@animalabs/agent-framework 0.32.0 → 0.34.0

package/dist/src/tune-out/coordinator.js

@@ -18,8 +18,13 @@ import { NOTICE_TAG } from '../notice-tags.js';
 import { cutToFit, quotedValue, suppliedValue } from '../supplied-text.js';
 import { randomUUID } from 'node:crypto';
 import { authorLine, authorNamed, beginsWithAuthorLine } from '../author-presentation.js';
+import { qualifiedChannelName } from '../mcpl/channel-registry.js';
 import { CapabilityGrant } from '../mcpl/capability-grant.js';
 import { armAfter, armAt } from '../deadline-timer.js';
+/** A hold asked for with no reader to watch it: there is none (a reader ended, or none was configured). */
+const NO_READER_REFUSAL = "Nothing was tuned out: no reader is running here to read a held channel, and this host doesn't "
+    + "hold one without a reader, so tune_out isn't available here, and calling it again won't change that. If "
+    + 'you need channels diverted, ask whoever runs this host.';
 /** Defaults for tune_out tool params. */
 export const TUNE_OUT_DEFAULTS = {
     cadenceSeconds: 1800,
@@ -44,7 +49,91 @@ export function renderHeldLine(m) {
     const firstText = m.content.find((b) => b.type === 'text')?.text;
     return firstText !== undefined && beginsWithAuthorLine(author, firstText) ? line : authorLine(author, line);
 }
-/** The deferred write a stored row landed from, when it came through the queue. */
+/**
+ * The answer to a cancel that waits for held writes (deferCancel): what it
+ * waits for, and what a stop meanwhile does. `noteDropped`: the caller's
+ * note isn't delivered, as the cancel already waiting carries one.
+ * `noteKept`: the caller's note waits with the cancel, and the answer says
+ * where it goes and what the caller is told of it. It is delivered when a
+ * cancel ends the hold, or tries to, else told lost to its author
+ * (tellNoteLost), a notice that can't be written being traced and
+ * tried again (writeLossNotices) until it is written, and, for the
+ * persistent subconscious (`persistent`), kept in the store too
+ * (writeLossRecord), so the next boot writes one a stop left unwritten
+ * (restoreLossNotices). Where another cancel ends the hold and the note
+ * can't be delivered then, the loss is told in that cancel's release
+ * (queuedNoteFirst), which the subconscious's window holds. A note written
+ * while writes are held again is kept in memory with them, the hold in
+ * force; where storing it when they are stored fails, the framework says
+ * so (heldWriteLost), and the note is told lost by a notice, as above, once
+ * the hold ends, or as one that may be lost where the store can't tell
+ * whether it landed, as is the stop's notice, or a hold's that ends
+ * without the cancel, before then (`noteUnknown`); it isn't written
+ * again. Stored then, it counts as delivered (heldWriteStored), even while
+ * the cancel still waits. The waiting
+ * cancel, and the note with it, is kept in memory only: a stop before the
+ * hold ends loses both, unless the stop's own wait for an operator's
+ * operation lets the hold end, which runs the cancel first (the
+ * framework's stop calls stop() only after that wait; stopTimers before
+ * it), or the note went out already (the cancel's run delivered it and
+ * failed before the end: the stop drops the cancel alone, dropQueued; AF
+ * #844 review 5, #26), and the subconscious is told of the note's loss
+ * as of any other, by a notice kept in the store for the next boot (stop),
+ * or, where the store refuses that or the host crashes, by the next boot's
+ * notice that any cancel then waiting was lost (noteUnstampedStop).
+ * The cancel can't wait for the delivery, which comes only when a cancel
+ * ends the hold, or tries to.
+ * A reader fork's (`fork`) goes out as its mail even after its run has
+ * ended (deliverReaderNote), but a notice of its loss reaches it only while
+ * it runs: an ended fork is no agent the framework writes to, and the loss
+ * is then traced only (writeLossNotice); a stop drops a fork's notice not
+ * yet written, and a fork's note not delivered yet is lost with the cancel.
+ */
+export function cancelWaitsNote(what, noteDropped = false, noteKept, unmarked = false) {
+    const hold = what.charAt(0).toLowerCase() + what.slice(1);
+    return 'Not cancelled yet: an operator\'s change to the store is in progress, or a context the cancel writes to '
+        + 'refuses writes until the host re-initializes it. The host runs the cancel when that ends and retries it if it '
+        + 'fails; cancelling again won\'t make it sooner while that lasts. '
+        + `${what} stays in force; when it ends, what it still holds is delivered, up to its backlog cap and what `
+        + 'fits in one message. '
+        + 'If the host stops first, the cancel is lost, and the restart doesn\'t run it.'
+        + (noteDropped ? ' Your note isn\'t delivered with it: the cancel already waiting carries a note of its own.' : '')
+        + (noteKept === 'persistent' && !noteDropped
+            ? ` Unless the host stops first, your note goes to the resident when a cancel ends ${hold}, or tries to. `
+                + 'If it can\'t be delivered, or the host stops first, you are told what is known of it once the host can write '
+                + 'to you, or when it starts again with you as its reader.'
+                + (unmarked
+                    ? ' This run\'s start isn\'t recorded in the store yet: if the host stops or dies before the cancel runs '
+                        + 'while the store still refuses it, you may not be told.'
+                    : '')
+            : '')
+        + (noteKept === 'fork' && !noteDropped
+            ? ` Your note goes to the resident as your mail when a cancel ends ${hold}, or tries to, even if your run has `
+                + 'ended by then. If it can\'t be delivered, you are told so while your run lasts; after that, no one is. If the '
+                + 'host stops before '
+                + `${hold} ends, your note is lost with the cancel, unless it went out already, and you are not told.`
+            : '');
+}
+/**
+ * The reason a reader's cancel_tuneout gives its cancel, which the resident
+ * reads in the cancel's lifecycle line ("[Tune-out: #x cancelled — by Muse,
+ * 2 wakes]"), the reader in its cancel notice, and a host in the trace: who
+ * cancelled, by the name it runs under (the persistent reader's, or a reader
+ * fork's own), marked as a value the host supplied, or "the reader" where the
+ * call names none. It says who, never why. The line an all-except hold's
+ * release posts in the excepted channel says "by its reader" instead
+ * (cancelAllExcept): an agent's name there would show the channel an
+ * internal identity.
+ */
+function cancelledBy(caller) {
+    return caller ? `by ${suppliedValue(caller)}` : 'by the reader';
+}
+/**
+ * The write a stored row landed from, when an earlier version's deferred
+ * queue held it: the boot's import stores it with the queued write's id
+ * (`metadata.deferredWriteId`), which a release record that version wrote
+ * names it by.
+ */
 function writeIdOf(m) {
     const writeId = m.metadata?.deferredWriteId;
     return typeof writeId === 'string' ? writeId : undefined;
@@ -52,7 +141,7 @@ function writeIdOf(m) {
 function keysOf(rows) {
     const keys = { ids: [], writeIds: [] };
     for (const m of rows) {
-        const writeId = m.writeId ?? writeIdOf(m);
+        const writeId = writeIdOf(m);
         if (writeId !== undefined)
             keys.writeIds.push(writeId);
         else if (m.id !== undefined)
@@ -64,7 +153,7 @@ function keyedBy(keys) {
     const ids = new Set(keys.flatMap((k) => k.ids));
     const writeIds = new Set(keys.flatMap((k) => k.writeIds));
     return (m) => {
-        const writeId = m.writeId ?? writeIdOf(m);
+        const writeId = writeIdOf(m);
         return writeId !== undefined ? writeIds.has(writeId) : m.id !== undefined && ids.has(m.id);
     };
 }
@@ -88,6 +177,32 @@ function releaseRecordsOf(rows, epochId) {
     }
     return records;
 }
+/**
+ * Whether the resident's last word on this hold is the boot's row that it
+ * still stands (`tune-out-end-unrecorded`, tellResidentUnended): one of
+ * that epoch after its latest release. A cancel that then delivers nothing
+ * more writes a release all the same, saying the end is recorded now
+ * (AF #844, Oscar).
+ */
+function toldStillStands(rows, epochId) {
+    // In store order.
+    let release = -1;
+    let told = -1;
+    rows.forEach((m, at) => {
+        const meta = m.metadata;
+        if (meta?.epochId !== epochId)
+            return;
+        if (meta.kind === 'tune-out-cancel')
+            release = at;
+        else if (meta.kind === 'tune-out-end-unrecorded')
+            told = at;
+    });
+    return told > release;
+}
+/** What that release adds (toldStillStands), agreeing with the boot's row: the earlier release, nothing held since, the end recorded now. */
+function endedNow(it) {
+    return `Its earlier release reached you before its end was recorded, and nothing has been held since; this release records the end, so the ${it} has ended.`;
+}
 function truncationNote(records) {
     const truncated = records.reduce((n, r) => n + r.truncated, 0);
     if (truncated === 0)
@@ -109,8 +224,198 @@ function inChannelOf(serverId, channelId) {
         return (meta?.channelId ?? channelId) === channelId && (meta?.serverId ?? serverId) === serverId;
     };
 }
-/** How long after an end time's or a wake budget's cancel threw the cancel is tried again. */
+/** The most characters of a note's first line a boot's notice of an unrecorded stop quotes (askedCancelOf). */
+const NOTE_QUOTE_CHARS = 120;
+/** How long after an end time's or a wake budget's cancel threw, or a deferred cancel's run, the cancel is tried again. */
 const EXPIRY_RETRY_MS = 60_000;
+/** How many times releaseAll tries a release that keeps failing, backing off from EXPIRY_RETRY_MS. */
+const RELEASE_RETRY_ATTEMPTS = 5;
+/**
+ * A drop of a queued cancel whose note may be stored after all
+ * (lostAtRelease with `mayBeStored`), carrying that (`noteUnknown`) where
+ * it is a `hold-ended` or `stopped` drop, which would otherwise tell the
+ * note as known lost; any other drop as it is.
+ */
+function withUnknownNote(drop, lost) {
+    if (!lost?.mayBeStored)
+        return drop;
+    if (drop.reason === 'hold-ended' || drop.reason === 'stopped')
+        return { ...drop, noteUnknown: lost.error };
+    return drop;
+}
+/**
+ * Whether a queued cancel's note went out already: settled, neither by a
+ * release that told its loss (lostInRelease) nor by a write kept in memory
+ * (heldInMemory). A cancel settled by a loss told is off the queue by then
+ * (dropDeferred's callers), so on the queue settled means delivered. Such a
+ * cancel, waiting on after its run (its end not recorded), carries nothing
+ * more to deliver: a later cancel that joins it gives it its note, which
+ * goes out when the hold ends, rather than being dropped beside one
+ * delivered (deferCancel, requeue; AF #844 review 5, #22).
+ */
+function noteDelivered(entry) {
+    return entry.note !== undefined && entry.noteSettled === true && !entry.lostInRelease && !entry.heldInMemory;
+}
+/** A later cancel's note (`note`, `noteAuthor`) given to a waiting cancel whose own went out already (noteDelivered), unsettled. */
+function takeLaterNote(entry, note, noteAuthor) {
+    entry.note = note;
+    delete entry.noteSettled;
+    if (noteAuthor !== undefined)
+        entry.noteAuthor = noteAuthor;
+    else
+        delete entry.noteAuthor;
+}
+/** How definite each finding is (noteUnstampedStop): a later boot tells a hold again only what says more. */
+const FOUND_RANK = { unknown: 0, asked: 1, delivered: 2, ran: 2 };
+/** What a loss notice tells its author, as the log lines name it. */
+function lossSubject(notice) {
+    if (notice.drop.reason !== 'unstamped-stop') {
+        const drop = notice.drop;
+        const unknown = drop.reason === 'note-undelivered' ? drop.mayBeStored === true
+            : (drop.reason === 'stopped' || drop.reason === 'hold-ended') && drop.noteUnknown !== undefined;
+        return `that the note it left with the cancel of ${notice.what} ${unknown ? 'may not have been' : 'was not'} delivered`;
+    }
+    return `that the host stopped without recording the state of ${notice.what}`
+        + (notice.drop.found === 'delivered' ? ', after the note it left with a cancel of it was delivered'
+            : notice.drop.found === 'ran' ? ', after a cancel of it ran, its end not recorded'
+                : notice.drop.found === 'asked' ? ', so that the cancel of it it asked for was lost' : ', so that a cancel of it then waiting was lost');
+}
+/** A kept notice in the record's form, or undefined for an entry this version can't read. */
+function readPersistedLossNotice(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        return undefined;
+    const entry = value;
+    const at = entry.for;
+    const drop = entry.drop;
+    if (typeof entry.id !== 'string' || typeof entry.author !== 'string' || entry.author === ''
+        || typeof entry.what !== 'string' || typeof entry.keptAtMs !== 'number')
+        return undefined;
+    if (!at || typeof at !== 'object' || typeof at.epochId !== 'string' || typeof at.serverId !== 'string'
+        || typeof at.channelId !== 'string' || (at.scope !== undefined && at.scope !== 'all-except'))
+        return undefined;
+    let why;
+    const noteUnknown = typeof drop?.noteUnknown === 'string' ? { noteUnknown: drop.noteUnknown } : {};
+    if (drop?.reason === 'hold-ended' && (drop.current === undefined || typeof drop.current === 'string')) {
+        why = { reason: 'hold-ended', ...(typeof drop.current === 'string' ? { current: drop.current } : {}), ...noteUnknown };
+    }
+    else if (drop?.reason === 'note-undelivered' && (drop.by === 'another' || drop.by === 'itself') && typeof drop.error === 'string') {
+        why = { reason: 'note-undelivered', by: drop.by, error: drop.error, ...(drop.mayBeStored === true ? { mayBeStored: true } : {}) };
+    }
+    else if (drop?.reason === 'stopped') {
+        why = { reason: 'stopped', ...noteUnknown };
+    }
+    else if (drop?.reason === 'superseded') {
+        why = { reason: 'superseded' };
+    }
+    else if (drop?.reason === 'unstamped-stop') {
+        const found = drop.found === 'delivered' || drop.found === 'ran' || drop.found === 'asked' ? drop.found : 'unknown';
+        why = {
+            reason: 'unstamped-stop', found,
+            ...(drop.asked === true ? { asked: true } : {}),
+            ...(typeof drop.note === 'string' ? { note: drop.note } : {}),
+            ...(drop.noteDelivered === true ? { noteDelivered: true } : {}),
+            ...(drop.own === true ? { own: true } : {}),
+            ...(typeof drop.ranBy === 'string' ? { ranBy: drop.ranBy } : {}),
+            ...(drop.rowsUnread === true ? { rowsUnread: true } : {}),
+            ...(drop.noteKept === true ? { noteKept: true } : {}),
+            ...(Array.isArray(drop.joined) && drop.joined.every((j) => typeof j === 'string') ? { joined: drop.joined } : {}),
+        };
+    }
+    else {
+        return undefined;
+    }
+    return {
+        id: entry.id, author: entry.author, what: entry.what,
+        for: { epochId: at.epochId, serverId: at.serverId, channelId: at.channelId, ...(at.scope === 'all-except' ? { scope: 'all-except' } : {}) },
+        drop: why, keptAtMs: entry.keptAtMs,
+        ...(typeof entry.keptAtSequence === 'number' ? { keptAtSequence: entry.keptAtSequence } : {}),
+        ...(entry.traced === true ? { traced: true } : {}),
+        ...(stopBoundOf(entry.stopBound) ? { stopBound: stopBoundOf(entry.stopBound) } : {}),
+    };
+}
+/** A kept bound (LossNotice's `stopBound`, a row's `lostAtStop`) in its form, or undefined. */
+function stopBoundOf(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        return undefined;
+    const bound = value;
+    if ((bound.runStartedAt !== undefined && typeof bound.runStartedAt !== 'number') || (bound.branch !== undefined && typeof bound.branch !== 'string'))
+        return undefined;
+    return {
+        ...(typeof bound.runStartedAt === 'number' ? { runStartedAt: bound.runStartedAt } : {}),
+        ...(typeof bound.branch === 'string' ? { branch: bound.branch } : {}),
+    };
+}
+/**
+ * The rows of a window (`window`, the persistent subconscious's, `author`)
+ * that `keep` keeps and that come after its last row of its own: shown to
+ * it, and no turn of its since. A note of its that a cancel delivered is a
+ * row under its name but no turn of it (`subconscious-note`), so isn't its
+ * own here. A row stored in shards is one row: its first shard.
+ */
+export function unansweredIn(window, author, keep) {
+    let after = 0;
+    window.forEach((m, at) => {
+        if (m.participant === author && m.metadata?.kind !== 'subconscious-note')
+            after = at + 1;
+    });
+    return window.slice(after).filter((m) => (m.shardIndex ?? 0) === 0 && keep(m));
+}
+/** A tool result's content as an answer's JSON object, or undefined where it isn't one (a guard's placeholder, say). */
+function answerIn(content) {
+    const raw = typeof content === 'string' ? content
+        : Array.isArray(content) ? content.map((c) => (c.type === 'text' ? String(c.text ?? '') : '')).join('')
+            : '';
+    try {
+        const answer = JSON.parse(raw);
+        return answer && typeof answer === 'object' && !Array.isArray(answer) ? answer : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * The `cancel_tuneout` calls a window (`window`, the persistent
+ * subconscious's, `author`) holds, its own rows', each with what its
+ * result, where the window holds it, answered: waiting or not, and the
+ * server and scope it names. A result row that isn't an answer's JSON (the
+ * tool-result guard's placeholder, its batch not settled) is read from
+ * `archived`, the original results by tool use id (the guard's audit,
+ * subconsciousGuardedResults), where it holds one. A result that isn't
+ * there, or isn't an answer, isn't waiting.
+ */
+export function cancelAsksIn(window, author, archived) {
+    const results = new Map();
+    for (const m of window) {
+        for (const b of m.content) {
+            if (b.type !== 'tool_result')
+                continue;
+            const id = typeof b.toolUseId === 'string' ? b.toolUseId : b.tool_use_id;
+            if (typeof id !== 'string')
+                continue;
+            const answer = answerIn(b.content) ?? (archived?.has(id) ? answerIn(archived.get(id)) : undefined);
+            if (answer)
+                results.set(id, answer);
+        }
+    }
+    const asks = [];
+    for (const m of window) {
+        if (m.participant !== author)
+            continue;
+        for (const b of m.content) {
+            if (b.type !== 'tool_use' || b.name !== 'cancel_tuneout' || typeof b.id !== 'string')
+                continue;
+            const answer = results.get(b.id);
+            asks.push({
+                sequence: m.sequence,
+                input: b.input && typeof b.input === 'object' ? b.input : {},
+                waiting: answer?.waiting === true,
+                ...(typeof answer?.serverId === 'string' ? { serverId: answer.serverId } : {}),
+                ...(typeof answer?.scope === 'string' ? { scope: answer.scope } : {}),
+            });
+        }
+    }
+    return asks;
+}
 /** Ends a backlog line cut to fit in one of the residents' messages. */
 const CUT_MARK = ` [${NOTICE_TAG.cutToFit}; the whole message is in the channel's history]`;
 /**
@@ -129,7 +434,8 @@ export function alreadyTunedOutText(quoted, p, transport) {
     return `Nothing changed${transport !== undefined ? ' in the tune-out' : ''}: ${quoted} is already `
         + `tuned out, with cadenceSeconds ${p.cadenceSeconds}, backlogCap ${p.backlogCap} and maxWakes ${p.maxWakes}${until}. `
         + now
-        + 'To change those, cancel it first with tune_out mode "cancel", which delivers its backlog to you now, then call '
+        + 'To change those, cancel it first with tune_out mode "cancel", which delivers its backlog to you when it ends (its '
+        + 'answer says if it waits), then call '
         + 'tune_out again with the new settings.';
 }
 /** What a thrown value says, without throwing: an Error's message, or the
@@ -153,6 +459,20 @@ export class TuneOutCoordinator {
      *  the end time does when its cancel finds the tune-out already ended,
      *  and the channel's next accepted enter does in any case. */
     expiryTimers = new Map();
+    /** A releaseAll asked to retry its failures (a reader that ended): the next try. */
+    releaseRetry = null;
+    /** stop() has run: no timer is armed after it. */
+    stopped = false;
+    /**
+     * stop() has kept what it found (keepAtStop): a loss told after it (a
+     * trace listener's stop, during a cancel's run or a notice's write) is
+     * kept as it kept those (keepAfterStop).
+     */
+    stopDone = false;
+    /** The holds the stop's stamp left out (writeStopStamp), which a stamp written again after it leaves out too. */
+    stopUnaccounted = new Set();
+    /** The holds the stop left out of its stamp because a waiting cancel's note was still kept in memory (StopStamp's `notesKept`). */
+    stopNotesKept = new Set();
     /** Channels with a wake invocation pending inside the coalescing window. */
     pendingWakes = new Map();
     /**
@@ -183,19 +503,11 @@ export class TuneOutCoordinator {
      * held, which is the right side to err on.
      */
     readerCursor = new Map();
-    /**
-     * `reader: 'forks'`: the deferred writes handed to a reader fork while
-     * still queued, per epoch and channel. Each lands in the store later as a row
-     * stamped with the same id (`metadata.deferredWriteId`), past the cursor;
-     * that row is not handed again. Cleared with the cursor.
-     */
-    readerHandedWrites = new Map();
     /**
      * `reader: 'forks'`: held messages a reader fork was handed but never read,
-     * per epoch and channel: its derive failed, or its run threw before it reported
-     * (readerFailed). The next invocation is handed them again, cursor or no:
-     * stored rows by id, and by write id those that were queued when handed
-     * (stored or still queued now). Cleared with the cursor.
+     * per epoch and channel, by id: its derive failed, or its run threw before
+     * it reported (readerFailed). The next invocation is handed them again,
+     * cursor or no. Cleared with the cursor.
      */
     readerReturned = new Map();
     /**
@@ -205,15 +517,126 @@ export class TuneOutCoordinator {
     lateForks = new WeakSet();
     /** The all-except scope's durable record, cached (undefined = not read yet). */
     scopeCache;
-    /** Timer key for the scope's cadence and expiry. */
-    static SCOPE_KEY = '\0all-except';
+    /**
+     * Cancels asked for while the framework keeps writes in memory
+     * (writesHeld), by channel key, the all-except hold's under SCOPE_KEY:
+     * each runs as it was asked, with its note, or a later cancel's when it
+     * had none (deferCancel), once the writes are stored again, or told of
+     * where storing one fails (runDeferredCancels). Each is for the epoch it
+     * was asked for (`for`), and ends that one only: one whose epoch no longer
+     * holds is dropped, told (dropDeferred), never run against a later one.
+     * In memory: a restart before then finds the tune-out still in force,
+     * and an end time that passed cancels it at once (resumeActiveEpochs); a
+     * note one carries is told lost at the stop, its notice kept in the store
+     * for the persistent subconscious (stop).
+     */
+    deferredCancels = new Map();
+    /**
+     * The notices to a lost queued note's author that weren't written yet
+     * (tellNoteLost), by author, in the order the losses came: each is tried
+     * again, by runDeferredCancels, at the next release and at the retry,
+     * until it is written. Those for the persistent subconscious are kept in
+     * the store too (writeLossRecord), and stay there at stop for the next
+     * boot to write (restoreLossNotices); a reader fork's are in memory only,
+     * cleared at stop, as the deferred cancels are.
+     */
+    lossNotices = new Map();
+    /**
+     * The persistent subconscious's kept notices as the store's record was
+     * last written or read (writeLossRecord, readLossRecord), so that it is
+     * written only when they change.
+     */
+    lossRecordShape = '[]';
+    /**
+     * The record may not hold the notices kept in memory: its write failed,
+     * or was put off while writes were held. The next change, or the stop,
+     * writes it.
+     */
+    lossRecordStale = false;
+    /** The record couldn't be read: nothing is written over it until it can be (readLossRecord). */
+    lossRecordUnread = false;
+    /**
+     * The store's head sequence when this run began (noteUnstampedStop), which
+     * the stop's stamp names, so that the next boot reads only this run's rows
+     * for what became of a note. Undefined until the boot, or where it
+     * couldn't be read.
+     */
+    runStartedAt;
+    /** The branch `runStartedAt` is a place on (currentBranch), where the host names one. */
+    runBranch;
+    /** Where this run's rows begin on each branch it has been on, by branch (branchMoved): a move back to one keeps its start. */
+    runStarts = new Map();
+    /**
+     * The bound the last stop's stamp gave this boot's reading of that run
+     * (its `runStartedAt` and `branch`), kept while a notice the boot derived
+     * from it is kept in memory only (stampNoticesUnkept): this run's stamp
+     * carries it then (runBound), so a crash meanwhile leaves the next boot
+     * reading the same rows, and telling the same.
+     */
+    carriedBound;
+    /** The ids of the notices the store's loss record holds, as last written or read (writeLossRecord, readLossRecord). */
+    lossRecordIds = new Set();
+    /**
+     * This run's stamp (noteUnstampedStop) where the store refused it at boot,
+     * tried again until it lands (writePendingMarker); a stop's own stamp
+     * replaces it. Meanwhile a waiting cancel's answer to the persistent
+     * subconscious says the host's death before the cancel runs may go untold.
