pi-daddy 0.28.0 → 0.32.0

package/dist/index.js

@@ -1,43 +1,62 @@
-export { resolve, assertNarrowing, toPiToolsAllowlist, UNIVERSAL_CAPABILITIES, } from "./resolve.js";
-export { appendLedgerEvent, appendRecord, buildCheckReceiptLedgerEvent, buildChildLifecycleEvent, buildRecord, buildWorkspaceLeaseEvent, buildWorkflowFactEvent, WORKFLOW_FACT_KINDS, WORKFLOW_FACT_PROVENANCE, WORKFLOW_FACT_STATES, isEscalationAttempt, LEDGER_VERSION, } from "./ledger.js";
-export { createDebriefPresenter } from "./debrief.js";
-export { ordinaryChildrenFor, ordinaryCancellation, ordinaryCancellationDigest, isOrdinaryChildren } from "./ordinary-children.js";
-export { loadDashboardHarness, loadedDashboardHarnessDigest } from "./dashboard-harness.js";
-export { startDailyDashboardHost, discoverDailyIntentActions } from "./daily-dashboard-host.js";
-export { createDashboardHost, openDashboardHost, dashboardHostDigest, dashboardHostRequestDigest, dashboardSelectionDigest } from "./dashboard-host.js";
-export { serveDashboardHost, connectDashboardHost, ENV_DASHBOARD_HOST_SOCKET } from "./dashboard-host-transport.js";
-export { createRetainedDebrief, retainDebriefBlind, openDebriefBlindPreview } from "./debrief-host.js";
-export { renderDebrief, debriefAction as dashboardDebriefAction } from "./debrief-render.js";
-export {} from "./debrief-contract.js";
-export { readDailyView, createDailyViewReader, DAILY_VIEW_VERSION } from "./daily-view.js";
-export { renderDailyView, renderDailyDetails } from "./daily-view-render.js";
-export { renderDailyPanel } from "./daily-panel.js";
-export { parseArchiveProjection, ARCHIVE_PROJECTION_VERSION } from "./daily-view-input.js";
-export { bindWorkIntent } from "./intent-application.js";
-export { intentRequestDigest, parseIntentRequest } from "./intent-control.js";
-export { dispatchRequestDigest, parseDispatchRequest } from "./dispatch-control.js";
-export { createFactoryRegistry, openFactoryRegistry, createFactoryOrder, openFactoryOrder, migrateFactoryOrder, factoryOrderDigest, parseFactoryOrder, fixedPolicyDigest, factoryDecisionDigest, activationRequestDigest, factoryMigrationDigest } from "./factory-order.js";
-export { createExperiment, openExperiment, experimentCharterDigest, experimentBindingDigest, experimentCancellationDigest, parseExperimentCharter } from "./experiment.js";
-export { createResourceBudget, createDispatchBudget, createIntentBudget, createExperimentBudget, openResourceBudget, resourceBindingDigest, ResourceAdmissionError } from "./resource-budget.js";
-export { createProducerIpcHost, startProducerIpc, producerIpcBinding, producerIpcBindingDigest, producerIpcDemand, PRODUCER_IPC_LIMITS } from "./producer-ipc.js";
-export { prepareDigestProfile, runDigestProfile, DIGEST_PROFILE, EffectProfileUnavailableError } from "./effect-profile.js";
-export { planSpawn } from "./spawn.js";
-export { beginExecutionRetention, drainExecutionRetention, ENV_EXECUTION_ARCHIVE, RETENTION_VERSION, retentionConfigurationDigest, verifyRetainedBytes, buildExecutionRetentionManifest, parseExecutionRetentionManifest, RETENTION_SCHEMA, ENV_NATIVE_SESSION_ROOT, readNativeSession, parseNativeSessionBytes } from "./execution-retention.js";
-export { APPROVAL_TTL_DAYS, DELEGATE_SUBJECT, approvalKey, entryVerdict, expiryFor, inheritApprovals, offeredScopes, resolveApprovals, shouldSeekApproval, } from "./approval.js";
-export { approvalsPath, loadApprovals, revokeAll, revokeApproval, saveApproval, } from "./approval-store.js";
-export { approvalBindingDigest, approvalBindingsEqual, buildApprovalBinding, digestCapabilities, digestTask, isApprovalBinding, normaliseCorrelation, } from "./correlation.js";
