@animalabs/agent-framework 0.22.2 → 0.22.3

package/src/modules/workspace/types.ts

@@ -38,6 +38,11 @@ export interface MountConfig {
    * - Exact name match: ".git", "node_modules"
    * - Directory glob: "node_modules/**" (anything under node_modules)
    * - Extension glob: "*.pyc" (any file ending in .pyc)
+   * A sync without a path and the watcher pass over what the list covers,
+   * and over entries with an editor's swap or backup file name whatever it
+   * says, a directory with what lies beneath it: `.name.swp` and `.name.swx`
+   * (the whole name), and names ending in `~` or in `.subl…tmp`, matched by
+   * `^\..+\.sw[px]$`, `~$` and `\.subl.*\.tmp$`.
    */
   ignore?: string[];
   /** Whether to follow symlinks (default: false) */
@@ -58,9 +63,13 @@ export interface MountConfig {
    * kept with the mount's disk evidence, so a restart resumes there, unless
    * the machine went down before the store made the latest place durable.
    * An agent-action scan (`watch: 'on-agent-action'`) and a listing (`ls`,
-   * `glob`, `grep`) take up to it from their scope's start every time. Each
-   * directory's listing is read whole, so a deletion is seen wherever the
-   * walk lists, whatever it took.
+   * `glob`, `grep`) take up to it from their scope's start every time:
+   * `glob`'s is the directory its pattern's segments before the first
+   * wildcard name beneath its `path`, and `grep`'s the deeper of its `path`
+   * and its `glob` filter's directory, as far as disk lists each segment
+   * with that spelling as a directory, not a link. Each directory's listing
+   * is read whole, so a deletion is seen wherever the walk lists, whatever
+   * it took.
    *
    * It bounds what a walk observes, not the walk's own work: directories
    * don't count against it, and each one the walk visits is read whole, so
@@ -74,6 +83,8 @@ export interface MountConfig {
    *
    * Self-writes through the module's own tools are already suppressed by the
    * watcher, so a mount shared between agents only wakes on external writes.
+   * A change of a file's mode alone is recorded, and makes no event: it
+   * brings nothing new to read.
    * The EventGate still has final say — use gate policies for path-glob
    * filtering or to disable wake temporarily via hot-reload.
    */
@@ -136,7 +147,10 @@ export interface MountState {
   lastMaterializedSeq: number;
   /** Paths currently suppressed from watcher (recently materialized) */
   suppressedPaths: Set<string>;
-  /** Whether a full scan of the mount has completed this session */
+  /**
+   * Whether a pass over the whole mount has run this session. On a mount
+   * over its walkCap, that pass took the first walkCap entries.
+   */
   initialSyncDone: boolean;
   /** Branch ID that was active when this mount last materialized */
   lastMaterializedBranchId: string | null;

package/src/modules/workspace/watcher.ts

@@ -8,6 +8,7 @@
 import { watch, type FSWatcher } from 'chokidar';
 import { mkdirSync, statSync } from 'node:fs';
 import { basename, sep } from 'node:path';
+import { passedOverAt } from './observe.js';
 import { type MountConfig } from './types.js';
 
