
  * (threat-model T12, out of scope) — the proof stops a forged/edited AUTHORED mandate;
  * local-file tamper of server-managed state is the baseline trust boundary.
  */
-import type { Authority, CoordinationMandate } from './types.js';
-/** Canonical bytes the authProof covers — the AUTHORED fields only (proof + revoked excluded). */
+import type { Authority, CoordinationMandate, UserAuthorityGrant } from './types.js';
+/**
+ * Canonical bytes the authProof covers — the AUTHORED fields only (proof + revoked excluded).
+ *
+ * BACKWARD-COMPAT (non-negotiable): `grants` is appended to the byte sequence ONLY
+ * when it is present AND non-empty. A mandate with no grants (the pre-extension shape,
+ * `grants` undefined OR `[]`) therefore canonicalizes to the EXACT same bytes as before
+ * this extension existed — so every previously-signed mandate's stored `authProof`
+ * keeps verifying. When grants ARE present, they extend the canonical bytes (each grant
+ * as a field-ordered tuple), so the proof covers them and a grant cannot be forged or
+ * added without re-signing through the PIN-gated path.
+ */
 export declare function canonicalMandate(m: Omit<CoordinationMandate, 'authProof' | 'revoked'>): string;
 export interface MandateStoreDeps {
     /** Absolute path to the mandates JSON file. */
@@ -38,6 +48,8 @@ export interface IssueMandateInput {
     expiresAt: string;
     id?: string;
     createdAt?: string;
+    /** Optional user→agent authority grants signed into the mandate at issuance. */
+    grants?: UserAuthorityGrant[];
 }
 export declare class MandateStore {
     private readonly d;
@@ -50,6 +62,22 @@ export declare class MandateStore {
      * authored bytes, persists, returns the mandate.
      */
     issue(input: IssueMandateInput): CoordinationMandate;
+    /**
+     * Add user→agent authority grant(s) to an existing mandate and RE-SIGN it so the
+     * `authProof` covers the new grants (the only path that can sign a grant in — the
+     * PIN-gated route is the sole caller). Grants are validated and clamped against the
+     * mandate's own expiry: a grant's `expiresAt` may never exceed the mandate's.
+     *
+     * Returns `{ ok: false }` with a reason for a missing/revoked mandate or an invalid
+     * grant; `{ ok: true, mandate }` on success. Never partially applies.
+     */
+    addGrants(id: string, grants: UserAuthorityGrant[]): {
+        ok: true;
+        mandate: CoordinationMandate;
+    } | {
+        ok: false;
+        reason: string;
+    };
     /** Verify a mandate's authorship proof (T1/T2). */
     verifyAuthorship(m: CoordinationMandate): boolean;
     get(id: string): CoordinationMandate | undefined;

package/dist/coordination/MandateStore.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"MandateStore.d.ts","sourceRoot":"","sources":["../../src/coordination/MandateStore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAIH,OAAO,KAAK,EAAE,SAAS,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAYjE,kGAAkG;AAClG,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,IAAI,CAAC,mBAAmB,EAAE,WAAW,GAAG,SAAS,CAAC,GAAG,MAAM,CAM9F;AAED,MAAM,WAAW,gBAAgB;IAC/B,+CAA+C;IAC/C,QAAQ,EAAE,MAAM,CAAC;IACjB,sFAAsF;IACtF,IAAI,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,MAAM,CAAC;IACpC,0DAA0D;IAC1D,SAAS,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC;IACzD,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,gFAAgF;IAChF,KAAK,CAAC,EAAE,MAAM,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzB,WAAW,EAAE,SAAS,EAAE,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAmB;gBACzB,IAAI,EAAE,gBAAgB;IAIlC,OAAO,CAAC,MAAM;IAId,OAAO,CAAC,OAAO;IAOf,OAAO,CAAC,QAAQ;IAKhB;;;OAGG;IACH,KAAK,CAAC,KAAK,EAAE,iBAAiB,GAAG,mBAAmB;IAkBpD,mDAAmD;IACnD,gBAAgB,CAAC,CAAC,EAAE,mBAAmB,GAAG,OAAO;IAKjD,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,mBAAmB,GAAG,SAAS;IAIhD,IAAI,IAAI,mBAAmB,EAAE;IAI7B,0FAA0F;IAC1F,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,mBAAmB,GAAG,SAAS;CAUpE"}
+{"version":3,"file":"MandateStore.d.ts","sourceRoot":"","sources":["../../src/coordination/MandateStore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAIH,OAAO,KAAK,EAAE,SAAS,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAYrF;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,IAAI,CAAC,mBAAmB,EAAE,WAAW,GAAG,SAAS,CAAC,GAAG,MAAM,CAW9F;AAED,MAAM,WAAW,gBAAgB;IAC/B,+CAA+C;IAC/C,QAAQ,EAAE,MAAM,CAAC;IACjB,sFAAsF;IACtF,IAAI,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,MAAM,CAAC;IACpC,0DAA0D;IAC1D,SAAS,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC;IACzD,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,gFAAgF;IAChF,KAAK,CAAC,EAAE,MAAM,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzB,WAAW,EAAE,SAAS,EAAE,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gFAAgF;IAChF,MAAM,CAAC,EAAE,kBAAkB,EAAE,CAAC;CAC/B;AAED,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAmB;gBACzB,IAAI,EAAE,gBAAgB;IAIlC,OAAO,CAAC,MAAM;IAId,OAAO,CAAC,OAAO;IAOf,OAAO,CAAC,QAAQ;IAKhB;;;OAGG;IACH,KAAK,CAAC,KAAK,EAAE,iBAAiB,GAAG,mBAAmB;IAyCpD;;;;;;;;OAQG;IACH,SAAS,CACP,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,kBAAkB,EAAE,GAC3B;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,OAAO,EAAE,mBAAmB,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE;IAuC7E,mDAAmD;IACnD,gBAAgB,CAAC,CAAC,EAAE,mBAAmB,GAAG,OAAO;IAKjD,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,mBAAmB,GAAG,SAAS;IAIhD,IAAI,IAAI,mBAAmB,EAAE;IAI7B,0FAA0F;IAC1F,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,mBAAmB,GAAG,SAAS;CAUpE"}