+     */
+    markerPending;
+    /** A write of `markerPending` failed, which was logged (once). */
+    markerUnwritten = false;
+    /**
+     * The boot's telling of the last stop's stamp (tellUnstampedHolds) threw
+     * before it finished, so a hold it didn't reach may be told nothing: the
+     * carried bound stays for the run (carriedNeeded), so a crash leaves the
+     * next boot reading those rows again.
+     */
+    carriedUntold = false;
+    /**
+     * The notices of an unrecorded stop (`unstamped-stop`) this boot wrote
+     * from the store's record (restoreLossNotices): told, though the
+     * subconscious's window may not hold them yet (a quiesced boot), as the
+     * boot's own reading of the stamp counts them (noteUnstampedStop).
+     */
+    restoredTold = [];
+    /**
+     * The ids of the notices the boot read from the store's record whose
+     * rows it couldn't read (restoreLossNotices): each may be written already,
+     * so none is written until a try reads those rows (checkLossNoticesWritten).
+     */
+    lossNoticesUnchecked = new Set();
+    /** The authors whose loss notice is being written now (writeLossNotices): a loss told for one meanwhile waits behind it. */
+    lossNoticesWriting = new Set();
+    /** The host's stop has begun (stopTimers): a turn asked for from here on is dropped with the stop's closed queue. */
+    timersStopped = false;
+    /** The release turns asked for while the stop was under way (StopStamp's `wakesOwed`), for the stop's stamp. */
+    wakesInStop = {};
+    /** The release turns this run asked for, by whose: a boot that asks one for its own release asks none again for the last stop's. */
+    releaseTurnsAsked = new Set();
+    /**
+     * The one retry of the deferred cancels whose run threw (a release that
+     * couldn't be made durable, a store operation that threw), and of the
+     * loss notices not written (lossNotices), armed by runDeferredCancels and
+     * tellNoteLost, unref'd, cleared at stop. A later release's
+     * runDeferredCancels runs them sooner.
+     */
+    deferredRetry;
+    /** Timer key for the scope's cadence and expiry; never a channel's key,
+     *  which starts with `[`. */
+    static SCOPE_KEY = 'all-except';
     constructor(channelRegistry, serverRegistry, hooks) {
         this.channelRegistry = channelRegistry;
         this.serverRegistry = serverRegistry;
         this.hooks = hooks;
     }
+    /** A channel's key in the coordinator's maps and its stored last looks.
+     *  The store refuses an object key holding a NUL, so no separator: the
+     *  pair as JSON, which no server or channel id can make ambiguous. */
     key(serverId, channelId) {
-        return `${serverId}\0${channelId}`;
+        return JSON.stringify([serverId, channelId]);
+    }
+    channelOf(key) {
+        return JSON.parse(key);
     }
     /** The readers' hand-off bookkeeping's key: one epoch's reading of one channel. */
     handOffKey(epochId, serverId, channelId) {
@@ -221,7 +644,7 @@ export class TuneOutCoordinator {
     }
     /** An ended epoch's hand-off bookkeeping goes with it, every channel's. */
     dropHandOffs(epochId) {
-        for (const map of [this.readerCursor, this.readerHandedWrites, this.readerReturned]) {
+        for (const map of [this.readerCursor, this.readerReturned]) {
             for (const key of map.keys())
                 if (key.startsWith(`${epochId}\0`))
                     map.delete(key);
@@ -243,12 +666,53 @@ export class TuneOutCoordinator {
     shown(serverId, channelId) {
         return this.channelRegistry.nameShown({ serverId, channelId });
     }
+    /**
+     * Every message of the primary's store, in arrival order: those stored,
+     * then those a live surgery's hold keeps in memory until its release
+     * (getSurgeryHeldMessages). What a check counts and peeks, and what a
+     * dump lists: a dump made during the hold, which a cancel makes only
+     * where writesHeld throws, still has what the tune-out held then. A
+     * reader is handed stored rows only (getStoredMessages): those the hold
+     * keeps have no id until stored, and the dump has them.
+     */
+    residentMessages() {
+        const stored = this.hooks.getStoredMessages();
+        let kept = [];
+        try {
+            kept = this.hooks.getSurgeryHeldMessages?.() ?? [];
+        }
+        catch (err) {
+            console.error('[tune-out] could not read the writes a surgery holds in memory, so the stored messages alone are read:', err);
+        }
+        return kept.length > 0 ? [...stored, ...kept] : stored;
+    }
     quotedShown(serverId, channelId) {
         return this.channelRegistry.quotedShown({ serverId, channelId });
     }
     /** Restart cadence + expiry timers and re-anchor after a process restart. */
     resumeActiveEpochs() {
-        let oldestAnchor = null;
+        // The holds on record before any is resumed or ended here, and the
+        // store's head then, for the last stop's stamp (noteUnstampedStop).
+        let bootHead;
+        try {
+            bootHead = this.hooks.currentSequence();
+        }
+        catch {
+            bootHead = undefined;
+        }
+        // The all-except hold's record first, uncaught: its first read is the
+        // store's (getAllExcept caches it once read), and one that throws
+        // refuses the start, as the read below would. Caught with the holds
+        // below, it read as no hold, and the last stop's stamp was written over
+        // unchecked, its bound with it (AF #844 review 5, #36).
+        this.getAllExcept();
+        let onRecord = [];
+        try {
+            onRecord = this.holdsOnRecord();
+        }
+        catch (err) {
+            console.error(`[tune-out] the holds on record could not be read for the last stop's stamp, so none is checked against it: ${thrownReason(err)}`);
+        }
         for (const { serverId, channelId, params } of this.listActive()) {
             // An epoch whose deadline passed while the process was down cancels
             // immediately — the resident gets their backlog on the schedule they
@@ -272,28 +736,22 @@ export class TuneOutCoordinator {
             const wakeCount = this.channelRegistry.getTuneOutState(serverId, channelId)?.wakeCount ?? 0;
             if (wakeCount > params.maxWakes) {
                 this.cancelPastBudget(serverId, channelId, params.maxWakes, 'start');
-                if (!inForce())
-                    continue;
             }
             else {
                 this.armExpiry(serverId, channelId, expired ? { ...params, expiresAtMs: Date.now() + EXPIRY_RETRY_MS } : params);
             }
-            if (oldestAnchor === null || params.startedAtSequence < oldestAnchor) {
-                oldestAnchor = params.startedAtSequence;
-            }
         }
         const scope = this.getAllExcept();
         if (scope) {
-            let inForce = true;
+            // Whether the hold is still in force, and so anchors the subconscious,
+            // is read from the record below (anchorSubconscious), as a channel's is.
             if (scope.params.expiresAtMs <= Date.now()) {
                 try {
                     this.cancelAllExcept('duration', 'duration elapsed');
-                    inForce = false;
                 }
                 catch (err) {
                     if (this.getAllExcept()?.params.epochId !== scope.params.epochId) {
                         console.error('[tune-out] the all-except hold reached its end time while the process was down and its release ended it, but a step after the end failed:', err);
-                        inForce = false;
                     }
                     else {
                         console.error(`[tune-out] the all-except hold reached its end time while the process was down, and its release failed, so it stays in force and its release is tried again in ${EXPIRY_RETRY_MS / 1000} s:`, err);
@@ -304,21 +762,18 @@ export class TuneOutCoordinator {
             else {
                 this.armScopeTimers(scope.params);
             }
-            if (inForce && (oldestAnchor === null || scope.params.startedAtSequence < oldestAnchor)) {
-                oldestAnchor = scope.params.startedAtSequence;
-            }
-        }
-        if (oldestAnchor !== null) {
-            this.hooks.setSubconsciousAnchor(oldestAnchor);
         }
+        // A window start kept for a tune-out that ended while the process was
+        // down, its cancel's own forget not written, goes now.
+        this.pruneWindowStarts();
+        this.anchorSubconscious('resume');
         // What each held channel's reader hasn't looked at was counted in
         // memory, so it is counted again from the held rows: without it, a
         // channel held across the restart gets no cadence look until something
-        // new arrives.
-        // Stored and still queued alike: at a quiesced boot, restored writes stay
-        // queued until the resume flushes them.
+        // new arrives. Every held message is stored as it arrives (#291), so the
+        // stored rows are all of them.
         const held = new Set();
-        for (const m of [...this.hooks.getStoredMessages(), ...(this.hooks.getDeferredMessages?.() ?? [])]) {
+        for (const m of this.hooks.getStoredMessages()) {
             const meta = m.metadata;
             const epochId = meta?.tuneOut?.epochId;
             if (!meta || !epochId || !meta.channelId)
@@ -328,10 +783,329 @@ export class TuneOutCoordinator {
                 held.add(key);
         }
         for (const key of held) {
-            const [serverId, channelId] = key.split('\0');
+            const [serverId, channelId] = this.channelOf(key);
             this.rebuildTally(serverId, channelId);
         }
         this.pruneLooks();
+        // A loss told to the subconscious before the stop whose turn the stop
+        // lost is given its turn again; then a loss notice a stop left kept in
+        // the store is written, the holds' state above restored first, which it
+        // reads; then those for the holds the last stop didn't stamp.
+        this.askTurnsForUnreadLosses();
+        this.noteUnstampedStop(onRecord, this.restoreLossNotices(), bootHead);
+        // And the resident, of a hold still in force whose release reached it
+        // before the last stop, its end not recorded (tellResidentUnended).
+        this.tellResidentUnended(onRecord, bootHead);
+    }
+    /**
+     * At boot (resumeActiveEpochs), after this boot's own releases (an end
+     * time passed, a wake budget spent): each hold on record then still in
+     * force whose release the resident has, stored before this boot (a
+     * `tune-out-cancel` row of its epoch), its end never recorded. The
+     * resident read "[Tune-out: … cancelled …]", and nothing said the
+     * tune-out still stood: a stop whose wait for an operator's operation ran
+     * out, the hold's release after it storing the release, or a throw
+     * between a cancel's release and its end (a store fault). It is told,
+     * once, by a row in the residents' slot (`tune-out-end-unrecorded`) that
+     * the release reached it but the end wasn't recorded, so the tune-out is
+     * still in force, what arrives there held for its next release, and how
+     * it ends; the release row stays as the record of the release. A row of
+     * that kind for the epoch after its latest release silences a later boot;
+     * a release after it (another cancel that failed at its end) is told
+     * again. The subconscious, whose window holds the residents' rows, reads
+     * it too. A write that throws is logged, and tried at the next boot
+     * (AF #844, Oscar). Never throws.
+     */
+    tellResidentUnended(onRecord, bootHead) {
+        try {
+            if (onRecord.length === 0)
+                return;
+            const rows = this.hooks.getStoredMessages();
+            for (const { epochId, serverId, channelId, scope } of onRecord) {
+                const params = scope
+                    ? this.getAllExcept()?.params
+                    : this.channelRegistry.getTuneOutState(serverId, channelId)?.params;
+                if (!params || params.epochId !== epochId)
+                    continue;
+                let release = -Infinity;
+                let told = -Infinity;
+                for (const m of rows) {
+                    const meta = m.metadata;
+                    if (meta?.epochId !== epochId || typeof m.sequence !== 'number')
+                        continue;
+                    if (bootHead !== undefined && m.sequence > bootHead)
+                        continue;
+                    if (meta.kind === 'tune-out-cancel')
+                        release = Math.max(release, m.sequence);
+                    else if (meta.kind === 'tune-out-end-unrecorded')
+                        told = Math.max(told, m.sequence);
+                }
+                if (release === -Infinity || told > release)
+                    continue;
+                const shown = this.shown(serverId, channelId);
+                const expires = params.expiresAtMs !== undefined ? new Date(params.expiresAtMs) : undefined;
+                const endTime = expires && Number.isFinite(expires.getTime()) ? expires.toISOString().replace(/\.\d+Z$/, 'Z') : undefined;
+                // A channel's tune-out also ends by itself at the first wake past its
+                // wake budget (cancelPastBudget, from fireWake and the start); the
+                // all-except hold's budget pauses its reader, and ends nothing.
+                const budget = !scope && typeof params.maxWakes === 'number' && Number.isFinite(params.maxWakes)
+                    ? `, or by itself at the first wake past its wake budget (maxWakes ${params.maxWakes})` : '';
+                const text = scope
+                    ? `[${NOTICE_TAG.tuneOut}: the all-except hold (all channels except ${shown}) is still in force. Its release above reached you, but its `
+                        + 'end wasn\'t recorded before the host stopped, so the hold is still in force: what arrives in those channels is held, and comes '
+                        + `with its next release. It ends when it is cancelled (tune_out mode "cancel" with scope "all-except")${endTime ? `, or at its end time, ${endTime}` : ''}.]`
+                    : `[${NOTICE_TAG.tuneOut}: ${shown} is still tuned out. Its release above reached you, but its end wasn't recorded before the `
+                        + 'host stopped, so the tune-out is still in force: what arrives there is held, and comes with its next release. It ends when it '
+                        + `is cancelled (tune_out mode "cancel")${endTime ? `${budget ? ',' : ', or'} at its end time, ${endTime}` : ''}${budget}.]`;
+                this.hooks.addMessage('user', [{ type: 'text', text }], {
+                    system: true, kind: 'tune-out-end-unrecorded', channelId, serverId, epochId, ...(scope ? { scope } : {}),
+                });
+                console.error(`[tune-out] the release of ${scope ? 'the all-except hold' : shown} (epoch ${epochId}) reached the resident before the last stop, `
+                    + 'but its end was not recorded, so the resident is told the hold is still in force');
+            }
+        }
+        catch (err) {
+            console.error(`[tune-out] the resident could not be told, at boot, of a hold whose release reached it with its end not recorded: ${thrownReason(err)}`);
+        }
+    }
+    /** The epochs of the tune-outs active now, a channel's and the all-except hold (the anchor's branchMoved reads them). */
+    activeEpochIds() {
+        return this.activeStarts().map((e) => e.epochId);
+    }
+    /** The tune-outs active now, a channel's and the all-except hold, with where each started in the record. */
+    activeStarts() {
+        const starts = this.listActive().map(({ params }) => ({ epochId: params.epochId, sequence: params.startedAtSequence }));
+        const scope = this.getAllExcept();
+        if (scope)
+            starts.push({ epochId: scope.params.epochId, sequence: scope.params.startedAtSequence });
+        return starts;
+    }
+    /**
+     * Set the subconscious's window start to the oldest active tune-out's
+     * (setSubconsciousAnchor), with its ordinal when one was fixed for it. The
+     * all-except hold counts with the channels' tune-outs, wherever this is
+     * called, so a channel's tune-out entered during an older hold leaves the
+     * start at the hold's. Nothing when none is active: the anchor stays where
+     * it was, as a cancel leaves it.
+     *
+     * A cancel leaves the start where it was while another tune-out stays
+     * active too, so the subconscious's report on the one cancelled still has
+     * what it held, and the start in force is kept (`inForce`). At a resume
+     * that start is set again rather than the oldest active tune-out's, which
+     * is later than it once the oldest was cancelled: so the window is the
+     * same across a restart. An enter sets the oldest active tune-out's, as it
+     * always has. Where the window presents, the other active tune-outs whose
+     * start isn't kept yet go with it, for the framework to fix as soon as
+     * each can be: the oldest one's too, where a resume sets the start in
+     * force instead of it.
+     */
+    anchorSubconscious(occasion = 'enter') {
+        const active = this.activeStarts();
+        if (active.length === 0)
+            return;
+        const sequence = active.reduce((min, e) => Math.min(min, e.sequence), Infinity);
+        const epochIds = active.filter((e) => e.sequence === sequence).map((e) => e.epochId);
+        const kept = this.ordinalsKept();
+        const read = kept ? this.readWindowState() : { starts: {} };
+        if (read === null) {
+            // Which starts are kept can't be told: set by sequence, the window
+            // could move off a start fixed for an active tune-out, and the fix
+            // would write over the record. It stays where it was, nothing written;
+            // the next enter or restart sets it.
+            console.error(`[tune-out] the subconscious's window start stays where it was: its kept starts can't be read; the next enter or restart sets it`);
+            return;
+        }
+        const state = read;
+        const own = epochIds.map((id) => state.starts[id]).find((o) => o !== undefined);
+        let ordinal = own;
+        // At a resume, the start in force before the restart (a cancelled
+        // tune-out's, say), and never past the oldest active one's own start
+        // where one is kept. With none in force kept, the anchor (window-anchor)
+        // keeps the one its strategy persisted where that is earlier than the
+        // oldest active one's own start, or, where none of that is kept either,
+        // rather than converting its sequence again (AF #844 review 5, #47).
+        const inForceOnly = occasion === 'resume' && state.inForce !== undefined && (own === undefined || state.inForce < own);
+        if (inForceOnly)
+            ordinal = state.inForce;
+        const keepEarlierAnchor = occasion === 'resume' && kept && state.inForce === undefined;
+        // The start in force from now: an ordinal known is kept as in force once
+        // it is set (the anchor's fix reports it, subconsciousWindowFixed), not
+        // before, so a set that fails leaves the record with the start the
+        // strategy still has. While the start waits to be fixed, none is in
+        // force until the fix reports it.
+        if (kept && ordinal === undefined && state.inForce !== undefined) {
+            const { inForce: _was, ...rest } = state;
+            this.writeWindowState(rest);
+        }
+        const others = [];
+        if (kept) {
+            const bySequence = new Map();
+            for (const e of active) {
+                // The oldest active start goes with them where the start in force is
+                // set in its place (inForceOnly), so it is fixed too, unmoved to.
+                if ((e.sequence === sequence && !inForceOnly) || state.starts[e.epochId] !== undefined)
+                    continue;
+                bySequence.set(e.sequence, [...(bySequence.get(e.sequence) ?? []), e.epochId]);
+            }
+            for (const [at, ids] of bySequence)
+                others.push({ sequence: at, epochIds: ids });
+        }
+        this.hooks.setSubconsciousAnchor({
+            sequence,
+            ...(ordinal !== undefined ? { ordinal } : {}),
+            epochIds,
+            ...(inForceOnly ? { inForceOnly: true } : {}),
+            ...(keepEarlierAnchor ? { keepEarlierAnchor: true } : {}),
+        }, others);
+    }
+    // ==========================================================================
+    // Window starts (the subconscious's, by ordinal)
+    // ==========================================================================
+    /** Where each active tune-out's window start is kept, by ordinal: a snapshot state, on each branch its own. */
+    get windowStartsStateId() {
+        return `subconscious/${this.hooks.primaryName() ?? 'default'}/window-starts`;
+    }
+    /** Whether the subconscious's window keeps ordinals, so its starts are kept (subconsciousWindowOrdinals). */
+    ordinalsKept() {
+        try {
+            return this.hooks.subconsciousName() != null && this.hooks.subconsciousWindowOrdinals?.() === true;
+        }
+        catch {
+            return false;
+        }
+    }
+    /**
+     * Each tune-out's window start as an ordinal, by epoch id, as kept on the
+     * store's branch now, and the start in force (`inForce`: the ordinal the
+     * window start was last set to while a tune-out is active), which a
+     * restart sets again (anchorSubconscious). A state that isn't this format
+     * (`{ v: 1, starts, inForce? }`) reads as none kept, and is written over
+     * at the next fix, with a line saying so. A read that throws answers null:
+     * what is kept can't be told, so nothing is written over it (a fix isn't
+     * kept, and is tried again at the next presentation), and the window
+     * start isn't moved. A state an earlier version kept, with no `inForce`,
+     * reads as one with none in force, and a restart sets the oldest active
+     * tune-out's start, or the anchor the subconscious's strategy persisted
+     * where that is earlier (keepEarlierAnchor).
+     */
+    readWindowState() {
+        let raw;
+        try {
+            raw = this.channelRegistry.readCoordinatorState(this.windowStartsStateId);
+        }
+        catch (err) {
+            console.error(`[tune-out] the subconscious's window starts (${this.windowStartsStateId}) can't be read, so nothing is written over them now:`, err);
+            return null;
+        }
+        if (raw == null)
+            return { starts: {} };
+        const state = raw;
+        if (state.v !== 1 || !state.starts || typeof state.starts !== 'object') {
+            console.error(`[tune-out] the subconscious's window starts (${this.windowStartsStateId}) aren't in a form this version reads, so none is kept; the next fix writes over them`);
+            return { starts: {} };
+        }
+        const isOrdinal = (o) => typeof o === 'number' && Number.isInteger(o) && o >= 0;
+        // One ill-formed entry is dropped, logged by its epoch, the rest read:
+        // the next fix writes over it.
+        const starts = {};
+        for (const [epochId, ordinal] of Object.entries(state.starts)) {
+            if (isOrdinal(ordinal))
+                starts[epochId] = ordinal;
+            else
+                console.error(`[tune-out] the subconscious's window start kept for epoch ${epochId} (${this.windowStartsStateId}) isn't an ordinal (${JSON.stringify(ordinal) ?? String(ordinal)}), so none is kept for it; the next fix writes over it`);
+        }
+        if (state.inForce !== undefined && !isOrdinal(state.inForce)) {
+            console.error(`[tune-out] the subconscious's window start in force (${this.windowStartsStateId}) isn't an ordinal (${JSON.stringify(state.inForce) ?? String(state.inForce)}), so none is read as in force; the next fix writes over it`);
+        }
+        return { starts, ...(isOrdinal(state.inForce) ? { inForce: state.inForce } : {}) };
+    }
+    /** Keep `state`, answering whether it was written; a write that fails is logged, and the anchor the strategy holds stays as it is. */
+    writeWindowState(state) {
+        try {
+            this.channelRegistry.writeCoordinatorState(this.windowStartsStateId, {
+                v: 1,
+                starts: state.starts,
+                ...(state.inForce !== undefined ? { inForce: state.inForce } : {}),
+            });
+            return true;
+        }
+        catch (err) {
+            console.error(`[tune-out] the subconscious's window starts (${this.windowStartsStateId}) couldn't be written, so a restart fixes them again:`, err);
+            return false;
+        }
+    }
+    /**
+     * The framework fixed the subconscious's window start for `epochIds` at
+     * `ordinal` (its index ordinal, #291): kept for each of them still active,
+     * so a later anchor (another tune-out's enter, a restart) sets that
+     * ordinal again rather than converting the tune-out's sequence anew, and
+     * kept as the start in force while any tune-out is active, which a
+     * restart sets again (anchorSubconscious), when it is the start in force
+     * (`inForce`; another active tune-out's start fixed beside it isn't).
+     * Answers whether it is kept, so that the anchor tries again at its next
+     * presentation when it isn't: not when the record can't be read, which
+     * is never written over then.
+     */
+    subconsciousWindowFixed(epochIds, ordinal, inForce = true) {
+        if (!this.ordinalsKept())
+            return true;
+        const active = new Set(this.activeStarts().map((e) => e.epochId));
+        const state = this.readWindowState();
+        if (state === null)
+            return false;
+        let changed = false;
+        for (const epochId of epochIds) {
+            if (!active.has(epochId) || state.starts[epochId] === ordinal)
+                continue;
+            state.starts[epochId] = ordinal;
+            changed = true;
+        }
+        // The window starts there now, whether or not the tune-outs it was fixed
+        // for are active still (one cancelled before its start was fixed leaves
+        // it in force, as any cancel does), while any tune-out is.
+        if (inForce && active.size > 0 && state.inForce !== ordinal) {
+            state.inForce = ordinal;
+            changed = true;
+        }
+        return changed ? this.writeWindowState(state) : true;
+    }
+    /**
+     * An ended tune-out's window start goes, and, once none is active, the
+     * start in force with it: the next enter sets its own.
+     */
+    forgetWindowStart(epochId) {
+        if (!this.ordinalsKept())
+            return;
+        const state = this.readWindowState();
+        // Unreadable: left as it is; a resume's prune takes the start out later.
+        if (state === null)
+            return;
+        const noneActive = this.activeStarts().length === 0;
+        if (!(epochId in state.starts) && !(noneActive && state.inForce !== undefined))
+            return;
+        delete state.starts[epochId];
+        if (noneActive)
+            delete state.inForce;
+        this.writeWindowState(state);
+    }
+    /** The window starts of tune-outs no longer active go. */
+    pruneWindowStarts() {
+        if (!this.ordinalsKept())
+            return;
+        const state = this.readWindowState();
+        if (state === null)
+            return;
+        const active = new Set(this.activeStarts().map((e) => e.epochId));
+        const stale = Object.keys(state.starts).filter((epochId) => !active.has(epochId));
+        // With none active, no start is in force for the resume to set again.
+        const staleInForce = active.size === 0 && state.inForce !== undefined;
+        if (stale.length === 0 && !staleInForce)
+            return;
+        for (const epochId of stale)
+            delete state.starts[epochId];
+        if (staleInForce)
+            delete state.inForce;
+        this.writeWindowState(state);
     }
     armExpiry(serverId, channelId, params) {
         if (params.expiresAtMs === undefined)
@@ -379,147 +1153,2357 @@ export class TuneOutCoordinator {
                 active.push({ serverId: entry.serverId, channelId: entry.descriptor.id, params: state.params });
             }
         }
-        return active;
+        return active;
+    }
+    // ==========================================================================
+    // Enter / cancel
+    // ==========================================================================
+    /**
+     * The options a tune-out call gives, read as numbers before anything
+     * changes (F76). A tool's input reaches here as the model wrote it, and
+     * the store can't keep a NaN or an Infinity: its append would throw after
+     * the registry had marked the channel tuned out. So each option is read
+     * as a number first, a numeric string included, as the sleep tool reads
+     * its seconds; null counts as left out. A value that gives no finite
+     * number is refused, naming the option and, where it can be left out,
+     * what leaving it out means; so is a duration whose end time is too far
+     * off to store. `now` is the clock the end time was counted from. One
+     * rule for a channel's tune-out and the all-except hold.
