Implement safe public LSL delivery (#129)

docs/grid-agent-script-delivery.md

@@ -0,0 +1,40 @@
+# Grid-agent LSL script delivery
+
+The public LSL exception is deliberately narrower than operator authority. An
+explicit public-chat or one-to-one IM request may expose only
+`deliver_generated_lsl`. Policy binds that call to the authenticated sender
+UUID; neither conversation text nor tool arguments contain a destination UUID
+or inventory folder.
+
+The model must return exactly `name`, `description`, and `source`. Unknown
+fields are rejected. All three values are bounded, and source is treated as
+untrusted data. Native `metacrate-lsl-tools` lexical and structural parsing runs
+before inventory mutation, followed by checks that reject capability URLs,
+secret-like content, and public-workflow operations such as teleport, rez,
+attach, money, estate, eject, and object-return calls. Validation establishes a
+bounded syntax and policy gate, not simulator runtime safety.
+
+Accepted source is uploaded as an LSL inventory item with copy, modify, and
+transfer permissions in `MetaCrate Generated Scripts`, then offered once to the
+original sender. This workflow never compiles, runs, attaches, rezzes, or
+injects the script into an object. The generated-scripts folder doubles as the
+recovery queue: a failed or ambiguous offer leaves the original item there and
+the transfer is not blindly retried. Operators can inspect and reconcile that
+folder using the audit correlation ID.
+
+Per-resident and global windows limit accepted requests, and a semaphore bounds
+simultaneous creates/transfers. The enclosing tool loop supplies its bounded
+wall-clock deadline and cancellation token. Disconnect, timeout, shutdown, and
+duplicate delivery IDs are handled by the session and interaction owners before
+another inventory operation can be admitted. Default diagnostics report only
+bounded outcomes and byte counts; generated source and conversation content are
+not formatted into logs.
+
+Focused verification:
+
+```console
+cargo test --locked -p metacrate-grid-agent --lib script_delivery_tests
+cargo test --locked -p metacrate-grid-agent --lib interaction_tests
+cargo test --locked -p metacrate-grid-agent --test llm_transport
+cargo test --locked -p metacrate-lsl-tools
+```