 export type FsOp = 'created' | 'modified' | 'deleted';
@@ -27,7 +28,8 @@ export interface WatcherEvents {
  * identical to an empty directory in the recorded state.
  */
 export interface WatcherLifecycle {
-  /** Fires once, when chokidar completes its initial scan. */
+  /** Fires when chokidar completes its initial scan: once for each attach, so
+   *  again after a re-attach. */
   onReady?: () => void;
   /** Fires on any chokidar-reported error (ENOENT, EACCES, platform faults). */
   onError?: (err: Error) => void;
@@ -48,7 +50,8 @@ interface RootIdentity {
 export class MountWatcher {
   private watcher: FSWatcher | null = null;
   // Most recent op seen per path within the current debounce window.
-  // create -> modify collapses to 'created' (single batch); delete always wins.
+  // create -> modify collapses to 'created' (single batch); a trailing delete
+  // wins, and delete -> create reads as 'modified' (see mergeOp).
   private pendingChanges = new Map<string, FsOp>();
   private debounceTimer: ReturnType<typeof setTimeout> | null = null;
   private rootPollTimer: ReturnType<typeof setInterval> | null = null;
@@ -67,6 +70,8 @@ export class MountWatcher {
     config: MountConfig,
     onChange: (changes: FsChange[]) => void,
     lifecycle: WatcherLifecycle = {},
+    /** Other mounts' directories nested in this one, mount-relative: passed over as a walk passes over them. */
+    private readonly others: readonly string[] = [],
   ) {
     this.config = config;
     this.debounceMs = config.watchDebounceMs ?? 300;
@@ -101,10 +106,28 @@ export class MountWatcher {
       }
     }
 
-    const ignored = this.config.ignore ?? [];
+    const ignore = this.config.ignore ?? [];
 
     this.watcher = watch(this.config.path, {
-      ignored: ignored.length > 0 ? ignored : undefined,
+      // What a walk passes over by design, by the path relative to the mount:
+      // another mount's directory, the mount's ignore list and editors' swap
+      // and backup files. chokidar 4
+      // compares a string given here with the whole absolute path, so the
+      // list itself would match nothing.
+      ignored: (path: string) => {
+        const relative = this.toRelative(path);
+        return relative !== null && passedOverAt(relative, ignore, this.others) !== undefined;
+      },
+      // Its filter for editors' files tested the whole path, so a directory
+      // with a dot in its name hid every `*.swp` beneath it, and the walk
+      // didn't agree. An editor's save by rename then arrives as an unlink at
+      // once, and an add once `awaitWriteFinish` finds the new copy settled.
+      // A pass reads disk, not the ops, after the debounce's quiet spell
+      // following the last event: a copy on disk by then is taken in as a
+      // change, one still being written is read as it stands and taken in
+      // again when its add comes, and a re-add after a longer spell is a
+      // deletion and then a creation.
+      atomic: false,
       persistent: true,
       ignoreInitial: true,
       followSymlinks: this.config.followSymlinks ?? false,