+     */
+    readOptions(opts, leftOut) {
+        const given = {};
+        for (const name of Object.keys(leftOut)) {
+            const value = opts[name];
+            if (value == null)
+                continue;
+            const n = Number(value);
+            if (!Number.isFinite(n)) {
+                const got = typeof value === 'number'
+                    ? String(value)
+                    : `${typeof value === 'string' ? 'the string' : 'the value'} ${JSON.stringify(value)}`;
+                return {
+                    ok: false,
+                    error: `Nothing was tuned out: ${name} must be a finite number${name.endsWith('Seconds') ? ' of seconds' : ''}, `
+                        + `and it was ${got}.${leftOut[name] ? ` Leave it out ${leftOut[name]}.` : ''}`,
+                };
+            }
+            given[name] = n;
+        }
+        const now = Date.now();
+        const expiresAtMs = given.durationSeconds === undefined
+            ? undefined
+            : now + Math.max(60, given.durationSeconds) * 1000;
+        if (expiresAtMs !== undefined && !Number.isFinite(expiresAtMs)) {
+            return {
+                ok: false,
+                error: `Nothing was tuned out: durationSeconds ${given.durationSeconds} is longer than an end time can be kept.`
+                    + (leftOut.durationSeconds ? ` Leave it out ${leftOut.durationSeconds}.` : ''),
+            };
+        }
+        return { ok: true, given, now, expiresAtMs };
+    }
+    enter(serverId, channelId, opts, source) {
+        // No reader: no hold. One nothing summarizes would hand the resident an
+        // undated backlog all at once when it ends.
+        if (!this.readerAvailable())
+            return { ok: false, error: NO_READER_REFUSAL };
+        if (this.hooks.isForkBound({ serverId, channelId })) {
+            return {
+                ok: false,
+                error: `Nothing changed: a conversation is bound to ${this.quotedShown(serverId, channelId)}, so its messages go to that `
+                    + "conversation, and tune_out won't divert a channel while one is. Calling tune_out on it again won't change "
+                    + 'that until the conversation ends, which happens only once the channel has been quiet for a while. Tune '
+                    + 'out a different channel, or ask whoever runs this host if this one should be diverted.',
+            };
+        }
+        const current = this.channelRegistry.getTuneOutState(serverId, channelId);
+        if (current)
+            return { ok: false, error: alreadyTunedOutText(this.quotedShown(serverId, channelId), current.params), alreadyTunedOut: true };
+        const scope = this.getAllExcept();
+        if (scope && scope.params.except.serverId === serverId && scope.params.except.channelId === channelId) {
+            return { ok: false, error: `channel ${this.quotedShown(serverId, channelId)} is the excepted channel of the active all-except hold; cancel that first` };
+        }
+        const read = this.readOptions(opts, {
+            durationSeconds: 'to stay tuned out until you cancel',
+            cadenceSeconds: `for the default, ${TUNE_OUT_DEFAULTS.cadenceSeconds}`,
+            backlogCap: `for the default, ${TUNE_OUT_DEFAULTS.backlogCap}`,
+            maxWakes: `for the default, ${TUNE_OUT_DEFAULTS.maxWakes}`,
+        });
+        if (!read.ok)
+            return read;
+        const { given, expiresAtMs } = read;
+        const params = {
+            epochId: randomUUID(),
+            cadenceSeconds: Math.max(30, given.cadenceSeconds ?? TUNE_OUT_DEFAULTS.cadenceSeconds),
+            backlogCap: Math.max(0, given.backlogCap ?? TUNE_OUT_DEFAULTS.backlogCap),
+            maxWakes: Math.max(1, given.maxWakes ?? TUNE_OUT_DEFAULTS.maxWakes),
+            startedAtSequence: this.hooks.currentSequence(),
+            ...(expiresAtMs !== undefined ? { expiresAtMs } : {}),
+        };
+        // A tune-out that ended in the registry without this coordinator's
+        // cancel would have left its timers armed: clear them, so none of them
+        // acts on this one.
+        this.clearTimers(serverId, channelId);
+        this.channelRegistry.enterTuneOut(serverId, channelId, params, source);
+        this.armExpiry(serverId, channelId, params);
+        // Window anchor: start of the OLDEST active tune-out. Never move the
+        // anchor forward here — an older active epoch owns it.
+        this.anchorSubconscious();
+        this.divertedSinceInvocation.set(this.key(serverId, channelId), 0);
+        if (this.readerAvailable())
+            this.startCadence(serverId, channelId, params.cadenceSeconds);
+        this.hooks.emitTrace({
+            type: 'tune-out:entered', serverId, channelId, epochId: params.epochId, reader: this.readerAvailable(),
+        });
+        return { ok: true, params };
+    }
+    /**
+     * Whether a write the coordinator just made was kept in memory, by what
+     * it answered: an empty id, the framework's answer for a write it keeps
+     * (a surgery's hold, a context manager refusing its work), with writes
+     * held now, as they are while it keeps one. A write that answered an id
+     * landed, whether or not writes are held since (a hold begun as it
+     * returned); one that answered no id with nothing held (a host that
+     * answers none) isn't kept. Never judged by writesHeld alone (Weft, #844).
+     */
+    writeKept(id) {
+        return id === '' && this.writesHeldNow();
+    }
+    /**
+     * Whether the resident's last word on a hold (`what`, as the log names
+     * it) is the boot's row that it still stands (toldStillStands), read from
+     * the residents' stored rows for the cancel that ends it with nothing
+     * more to deliver. A read that throws, or rows that can't be read, count
+     * as yes, said once: one redundant release line is the cheaper error
+     * against a "still stands" left as the last word on a tune-out that has
+     * ended (AF #844, Oscar). Never throws.
+     */
+    residentToldStillStands(epochId, what) {
+        try {
+            return toldStillStands(this.hooks.getStoredMessages(), epochId);
+        }
+        catch (err) {
+            console.error(`[tune-out] the resident's rows can't be read to tell whether its last word on ${what} is that it still stands, `
+                + `so the cancel that ends it writes it a short release all the same: ${thrownReason(err)}`);
+            return true;
+        }
+    }
+    /** Whether the framework keeps writes in memory now (writesHeld), with `forAgent`'s among them; a hook that throws counts as not. */
+    writesHeldNow(forAgent) {
+        try {
+            return this.hooks.writesHeld?.(forAgent) === true;
+        }
+        catch (err) {
+            console.error('[tune-out] could not ask whether writes are held in memory, so a cancel goes on:', err);
+            return false;
+        }
+    }
+    /**
+     * Keep a cancel asked for while writes are kept in memory, for
+     * runDeferredCancels, with its note, for the epoch it was asked for
+     * (`target`). The first one asked for a hold stands, with its reason and
+     * source. A later one for the same hold (an end time's retry, a wake past
+     * the budget, an agent's cancel) adds nothing, except a note: the waiting
+     * cancel takes it, with its author, when it has none or its own went out
+     * already (noteDelivered), and otherwise the
+     * later note is dropped, with a log line, and this answers 'note-dropped'
+     * so its caller can be told. One waiting for an earlier epoch there,
+     * whose hold ended without it, is dropped (dropDeferred), and this one
+     * waits in its place. Once stopped (a listener of that drop's trace, say),
+     * none waits: this one is told as the stop tells a waiting cancel.
+     */
+    deferCancel(key, target, what, run, note, noteAuthor) {
+        let waiting = this.deferredCancels.get(key);
+        if (waiting && waiting.for.epochId !== target.epochId) {
+            this.deferredCancels.delete(key);
+            this.dropQueued(waiting, { reason: 'hold-ended', current: target.epochId });
+            waiting = undefined;
+        }
+        // Stopped, by a listener of that drop's trace, say: nothing runs it now,
+        // so it is told as the stop tells a cancel it finds waiting.
+        if (this.stopped) {
+            this.dropDeferred({
+                for: target, what, run,
+                ...(note !== undefined ? { note } : {}), ...(noteAuthor !== undefined ? { noteAuthor } : {}),
+                askers: noteAuthor !== undefined ? [noteAuthor] : [],
+            }, { reason: 'stopped' });
+            return 'waits';
+        }
+        if (!waiting) {
+            this.deferredCancels.set(key, {
+                for: target, what, run,
+                ...(note !== undefined ? { note } : {}), ...(noteAuthor !== undefined ? { noteAuthor } : {}),
+                askers: noteAuthor !== undefined ? [noteAuthor] : [],
+            });
+            console.error(`[tune-out] the cancel of ${what} waits until the store takes writes again (an operator's change to it is in progress, or a context it writes to refuses writes until it is re-initialized), so that its release is stored before the tune-out's end is recorded`);
+            return 'waits';
+        }
+        // A later call joins the cancel waiting: its caller is one of its askers.
+        if (noteAuthor !== undefined && !waiting.askers.includes(noteAuthor))
+            waiting.askers.push(noteAuthor);
+        if (note === undefined)
+            return 'waits';
+        if (waiting.note === undefined) {
+            waiting.note = note;
+            if (noteAuthor !== undefined)
+                waiting.noteAuthor = noteAuthor;
+            return 'waits';
+        }
+        // One whose note went out already (its run delivered it, and failed
+        // before the end) takes this one's, which goes out when the hold ends.
+        if (noteDelivered(waiting)) {
+            takeLaterNote(waiting, note, noteAuthor);
+            return 'waits';
+        }
+        console.error(`[tune-out] a later cancel of ${what} is dropped with its note: the cancel already waiting carries a note of its own`);
+        return 'note-dropped';
+    }
+    /**
+     * Run the cancels asked for while writes were kept in memory (deferCancel),
+     * in the order asked, now that the framework stores them again: it calls
+     * this once a surgery's release has stored what its hold kept, or told of
+     * what it couldn't store, and the retry timer calls it. One whose writes
+     * are still held waits on. One whose epoch no longer holds (its hold
+     * ended without it, and a later one may hold there now) is dropped, told
+     * (dropDeferred): it ends nothing, a later hold included. One that throws
+     * (its release couldn't be made durable, a store operation threw) stays
+     * waiting, with its note, the tune-out still in force: it runs again at
+     * the next call, or EXPIRY_RETRY_MS later, which one timer arms; one that
+     * threw after it recorded its hold's end isn't kept, and a note it hadn't
+     * delivered by then is told lost (dropDeferred). Each leaves the queue
+     * just before it runs, so a stop meanwhile (a trace listener's) finds
+     * those not run yet, and tells them as it tells any (stop): none runs
+     * after it, and no retry is armed then. First, the loss notices not
+     * written yet are tried again (writeLossNotices); the retry is armed while
+     * one is left. Never throws.
+     */
+    runDeferredCancels() {
+        if (this.stopped)
+            return;
+        if (this.deferredCancels.size === 0 && this.lossNotices.size === 0 && !this.markerPending && !this.lossRecordUnread)
+            return;
+        if (this.writesHeldNow()) {
+            // Writes are held for some agent. A loss notice is held only where
+            // its author's are (writeLossNotices asks writesHeld of the author):
+            // a reader fork is told while the primary's or the subconscious's
+            // context manager refuses its work, which holds the cancels' writes
+            // but not the fork's (AF #844 review 5, #53). The cancels, the marker
+            // and the record wait.
+            if (this.lossNotices.size > 0 || this.lossRecordUnread)
+                this.writeLossNotices();
+            return;
+        }
+        if (this.deferredRetry !== undefined) {
+            clearTimeout(this.deferredRetry);
+            this.deferredRetry = undefined;
+        }
+        // The loss notices first: the marker after them names this run's own
+        // start once those a boot read from the last stop's stamp are told or
+        // kept (runBound).
+        this.writeLossNotices();
+        // A stop meanwhile (a listener of a notice's write) wrote its stamp,
+        // which no marker of this run is written over, and took the queue.
+        if (this.stopped)
+            return;
+        if (this.carriedBound && !this.carriedNeeded()) {
+            this.carriedBound = undefined;
+            this.markerPending = this.runMarker();
+        }
+        this.writePendingMarker();
+        let failed = false;
+        for (const key of [...this.deferredCancels.keys()]) {
+            if (this.stopped)
+                break;
+            // Taken meanwhile: a cancel of its hold ran, from a trace listener.
+            const entry = this.deferredCancels.get(key);
+            if (!entry)
+                continue;
+            this.deferredCancels.delete(key);
+            try {
+                const now = entry.for.current();
+                if (now !== entry.for.epochId) {
+                    this.dropQueued(entry, { reason: 'hold-ended', current: now });
+                    continue;
+                }
+                entry.run(entry);
+            }
+            catch (err) {
+                // The end is recorded before what follows it in a release, so a run
+                // whose epoch no longer holds ended it, and failed after: it isn't
+                // kept, or its retry would act on whatever holds there next. One
+                // whose epoch can't be read is kept, as one still in force.
+                let ended;
+                try {
+                    ended = entry.for.current() !== entry.for.epochId;
+                }
+                catch {
+                    ended = false;
+                }
+                if (ended) {
+                    console.error(`[tune-out] the cancel of ${entry.what}, asked for while writes were held in memory, ended its tune-out (epoch ${entry.for.epochId}) when it ran, but a step after the end failed:`, err);
+                    // The run writes its note before the end (noteNow), or, joining
+                    // another cancel, after it (deliverQueuedNote); a note the throw
+                    // left unsettled is told lost here. One lost when the writes were
+                    // stored is told lost with that error (lostAtRelease).
+                    if (entry.note !== undefined && !entry.noteSettled) {
+                        this.dropDeferred(entry, entry.lostAtRelease
+                            ? { ...entry.lostAtRelease, by: 'itself' }
+                            : { reason: 'note-undelivered', by: 'itself', error: thrownReason(err) });
+                    }
+                    this.lossesToldInRelease([entry], this.whereOf(entry.for));
+                    continue;
+                }
+                // A stop during its run (a trace listener's) found it off the queue:
+                // it isn't put back for a retry after the stop, and is told as the
+                // stop tells a waiting cancel.
+                if (this.stopped) {
+                    console.error(`[tune-out] stopping: the cancel of ${entry.what} failed when it ran, as the host stopped:`, err);
+                    this.dropQueued(entry, { reason: 'stopped' });
+                    continue;
+                }
+                failed = true;
+                this.requeue(key, entry);
+                console.error(`[tune-out] a cancel asked for while writes were held in memory failed when it ran, so it stays waiting, the tune-out in force, and is tried again in ${EXPIRY_RETRY_MS / 1000} s or at the next release:`, err);
+            }
+        }
+        if (!this.stopped && (failed || this.lossNotices.size > 0 || this.markerPending || this.lossRecordUnread))
+            this.armDeferredRetry();
+    }
+    /**
+     * A write the framework kept in memory while writes were held, lost when
+     * it stored them: its replay threw (`error`), and where context-manager
+     * couldn't tell whether any of it landed (`mayBeStored`), it may be stored
+     * after all. `metadata` is the write's, as it was given: what tells the
+     * coordinator's own writes apart. The framework calls this from its
+     * release, before it runs the deferred cancels (runDeferredCancels), and
+     * tells the operator as well (`message:lost`, `store-held-lost`).
+     * A queued cancel's note delivered while writes were held (heldInMemory:
+     * by its own run, or ahead of another cancel's release, queuedNoteFirst)
+     * was answered as waiting, with the promise that its author is told if it
+     * can't be delivered, and why. Its write (`subconscious-note`, of the
+     * cancel's epoch) lost here unsettles it (lostAtRelease): the run that ends
+     * the hold tells it lost then, with this error, as it tells a note it
+     * can't write (noteNow, dropDeferred), and a stop before then tells it
+     * lost with the cancel (dropQueued). The note is never written again,
+     * since it may be stored after all. A release kept so that told a queued
+     * note's loss (`tune-out-cancel` with `lostNote`, queuedNoteFirst), lost
+     * here, told nothing: the entry it settled (lostInRelease, heldInMemory)
+     * is unsettled, that loss moved to lostAtRelease, so the run that ends
+     * the hold tells it by a notice, and the note isn't written again (AF
+     * #844 review 5, #18). The note's loss is known whether or not that
+     * release may have landed: told twice, where it did, rather than never.
+     * Any other write is left to the operator. Never throws.
+     */
+    heldWriteLost(metadata, error, mayBeStored = false) {
+        try {
+            if (metadata?.kind === 'tune-out-cancel' && metadata.lostNote === true && typeof metadata.epochId === 'string') {
+                for (const entry of this.deferredCancels.values()) {
+                    const told = entry.lostInRelease;
+                    if (entry.for.epochId !== metadata.epochId || entry.note === undefined || !entry.noteSettled || !entry.heldInMemory || !told)
+                        continue;
+                    delete entry.noteSettled;
+                    delete entry.heldInMemory;
+                    delete entry.lostInRelease;
+                    entry.lostAtRelease = told;
+                    console.error(`[tune-out] the release that told the loss of the note left with the cancel of ${entry.what}, kept in memory as it was written, `
+                        + `${mayBeStored ? 'may be lost' : 'is lost'}: storing it when the writes were stored threw (${thrownReason(error)}), so the note's author is told by a notice once the hold ends`);
+                    return;
+                }
+                return;
+            }
+            if (metadata?.kind !== 'subconscious-note' || typeof metadata.epochId !== 'string')
+                return;
+            for (const entry of this.deferredCancels.values()) {
+                if (entry.for.epochId !== metadata.epochId || entry.note === undefined || !entry.noteSettled || !entry.heldInMemory || entry.lostInRelease)
+                    continue;
+                const reason = thrownReason(error);
+                delete entry.noteSettled;
+                delete entry.heldInMemory;
+                entry.lostAtRelease = { reason: 'note-undelivered', by: 'itself', error: reason, ...(mayBeStored ? { mayBeStored: true } : {}) };
+                console.error(`[tune-out] the note left with the cancel of ${entry.what}, kept in memory as it was written, ${mayBeStored ? 'may be lost' : 'is lost'}: `
+                    + `storing it when the writes were stored threw (${reason}), so its author is told so once the hold ends, and it isn't written again`);
+                return;
+            }
+        }
+        catch (err) {
+            console.error(`[tune-out] a write kept in memory and lost when the writes were stored could not be matched to a waiting cancel's note: ${thrownReason(err)}`);
+        }
+    }
+    /**
+     * A write the framework kept in memory while writes were held, stored when
+     * it stored them (its replay landed), by its metadata as it was given:
+     * heldWriteLost's sibling, called from the same release. What a queued
+     * cancel kept in memory so (heldInMemory) is in the store now, so a stop
+     * no longer loses it: the queued note written by the cancel's own run or
+     * ahead of another cancel's release (`subconscious-note`, of the cancel's
+     * epoch) counts as delivered, and a release that told its loss
+     * (`tune-out-cancel` with `lostNote`, queuedNoteFirst) as told. The cancel
+     * can still wait after that (writes held again before it runs, or a run
+     * that throws before it records the end): a stop then drops it as one
+     * whose note is settled, telling the author nothing false. A loss notice
+     * whose own write was kept so (writeLossNotice: a hold begun at it) is
+     * written now, by its id (`lossNoticeId`): it leaves the notices kept, and
+     * the store's record, so it isn't written a second time (Weft, #844). Any
+     * other write changes nothing. Never throws.
+     */
+    heldWriteStored(metadata) {
+        try {
+            if (metadata?.kind === 'tune-out-note-undelivered' && typeof metadata.lossNoticeId === 'string') {
+                for (const [author, kept] of this.lossNotices) {
+                    const at = kept.findIndex((notice) => notice.id === metadata.lossNoticeId);
+                    if (at < 0)
+                        continue;
+                    const [notice] = kept.splice(at, 1);
+                    if (kept.length === 0)
+                        this.lossNotices.delete(author);
+                    console.error(`[tune-out] ${author} is told ${lossSubject(notice)}: the notice, kept in memory as it was written, is stored now, so it isn't written again`);
+                    // Brought in line now, or, while writes are still held, once they are stored.
+                    this.writeLossRecord();
+                    return;
+                }
+                return;
+            }
+            if (typeof metadata?.epochId !== 'string')
+                return;
+            const note = metadata.kind === 'subconscious-note';
+            if (!note && !(metadata.kind === 'tune-out-cancel' && metadata.lostNote === true))
+                return;
+            for (const entry of this.deferredCancels.values()) {
+                if (entry.for.epochId !== metadata.epochId || entry.note === undefined || !entry.noteSettled || !entry.heldInMemory)
+                    continue;
+                // A note's write settled one whose note went out; a release's, one whose loss it told.
+                if (note === (entry.lostInRelease !== undefined))
+                    continue;
+                delete entry.heldInMemory;
+                return;
+            }
+        }
+        catch (err) {
+            console.error(`[tune-out] a write kept in memory and stored when the writes were stored could not be matched to a waiting cancel: ${thrownReason(err)}`);
+        }
+    }
+    /**
+     * A queued cancel back on the queue (`key`) after a run that didn't end
+     * its hold: one that threw, or met writes held again (waitForWrites). A
+     * cancel queued there meanwhile, for the same epoch (a trace listener's,
+     * during the run), joins it, as a later cancel joins one waiting
+     * (deferCancel): the run's stands, with its reason and its note, as it
+     * was (settled, or told in a release), and takes the later one's askers,
+     * and its note where it has none, or where its own went out already
+     * (noteDelivered: the run delivered it, and failed before the end), the
+     * later note then going out when the hold ends; a later note beside its
+     * own still to go out is dropped,
+     * told (dropDeferred, `superseded`), its caller having been answered as
+     * waiting. One queued for a later epoch leaves the run nothing to end: it
+     * is dropped, told (dropQueued).
+     */
+    requeue(key, entry) {
+        const waiting = this.deferredCancels.get(key);
+        if (!waiting) {
+            this.deferredCancels.set(key, entry);
+        }
+        else if (waiting.for.epochId !== entry.for.epochId) {
+            this.dropQueued(entry, { reason: 'hold-ended', current: waiting.for.epochId });
+        }
+        else {
+            entry.askers = [...entry.askers, ...waiting.askers.filter((asker) => !entry.askers.includes(asker))];
+            this.deferredCancels.set(key, entry);
+            if (waiting.note === undefined)
+                return;
+            if (entry.note === undefined) {
+                const { note, noteAuthor, noteSettled, lostInRelease, heldInMemory, lostAtRelease } = waiting;
+                Object.assign(entry, {
+                    note, ...(noteAuthor !== undefined ? { noteAuthor } : {}), ...(noteSettled ? { noteSettled } : {}),
+                    ...(lostInRelease ? { lostInRelease } : {}), ...(heldInMemory ? { heldInMemory } : {}),
+                    ...(lostAtRelease ? { lostAtRelease } : {}),
+                });
+                return;
+            }
+            // The run's own note went out (its sync, or a step after, failed
+            // before the end): the later note isn't dropped beside it, and its
+            // author isn't told that one is still to go out.
+            if (noteDelivered(entry) && !waiting.noteSettled) {
+                takeLaterNote(entry, waiting.note, waiting.noteAuthor);
+                return;
+            }
+            this.dropDeferred(waiting, { reason: 'superseded' });
+        }
+    }
+    /** Where a hold is, as askTurnForLoss names it: the all-except hold's, or the channel shown. */
+    whereOf(at) {
+        if (at.scope)
+            return 'all-except';
+        try {
+            return this.shown(at.serverId, at.channelId);
+        }
+        catch {
+            return at.channelId;
+        }
+    }
+    /**
+     * A queued cancel off the queue with its work undone (`drop`), as
+     * dropDeferred tells it, its note as it stands: one whose loss a release
+     * told is told so (lossesToldInRelease), where its hold has ended
+     * (`hold-ended`); one delivered, or told lost already, isn't told lost
+     * again: its drop is logged and traced as one with no note, unless the
+     * write that settled it is kept in memory at a stop (heldInMemory), which
+     * loses it; one stored since (heldWriteStored) is settled. One whose write
+     * was lost when the writes were stored (lostAtRelease) isn't settled: it
+     * is told lost by this drop, once.
+     */
+    dropQueued(entry, drop) {
+        if (entry.lostInRelease && drop.reason === 'hold-ended') {
+            this.lossesToldInRelease([entry], this.whereOf(entry.for));
+            return;
+        }
+        // At a stop, a note whose delivery, or the release that told its loss,
+        // is a write kept in memory (heldInMemory) is lost with that write: told
+        // lost with the cancel, as one not settled is.
+        if (drop.reason === 'stopped' && entry.note !== undefined && entry.heldInMemory) {
+            this.dropDeferred(entry, drop);
+            return;
+        }
+        if (entry.note !== undefined && entry.noteSettled) {
+            const { note: _told, ...settled } = entry;
+            this.dropDeferred(settled, drop);
+            return;
+        }
+        this.dropDeferred(entry, drop);
+    }
+    /**
+     * Queued cancels leaving the queue with their hold ended, by the run that
+     * ended it or after it: a note whose loss a release told (lostInRelease;
+     * the release this run wrote, or an earlier cancel's, not made durable
+     * then) is traced and logged as lost now, as that release says, and the
+     * subconscious is asked for a turn to read it (at `where`), once.