-export { GovernanceRefusal, REFUSAL_CODES, refusal, } from "./refusals.js";
-export { acquireWorkspaceLease, defaultWorkspaceLeaseDir, loadWorkspaceRegistry, resolveWorkspace, validateRegisteredWorkspace, } from "./workspace.js";
-export { buildCheckEnvironment, runNamedCheck, } from "./check-runner.js";
-export { isExecutionId, newExecutionId, } from "./execution-id.js";
-export { parseDashboardLedger, } from "./dashboard-projection.js";
-export { renderDashboard } from "./dashboard-render.js";
-export { declareWork, loadDeclaredWork } from "./work-command.js";
-export { workSetup, recordWorkSetup, selectRecordedWork, loadWorkSetup, listWorkSetups, workPresentation } from "./work-setup.js";
-export { runWorkSetup, inspectWorkRun } from "./work-run.js";
-export { workPolicy, workPolicyDigest, policyForSetup, createWorkPolicyRegistry, openWorkPolicyRegistry, workPolicyActivationDigest } from "./work-policy-registry.js";
-export { learningHarness, bindLearningConnection, loadLearningConnection, bindLearningAdoption, learningScopeDigest } from "./learning-connection.js";
-export { runMeasuredAgentSession, piSdkMeasuredSessionHost, verifyMeasuredSubscription, MeasuredSessionFailure, MeasuredSessionUnknownError, } from "./measured-session.js";
-export { createMeasuredOrder, openMeasuredOrder, measuredOrderDigest, measuredOrderAcknowledgementDigest, qualifyMeasuredOutput } from "./measured-order.js";
-export { createApprovalGate, createApprovalGateProvider, timeoutMsFromEnv, } from "./approval-prompt.js";
+export { resolve, assertNarrowing, toPiToolsAllowlist, UNIVERSAL_CAPABILITIES, } from "./kernel/resolve.js";
+export { appendLedgerEvent, appendRecord, buildChildLifecycleEvent, buildRecord, buildWorkspaceLeaseEvent, isEscalationAttempt, LEDGER_VERSION, } from "./governance/ledger.js";
+export { planSpawn } from "./kernel/spawn.js";
+export { beginExecutionRetention, drainExecutionRetention, ENV_EXECUTION_ARCHIVE, RETENTION_VERSION, retentionConfigurationDigest, verifyRetainedBytes, buildExecutionRetentionManifest, parseExecutionRetentionManifest, RETENTION_SCHEMA, ENV_NATIVE_SESSION_ROOT, readNativeSession, parseNativeSessionBytes, } from "./governance/execution-retention.js";
+export { APPROVAL_TTL_DAYS, DELEGATE_SUBJECT, approvalKey, entryVerdict, expiryFor, inheritApprovals, offeredScopes, resolveApprovals, shouldSeekApproval, } from "./kernel/approval.js";
+export { approvalsPath, loadApprovals, revokeAll, revokeApproval, saveApproval, } from "./governance/approval-store.js";
+export { approvalBindingDigest, approvalBindingsEqual, buildApprovalBinding, digestCapabilities, digestTask, isApprovalBinding, normaliseCorrelation, } from "./kernel/correlation.js";
+export { GovernanceRefusal, REFUSAL_CODES, refusal, } from "./kernel/refusals.js";
+export { loadWorkspaceRegistry, resolveWorkspace, validateRegisteredWorkspace, } from "./kernel/workspace.js";
+export { acquireWorkspaceLease, defaultWorkspaceLeaseDir } from "./governance/workspace-lease.js";
+export { isExecutionId, newExecutionId } from "./kernel/execution-id.js";
+export { parseDashboardLedger, } from "./products/dashboard-projection.js";
+export { renderDashboard } from "./products/dashboard-render.js";
+export { createApprovalGate, createApprovalGateProvider, timeoutMsFromEnv, } from "./governance/approval-prompt.js";
+// ADR-0076 cleanup: the `pi-daddy/kernel`, `/ledger`, `/approvals`, `/executors` and `/dashboard` subpaths are
+// gone; the root is the one public surface. Wildcard re-exports of the layers keep every name reachable.
