// Package intentflow owns the multi-intent plan lifecycle.
//
// It is the only application entry for proposing, confirming, recovering, and
// advancing persistent plans. Callers (chat/server) must depend on the Service
// interface and PlanView projection, not on the store, pool, or action-owner
// engines.
//
// Hard rules:
//   - Confirmation is not authorization; each step re-checks the current principal.
//   - PostgreSQL plan/step/decision rows are authoritative; cards and SSE are projections.
//   - internal/intent stays a pure rule module (intent -> maturity).
//   - This package must not import docgov, taskrun, coordinator, or server.
//   - Only the owner repository unwraps pgx via app/uow (see unwrap_owners).
package intentflow