+     */
+    lossesToldInRelease(entries, where) {
+        let told = false;
+        for (const entry of new Set(entries)) {
+            const lost = entry?.lostInRelease;
+            if (!entry || !lost)
+                continue;
+            delete entry.lostInRelease;
+            this.dropDeferred(entry, lost, 'release');
+            told = true;
+        }
+        if (told)
+            this.askTurnForLoss(where);
+    }
+    /**
+     * A deferred cancel taken off the queue without what it was for being
+     * done (`drop`, DeferredDrop), told on stderr and as a trace
+     * (`tune-out:deferred-cancel-dropped`) with the epoch it was asked for. A
+     * note it carried is lost: the trace names its author (noteAuthorOf), and
+     * the author is told so in its own context where it still exists, a
+     * reader fork whose run has ended being written nothing (tellNoteLost),
+     * unless the release of the cancel that ended the hold tells it already
+     * (`told` release, queuedNoteFirst): no second notice is written then. A
+     * note that may be stored after all (lostAtRelease, `mayBeStored`) is
+     * traced so (`noteMayBeStored`, with the `error`), as its notice says it.
+     */
+    dropDeferred(entry, asked, told = 'notice') {
+        const { epochId, serverId, channelId, scope } = entry.for;
+        const noteLost = entry.note !== undefined;
+        const author = noteLost ? this.noteAuthorOf(entry) : undefined;
+        // A note whose store couldn't tell whether it landed (lostAtRelease,
+        // `mayBeStored`) may be stored: a stop's drop, or one for a hold that
+        // ended without it, says so (`noteUnknown`), never that it was lost.
+        const drop = noteLost ? withUnknownNote(asked, entry.lostAtRelease) : asked;
+        const noteUnknown = drop.reason === 'hold-ended' || drop.reason === 'stopped' ? drop.noteUnknown : undefined;
+        const unknown = noteUnknown !== undefined;
+        if (drop.reason === 'hold-ended') {
+            const current = drop.current;
+            console.error(`[tune-out] the cancel of ${entry.what}, asked for while writes were held in memory for epoch ${epochId}, is dropped: `
+                + `that epoch's hold ended without it${current !== undefined ? `, and epoch ${current} holds there now, which it was not asked for` : ''}, `
+                + `so it ends nothing${noteLost ? `, and the note it carried ${unknown ? 'may not have been' : 'is not'} delivered` : ''}`);
+        }
+        else if (drop.reason === 'stopped') {
+            console.error(`[tune-out] stopping: the cancel of ${entry.what}, asked for while writes were held in memory for epoch ${epochId}, `
+                + `ends nothing, the tune-out staying in force on disk`
+                + (noteLost ? `, and the note${author !== undefined ? ` ${author} left` : ''} with it ${unknown ? 'may not have been' : 'is not'} delivered` : ''));
+        }
+        else if (drop.reason === 'superseded') {
+            console.error(`[tune-out] the cancel of ${entry.what}, asked for while an earlier cancel of epoch ${epochId} was running, joins that one, `
+                + `whose note stands${noteLost ? `, so the note${author !== undefined ? ` ${author} left` : ''} with it is not delivered` : ''}`);
+        }
+        else {
+            console.error(`[tune-out] the note${author !== undefined ? ` ${author} left with` : ' carried by'} the cancel of ${entry.what}, asked for while writes were held in memory for epoch ${epochId}, `
+                + `${drop.mayBeStored ? 'may be lost' : 'is lost'}: ${drop.by === 'another' ? 'another cancel' : 'that cancel itself, when it ran,'} ended that hold, `
+                + `and the note ${drop.mayBeStored ? 'may not have been' : 'could not be'} delivered: ${drop.error}`
+                + (told === 'release' ? '; the release of the cancel that ended it says so' : ''));
+        }
+        // Its loss kept before the trace, so a stop from a listener of the
+        // trace keeps it in the store with the others (stop). Told, it is
+        // settled: neither a write kept in memory (heldInMemory) nor one lost
+        // when the writes were stored (lostAtRelease) tells it again.
+        if (noteLost) {
+            entry.noteSettled = true;
+            delete entry.heldInMemory;
+            delete entry.lostAtRelease;
+            if (told === 'notice')
+                this.tellNoteLost(entry, author, drop);
+        }
+        this.hooks.emitTrace({
+            type: 'tune-out:deferred-cancel-dropped', serverId, channelId, epochId,
+            ...(scope ? { scope } : {}),
+            reason: drop.reason,
+            ...(drop.reason === 'hold-ended' && drop.current !== undefined ? { currentEpochId: drop.current } : {}),
+            noteLost,
+            ...(author !== undefined ? { noteAuthor: author } : {}),
+            // A note that may be stored after all (`mayBeStored`, `noteUnknown`)
+            // is marked so, with what the store couldn't tell, as its author's
+            // notice says it: not delivered, read alone, would be a known loss.
+            ...(drop.reason === 'note-undelivered' ? { error: drop.error } : noteUnknown !== undefined ? { error: noteUnknown } : {}),
+            ...((drop.reason === 'note-undelivered' && drop.mayBeStored) || unknown ? { noteMayBeStored: true } : {}),
+        });
+    }
+    /**
+     * Whose a queued cancel's note is: the name deliverReaderNote would
+     * deliver it under, the persistent subconscious's, else the reader fork's
+     * that left it (`noteAuthor`). Undefined where neither is known; the
+     * fork's name where the subconscious's can't be read.
+     */
+    noteAuthorOf(entry) {
+        try {
+            return this.hooks.subconsciousName() ?? entry.noteAuthor;
+        }
+        catch {
+            return entry.noteAuthor;
+        }
+    }
+    /**
+     * The author of a queued cancel's lost note (`author`, noteAuthorOf), told
+     * in its own context that the note was not delivered and why (`drop`):
+     * its cancel was answered as waiting, so nothing else tells it. The
+     * notice is kept (lossNotices) and written now (writeLossNotices). One
+     * whose write fails stays kept, its first failure traced, and is tried
+     * again at the next release and at the retry, which this arms, until it
+     * is written; what dropped the cancel goes on either way. One for the
+     * persistent subconscious is kept in the store as well (writeLossRecord),
+     * so a stop leaves it for the next boot to write (restoreLossNotices); a
+     * reader fork's is lost at a stop, as the fork's run is. While writes are
+     * held it waits for their release, as the cancels do. A reader fork that
+     * has ended is no agent the framework writes to any more: it is written
+     * nothing, the loss reaching no one, which is traced (writeLossNotice),
+     * and the trace of the drop (dropDeferred) still names the fork. An
+     * author not known is logged. One told at the stop is kept, not written:
+     * the stop keeps it in the store with the others (writeLossRecord), for
+     * the next boot; one told after the stop has kept those (a trace
+     * listener's stop, during the run of a cancel it found off its queue) is
+     * added to that record (keepAfterStop). Where the store refuses that record too, the stop's
+     * stamp leaves the hold out (writeStopStamp), and the next boot tells the
+     * subconscious, for a hold still on record, what that run's rows show of
+     * a cancel of it then waiting (noteUnstampedStop); a stop that can't write
+     * its stamp either leaves the one this run's boot wrote, which covers no
+     * hold, so the next boot tells it the same, where that one landed. Where
+     * the store refused every one, this run's too, nothing in the store says
+     * the stop came: the next boot reads no stamp as a first start (#844
+     * round 8, Weft) and tells nothing. Where every
+     * write refuses through the stop (the note, the notice, the store's
+     * record) and no release carries the loss (queuedNoteFirst), for a hold
+     * that has ended, the trace of the drop, with that of the notice's
+     * failure, and the log are all that is left of it: nothing else here
+     * outlives the stop.
+     */
+    tellNoteLost(entry, author, drop) {
+        if (author === undefined) {
+            console.error(`[tune-out] the note carried by the cancel of ${entry.what} is lost, and no author of it is known here, so none is told`);
+            return;
+        }
+        const { epochId, serverId, channelId, scope, current } = entry.for;
+        // In persistent mode the author is the subconscious (noteAuthorOf), and
+        // no reader fork is configured; with reader forks, a fork.
+        let persistent;
+        try {
+            persistent = this.hooks.subconsciousName() === author;
+        }
+        catch {
+            persistent = typeof this.hooks.invokeReader !== 'function';
+        }
+        const notice = {
+            id: randomUUID(),
+            for: { epochId, serverId, channelId, ...(scope ? { scope } : {}), current },
+            what: entry.what, drop, keptAtMs: Date.now(),
+            ...(persistent ? { persistent: true } : {}),
+            ...(drop.reason === 'stopped' && this.stopped ? { stopBound: this.runBound() } : {}),
+        };
+        const kept = this.lossNotices.get(author);
+        if (kept)
+            kept.push(notice);
+        else
+            this.lossNotices.set(author, [notice]);
+        if (this.stopped) {
+            if (this.stopDone)
+                this.keepAfterStop();
+            return;
+        }
+        this.writeLossNotices(author);
+        if (this.lossNotices.size > 0)
+            this.armDeferredRetry();
+    }
+    /**
+     * Write the loss notices kept (lossNotices), `author`'s or every
+     * author's, each author's in the order its losses came: one written, or
+     * whose author has ended, leaves the queue; one whose write fails stays
+     * for the next try (writeLossNotice), and that author's later ones with
+     * it, behind it. None is written while its author's writes are
+     * held (writesHeld(author)): the framework would keep it in memory and answer an
+     * empty id, which then couldn't tell a kept write from an ended author's
+     * dropped one. The release or the retry writes them. Nor is one the boot
+     * read from the store's record while whether it was written before the
+     * stop can't be read (checkLossNoticesWritten). The store's record, where
+     * it wasn't read in yet, is read first, and while it can't be, none of
+     * the persistent subconscious's is written, as one it keeps would come
+     * after it. Then the store's
+     * record of the persistent subconscious's kept notices is brought in
+     * line (writeLossRecord). A loss told for an author while its notice is
+     * being written (a listener of that write) waits behind it, written next
+     * in this pass. Each leaves its author's list just before it
+     * is written, as a deferred cancel leaves its queue, so a stop meanwhile
+     * (a listener of the write) keeps those not written yet in the store
+     * (stop), and none is written after it; one whose write that stop met and
+     * failed is kept as a loss told after the stop is (keepAfterStop). Never
+     * throws.
+     */
+    writeLossNotices(author) {
+        // A record not read in yet (a read at boot threw, or a branch move) is
+        // read first: the notices it keeps are older than any kept since, and
+        // are written first (AF #844 review 5, #40).
+        if (this.lossRecordUnread)
+            this.readLossRecord();
+        this.checkLossNoticesWritten();
+        for (const name of author !== undefined ? [author] : [...this.lossNotices.keys()]) {
+            // A loss told for this author from a listener of its notice's write
+            // (that write's trace, or its failure's) only joins the queue, behind
+            // the one in flight: written now, it went ahead of it (AF #844
+            // review 5, #24). This pass writes it next.
+            if (this.lossNoticesWriting.has(name))
+                continue;
+            // Each from the head: one that fails goes back there, the rest
+            // waiting behind it for the next try, so the author is told in the
+            // order the losses came; a loss told meanwhile is kept after them.
+            for (;;) {
+                const kept = this.lossNotices.get(name);
+                const notice = kept?.[0];
+                // One the boot read from the record, which may be written already,
+                // waits until that can be read (checkLossNoticesWritten), and those
+                // after it with it.
+                // Nor is the persistent subconscious's while that record can't be
+                // read: one it keeps would be written after it.
+                if (!kept || !notice || this.stopped || this.writesHeldNow(name) || this.lossNoticesUnchecked.has(notice.id)
+                    || (notice.persistent && this.lossRecordUnread))
+                    break;
+                kept.shift();
+                if (kept.length === 0)
+                    this.lossNotices.delete(name);
+                this.lossNoticesWriting.add(name);
+                let written;
+                try {
+                    written = this.writeLossNotice(name, notice);
+                }
+                finally {
+                    this.lossNoticesWriting.delete(name);
+                }
+                if (written !== 'failed')
+                    continue;
+                this.lossNotices.set(name, [notice, ...(this.lossNotices.get(name) ?? [])]);
+                break;
+            }
+        }
+        if (this.stopped) {
+            if (this.stopDone)
+                this.keepAfterStop();
+            return;
+        }
+        this.writeLossRecord();
+    }
+    /** Where the persistent subconscious's kept loss notices are kept: a snapshot state, beside the coordinator's others. */
+    get lossNoticesStateId() {
+        return `tune-out/${this.hooks.primaryName() ?? 'default'}/loss-notices`;
+    }
+    /** The persistent subconscious's kept notices (lossNotices) in the record's form, in the order kept. */
+    persistedLossNotices() {
+        const out = [];
+        for (const [author, kept] of this.lossNotices) {
+            for (const notice of kept) {
+                if (!notice.persistent)
+                    continue;
+                const { epochId, serverId, channelId, scope } = notice.for;
+                const { drop } = notice;
+                out.push({
+                    id: notice.id, author, what: notice.what,
+                    for: { epochId, serverId, channelId, ...(scope ? { scope } : {}) },
+                    drop: drop.reason === 'hold-ended'
+                        ? { reason: 'hold-ended', ...(drop.current !== undefined ? { current: drop.current } : {}), ...(drop.noteUnknown !== undefined ? { noteUnknown: drop.noteUnknown } : {}) }
+                        : drop.reason === 'stopped'
+                            ? { reason: 'stopped', ...(drop.noteUnknown !== undefined ? { noteUnknown: drop.noteUnknown } : {}) }
+                            : drop.reason === 'superseded'
+                                ? { reason: drop.reason }
+                                : drop.reason === 'unstamped-stop'
+                                    ? { ...drop }
+                                    : { reason: 'note-undelivered', by: drop.by, error: drop.error, ...(drop.mayBeStored ? { mayBeStored: true } : {}) },
+                    keptAtMs: notice.keptAtMs,
+                    ...(notice.keptAtSequence !== undefined ? { keptAtSequence: notice.keptAtSequence } : {}),
+                    ...(notice.traced ? { traced: true } : {}),
+                    ...(notice.stopBound ? { stopBound: notice.stopBound } : {}),
+                });
+            }
+        }
+        return out;
+    }
+    /**
+     * Keep the persistent subconscious's kept loss notices in the store
+     * (`tune-out/<primary>/loss-notices`, PersistedLossNotice), as they are
+     * in memory: one kept is added, one written leaves. Only when they
+     * changed since the record was last written or read, or a write of it
+     * failed; never while writes are held (writesHeld): the release, the
+     * retry or the stop writes it then. Not over a record that couldn't be
+     * read (readLossRecord, tried again first). A write that fails, or can't
+     * be made durable at once (stateDurable), is logged, and the notices stay
+     * kept in memory, written or tried again as before;
+     * a stop meanwhile loses them. At `stop`, written whenever one is kept,
+     * held writes or not, and answers whether the record holds them. At
+     * `boot`, written where they changed, held writes or not, as the boot's
+     * stamp is (noteUnstampedStop). Never throws.
+     */
+    writeLossRecord(at) {
+        try {
+            const notices = this.persistedLossNotices();
+            const shape = JSON.stringify(notices);
+            if (at !== 'stop' && shape === this.lossRecordShape && !this.lossRecordStale)
+                return true;
+            if (at === 'stop' && notices.length === 0 && !this.lossRecordStale && !this.lossRecordUnread)
+                return true;
+            if (at === undefined && this.writesHeldNow()) {
+                this.lossRecordStale = true;
+                return false;
+            }
+            if (this.lossRecordUnread && !this.readLossRecord()) {
+                this.lossRecordStale = true;
+                console.error(`[tune-out] the loss notices kept for the subconscious (${this.lossNoticesStateId}) can't be read, so they aren't written over: `
+                    + `${notices.length === 0 ? 'none is' : `${notices.length} kept now ${notices.length === 1 ? 'is' : 'are'}`} not added to them`);
+                return false;
+            }
+            // Read again just now (readLossRecord): what it kept is in memory too.
+            const all = this.persistedLossNotices();
+            this.channelRegistry.writeCoordinatorState(this.lossNoticesStateId, { v: 1, pendingLossNotices: all });
+            // A boot reads it after a crash, and the stop's stamp counts on it:
+            // durable now, or not kept (the stamp leaving its holds out).
+            if (!this.stateDurable()) {
+                this.lossRecordStale = true;
+                console.error(`[tune-out] the loss notices kept for the subconscious (${this.lossNoticesStateId}) were written but could not be made durable, `
+                    + `so they are written again${at === 'stop' ? ', and the stop counts them as not kept' : ' at the next change or the stop'}`);
+                return false;
+            }
+            this.lossRecordShape = JSON.stringify(all);
+            this.lossRecordIds = new Set(all.map((n) => n.id));
+            this.lossRecordStale = false;
+            return true;
+        }
+        catch (err) {
+            this.lossRecordStale = true;
+            console.error(`[tune-out] the loss notices kept for the subconscious (${this.lossNoticesStateId}) couldn't be written to the store, `
+                + `so they are kept in memory only${at === 'stop' ? ', which the stop clears' : ', and a stop before they are written loses them'}: ${thrownReason(err)}`);
+            return false;
+        }
+    }
+    /**
+     * Read the persistent subconscious's kept loss notices from the store
+     * (writeLossRecord) into memory (lossNotices), ahead of any kept since for
+     * the same author: at boot (restoreLossNotices), and, where it couldn't
+     * be read before (a boot's read threw, or a branch move), before the
+     * notices are written (writeLossNotices) and before the record is
+     * written. Answers whether it was read.
+     * One that throws is logged and answers false: nothing is written over it
+     * until it is read. A record not in this format (`{ v: 1,
+     * pendingLossNotices }`) reads as none kept, logged, and is written over
+     * at the next change; an entry this version can't read is logged and left
+     * out, so the next write drops it. Those read in wait to be checked
+     * against the subconscious's rows (lossNoticesUnchecked), as a boot's do.
+     */
+    readLossRecord() {
+        let raw;
+        try {
+            raw = this.channelRegistry.readCoordinatorState(this.lossNoticesStateId);
+        }
+        catch (err) {
+            this.lossRecordUnread = true;
+            console.error(`[tune-out] the loss notices kept for the subconscious (${this.lossNoticesStateId}) can't be read, so none is written now, `
+                + `and nothing is written over them until they can be read: ${thrownReason(err)}`);
+            return false;
+        }
+        this.lossRecordUnread = false;
+        this.lossRecordIds = new Set();
+        if (raw == null)
+            return true;
+        const record = raw;
+        if (record.v !== 1 || !Array.isArray(record.pendingLossNotices)) {
+            console.error(`[tune-out] the loss notices kept for the subconscious (${this.lossNoticesStateId}) aren't in a form this version reads, so none is written; the next change writes over them`);
+            return true;
+        }
+        const known = new Set([...this.lossNotices.values()].flat().map((n) => n.id));
+        const restored = new Map();
+        let unreadable = 0;
+        for (const value of record.pendingLossNotices) {
+            const entry = readPersistedLossNotice(value);
+            if (!entry) {
+                unreadable++;
+                continue;
+            }
+            this.lossRecordIds.add(entry.id);
+            if (known.has(entry.id))
+                continue;
+            known.add(entry.id);
+            const { epochId, serverId, channelId, scope } = entry.for;
+            const notice = {
+                id: entry.id,
+                for: { epochId, serverId, channelId, ...(scope ? { scope } : {}), current: this.epochHoldingAt(serverId, channelId, scope) },
+                what: entry.what, drop: entry.drop, keptAtMs: entry.keptAtMs, persistent: true,
+                ...(entry.keptAtSequence !== undefined ? { keptAtSequence: entry.keptAtSequence } : {}),
+                ...(entry.traced ? { traced: true } : {}),
+                ...(entry.stopBound ? { stopBound: entry.stopBound } : {}),
+            };
+            restored.set(entry.author, [...(restored.get(entry.author) ?? []), notice]);
+        }
+        for (const [author, notices] of restored) {
+            this.lossNotices.set(author, [...notices, ...(this.lossNotices.get(author) ?? [])]);
+            // Written before the record was last read may be (a stop, or a
+            // record the store refused, between the two): each waits until the
+            // subconscious's rows say whether (checkLossNoticesWritten).
+            for (const notice of notices)
+                this.lossNoticesUnchecked.add(notice.id);
+        }
+        if (unreadable > 0) {
+            console.error(`[tune-out] ${unreadable} of the loss notices kept for the subconscious (${this.lossNoticesStateId}) can't be read by this version, `
+                + 'so they are not written, and the next write of the record leaves them out');
+        }
+        // What the store holds, so the next write is made when memory differs:
+        // at once where an entry was left out.
+        this.lossRecordShape = unreadable > 0 ? '' : JSON.stringify(this.persistedLossNotices());
+        return true;
+    }
+    /**
+     * Make the coordinator's own record just written (the loss record, a
+     * stamp) durable (commitDeliveries), answering whether it is: a boot reads
+     * them after a crash, which a write the store's periodic sync hadn't
+     * reached yet doesn't outlive. Left out, a write counts as durable.
+     */
+    stateDurable() {
+        try {
+            return this.hooks.commitDeliveries?.() !== false;
+        }
+        catch {
+            return false;
+        }
+    }
+    /**
+     * The persistent subconscious's rows as a boot reads them for what it was
+     * told already: its window, and its own stored rows
+     * (subconsciousStoredMessages), which hold a notice its window doesn't yet.
+     * Either read that throws is logged, with what follows (`then`), and read
+     * as none; `unread` says one did.
+     */
+    subconsciousRows(then) {
+        let unread = false;
+        const read = (what, rows) => {
+            try {
+                return rows?.() ?? [];
+            }
+            catch (err) {
+                unread = true;
+                console.error(`[tune-out] the subconscious's ${what} could not be read, ${then}: ${thrownReason(err)}`);
+                return [];
+            }
+        };
+        const rows = [...read('window', this.hooks.subconsciousWindow), ...read('stored rows', this.hooks.subconsciousStoredMessages)];
+        return { rows, unread };
+    }
+    /**
+     * Of the notices read from the store's record at boot (restoreLossNotices),
+     * those the subconscious's rows hold already (`lossNoticeId`: written,
+     * the record not brought in line before the stop) leave the record, not
+     * written again. Where its rows can't be read, they stay unchecked
+     * (lossNoticesUnchecked), and none of them is written (writeLossNotices)
+     * until a later try reads them.
+     */
+    checkLossNoticesWritten() {
+        if (this.lossNoticesUnchecked.size === 0)
+            return;
+        const { rows, unread } = this.subconsciousRows(`so the loss notices kept in the store, which may have been written before the stop, aren't written until it can be`);
+        if (unread)
+            return;
+        const written = new Set();
+        for (const m of rows) {
+            const id = m.metadata?.lossNoticeId;
+            if (typeof id === 'string' && this.lossNoticesUnchecked.has(id))
+                written.add(id);
+        }
+        this.lossNoticesUnchecked.clear();
+        for (const [author, kept] of this.lossNotices) {
+            const left = kept.filter((n) => !written.has(n.id));
+            if (left.length === kept.length)
+                continue;
+            console.error(`[tune-out] ${kept.length - left.length} loss notice(s) kept in the store for ${author} ${kept.length - left.length === 1 ? 'was' : 'were'} written before the last stop already, so ${kept.length - left.length === 1 ? 'it leaves' : 'they leave'} the record`);
+            if (left.length > 0)
+                this.lossNotices.set(author, left);
+            else
+                this.lossNotices.delete(author);
+        }
+    }
+    /** The epoch holding where a kept notice's cancel was (DeferredFor's `current`): the channel's tune-out, or the all-except hold. */
+    epochHoldingAt(serverId, channelId, scope) {
+        return scope === 'all-except'
+            ? () => this.getAllExcept()?.params.epochId
+            : () => this.channelRegistry.getTuneOutState(serverId, channelId)?.params.epochId;
+    }
+    /**
+     * The holds on record, a channel's and the all-except hold (its excepted
+     * channel, with `scope`): the registry's record of each channel's, whether
+     * or not the channel is registered yet, as at boot it isn't
+     * (tuneOutsOnRecord; the registered ones, listActive, where the registry
+     * has no such list). May throw.