package/src/prose-drafts.ts

@@ -0,0 +1,481 @@
+/**
+ * Held prose drafts: a resident's plain speech that was not sent.
+ *
+ * Plain speech is held back for reasons that are right in themselves: an
+ * explicit send in the same round suppresses the round's prose (so a "sent
+ * it" postscript is not posted twice), a turn may have no destination, and a
+ * malformed or unresolvable routing prefix bounces. Before drafts, the held words were
+ * kept only as a count (or, in explicit mode, as one in-memory latest-wins
+ * clipboard): the law was right, and the penalty was amnesia. A draft keeps
+ * the exact words until the resident resends or dismisses them, or the
+ * retention below lets it go.
+ *
+ * The boundary is publication and agency, not visibility: a draft is never
+ * published except by its resident's explicit resend (or `{{unsent}}`), and
+ * only that resident can list or act on it. Its notices go into the
+ * resident's own history — which residents that share one message slot
+ * (#197) share, as they already share the assistant turn the words came
+ * from.
+ *
+ * Durability is outside the conversation. Drafts live in a RecordJournal of
+ * typed Chronicle records, which do not follow branch switches: undo,
+ * rollback, suppression and branch moves never touch them. A draft written
+ * in a turn that is later undone stays usable (the words were genuinely
+ * written and held back), and a delivered draft stays delivered. The
+ * notices that name a draft are conversation, so they do follow the branch: a draft counts as
+ * named while a message naming it is on the current branch, and one a
+ * rollback or branch move has left unnamed is named again.
+ *
+ * Drafts are kept, not hoarded. Each resident's KEEP_NEWEST newest drafts
+ * are always kept; an older one, in any state, is let go at the journal's
+ * next checkpoint once nothing has happened to it (held, named, attempted,
+ * answered, dismissed) for KEEP_IDLE_MS. The journal checkpoints what it
+ * keeps every CHECKPOINT_EVERY entries, so opening it replays only what came
+ * after, and a resident whose drafts change rarely keeps its older ones
+ * until then. The words stay in the resident's history either way.
+ *
+ * A delivery attempt is journaled durably BEFORE its request leaves the
+ * host, and its outcome after: an attempt with no recorded outcome (a crash
+ * mid-send) reads as unknown, never as unsent. A delivered draft carries a
+ * historical receipt — confirmed at a time, to a destination, with the
+ * connector's message id when it names one — not a claim that the message
+ * still exists. A draft is sent only by its resident's explicit resend or
+ * an envelope's {{unsent}}; nothing replays at boot or on a branch move.
+ */
+
+import { randomInt } from 'node:crypto';
+import type { JsStore } from '@animalabs/chronicle';
+import { RecordJournal } from './record-journal.js';
+import type { PublishDestination, PublishOutcome } from './mcpl/channel-registry.js';
+
+/** Chronicle record type of the drafts journal. */
+export const PROSE_DRAFT_RECORD_TYPE = 'framework/prose-draft';
+
+/** Why words were held instead of sent. */
+export type DraftReason =
+  /** An explicit send in the same round suppressed the round's plain speech. */
+  | 'explicit-send'
+  /** The speech had no destination (no route this turn, or a failed envelope). */
+  | 'no-destination'
+  /** An explicit/hybrid routing prefix was missing, malformed or unresolvable. */
+  | 'bounced';
+
+export interface DraftAttemptOutcome {
+  status: PublishOutcome['status'];
+  at: number;
+  messageId?: string;
+  reason?: string;
+  detail?: unknown;
+}
+
+export interface DraftAttempt {
+  attemptId: string;
+  at: number;
+  destination: PublishDestination;
+  /** How the words went out: the drafts tool, or a `{{unsent}}` envelope (explicit or hybrid). */
+  via: 'resend' | 'unsent-token';
+  /** The resident resent knowing an earlier attempt may have been posted. */
+  confirmedDuplicate?: true;
+  /** Absent until recorded; an attempt without one reads as unknown. */
+  outcome?: DraftAttemptOutcome;
+}
+
+/**
+ * A draft held with words copied from another draft that may already have