package/dist/coordination/MandateStore.js

@@ -29,13 +29,28 @@ function stableStringify(value) {
     const keys = Object.keys(obj).sort();
     return '{' + keys.map((k) => JSON.stringify(k) + ':' + stableStringify(obj[k])).join(',') + '}';
 }
-/** Canonical bytes the authProof covers — the AUTHORED fields only (proof + revoked excluded). */
+/**
+ * Canonical bytes the authProof covers — the AUTHORED fields only (proof + revoked excluded).
+ *
+ * BACKWARD-COMPAT (non-negotiable): `grants` is appended to the byte sequence ONLY
+ * when it is present AND non-empty. A mandate with no grants (the pre-extension shape,
+ * `grants` undefined OR `[]`) therefore canonicalizes to the EXACT same bytes as before
+ * this extension existed — so every previously-signed mandate's stored `authProof`
+ * keeps verifying. When grants ARE present, they extend the canonical bytes (each grant
+ * as a field-ordered tuple), so the proof covers them and a grant cannot be forged or
+ * added without re-signing through the PIN-gated path.
+ */
 export function canonicalMandate(m) {
-    return stableStringify([
+    const base = [
         m.id, m.scope, m.agents,
         m.authorities.map((a) => [a.action, a.bounds, a.requiresCondition ?? '']),
         m.author, m.createdAt, m.expiresAt,
-    ]);
+    ];
+    // Append-only-when-non-empty: no grants → identical bytes to a pre-extension mandate.
+    if (Array.isArray(m.grants) && m.grants.length > 0) {
+        base.push(m.grants.map((g) => [g.floorAction, g.grantedTo, g.authorizedBy, g.expiresAt, g.bounds ?? {}]));
+    }
+    return stableStringify(base);
 }
 export class MandateStore {
     d;
@@ -65,9 +80,32 @@ export class MandateStore {
     issue(input) {
         const id = input.id ?? (this.d.genId ? this.d.genId() : `mandate-${Math.random().toString(36).slice(2, 10)}`);
         const createdAt = input.createdAt ?? this.nowIso();
+        // Defense-in-depth (second-pass hardening): grants issued WITH the mandate are
+        // validated + expiry-clamped the SAME way addGrants() validates them, so a grant
+        // can never outlive the mandate that carries it regardless of caller. The HTTP
+        // issue route drops grants today; this keeps the library contract uniformly safe
+        // for any future caller, not relying solely on the query-side clamp.
+        if (input.grants && input.grants.length > 0) {
+            const mandateExpiryMs = Date.parse(input.expiresAt);
+            for (const g of input.grants) {
+                if (!g || typeof g.floorAction !== 'string' || !g.floorAction
+                    || typeof g.grantedTo !== 'string' || !g.grantedTo
+                    || typeof g.authorizedBy !== 'string' || !g.authorizedBy
+                    || typeof g.expiresAt !== 'string' || isNaN(Date.parse(g.expiresAt))) {
+                    throw new Error('each grant needs a non-empty floorAction, grantedTo, authorizedBy, and a valid ISO expiresAt');
+                }
+                if (Date.parse(g.expiresAt) > mandateExpiryMs) {
+                    throw new Error(`grant expiresAt (${g.expiresAt}) must be <= mandate expiresAt (${input.expiresAt})`);
+                }
+            }
+        }
         const authored = {
             id, scope: input.scope, agents: input.agents, authorities: input.authorities,
             author: input.author, createdAt, expiresAt: input.expiresAt,
+            // Append-only-when-non-empty: never set `grants` for a no-grant issuance, so the
+            // canonical bytes (and thus the proof) are byte-for-byte identical to before this
+            // extension existed.
+            ...(input.grants && input.grants.length > 0 ? { grants: input.grants } : {}),
         };
         const mandate = {
             ...authored,
@@ -79,6 +117,54 @@ export class MandateStore {
         this.writeAll(all);
         return mandate;
     }
+    /**
+     * Add user→agent authority grant(s) to an existing mandate and RE-SIGN it so the
+     * `authProof` covers the new grants (the only path that can sign a grant in — the
+     * PIN-gated route is the sole caller). Grants are validated and clamped against the
+     * mandate's own expiry: a grant's `expiresAt` may never exceed the mandate's.
+     *
+     * Returns `{ ok: false }` with a reason for a missing/revoked mandate or an invalid
+     * grant; `{ ok: true, mandate }` on success. Never partially applies.
+     */
+    addGrants(id, grants) {
+        const all = this.readAll();
+        const idx = all.findIndex((m) => m.id === id);
+        if (idx < 0)
+            return { ok: false, reason: 'mandate not found' };
+        const existing = all[idx];
+        if (existing.revoked)
+            return { ok: false, reason: 'mandate is revoked' };
+        if (!Array.isArray(grants) || grants.length === 0)
+            return { ok: false, reason: 'no grants provided' };
+        const mandateExpiry = Date.parse(existing.expiresAt);
+        for (const g of grants) {
+            if (!g || typeof g.floorAction !== 'string' || !g.floorAction
+                || typeof g.grantedTo !== 'string' || !g.grantedTo
+                || typeof g.authorizedBy !== 'string' || !g.authorizedBy
+                || typeof g.expiresAt !== 'string' || isNaN(Date.parse(g.expiresAt))) {
+                return { ok: false, reason: 'each grant needs non-empty floorAction, grantedTo, authorizedBy, and a valid ISO expiresAt' };
+            }
+            // A grant can NEVER outlive the delegation that carries it.
+            if (Date.parse(g.expiresAt) > mandateExpiry) {
+                return { ok: false, reason: `grant expiresAt (${g.expiresAt}) must be <= mandate expiresAt (${existing.expiresAt})` };
+            }
+        }
+        const mergedGrants = [...(existing.grants ?? []), ...grants];
+        const authored = {
+            id: existing.id, scope: existing.scope, agents: existing.agents,
+            authorities: existing.authorities, author: existing.author,
+            createdAt: existing.createdAt, expiresAt: existing.expiresAt,
+            grants: mergedGrants,
+        };
+        const resigned = {
+            ...authored,
+            revoked: existing.revoked,
+            authProof: this.d.sign(canonicalMandate(authored)),
+        };
+        all[idx] = resigned;
+        this.writeAll(all);
+        return { ok: true, mandate: resigned };
+    }
     /** Verify a mandate's authorship proof (T1/T2). */
     verifyAuthorship(m) {
         const { authProof, revoked, ...authored } = m;