+     */
+    holdsOnRecord() {
+        const registry = this.channelRegistry;
+        const channels = typeof registry.tuneOutsOnRecord === 'function'
+            ? registry.tuneOutsOnRecord.call(this.channelRegistry)
+            : this.listActive();
+        const held = this.getAllExcept();
+        return [
+            ...channels.filter(({ params }) => typeof params.epochId === 'string')
+                .map(({ serverId, channelId, params }) => ({
+                epochId: params.epochId, serverId, channelId,
+                ...(typeof params.startedAtSequence === 'number' ? { startedAt: params.startedAtSequence } : {}),
+            })),
+            ...(held ? [{
+                    epochId: held.params.epochId, serverId: held.params.except.serverId, channelId: held.params.except.channelId, scope: 'all-except',
+                    ...(typeof held.params.startedAtSequence === 'number' ? { startedAt: held.params.startedAtSequence } : {}),
+                }] : []),
+        ];
+    }
+    /** Where the last stop's stamp is kept (StopStamp): a snapshot state, beside the loss notices. */
+    get stopStampStateId() {
+        return `tune-out/${this.hooks.primaryName() ?? 'default'}/stop-stamp`;
+    }
+    /**
+     * At the stop, once the loss notices are written or kept: the stamp
+     * (StopStamp) naming the holds on record now, a channel's and the
+     * all-except hold, whose waiting cancels this stop accounted for, written
+     * and made durable (stateDurable), as the loss record before it is. Left
+     * out are the epochs of a note whose loss couldn't be kept (`unaccounted`;
+     * every persistent notice's where the store refused the record,
+     * `recorded` false), and of one still kept in memory at the stop, which
+     * the stamp names (`notesKept`, stopNotesKept), so the next boot tells
+     * the subconscious of them (noteUnstampedStop), that a kept note may be
+     * lost where that run's rows don't hold it. A stamp the store refuses too is logged: nothing
+     * more can be done at the stop. The next boot then finds this run's own
+     * stamp, covering no hold, where it landed, and tells the subconscious of
+     * each hold; where the store refused that too, it finds none, which it
+     * reads as a first start, and tells nothing. Never throws.
+     */
+    writeStopStamp(recorded, unaccounted) {
+        try {
+            if (!recorded) {
+                for (const kept of this.lossNotices.values()) {
+                    for (const notice of kept)
+                        if (notice.persistent)
+                            unaccounted.add(notice.for.epochId);
+                }
+            }
+            const onRecord = this.holdsOnRecord().map((hold) => hold.epochId);
+            const owed = this.wakesInStop;
+            const kept = onRecord.filter((epochId) => this.stopNotesKept.has(epochId) && unaccounted.has(epochId));
+            const stamp = {
+                v: 1, epochs: onRecord.filter((epochId) => !unaccounted.has(epochId)), ...this.runBound(),
+                ...(owed.resident || owed.subconscious ? { wakesOwed: { ...owed } } : {}),
+                ...(kept.length > 0 ? { notesKept: kept } : {}),
+            };
+            this.channelRegistry.writeCoordinatorState(this.stopStampStateId, stamp);
+            if (!this.stateDurable())
+                throw new Error('it was written but could not be made durable');
+        }
+        catch (err) {
+            console.error(`[tune-out] stopping: the stop could not be stamped (${this.stopStampStateId}), so the next boot tells the subconscious, `
+                + `for each hold still on record, what it finds of a cancel of it waiting now, where this run's own stamp landed; `
+                + `${this.markerPending ? 'it did not either, so nothing will' : 'it did'}: ${thrownReason(err)}`);
+        }
+    }
+    /**
+     * At boot (resumeActiveEpochs), for the holds on record (`onRecord`, read
+     * before any is resumed or ended): those the last stop's stamp doesn't
+     * cover (writeStopStamp; after a crash the stamp is the one the boot
+     * before wrote, covering none; one the store refused at a stop is that
+     * boot's too) may have had a cancel waiting, with a note, which that stop
+     * didn't account for. No stamp at all is a first boot on this version
+     * (every boot writes one), not a crash: every hold counts as covered. A
+     * hold whose waiting cancel's loss the stop kept in the store
+     * (`stopKept`, restoreLossNotices) is accounted for. For the others, the
+     * rows from that run on (the stamp's `runStartedAt`) say what they can
+     * (UnstampedStop): a release that told the queued note's loss
+     * (`lostNote`, queuedNoteFirst) needs nothing more; a release of that
+     * epoch stored since the cancel was asked (or since the hold and the run
+     * began) is `ran`; a note of that epoch delivered with no release since,
+     * `delivered`; the subconscious's own `cancel_tuneout` of it answered as
+     * waiting (askedCancelOf), `asked`; else `unknown`, told conditionally.
+     * Each by a loss notice (`unstamped-stop`) kept and written as the others
+     * are (writeLossNotices), with a turn to read it, kept in the store and
+     * tried again where the store still refuses; traced as
+     * `tune-out:stop-unrecorded` with what was `found`. A hold already told so
+     * (its notice in the subconscious's window, or kept to be written) is told
+     * again only what says more (FOUND_RANK), or another note. A reader fork
+     * is told nothing: none outlives the stop. The stamp is then written again
+     * covering no hold and naming this run's start (`runStartedAt`, and its
+     * `branch`), so it can't cover a later stop and a crash during this run
+     * leaves it so: last, once those notices are written or kept in the store,
+     * and, while one is neither, naming the last stop's bound instead
+     * (runBound), so a crash meanwhile reads the same rows again. A write that
+     * fails is kept and tried again as the loss notices are
+     * (writePendingMarker), and meanwhile a waiting cancel's answer says so.
+     * A stamp that can't be read, or isn't in this version's form, covers
+     * nothing; one whose run start is on another branch than the store's now
+     * bounds nothing here, sequences being each branch's own, so no row is
+     * read as that run's and each hold it doesn't cover is told conditionally
+     * (`unknown`). Never throws.
+     */
+    noteUnstampedStop(onRecord, stopKept, bootHead) {
+        try {
+            let raw;
+            let readable = true;
+            try {
+                raw = this.channelRegistry.readCoordinatorState(this.stopStampStateId);
+            }
+            catch (err) {
+                readable = false;
+                console.error(`[tune-out] the last stop's stamp (${this.stopStampStateId}) can't be read, so it covers no hold: ${thrownReason(err)}`);
+            }
+            const stamp = raw;
+            const covered = new Set();
+            const notesKept = new Set();
+            let since;
+            let stampBranch;
+            const firstBoot = readable && raw == null;
+            if (stamp && stamp.v === 1 && Array.isArray(stamp.epochs)) {
+                for (const epochId of stamp.epochs)
+                    if (typeof epochId === 'string')
+                        covered.add(epochId);
+                if (Array.isArray(stamp.notesKept))
+                    for (const epochId of stamp.notesKept)
+                        if (typeof epochId === 'string')
+                            notesKept.add(epochId);
+                if (typeof stamp.runStartedAt === 'number')
+                    since = stamp.runStartedAt;
+                if (typeof stamp.branch === 'string')
+                    stampBranch = stamp.branch;
+            }
+            else if (raw != null) {
+                console.error(`[tune-out] the last stop's stamp (${this.stopStampStateId}) isn't in a form this version reads, so it covers no hold`);
+            }
+            if (firstBoot && onRecord.length > 0) {
+                console.error(`[tune-out] no stop stamp is kept (${this.stopStampStateId}): a first start on a version that stamps its stops, `
+                    + 'so the holds on record count as stopped cleanly');
+            }
+            if (stamp && stamp.v === 1 && stamp.wakesOwed && typeof stamp.wakesOwed === 'object')
+                this.askWakesOwed(stamp.wakesOwed);
+            // This run begins at the store's head as the boot found it, before
+            // the boot's own releases (an end time passed, a wake budget spent):
+            // those are this run's, not the last one's. Its marker is written last
+            // (finally, below), once what this boot reads of the last stop's
+            // stamp is told or kept: written first, a crash or a refused record
+            // between the two left the next boot reading from this run's start,
+            // past what the notice told of.
+            this.runStartedAt = bootHead;
+            this.runBranch = this.branchNow();
+            if (this.runBranch !== undefined)
+                this.runStarts.set(this.runBranch, bootHead);
+            this.carriedBound = {
+                ...(since !== undefined ? { runStartedAt: since } : {}), ...(stampBranch !== undefined ? { branch: stampBranch } : {}),
+            };
+            // A run start on another branch is a place on that branch: this one's
+            // sequences say nothing of it, so no row here is read as that run's.
+            const elsewhere = stampBranch !== undefined && this.runBranch !== undefined && stampBranch !== this.runBranch;
+            let told = false;
+            try {
+                this.tellUnstampedHolds(onRecord, stopKept, bootHead, { covered, notesKept, since, firstBoot, elsewhere, stampBranch });
+                told = true;
+            }
+            finally {
+                this.carriedUntold = !told;
+                if (!this.carriedNeeded())
+                    this.carriedBound = undefined;
+                this.markerPending = this.runMarker();
+                this.writePendingMarker();
+                if (this.markerPending)
+                    this.armDeferredRetry();
+            }
+        }
+        catch (err) {
+            console.error(`[tune-out] whether the last stop recorded the holds on record could not be checked at boot: ${thrownReason(err)}`);
+        }
+    }
+    /**
+     * At boot, the release turns the last stop's stamp says it dropped
+     * (StopStamp's `wakesOwed`: asked while it was under way), asked again
+     * as the boot's wake for a release row still owed asks them (the
+     * framework's `tune-out released (restored)` and `tune-out (restored)`,
+     * so a row both owed and recorded is asked once), each unless this boot
+     * asked that turn for a release of its own already. Asked once: the
+     * boot's marker is written over that stamp. Never throws.
+     */
+    askWakesOwed(owed) {
+        const ask = (name, reason, whose) => {
+            if (!name || this.releaseTurnsAsked.has(whose))
+                return;
+            try {
+                this.hooks.requestInference(name, reason, 'tune-out');
+                console.error(`[tune-out] the last stop dropped the turn a release asked for ${name} while it was under way, so it is asked for again`);
+            }
+            catch (err) {
+                console.error(`[tune-out] the turn the last stop dropped for ${name}'s release could not be asked for again: ${thrownReason(err)}`);
+            }
+        };
+        try {
+            if (owed.resident === true)
+                ask(this.hooks.primaryName(), 'tune-out released (restored)', 'resident');
+            if (owed.subconscious === true)
+                ask(this.hooks.subconsciousName(), 'tune-out (restored)', 'subconscious');
+        }
+        catch (err) {
+            console.error(`[tune-out] the turns the last stop dropped could not be asked for again: ${thrownReason(err)}`);
+        }
+    }
+    /**
+     * noteUnstampedStop's telling, for the holds on record (`onRecord`) the
+     * last stop's stamp doesn't cover (`covered`), reading that run's rows
+     * from its start (`since`) to this boot's (`bootHead`), none where its
+     * start is on another branch (`elsewhere`). May throw.
+     */
+    tellUnstampedHolds(onRecord, stopKept, bootHead, last) {
+        const { covered, since, firstBoot, elsewhere } = last;
+        let author;
+        try {
+            author = this.hooks.subconsciousName();
+        }
+        catch {
+            author = null;
+        }
+        if (!author || firstBoot)
+            return;
+        const uncovered = onRecord.filter((hold) => !covered.has(hold.epochId));
+        if (uncovered.length === 0)
+            return;
+        if (elsewhere) {
+            console.error(`[tune-out] the last stop's stamp names its run's start on branch ${JSON.stringify(last.stampBranch)}, not this one `
+                + `(${JSON.stringify(this.runBranch)}), so no row here can be told to be that run's: each hold it doesn't cover is told conditionally`);
+        }
+        // What that run's residents' rows show, by epoch: from its start to
+        // this boot's (`bootHead`), so a release this boot made isn't read as
+        // the last run's.
+        const notes = new Map();
+        // A queued cancel's own run that delivered its note names that cancel's
+        // askers on the note (NoteMetadata), by epoch, the latest: a run that
+        // wrote no release of its own records its askers nowhere else.
+        const noteRuns = new Map();
+        const releases = new Map();
+        // The newest release of each epoch that told a queued note's loss (`lostNote`).
+        const toldInRelease = new Map();
+        // Whether that run's rows were read: not where they are another
+        // branch's, or the read throws, and then whether a cancel ran isn't known.
+        let rowsRead = !elsewhere;
+        try {
+            for (const m of elsewhere ? [] : this.hooks.getStoredMessages()) {
+                if (since !== undefined && typeof m.sequence === 'number' && m.sequence <= since)
+                    continue;
+                if (bootHead !== undefined && typeof m.sequence === 'number' && m.sequence > bootHead)
+                    continue;
+                const meta = m.metadata;
+                if (typeof meta?.epochId !== 'string')
+                    continue;
+                if (meta.kind === 'subconscious-note') {
+                    notes.set(meta.epochId, Math.max(notes.get(meta.epochId) ?? -Infinity, m.sequence));
+                    const askers = Array.isArray(meta.cancel?.askers)
+                        ? meta.cancel.askers.filter((a) => typeof a === 'string') : undefined;
+                    if (askers && (noteRuns.get(meta.epochId)?.sequence ?? -Infinity) < m.sequence)
+                        noteRuns.set(meta.epochId, { sequence: m.sequence, askers });
+                }
+                else if (meta.kind === 'tune-out-cancel') {
+                    if (meta.lostNote === true)
+                        toldInRelease.set(meta.epochId, Math.max(toldInRelease.get(meta.epochId) ?? -Infinity, m.sequence));
+                    releases.set(meta.epochId, [...(releases.get(meta.epochId) ?? []), {
+                            sequence: m.sequence,
+                            ...(typeof meta.cancel?.source === 'string' ? { source: meta.cancel.source } : {}),
+                            ...(typeof meta.cancel?.reason === 'string' ? { reason: meta.cancel.reason } : {}),
+                            askers: Array.isArray(meta.cancel?.askers) ? meta.cancel.askers.filter((a) => typeof a === 'string')
+                                : typeof meta.cancel?.by === 'string' ? [meta.cancel.by] : [],
+                        }]);
+                }
+            }
+        }
+        catch (err) {
+            rowsRead = false;
+            console.error(`[tune-out] the residents' rows could not be read at boot, so what became of a note waiting at the last stop isn't known: ${thrownReason(err)}`);
+        }
+        // What the subconscious's own window shows: its calls, and what it was told already.
+        let window = [];
+        try {
+            window = this.hooks.subconsciousWindow?.() ?? [];
+        }
+        catch (err) {
+            console.error(`[tune-out] the subconscious's window could not be read at boot, so a cancel it asked for isn't named: ${thrownReason(err)}`);
+        }
+        let archived;
+        try {
+            archived = this.hooks.subconsciousGuardedResults?.();
+        }
+        catch (err) {
+            console.error(`[tune-out] the tool-result guard's audit could not be read at boot, so a result it withheld isn't read from it: ${thrownReason(err)}`);
+        }
+        const asks = elsewhere ? [] : cancelAsksIn(window, author, archived);
+        // Its rows, its window's and its stored ones (a notice written but not
+        // presented yet among them), for what it was told already.
+        const told = this.subconsciousRows('at boot, so what it was told is read without it').rows;
+        // A hold whose waiting cancel's loss the stop that wrote this stamp kept,
+        // the boot that wrote it then dying before its marker: its row names
+        // that stamp's bound (`lostAtStop`), and accounts for the hold, as the
+        // record did (restoreLossNotices).
+        const kept = new Set(stopKept);
+        for (const m of told) {
+            const meta = m.metadata;
+            const bound = meta?.kind === 'tune-out-note-undelivered' && typeof meta.epochId === 'string' ? stopBoundOf(meta.lostAtStop) : undefined;
+            if (bound && bound.runStartedAt === since && bound.branch === last.stampBranch)
+                kept.add(meta.epochId);
+        }
+        // What it was told of a hold's unrecorded stop already, and when: by
+        // the store's head when the boot that told it decided it
+        // (keptAtSequence), on its row or on a notice kept to be written; a
+        // row with none by its own sequence, a kept notice with none as told
+        // now. A notice written late, its writes held, was told then.
+        const toldBefore = (epochId) => [
+            ...told.flatMap((m) => {
+                const meta = m.metadata;
+                if (meta?.kind !== 'tune-out-note-undelivered' || meta.epochId !== epochId || !meta.stopUnrecorded)
+                    return [];
+                const found = meta.stopUnrecorded.found;
+                return found === 'delivered' || found === 'ran' || found === 'asked' || found === 'unknown'
+                    ? [{
+                            found: found, ...(typeof meta.stopUnrecorded.note === 'string' ? { note: meta.stopUnrecorded.note } : {}),
+                            at: typeof meta.stopUnrecorded.keptAtSequence === 'number' ? meta.stopUnrecorded.keptAtSequence : m.sequence,
+                            ...(meta.stopUnrecorded.rowsUnread === true ? { rowsUnread: true } : {}),
+                        }] : [];
+            }),
+            // Kept to be written, and written by this boot from the store's record
+            // (restoredTold), its window not holding them yet where it is frozen.
+            ...[...(this.lossNotices.get(author) ?? []), ...this.restoredTold].flatMap((n) => (n.drop.reason === 'unstamped-stop' && n.for.epochId === epochId
+                ? [{
+                        found: n.drop.found, ...(n.drop.note !== undefined ? { note: n.drop.note } : {}), at: n.keptAtSequence ?? Infinity,
+                        ...(n.drop.rowsUnread ? { rowsUnread: true } : {}),
+                    }] : [])),
+        ];
+        for (const hold of uncovered) {
+            const { epochId, serverId, channelId, scope } = hold;
+            const what = scope ? `the all-except hold (epoch ${epochId})` : `the tune-out of ${this.shown(serverId, channelId)} (epoch ${epochId})`;
+            if (kept.has(epochId)) {
+                console.error(`[tune-out] the last stop's stamp doesn't cover ${what}, but the stop kept the loss of its waiting note in the store, which is told`);
+                continue;
+            }
+            const asked = this.askedCancelOf(hold, since, asks, onRecord);
+            // With no ask found, a release of the epoch in that run is after the
+            // hold and the run began by construction (an epoch's release follows
+            // its entry, and the rows are that run's), so this bound can't be
+            // told from none by any store; it is kept for the reading's sake.
+            const after = asked ? asked.sequence : Math.max(hold.startedAt ?? -Infinity, since ?? -Infinity);
+            // A release that told a queued note's loss, and a note, count for
+            // this ask only where stored after it, as a release that ran does
+            // (ranAfter): one stored before is an earlier cancel's, its end
+            // unrecorded, and says nothing of the note left with a later ask
+            // (AF #844 review 5, #25).
+            if ((toldInRelease.get(epochId) ?? -Infinity) > after) {
+                console.error(`[tune-out] the last stop did not record the state of ${what}, but a release of it already told ${author} that its waiting note was lost`);
+                continue;
+            }
+            const ranAfter = (releases.get(epochId) ?? []).filter((r) => r.sequence > after);
+            // The subconscious's own cancel: one whose askers name it (a call of
+            // its joined to another's waiting cancel among them), or one its
+            // tool asked for (`subconscious`) under no name. A release with no
+            // askers recorded is one a build before them wrote (unreleased
+            // builds of #844 only), read as its tool's. A reader fork's, under
+            // the fork's name, is another's, as anyone else's is.
+            // So is the run of a queued cancel whose note names it among its
+            // askers (noteRuns): one it joined after that cancel's release was
+            // written, which no release names it in, ran with that release (the
+            // latest before the note), its own (Weft, #844).
+            const noteRun = noteRuns.get(epochId);
+            const ranWithNote = noteRun !== undefined && noteRun.sequence > after && noteRun.askers.includes(author) ? noteRun : undefined;
+            const ownRelease = ranAfter.filter((r) => r.askers.includes(author) || (r.source === 'subconscious' && r.askers.length === 0)).at(-1)
+                ?? (ranWithNote ? ranAfter.filter((r) => r.sequence < ranWithNote.sequence).at(-1) : undefined);
+            const own = ownRelease !== undefined;
+            // Credited to the latest that ran.
+            const by = own ? undefined : ranAfter.at(-1);
+            // Who else its own release credits: the other askers (the note's too,
+            // where it names more), and the cancel it joined where that wasn't the
+            // subconscious's tool's.
+            const others = ownRelease ? [...new Set([...ownRelease.askers, ...(ranWithNote?.askers ?? [])])].filter((a) => a !== author) : [];
+            const joined = ownRelease
+                ? [...others.map((a) => `${a}'s`),
+                    ...(ownRelease.source !== 'subconscious' && ownRelease.reason !== undefined ? [`the cancel for ${ownRelease.reason}`] : [])]
+                : [];
+            const noteAt = (notes.get(epochId) ?? -Infinity) > after ? notes.get(epochId) : undefined;
+            const drop = ranAfter.length > 0
+                ? {
+                    reason: 'unstamped-stop', found: 'ran', ...(asked ? { asked: true } : {}),
+                    ...(asked?.note !== undefined ? { note: asked.note } : {}), ...(noteAt !== undefined ? { noteDelivered: true } : {}),
+                    ...(own ? { own: true, ...(joined.length > 0 ? { joined } : {}) } : by?.reason !== undefined ? { ranBy: by.reason } : {}),
+                }
+                : noteAt !== undefined ? { reason: 'unstamped-stop', found: 'delivered' }
+                    : asked ? { reason: 'unstamped-stop', found: 'asked', ...(asked.note !== undefined ? { note: asked.note } : {}), ...(rowsRead ? {} : { rowsUnread: true }) }
+                        : { reason: 'unstamped-stop', found: 'unknown', ...(rowsRead ? {} : { rowsUnread: true }) };
+            // A note the stop found still kept in memory (notesKept) that these
+            // rows don't hold: a release after the stop may store it yet, or none
+            // did, so it may be lost.
+            if (last.notesKept?.has(epochId) && noteAt === undefined)
+                drop.noteKept = true;
+            const found = drop.found;
+            // What it was told silences this only where it was told at or after
+            // what this reads (the newest ask of the hold, the release, the note):
+            // a notice records the head when it was decided, and the boot read
+            // every row up to it, so one at that head saw this already. A row
+            // older than a later ask never does, so a loss asked again after it
+            // was told is told again; nor does one that couldn't read that run's
+            // rows, where these are read.
+            const evidence = Math.max(asked?.newest ?? -Infinity, ranAfter.at(-1)?.sequence ?? -Infinity, noteAt ?? -Infinity);
+            const said = toldBefore(epochId).filter((t) => t.at >= evidence);
+            if (said.some((t) => FOUND_RANK[t.found] > FOUND_RANK[found]
+                || (t.found === found && t.note === drop.note && (!t.rowsUnread || drop.rowsUnread === true)))) {
+                console.error(`[tune-out] the last stop did not record the state of ${what}, which ${author} was told already, with nothing more to say now`);
+                continue;
+            }
+            console.error(`[tune-out] the last stop did not record the state of ${what}, so ${author} is told `
+                + (found === 'delivered' ? 'that the note it left with a cancel of it was delivered, and its end not recorded'
+                    : found === 'ran' ? 'that a cancel of it ran, its release stored and its end not recorded'
+                        : found === 'asked' && drop.rowsUnread ? 'that the cancel of it it asked for, answered as waiting, may not have run, that run\'s rows unread'
+                            : found === 'asked' ? 'that the cancel of it it asked for, answered as waiting, was lost, with its note'
+                                : drop.rowsUnread ? 'that whether a cancel of it then waiting ran isn\'t known, that run\'s rows unread'
+                                    : 'that a cancel of it then waiting, if it asked for one, was lost, with any note'));
+            try {
+                this.hooks.emitTrace({ type: 'tune-out:stop-unrecorded', serverId, channelId, epochId, ...(scope ? { scope } : {}), noteAuthor: author, found });
+            }
+            catch (err) {
+                console.error(`[tune-out] that the last stop did not record the state of ${what} could not be traced: ${thrownReason(err)}`);
+            }
+            const notice = {
+                id: randomUUID(),
+                for: { epochId, serverId, channelId, ...(scope ? { scope } : {}), current: this.epochHoldingAt(serverId, channelId, scope) },
+                what, drop, keptAtMs: Date.now(), ...(bootHead !== undefined ? { keptAtSequence: bootHead } : {}), persistent: true,
+            };
+            this.lossNotices.set(author, [...(this.lossNotices.get(author) ?? []), notice]);
+        }
+        this.writeLossNotices(author);
+        // Kept, not written (writes held, or the subconscious's context
+        // refusing them), each is kept in the store at once, held writes or
+        // not, as the boot's stamp is: a crash before the writes land then
+        // leaves it for the next boot's replay (restoreLossNotices), whose scan
+        // reads only the run that crashed. Where the store refuses the record
+        // too, it is tried again when writes land (writeLossNotices); a crash
+        // before then loses it, which nothing here can help.
+        this.writeLossRecord('boot');
+        if (this.lossNotices.size > 0)
+            this.armDeferredRetry();
+    }
+    /** The store's branch now (currentBranch), or undefined where the host names none or it can't be read. */
+    branchNow() {
+        try {
+            return this.hooks.currentBranch?.();
+        }
+        catch {
+            return undefined;
+        }
+    }
+    /**
+     * Whether a notice a boot derived from the last stop's stamp
+     * (`unstamped-stop`) is kept in memory only: not written to the
+     * subconscious yet, nor in the store's loss record (lossRecordIds).
+     */
+    stampNoticesUnkept() {
+        for (const kept of this.lossNotices.values()) {
+            for (const n of kept)
+                if (n.persistent && n.drop.reason === 'unstamped-stop' && !this.lossRecordIds.has(n.id))
+                    return true;
+        }
+        return false;
+    }
+    /**
+     * Whether the last stop's bound (carriedBound) is still needed: a notice
+     * this boot derived from that stamp is kept in memory only
+     * (stampNoticesUnkept), or the boot's telling of it threw before it
+     * finished (carriedUntold).