+ * been posted (`{{unsent}}` re-bounced while that draft was unconfirmed or in
+ * flight). The new draft keeps the whole authored text and carries the same
+ * duplication risk: it reads `unconfirmed` until a confirmed delivery.
+ */
+export interface InheritedRisk {
+  /** The draft whose words were copied in. */
+  draftId: string;
+  /** The draft whose attempt is the uncertain one, when the copied draft
+   *  itself carried inherited risk (a chain of re-bounces): the evidence is
+   *  that original attempt's, never re-invented. */
+  sourceDraftId?: string;
+  /** That uncertain attempt, when there was one (absent: it was in flight). */
+  destination?: PublishDestination;
+  at?: number;
+  reason: string;
+}
+
+export interface Draft {
+  id: string;
+  agent: string;
+  /** The held words, byte for byte as a resend publishes them: a run an
+   *  explicit send suppressed exactly as written; a bounce or a hold with no
+   *  destination, its envelope as routing read it (surrounding whitespace
+   *  trimmed). */
+  text: string;
+  reason: DraftReason;
+  /** Words copied in from a draft that may already have been posted. */
+  inheritedRisk?: InheritedRisk;
+  /** Short context for the resident: the bounce reason, or the competing conversations. */
+  note?: string;
+  heldAt: number;
+  attempts: DraftAttempt[];
+  dismissedAt?: number;
+  /** The messages whose notices named this draft, by id. It counts as named
+   *  while one of them is on the current branch. */
+  noticedIn?: string[];
+  /** When a notice last named it. */
+  noticedAt?: number;
+}
+
+/**
+ * - `held`: no inherited risk, and never attempted or every attempt
+ *   definitely failed — resend freely;
+ * - `unconfirmed`: no attempt was confirmed and the draft is not dismissed;
+ *   either an attempt's outcome is unknown (or was never recorded), or the
+ *   words carry inherited risk regardless of their own attempts. A resend
+ *   needs explicit confirmation. A later attempt that fails does not resolve
+ *   an earlier one that may have landed — the uncertainty stays;
+ * - `delivered`: an attempt was confirmed — its receipt is historical;
+ * - `dismissed`: the resident set it aside.
+ */
+export type DraftState = 'held' | 'unconfirmed' | 'delivered' | 'dismissed';
+
+export function draftState(draft: Draft): DraftState {
+  if (draft.attempts.some((a) => a.outcome?.status === 'delivered')) return 'delivered';
+  if (draft.dismissedAt !== undefined) return 'dismissed';
+  return uncertainAttempt(draft) || draft.inheritedRisk ? 'unconfirmed' : 'held';
+}
+
+/** The most recent attempt that may have been posted (unknown or unrecorded
+ *  outcome), when no attempt was confirmed. */
+export function uncertainAttempt(draft: Draft): DraftAttempt | undefined {
+  if (draft.attempts.some((a) => a.outcome?.status === 'delivered')) return undefined;
+  for (let i = draft.attempts.length - 1; i >= 0; i--) {
+    const attempt = draft.attempts[i]!;
+    if (!attempt.outcome || attempt.outcome.status === 'unknown') return attempt;
+  }
+  return undefined;
+}
+
+type DraftEntry =
+  | { op: 'held'; draft: Omit<Draft, 'attempts' | 'dismissedAt' | 'noticedIn' | 'noticedAt'> }
+  | { op: 'attempt'; agent: string; id: string; attemptId: string; at: number; destination: PublishDestination; via: DraftAttempt['via']; confirmedDuplicate?: true }
+  | { op: 'outcome'; agent: string; id: string; attemptId: string; outcome: DraftAttemptOutcome }
+  | { op: 'dismissed'; agent: string; id: string; at: number }
+  /** A notice naming these drafts is in the history as message `messageId`.
+   *  (A record without one names nowhere the drafts can be found again, so
+   *  they are named once more.) */
+  | { op: 'noticed'; agent: string; ids: string[]; at: number; messageId?: string };
+
+/** What a checkpoint keeps: every kept draft, in hold order, and each
+ *  resident's latest bounce, which `{{unsent}}` means whatever became of it. */
+interface DraftSnapshot {
+  v: 1;
+  drafts: Draft[];
+  latestBounces: Record<string, string>;
+}
+
+/** Unambiguous lowercase alphabet for short ids (no i/l/o/0/1). */
+const ID_ALPHABET = 'abcdefghjkmnpqrstuvwxyz23456789';
+/**
+ * Characters after `d-` in a draft's id: 31^7, about 2.75 × 10^10 ids, so a