+export * from "./kernel/capabilities.js";
+export * from "./kernel/catalog.js";
+export * from "./kernel/chain.js";
+export * from "./kernel/definitions.js";
+export * from "./kernel/delegate-types.js";
+export * from "./kernel/delegate.js";
+export * from "./kernel/delegation-approval.js";
+export * from "./kernel/env-names.js";
+export * from "./kernel/fanout.js";
+export * from "./kernel/grant-env.js";
+export * from "./kernel/ledger-identifiers.js";
+export * from "./kernel/model-preflight.js";
+export * from "./kernel/pi-tools.js";
+export * from "./kernel/progress.js";
+export * from "./kernel/propagation.js";
+export * from "./kernel/routing-authority.js";
+export * from "./kernel/run-child.js";
+export * from "./kernel/skill-packages.js";
+export * from "./kernel/skill-resources.js";
+export * from "./governance/ledger-events.js";
+export * from "./governance/ledger-report.js";
+export * from "./governance/ledger-v3-validation.js";
+export * from "./governance/record.js";
+export * from "./governance/retention-json.js";
+export * from "./governance/finalization.js";
+export * from "./governance/grant-store.js";
+export * from "./governance/lease-helper.js";
+export * from "./governance/lease-record.js";
+export * from "./governance/file-lock.js";
+export * from "./governance/init.js";
+export * from "./executors/executor.js";
+export * from "./executors/herdr-cli.js";
+export * from "./executors/herdr-name.js";
+export * from "./executors/herdr-pi-lifecycle.js";
+export * from "./executors/herdr-poll.js";
+export * from "./executors/herdr-stage.js";
+export * from "./executors/herdr-start.js";
+export * from "./executors/native-session-target.js";
+export * from "./executors/pane-reaper.js";
+export * from "./executors/run-herdr.js";
+export * from "./products/dashboard-display-controls.js";
+export * from "./products/dashboard-handshake.js";
+export * from "./products/dashboard-herdr.js";
+export * from "./products/activity-timeline.js";
+export { runDashboard, dashboardFrame, DASHBOARD_PROTOCOL_VERSION } from "./products/dashboard-cli.js";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,OAAO,EACP,eAAe,EACf,kBAAkB,EAClB,sBAAsB,GAIvB,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,iBAAiB,EACjB,YAAY,EACZ,4BAA4B,EAC5B,wBAAwB,EACxB,WAAW,EACX,wBAAwB,EACxB,sBAAsB,EACtB,mBAAmB,EACnB,wBAAwB,EACxB,oBAAoB,EACpB,mBAAmB,EACnB,cAAc,GAYf,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,sBAAsB,EAA+G,MAAM,cAAc,CAAC;AACnK,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,0BAA0B,EAAE,kBAAkB,EAAiG,MAAM,wBAAwB,CAAC;AAClO,OAAO,EAAE,oBAAoB,EAAE,4BAA4B,EAAiC,MAAM,wBAAwB,CAAC;AAC3H,OAAO,EAAE,uBAAuB,EAAE,0BAA0B,EAAwD,MAAM,2BAA2B,CAAC;AACtJ,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,0BAA0B,EAAE,wBAAwB,EAA0J,MAAM,qBAAqB,CAAC;AAChT,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,yBAAyB,EAA4B,MAAM,+BAA+B,CAAC;AAC9I,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,uBAAuB,EAAqE,MAAM,mBAAmB,CAAC;AAC1K,OAAO,EAAE,aAAa,EAAE,aAAa,IAAI,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAC7F,OAAO,EAAyE,MAAM,uBAAuB,CAAC;AAC9G,OAAO,EAAE,aAAa,EAAE,qBAAqB,EAAE,kBAAkB,EACtB,MAAM,iBAAiB,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC7E,OAAO,EAAE,gBAAgB,EAA4C,MAAM,kBAAkB,CAAC;AAC9F,OAAO,EAAE,sBAAsB,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AAC3F,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EACyC,MAAM,qBAAqB,CAAC;AACrH,OAAO,EAAE,qBAAqB,EAAE,oBAAoB,EAA4F,MAAM,uBAAuB,CAAC;AAC9K,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,mBAAmB,EAC5G,kBAAkB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,sBAAsB,EACsC,MAAM,oBAAoB,CAAC;AACnM,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,4BAA4B,EAAE,sBAAsB,EACC,MAAM,iBAAiB,CAAC;AAC1K,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,sBAAsB,EACuD,MAAM,sBAAsB,CAAC;AACtP,OAAO,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,iBAAiB,EAAE,mBAAmB,EACe,MAAM,mBAAmB,CAAC;AAC/K,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,cAAc,EAAE,6BAA6B,EACpD,MAAM,qBAAqB,CAAC;AACtE,OAAO,EAAE,SAAS,EAAuC,MAAM,YAAY,CAAC;AAC5E,OAAO,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,4BAA4B,EAAE,mBAAmB,EAE3H,+BAA+B,EAAE,+BAA+B,EAAE,gBAAgB,EAC3G,uBAAuB,EAAE,iBAAiB,EAAE,uBAAuB,EACT,