+     */
+    carriedNeeded() {
+        return this.carriedUntold || this.stampNoticesUnkept();
+    }
+    /**
+     * Where the next boot reads this run's rows from (StopStamp's
+     * `runStartedAt` and `branch`): this run's start, or, while that stamp's
+     * bound is needed (carriedNeeded: a notice this boot derived from the last
+     * stop's stamp is kept in memory only, or its telling threw), that bound
+     * (carriedBound), so a crash then leaves the next boot reading what this
+     * boot read.
+     */
+    runBound() {
+        const bound = this.carriedBound && this.carriedNeeded()
+            ? this.carriedBound
+            : { runStartedAt: this.runStartedAt, branch: this.runBranch };
+        return {
+            ...(bound.runStartedAt !== undefined ? { runStartedAt: bound.runStartedAt } : {}),
+            ...(bound.branch !== undefined ? { branch: bound.branch } : {}),
+        };
+    }
+    /** This run's marker: a stamp covering no hold, bounded where this run's rows begin (runBound). */
+    runMarker() {
+        return { v: 1, epochs: [], ...this.runBound() };
+    }
+    /**
+     * The store's branch moved under this run (the framework's
+     * followBranchMove), so the snapshot states the coordinator keeps are the
+     * destination's now. Its stamp may cover a hold this run holds, and
+     * bounds the rows by another run's sequence: this run's marker is written
+     * there (writePendingMarker, tried again as at boot where it fails),
+     * naming the destination and its head now as where this run's rows on it
+     * begin (or where they began, on a branch this run was on before: a failed
+     * surgery's restore, say; or this run's start, on a branch made from this
+     * run's past it, which holds those rows: inheritedStart), so that a crash from here on reads only what
+     * this run stored on it. The destination's kept loss notices aren't in memory: the next write
+     * of the record reads them in first (lossRecordUnread), and writes this
+     * run's kept ones there too; where this run keeps any, that write is
+     * made here, before the marker, and the last stop's bound is judged by
+     * the destination's record (carriedNeeded). The subconscious's last
+     * looks are read again too, so the next look reads the destination's
+     * record (lastLooks), unless `sameBranch` says the store switched to the
+     * branch it was on, as a refusing manager's recovery does: no branch
+     * moved, and the cache keeps any look a refused write held only there.
+     * Never throws.
+     */
+    branchMoved(sameBranch = false) {
+        if (this.stopped)
+            return;
+        if (!sameBranch)
+            this.lastLooksCache = undefined;
+        try {
+            const branch = this.branchNow();
+            if (branch !== undefined && this.runStarts.has(branch)) {
+                this.runStartedAt = this.runStarts.get(branch);
+            }
+            else {
+                // A branch made from this run's past its start (a suppression's
+                // fork, at its head) holds this run's rows since then
+                // at their sequences: this run's start stands there (AF #844
+                // review 5, #74). Any other is read from its head.
+                const inherited = this.inheritedStart(branch);
+                if (inherited !== undefined) {
+                    this.runStartedAt = inherited;
+                }
+                else {
+                    try {
+                        this.runStartedAt = this.hooks.currentSequence();
+                    }
+                    catch {
+                        this.runStartedAt = undefined;
+                    }
+                }
+                if (branch !== undefined)
+                    this.runStarts.set(branch, this.runStartedAt);
+            }
+            this.runBranch = branch;
+            // The destination's record isn't read yet, so a notice only the
+            // record left held is kept in none here (stampNoticesUnkept). It is
+            // written there first, where writes aren't held, so the marker below
+            // lands after it.
+            this.lossRecordUnread = true;
+            this.lossRecordIds = new Set();
+            if (this.persistedLossNotices().length > 0) {
+                this.lossRecordStale = true;
+                this.writeLossRecord();
+            }
+            // Kept while still needed (carriedNeeded), as the boot keeps it: a
+            // failed surgery's restore to the stamp's own branch reads those rows
+            // again, and on another branch the bound reads as elsewhere.
+            if (!this.carriedNeeded())
+                this.carriedBound = undefined;
+            this.markerPending = this.runMarker();
+            this.writePendingMarker();
+            if (this.markerPending)
+                this.armDeferredRetry();
+        }
+        catch (err) {
+            console.error(`[tune-out] the stop stamp and loss record could not be moved to the store's new branch: ${thrownReason(err)}`);
+        }
+    }
+    /**
+     * This run's start (runStartedAt), where `branch`, moved to, was made
+     * from the branch this run was on (runBranch) at a point past that start
+     * (branchOrigin): the branch holds this run's rows since then, at their
+     * sequences. Undefined otherwise, or where the store can't say.
+     */
+    inheritedStart(branch) {
+        if (branch === undefined || this.runBranch === undefined || this.runStartedAt === undefined)
+            return undefined;
+        let origin;
+        try {
+            origin = this.hooks.branchOrigin?.(branch);
+        }
+        catch {
+            return undefined;
+        }
+        // Past the start, not at it: a branch's head only grows, so one made at
+        // a point past this run's start was made during this run; one made at
+        // the start itself may be older, holding another run's rows past it.
+        return origin && origin.parent === this.runBranch && typeof origin.branchPoint === 'number' && origin.branchPoint > this.runStartedAt
+            ? this.runStartedAt : undefined;
+    }
+    /**
+     * This run's stamp (noteUnstampedStop), written; one the store refused is
+     * kept (`markerPending`) and tried again at each release and by the retry
+     * timer, as the loss notices are (runDeferredCancels), never while writes
+     * are held but at boot and at a branch move (branchMoved), until it lands
+     * or the stop writes its own. Never throws.
+     */
+    writePendingMarker() {
+        // The stop's stamp replaces it: none is written over that.
+        if (this.stopped)
+            this.markerPending = undefined;
+        const marker = this.markerPending;
+        if (!marker)
+            return;
+        try {
+            this.channelRegistry.writeCoordinatorState(this.stopStampStateId, marker);
+            if (!this.stateDurable())
+                throw new Error('it was written but could not be made durable');
+            if (this.markerUnwritten)
+                console.error(`[tune-out] this run's stop stamp (${this.stopStampStateId}) is written, at a later try`);
+            this.markerPending = undefined;
+            this.markerUnwritten = false;
+        }
+        catch (err) {
+            if (!this.markerUnwritten) {
+                console.error(`[tune-out] this run's stop stamp (${this.stopStampStateId}) could not be written, so if the host dies before its next `
+                    + `stop, the stamp the last stop left may cover the holds it names; it is tried again at the next release or `
+                    + `${EXPIRY_RETRY_MS / 1000} s later: ${thrownReason(err)}`);
+            }
+            this.markerUnwritten = true;
+        }
+    }
+    /**
+     * For a hold the last stop didn't stamp (noteUnstampedStop): the persistent
+     * subconscious's own `cancel_tuneout` of it (`asks`, cancelAsksIn),
+     * answered as waiting, since the hold began and since the last run began
+     * (`since`). One names the hold where its result says the all-except hold
+     * (`scope`, the call naming that scope or a channel only that hold held),
+     * for that hold; else, for a channel's, where it names the channel (its
+     * id, its shown name, or its server-qualified name) and its server: the
+     * result's (`serverId`), the call's, or the qualified name's. A bare name
+     * with no server that two holds on record answer to names neither. Answers
+     * the first such call's sequence, and the first line, at most
+     * NOTE_QUOTE_CHARS characters, of the first such call's note (a cancel
+     * waiting with none takes a later call's note; a later note is dropped,
+     * and its caller told so). Undefined where none is found.
+     */
+    askedCancelOf(hold, since, asks, onRecord) {
+        const after = Math.max(hold.startedAt ?? -Infinity, since ?? -Infinity);
+        const namesOf = (h) => {
+            let shown;
+            try {
+                shown = this.shown(h.serverId, h.channelId);
+            }
+            catch {
+                shown = h.channelId;
+            }
+            return [h.channelId, shown, qualifiedChannelName({ serverId: h.serverId, channelId: h.channelId })];
+        };
+        const names = (ask, h) => {
+            const toScope = ask.scope === 'all-except' || ask.input.scope === 'all-except';
+            if (h.scope === 'all-except')
+                return toScope;
+            if (toScope || typeof ask.input.channelId !== 'string')
+                return false;
+            const name = ask.input.channelId;
+            if (!namesOf(h).includes(name))
+                return false;
+            // The qualified name's server: a name that is this hold's qualified
+            // one names its server, which is read here. Without it, the bare-name
+            // check below can reach another answer: another server's channel can
+            // have that name as its id (`editor:noisy` on server `other`), and
+            // then two holds answer to the name, so the ask would count for
+            // neither.
+            const server = ask.serverId
+                ?? (typeof ask.input.serverId === 'string' && ask.input.serverId ? ask.input.serverId : undefined)
+                ?? (name === qualifiedChannelName({ serverId: h.serverId, channelId: h.channelId }) ? h.serverId : undefined);
+            if (server !== undefined)
+                return server === h.serverId;
+            return !onRecord.some((other) => other !== h && !other.scope && namesOf(other).includes(name));
+        };
+        const mine = asks.filter((ask) => ask.waiting && ask.sequence > after && names(ask, hold));
+        if (mine.length === 0)
+            return undefined;
+        const withNote = mine.find((ask) => typeof ask.input.text === 'string' && ask.input.text.trim() !== '');
+        const newest = mine.at(-1).sequence;
+        if (!withNote)
+            return { sequence: mine[0].sequence, newest };
+        const first = withNote.input.text.trim().split(/\r?\n/)[0].trim();
+        return { sequence: mine[0].sequence, newest, note: first.length > NOTE_QUOTE_CHARS ? `${cutToFit(first, NOTE_QUOTE_CHARS - 1)}…` : first };
+    }
+    /**
+     * At boot (resumeActiveEpochs), before this boot writes any notice: a
+     * loss told to the persistent subconscious before the stop, by a notice
+     * (`tune-out-note-undelivered`) or in a release (`lostNote`,
+     * queuedNoteFirst), asked for a turn to read it, which was kept in memory
+     * only. Shown to it at rest, such a row is in its window, so the boot's
+     * wake for rows its window is still owed doesn't count it; one with no
+     * turn of the subconscious's after it in its window (unansweredIn) gets
+     * that turn asked for again, once per hold, for the reason the notice
+     * asked it for. Never throws.
+     */
+    askTurnsForUnreadLosses() {
+        try {
+            const author = this.hooks.subconsciousName();
+            if (!author || !this.hooks.subconsciousWindow)
+                return;
+            const unread = unansweredIn(this.hooks.subconsciousWindow(), author, (m) => {
+                const meta = m.metadata;
+                return meta?.kind === 'tune-out-note-undelivered' || (meta?.kind === 'tune-out-cancel' && meta.lostNote === true);
+            });
+            const asked = new Set();
+            for (const m of unread) {
+                const meta = m.metadata;
+                const where = meta?.scope === 'all-except' ? 'all-except'
+                    : typeof meta?.channelId === 'string' ? this.shown(typeof meta.serverId === 'string' ? meta.serverId : '', meta.channelId) : 'a tune-out';
+                const reason = meta?.stopUnrecorded ? `tune-out stop not recorded: ${where}` : `tune-out note not delivered: ${where}`;
+                if (asked.has(reason))
+                    continue;
+                asked.add(reason);
+                this.hooks.requestInference(author, reason, 'tune-out');
+            }
+            if (asked.size > 0) {
+                console.error(`[tune-out] ${author} was told of a lost note before the stop and has had no turn since, so a turn to read it is asked for again (${[...asked].join(', ')})`);
+            }
+        }
+        catch (err) {
+            console.error(`[tune-out] the losses told to the subconscious before the stop could not be checked for a turn at boot: ${thrownReason(err)}`);
+        }
+    }
+    /**
+     * At boot (resumeActiveEpochs): the loss notices a stop left kept in the
+     * store for the persistent subconscious (writeLossRecord) are written now,
+     * as tellNoteLost writes them, each with a turn to read it
+     * (writeLossNotice); one written leaves the record, and one whose write
+     * fails stays, kept and tried again at the next release and at the retry,
+     * which this arms. A notice whose author is no agent the framework writes
+     * to now reaches no one, which is traced (`author-gone`), and leaves the
+     * record. One whose row the subconscious's rows hold already
+     * (`lossNoticeId`: written, its record not brought in line before the
+     * stop) leaves the record, not written again; where those rows can't be
+     * read, none is written, kept in the record, until a retry reads them
+     * (checkLossNoticesWritten). The notices of an unrecorded stop written
+     * here count as told (restoredTold). Never throws.
+     */
+    restoreLossNotices() {
+        // The holds whose waiting cancel's loss the last stop kept (`stopped`),
+        // which accounts for them (noteUnstampedStop).
+        const stopKept = new Set();
+        try {
+            // One that can't be read is read again by the retry, which this arms:
+            // nothing else may read it before the stop (AF #844 review 5, #39).
+            if (!this.readLossRecord()) {
+                this.armDeferredRetry();
+                return stopKept;
+            }
+            if (this.lossNotices.size === 0)
+                return stopKept;
+            for (const kept of this.lossNotices.values()) {
+                for (const notice of kept)
+                    if (notice.persistent && notice.drop.reason === 'stopped')
+                        stopKept.add(notice.for.epochId);
+            }
+            // One written already, its record not brought in line after (a stop,
+            // or a record the store refused, between the two), is in the
+            // subconscious's rows: it leaves the record, not written again; none
+            // is written while those rows can't be read (checkLossNoticesWritten).
+            for (const kept of this.lossNotices.values())
+                for (const notice of kept)
+                    this.lossNoticesUnchecked.add(notice.id);
+            this.checkLossNoticesWritten();
+            const unstamped = [...this.lossNotices.values()].flat().filter((n) => n.drop.reason === 'unstamped-stop');
+            const count = [...this.lossNotices.values()].reduce((n, kept) => n + kept.length, 0);
+            if (count > 0)
+                console.error(`[tune-out] ${count} loss notice(s) kept in the store for the subconscious before the last stop ${count === 1 ? 'is' : 'are'} tried again now`);
+            this.writeLossNotices();
+            const still = new Set([...this.lossNotices.values()].flat());
+            this.restoredTold = unstamped.filter((n) => !still.has(n));
+            if (this.lossNotices.size > 0)
+                this.armDeferredRetry();
+        }
+        catch (err) {
+            console.error(`[tune-out] the loss notices kept in the store for the subconscious could not be written at boot: ${thrownReason(err)}`);
+        }
+        return stopKept;
+    }
+    /**
+     * One loss notice (LossNotice) written into its author's context: a
+     * host-framed notice, as the coordinator's other notices to a reader are,
+     * and for the persistent subconscious a turn to read it, as they ask: the
+     * loss can come with no turn of its (a release, a retry, a cancel it
+     * didn't make), and one asked for with a cancel's own notice is the same
+     * turn. A reader fork still alive is in its run, which takes the notice
+     * at its next point. Answers what became of it. `failed`: its write
+     * threw, or its words couldn't be put together; it is logged, traced at
+     * its first failure (`tune-out:note-loss-untold`, `write-failed`), and
+     * kept. `gone`: the framework wrote nothing, answering an empty id, as it
+     * does for a write for an agent it has no registration of, a reader fork
+     * whose run has ended among them: the loss reaches no one, which is
+     * logged and traced (`author-gone`). It is written only while writes
+     * aren't held (writeLossNotices), so an empty id is no write kept in
+     * memory, unless this write began such a hold (a context manager that
+     * refuses its work from it on), which writesHeld then says: memory alone
+     * holds it then, which a crash or a stop loses, so it answers `failed`,
+     * kept in the store's record and written again once writes are stored,
+     * unless the kept write is stored then: the framework says so
+     * (heldWriteStored), and it leaves the notices kept, written once. A stop
+     * before then keeps it in the store, and a boot that finds its row
+     * (`lossNoticeId`) leaves the record (restoreLossNotices). writesHeld is asked about
+     * the author too, so a reader fork still registered whose own context
+     * manager refuses its work is told apart from one whose run has ended:
+     * the notice stays kept for it, and isn't written while that lasts
+     * (writeLossNotices). A turn that can't be asked for is logged. Never
+     * throws.
+     */
+    writeLossNotice(author, notice) {
+        const { serverId, channelId, epochId, scope } = notice.for;
+        const { drop } = notice;
+        let shown;
+        let id;
+        try {
+            shown = this.shown(serverId, channelId);
+            const hold = scope === 'all-except' ? `the all-except hold (all channels except ${shown})` : shown;
+            const resident = this.hooks.primaryName();
+            const it = scope ? 'hold' : 'tune-out';
+            // Whether the hold is still in force when the notice is written, the
+            // next boot's or a later retry's: unknown where that can't be read.
+            const nowInForce = () => {
+                let still;
+                try {
+                    still = notice.for.current() === epochId;
+                }
+                catch {
+                    still = undefined;
+                }
+                return still === true ? ` That ${it} is still in force.` : still === false ? ` That ${it} has ended since.` : '';
+            };
+            const to = resident ? suppliedValue(resident) : 'the resident';
+            let why = '';
+            // The note's store couldn't tell whether it landed (`noteUnknown`):
+            // the cancel's loss is told as it is, the note's as not known, with
+            // the error, as a note-undelivered drop's `mayBeStored` says it.
+            const noteUnknown = drop.reason === 'hold-ended' || drop.reason === 'stopped' ? drop.noteUnknown : undefined;
+            const withNote = noteUnknown === undefined ? ', and the note with it.' : '.';
+            const notKnown = (error) => {
+                const reason = suppliedValue(error);
+                return ` Whether the note was delivered to ${to} isn't known here, as what the store holds of it can't be read here: `
+                    + `${reason}${/[.!?]$/.test(reason) ? '' : '.'}`;
+            };
+            if (drop.reason === 'hold-ended') {
+                why = `That ${it} ended without your cancel while it waited, so your cancel was dropped${withNote}`
+                    + (noteUnknown !== undefined ? notKnown(noteUnknown) : '');
+                if (drop.current !== undefined) {
+                    // The later hold as it is when the notice is written, which a
+                    // kept notice is after the drop: whether it still holds, unknown
+                    // where that can't be read.
+                    let still;
+                    try {
+                        still = notice.for.current() === drop.current;
+                    }
+                    catch {
+                        still = undefined;
+                    }
+                    const later = scope ? 'A later all-except hold' : `A later tune-out of ${shown}`;
+                    why += still
+                        ? ` ${later} is in force now, which your cancel was not for.`
+                        : ` ${later}, which your cancel was not for, was in force when your cancel was dropped`
+                            + `${still === false ? ', and has ended since' : ''}.`;
+                }
+            }
+            else if (drop.reason === 'stopped') {
+                why = `The host stopped while your cancel waited, so your cancel was lost${withNote}`
+                    + `${noteUnknown !== undefined ? notKnown(noteUnknown) : ''}${nowInForce()}`;
+            }
+            else if (drop.reason === 'superseded') {
+                why = `An earlier cancel of that ${it} was running when you asked for yours, and yours joined it, with a note of its own that stands, so your note was dropped. That cancel's note is to go out when it ends the ${it}; where it can't be delivered, its author is told, if it still runs.`;
+            }
+            else if (drop.reason === 'unstamped-stop') {
+                // Written whole below.
+            }
+            else {
+                const reason = suppliedValue(drop.error);
+                // A thrown error's words may end without a stop. A note whose store
+                // couldn't tell whether it landed (mayBeStored) is one that may be
+                // lost, said as a boot says what it can't read (noteUnstampedStop's
+                // `rowsUnread`).
+                why = `${drop.by === 'another' ? `Another cancel ended that ${it} while yours waited` : `Your cancel ended that ${it} when it ran`}, `
+                    + (drop.mayBeStored
+                        ? `and whether the note was delivered to ${to} isn't known here, as what the store holds of it can't be read here: `
+                        : 'and delivering the note then failed: ')
+                    + `${reason}${/[.!?]$/.test(reason) ? '' : '.'}`;
+            }
+            let text;
+            if (drop.reason === 'unstamped-stop') {
+                const unrecorded = `[${NOTICE_TAG.tuneOut}: the host stopped without recording the state of `
+                    + `${scope ? `the all-except hold (all channels except ${shown}; epoch ${epochId})` : `the tune-out of ${shown} (epoch ${epochId})`}. `;
+                let still;
+                try {
+                    still = notice.for.current() === epochId;
+                }
+                catch {
+                    still = undefined;
+                }
+                const notRecorded = (whose) => `${whose} was not recorded`
+                    + (still === true ? `, so that ${it} is still in force.` : still === false ? `, and that ${it} has ended since.` : '.');
+                // A note the stop found kept in memory, not in that run's rows
+                // (noteKept): it may be lost, and nothing below says it was.
+                const kept = drop.noteKept && !drop.noteDelivered
+                    ? ` The note you left with your cancel of it was kept in memory when the host stopped, to be stored when an operator's change to the store `
+                        + "ended, and the store didn't hold it when this was written: it may be lost."
+                    : '';
+                if (drop.found === 'delivered') {
+                    // The note's row is stored, no release since, the end of its cancel's
+                    // hold not. The rows prove it is stored at this start, not that it
+                    // was before the stop: a note kept in memory then can land after
+                    // it, at a release in the same process (Oscar, #844).
+                    text = `${unrecorded}The note you left with your cancel of it was delivered to ${to} before this start. ${notRecorded("The cancel's end")}]`;
+                }
+                else if (drop.found === 'ran' && drop.own) {
+                    // Its own cancel stored the release since it asked, the end not.
+                    const who = drop.asked ? 'The cancel of it you asked for' : 'Your cancel of it';
+                    const joined = drop.joined && drop.joined.length > 0 ? ` (with ${drop.joined.map((j) => suppliedValue(j)).join(' and ')})` : '';
+                    const note = drop.noteDelivered ? ', with the note you left with it'
+                        : drop.note !== undefined && !drop.noteKept ? `, but the note you left with it, ${quotedValue(drop.note)}, did not` : '';
+                    text = `${unrecorded}${who} ran${joined}: its release reached ${to}${note}. ${notRecorded('Its end')}${kept}]`;
+                }
+                else if (drop.found === 'ran') {
+                    // Another's cancel stored the release, the end not: the
+                    // subconscious's own, asked for, had not run. A note of its found
+                    // went out with that release (queuedNoteFirst writes it first).
+                    const by = drop.ranBy !== undefined ? ` that wasn't yours (${suppliedValue(drop.ranBy)})` : '';
+                    text = `${unrecorded}A cancel of it${by} ran: its release reached ${to}`
+                        + `${drop.noteDelivered ? ', with the note you left with your cancel of it' : ''}. ${notRecorded('Its end')}`
+                        + (drop.asked
+                            ? ` The cancel of it you asked for had not run when the host stopped: it was lost`
+                                + `${!drop.noteDelivered && !drop.noteKept && drop.note !== undefined ? `, and the note you left with it, ${quotedValue(drop.note)}` : ''}.`
+                            : '')
+                        + `${kept}]`;
+                }
+                else if (drop.found === 'asked' && drop.rowsUnread) {
+                    // Its own call, answered as waiting, and no rows of that run to say whether it ran.
+                    text = `${unrecorded}The cancel of it you asked for ${drop.note !== undefined ? `with your note ${quotedValue(drop.note)}` : 'with no note'} `
+                        + `was answered as waiting; whether it ran before the host stopped isn't known here, as what that run stored can't be read here: `
+                        + `its end was not recorded${drop.note !== undefined ? ', and the note you left with it may be lost' : ''}.${nowInForce()}]`;
+                }
+                else if (drop.found === 'asked') {
+                    // Its own call, answered as waiting, read from its window.
+                    text = `${unrecorded}The cancel of it you asked for ${drop.note !== undefined ? `with your note ${quotedValue(drop.note)}` : 'with no note'} `
+                        + `had not run when the host stopped: it was lost${drop.note !== undefined && !drop.noteKept ? ', and the note you left with it' : ''}.${nowInForce()}${kept}]`;
+                }
+                else if (drop.rowsUnread) {
+                    text = `${unrecorded}If you asked for a cancel of it before the stop, whether it ran isn't known here, as what that run stored can't be read here: `
+                        + `its end was not recorded, and any note you left with it may be lost.${nowInForce()}]`;
+                }
+                else {
+                    text = `${unrecorded}If you asked for a cancel of it before the stop, it had not run when the host stopped: it was lost`
+                        + `${drop.noteKept ? '' : ', and any note you left with it'}.${nowInForce()}${kept}]`;
+                }
+            }
+            else if ((drop.reason === 'note-undelivered' && drop.mayBeStored) || noteUnknown !== undefined) {
+                text = `[${NOTICE_TAG.tuneOut}: the note you left with your cancel of ${hold} may be lost. ${why}]`;
+            }
+            else {
+                text = `[${NOTICE_TAG.tuneOut}: the note you left with your cancel of ${hold} was not delivered to ${to}. ${why}]`;
+            }
+            id = this.hooks.addMessage('user', [{ type: 'text', text }], {
+                system: true, kind: 'tune-out-note-undelivered', channelId, epochId, ...(scope ? { scope } : {}),
+                // Which notice it is, so a boot that finds its record not brought
+                // in line doesn't write it again (restoreLossNotices); and, for a
+                // loss the stop kept, the bound of the stamp that stop wrote, so a
+                // later boot reading that stamp finds the hold accounted for.
