wicked-crew 0.16.11 → 0.16.13

package/dist/interactive/proposal-create.d.ts

@@ -0,0 +1,143 @@
+/**
+ * THE `create` LAUNCHER OF A CHAT PROPOSAL (DES-CHAT-ARTIFACTS-001 §4.3 steps 2-3, §5.2; slice A3).
+ *
+ * Registered on A2's {@link LaunchOnceRegistry}: `launchOnce` holds the run id's lock, asks {@link find}, and calls
+ * {@link launch} only when the engine has no such run. `launch` makes exactly one document and one run, whatever was
+ * lost before it:
+ *
+ *  1. the document's binding and this attempt are recorded first (`doc-binding.ts`), so the bus trigger of the
+ *     document knows it is a chat's and hands it back to `launchOnce` instead of launching a random-id draft;
+ *  2. the document is looked up by its derived name in its mount, and created only if it is missing, by crew itself,
+ *     through the proxy's own create path with `chat_id` + `proposal_id` (so the Unfiled-repository exception goes
+ *     through the accepted record, §5.2). A 409 from a create that raced is adoption, not failure;
+ *  3. the source packet is built from the stored resolution and the chat's records, joins the document's canonical
+ *     packet, and the draft is launched with the DERIVED run id as its `sessionId` (never a random one).
+ *
+ * So a double click, a lost response, two tabs, a crash between launch and record, and a crash between create and
+ * draft launch all end with one document and one run. A launch that fails leaves the attempt recorded with no run:
+ * the card shows "Interrupted · Go again", which resumes the same identity.
+ */
+import type { ChatTranscriptRecord, ProposalIdentity, SessionView } from '../core/types.js';
+import { type ProposalDispatch, type ProposalDispatcher } from '../api/chat-proposals.js';
+import type { DocBinding, DocBindingAttempt, DocBindingStore } from './doc-binding.js';
+import type { BoundDraft, BoundOutcome } from './draft-events.js';
+import { type PacketDeps } from './source-packet.js';
+export interface CreateLauncherDeps {
+    bindings: DocBindingStore;
+    /** Whether the engine knows this run id. */
+    runExists(runId: string): Promise<boolean>;
+    /** The docs root of a route project (`default` = Unfiled); `null` = no such project. */
+    docsRoot(projectId: string): Promise<string | null>;
+    /** Crew's in-process create through the proxy's own path (`createDocInProcess`). */
+    createDoc(projectId: string, body: Record<string, unknown>, actorId: string): Promise<{
+        status: number;
+        body: unknown;
+    }>;
+    /** The draft seam's proposal-bound launch; `null` when the seam is not armed (nothing can draft). */
+    launchBound: ((spec: BoundDraft) => Promise<void>) | null;
+    /** Remove earlier attempts' folders of the document before this attempt reads its base (`fenceBound`). */
+    fence?: (documentId: string, runIds: readonly string[]) => void;
+    /** The chat's records (live transcript or kept history). */
+    records(chatId: string): ChatTranscriptRecord[];
+    /** The chat's instance now (its history nonce), or `null`. */
+    instanceOf(chatId: string): string | null;
+    /** The id a chat instance is kept under now: its own id, or the archive id a reuse of the id moved it to; `null` when
+     *  it is gone. A binding reads its chat through this, never another person's chat that reused the id. */
+    chatIdOf(chatId: string, instance: string | null): string | null;
+    /** Registered repositories by id (for their roots). */
+    repos(): Promise<Array<{
+        id: string;
+        name: string;
+        rootPath: string;
+    }>>;
+    /** The code graph a document in this mount gets: the project's, else the chat's own scope graph. */
+    graphFor(projectId: string | null, chatId: string): Promise<string | null>;
+    /** The launch roster of two seats, as `clisJson`; `null` when either can no longer work. */
+    clisJsonFor(seats: readonly string[]): string | null;
+    /** The style of a catalog entry (`launch.style`). */
+    styleOf(entry: string | null): string;
+    packetDeps: PacketDeps;
+    log?: (msg: string) => void;
+}
+export declare class CreateLauncher implements ProposalDispatcher {
+    private readonly deps;
+    constructor(deps: CreateLauncherDeps);
+    find(identity: ProposalIdentity): Promise<boolean>;
+    /** Busy until the attempt's outcome is recorded (§6.2), once its run exists. A launch that never produced a run is
+     *  not busy: Go again resumes it. */
+    live(runId: string): Promise<boolean>;
+    /** A document with an attempt still without an outcome, whose run exists. */
+    docBusy(artifactRef: string): Promise<boolean>;
+    launch(d: ProposalDispatch): Promise<void>;
+    /** The resolution's repositories with their registered roots (a repository unregistered since is left out, said). */
+    private boundRepos;
+}
+/** The route project of a mount (`default` for Unfiled). */
+export declare function routeProjectOf(mount: string): string;
+export interface ReconcileDeps {
+    bindings: DocBindingStore;
+    sessions(): Promise<SessionView[]>;
+    cancelRun(runId: string): Promise<unknown>;
+    /** The document's versions now: its head and, per version, the run that made it when interactive records that (the
+     *  I1 contract: `run_id` on each new entry). `provenance` = the manifest records runs at all. `null` = not readable. */
+    docVersions(projectId: string | null, doc: string): {
+        head: number;
+        byRun: Map<string, number>;
+        provenance: boolean;
+    } | null;
+    /** The id the binding's chat is kept under now (its own, or an archive id after a reuse), or `null`. */
+    chatIdOf(chatId: string, instance: string | null): string | null;
+    /** Decide an `accepting` proposal whose run exists (A2's adopt). */
+    settleAccepting(chatId: string, pid: string): Promise<boolean>;
+    /** The run's `run.launched` facts (chat, proposal, artifact, document), recorded again when a crash lost them. */
+    ensureLaunchRecord(binding: DocBinding, attempt: DocBindingAttempt): void;
+    /** An outcome this reconcile recorded, or a failure whose publication a crash cut short (release, `landing_failed`,
+     *  retry card: each idempotent). */
+    onOutcome(ref: string, runId: string, outcome: BoundOutcome): void;
+    /** Whether the run's `run.landing_failed` is on record (the audit append is asynchronous: a crash can lose it after
+     *  the binding said "published"). */
+    hasLandingFailed(runId: string): boolean;
+    /** Every attempt's document, every boot (a recovered run keeps its document link across restarts). */
+    linkDocument(runId: string, doc: string): void;
+    log(msg: string): void;
+    /** How long a cancelled run is waited for, ms (default 30 s). */
+    waitMs?: number;
+    sleep?: (ms: number) => Promise<void>;
+}
+/**
+ * DES-CHAT-ARTIFACTS-001 §6.2 (A3): at daemon start, BEFORE the generic boot resume (which skips bound runs), every
+ * proposal-bound attempt without a recorded outcome is settled. An `accepting` proposal whose run exists is decided, and
+ * the run's launch facts are recorded again if a crash lost them. An attempt crew had announced landed when the
+ * document's manifest names its run (the I1 contract); before that contract, when the head moved past its base (the
+ * best evidence there is, said in the log). Every other attempt with a run lost its seam flight in the restart: its
+ * engine run is cancelled to a CONFIRMED terminal state, then "interrupted by a restart" is recorded, and only then are
+ * the chat and the document released and Try again offered, so an old attempt never runs beside a new one (a retry
+ * also removes the old attempt's folder, so an announce of it still on the bus cannot land). Never a redispatch. An
+ * attempt with no run is left alone: its card's "Go again" resumes the same identity. A failure whose publication a
+ * crash cut short is published again.