+ * mistyped id almost never names a real draft, and an id retention let go is
+ * given again only rarely (see newId).
+ */
+const ID_LENGTH = 7;
+
+/** Each resident's newest drafts, by hold order, that are always kept. */
+export const KEEP_NEWEST = 100;
+/** How long an older draft is kept after the last thing that happened to it. */
+export const KEEP_IDLE_MS = 7 * 24 * 60 * 60 * 1000;
+/** Entries the journal takes between checkpoints. */
+export const CHECKPOINT_EVERY = 500;
+
+/** The store's retention, KEEP_NEWEST, KEEP_IDLE_MS and CHECKPOINT_EVERY
+ *  unless given (tests give smaller ones). */
+export interface DraftRetention {
+  keepNewest: number;
+  keepIdleMs: number;
+  checkpointEvery: number;
+}
+
+/** The last time anything happened to a draft: held, named, attempted,
+ *  answered or dismissed. */
+function lastActivity(draft: Draft): number {
+  let last = Math.max(draft.heldAt, draft.noticedAt ?? 0, draft.dismissedAt ?? 0);
+  for (const attempt of draft.attempts) last = Math.max(last, attempt.at, attempt.outcome?.at ?? 0);
+  return last;
+}
+
+export class ProseDraftStore {
+  private readonly journal: RecordJournal<DraftEntry, DraftSnapshot>;
+  /** agent → draft id → draft, in journal (hold) order. */
+  private drafts = new Map<string, Map<string, Draft>>();
+  /** agent → the id of its latest bounce, kept or not. */
+  private latestBounces = new Map<string, string>();
+  private readonly retention: DraftRetention;
+
+  constructor(store: JsStore, retention: Partial<DraftRetention> = {}) {
+    this.journal = new RecordJournal<DraftEntry, DraftSnapshot>(store, { type: PROSE_DRAFT_RECORD_TYPE });
+    this.retention = {
+      keepNewest: retention.keepNewest ?? KEEP_NEWEST,
+      keepIdleMs: retention.keepIdleMs ?? KEEP_IDLE_MS,
+      checkpointEvery: retention.checkpointEvery ?? CHECKPOINT_EVERY,
+    };
+    this.reload();
+    this.checkpointIfDue();
+  }
+
+  /** Rebuild the projection from the journal (at open, and to reconcile):
+   *  the latest checkpoint's drafts, then the entries after it. */
+  reload(): void {
+    const { snapshot, entries } = this.journal.load();
+    this.drafts = new Map();
+    this.latestBounces = new Map(Object.entries(snapshot?.latestBounces ?? {}));
+    for (const draft of snapshot?.drafts ?? []) this.agentDrafts(draft.agent).set(draft.id, draft);
+    for (const { entry } of entries) this.reduce(entry);
+  }
+
+  /**
+   * Write a checkpoint once CHECKPOINT_EVERY entries have been appended since
+   * the last one, letting go of the drafts that aren't kept (see the module
+   * header). The projection drops them only once the checkpoint is written,
+   * so a failed one changes nothing, and the next write tries again.
+   */
+  private checkpointIfDue(): void {
+    const { keepNewest, keepIdleMs, checkpointEvery } = this.retention;
+    if (this.journal.entriesSinceCheckpoint < checkpointEvery) return;
+    const now = Date.now();
+    const kept = new Map<string, Map<string, Draft>>();
+    for (const [agent, drafts] of this.drafts) {
+      const all = [...drafts.values()];
+      const keep = new Map<string, Draft>();
+      all.forEach((draft, i) => {
+        if (i >= all.length - keepNewest || now - lastActivity(draft) < keepIdleMs) keep.set(draft.id, draft);
+      });
+      if (keep.size > 0) kept.set(agent, keep);
+    }
+    const snapshot: DraftSnapshot = {
+      v: 1,
+      drafts: [...kept.values()].flatMap((m) => [...m.values()]),
+      latestBounces: Object.fromEntries(this.latestBounces),
+    };
+    try {
+      this.journal.checkpoint(snapshot);
+    } catch (err) {
+      console.error('[drafts] checkpoint failed; the next write tries again:', err);
+      if (this.journal.needsReconcile) this.reload();
+      return;
+    }
+    this.drafts = kept;
+  }
+
+  private reduce(entry: DraftEntry): void {
+    if (entry.op === 'held') {
+      this.agentDrafts(entry.draft.agent).set(entry.draft.id, { ...entry.draft, attempts: [] });
+      if (entry.draft.reason === 'bounced') this.latestBounces.set(entry.draft.agent, entry.draft.id);
+      return;
+    }
+    if (entry.op === 'noticed') {
+      if (entry.messageId === undefined) return;