+                lossNoticeId: notice.id,
+                ...(drop.reason === 'stopped' && notice.stopBound ? { lostAtStop: notice.stopBound } : {}),
+                // What an unrecorded stop's notice told, for a later boot (noteUnstampedStop).
+                // When the boot decided it (keptAtSequence), which a later boot
+                // reads as when it was told, though it was written later.
+                ...(drop.reason === 'unstamped-stop' ? { stopUnrecorded: {
+                        found: drop.found, ...(drop.note !== undefined ? { note: drop.note } : {}),
+                        ...(notice.keptAtSequence !== undefined ? { keptAtSequence: notice.keptAtSequence } : {}),
+                        ...(drop.rowsUnread ? { rowsUnread: true } : {}),
+                    } } : {}),
+            }, author);
+        }
+        catch (err) {
+            const error = thrownReason(err);
+            console.error(`[tune-out] ${author} could not be told ${lossSubject(notice)}, `
+                + `so the notice is kept and tried again at the next release or ${EXPIRY_RETRY_MS / 1000} s later: ${error}`);
+            if (!notice.traced) {
+                notice.traced = true;
+                try {
+                    this.hooks.emitTrace({
+                        type: 'tune-out:note-loss-untold', serverId, channelId, epochId, ...(scope ? { scope } : {}),
+                        noteAuthor: author, reason: 'write-failed', error,
+                    });
+                }
+                catch (traceErr) {
+                    console.error(`[tune-out] the failure to tell ${author} of its lost note could not be traced: ${thrownReason(traceErr)}`);
+                }
+            }
+            return 'failed';
+        }
+        if (id === '' && this.writesHeldNow(author)) {
+            console.error(`[tune-out] ${author} could not be told ${lossSubject(notice)} yet: the notice was kept in memory as it was written `
+                + '(writes are held from it on), so it stays kept, in the store too, and is written again once writes are stored');
+            return 'failed';
+        }
+        if (id === '') {
+            console.error(`[tune-out] ${author} is no agent the framework writes to any more, so the notice ${lossSubject(notice)} reaches no one`);
+            try {
+                this.hooks.emitTrace({
+                    type: 'tune-out:note-loss-untold', serverId, channelId, epochId, ...(scope ? { scope } : {}),
+                    noteAuthor: author, reason: 'author-gone',
+                });
+            }
+            catch (traceErr) {
+                console.error(`[tune-out] that the loss of ${author}'s note reaches no one could not be traced: ${thrownReason(traceErr)}`);
+            }
+            return 'gone';
+        }
+        if (notice.traced) {
+            console.error(`[tune-out] ${author} is told, at a later try, ${lossSubject(notice)}`);
+        }
+        let subName;
+        try {
+            subName = this.hooks.subconsciousName();
+        }
+        catch {
+            subName = null;
+        }
+        if (subName === null || subName !== author)
+            return 'written';
+        try {
+            const where = scope ? 'all-except' : shown;
+            this.hooks.requestInference(author, drop.reason === 'unstamped-stop' ? `tune-out stop not recorded: ${where}` : `tune-out note not delivered: ${where}`, 'tune-out');
+        }
+        catch (err) {
+            console.error(`[tune-out] ${author} was told ${lossSubject(notice)}, but a turn to read it could not be asked for: ${thrownReason(err)}`);
+        }
+        return 'written';
+    }
+    /**
+     * The queued cancel of this hold (`epochId`, deferCancel), off the queue:
+     * a cancel that ends the hold first leaves it nothing to end, and
+     * delivers its note: the persistent subconscious's before its release
+     * (queuedNoteFirst), a reader fork's after the end (deliverQueuedNote). One queued for an earlier epoch
+     * there is dropped, told (dropDeferred). The retry timer goes with the
+     * last one, unless a loss notice waits for it (lossNotices).
+     */
+    takeDeferred(key, epochId) {
+        const entry = this.deferredCancels.get(key);
+        if (!entry)
+            return undefined;
+        this.deferredCancels.delete(key);
+        if (this.deferredCancels.size === 0 && this.lossNotices.size === 0 && !this.markerPending && !this.lossRecordUnread && this.deferredRetry !== undefined) {
+            clearTimeout(this.deferredRetry);
+            this.deferredRetry = undefined;
+        }
+        if (entry.for.epochId === epochId)
+            return entry;
+        this.dropQueued(entry, { reason: 'hold-ended' });
+        return undefined;
+    }
+    /**
+     * A reader's note to the resident, verbatim: the persistent subconscious's
+     * under its own name, a reader fork's (`author`) as attributed mail under
+     * the fork's name and incarnation, never the resident's voice. `metadata`
+     * is the subconscious's row's; a fork's mail has it without the server.
+     * Answers how it went, from what the write itself answered: `stored`, or
+     * `kept`, where the framework kept the write in memory (an empty id: a
+     * surgery's hold, or a context manager refusing its work), to store it at
+     * their release; false where neither is configured to deliver it. A
+     * write stored, and writes held only after it, is `stored`: whether
+     * writes are held now says nothing of a write already made (Weft, #844).
+     * A fork's mail, which the registry keeps until it is delivered, or a
+     * write whose answer isn't known, counts as `stored`.
+     */
+    deliverReaderNote(note, author, metadata) {
+        const subName = this.hooks.subconsciousName();
+        if (subName) {
+            const id = this.hooks.addMessage(subName, [{ type: 'text', text: note }], { ...metadata });
+            return this.writeKept(id) ? 'kept' : 'stored';
+        }
+        if (author && this.hooks.deliverFromReader) {
+            const { serverId: _server, ...mail } = metadata;
+            const id = this.hooks.deliverFromReader(author, [{ type: 'text', text: note }], mail);
+            return this.writeKept(id) ? 'kept' : 'stored';
+        }
+        return false;
+    }
+    /**
+     * The note a queued cancel carries, delivered once its hold has ended, as
+     * a cancel's release delivers its caller's (deliverReaderNote): by
+     * another cancel that ended the hold first (takeDeferred, `by` another),
+     * a reader fork's, the subconscious's going out before that cancel's
+     * release instead (queuedNoteFirst), or by the queued cancel's own run
+     * (`by` itself). One that can't be is told lost, with the reason, on
+     * stderr, as a trace and to its author where it still exists
+     * (dropDeferred), and the cancel that ended the hold goes on: no caller
+     * waits on it to be told. One settled already, delivered or told lost
+     * (an earlier end whose release then failed), isn't delivered again.
+     * Answers whether it was delivered now.
+     */
+    deliverQueuedNote(entry, metadata, by) {
+        const now = this.noteNow(entry, metadata, by);
+        if (now?.lost)
+            this.dropDeferred(entry, now.lost);
+        return now?.delivered === true;
+    }
+    /**
+     * A queued cancel's note (deliverReaderNote), delivered now and settled,
+     * or, where it can't be, why (`lost`, for the caller to tell); undefined
+     * where it has none, or one settled already. One delivered while writes
+     * were held, and lost when they were stored (lostAtRelease), is lost with
+     * that error, `by` this caller, and isn't written again.
+     */
+    noteNow(entry, metadata, by) {
+        if (entry.note === undefined || entry.noteSettled)
+            return undefined;
+        if (entry.lostAtRelease)
+            return { lost: { ...entry.lostAtRelease, by } };
+        let delivered;
+        try {
+            delivered = this.deliverReaderNote(entry.note, entry.noteAuthor, metadata);
+        }
+        catch (err) {
+            return { lost: { reason: 'note-undelivered', by, error: thrownReason(err) } };
+        }
+        if (!delivered) {
+            return { lost: {
+                    reason: 'note-undelivered', by,
+                    error: 'there is no subconscious here, and no delivery of a reader fork\'s note for its author',
+                } };
+        }
+        entry.noteSettled = true;
+        return { delivered: true, kept: delivered === 'kept' };
     }
-    // ==========================================================================
-    // Enter / cancel
-    // ==========================================================================
     /**
-     * The options a tune-out call gives, read as numbers before anything
-     * changes (F76). A tool's input reaches here as the model wrote it, and
-     * the store can't keep a NaN or an Infinity: its append would throw after
-     * the registry had marked the channel tuned out. So each option is read
-     * as a number first, a numeric string included, as the sleep tool reads
-     * its seconds; null counts as left out. A value that gives no finite
-     * number is refused, naming the option and, where it can be left out,
-     * what leaving it out means; so is a duration whose end time is too far
-     * off to store. `now` is the clock the end time was counted from. One
-     * rule for a channel's tune-out and the all-except hold.
+     * Before a cancel writes its release, the note of a cancel of this hold
+     * still queued (deferCancel; its own release failed since, say) for the
+     * persistent subconscious: delivered now, ahead of the release, where a
+     * reader fork's goes out after the end (deliverQueuedNote), so that the
+     * release can say so where it can't be (lossInRelease). The loss is then
+     * stored with the release and made durable with it, or not at all: the
+     * hold doesn't end without the release, which throws, the hold staying in
+     * force and the queued cancel waiting on with its note, not lost. A
+     * notice to the subconscious and the store's record of it are writes of
+     * their own, which can be refused while the release is stored, leaving
+     * nothing of the loss after a stop; the subconscious's window holds the
+     * residents' rows, the release among them, so no notice is written too.
+     * Answers the queued cancel and, where its note couldn't be delivered,
+     * why; undefined where there is no such note: none queued, one for
+     * another epoch (takeDeferred drops it), one with no note or one settled
+     * already, or no subconscious (reader forks read); nor one written while
+     * writes were held and lost when they were stored (lostAtRelease), which
+     * isn't written again: it is told lost after the end instead, as a reader
+     * fork's is (deliverQueuedNote).
      */
-    readOptions(opts, leftOut) {
-        const given = {};
-        for (const name of Object.keys(leftOut)) {
-            const value = opts[name];
-            if (value == null)
-                continue;
-            const n = Number(value);
-            if (!Number.isFinite(n)) {
-                const got = typeof value === 'number'
-                    ? String(value)
-                    : `${typeof value === 'string' ? 'the string' : 'the value'} ${JSON.stringify(value)}`;
-                return {
-                    ok: false,
-                    error: `Nothing was tuned out: ${name} must be a finite number${name.endsWith('Seconds') ? ' of seconds' : ''}, `
-                        + `and it was ${got}.${leftOut[name] ? ` Leave it out ${leftOut[name]}.` : ''}`,
-                };
+    queuedNoteFirst(key, epochId, metadata) {
+        const entry = this.deferredCancels.get(key);
+        if (!entry || entry.for.epochId !== epochId || entry.note === undefined || entry.noteSettled || entry.lostAtRelease)
+            return undefined;
+        try {
+            if (!this.hooks.subconsciousName())
+                return undefined;
+        }
+        catch {
+            return undefined;
+        }
+        try {
+            const delivered = this.deliverReaderNote(entry.note, entry.noteAuthor, metadata);
+            if (delivered) {
+                entry.noteSettled = true;
+                // Kept in memory as it was written, by what the write answered (a
+                // hold begun only after it stores nothing of it): the queued
+                // cancel's run tells it lost where storing it fails when the writes
+                // are stored (heldWriteLost).
+                if (delivered === 'kept')
+                    entry.heldInMemory = true;
+                return { entry };
             }
-            given[name] = n;
+            return { entry, lost: { reason: 'note-undelivered', by: 'another', error: 'there is no subconscious here to deliver it' } };
         }
-        const now = Date.now();
-        const expiresAtMs = given.durationSeconds === undefined
-            ? undefined
-            : now + Math.max(60, given.durationSeconds) * 1000;
-        if (expiresAtMs !== undefined && !Number.isFinite(expiresAtMs)) {
-            return {
-                ok: false,
-                error: `Nothing was tuned out: durationSeconds ${given.durationSeconds} is longer than an end time can be kept.`
-                    + (leftOut.durationSeconds ? ` Leave it out ${leftOut.durationSeconds}.` : ''),
-            };
+        catch (err) {
+            return { entry, lost: { reason: 'note-undelivered', by: 'another', error: thrownReason(err) } };
         }
-        return { ok: true, given, now, expiresAtMs };
     }
-    enter(serverId, channelId, opts, source) {
-        // No reader (issue #232 §3.3): a silent hold, where the host opted into
-        // one. Nothing summarizes, nothing wakes, mentions are still
-        // acknowledged, the backlog is released on cancel; the resident is told
-        // so in the tool result. A host that didn't opt in has no tune_out
-        // without a reader.
-        if (!this.readerAvailable() && this.hooks.holdWithoutReader?.() !== true) {
-            return {
-                ok: false,
-                error: 'Nothing was tuned out: this host has no subconscious resident to watch a channel, so tune_out '
-                    + "isn't available here, and calling it again won't change that. If you need channels diverted, ask "
-                    + 'whoever runs this host.',
-            };
+    /**
+     * The words a cancel's release adds for a queued cancel's note it
+     * couldn't deliver (queuedNoteFirst): whose note it was, the hold
+     * (`hold`, a `tune-out` or a `hold`), the resident it was for, and why,
+     * as a notice to the note's author says them (writeLossNotice). The
+     * residents and the subconscious read them there.
+     */
+    lossInRelease(entry, error, hold, it) {
+        const author = this.noteAuthorOf(entry);
+        let resident;
+        try {
+            resident = this.hooks.primaryName();
         }
-        if (this.hooks.isForkBound({ serverId, channelId })) {
-            return {
-                ok: false,
-                error: `Nothing changed: a conversation is bound to ${this.quotedShown(serverId, channelId)}, so its messages go to that `
-                    + "conversation, and tune_out won't divert a channel while one is. Calling tune_out on it again won't change "
-                    + 'that until the conversation ends, which happens only once the channel has been quiet for a while. Tune '
-                    + 'out a different channel, or ask whoever runs this host if this one should be diverted.',
-            };
+        catch {
+            resident = null;
         }
-        const current = this.channelRegistry.getTuneOutState(serverId, channelId);
-        if (current)
-            return { ok: false, error: alreadyTunedOutText(this.quotedShown(serverId, channelId), current.params), alreadyTunedOut: true };
-        const scope = this.getAllExcept();
-        if (scope && scope.params.except.serverId === serverId && scope.params.except.channelId === channelId) {
-            return { ok: false, error: `channel ${this.quotedShown(serverId, channelId)} is the excepted channel of the active all-except hold; cancel that first` };
+        const reason = suppliedValue(error);
+        return `The note${author !== undefined ? ` ${suppliedValue(author)} left` : ' left'} with an earlier cancel of ${hold} was not `
+            + `delivered to ${resident ? suppliedValue(resident) : 'the resident'}. This cancel ended that ${it} while that one waited, `
+            + `and delivering the note then failed: ${reason}${/[.!?]$/.test(reason) ? '' : '.'}`;
+    }
+    /**
+     * The turn a release asks for (`whose`: the resident's, or the
+     * subconscious's for its report), as requestInference asks it; one asked
+     * while the host's stop is under way (stopTimers, the stop proper not
+     * yet run) is dropped with the stop's closed queue, so the stop's stamp
+     * records it (`wakesOwed`) and the next boot asks it again.
+     */
+    askReleaseTurn(agent, reason, whose) {
+        this.hooks.requestInference(agent, reason, 'tune-out');
+        this.releaseTurnsAsked.add(whose);
+        if (this.timersStopped && !this.stopped)
+            this.wakesInStop[whose] = true;
+    }
+    /** A turn for the persistent subconscious to read the loss of its note that a release told (queuedNoteFirst), as a notice asks for one (writeLossNotice). */
+    askTurnForLoss(where) {
+        let subName;
+        try {
+            subName = this.hooks.subconsciousName();
         }
-        const read = this.readOptions(opts, {
-            durationSeconds: 'to stay tuned out until you cancel',
-            cadenceSeconds: `for the default, ${TUNE_OUT_DEFAULTS.cadenceSeconds}`,
-            backlogCap: `for the default, ${TUNE_OUT_DEFAULTS.backlogCap}`,
-            maxWakes: `for the default, ${TUNE_OUT_DEFAULTS.maxWakes}`,
-        });
-        if (!read.ok)
-            return read;
-        const { given, expiresAtMs } = read;
-        const params = {
-            epochId: randomUUID(),
-            cadenceSeconds: Math.max(30, given.cadenceSeconds ?? TUNE_OUT_DEFAULTS.cadenceSeconds),
-            backlogCap: Math.max(0, given.backlogCap ?? TUNE_OUT_DEFAULTS.backlogCap),
-            maxWakes: Math.max(1, given.maxWakes ?? TUNE_OUT_DEFAULTS.maxWakes),
-            startedAtSequence: this.hooks.currentSequence(),
-            ...(expiresAtMs !== undefined ? { expiresAtMs } : {}),
-        };
-        // A tune-out that ended in the registry without this coordinator's
-        // cancel would have left its timers armed: clear them, so none of them
-        // acts on this one.
-        this.clearTimers(serverId, channelId);
-        this.channelRegistry.enterTuneOut(serverId, channelId, params, source);
-        this.armExpiry(serverId, channelId, params);
-        // Window anchor: start of the OLDEST active tune-out. Never move the
-        // anchor forward here — an older active epoch owns it.
-        const oldest = this.listActive().reduce((min, e) => Math.min(min, e.params.startedAtSequence), params.startedAtSequence);
-        this.hooks.setSubconsciousAnchor(oldest);
-        this.divertedSinceInvocation.set(this.key(serverId, channelId), 0);
-        if (this.readerAvailable())
-            this.startCadence(serverId, channelId, params.cadenceSeconds);
-        this.hooks.emitTrace({
-            type: 'tune-out:entered', serverId, channelId, epochId: params.epochId, reader: this.readerAvailable(),
-        });
-        return { ok: true, params };
+        catch {
+            return;
+        }
+        if (!subName)
+            return;
+        try {
+            this.hooks.requestInference(subName, `tune-out note not delivered: ${where}`, 'tune-out');
+        }
+        catch (err) {
+            console.error(`[tune-out] a release told ${subName} that its note to the resident was not delivered, but a turn to read it could not be asked for: ${thrownReason(err)}`);
+        }
+    }
+    /**
+     * Arm the one retry of the deferred cancels and the loss notices not
+     * written (lossNotices), and of the loss record not read yet
+     * (lossRecordUnread), unless it is armed; it arms itself again while
+     * one still waits.
+     */
+    armDeferredRetry() {
+        if (this.deferredRetry !== undefined || this.stopped)
+            return;
+        const timer = setTimeout(() => {
+            this.deferredRetry = undefined;
+            this.runDeferredCancels();
+            // Writes held again at the retry: the cancels and notices wait on,
+            // for the next release or this retry.
+            if (this.deferredCancels.size > 0 || this.lossNotices.size > 0 || this.markerPending || this.lossRecordUnread)
+                this.armDeferredRetry();
+        }, EXPIRY_RETRY_MS);
+        timer.unref?.();
+        this.deferredRetry = timer;
+    }
+    /**
+     * A cancel that waits for the writes kept in memory (deferCancel), its
+     * hold in force: one asked for while writes are held, or one whose release
+     * met a hold as it was written. A queued cancel's own run (`asQueued`)
+     * goes back on the queue as it is, its note and askers with it (requeue).
+     */
+    waitForWrites(key, target, what, run, note, noteAuthor, asQueued) {
+        if (asQueued) {
+            // A stop during its run (a listener's, of the very write that met the
+            // hold) found it off the queue: it isn't put back on a stopped one,
+            // and is told as the stop tells a waiting cancel.
+            if (this.stopped) {
+                console.error(`[tune-out] stopping: the cancel of ${asQueued.what} met held writes when it ran, as the host stopped`);
+                this.dropQueued(asQueued, { reason: 'stopped' });
+                return { ok: true, deferred: true };
+            }
+            this.requeue(key, asQueued);
+            return { ok: true, deferred: true };
+        }
+        const kept = this.deferCancel(key, target, what, run, note, noteAuthor);
+        return { ok: true, deferred: true, ...(kept === 'note-dropped' ? { noteDropped: true } : {}) };
     }
     /** Whether a reader (persistent subconscious or reader forks) attends holds. */
     hasReader() {
         return this.readerAvailable();
     }
+    /**
+     * End a tune-out: system-framed backlog dump into the resident's window
+     * (capped), stored and made durable before the epoch's end is recorded,
+     * then the lifecycle notice and one wake for the resident.
+     * `subconsciousNote` is the subconscious's own text (from its
+     * cancel_tuneout call) — delivered verbatim under its name, never
+     * synthesized here. A dump that can't be made durable (commitDeliveries)
+     * throws, the tune-out still in force, and a later cancel dumps what no
+     * earlier dump of the epoch covered (`released`). While the framework
+     * keeps writes in memory (writesHeld: a surgery's hold, a manager refusing
+     * its work), nothing is dumped or ended yet: the cancel waits, the
+     * tune-out in force, and runs once the writes are stored, or told of
+     * where storing one fails (runDeferredCancels). It answers `deferred`
+     * then.
+     */
     cancel(serverId, channelId, source, reason, subconsciousNote, 
     /** `reader: 'forks'`: the reader fork whose note this is. */
     noteAuthor, 
     /** The lifecycle state the channel returns to (a tool close ends in 'closed'). */
     nextState = 'open') {
+        return this.endTuneOut(serverId, channelId, source, reason, subconsciousNote, noteAuthor, nextState);
+    }
+    /**
+     * cancel's work. `asQueued`: the queued cancel this call runs
+     * (runDeferredCancels), whose note (`subconsciousNote`) is delivered as a
+     * queued one is (deliverQueuedNote), told lost (dropDeferred) where it
+     * can't be, the cancel going on.
+     */
+    endTuneOut(serverId, channelId, source, reason, subconsciousNote, noteAuthor, nextState, asQueued) {
+        // Who its release credits, by the names they run under: a queued run's
+        // every asker (deferCancel), else this call's caller, its note's author
+        // (a reader's cancel_tuneout passes its caller so, note or none).
+        const askers = asQueued ? asQueued.askers : noteAuthor !== undefined ? [noteAuthor] : [];
         const ending = this.channelRegistry.getTuneOutState(serverId, channelId);
         if (!ending) {
             // Its reader is the resident's tune_out: cancel_tuneout finds the channel first.
             return { ok: false, error: this.notTunedOut(this.quotedShown(serverId, channelId), 'you') };
         }
+        const key = this.key(serverId, channelId);
+        const waitForWrites = () => this.waitForWrites(key, {
+            epochId: ending.params.epochId, serverId, channelId,
+            current: () => this.channelRegistry.getTuneOutState(serverId, channelId)?.params.epochId,
+        }, `${this.shown(serverId, channelId)} (${reason})`, (entry) => { this.endTuneOut(serverId, channelId, source, reason, entry.note, entry.noteAuthor, nextState, entry); }, subconsciousNote, noteAuthor, asQueued);
+        if (this.writesHeldNow())
+            return waitForWrites();
+        // Backlog: every message held under this epoch that no earlier dump of
+        // it covered (one whose cancel failed before the end was recorded), in
+        // store order, which is arrival order: a held message is stored as it
+        // arrives (#291). A cancel waits while a surgery's hold keeps writes in
+        // memory (writesHeld), so they are stored by now; one that went on during
+        // the hold, writesHeld having thrown, lists those the hold keeps after
+        // every stored one (residentMessages).
         const epochId = ending.params.epochId;
         const ofEpoch = (m) => m.metadata?.tuneOut?.epochId === epochId;
-        const storedRows = this.hooks.getStoredMessages();
-        const queuedRows = this.hooks.getDeferredMessages?.() ?? [];
-        const earlier = releaseRecordsOf([...storedRows, ...queuedRows], epochId);
+        const rows = this.residentMessages();
+        const earlier = releaseRecordsOf(rows, epochId);
         const dumpedEarlier = keyedBy(earlier);
-        const unreleased = (m) => ofEpoch(m) && !dumpedEarlier(m);
-        const held = queuedRows.filter(unreleased);
-        const backlog = [...storedRows.filter(unreleased), ...held];
+        const backlog = rows.filter((m) => ofEpoch(m) && !dumpedEarlier(m));
         // Whole messages: a cap below one shows none, where slice(-0.5) would
         // start at 0 and take them all.
         const cap = Math.floor(ending.params.backlogCap);
-        const authorOf = (m) => suppliedValue(m.metadata?.author?.name ?? m.participant);
         // A line names its author as the resident knows them and marks what a
         // text line can't carry (`[image]`), so the dump says what it leaves out.
         const lineOf = renderHeldLine;
@@ -528,7 +3512,15 @@ export class TuneOutCoordinator {
         const historyTool = this.hooks.historyTool ? this.hooks.historyTool() : 'fetch_history';
         // The channel as the resident and the subconscious are shown it.
         const name = this.shown(serverId, channelId);
-        const lifecycle = `[${NOTICE_TAG.tuneOut}: ${name} cancelled — ${reason}, ${ending.wakeCount} wake${ending.wakeCount === 1 ? '' : 's'}]`;
+        // A cancel of this hold still queued (asked for while writes were held,
+        // its release failing since): the subconscious's note it carries goes
+        // out now, ahead of this release, which says so where it can't
+        // (queuedNoteFirst); the lines fitted below make room for that.