+ */
+export declare function reconcileBoundAttempts(deps: ReconcileDeps): Promise<void>;
+/**
+ * A document's head and which run made each version, read from its `versions.json` beneath the docs root (no link
+ * followed). `provenance` is whether the manifest records runs at all (interactive's I1 contract writes `run_id` on
+ * every new entry; an older interactive writes none). `null` when the manifest cannot be read.
+ */
+/**
+ * The chat a recovered attempt is filed under: the binding's own chat instance where it is kept now (its archive id after
+ * a reuse); none when that instance is gone, never the bare id a later chat may have taken since (xreview r5). A chat
+ * that had no instance when Go was pressed can only be named by its id.
+ */
+export declare function recoveredChatId(history: {
+    idOfInstance(id: string, instance: string | null): string | null;
+}, b: Pick<DocBinding, 'chatId' | 'chatInstance'>): string | null;
+/** The `run.launched` detail boot writes for a recovered attempt whose launch record is missing: the chat, proposal,
+ *  artifact and document from the binding, as the draft seam would have, under the chat as it is kept now. */
+export declare function recoveredLaunchDetail(history: {
+    idOfInstance(id: string, instance: string | null): string | null;
+}, b: Pick<DocBinding, 'chatId' | 'chatInstance' | 'owner' | 'ref'>, a: Pick<DocBindingAttempt, 'pid'>): Record<string, unknown>;
+export declare function docVersionsOf(docsRoot: string, doc: string): {
+    head: number;
+    byRun: Map<string, number>;
+    provenance: boolean;
+} | null;
+//# sourceMappingURL=proposal-create.d.ts.map

package/dist/interactive/proposal-create.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proposal-create.d.ts","sourceRoot":"","sources":["../../src/interactive/proposal-create.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,EAAoB,oBAAoB,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAE9G,OAAO,EAAiB,KAAK,gBAAgB,EAAE,KAAK,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAMzG,OAAO,KAAK,EAAa,UAAU,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAClG,OAAO,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAClE,OAAO,EAAqB,KAAK,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAExE,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,eAAe,CAAC;IAC1B,4CAA4C;IAC5C,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3C,wFAAwF;IACxF,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACpD,oFAAoF;IACpF,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IACzH,qGAAqG;IACrG,WAAW,EAAE,CAAC,CAAC,IAAI,EAAE,UAAU,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC;IAC1D,0GAA0G;IAC1G,KAAK,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,MAAM,EAAE,KAAK,IAAI,CAAC;IAChE,4DAA4D;IAC5D,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,oBAAoB,EAAE,CAAC;IAChD,8DAA8D;IAC9D,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAC1C;6GACyG;IACzG,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,GAAG,IAAI,CAAC;IACjE,uDAAuD;IACvD,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC,CAAC;IACxE,oGAAoG;IACpG,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC3E,4FAA4F;IAC5F,WAAW,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,GAAG,IAAI,CAAC;IACrD,qDAAqD;IACrD,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAAC;IACtC,UAAU,EAAE,UAAU,CAAC;IACvB,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7B;AAED,qBAAa,cAAe,YAAW,kBAAkB;IAC3C,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,kBAAkB;IAE/C,IAAI,CAAC,QAAQ,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC;IAIxD;yCACqC;IAC/B,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAM3C,6EAA6E;IACvE,OAAO,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAK9C,MAAM,CAAC,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;IAyHhD,qHAAqH;YACvG,UAAU;CAYzB;AAUD,4DAA4D;AAC5D,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEpD;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,eAAe,CAAC;IAC1B,QAAQ,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IACnC,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3C;4HACwH;IACxH,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,EAAE,GAAG,EAAE,MAAM,GAAG;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAAC,UAAU,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI,CAAC;IAC7H,wGAAwG;IACxG,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,GAAG,IAAI,CAAC;IACjE,oEAAoE;IACpE,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/D,kHAAkH;IAClH,kBAAkB,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,iBAAiB,GAAG,IAAI,CAAC;IAC1E;wCACoC;IACpC,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,GAAG,IAAI,CAAC;IACnE;yCACqC;IACrC,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;IACzC,sGAAsG;IACtG,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/C,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,iEAAiE;IACjE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACvC;AAID;;;;;;;;;;;GAWG;AACH,wBAAsB,sBAAsB,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAwD/E;AAED;;;;GAIG;AACH;;;;GAIG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE;IAAE,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,GAAG,IAAI,CAAA;CAAE,EAC7E,CAAC,EAAE,IAAI,CAAC,UAAU,EAAE,QAAQ,GAAG,cAAc,CAAC,GAC7C,MAAM,GAAG,IAAI,CAEf;AAED;8GAC8G;AAC9G,wBAAgB,qBAAqB,CACnC,OAAO,EAAE;IAAE,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,GAAG,IAAI,CAAA;CAAE,EAC7E,CAAC,EAAE,IAAI,CAAC,UAAU,EAAE,QAAQ,GAAG,cAAc,GAAG,OAAO,GAAG,KAAK,CAAC,EAChE,CAAC,EAAE,IAAI,CAAC,iBAAiB,EAAE,KAAK,CAAC,GAChC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAGzB;AAED,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,UAAU,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,CAiBrI"}

package/dist/interactive/proposal-create.js

@@ -0,0 +1,318 @@
+/**
+ * THE `create` LAUNCHER OF A CHAT PROPOSAL (DES-CHAT-ARTIFACTS-001 §4.3 steps 2-3, §5.2; slice A3).
+ *
+ * Registered on A2's {@link LaunchOnceRegistry}: `launchOnce` holds the run id's lock, asks {@link find}, and calls
+ * {@link launch} only when the engine has no such run. `launch` makes exactly one document and one run, whatever was
+ * lost before it:
+ *
+ *  1. the document's binding and this attempt are recorded first (`doc-binding.ts`), so the bus trigger of the
+ *     document knows it is a chat's and hands it back to `launchOnce` instead of launching a random-id draft;
+ *  2. the document is looked up by its derived name in its mount, and created only if it is missing, by crew itself,
+ *     through the proxy's own create path with `chat_id` + `proposal_id` (so the Unfiled-repository exception goes
+ *     through the accepted record, §5.2). A 409 from a create that raced is adoption, not failure;
+ *  3. the source packet is built from the stored resolution and the chat's records, joins the document's canonical
+ *     packet, and the draft is launched with the DERIVED run id as its `sessionId` (never a random one).