package/dist/coordination/MandateStore.js.map

@@ -1 +1 @@
-{"version":3,"file":"MandateStore.js","sourceRoot":"","sources":["../../src/coordination/MandateStore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B;0BAC0B;AAC1B,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC9E,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IAClF,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACrC,OAAO,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;AAClG,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,gBAAgB,CAAC,CAAqD;IACpF,OAAO,eAAe,CAAC;QACrB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM;QACvB,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC;QACzE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,SAAS;KACnC,CAAC,CAAC;AACL,CAAC;AAwBD,MAAM,OAAO,YAAY;IACN,CAAC,CAAmB;IACrC,YAAY,IAAsB;QAChC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC;IAChB,CAAC;IAEO,MAAM;QACZ,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACxE,CAAC;IAEO,OAAO;QACb,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;YACjE,OAAO,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,GAA6B,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,CAAC;QAAC,MAAM,CAAC,CAAC,+GAA+G;YAAC,OAAO,EAAE,CAAC;QAAC,CAAC;IACxI,CAAC;IAEO,QAAQ,CAAC,QAA+B;QAC9C,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACjE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACvE,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,KAAwB;QAC5B,MAAM,EAAE,GAAG,KAAK,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QAC9G,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QACnD,MAAM,QAAQ,GAAuD;YACnE,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW;YAC5E,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS;SAC5D,CAAC;QACF,MAAM,OAAO,GAAwB;YACnC,GAAG,QAAQ;YACX,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;SACnD,CAAC;QACF,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACtD,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAClB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACnB,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,mDAAmD;IACnD,gBAAgB,CAAC,CAAsB;QACrC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,QAAQ,EAAE,GAAG,CAAC,CAAC;QAC9C,OAAO,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EAAE,SAAS,CAAC,CAAC;IACjE,CAAC;IAED,GAAG,CAAC,EAAU;QACZ,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IACjD,CAAC;IAED,IAAI;QACF,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;IACxB,CAAC;IAED,0FAA0F;IAC1F,MAAM,CAAC,EAAU,EAAE,MAAc;QAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9C,IAAI,GAAG,GAAG,CAAC;YAAE,OAAO,SAAS,CAAC;QAC9B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;YACtB,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC;YACjD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACrB,CAAC;QACD,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;IAClB,CAAC;CACF"}
+{"version":3,"file":"MandateStore.js","sourceRoot":"","sources":["../../src/coordination/MandateStore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B;0BAC0B;AAC1B,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC9E,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IAClF,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACrC,OAAO,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;AAClG,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,gBAAgB,CAAC,CAAqD;IACpF,MAAM,IAAI,GAAc;QACtB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM;QACvB,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC;QACzE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,SAAS;KACnC,CAAC;IACF,sFAAsF;IACtF,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnD,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC5G,CAAC;IACD,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC;AAC/B,CAAC;AA0BD,MAAM,OAAO,YAAY;IACN,CAAC,CAAmB;IACrC,YAAY,IAAsB;QAChC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC;IAChB,CAAC;IAEO,MAAM;QACZ,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACxE,CAAC;IAEO,OAAO;QACb,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;YACjE,OAAO,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,GAA6B,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,CAAC;QAAC,MAAM,CAAC,CAAC,+GAA+G;YAAC,OAAO,EAAE,CAAC;QAAC,CAAC;IACxI,CAAC;IAEO,QAAQ,CAAC,QAA+B;QAC9C,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACjE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACvE,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,KAAwB;QAC5B,MAAM,EAAE,GAAG,KAAK,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QAC9G,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QACnD,+EAA+E;QAC/E,iFAAiF;QACjF,+EAA+E;QAC/E,iFAAiF;QACjF,qEAAqE;QACrE,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5C,MAAM,eAAe,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACpD,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;gBAC7B,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,WAAW;uBACxD,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,SAAS;uBAC/C,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,YAAY;uBACrD,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;oBACvE,MAAM,IAAI,KAAK,CAAC,8FAA8F,CAAC,CAAC;gBAClH,CAAC;gBACD,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,eAAe,EAAE,CAAC;oBAC9C,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC,SAAS,mCAAmC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;gBACxG,CAAC;YACH,CAAC;QACH,CAAC;QACD,MAAM,QAAQ,GAAuD;YACnE,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW;YAC5E,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS;YAC3D,iFAAiF;YACjF,kFAAkF;YAClF,qBAAqB;YACrB,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7E,CAAC;QACF,MAAM,OAAO,GAAwB;YACnC,GAAG,QAAQ;YACX,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;SACnD,CAAC;QACF,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACtD,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAClB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACnB,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;;;;;;OAQG;IACH,SAAS,CACP,EAAU,EACV,MAA4B;QAE5B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9C,IAAI,GAAG,GAAG,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;QAC/D,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;QAC1B,IAAI,QAAQ,CAAC,OAAO;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;QACzE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;QAEtG,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QACrD,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,WAAW;mBACxD,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,SAAS;mBAC/C,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,YAAY;mBACrD,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;gBACvE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,4FAA4F,EAAE,CAAC;YAC7H,CAAC;YACD,4DAA4D;YAC5D,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,aAAa,EAAE,CAAC;gBAC5C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,CAAC,CAAC,SAAS,mCAAmC,QAAQ,CAAC,SAAS,GAAG,EAAE,CAAC;YACxH,CAAC;QACH,CAAC;QAED,MAAM,YAAY,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,GAAG,MAAM,CAAC,CAAC;QAC7D,MAAM,QAAQ,GAAuD;YACnE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM;YAC/D,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM;YAC1D,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC5D,MAAM,EAAE,YAAY;SACrB,CAAC;QACF,MAAM,QAAQ,GAAwB;YACpC,GAAG,QAAQ;YACX,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;SACnD,CAAC;QACF,GAAG,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC;QACpB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACnB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;IACzC,CAAC;IAED,mDAAmD;IACnD,gBAAgB,CAAC,CAAsB;QACrC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,QAAQ,EAAE,GAAG,CAAC,CAAC;QAC9C,OAAO,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EAAE,SAAS,CAAC,CAAC;IACjE,CAAC;IAED,GAAG,CAAC,EAAU;QACZ,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IACjD,CAAC;IAED,IAAI;QACF,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;IACxB,CAAC;IAED,0FAA0F;IAC1F,MAAM,CAAC,EAAU,EAAE,MAAc;QAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9C,IAAI,GAAG,GAAG,CAAC;YAAE,OAAO,SAAS,CAAC;QAC9B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;YACtB,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC;YACjD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACrB,CAAC;QACD,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;IAClB,CAAC;CACF"}