MAAM,0BAA0B,CAAC;AAE7F,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,WAAW,EACX,YAAY,EACZ,SAAS,EACT,gBAAgB,EAChB,aAAa,EACb,gBAAgB,EAChB,kBAAkB,GAOnB,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,aAAa,EACb,aAAa,EACb,SAAS,EACT,cAAc,EACd,YAAY,GAGb,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,oBAAoB,EACpB,kBAAkB,EAClB,UAAU,EACV,iBAAiB,EACjB,oBAAoB,GAIrB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,iBAAiB,EACjB,aAAa,EACb,OAAO,GAGR,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,qBAAqB,EACrB,wBAAwB,EACxB,qBAAqB,EACrB,gBAAgB,EAChB,2BAA2B,GAK5B,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,qBAAqB,EACrB,aAAa,GAId,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,aAAa,EACb,cAAc,GAEf,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,oBAAoB,GAMrB,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EAAE,eAAe,EAA+B,MAAM,uBAAuB,CAAC;AACrF,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAA0B,MAAM,mBAAmB,CAAC;AAC1F,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,kBAAkB,EAAE,aAAa,EAAE,cAAc,EAAE,gBAAgB,EAA8D,MAAM,iBAAiB,CAAC;AAC9L,OAAO,EAAE,YAAY,EAAE,cAAc,EAA+D,MAAM,eAAe,CAAC;AAC1H,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,cAAc,EAAE,wBAAwB,EAAE,sBAAsB,EAAE,0BAA0B,EAAuE,MAAM,2BAA2B,CAAC;AAC5O,OAAO,EAAE,eAAe,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,mBAAmB,EAAmD,MAAM,0BAA0B,CAAC;AAEvM,OAAO,EACL,uBAAuB,EACvB,wBAAwB,EACxB,0BAA0B,EAC1B,sBAAsB,EACtB,2BAA2B,GAM5B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,kCAAkC,EAAE,qBAAqB,EAE9D,MAAM,qBAAqB,CAAC;AAE7F,OAAO,EACL,kBAAkB,EAClB,0BAA0B,EAC1B,gBAAgB,GAOjB,MAAM,sBAAsB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,OAAO,EACP,eAAe,EACf,kBAAkB,EAClB,sBAAsB,GAIvB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,iBAAiB,EACjB,YAAY,EACZ,wBAAwB,EACxB,WAAW,EACX,wBAAwB,EACxB,mBAAmB,EACnB,cAAc,GAOf,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EAAE,SAAS,EAAuC,MAAM,mBAAmB,CAAC;AACnF,OAAO,EACL,uBAAuB,EACvB,uBAAuB,EACvB,qBAAqB,EACrB,iBAAiB,EACjB,4BAA4B,EAC5B,mBAAmB,EAMnB,+BAA+B,EAC/B,+BAA+B,EAC/B,gBAAgB,EAChB,uBAAuB,EACvB,iBAAiB,EACjB,uBAAuB,GAGxB,MAAM,qCAAqC,CAAC;AAE7C,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,WAAW,EACX,YAAY,EACZ,SAAS,EACT,gBAAgB,EAChB,aAAa,EACb,gBAAgB,EAChB,kBAAkB,GAOnB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,aAAa,EACb,aAAa,EACb,SAAS,EACT,cAAc,EACd,YAAY,GAGb,MAAM,gCAAgC,CAAC;AAExC,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,oBAAoB,EACpB,kBAAkB,EAClB,UAAU,EACV,iBAAiB,EACjB,oBAAoB,GAIrB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,iBAAiB,EACjB,aAAa,EACb,OAAO,GAGR,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,qBAAqB,EACrB,gBAAgB,EAChB,2BAA2B,GAI5B,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,qBAAqB,EAAE,wBAAwB,EAAuB,MAAM,iCAAiC,CAAC;AAEvH,OAAO,EAAE,aAAa,EAAE,cAAc,EAAoB,MAAM,0BAA0B,CAAC;AAE3F,OAAO,EACL,oBAAoB,GAKrB,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EAAE,eAAe,EAA+B,MAAM,gCAAgC,CAAC;AAE9F,OAAO,EACL,kBAAkB,EAClB,0BAA0B,EAC1B,gBAAgB,GAOjB,MAAM,iCAAiC,CAAC;AAEzC,+GAA+G;AAC/G,yGAAyG;AACzG,cAAc,0BAA0B,CAAC;AACzC,cAAc,qBAAqB,CAAC;AACpC,cAAc,mBAAmB,CAAC;AAClC,cAAc,yBAAyB,CAAC;AACxC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,sBAAsB,CAAC;AACrC,cAAc,iCAAiC,CAAC;AAChD,cAAc,uBAAuB,CAAC;AACtC,cAAc,oBAAoB,CAAC;AACnC,cAAc,uBAAuB,CAAC;AACtC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,sBAAsB,CAAC;AACrC,cAAc,sBAAsB,CAAC;AACrC,cAAc,yBAAyB,CAAC;AACxC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,uBAAuB,CAAC;AACtC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,sCAAsC,CAAC;AACrD,cAAc,wBAAwB,CAAC;AACvC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,sBAAsB,CAAC;AACrC,cAAc,yBAAyB,CAAC;AACxC,cAAc,0BAA0B,CAAC;AACzC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,mCAAmC,CAAC;AAClD,cAAc,2BAA2B,CAAC;AAC1C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,sCAAsC,CAAC;AACrD,cAAc,4BAA4B,CAAC;AAC3C,cAAc,0BAA0B,CAAC;AACzC,cAAc,0CAA0C,CAAC;AACzD,cAAc,mCAAmC,CAAC;AAClD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,iCAAiC,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAC"}

package/dist/kernel/approval.d.ts

@@ -0,0 +1,241 @@
+/**
+ * Approval model for gated capabilities — pure, so it is exhaustively testable without pi.