+ *
+ * So a double click, a lost response, two tabs, a crash between launch and record, and a crash between create and
+ * draft launch all end with one document and one run. A launch that fails leaves the attempt recorded with no run:
+ * the card shows "Interrupted · Go again", which resumes the same identity.
+ */
+import { parseArtifactRef, UNFILED_MOUNT } from '../api/chat-context.js';
+import { foldProposals } from '../api/chat-proposals.js';
+import { DEFAULT_PROJECT_ID } from '../projects/default-project.js';
+import { realpathSync } from 'node:fs';
+import { readBeneath } from '../api/beneath.js';
+import { readDocHead } from './chat-events.js';
+import { buildSourcePacket } from './source-packet.js';
+export class CreateLauncher {
+    deps;
+    constructor(deps) {
+        this.deps = deps;
+    }
+    async find(identity) {
+        return this.deps.runExists(identity.runId);
+    }
+    /** Busy until the attempt's outcome is recorded (§6.2), once its run exists. A launch that never produced a run is
+     *  not busy: Go again resumes it. */
+    async live(runId) {
+        const hit = this.deps.bindings.attemptOf(runId);
+        if (hit === null || hit.attempt.outcome !== undefined)
+            return false;
+        return hit.attempt.launchedAt !== undefined || (await this.deps.runExists(runId));
+    }
+    /** A document with an attempt still without an outcome, whose run exists. */
+    async docBusy(artifactRef) {
+        const a = this.deps.bindings.busy(artifactRef);
+        return a !== null && (a.launchedAt !== undefined || (await this.deps.runExists(a.runId)));
+    }
+    async launch(d) {
+        const launchBound = this.deps.launchBound;
+        if (launchBound === null)
+            throw new Error('documents cannot be drafted on this daemon (its draft seam is not armed)');
+        const ref = d.identity.artifactRef === null ? null : parseArtifactRef(d.identity.artifactRef);
+        if (ref === null)
+            throw new Error('the proposal names no document');
+        const res = d.resolution;
+        const projectId = ref.mount === UNFILED_MOUNT ? null : ref.mount;
+        const root = await this.deps.docsRoot(ref.projectId);
+        if (root === null)
+            throw new Error(`${projectId === null ? 'Unfiled' : `project ${projectId}`} is no longer on this daemon`);
+        // An earlier attempt's folder goes BEFORE the base is read: an announce of it still on the bus can no longer land.
+        this.deps.fence?.(ref.doc, (this.deps.bindings.get(ref.ref)?.attempts ?? []).map((a) => a.runId).filter((id) => id !== d.identity.runId));
+        const head = readDocHead(root, ref.doc);
+        // 1. Recorded before anything is created or launched. A retry keeps the binding's repositories, graph, cutoff, chat
+        //    instance and the project the chat itself was in (which says whether the packet is re-checked).
+        const held = this.deps.bindings.get(ref.ref);
+        const repos = held?.repos ?? (await this.boundRepos(res));
+        // The stored graph binding. A document moved out of the chat's own scope gets none: a project graph would reach
+        // repositories the move cut (§4.2), and only the accepted ones are snapshotted.
+        const scopeProject = scopeProjectOf(this.deps.records(d.chatId), res);
+        // ...and none when the person changed the repositories either (cleared or narrowed): the graph would reach past them.
+        const accepted = foldProposals(this.deps.records(d.chatId)).get(d.pid)?.accepting?.edits ?? null;
+        const reposEdited = accepted !== null && (accepted.repos !== undefined || accepted.project !== undefined);
+        const graphDb = held !== null ? held.graphDb : scopeProject !== projectId || reposEdited || (res.repoRefs ?? []).length === 0 ? null : await this.deps.graphFor(projectId, d.chatId);
+        const base = head?.head ?? 0;
+        const binding = this.deps.bindings.begin({
+            ref: ref.ref,
+            mount: ref.mount,
+            doc: ref.doc,
+            projectId,
+            owner: d.actor.id,
+            chatId: d.chatId,
+            chatInstance: this.deps.instanceOf(d.chatId),
+            scopeProject,
+            proposalId: d.pid,
+            cutoffTurnId: res.turnId,
+            repos,
+            graphDb,
+        }, { pid: d.pid, runId: d.identity.runId, base });
+        const attempt = binding.attempts.find((a) => a.runId === d.identity.runId);
+        const clisJson = res.helpers !== null ? this.deps.clisJsonFor(res.helpers.seats) : null;
+        if (clisJson === null)
+            throw new Error('a helper on the card can no longer work; choose two helpers and Go again');
+        // 2. The document, created only if it is missing.
+        if (head === null) {
+            const r = await this.deps.createDoc(ref.projectId, {
+                name: ref.doc,
+                kind: 'source',
+                brief: res.brief ?? res.what.title,
+                style: this.deps.styleOf(res.what.entry),
+                chat_id: d.chatId,
+                proposal_id: d.pid,
+                ...(binding.repos.length > 0 ? { repo_refs: binding.repos.map((r) => r.id) } : {}),
+                clisJson,
+                channel: 'studio',
+                actor: d.actor.id,
+            }, d.actor.id);
+            const answered = readDocHead(root, ref.doc);
+            if ((r.status < 200 || r.status >= 300) && !(r.status === 409 && answered !== null)) {
+                const why = r.body?.error;
+                throw new Error(`the document could not be created (${r.status}${typeof why === 'string' ? `: ${why}` : ''})`);
+            }
+        }
+        // The document as it is now, the one just created or adopted (a 409 is someone else's create) alike: a demo or a
+        // retired document answers nothing, so a draft for it would never land and its chat would stay busy.
+        const refuseUnanswerable = () => {
+            if (readDocHead(root, ref.doc)?.kind === 'demo')
+                throw new Error(`${ref.ref} is a demo, not a document`);
+            if (docRetired(root, ref.doc))
+                throw new Error(`${ref.ref} was deleted; ask again in the chat to make a new document`);
+        };
+        refuseUnanswerable();
+        // 3. The packet, then the draft with the derived run id. The chat is read through its own instance: after a reuse of
+        //    its id it is the archived chat, and when it is gone only what the canonical packet already holds is used.
+        const chatNow = this.deps.chatIdOf(binding.chatId, binding.chatInstance);
+        const packet = await buildSourcePacket({
+            runId: d.identity.runId,
+            chatId: binding.chatId,
+            pid: d.pid,
+            cutoffTurnId: binding.cutoffTurnId,
+            resolution: res,
+            records: chatNow === null ? [] : this.deps.records(chatNow),
+            ...(chatNow !== null ? { storageChatId: chatNow } : {}),
+            held: { tokens: binding.tokens, bytes: (name) => this.deps.bindings.packetBytes(ref.ref, name) },
+            ...(binding.scopeProject !== binding.projectId ? { recheckProject: binding.projectId } : {}),
+        }, this.deps.packetDeps);
+        // Read again after the packet's awaits: a document retired meanwhile is refused here, not drafted (xreview r5).