package/dist/coordination/types.d.ts

@@ -24,6 +24,34 @@ export interface Authority {
      *  never from an agent's assertion. */
     requiresCondition?: string;
 }
+/**
+ * A user→agent authority grant carried INSIDE a signed mandate. This is the
+ * extension that lets the human (the mandate author) delegate a Slack FLOOR
+ * action (money / prod-deploy / credentials / destructive / external / grant)
+ * to a SPECIFIC verified Slack user for a bounded time — the same deny-by-default,
+ * signed, expiring, revocable model the mandate already enforces for A2A authority.
+ *
+ * The grant is covered by the mandate's `authProof` (it is appended to the canonical
+ * byte sequence when present), so an agent cannot mint or widen a grant: only the
+ * PIN-gated issuance path can sign one in.
+ *
+ * `expiresAt` is independent of (and MUST be <= ) the mandate's own `expiresAt` —
+ * the grant can never outlive the delegation that carries it. The store-side query
+ * clamps to the mandate expiry, so a grant is void the moment EITHER clock passes.
+ */
+export interface UserAuthorityGrant {
+    /** The Slack FLOOR action this grant authorizes (e.g. 'prod-deploy'). Matched
+     *  against the gate's `scope` (the floorAction) on lookup. */
+    floorAction: string;
+    /** The VERIFIED Slack user id (U…) this grant is for — never a content name. */
+    grantedTo: string;
+    /** Who authorized it (the human author / operator). Requester ≠ authorizer. */
+    authorizedBy: string;
+    /** ISO timestamp after which the grant is void. MUST be <= the mandate's expiresAt. */
+    expiresAt: string;
+    /** Optional bounds carried for audit/future enforcement (advisory at the floor). */
+    bounds?: Record<string, unknown>;
+}
 /** The human-authored delegation. `authProof` covers all other fields. */
 export interface CoordinationMandate {
     id: string;
@@ -41,6 +69,13 @@ export interface CoordinationMandate {
         at: string;
         reason: string;
     } | null;
+    /**
+     * Optional user→agent authority grants (the Slack-floor delegation extension).
+     * Covered by `authProof` ONLY when present and non-empty — a mandate with no
+     * grants canonicalizes byte-for-byte identically to a pre-extension mandate, so
+     * existing signed mandates keep verifying (backward-compat is non-negotiable).
+     */
+    grants?: UserAuthorityGrant[];
     /** Authorship proof — an HMAC over the canonical (proof-excluded) mandate bytes,
      *  produced ONLY by the PIN-gated issuance path. An agent cannot mint or widen its
      *  own mandate without it; a forged/edited mandate fails verification. */

package/dist/coordination/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/coordination/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,qDAAqD;AACrD,MAAM,WAAW,SAAS;IACxB,mHAAmH;IACnH,MAAM,EAAE,MAAM,CAAC;IACf,8EAA8E;IAC9E,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC;;2CAEuC;IACvC,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,0EAA0E;AAC1E,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,iCAAiC;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,mEAAmE;IACnE,MAAM,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzB,WAAW,EAAE,SAAS,EAAE,CAAC;IACzB,0DAA0D;IAC1D,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,iDAAiD;IACjD,OAAO,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC/C;;8EAE0E;IAC1E,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,MAAM,CAAC;AAE/C,uEAAuE;AACvE,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,uEAAuE;IACvE,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,0EAA0E;AAC1E,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,eAAe,CAAC;IAC1B,yDAAyD;IACzD,MAAM,EAAE,MAAM,CAAC;IACf,iFAAiF;IACjF,eAAe,EAAE,OAAO,GAAG,IAAI,CAAC;IAChC,qFAAqF;IACrF,QAAQ,EAAE,MAAM,CAAC;IACjB,6DAA6D;IAC7D,IAAI,EAAE,MAAM,CAAC;CACd"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/coordination/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,qDAAqD;AACrD,MAAM,WAAW,SAAS;IACxB,mHAAmH;IACnH,MAAM,EAAE,MAAM,CAAC;IACf,8EAA8E;IAC9E,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC;;2CAEuC;IACvC,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,kBAAkB;IACjC;kEAC8D;IAC9D,WAAW,EAAE,MAAM,CAAC;IACpB,gFAAgF;IAChF,SAAS,EAAE,MAAM,CAAC;IAClB,+EAA+E;IAC/E,YAAY,EAAE,MAAM,CAAC;IACrB,uFAAuF;IACvF,SAAS,EAAE,MAAM,CAAC;IAClB,oFAAoF;IACpF,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED,0EAA0E;AAC1E,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,iCAAiC;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,mEAAmE;IACnE,MAAM,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzB,WAAW,EAAE,SAAS,EAAE,CAAC;IACzB,0DAA0D;IAC1D,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,iDAAiD;IACjD,OAAO,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC/C;;;;;OAKG;IACH,MAAM,CAAC,EAAE,kBAAkB,EAAE,CAAC;IAC9B;;8EAE0E;IAC1E,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,MAAM,CAAC;AAE/C,uEAAuE;AACvE,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,uEAAuE;IACvE,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,0EAA0E;AAC1E,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,eAAe,CAAC;IAC1B,yDAAyD;IACzD,MAAM,EAAE,MAAM,CAAC;IACf,iFAAiF;IACjF,eAAe,EAAE,OAAO,GAAG,IAAI,CAAC;IAChC,qFAAqF;IACrF,QAAQ,EAAE,MAAM,CAAC;IACjB,6DAA6D;IAC7D,IAAI,EAAE,MAAM,CAAC;CACd"}