+      for (const id of entry.ids) {
+        const draft = this.drafts.get(entry.agent)?.get(id);
+        if (!draft) continue;
+        draft.noticedIn ??= [];
+        if (!draft.noticedIn.includes(entry.messageId)) draft.noticedIn.push(entry.messageId);
+        draft.noticedAt = Math.max(draft.noticedAt ?? 0, entry.at);
+      }
+      return;
+    }
+    const draft = this.drafts.get(entry.agent)?.get(entry.id);
+    if (!draft) return;
+    if (entry.op === 'dismissed') {
+      draft.dismissedAt ??= entry.at;
+    } else if (entry.op === 'attempt') {
+      draft.attempts.push({
+        attemptId: entry.attemptId,
+        at: entry.at,
+        destination: entry.destination,
+        via: entry.via,
+        ...(entry.confirmedDuplicate ? { confirmedDuplicate: true as const } : {}),
+      });
+    } else if (entry.op === 'outcome') {
+      const attempt = draft.attempts.find((a) => a.attemptId === entry.attemptId);
+      if (attempt) attempt.outcome = entry.outcome;
+    }
+  }
+
+  /**
+   * Journal and apply one entry. A write that fails after the store's append
+   * returned leaves the journal unreconciled: rebuild from it before
+   * rethrowing, so the projection never disagrees with what the journal
+   * holds. An append that fails inside the store can't be read back until
+   * the store is reopened: the journal then refuses every write until the
+   * next start, which replays that entry, so until then each write throws,
+   * no new draft is kept, and the projection lacks that entry.
+   */
+  private write(entry: DraftEntry, durable: boolean, afterCommittedState = false): void {
+    try {
+      this.journal.append(entry, { durable, afterCommittedState });
+    } catch (err) {
+      if (this.journal.needsReconcile) this.reload();
+      throw err;
+    }
+    this.reduce(entry);
+    this.checkpointIfDue();
+  }
+
+  private agentDrafts(agent: string): Map<string, Draft> {
+    let map = this.drafts.get(agent);
+    if (!map) {
+      map = new Map();
+      this.drafts.set(agent, map);
+    }
+    return map;
+  }
+
+  /** A new id, unique among the resident's kept drafts and never its latest
+   *  bounce's. One that retention let go can be given again: after N more
+   *  of its resident's drafts, a given let-go id has come back with a
+   *  probability of about N in 2.75 × 10^10 (ID_LENGTH), and a request naming
+   *  it then reaches the newer draft rather than being refused. */
+  private newId(agent: string): string {
+    const existing = this.agentDrafts(agent);
+    const latestBounce = this.latestBounces.get(agent);
+    for (;;) {
+      let id = 'd-';
+      for (let i = 0; i < ID_LENGTH; i++) id += ID_ALPHABET[randomInt(ID_ALPHABET.length)];
+      if (!existing.has(id) && id !== latestBounce) return id;
+    }
+  }
+
+  /**
+   * Hold words as drafts, in order, each journaled durably before this
+   * returns. If the journal refuses a write (after reconciling), the drafts
+   * already written stand and the rest are reported as not held: their words
+   * remain in the resident's history only. A draft whose record reached the
+   * store before its write failed (its sync did) is in the reconciled
+   * journal, so it is held, and counted so. When the store's append itself
+   * threw, the record may still be in its log: the draft is reported as not
+   * held, and the journal refuses further writes until a reload, which
+   * replays it as held if it is there.
+   */
+  hold(
+    agent: string,
+    segments: Array<{ text: string; note?: string; inheritedRisk?: InheritedRisk }>,
+    reason: DraftReason,
+    note?: string,
+  ): { held: Draft[]; notHeld?: { count: number; error: string } } {
+    const held: Draft[] = [];
+    for (let i = 0; i < segments.length; i++) {
+      const segment = segments[i]!;
+      const segmentNote = segment.note ?? note;
+      const draft = {
+        id: this.newId(agent),
+        agent,
+        text: segment.text,
+        reason,
+        ...(segmentNote ? { note: segmentNote } : {}),
+        ...(segment.inheritedRisk ? { inheritedRisk: segment.inheritedRisk } : {}),
+        heldAt: Date.now(),
+      };
+      try {
+        this.write({ op: 'held', draft }, true);