+ *
+ * `resolve()` computes `gatedBlocked`: capabilities a session legitimately holds but which may not enter
+ * a child's grant without a human saying so. This module decides WHAT a yes means — how far it reaches,
+ * how long it lasts, and what it is keyed to. It never performs I/O and never prompts; see
+ * `approval-store.ts` and `approval-prompt.ts` for those.
+ *
+ * ADR-0010 records the four decisions encoded here.
+ */
+import type { Capability, ResolveResult } from "./resolve.ts";
+import { type ApprovalBinding } from "./correlation.ts";
+/** How far a single yes reaches in time. */
+export declare const APPROVAL_SCOPES: readonly ["once", "session", "always"];
+export type ApprovalScope = (typeof APPROVAL_SCOPES)[number];
+/** Where a yes came from, for the ledger. These call for different follow-ups, so they stay distinct. */
+export declare const APPROVAL_SOURCES: readonly ["prompt", "session", "persisted", "inherited"];
+export type ApprovalSource = (typeof APPROVAL_SOURCES)[number];
+/** Which call site is asking. Determines the scopes offered — see `offeredScopes`. */
+export type ApprovalPath = "definition" | "delegate";
+/**
+ * Subject used for delegate-path approvals.
+ *
+ * The delegate tool has no human-authored subject: the only things naming a child are the task string and
+ * the tool list, both chosen by the model. A key the model controls is not a key, so delegate approvals
+ * use this fixed literal — "allow write for delegations this session" — and are never persisted.
+ * Angle brackets cannot appear in an agent-type name (`parseAgentType` reads an identifier), so this can
+ * never collide with a real type.
+ */
+export declare const DELEGATE_SUBJECT = "<delegate>";
+/**
+ * Lifetime of a persisted approval.
+ *
+ * Deliberately a constant rather than an environment variable: a knob that silently extends every gate is
+ * the first thing an impatient operator would reach for.
+ */
+export declare const APPROVAL_TTL_DAYS = 30;
+/** `tool:write` + `docs-writer` -> `tool:write@docs-writer`. */
+export declare function approvalKey(capability: Capability, subject: string): string;
+/**
+ * May this resolution raise an approval dialog?
+ *
+ * `resolve()` computes `denied` and `gatedBlocked` INDEPENDENTLY (deliberately — each rejection reason is
+ * reported rather than masked by whichever filter ran first), and both `decideSpawn` and `planDelegation`
+ * refuse outright on `denied` while still attaching the full result. So a request mixing a gated capability
+ * with one the session does not hold at all would otherwise prompt a human about the gated one and then be
+ * refused anyway for the other.
+ *
+ * That is not merely noise. A *session* yes is recorded and republished to children, and an *always* yes is
+ * written to disk for 30 days — both banked against a spawn that never happened, and both reachable by a
+ * model that appends one unheld capability to an otherwise ordinary request. A person is therefore only
+ * asked about a spawn that would actually proceed if they said yes.
+ *
+ * `clipped` is deliberately NOT a bar: it does not refuse a spawn, it just drops those capabilities from
+ * the child's grant, so the spawn does proceed and the question is real.
+ */
+export declare function shouldSeekApproval(result: ResolveResult | undefined): boolean;
+/**
+ * Scopes a given call site may offer. `always` requires a **human-authored subject**.