package/dist/permissions/LlmIntentClassifier.d.ts

@@ -0,0 +1,77 @@
+/**
+ * LlmIntentClassifier — the JUDGMENT-BAND intent classifier (Slack permission gate,
+ * Pillar 2, §6.5–6.6 / §6.6 "Layer 1 INTENT + SENSITIVITY").
+ *
+ * It implements the SAME `IntentClassifier` interface as `HeuristicIntentClassifier`
+ * and is interchangeable with it at the gate's `classifier` slot. The difference is
+ * the judgment band ABOVE the floor: an LLM call refines the sensitivity tier,
+ * directedness, and a non-floor action label more accurately than keyword matching.
+ *
+ * ── Two invariants this class is built around ──────────────────────────────────
+ *
+ * 1. THE FLOOR STAYS DETERMINISTIC. This class NEVER lets the LLM decide that a
+ *    floor action ISN'T one, and it never lets the LLM downgrade a heuristic-detected
+ *    floor candidate. It runs the deterministic `HeuristicIntentClassifier` FIRST;
+ *    when the heuristic flags a real floor action (a `floorAction`) OR the
+ *    ambiguous-deploy low-confidence case (action 'ambiguous', tier 4, low
+ *    confidence → the gate routes to CLARIFY), that verdict is returned AS-IS and the
+ *    LLM is never consulted. The LLM can only refine the NON-floor judgment band.
+ *    (Floor enumeration + role authority remain in RolePolicy / SlackPermissionGate;
+ *    this class only feeds them an intent and must not be the thing that misses a
+ *    floor action.)
+ *
+ * 2. NO SILENT DEGRADATION TO A BRITTLE — OR WIDER — FALLBACK
+ *    (docs/specs/no-silent-degradation-to-brittle-fallback.md,
+ *     docs/signal-vs-authority.md). On ANY LLM failure (no provider, throw, timeout,
+ *    empty/unparseable response, or a response that would WIDEN access beyond the
+ *    deterministic floor read) we fall back to the `HeuristicIntentClassifier`
+ *    result — which itself routes ambiguity to a tier-4 low-confidence 'ambiguous'
+ *    (→ the gate CLARIFIES, a safe non-allow). A classification failure must NEVER
+ *    return a confident low-tier "allow"-shaped intent on what might be sensitive.
+ *    The fallback is therefore at-least-as-conservative as the deterministic floor.
+ *
+ * The LLM is reached through instar's internal `IntelligenceProvider` (the same
+ * injected-provider pattern as `TopicIntentExtractor` / `MessagingToneGate`), NOT a
+ * raw API call. A `fast` model tier is used, and the call is marked `gating: true`
+ * so the IntelligenceRouter will provider-swap on failure before the error
+ * propagates (and we then fail closed to the heuristic).
+ *
+ * Design: docs/specs/SLACK-ORG-INTEGRATION-SPEC.md §6.5–6.6.
+ */
+import type { IntelligenceProvider } from '../core/types.js';
+import type { RequestIntent } from './types.js';
+import { type IntentClassifier } from './IntentClassifier.js';
+/** Observability hook reasons for why a classification fell back to the heuristic. */
+export type LlmIntentDegradeReason = 'no-intelligence' | 'error' | 'unparseable' | 'floor-deterministic';
+export interface LlmIntentClassifierDeps {
+    /**
+     * The internal LLM provider (injected — never a direct framework import). When
+     * absent, every classification degrades to the heuristic (fail-closed).
+     */
+    intelligence?: IntelligenceProvider;
+    /**
+     * The deterministic floor + fallback classifier. Defaults to a fresh
+     * `HeuristicIntentClassifier`. Injectable for tests.
+     */
+    heuristic?: IntentClassifier;
+    /** Per-call timeout for the LLM (ms). Default 8000. */
+    timeoutMs?: number;
+    /**
+     * Optional observability hook — fires on every degrade-to-heuristic path with the
+     * reason. Best-effort: it never affects the returned verdict (which is always the
+     * safe heuristic result on degrade).
+     */
+    onDegrade?: (reason: LlmIntentDegradeReason) => void;
+}
+export declare class LlmIntentClassifier implements IntentClassifier {
+    private readonly intelligence?;
+    private readonly heuristic;
+    private readonly timeoutMs;
+    private readonly onDegrade?;
+    constructor(deps?: LlmIntentClassifierDeps);
+    classify(text: string, ctx: {
+        directed: boolean;
+    }): Promise<RequestIntent>;
+    private report;
+}
+//# sourceMappingURL=LlmIntentClassifier.d.ts.map

package/dist/permissions/LlmIntentClassifier.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"LlmIntentClassifier.d.ts","sourceRoot":"","sources":["../../src/permissions/LlmIntentClassifier.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAEH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,KAAK,EAAE,aAAa,EAAmB,MAAM,YAAY,CAAC;AACjE,OAAO,EAA6B,KAAK,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAEzF,sFAAsF;AACtF,MAAM,MAAM,sBAAsB,GAC9B,iBAAiB,GACjB,OAAO,GACP,aAAa,GACb,qBAAqB,CAAC;AAE1B,MAAM,WAAW,uBAAuB;IACtC;;;OAGG;IACH,YAAY,CAAC,EAAE,oBAAoB,CAAC;IACpC;;;OAGG;IACH,SAAS,CAAC,EAAE,gBAAgB,CAAC;IAC7B,uDAAuD;IACvD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,SAAS,CAAC,EAAE,CAAC,MAAM,EAAE,sBAAsB,KAAK,IAAI,CAAC;CACtD;AAYD,qBAAa,mBAAoB,YAAW,gBAAgB;IAC1D,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAuB;IACrD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAmB;IAC7C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAA2C;gBAE1D,IAAI,GAAE,uBAA4B;IAOxC,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE;QAAE,QAAQ,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,aAAa,CAAC;IA0DhF,OAAO,CAAC,MAAM;CAOf"}