+        refuseUnanswerable();
+        this.deps.bindings.addPacket(ref.ref, packet.canonical, packet.tokens);
+        this.deps.log?.(`[proposals] ${d.pid}: ${ref.ref} run ${d.identity.runId} — packet ${packet.files.length} file(s)` +
+            `${packet.struck.length > 0 ? `, ${packet.struck.length} left out` : ''}`);
+        await launchBound({
+            documentId: ref.doc,
+            ...(projectId !== null ? { projectId } : {}),
+            brief: res.brief ?? res.what.title,
+            style: this.deps.styleOf(res.what.entry),
+            runId: d.identity.runId,
+            // Filed under the chat as it is kept now (an archive id after a reuse), never the other chat that took the id.
+            chatId: chatNow ?? binding.chatId,
+            proposalId: d.pid,
+            artifactRef: ref.ref,
+            repos: binding.repos.map((r) => ({ repoRef: r.id, name: r.name, rootPath: r.rootPath })),
+            graphDb: binding.graphDb,
+            clisJson,
+            packet,
+            base: attempt.base,
+            actor: d.actor.id,
+        });
+    }
+    /** The resolution's repositories with their registered roots (a repository unregistered since is left out, said). */
+    async boundRepos(res) {
+        const want = res.repoRefs ?? [];
+        if (want.length === 0)
+            return [];
+        const all = await this.deps.repos();
+        const out = [];
+        for (const id of want) {
+            const hit = all.find((r) => r.id === id);
+            if (hit === undefined)
+                this.deps.log?.(`[proposals] ${res.pid}: repository ${id} is no longer registered — not grounded on it`);
+            else
+                out.push({ id: hit.id, name: hit.name, rootPath: hit.rootPath });
+        }
+        return out;
+    }
+}
+/** The project the chat itself was in when the proposal was made (its first record, before any edit): a resolution
+ *  re-filed by an edit differs from it, and then the packet is re-checked against the document's project (§4.2). A
+ *  `null` there is a real answer (a chat in no project), never "unknown". */
+function scopeProjectOf(records, res) {
+    const first = records.find((r) => r.kind === 'proposal' && r.proposal.pid === res.pid);
+    return first !== undefined ? first.proposal.filedIn.projectId : res.filedIn.projectId;
+}
+/** The route project of a mount (`default` for Unfiled). */
+export function routeProjectOf(mount) {
+    return mount === UNFILED_MOUNT ? DEFAULT_PROJECT_ID : mount;
+}
+const TERMINAL_STATUSES = new Set(['completed', 'cancelled', 'failed']);
+/**
+ * DES-CHAT-ARTIFACTS-001 §6.2 (A3): at daemon start, BEFORE the generic boot resume (which skips bound runs), every
+ * proposal-bound attempt without a recorded outcome is settled. An `accepting` proposal whose run exists is decided, and
+ * the run's launch facts are recorded again if a crash lost them. An attempt crew had announced landed when the
+ * document's manifest names its run (the I1 contract); before that contract, when the head moved past its base (the
+ * best evidence there is, said in the log). Every other attempt with a run lost its seam flight in the restart: its
+ * engine run is cancelled to a CONFIRMED terminal state, then "interrupted by a restart" is recorded, and only then are
+ * the chat and the document released and Try again offered, so an old attempt never runs beside a new one (a retry
+ * also removes the old attempt's folder, so an announce of it still on the bus cannot land). Never a redispatch. An
+ * attempt with no run is left alone: its card's "Go again" resumes the same identity. A failure whose publication a
+ * crash cut short is published again.
+ */
+export async function reconcileBoundAttempts(deps) {
+    const all = deps.bindings.all();
+    for (const b of all) {
+        for (const a of b.attempts) {
+            deps.linkDocument(a.runId, b.doc);
+            if (a.outcome?.kind === 'failed' && (a.published !== true || !deps.hasLandingFailed(a.runId)))
+                deps.onOutcome(b.ref, a.runId, a.outcome);
+        }
+    }
+    const pending = all.flatMap((b) => b.attempts.filter((a) => a.outcome === undefined).map((a) => ({ b, a })));
+    if (pending.length === 0)
+        return;
+    const sleep = deps.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
+    const views = new Map((await deps.sessions()).map((v) => [v.session.id, v]));
+    for (const { b, a } of pending) {
+        const view = views.get(a.runId);
+        if (view === undefined) {
+            // Never handed to the engine (a crash before the launch call, or a launch that failed): not busy. Go again
+            // resumes the same identity.
+            if (a.launchingAt !== undefined)
+                deps.bindings.clearLaunching(b.ref, a.runId);
+            continue;
+        }
+        deps.ensureLaunchRecord(b, a);
+        const chatNow = deps.chatIdOf(b.chatId, b.chatInstance);
+        if (chatNow !== null)
+            await deps.settleAccepting(chatNow, a.pid).catch(() => false);
+        if (a.emittedAt !== undefined) {
+            const v = deps.docVersions(b.projectId, b.doc);
+            const landedAt = v === null ? undefined : v.provenance ? v.byRun.get(a.runId) : v.head > a.base ? v.head : undefined;
+            if (landedAt !== undefined) {
+                if (v !== null && !v.provenance)
+                    deps.log(`[proposals] boot: ${b.ref} run ${a.runId}: v${landedAt} is past the attempt's base; this interactive records no run per version, so that is taken as its landing`);
+                const landed = { kind: 'landed', version: landedAt };
+                if (deps.bindings.setOutcome(b.ref, a.runId, landed))
+                    deps.onOutcome(b.ref, a.runId, landed);
+                continue;
+            }
+        }
+        let status = String(view.session.status);
+        if (!TERMINAL_STATUSES.has(status)) {
+            try {
+                await deps.cancelRun(a.runId);
+            }
+            catch (err) {
+                deps.log(`[proposals] boot: could not stop run ${a.runId} of ${b.ref}: ${err instanceof Error ? err.message : String(err)}`);
+            }
+            const deadline = Date.now() + (deps.waitMs ?? 30_000);
+            for (;;) {
+                status = String((await deps.sessions()).find((v) => v.session.id === a.runId)?.session.status ?? status);
+                if (TERMINAL_STATUSES.has(status) || Date.now() >= deadline)
+                    break;
+                await sleep(500);
+            }
+            if (!TERMINAL_STATUSES.has(status)) {
+                // Its terminal frame settles it later (the draft seam records the interruption for a run it holds no flight for).
+                deps.log(`[proposals] boot: run ${a.runId} of ${b.ref} is still ${status}; the document stays busy until it ends`);
+                continue;
+            }
+        }
+        const outcome = { kind: 'failed', reason: 'interrupted by a restart' };
+        if (deps.bindings.setOutcome(b.ref, a.runId, outcome))
+            deps.onOutcome(b.ref, a.runId, outcome);
+        deps.log(`[proposals] boot: ${b.ref} run ${a.runId} was interrupted by the restart (engine ${status}); released, Try again offered`);
+    }
+}
+/**
+ * A document's head and which run made each version, read from its `versions.json` beneath the docs root (no link
+ * followed). `provenance` is whether the manifest records runs at all (interactive's I1 contract writes `run_id` on
+ * every new entry; an older interactive writes none). `null` when the manifest cannot be read.