+      } catch (err) {
+        const error = err instanceof Error ? err.message : String(err);
+        const landed = this.get(agent, draft.id);
+        if (landed) {
+          console.error(`[drafts] ${agent}: ${landed.id} reached the journal, but its write then failed (${error}); it is held`);
+          held.push(landed);
+        }
+        const count = segments.length - i - (landed ? 1 : 0);
+        return { held, ...(count > 0 ? { notHeld: { count, error } } : {}) };
+      }
+      held.push(this.get(agent, draft.id)!);
+    }
+    return { held };
+  }
+
+  get(agent: string, id: string): Draft | undefined {
+    return this.drafts.get(agent)?.get(id);
+  }
+
+  /** Held and unconfirmed drafts, newest first (journal order, which is
+   *  exact even for segments held in the same millisecond). */
+  open(agent: string): Draft[] {
+    return [...(this.drafts.get(agent)?.values() ?? [])]
+      .filter((d) => { const s = draftState(d); return s === 'held' || s === 'unconfirmed'; })
+      .reverse();
+  }
+
+  /**
+   * Open drafts, newest first, that no notice on the current branch names:
+   * none was recorded (a crash before the notice), or a rollback or branch
+   * move took away every message that named them. `onBranch` says whether a
+   * message, by id, is on the current branch.
+   */
+  unnoticed(agent: string, onBranch: (messageId: string) => boolean): Draft[] {
+    return this.open(agent).filter((d) => !d.noticedIn?.some(onBranch));
+  }
+
+  /**
+   * Record that message `messageId`, a notice naming these drafts, is in the
+   * resident's history. The notice is conversation state, buffered until the
+   * store syncs, while this record reaches the OS at once: so the store is
+   * synced FIRST (afterCommittedState), and a notice that never became
+   * durable can't leave a record that suppresses the crash catch-up.
+   */
+  markNoticed(agent: string, ids: string[], messageId: string): void {
+    if (ids.length === 0) return;
+    this.write({ op: 'noticed', agent, ids, at: Date.now(), messageId }, true, true);
+  }
+
+  dismiss(agent: string, id: string): void {
+    this.write({ op: 'dismissed', agent, id, at: Date.now() }, true);
+  }
+
+  /**
+   * Journal a delivery attempt durably, BEFORE the request leaves the host.
+   * Throws (having reconciled) when it cannot be made durable: the caller
+   * must then not send.
+   */
+  beginAttempt(
+    agent: string,
+    id: string,
+    destination: PublishDestination,
+    via: DraftAttempt['via'],
+    confirmedDuplicate: boolean,
+  ): string {
+    const attemptId = `a-${Date.now().toString(36)}-${randomInt(36 ** 4).toString(36)}`;
+    this.write({
+      op: 'attempt', agent, id, attemptId, at: Date.now(), destination, via,
+      ...(confirmedDuplicate ? { confirmedDuplicate: true as const } : {}),
+    }, true);
+    return attemptId;
+  }
+
+  /** Journal what an attempt established. */
+  recordOutcome(agent: string, id: string, attemptId: string, outcome: PublishOutcome): void {
+    this.write({
+      op: 'outcome', agent, id, attemptId,
+      outcome: {
+        status: outcome.status,
+        at: outcome.at,
+        ...(outcome.messageId ? { messageId: outcome.messageId } : {}),
+        ...(outcome.reason ? { reason: outcome.reason } : {}),
+        ...(outcome.detail !== undefined ? { detail: outcome.detail } : {}),
+      },
+    }, true);
+  }
+
+  /**
+   * Explicit and hybrid mode's `{{unsent}}`: the most recent bounce, while
+   * that draft is still open (held or unconfirmed — the caller must not
+   * resend an unconfirmed one without the resident's confirmation).
+   * Latest-wins, like the clipboard it replaces: once the latest bounce is
+   * delivered, dismissed or let go there is nothing to substitute, even if
+   * older bounces are still held (they stay in the collection, by id).
+   */
+  latestBounce(agent: string): Draft | undefined {
+    const id = this.latestBounces.get(agent);
+    const latest = id === undefined ? undefined : this.get(agent, id);
+    if (!latest) return undefined;
+    const state = draftState(latest);
+    return state === 'held' || state === 'unconfirmed' ? latest : undefined;
+  }
+}