+ *
+ * ADR-0019. The rule is unchanged; which paths satisfy it is not. `"interceptor"` used to be the only one
+ * and ADR-0016 deleted it, leaving `always` offerable from nowhere — 220 lines of persistence no live path
+ * could write to. `"definition"` is `delegate({agent})`, where ADR-0017 makes the subject an
+ * operator-authored file the session must hold `agent:<name>` to name at all. `"delegate"` is the `tools:`
+ * form, where the original reasoning stands untouched: the only things naming that child are the task and
+ * the tool list, both model-chosen, and a key the model controls is not a key.
+ */
+export declare function offeredScopes(path: ApprovalPath): ApprovalScope[];
+/**
+ * The approval an inheriting child may hold.
+ *
+ * Intersecting with the child's grant is what keeps ADR-0008 intact once approvals became inheritable:
+ * `approved ⊆ grant` at every level, by construction. An approval can therefore never name a capability
+ * the session does not hold — it only ever unblocks part of a grant, never widens one.
+ *
+ * The wildcard is filtered for the same reason `childEnv` filters it out of grants (R-26): inheriting it
+ * would let a descendant treat every future gate as pre-approved.
+ */
+/** An approval as it crosses a boundary: the capability, WHO it was for, and HOW LONG it was meant to last. */
+export interface InheritableApproval {
+    capability: Capability;
+    /** The agent type, or `<delegate>`. Carried because an approval is for a subject, not for a word. */
+    subject: string;
+    scope: ApprovalScope;
+    /**
+     * The definition's body digest at the time of approval (ADR-0022). Absent for `<delegate>`, which names
+     * no file to hash — and, per ADR-0019, is never persisted or offered `always` for the same reason.
+     */
+    bodySha256?: string;
+    /**
+     * Exact delegation binding for controllers that supply correlation/workspace context (ADR-0034).
+     * Bound approvals are deliberately not inherited: authority for one task must not become subtree-wide.
+     */
+    binding?: ApprovalBinding;
+}
+/**
+ * What a child may inherit, as `capability@subject` keys.
+ *
+ * ADR-0014 changed this in two ways, and both were cases of a human's explicit choice being discarded
+ * one hop down:
+ *
+ *  - **`once` is dropped** (A-S1). The scope chosen was not carried, so a `once` approval was written
+ *    into the child's `PI_DADDY_APPROVED` and republished onward — the most conservative answer a human
+ *    can give produced the least conservative outcome, across an entire descendant subtree.
+ *  - **The subject is kept** (A-S6). Bare capabilities were published, so a `<delegate>`-subject approval
+ *    matched *any* subject below. `approvalKey`'s own doc argues at length that a model-controlled name
+ *    is not a key; erasing the subject made that argument moot exactly where it mattered.
+ *
+ * The clamp to `grant` is unchanged and still load-bearing: **approval cannot conjure a capability**, so
+ * an inherited yes is only ever honoured for something the child independently holds.
+ */
+export declare function inheritApprovals(approved: InheritableApproval[], grant: Capability[]): string[];
+/**
+ * Read the inherited set back on the child side.
+ *
+ * Anything that is not a well-formed `capability@subject` pair is dropped rather than guessed at. An
+ * unparseable entry granting nothing is a missing prompt; an unparseable entry granting *something* is a
+ * silent escalation, so the direction of the failure is not a matter of taste.
+ */
+export declare function parseInherited(raw: string | undefined): Map<string, string | undefined>;
+/**
+ * Drop inherited approvals that were given for different instructions (ADR-0022).
+ *
+ * The hole this closes: `resolveApprovals` checks `inherited` FIRST and none of it had ever been through
+ * `entryVerdict`, so ADR-0019's headline property — an approval is void once the instructions change — held
+ * on the one path that persists and neither of the two that do not. A child is a fresh process: it re-reads
+ * the definition from disk, so a `git pull` between the parent's approval and the child's spawn meant the
+ * child ran a rewritten body under a yes given about the old one, recording `approvalSource: "inherited"`.
+ *
+ * An entry with **no** digest is honoured, and that is not a hole: `<delegate>` legitimately has none, and
+ * neither does a pre-0.11 parent. It is the same trade `entryVerdict` refuses to make for a *persisted*
+ * entry — but that entry is 30 days old and read off disk, whereas this one was handed over by a live parent
+ * process in the same tree, which is a much shorter chain to trust.