+ */
+/**
+ * The chat a recovered attempt is filed under: the binding's own chat instance where it is kept now (its archive id after
+ * a reuse); none when that instance is gone, never the bare id a later chat may have taken since (xreview r5). A chat
+ * that had no instance when Go was pressed can only be named by its id.
+ */
+export function recoveredChatId(history, b) {
+    return b.chatInstance === null ? b.chatId : history.idOfInstance(b.chatId, b.chatInstance);
+}
+/** The `run.launched` detail boot writes for a recovered attempt whose launch record is missing: the chat, proposal,
+ *  artifact and document from the binding, as the draft seam would have, under the chat as it is kept now. */
+export function recoveredLaunchDetail(history, b, a) {
+    const chatNow = recoveredChatId(history, b);
+    return { deliver: 'none', channel: 'studio', actor: b.owner, ...(chatNow !== null ? { chatId: chatNow } : {}), proposalId: a.pid, artifactRef: b.ref, recoveredAtBoot: true };
+}
+export function docVersionsOf(docsRoot, doc) {
+    if (!/^[a-z0-9][a-z0-9-]{0,63}$/.test(doc))
+        return null;
+    try {
+        const root = realpathSync(docsRoot);
+        const m = JSON.parse(readBeneath(root, `${doc}/versions.json`, 2 * 1024 * 1024).data.toString('utf8'));
+        if (typeof m.head !== 'number' || !Number.isInteger(m.head) || m.head < 0)
+            return null;
+        const byRun = new Map();
+        let provenance = false;
+        for (const e of Array.isArray(m.versions) ? m.versions : []) {
+            if (e === null || typeof e !== 'object' || !('run_id' in e))
+                continue;
+            provenance = true;
+            if (typeof e['run_id'] === 'string' && typeof e['version'] === 'number')
+                byRun.set(e['run_id'], e['version']);
+        }
+        return { head: m.head, byRun, provenance };
+    }
+    catch {
+        return null;
+    }
+}
+/** Whether interactive retired (tombstoned) the document: its manifest carries `retired_at`. */
+function docRetired(docsRoot, doc) {
+    try {
+        const m = JSON.parse(readBeneath(realpathSync(docsRoot), `${doc}/versions.json`, 2 * 1024 * 1024).data.toString('utf8'));
+        return typeof m.retired_at === 'string' && m.retired_at !== '';
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=proposal-create.js.map

package/dist/interactive/proposal-create.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proposal-create.js","sourceRoot":"","sources":["../../src/interactive/proposal-create.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAGH,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACzE,OAAO,EAAE,aAAa,EAAkD,MAAM,0BAA0B,CAAC;AACzG,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEvC,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAG/C,OAAO,EAAE,iBAAiB,EAAmB,MAAM,oBAAoB,CAAC;AAiCxE,MAAM,OAAO,cAAc;IACI;IAA7B,YAA6B,IAAwB;QAAxB,SAAI,GAAJ,IAAI,CAAoB;IAAG,CAAC;IAEzD,KAAK,CAAC,IAAI,CAAC,QAA0B;QACnC,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC7C,CAAC;IAED;yCACqC;IACrC,KAAK,CAAC,IAAI,CAAC,KAAa;QACtB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAChD,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QACpE,OAAO,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IACpF,CAAC;IAED,6EAA6E;IAC7E,KAAK,CAAC,OAAO,CAAC,WAAmB;QAC/B,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC/C,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,KAAK,SAAS,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC5F,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,CAAmB;QAC9B,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC;QAC1C,IAAI,WAAW,KAAK,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAC;QACtH,MAAM,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC9F,IAAI,GAAG,KAAK,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACpE,MAAM,GAAG,GAAG,CAAC,CAAC,UAAU,CAAC;QACzB,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,KAAK,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;QACjE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACrD,IAAI,IAAI,KAAK,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,SAAS,EAAE,8BAA8B,CAAC,CAAC;QAC7H,mHAAmH;QACnH,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;QAC1I,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;QAExC,oHAAoH;QACpH,oGAAoG;QACpG,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC7C,MAAM,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1D,gHAAgH;QAChH,gFAAgF;QAChF,MAAM,YAAY,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC;QACtE,sHAAsH;QACtH,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,KAAK,IAAI,IAAI,CAAC;QACjG,MAAM,WAAW,GAAG,QAAQ,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,KAAK,SAAS,IAAI,QAAQ,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC;QAC1G,MAAM,OAAO,GAAG,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,KAAK,SAAS,IAAI,WAAW,IAAI,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;QACrL,MAAM,IAAI,GAAG,IAAI,EAAE,IAAI,IAAI,CAAC,CAAC;QAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CACtC;YACE,GAAG,EAAE,GAAG,CAAC,GAAG;YACZ,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,GAAG,EAAE,GAAG,CAAC,GAAG;YACZ,SAAS;YACT,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE;YACjB,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC;YAC5C,YAAY;YACZ,UAAU,EAAE,CAAC,CAAC,GAAG;YACjB,YAAY,EAAE,GAAG,CAAC,MAAM;YACxB,KAAK;YACL,OAAO;SACR,EACD,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,CAC9C,CAAC;QACF,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAE,CAAC;QAC5E,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACxF,IAAI,QAAQ,KAAK,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAC;QAEnH,kDAAkD;QAClD,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CACjC,GAAG,CAAC,SAAS,EACb;gBACE,IAAI,EAAE,GAAG,CAAC,GAAG;gBACb,IAAI,EAAE,QAAQ;gBACd,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK;gBAClC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC;gBACxC,OAAO,EAAE,CAAC,CAAC,MAAM;gBACjB,WAAW,EAAE,CAAC,CAAC,GAAG;gBAClB,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClF,QAAQ;gBACR,OAAO,EAAE,QAAQ;gBACjB,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE;aAClB,EACD,CAAC,CAAC,KAAK,CAAC,EAAE,CACX,CAAC;YACF,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;YAC5C,IAAI,CAAC,CAAC,CAAC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,KAAK,IAAI,CAAC,EAAE,CAAC;gBACpF,MAAM,GAAG,GAAI,CAAC,CAAC,IAAmC,EAAE,KAAK,CAAC;gBAC1D,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC,MAAM,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YACjH,CAAC;QACH,CAAC;QACD,iHAAiH;QACjH,qGAAqG;QACrG,MAAM,kBAAkB,GAAG,GAAS,EAAE;YACpC,IAAI,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,KAAK,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,GAAG,CAAC,GAAG,4BAA4B,CAAC,CAAC;YACzG,IAAI,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,GAAG,CAAC,GAAG,4DAA4D,CAAC,CAAC;QACzH,CAAC,CAAC;QACF,kBAAkB,EAAE,CAAC;QAErB,qHAAqH;QACrH,+GAA+G;QAC/G,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;QACzE,MAAM,MAAM,GAAG,MAAM,iBAAiB,CACpC;YACE,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK;YACvB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,GAAG,EAAE,CAAC,CAAC,GAAG;YACV,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,UAAU,EAAE,GAAG;YACf,OAAO,EAAE,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;YAC3D,GAAG,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvD,IAAI,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE;YAChG,GAAG,CAAC,OAAO,CAAC,YAAY,KAAK,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7F,EACD,IAAI,CAAC,IAAI,CAAC,UAAU,CACrB,CAAC;QACF,gHAAgH;QAChH,kBAAkB,EAAE,CAAC;QACrB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACvE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CACb,eAAe,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,QAAQ,CAAC,KAAK,aAAa,MAAM,CAAC,KAAK,CAAC,MAAM,UAAU;YAChG,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC,MAAM,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,CAC