package/dist/permissions/LlmIntentClassifier.js

@@ -0,0 +1,225 @@
+/**
+ * LlmIntentClassifier — the JUDGMENT-BAND intent classifier (Slack permission gate,
+ * Pillar 2, §6.5–6.6 / §6.6 "Layer 1 INTENT + SENSITIVITY").
+ *
+ * It implements the SAME `IntentClassifier` interface as `HeuristicIntentClassifier`
+ * and is interchangeable with it at the gate's `classifier` slot. The difference is
+ * the judgment band ABOVE the floor: an LLM call refines the sensitivity tier,
+ * directedness, and a non-floor action label more accurately than keyword matching.
+ *
+ * ── Two invariants this class is built around ──────────────────────────────────
+ *
+ * 1. THE FLOOR STAYS DETERMINISTIC. This class NEVER lets the LLM decide that a
+ *    floor action ISN'T one, and it never lets the LLM downgrade a heuristic-detected
+ *    floor candidate. It runs the deterministic `HeuristicIntentClassifier` FIRST;
+ *    when the heuristic flags a real floor action (a `floorAction`) OR the
+ *    ambiguous-deploy low-confidence case (action 'ambiguous', tier 4, low
+ *    confidence → the gate routes to CLARIFY), that verdict is returned AS-IS and the
+ *    LLM is never consulted. The LLM can only refine the NON-floor judgment band.
+ *    (Floor enumeration + role authority remain in RolePolicy / SlackPermissionGate;
+ *    this class only feeds them an intent and must not be the thing that misses a
+ *    floor action.)
+ *
+ * 2. NO SILENT DEGRADATION TO A BRITTLE — OR WIDER — FALLBACK
+ *    (docs/specs/no-silent-degradation-to-brittle-fallback.md,
+ *     docs/signal-vs-authority.md). On ANY LLM failure (no provider, throw, timeout,
+ *    empty/unparseable response, or a response that would WIDEN access beyond the
+ *    deterministic floor read) we fall back to the `HeuristicIntentClassifier`
+ *    result — which itself routes ambiguity to a tier-4 low-confidence 'ambiguous'
+ *    (→ the gate CLARIFIES, a safe non-allow). A classification failure must NEVER
+ *    return a confident low-tier "allow"-shaped intent on what might be sensitive.
+ *    The fallback is therefore at-least-as-conservative as the deterministic floor.
+ *
+ * The LLM is reached through instar's internal `IntelligenceProvider` (the same
+ * injected-provider pattern as `TopicIntentExtractor` / `MessagingToneGate`), NOT a
+ * raw API call. A `fast` model tier is used, and the call is marked `gating: true`
+ * so the IntelligenceRouter will provider-swap on failure before the error
+ * propagates (and we then fail closed to the heuristic).
+ *
+ * Design: docs/specs/SLACK-ORG-INTEGRATION-SPEC.md §6.5–6.6.
+ */
+import { HeuristicIntentClassifier } from './IntentClassifier.js';
+const VALID_TIERS = new Set([0, 1, 2, 3, 4]);
+export class LlmIntentClassifier {
+    intelligence;
+    heuristic;
+    timeoutMs;
+    onDegrade;
+    constructor(deps = {}) {
+        this.intelligence = deps.intelligence;
+        this.heuristic = deps.heuristic ?? new HeuristicIntentClassifier();
+        this.timeoutMs = deps.timeoutMs ?? 8000;
+        this.onDegrade = deps.onDegrade;
+    }
+    async classify(text, ctx) {
+        // ── 1. Deterministic floor read FIRST (never delegated to the LLM) ──────────
+        // The heuristic is the floor authority. Whatever it returns is the conservative
+        // baseline we will never widen past.
+        const floorRead = await this.heuristic.classify(text, ctx);
+        // If the heuristic flagged a real floor action OR the ambiguous-deploy
+        // possibly-floor case (tier 4, no floorAction, low confidence → the gate
+        // CLARIFIES), return it AS-IS. The LLM must not get the chance to downgrade a
+        // floor candidate into an allow-shaped low tier.
+        if (floorRead.floorAction || floorRead.tier >= 4) {
+            this.report('floor-deterministic');
+            return floorRead;
+        }
+        // ── 2. No provider → fail closed to the heuristic ───────────────────────────
+        if (!this.intelligence) {
+            this.report('no-intelligence');
+            return floorRead;
+        }
+        // ── 3. Judgment band: refine the NON-floor intent via the LLM ───────────────
+        let raw;
+        try {
+            const { systemPrompt, userPrompt } = buildIntentPrompt(text, ctx);
+            raw = await this.intelligence.evaluate(`${systemPrompt}\n\n${userPrompt}`, {
+                model: 'fast',
+                temperature: 0,
+                maxTokens: 200,
+                timeoutMs: this.timeoutMs,
+                attribution: {
+                    component: 'LlmIntentClassifier',
+                    category: 'gate',
+                    // SAFETY-GATING: this classification feeds an authority gate, so the
+                    // router provider-swaps on failure before the error reaches us — and if
+                    // every provider is down the throw lands in the catch below and we fail
+                    // CLOSED to the heuristic. We never silently degrade to a wider answer.
+                    gating: true,
+                },
+            });
+        }
+        catch {
+            // network/timeout/provider failure / circuit open → fail closed to the
+            // deterministic heuristic (which clarifies on ambiguity). NEVER a silent allow.
+            this.report('error');
+            return floorRead;
+        }
+        const parsed = parseLlmVerdict(raw);
+        if (!parsed) {
+            // Unparseable LLM output is a classification FAILURE → fail closed.
+            this.report('unparseable');
+            return floorRead;
+        }
+        // ── 4. Reconcile: the LLM may only refine WITHIN the non-floor band ─────────
+        return reconcile(floorRead, parsed, ctx);
+    }
+    report(reason) {
+        try {
+            this.onDegrade?.(reason);
+        }
+        catch {
+            /* observability is best-effort and must never affect the verdict */
+        }
+    }
+}
+/**
+ * Merge the deterministic floor read with the LLM's judgment-band verdict under a
+ * FAIL-CLOSED, never-widen rule:
+ *
+ *   - The floor read is the conservative baseline. If the LLM tries to assert a
+ *     floor action OR a tier ≥ 4, that is OUT OF ITS LANE — the floor is
+ *     deterministic, so we DROP the LLM result and return the (non-floor) heuristic
+ *     read. (A genuine floor would already have short-circuited before the LLM ran.)
+ *   - Otherwise the LLM may set the tier in [0,3], the action label, and refine
+ *     directedness. Directedness can only be NARROWED (true→false), never widened:
+ *     an inbound message the gate already treats as undirected must stay undirected;
+ *     the LLM cannot promote overheard chatter into a directed command.
+ *   - floorAction is ALWAYS dropped here (left undefined) — the only floor signal
+ *     that reaches the gate comes from the deterministic short-circuit above.
+ */
+function reconcile(floorRead, llm, ctx) {
+    // The LLM tried to claim a floor-level tier — not its lane. Keep the safe
+    // deterministic (non-floor) read rather than trusting an LLM floor assertion.
+    if (llm.tier >= 4) {
+        return floorRead;
+    }
+    // Directedness: never widen. The caller's ctx.directed is the structural truth
+    // (a mention / clear ask was detected upstream). The LLM may only confirm it or
+    // narrow it to false (e.g. "this reads as overheard musing, not a command").
+    const directed = ctx.directed && llm.directed;
+    // Tier: NEVER widen. The LLM may only ESCALATE the heuristic's conservative tier
+    // (raise sensitivity), never lower it — a LOWER tier is a WIDER gate verdict (the
+    // gate has an unconditional tier-0 allow + role-ceiling checks), so an unbounded
+    // llm.tier would let prompt-injected message content downgrade e.g. T3→T0 and widen
+    // access (refuse→allow). Clamp to the deterministic floor read, mirroring the
+    // one-way `directed` rule above. Letting the LLM CORRECT heuristic over-classification
+    // downward is a separate, confidence-gated design decision — not an unbounded side
+    // effect of untrusted message content. (Caught by the Phase-5 adversarial review.)
+    const tier = Math.max(floorRead.tier, llm.tier);
+    return {
+        action: llm.action || floorRead.action,
+        tier,
+        floorAction: undefined, // floor is deterministic-only; never set from the LLM
+        confidence: llm.confidence,
+        directed,
+    };
+}
+/**
+ * Validate + clamp the LLM's raw JSON into a safe judgment-band verdict.
+ * Returns null when the payload can't be read as a verdict (→ caller fails closed).
+ */
+function parseLlmVerdict(raw) {
+    if (!raw || typeof raw !== 'string')
+        return null;
+    // Tolerate prose/markdown around the JSON object (some providers wrap it).
+    const start = raw.indexOf('{');
+    const end = raw.lastIndexOf('}');
+    if (start === -1 || end === -1 || end < start)
+        return null;
+    let obj;
+    try {
+        obj = JSON.parse(raw.slice(start, end + 1));
+    }
+    catch {
+        return null;
+    }
+    const tierNum = typeof obj.tier === 'number' ? obj.tier : Number(obj.tier);
+    if (!Number.isFinite(tierNum) || !VALID_TIERS.has(tierNum))
+        return null;
+    const action = typeof obj.action === 'string' && obj.action.trim() ? obj.action.trim() : '';
+    if (!action)
+        return null;
+    let confidence = typeof obj.confidence === 'number' ? obj.confidence : Number(obj.confidence);
+    if (!Number.isFinite(confidence))
+        confidence = 0.5;
+    confidence = Math.max(0, Math.min(1, confidence));
+    const directed = obj.directed === true || obj.directed === 'true';
+    return { action, tier: tierNum, directed, confidence };
+}
+/**
+ * Build the intent-classification prompt. It is explicit that the FLOOR is handled
+ * elsewhere: the model is told NOT to grant/allow anything and to classify only the
+ * non-floor sensitivity band, and to use tier 4 ONLY as a "this might be sensitive,
+ * please clarify" signal (which the gate treats conservatively).
+ */
+function buildIntentPrompt(text, ctx) {
+    const systemPrompt = [
+        'You classify a single Slack message into an INTENT for an authorization gate.',
+        'You do NOT decide whether the action is allowed — a separate deterministic gate does that.',
+        'Return ONLY a compact JSON object, no prose, with exactly these keys:',
+        '  "action":     short verb-phrase label, e.g. "summarize", "post-note", "run-job", "discuss".',
+        '  "tier":       integer sensitivity 0-4:',
+        '                0 = ambient chatter / reaction, no action requested',
+        '                1 = read/inform (summarize, answer, look up, draft but NOT send)',
+        '                2 = low-write (post a message/doc, file a ticket, create a calendar hold)',
+        '                3 = operational (run a job, modify non-production state, schedule, small spend)',
+        '                4 = potentially-PRIVILEGED — use ONLY when it MIGHT touch money, a production',
+        '                    deploy, credentials, destructive data ops, an external send, or granting',
+        '                    authority. When unsure between 3 and 4, choose 4 (safer; the gate clarifies).',
+        '  "directed":   true if the message is a request aimed AT the agent; false if it is overheard',
+        '                chatter or musing not addressed to the agent.',
+        '  "confidence": 0.0-1.0, your confidence in this classification. Be honest; low confidence on a',
+        '                possibly-sensitive message is the correct, safe answer.',
+        'Never invent authorization. Never output anything but the JSON object.',
+    ].join('\n');
+    const userPrompt = [
+        `directed_hint: ${ctx.directed ? 'the upstream router saw a mention/clear ask' : 'no mention detected'}`,
+        'message:',
+        '"""',
+        (text || '').slice(0, 2000),
+        '"""',
+    ].join('\n');
+    return { systemPrompt, userPrompt };
+}
+//# sourceMappingURL=LlmIntentClassifier.js.map