+ */
+export declare function verifyInherited(parsed: ReadonlyMap<string, string | undefined>, snapshotOf: (subject: string) => SubjectSnapshot | null): Set<string>;
+/** When an approval granted now stops being valid. Computed once at write time and stored, so an entry's
+ *  lifetime is visible in the file rather than implied by whichever version of the code reads it. */
+export declare function expiryFor(approvedAt: Date): string;
+/** A persisted approval, keyed externally by subject and capability. Only the `"definition"` path writes one. */
+export interface ApprovalEntry {
+    approvedAt: string;
+    expiresAt: string;
+    /** The directory the human was sitting in. See `entryVerdict` and R-27. */
+    cwd: string;
+    /** The agent type's ceiling AT APPROVAL TIME. Load-bearing, not decorative — see `entryVerdict`. */
+    grantAtApproval: Capability[];
+    /**
+     * The definition's body digest AT APPROVAL TIME (ADR-0019, using ADR-0018's hash).
+     *
+     * `grantAtApproval` pins the tools; this pins the INSTRUCTIONS. Without it an `always` approval survives
+     * a total rewrite of what the child is told to do, because `ceilingForDefinition` reads only
+     * `allowed-tools` — R-35's hazard reappearing inside the persistence layer. Absent means the entry
+     * predates 0.10.0 and cannot be verified, which `entryVerdict` treats as changed: fail closed.
+     */
+    bodyAtApproval?: string;
+    /** Exact task/grant/workspace/context/parent binding for correlated controller calls (ADR-0034). */
+    binding?: ApprovalBinding;
+}
+export type EntryVerdict = "valid" | "expired" | "foreign-cwd" | "type-changed" | "instructions-changed" | "type-missing";
+/**
+ * What a subject looks like RIGHT NOW — one lookup, not two (ADR-0019).
+ *
+ * Deliberately a single snapshot rather than parallel `ceilingOf` / `digestOf` callbacks. R-28 was one
+ * call site supplying one argument and omitting another; a shape that cannot be half-supplied is the
+ * structural form of remembering.
+ */
+export interface SubjectSnapshot {
+    ceiling: Capability[];
+    /** SHA-256 of the definition body — `digestDefinition(...).sha256`. */
+    bodySha256: string;
+}
+export interface EntryValidityInput {
+    entry: ApprovalEntry;
+    /** The directory this session is running in. */
+    cwd: string;
+    now: Date;
+    /** The subject's CURRENT ceiling and body digest, or null when it no longer exists. */
+    current: SubjectSnapshot | null;
+}
+/**
+ * Decide whether a persisted approval still means what the human meant.
+ *
+ * Four ways it can stop meaning that, and each is reported distinctly so `/grants approvals` can explain
+ * itself rather than silently showing fewer rows:
+ *
+ *  - `foreign-cwd`  — the file was copied or committed and opened somewhere else. Nobody in THIS checkout
+ *                     was asked, so it authorises nothing here (R-27).
+ *  - `expired`      — a gate opened during one project must not still be open next quarter.
+ *  - `type-changed` — the confused deputy. The key names a file whose contents can change after approval:
+ *                     approve `tool:write@docs-writer` when it declares `read, write`, and later that file
+ *                     gains `bash`. The entry would still match the key while describing something the
+ *                     human never saw.
+ *  - `instructions-changed` — the same confused deputy, one level deeper. The tools are untouched but the
+ *                     BODY was rewritten, so the child would now be told to do something the human never
+ *                     saw. Only checkable since ADR-0018 gave the body a digest; an entry carrying no body
+ *                     pin lands here too, because unverifiable is not the same as unchanged.
+ *  - `type-missing` — the type was deleted or renamed; a new file could later claim the same name.
+ */
+export declare function entryVerdict(input: EntryValidityInput): EntryVerdict;
+export interface ResolveApprovalsInput {
+    /** `ResolveResult.gatedBlocked` — held and within ceiling, but awaiting a human. */
+    gated: Capability[];
+    subject: string;
+    /** Approval KEYS approved for this session, in memory only. */
+    sessionApprovals: ReadonlySet<string>;
+    /** Exact bindings for correlated session approvals. Kept separate so legacy keys remain compatible. */
+    sessionApprovalBindings?: ReadonlyMap<string, ApprovalBinding>;
+    /** Persisted entries by key, ALREADY definition/expiry-filtered by the store. */
+    persisted: ReadonlyMap<string, ApprovalEntry>;
+    /** When present, only an exact binding may satisfy this gate. */
+    expectedBinding?: ApprovalBinding;
+    /** Same-key persisted entries dropped specifically because their expiry passed. */
+    expiredKeys?: ReadonlySet<string>;
+    /**
+     * `capability@subject` keys inherited from the delegator (ADR-0014).
+     *
+     * Was `Capability[]` — bare names that matched any subject, and included `once` approvals that were
+     * never meant to leave the level they were given at.