package/src/prose-segments.ts

@@ -10,26 +10,40 @@
  * collapsing those distinct messages into one (item 4). This helper instead
  * yields each contiguous run of text — the segments a surface should deliver as
  * separate, ordered messages. Contiguous text blocks merge into one segment;
- * `tool_use` / `tool_result` blocks are segment boundaries; empty or
+ * `tool_use` / `tool_result` blocks are segment boundaries, as are XML tool
+ * mode's `tool_attempt` / `tool_notice` (a refused attempt and the harness's
+ * notice end a round just as a call and its results do); empty or
  * whitespace-only runs are dropped.
  */
 
 import type { ContentBlock } from '@animalabs/membrane';
 
-export function splitProseSegments(content: readonly ContentBlock[]): string[] {
-  const segments: string[] = [];
+/**
+ * The runs exactly as written: contiguous text blocks joined with a newline,
+ * nothing trimmed. Whitespace-only runs are dropped. Held drafts keep these,
+ * so a draft's words (indentation included) are the resident's own, byte for
+ * byte; speech routes each run trimmed of surrounding whitespace.
+ */
+export function splitProseRuns(content: readonly ContentBlock[]): string[] {
+  const runs: string[] = [];
   let buf: string[] = [];
 
   const flush = (): void => {
-    const s = buf.join('\n').trim();
-    if (s) segments.push(s);
+    const run = buf.join('\n');
+    if (run.trim()) runs.push(run);
     buf = [];
   };
 
   for (const block of content) {
-    if (block.type === 'text') {
+    const type = block.type as string;
+    if (type === 'text') {
       buf.push((block as ContentBlock & { type: 'text' }).text);
-    } else if (block.type === 'tool_use' || block.type === 'tool_result') {
+    } else if (
+      type === 'tool_use' ||
+      type === 'tool_result' ||
+      type === 'tool_attempt' ||
+      type === 'tool_notice'
+    ) {
       flush();
     }
     // Other block types (thinking, redacted_thinking, image, …) are neither
@@ -38,5 +52,34 @@ export function splitProseSegments(content: readonly ContentBlock[]): string[] {
   }
   flush();
 
-  return segments;
+  return runs;
+}
+
+/**
+ * A turn's content without the prose of some of its tool rounds, the turn's
+ * rounds counted from 0 in order. A round's prose is its text
+ * before its calls, and a round starts at the first block after the previous
+ * round's `tool_result` blocks. So a round with no prose still counts, two
+ * calls of one round (their `tool_use` blocks come before any result) stay
+ * one round, and a round is found by its place, whatever its text holds.
+ * Other rounds' text, every non-text block and the text after the last round
+ * stay.
+ */
+export function withoutRoundsProse(
+  content: readonly ContentBlock[],
+  rounds: ReadonlySet<number>,
+): ContentBlock[] {
+  let round = 0;
+  let afterResults = false;
+  return content.filter((block) => {
+    if (block.type === 'tool_result') {
+      afterResults = true;
+      return true;
+    }
+    if (afterResults) {
+      round++;
+      afterResults = false;
+    }
+    return !(block.type === 'text' && rounds.has(round));
+  });
 }