package/dist/permissions/LlmIntentClassifier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"LlmIntentClassifier.js","sourceRoot":"","sources":["../../src/permissions/LlmIntentClassifier.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAIH,OAAO,EAAE,yBAAyB,EAAyB,MAAM,uBAAuB,CAAC;AA8BzF,MAAM,WAAW,GAAG,IAAI,GAAG,CAAS,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AAUrD,MAAM,OAAO,mBAAmB;IACb,YAAY,CAAwB;IACpC,SAAS,CAAmB;IAC5B,SAAS,CAAS;IAClB,SAAS,CAA4C;IAEtE,YAAY,OAAgC,EAAE;QAC5C,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;QACtC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,yBAAyB,EAAE,CAAC;QACnE,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC;QACxC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,IAAY,EAAE,GAA0B;QACrD,+EAA+E;QAC/E,gFAAgF;QAChF,qCAAqC;QACrC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAE3D,uEAAuE;QACvE,yEAAyE;QACzE,8EAA8E;QAC9E,iDAAiD;QACjD,IAAI,SAAS,CAAC,WAAW,IAAI,SAAS,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC;YACjD,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;YACnC,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,+EAA+E;QAC/E,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACvB,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;YAC/B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,+EAA+E;QAC/E,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,GAAG,iBAAiB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAClE,GAAG,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,YAAY,OAAO,UAAU,EAAE,EAAE;gBACzE,KAAK,EAAE,MAAM;gBACb,WAAW,EAAE,CAAC;gBACd,SAAS,EAAE,GAAG;gBACd,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,WAAW,EAAE;oBACX,SAAS,EAAE,qBAAqB;oBAChC,QAAQ,EAAE,MAAM;oBAChB,qEAAqE;oBACrE,wEAAwE;oBACxE,wEAAwE;oBACxE,wEAAwE;oBACxE,MAAM,EAAE,IAAI;iBACb;aACF,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,uEAAuE;YACvE,gFAAgF;YAChF,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACrB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,oEAAoE;YACpE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;YAC3B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,+EAA+E;QAC/E,OAAO,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IAC3C,CAAC;IAEO,MAAM,CAAC,MAA8B;QAC3C,IAAI,CAAC;YACH,IAAI,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,oEAAoE;QACtE,CAAC;IACH,CAAC;CACF;AAED;;;;;;;;;;;;;;GAcG;AACH,SAAS,SAAS,CAChB,SAAwB,EACxB,GAAqF,EACrF,GAA0B;IAE1B,0EAA0E;IAC1E,8EAA8E;IAC9E,IAAI,GAAG,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC;QAClB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,+EAA+E;IAC/E,gFAAgF;IAChF,6EAA6E;IAC7E,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,CAAC;IAE9C,iFAAiF;IACjF,kFAAkF;IAClF,iFAAiF;IACjF,oFAAoF;IACpF,8EAA8E;IAC9E,uFAAuF;IACvF,mFAAmF;IACnF,mFAAmF;IACnF,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAoB,CAAC;IAEnE,OAAO;QACL,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,SAAS,CAAC,MAAM;QACtC,IAAI;QACJ,WAAW,EAAE,SAAS,EAAE,sDAAsD;QAC9E,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,QAAQ;KACT,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,eAAe,CACtB,GAAW;IAEX,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAEjD,2EAA2E;IAC3E,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,GAAG,GAAG,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,KAAK,KAAK,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,GAAG,GAAG,KAAK;QAAE,OAAO,IAAI,CAAC;IAE3D,IAAI,GAAkB,CAAC;IACvB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,GAAG,CAAC,CAAC,CAAkB,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC3E,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAExE,MAAM,MAAM,GAAG,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5F,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAEzB,IAAI,UAAU,GAAG,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC9F,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,UAAU,GAAG,GAAG,CAAC;IACnD,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC;IAElD,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,KAAK,IAAI,IAAI,GAAG,CAAC,QAAQ,KAAK,MAAM,CAAC;IAElE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAA0B,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;AAC5E,CAAC;AAED;;;;;GAKG;AACH,SAAS,iBAAiB,CAAC,IAAY,EAAE,GAA0B;IACjE,MAAM,YAAY,GAAG;QACnB,+EAA+E;QAC/E,4FAA4F;QAC5F,uEAAuE;QACvE,+FAA+F;QAC/F,0CAA0C;QAC1C,qEAAqE;QACrE,kFAAkF;QAClF,2FAA2F;QAC3F,iGAAiG;QACjG,+FAA+F;QAC/F,8FAA8F;QAC9F,mGAAmG;QACnG,+FAA+F;QAC/F,+DAA+D;QAC/D,iGAAiG;QACjG,yEAAyE;QACzE,wEAAwE;KACzE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,MAAM,UAAU,GAAG;QACjB,kBAAkB,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,6CAA6C,CAAC,CAAC,CAAC,qBAAqB,EAAE;QACxG,UAAU;QACV,KAAK;QACL,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC;QAC3B,KAAK;KACN,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC;AACtC,CAAC"}