5E,CAAC;QACF,MAAM,WAAW,CAAC;YAChB,UAAU,EAAE,GAAG,CAAC,GAAG;YACnB,GAAG,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5C,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK;YAClC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC;YACxC,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK;YACvB,+GAA+G;YAC/G,MAAM,EAAE,OAAO,IAAI,OAAO,CAAC,MAAM;YACjC,UAAU,EAAE,CAAC,CAAC,GAAG;YACjB,WAAW,EAAE,GAAG,CAAC,GAAG;YACpB,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;YACxF,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,QAAQ;YACR,MAAM;YACN,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE;SAClB,CAAC,CAAC;IACL,CAAC;IAED,qHAAqH;IAC7G,KAAK,CAAC,UAAU,CAAC,GAAqB;QAC5C,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC;QAChC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QACjC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QACpC,MAAM,GAAG,GAAgB,EAAE,CAAC;QAC5B,KAAK,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC;YACtB,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;YACzC,IAAI,GAAG,KAAK,SAAS;gBAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,eAAe,GAAG,CAAC,GAAG,gBAAgB,EAAE,+CAA+C,CAAC,CAAC;;gBAC3H,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QACxE,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;CACF;AAED;;6EAE6E;AAC7E,SAAS,cAAc,CAAC,OAAwC,EAAE,GAAqB;IACrF,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAA4D,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,KAAK,GAAG,CAAC,GAAG,CAAC,CAAC;IACjJ,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC;AACxF,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,OAAO,KAAK,KAAK,aAAa,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,KAAK,CAAC;AAC9D,CAAC;AA6BD,MAAM,iBAAiB,GAAwB,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC;AAE7F;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,IAAmB;IAC9D,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;IAChC,KAAK,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;QACpB,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;YAC3B,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;YAClC,IAAI,CAAC,CAAC,OAAO,EAAE,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,SAAS,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;gBAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;QAC3I,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7G,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACjC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IAC1F,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAU,CAAC,CAAC,CAAC;IACtF,KAAK,MAAM,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,OAAO,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAChC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,2GAA2G;YAC3G,6BAA6B;YAC7B,IAAI,CAAC,CAAC,WAAW,KAAK,SAAS;gBAAE,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;YAC9E,SAAS;QACX,CAAC;QACD,IAAI,CAAC,kBAAkB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC;QACxD,IAAI,OAAO,KAAK,IAAI;YAAE,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;QACpF,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;YAC/C,MAAM,QAAQ,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACrH,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU;oBAAE,IAAI,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,KAAK,MAAM,QAAQ,2GAA2G,CAAC,CAAC;gBAC9M,MAAM,MAAM,GAAiB,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;gBACnE,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC;oBAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;gBAC7F,SAAS;YACX,CAAC;QACH,CAAC;QACD,IAAI,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACnC,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YAChC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,GAAG,CAAC,wCAAwC,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,GAAG,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC/H,CAAC;YACD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,CAAC;YACtD,SAAS,CAAC;gBACR,MAAM,GAAG,MAAM,CAAC,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC,CAAC;gBACzG,IAAI,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ;oBAAE,MAAM;gBACnE,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;YACnB,CAAC;YACD,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBACnC,kHAAkH;gBAClH,IAAI,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,GAAG,aAAa,MAAM,yCAAyC,CAAC,CAAC;gBACnH,SAAS;YACX,CAAC;QACH,CAAC;QACD,MAAM,OAAO,GAAiB,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC;QACrF,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC;YAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC/F,IAAI,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,KAAK,2CAA2C,MAAM,gCAAgC,CAAC,CAAC;IACvI,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAC7B,OAA6E,EAC7E,CAA8C;IAE9C,OAAO,CAAC,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC;AAC7F,CAAC;AAED;8GAC8G;AAC9G,MAAM,UAAU,qBAAqB,CACnC,OAA6E,EAC7E,CAAgE,EAChE,CAAiC;IAEjC,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,GAAG,EAAE,WAAW,EAAE,CAAC,CAAC,GAAG,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;AAChL,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,QAAgB,EAAE,GAAW;IACzD,IAAI,CAAC,2BAA2B,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACxD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;QACpC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,GAAG,GAAG,gBAAgB,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAA2C,CAAC;QACjJ,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACvF,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;QACxC,IAAI,UAAU,GAAG,KAAK,CAAC;QACvB,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,QAA2C,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YAChG,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC;gBAAE,SAAS;YACtE,UAAU,GAAG,IAAI,CAAC;YAClB,IAAI,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,SAAS,CAAC,KAAK,QAAQ;gBAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;QAChH,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,gGAAgG;AAChG,SAAS,UAAU,CAAC,QAAgB,EAAE,GAAW;IAC/C,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,GAAG,GAAG,gBAAgB,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAA6B,CAAC;QACrJ,OAAO,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,CAAC,UAAU,KAAK,EAAE,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/interactive/proxy-routes.d.ts

@@ -32,8 +32,9 @@
  * `versions.json` under this project's docs root, for the draft/demo seams (`doc-grounding.ts`).
  * The create response is small JSON, so it is buffered — SSE never rides this route.
  */
-import type { FastifyInstance } from 'fastify';
+import type { FastifyInstance, FastifyRequest } from 'fastify';
 import type { InteractiveDocCreateRequest } from 'wicked-crew-api-types';
+import { type IncomingHttpHeaders } from 'node:http';
 import type { CoreAdapter } from '../core/adapter.js';
 import type { ProjectSettingsStore } from '../projects/settings.js';
 import { InteractiveBridgePool, type LiveBridge } from './bridge-pool.js';
@@ -65,8 +66,26 @@ export interface InteractiveProxyDeps {
     /** The current council roster — when supplied, a doc/demo create body with a `clisJson` that
      *  names a seat not in the roster is refused 400 before the bridge sees the request (#631). */
     roster?: () => unknown[];
+    /** DES-CHAT-ARTIFACTS-001 §5.2 (A3): the accepted proposal a create's `chat_id` + `proposal_id` names, for this actor.
+     *  Absent = every `chat_id` / `proposal_id` is refused. */
+    proposalGrant?: (chatId: string, proposalId: string, actorId: string) => ProposalGrant | null;
+    /** The caller's actor id (the route's `actorOf`); absent = the local person. */
+    actorOf?: (req: FastifyRequest) => string;
     log?: (msg: string) => void;
 }
+/**
+ * What an accepted proposal lets ONE create do (A3): make the document its identity derived (`doc`, in the mount whose
+ * route project is `projectId`), grounded on the repositories its stored resolution lists, filed or Unfiled.