+     */
+    inherited?: Set<string>;
+}
+export interface ResolveApprovalsResult {
+    approved: Capability[];
+    /** Gated capabilities still requiring a live human. */
+    needsPrompt: Capability[];
+    /** A same-key approval existed but named another task/workspace/context/parent. */
+    scopeMismatched: Capability[];
+    expired: Capability[];
+    sources: Record<Capability, ApprovalSource>;
+    scopes: Record<Capability, ApprovalScope>;
+    expiresAt: Record<Capability, string>;
+}
+/**
+ * Satisfy as much of `gated` as possible without asking anyone.
+ *
+ * Precedence is inherited -> session -> persisted -> prompt. Order matters only for what gets REPORTED
+ * (the ledger's `approvalSource`); any hit satisfies equally. Checking all three before prompting is what
+ * stops an orchestrator's tenth delegation from raising a tenth identical dialog.
+ */
+export declare function resolveApprovals(input: ResolveApprovalsInput): ResolveApprovalsResult;
+//# sourceMappingURL=approval.d.ts.map

package/dist/kernel/approval.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval.d.ts","sourceRoot":"","sources":["../../src/kernel/approval.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,KAAK,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC9D,OAAO,EAAyB,KAAK,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAE/E,4CAA4C;AAC5C,eAAO,MAAM,eAAe,wCAAyC,CAAC;AACtE,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC;AAE7D,yGAAyG;AACzG,eAAO,MAAM,gBAAgB,0DAA2D,CAAC;AACzF,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE/D,sFAAsF;AACtF,MAAM,MAAM,YAAY,GAAG,YAAY,GAAG,UAAU,CAAC;AAErD;;;;;;;;GAQG;AACH,eAAO,MAAM,gBAAgB,eAAe,CAAC;AAE7C;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,KAAK,CAAC;AAIpC,gEAAgE;AAChE,wBAAgB,WAAW,CAAC,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAE3E;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,aAAa,GAAG,SAAS,GAAG,OAAO,CAS7E;AAED;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,YAAY,GAAG,aAAa,EAAE,CAEjE;AAED;;;;;;;;;GASG;AACH,+GAA+G;AAC/G,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,UAAU,CAAC;IACvB,qGAAqG;IACrG,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,aAAa,CAAC;IACrB;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,OAAO,CAAC,EAAE,eAAe,CAAC;CAC3B;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,mBAAmB,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,MAAM,EAAE,CAqB/F;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAevF;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,eAAe,CAC7B,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,EAC/C,UAAU,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,eAAe,GAAG,IAAI,GACtD,GAAG,CAAC,MAAM,CAAC,CAWb;AAED;qGACqG;AACrG,wBAAgB,SAAS,CAAC,UAAU,EAAE,IAAI,GAAG,MAAM,CAElD;AAED,iHAAiH;AACjH,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,2EAA2E;IAC3E,GAAG,EAAE,MAAM,CAAC;IACZ,oGAAoG;IACpG,eAAe,EAAE,UAAU,EAAE,CAAC;IAS9B;;;;;;;OAOG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,oGAAoG;IACpG,OAAO,CAAC,EAAE,eAAe,CAAC;CAC3B;AAED,MAAM,MAAM,YAAY,GACtB,OAAO,GAAG,SAAS,GAAG,aAAa,GAAG,cAAc,GAAG,sBAAsB,GAAG,cAAc,CAAC;AAEjG;;;;;;GAMG;AACH,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,uEAAuE;IACvE,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,aAAa,CAAC;IACrB,gDAAgD;IAChD,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,IAAI,CAAC;IACV,uFAAuF;IACvF,OAAO,EAAE,eAAe,GAAG,IAAI,CAAC;CACjC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,kBAAkB,GAAG,YAAY,CAiBpE;AAED,MAAM,WAAW,qBAAqB;IACpC,oFAAoF;IACpF,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,+DAA+D;IAC/D,gBAAgB,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACtC,uGAAuG;IACvG,uBAAuB,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAC/D,iFAAiF;IACjF,SAAS,EAAE,WAAW,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAC9C,iEAAiE;IACjE,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,mFAAmF;IACnF,WAAW,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAClC;;;;;OAKG;IACH,SAAS,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;CACzB;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,UAAU,EAAE,CAAC;IACvB,uDAAuD;IACvD,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,mFAAmF;IACnF,eAAe,EAAE,UAAU,EAAE,CAAC;IAC9B,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;IAC5C,MAAM,EAAE,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;IAC1C,SAAS,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;CACvC;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,qBAAqB,GAAG,sBAAsB,CAkDrF"}