package/dist/permissions/MandateBackedGrantStore.d.ts

@@ -0,0 +1,40 @@
+/**
+ * MandateBackedGrantStore — resolves a Slack FLOOR-action grant for a verified
+ * principal from the SIGNED Coordination Mandate(s).
+ *
+ * This is the production `GrantStore` for `SlackPermissionGate`: instead of an
+ * ad-hoc grant table, a floor-action grant is a `UserAuthorityGrant` carried inside
+ * a mandate and covered by the mandate's `authProof`. That makes the grant:
+ *   - deny-by-default     (no mandate / no matching grant → undefined → refuse)
+ *   - signed              (an agent cannot mint or widen a grant; only the PIN-gated
+ *                          issuance/grant route can sign one in)
+ *   - bounded + expiring  (the grant has its own expiry, clamped to never outlive the
+ *                          mandate that carries it)
+ *   - revocable           (revoking the mandate voids every grant it carries)
+ *
+ * `activeGrant` returns a grant ONLY when, for a mandate that is authorship-valid,
+ * not expired, and not revoked, there exists a grant whose `grantedTo` equals the
+ * verified Slack user id, whose `floorAction` equals the requested scope, and whose
+ * effective expiry (min of grant.expiresAt and mandate.expiresAt) is still in the
+ * future. Otherwise `undefined` — the gate then falls back to the role floor.
+ *
+ * Design: docs/specs/SLACK-ORG-INTEGRATION-SPEC.md (Pillar 2, floor grants) +
+ * docs/specs/coordination-mandate.md (the signed-delegation model the grant rides on).
+ */
+import type { GrantStore } from './SlackPermissionGate.js';
+import type { AuthorityGrant } from './types.js';
+import type { MandateStore } from '../coordination/MandateStore.js';
+export interface MandateBackedGrantStoreDeps {
+    /** The signed mandate store the grants live in. */
+    store: MandateStore;
+}
+export declare class MandateBackedGrantStore implements GrantStore {
+    private readonly store;
+    constructor(deps: MandateBackedGrantStoreDeps);
+    /**
+     * Resolve an active floor-action grant for `slackUserId` + `scope` as of `now` (ms).
+     * Returns the FIRST matching grant across all mandates; `undefined` if none.
+     */
+    activeGrant(slackUserId: string, scope: string, now: number): AuthorityGrant | undefined;
+}
+//# sourceMappingURL=MandateBackedGrantStore.d.ts.map

package/dist/permissions/MandateBackedGrantStore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"MandateBackedGrantStore.d.ts","sourceRoot":"","sources":["../../src/permissions/MandateBackedGrantStore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAC3D,OAAO,KAAK,EAAE,cAAc,EAAgC,MAAM,YAAY,CAAC;AAC/E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAEpE,MAAM,WAAW,2BAA2B;IAC1C,mDAAmD;IACnD,KAAK,EAAE,YAAY,CAAC;CACrB;AAED,qBAAa,uBAAwB,YAAW,UAAU;IACxD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAe;gBACzB,IAAI,EAAE,2BAA2B;IAI7C;;;OAGG;IACH,WAAW,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS;CAkCzF"}