+ */
+export interface ProposalGrant {
+    doc: string;
+    /** The route's project id (`default` for Unfiled). */
+    projectId: string;
+    repos: ReadonlyArray<{
+        id: string;
+        name: string;
+    }>;
+}
 /** The create body as `prepareDocCreate` reads it — the published `InteractiveDocCreateRequest`
  *  (wire-contract.test.ts pins the two against each other). */
 export type DocCreateBody = InteractiveDocCreateRequest;
@@ -74,7 +93,7 @@ export type DocCreateBody = InteractiveDocCreateRequest;
  *  wire: crew-api-types `InteractiveDocCreateRefusal`. */
 export interface DocCreateRefusal {
     error: string;
-    code: 'repo_not_in_project' | 'unfiled_doc_repo' | 'invalid_repo_ref' | 'ambiguous_repo_ref' | 'project_mismatch';
+    code: 'repo_not_in_project' | 'unfiled_doc_repo' | 'invalid_repo_ref' | 'ambiguous_repo_ref' | 'project_mismatch' | 'proposal_grant_refused';
     requested: string[];
     missing?: string[];
     /** `ambiguous_repo_ref`: the refs that name several repos, each with its candidates. */
@@ -121,6 +140,11 @@ export interface PreparedCreate {
         channel?: 'studio' | 'cli' | 'api' | undefined;
         actor?: string | undefined;
     };
+    /** A3: the accepted proposal this create answers (checked through its record); never forwarded to the bridge. */
+    proposal?: {
+        chatId: string;
+        proposalId: string;
+    };
     refusal?: DocCreateRefusal;
 }
 /** `true` for the bridge's doc-create request (method + exact path, query ignored). */
@@ -168,8 +192,41 @@ export declare function askOf(raw: Buffer): {
  * see, and say what to record once the bridge names the doc. Pure over its inputs — the route
  * decides what to do with a refusal; exported so the rule is unit-testable without a bridge.
  */
-export declare function prepareDocCreate(raw: Buffer, contentType: string | undefined, adapter: CoreAdapter, projectId: string, log?: (msg: string) => void): Promise<PreparedCreate>;
+export declare function prepareDocCreate(raw: Buffer, contentType: string | undefined, adapter: CoreAdapter, projectId: string, log?: (msg: string) => void, 
+/** A3: the accepted proposal a `chat_id` + `proposal_id` names, for the caller. Absent = refuse them. */
+grantFor?: (chatId: string, proposalId: string) => ProposalGrant | null): Promise<PreparedCreate>;
+/**
+ * Whether this request loads a document into a frame for a page of another site. Studio's own frames are same-origin;
+ * an editor plugin's frame is sandboxed with an opaque origin, so a navigation it starts is always `cross-site`. A
+ * document served here runs with its own policy, not an editor bundle's WebRTC guard (`editors/webrtc-guard.ts`), and
+ * studio's shell lets any of its frames point here, so an editor frame could otherwise navigate itself to a document
+ * and run that document's scripts in a fresh realm. A browser sends `Sec-Fetch-*` only to a trustworthy origin
+ * (localhost, https); without them the request is let through.
+ */
+export declare function isCrossSiteFrameLoad(headers: IncomingHttpHeaders): boolean;
+/**
+ * Whether a cross-site frame load comes from a page the daemon lets frame it: its clickjacking guard
+ * (`api/frame-guard.ts`) has already written `frame-ancestors` (studio's dev server and the operator's allowed origins)
+ * on this response. The page's own `Referer` names it; an editor frame sends none, or (if it asks for one) its own URL
+ * on the daemon's origin, which never counts.
+ */
+export declare function fromFramingPage(referer: string | string[] | undefined, frameGuard: unknown, ownOrigin: string, forwardedHosts?: readonly string[]): boolean;
+/** The hosts a reverse proxy names for the original request: `X-Forwarded-Host` (each, comma-separated) and every
+ *  `host=` of `Forwarded`. Only ever used to refuse more. */
+export declare function forwardedHosts(headers: IncomingHttpHeaders): string[];
+/** The words a refused frame shows. */
+export declare const CROSS_SITE_FRAME_REFUSED = "This document opens only in studio, not from inside another page or an editor plugin.";
 export declare function registerInteractiveProxy(app: FastifyInstance, adapter: CoreAdapter, deps: InteractiveProxyDeps): void;
+/**
+ * DES-CHAT-ARTIFACTS-001 §4.3 (A3): crew's OWN create of a proposal's document, in process. It runs the same
+ * `prepareDocCreate` the proxy route runs (so the `chat_id` grant is checked through the accepted record exactly as for
+ * any caller), then posts the prepared body to the project's bridge and records the grounding sidecar. Never replayed:
+ * a connection lost after the body was sent answers 502 `create_undetermined`, and the caller looks the document up.
+ */
+export declare function createDocInProcess(adapter: CoreAdapter, deps: Pick<InteractiveProxyDeps, 'settings' | 'pool' | 'grounding' | 'roster' | 'proposalGrant' | 'stateHome' | 'home' | 'env' | 'log'>, projectId: string, body: Record<string, unknown>, actorId: string): Promise<{
+    status: number;
+    body: unknown;
+}>;
 /**
  * Errors that mean "the upstream tore down its side after the CLIENT already left" — normal
  * teardown noise when a browser tab closes mid-stream. Only used when `clientGone` is already

package/dist/interactive/proxy-routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"proxy-routes.d.ts","sourceRoot":"","sources":["../../src/interactive/proxy-routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAgC,MAAM,SAAS,CAAC;AAC7E,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,uBAAuB,CAAC;AAGzE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEtD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AACpE,OAAO,EAA0B,qBAAqB,EAAE,KAAK,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAClG,OAAO,EAOL,KAAK,iBAAiB,EACvB,MAAM,oBAAoB,CAAC;AAK5B,mGAAmG;AACnG,eAAO,MAAM,eAAe,cAAc,CAAC;AAC3C,uGAAuG;AACvG,eAAO,MAAM,mBAAmB,QAAkB,CAAC;AAEnD,iFAAiF;AACjF,eAAO,MAAM,6BAA6B,gKACgH,CAAC;AA4C3J;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAO5F;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,IAAI,EAAE,qBAAqB,CAAC;IAC5B,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,sHAAsH;IACtH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,+EAA+E;IAC/E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;4FACwF;IACxF,SAAS,CAAC,EAAE,iBAAiB,CAAC;IAC9B;mGAC+F;IAC/F,MAAM,CAAC,EAAE,MAAM,OAAO,EAAE,CAAC;IACzB,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7B;AAED;+DAC+D;AAC/D,MAAM,MAAM,aAAa,GAAG,2BAA2B,CAAC;AAExD;0DAC0D;AAC1D,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,qBAAqB,GAAG,kBAAkB,GAAG,kBAAkB,GAAG,oBAAoB,GAAG,kBAAkB,CAAC;IAClH,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,wFAAwF;IACxF,SAAS,CAAC,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,KAAK,CAAC;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE,CAAC,CAAC;IACpF,SAAS,CAAC,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACjD;AAED;sGACsG;AACtG,eAAO,MAAM,mBAAmB;;;CAKtB,CAAC;AAEX;uGACuG;AACvG,eAAO,MAAM,iBAAiB;;;CAKpB,CAAC;AAOX,kFAAkF;AAClF,MAAM,WAAW,cAAc;IAC7B,8GAA8G;IAC9G,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB;;;0FAGsF;IACtF,UAAU,CAAC,EAAE,aAAa,CAAC;IAC3B,gGAAgG;IAChG,OAAO,CAAC,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,OAAO,CAAC,EAAE,QAAQ,GAAG,KAAK,GAAG,KAAK,GAAG,SAAS,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,CAAC;IAC3L,OAAO,CAAC,EAAE,gBAAgB,CAAC;CAC5B;AAED,uFAAuF;AACvF,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAG/E;AAED,+FAA+F;AAC/F,eAAO,MAAM,eAAe,gBAAgB,CAAC;AAC7C,yEAAyE;AACzE,eAAO,MAAM,mBAAmB,QAAc,CAAC;AAE/C,oFAAoF;AACpF,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAInF;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAOxF;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,8BAA8B,CAAC;IACrC,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;8CAC8C;AAC9C,oEAAoE;AACpE,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAQ1D;AAED,wBAAgB,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,qBAAqB,GAAG,IAAI,CAY5F;AAED,qGAAqG;AACrG,wBAAgB,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAc9E;AAcD;;;;;GAKG;AACH,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,MAAM,EACX,WAAW,EAAE,MAAM,GAAG,SAAS,EAC/B,OAAO,EAAE,WAAW,EACpB,SAAS,EAAE,MAAM,EACjB,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,GAC1B,OAAO,CAAC,cAAc,CAAC,CAyLzB;AAED,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,eAAe,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,oBAAoB,GAAG,IAAI,CAkJrH;AAiHD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAKvD"}
+{"version":3,"file":"proxy-routes.d.ts","sourceRoot":"","sources":["../../src/interactive/proxy-routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAgB,cAAc,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,uBAAuB,CAAC;AACzE,OAAO,EAA0B,KAAK,mBAAmB,EAAwB,MAAM,WAAW,CAAC;AAInG,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEtD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AACpE,OAAO,EAA0B,qBAAqB,EAAE,KAAK,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAClG,OAAO,EAOL,KAAK,iBAAiB,EACvB,MAAM,oBAAoB,CAAC;AAK5B,mGAAmG;AACnG,eAAO,MAAM,eAAe,cAAc,CAAC;AAC3C,uGAAuG;AACvG,eAAO,MAAM,mBAAmB,QAAkB,CAAC;AAEnD,iFAAiF;AACjF,eAAO,MAAM,6BAA6B,gKACgH,CAAC;AA4C3J;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAO5F;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,IAAI,EAAE,qBAAqB,CAAC;IAC5B,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,sHAAsH;IACtH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,+EAA+E;IAC/E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;4FACwF;IACxF,SAAS,CAAC,EAAE,iBAAiB,CAAC;IAC9B;mGAC+F;IAC/F,MAAM,CAAC,EAAE,MAAM,OAAO,EAAE,CAAC;IACzB;+DAC2D;IAC3D,aAAa,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,aAAa,GAAG,IAAI,CAAC;IAC9F,gFAAgF;IAChF,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,cAAc,KAAK,MAAM,CAAC;IAC1C,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7B;AAED;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,sDAAsD;IACtD,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,aAAa,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACpD;AAED;+DAC+D;AAC/D,MAAM,MAAM,aAAa,GAAG,2BAA2B,CAAC;AAExD;0DAC0D;AAC1D,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,qBAAqB,GAAG,kBAAkB,GAAG,kBAAkB,GAAG,oBAAoB,GAAG,kBAAkB,GAAG,wBAAwB,CAAC;IAC7I,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,wFAAwF;IACxF,SAAS,CAAC,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,KAAK,CAAC;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE,CAAC,CAAC;IACpF,SAAS,CAAC,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACjD;AAED;sGACsG;AACtG,eAAO,MAAM,mBAAmB;;;CAKtB,CAAC;AAEX;uGACuG;AACvG,eAAO,MAAM,iBAAiB;;;CAKpB,CAAC;AAOX,kFAAkF;AAClF,MAAM,WAAW,cAAc;IAC7B,8GAA8G;IAC9G,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB;;;0FAGsF;IACtF,UAAU,CAAC,EAAE,aAAa,CAAC;IAC3B,gGAAgG;IAChG,OAAO,CAAC,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,OAAO,CAAC,EAAE,QAAQ,GAAG,KAAK,GAAG,KAAK,GAAG,SAAS,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,CAAC;IAC3L,iHAAiH;IACjH,QAAQ,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;IAClD,OAAO,CAAC,EAAE,gBAAgB,CAAC;CAC5B;AAED,uFAAuF;AACvF,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAG/E;AAED,+FAA+F;AAC/F,eAAO,MAAM,eAAe,gBAAgB,CAAC;AAC7C,yEAAyE;AACzE,eAAO,MAAM,mBAAmB,QAAc,CAAC;AAE/C,oFAAoF;AACpF,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAInF;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAOxF;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,8BAA8B,CAAC;IACrC,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;8CAC8C;AAC9C,oEAAoE;AACpE,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAQ1D;AAED,wBAAgB,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,qBAAqB,GAAG,IAAI,CAY5F;AAED,qGAAqG;AACrG,wBAAgB,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAc9E;AAcD;;;;;GAKG;AACH,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,MAAM,EACX,WAAW,EAAE,MAAM,GAAG,SAAS,EAC/B,OAAO,EAAE,WAAW,EACpB,SAAS,EAAE,MAAM,EACjB,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI;AAC3B,yGAAyG;AACzG,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,KAAK,aAAa,GAAG,IAAI,GACtE,OAAO,CAAC,cAAc,CAAC,CAsJzB;AAkFD;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAM1E;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,cAAc,GAAE,SAAS,MAAM,EAAO,GAAG,OAAO,CAoB/J;AAoBD;6DAC6D;AAC7D,wBAAgB,cAAc,CAAC,OAAO,EAAE,mBAAmB,GAAG,MAAM,EAAE,CAKrE;AAED,uCAAuC;AACvC,eAAO,MAAM,wBAAwB,0FAA0F,CAAC;AAEhI,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,eAAe,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,oBAAoB,GAAG,IAAI,CAwJrH;AA8GD;;;;;GAKG;AACH,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,WAAW,EACpB,IAAI,EAAE,IAAI,CAAC,oBAAoB,EAAE,UAAU,GAAG,MAAM,GAAG,WAAW,GAAG,QAAQ,GAAG,eAAe,GAAG,WAAW,GAAG,MAAM,GAAG,KAAK,GAAG,KAAK,CAAC,EACvI,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,OAAO,EAAE,MAAM,GACd,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,OAAO,CAAA;CAAE,CAAC,CAqC5C;AA0CD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAKvD"}