+        const noteMetadata = { kind: 'subconscious-note', channelId, serverId, epochId };
+        const first = asQueued ? undefined : this.queuedNoteFirst(key, epochId, noteMetadata);
+        const lost = first?.lost ? this.lossInRelease(first.entry, first.lost.error, name, 'tune-out') : undefined;
+        const lifecycle = `[${NOTICE_TAG.tuneOut}: ${name} cancelled — ${reason}, ${ending.wakeCount} wake${ending.wakeCount === 1 ? '' : 's'}]`
+            + (lost ? `\n\n${lost}` : '');
         const render = (lines, truncated) => {
             const attrs = [
                 `channel=${this.quotedShown(serverId, channelId)}`,
@@ -555,7 +3547,6 @@ export class TuneOutCoordinator {
         // residents' strategies cut its frame, the header and tags.
         let shown = cap > 0 ? backlog.slice(-cap) : [];
         let lines = shown.map(lineOf);
-        let newestCut = false;
         const room = this.hooks.residentMessageChars?.();
         if (room !== undefined && render(lines, backlog.length - shown.length).length > room) {
             // The dump's length with no line, for the count that showing k lines
@@ -581,7 +3572,6 @@ export class TuneOutCoordinator {
             if (kept === 0 && head !== '') {
                 lines = [head + CUT_MARK];
                 shown = shown.slice(-1);
-                newestCut = true;
             }
             else {
                 lines = lines.slice(lines.length - kept);
@@ -589,98 +3579,168 @@ export class TuneOutCoordinator {
             }
         }
         const truncated = backlog.length - shown.length;
-        // The held messages the dump leaves out, the oldest of them. The
-        // subconscious's report covers what the dump leaves out, but its view
-        // holds stored rows only, so these go to it with its notice below. So does
-        // a held message the dump shows but can't give whole: one whose image or
-        // audio its text lines drop, or the newest, cut to fit.
-        const heldLeftOut = held.slice(0, Math.max(0, held.length - shown.length));
-        const heldForReport = [
-            ...heldLeftOut,
-            ...held.slice(heldLeftOut.length).filter((m) => m.content.some((b) => b.type !== 'text') || (newestCut && m === shown[0])),
-        ];
+        // Host-framed system artifacts — never voiced as anyone. The dump records
+        // the held rows it covered (`released`), so a cancel tried again after
+        // this one failed before the end was recorded, in this process or after
+        // a restart, dumps only those no dump covered, and writes none when
+        // every one was. There is no dump to write when an earlier one covered
+        // them all, but the end is still to be recorded.
         const records = [...earlier];
+        // Whether the release written was kept in memory, by what its write
+        // answered (an empty id), not by whether writes are held after it.
+        let releaseKept = false;
         if (earlier.length === 0 || backlog.length > 0) {
-            const record = { ...keysOf(backlog), total: backlog.length, truncated, report: keysOf(heldForReport) };
-            this.hooks.addMessage('user', [{ type: 'text', text: render(lines, truncated) }], { system: true, kind: 'tune-out-cancel', channelId, epochId, released: record });
+            const record = { ...keysOf(backlog), total: backlog.length, truncated, report: { ids: [], writeIds: [] } };
+            releaseKept = this.writeKept(this.hooks.addMessage('user', [{ type: 'text', text: render(lines, truncated) }], { system: true, kind: 'tune-out-cancel', channelId, epochId, released: record, cancel: { source, reason, ...(askers.length > 0 ? { by: askers[0], askers } : {}) }, ...(lost ? { lostNote: true } : {}) }));
             records.push(record);
         }
+        else if (lost) {
+            // Every held message is in an earlier release: this one carries the
+            // loss alone, and covers none (no `released`). `lostNote` marks a
+            // release that tells a queued note's loss, as a boot reads it
+            // (noteUnstampedStop).
+            releaseKept = this.writeKept(this.hooks.addMessage('user', [{ type: 'text', text: lifecycle }], { system: true, kind: 'tune-out-cancel', channelId, epochId, cancel: { source, reason, ...(askers.length > 0 ? { by: askers[0], askers } : {}) }, lostNote: true }));
+        }
+        else if (this.residentToldStillStands(epochId, name)) {
+            // The boot told the resident this tune-out still stands, after its
+            // last release (tellResidentUnended): this cancel delivers nothing
+            // more, and says it has ended, so that row isn't the resident's last
+            // word on it. It covers none (no `released`).
+            releaseKept = this.writeKept(this.hooks.addMessage('user', [{ type: 'text', text: `${lifecycle}\n\n${endedNow('tune-out')}` }], { system: true, kind: 'tune-out-cancel', channelId, epochId, cancel: { source, reason, ...(askers.length > 0 ? { by: askers[0], askers } : {}) } }));
+        }
+        // Told, in the release written: not delivered or told again, even if
+        // the release isn't made durable below and the queued cancel runs later,
+        // whose run, or whichever ends the hold, traces the loss and asks the
+        // turn then (lossesToldInRelease).
+        if (first?.lost) {
+            first.entry.noteSettled = true;
+            first.entry.lostInRelease = first.lost;
+        }
+        // A release that met a hold as it was written (a context manager that
+        // refuses its work from that write on) is kept in memory, not stored,
+        // whatever a sync answers: the cancel waits for the writes again, the
+        // tune-out in force, and its run once they are stored finds this release
+        // there, covering the backlog, and records the end then. So does one
+        // stored, writes held only after it (a listener's hold, begun as the
+        // write returned): no end is recorded while writes are held, but
+        // nothing of the release is in memory.
+        if (releaseKept || this.writesHeldNow()) {
+            console.error(`[tune-out] the release of ${this.shown(serverId, channelId)} ${releaseKept ? 'was kept in memory as it was written' : 'was stored, and writes are held since'}, so its tune-out stays in force and the cancel waits until the writes are stored`);
+            // The loss it told is in memory with it, which a stop loses.
+            if (first?.lost && releaseKept)
+                first.entry.heldInMemory = true;
+            return waitForWrites();
+        }
+        // The release is durable before the end is recorded (the registry
+        // writes the end to its log at once): a crash or a throw before the end
+        // leaves the tune-out in force with its release stored, never ended with
+        // none. It is stored, not kept in memory: a cancel made while the
+        // framework keeps writes in memory waits until it stores them again
+        // (deferCancel).
         if (this.hooks.commitDeliveries?.() === false) {
             throw new Error(`the backlog of ${this.quotedShown(serverId, channelId)} could not be made durable, so its tune-out stays in force`);
         }
+        // A queued cancel's own run delivers its note now, its release durable,
+        // and makes the note durable too before the end is recorded: a crash
+        // after the end, the hold no longer on record for the next boot to read,
+        // finds the note stored. One that can't be delivered is told lost once
+        // the hold has ended (dropDeferred, below).
+        // Its note's row names this cancel and its askers (NoteMetadata): the
+        // run may write no release of its own, an earlier one covering the
+        // backlog, and a boot after a crash reads its run from the note.
+        const own = asQueued
+            ? this.noteNow(asQueued, { ...noteMetadata, cancel: { source, reason, askers: [...askers] } }, 'itself')
+            : undefined;
+        // A note kept in memory as it was written (its write answered so) is no
+        // more stored than a release kept so: the cancel waits for the writes,
+        // the tune-out in force, its note settled, to be stored at their release.
+        // Where storing it there fails, the framework says so (heldWriteLost),
+        // and the cancel's next run tells it lost after the end (noteNow). A
+        // note stored, writes held only after it, waits too, for no end is
+        // recorded while writes are held, but isn't kept in memory: a stop
+        // meanwhile doesn't tell it lost (Weft, #844).
+        if (own?.delivered && (own.kept || this.writesHeldNow())) {
+            console.error(`[tune-out] the note left with the cancel of ${this.shown(serverId, channelId)} ${own.kept ? 'was kept in memory as it was written' : 'was stored, and writes are held since'}, so its tune-out stays in force and the cancel waits until the writes are stored`);
+            if (own.kept)
+                asQueued.heldInMemory = true;
+            return waitForWrites();
+        }
+        if (own?.delivered && this.hooks.commitDeliveries?.() === false) {
+            throw new Error(`the note left with the cancel of ${this.quotedShown(serverId, channelId)} could not be made durable, so its tune-out stays in force`);
+        }
         this.channelRegistry.cancelTuneOut(serverId, channelId, nextState, source);
         this.clearTimers(serverId, channelId);
         this.divertedSinceInvocation.delete(this.key(serverId, channelId));
-        const reportedEarlier = keyedBy(earlier.map((r) => r.report));
-        const release = {
-            truncated: records.reduce((n, r) => n + r.truncated, 0),
-            heldForReport: [
-                ...[...storedRows, ...queuedRows].filter((m) => ofEpoch(m) && reportedEarlier(m)),
-                ...(records.length > earlier.length ? heldForReport : []),
-            ],
-        };
-        // The subconscious's own words, under its own name, verbatim.
+        // Its own note that couldn't be delivered is told lost now the hold has
+        // ended, ahead of any step after the end that may throw, and after its
+        // timers are cleared, so that a tune-out a listener of the drop's trace
+        // enters keeps its own.
+        if (own?.lost)
+            this.dropDeferred(asQueued, own.lost);
+        // The subconscious's own words, under its own name, verbatim; a reader
+        // fork's as its attributed mail. With its server: a conversational row
+        // whose channel the framework reads (repinChannel), where another
+        // server's channel can share the id. A cancel of this hold still queued
+        // has nothing left to end: it leaves the queue, and the note it carries
+        // goes out first, since it was asked for first, then this caller's: the
+        // subconscious's went out before the release (queuedNoteFirst), whose
+        // loss the release told, with a turn to read it; a reader fork's goes
+        // out now. A queued cancel's own run delivers its note as a queued one
+        // (asQueued), told lost where it can't be.
         const subName = this.hooks.subconsciousName();
-        if (subconsciousNote && subName) {
-            this.hooks.addMessage(subName, [{ type: 'text', text: subconsciousNote }], 
-            // With its server: a conversational row whose channel the framework
-            // reads (repinChannel), where another server's channel can share the id.
-            { kind: 'subconscious-note', channelId, serverId, epochId });
-        }
-        else if (subconsciousNote && noteAuthor && this.hooks.deliverFromReader) {
-            // A reader fork's note: attributed mail, under the fork's name and
-            // incarnation, never the resident's voice.
-            this.hooks.deliverFromReader(noteAuthor, [{ type: 'text', text: subconsciousNote }], { kind: 'subconscious-note', channelId, epochId });
-        }
+        const queued = this.takeDeferred(key, epochId);
+        const queuedNote = queued !== undefined
+            && (queued === first?.entry ? !first.lost : this.deliverQueuedNote(queued, noteMetadata, 'another'));
+        // A loss a release told: this one's, or an earlier one's that wasn't
+        // made durable then, the hold ending only now.
+        this.lossesToldInRelease([first?.entry, queued, asQueued], name);
+        const ownNote = asQueued
+            ? own?.delivered === true
+            : !!subconsciousNote && this.deliverReaderNote(subconsciousNote, noteAuthor, noteMetadata);
         const primary = this.hooks.primaryName();
         if (primary) {
-            this.hooks.requestInference(primary, `tune-out cancelled (${reason})`, 'tune-out');
+            this.askReleaseTurn(primary, `tune-out cancelled (${reason})`, 'resident');
         }
         // The subconscious gets one cancel turn of its own: the issue's cancel
         // shape is dump + a report from the subconscious, and when the dump left
-        // messages out, its summary is what covers them. The held messages the
-        // dump can't give the resident whole follow the notice, each a row of its
-        // own with its own content, as its view can't have them until they're
-        // stored. A cancel the subconscious makes itself gets the notice and the
-        // turn when some do, since it wrote its note before it could see them,
-        // and when it wrote no note and the dump left any message out, since
-        // nothing else then covers it. Otherwise its note speaks for what it saw.
+        // messages out, its summary is what covers them. Every held message is
+        // stored (#291), so its view has them all, the newest at its next point.
+        // A cancel the subconscious makes itself gets the notice and the turn
+        // when some of the epoch's messages are ones it hasn't been shown yet
+        // (unseenBySubconscious: those that came in during its own turn, say),
+        // since it wrote its note before it could see them, and the notice says
+        // how many; and when no note of its went out (its own, or a queued
+        // cancel's) and the dump left any message out, since nothing else then
+        // covers it. Otherwise its note speaks for what it saw.
         const selfCancel = source === 'subconscious';
-        if (subName && (!selfCancel || release.heldForReport.length > 0 || (!subconsciousNote && release.truncated > 0))) {
+        const unseen = subName && selfCancel ? this.unseenBySubconscious(ofEpoch) : 0;
+        const truncatedInAll = records.reduce((n, r) => n + r.truncated, 0);
+        if (subName && (!selfCancel || unseen > 0 || (!ownNote && !queuedNote && truncatedInAll > 0))) {
             const truncNote = truncationNote(records);
-            const heldNote = release.heldForReport.length > 0
-                ? ` Still held at the cancel, so your view may not have them yet: the ${release.heldForReport.length} message${release.heldForReport.length === 1 ? '' : 's'} after this one.`
+            const unseenNote = unseen > 0
+                ? ` ${unseen === 1 ? 'One of its held messages' : `${unseen} of its held messages`} came in after you last looked; your view has ${unseen === 1 ? 'it' : 'them'} now.`
                 : '';
-            this.hooks.addMessage('user', [{ type: 'text', text: `[${NOTICE_TAG.tuneOutCancelled}: ${this.shown(serverId, channelId)} — ${reason}.${truncNote}${heldNote}]` }], { system: true, kind: 'tune-out-cancel-report', channelId }, subName);
-            // Each held message is a row of its own, so a per-message cap cuts each
-            // one on its own, its author's label included, not the batch's newest.
-            for (const m of release.heldForReport) {
-                this.hooks.addMessage('user', [{ type: 'text', text: `${authorOf(m)}:` }, ...m.content], { system: true, kind: 'tune-out-cancel-held', channelId }, subName);
-            }
-            this.hooks.requestInference(subName, `tune-out cancelled: ${name}`, 'tune-out');
+            this.hooks.addMessage('user', [{ type: 'text', text: `[${NOTICE_TAG.tuneOutCancelled}: ${this.shown(serverId, channelId)} — ${reason}.${truncNote}${unseenNote}]` }], { system: true, kind: 'tune-out-cancel-report', channelId }, subName);
+            this.askReleaseTurn(subName, `tune-out cancelled: ${name}`, 'subconscious');
         }
         else if (!subName && this.forkReader) {
             // Forks are the reader: one last fork for the epoch, handed what no
-            // fork has been handed yet, stored or still queued behind the
-            // resident's turn, plus the cancel notice; its report follows the dump.
-            // Once the epoch ends, a message still queued lands in the store
-            // view-filtered, where nothing else reads it, so it goes to this fork
-            // now. On a reader's own cancel, the reader has read what it was
+            // fork has been handed yet, plus the cancel notice; its report follows
+            // the dump. On a reader's own cancel, the reader has read what it was
             // handed, so a fork follows only when messages arrived after that.
             const stored = this.hooks.getStoredMessages().filter(ofEpoch);
-            const queued = this.queuedHeld(ofEpoch);
-            const rest = this.unhandedBacklog(this.handOffKey(epochId, serverId, channelId), stored, queued);
-            const unread = rest.backlog.length + rest.queued.length;
+            const unread = this.unhandedBacklog(this.handOffKey(epochId, serverId, channelId), stored).length;
             if (!selfCancel || unread > 0) {
                 const truncNote = truncationNote(records);
                 const lateNote = selfCancel
                     ? ` ${unread === 1 ? 'This message' : `These ${unread} messages`} arrived after the reader that cancelled was handed its own.`
                     : '';
-                this.invokeReaderFork(serverId, channelId, epochId, 'cancel', `[${NOTICE_TAG.tuneOutCancelled}: ${name} — ${reason}.${truncNote}${lateNote}]`, stored, queued);
+                this.invokeReaderFork(serverId, channelId, epochId, 'cancel', `[${NOTICE_TAG.tuneOutCancelled}: ${name} — ${reason}.${truncNote}${lateNote}]`, stored);
             }
         }
         this.dropHandOffs(epochId);
         this.dropLooks(epochId);
+        this.forgetWindowStart(epochId);
         // Where the all-except hold still holds the channel, its own messages
         // there that its reader hasn't looked at are counted again, as the
         // channel's own tune-out's count stood in for theirs.
@@ -688,6 +3748,16 @@ export class TuneOutCoordinator {
         this.hooks.emitTrace({ type: 'tune-out:cancelled', serverId, channelId, epochId, reason, wakeCount: ending.wakeCount });
         return { ok: true };
     }
+    /** How many stored messages `keep` keeps the subconscious hasn't been shown (the hook's count), 0 where the host can't say. */
+    unseenBySubconscious(keep) {
+        try {
+            return this.hooks.unseenBySubconscious?.(keep) ?? 0;
+        }
+        catch (err) {
+            console.error('[tune-out] could not count the held messages the subconscious has not been shown, so none is counted:', err);
+            return 0;
+        }
+    }
     // ==========================================================================
     // Ingestion: divert, stamp, classify
     // ==========================================================================
@@ -730,6 +3800,76 @@ export class TuneOutCoordinator {
     get scopeStateId() {
         return `tune-out/${this.hooks.primaryName() ?? 'default'}/all-except`;
     }
+    /**
+     * End every hold on record and deliver each backlog to the resident: the
+     * per-channel holds, then the all-except scope. For a host with no reader
+     * (AgentFramework.releaseTuneOutsWithoutReader) and a reader that ended; a
+     * hold whose end fails stays on record, and says so in the log. A
+     * per-channel hold ends under its own source, so an agent's tune-out keeps
+     * the agent's provenance (the housekeeping guard reads it); `source` is the
+     * all-except scope's.
+     */
+    releaseAll(source, reason, options = {}) {
+        if (this.releaseRetry) {
+            clearTimeout(this.releaseRetry);
+            this.releaseRetry = null;
+        }
+        let failed = false;
+        // What the registry has on record, registered or not: at a start the
+        // channels aren't registered yet, so listActive() would find none.
+        let onRecord = [];
+        try {
+            onRecord = this.channelRegistry.tuneOutsOnRecord();
+        }
+        catch (err) {
+            console.error(`[tune-out] the tune-outs on record could not be read to release them (${reason}), so they stay on record:`, err);
+            failed = true;
+        }
+        for (const { serverId, channelId, source: recorded } of onRecord) {
+            try {
+                const r = this.cancel(serverId, channelId, recorded, reason);
+                if (!r.ok) {
+                    console.error(`[tune-out] ${this.shown(serverId, channelId)} could not be released (${reason}), so it stays on record: ${r.error}`);
+                    failed = true;
+                }
+            }
+            catch (err) {
+                console.error(`[tune-out] ${this.shown(serverId, channelId)} could not be released (${reason}), so it stays on record:`, err);
+                failed = true;
+            }
+        }
+        try {
+            if (this.getAllExcept()) {
+                const r = this.cancelAllExcept(source, reason);
+                if (!r.ok) {
+                    console.error(`[tune-out] the all-except hold could not be released (${reason}), so it stays on record: ${r.error}`);
+                    failed = true;
+                }
+            }
+        }
+        catch (err) {
+            console.error(`[tune-out] the all-except hold could not be released (${reason}), so it stays on record:`, err);
+            failed = true;
+        }
+        // With a reader gone mid-run the hold still diverts traffic, and an
+        // open-ended one has no end time to release it: try again, backing off,
+        // a few times (a try that fails after its dump is durable writes a new
+        // one only for messages held since). After the last, the hold stays
+        // until the resident cancels it, or the next start releases it (with no
+        // reader configured) or resumes it (with one).
+        const attempt = options.attempt ?? 1;
+        if (failed && options.retry && !this.stopped) {
+            if (attempt >= RELEASE_RETRY_ATTEMPTS) {
+                console.error(`[tune-out] releasing the holds (${reason}) failed ${attempt} times, so what failed stays held until it is cancelled, or the next start releases it (with no reader configured) or resumes it (with one)`);
+            }
+            else {
+                this.releaseRetry = setTimeout(() => {
+                    this.releaseRetry = null;
+                    this.releaseAll(source, reason, { ...options, attempt: attempt + 1 });
+                }, EXPIRY_RETRY_MS * 2 ** (attempt - 1));
+            }
+        }
+    }
     getAllExcept() {
         if (this.scopeCache !== undefined)
             return this.scopeCache;
@@ -750,6 +3890,8 @@ export class TuneOutCoordinator {
         this.scopeCache = state;
     }
     enterAllExcept(except, opts, source) {
+        if (!this.readerAvailable())
+            return { ok: false, error: NO_READER_REFUSAL };
         const read = this.readOptions(opts, {
             durationSeconds: null,
             cadenceSeconds: `for the default, ${TUNE_OUT_DEFAULTS.cadenceSeconds}`,
@@ -785,8 +3927,7 @@ export class TuneOutCoordinator {
             source,
         };
         this.writeScope({ params, wakeCount: 0 });
-        const oldest = this.listActive().reduce((min, e) => Math.min(min, e.params.startedAtSequence), params.startedAtSequence);
-        this.hooks.setSubconsciousAnchor(oldest);
+        this.anchorSubconscious();
         this.armScopeTimers(params);
         this.hooks.emitTrace({
             type: 'tune-out:entered', serverId: except.serverId, channelId: except.channelId, epochId: params.epochId,
@@ -852,7 +3993,7 @@ export class TuneOutCoordinator {
                 for (const [channelKey, diverted] of this.divertedSinceInvocation) {
                     if (diverted <= 0)
                         continue;
-                    const [serverId, channelId] = channelKey.split('\0');
+                    const [serverId, channelId] = this.channelOf(channelKey);
                     if (this.channelRegistry.getTuneOutState(serverId, channelId))
                         continue; // a per-channel epoch's own cadence
                     this.invokeSubconscious(serverId, channelId, 'cadence', diverted);
@@ -876,12 +4017,11 @@ export class TuneOutCoordinator {
         this.expiryTimers.delete(key);
     }
     /** Channels held by the scope (not by their own epoch) with the count held under it. */
-    scopeHeldCounts(epochId) {
+    scopeHeldCounts(epochId, held) {
         const counts = new Map();
-        const all = [...this.hooks.getStoredMessages(), ...(this.hooks.getDeferredMessages?.() ?? [])];
-        for (const m of all) {
+        for (const m of this.residentMessages()) {
             const meta = m.metadata;
-            if (meta?.tuneOut?.epochId !== epochId)
+            if (meta?.tuneOut?.epochId !== epochId || (held && !held(m)))
                 continue;
             const channelId = typeof meta.channelId === 'string' ? meta.channelId : '(unknown channel)';
             const serverId = typeof meta.serverId === 'string' ? meta.serverId : '';
@@ -892,16 +4032,40 @@ export class TuneOutCoordinator {
         }
         return counts;
     }
+    /**
+     * End the all-except hold: one release notice with a per-channel backlog
+     * (each capped), stored and made durable before the hold's end is
+     * recorded, as a channel's cancel does, then the reader's note if any,
+     * one wake for the resident, and the reader's own look at what it had not
+     * seen. While the framework keeps writes in memory it waits, as cancel
+     * does.
+     */
     cancelAllExcept(source, reason, note, noteAuthor) {
+        return this.endAllExcept(source, reason, note, noteAuthor);
+    }
+    /** cancelAllExcept's work; `asQueued` as endTuneOut's. */
+    endAllExcept(source, reason, note, noteAuthor, asQueued) {
+        // Who its release credits, as endTuneOut's.
+        const askers = asQueued ? asQueued.askers : noteAuthor !== undefined ? [noteAuthor] : [];
         const scope = this.getAllExcept();
         if (!scope)
             return { ok: false, error: 'no all-except hold is active' };
+        // As a channel's cancel: while writes are kept in memory, the release
+        // would be, and writeScope(null) below is on disk at once.
+        const waitForWrites = () => this.waitForWrites(TuneOutCoordinator.SCOPE_KEY, {
+            epochId: scope.params.epochId, serverId: scope.params.except.serverId, channelId: scope.params.except.channelId,
+            scope: 'all-except', current: () => this.getAllExcept()?.params.epochId,
+        }, `the all-except hold (${reason})`, (entry) => { this.endAllExcept(source, reason, entry.note, entry.noteAuthor, entry); }, note, noteAuthor, asQueued);
+        if (this.writesHeldNow())
+            return waitForWrites();
         const { epochId, except, backlogCap } = scope.params;
         const ofEpoch = (m) => m.metadata?.tuneOut?.epochId === epochId;
-        const storedRows = this.hooks.getStoredMessages();
-        const queuedRows = this.hooks.getDeferredMessages?.() ?? [];
-        const all = [...storedRows.filter(ofEpoch), ...queuedRows.filter(ofEpoch)];
-        const earlier = releaseRecordsOf([...storedRows, ...queuedRows], epochId);
+        // Stored, and kept by a surgery's hold until its release
+        // (residentMessages), less what an earlier release of the hold covered
+        // (`released`), as a channel's cancel reads them.
+        const rows = this.residentMessages();
+        const all = rows.filter(ofEpoch);
+        const earlier = releaseRecordsOf(rows, epochId);
         const releasedEarlier = keyedBy(earlier);
         const fresh = all.filter((m) => !releasedEarlier(m));
         const byChannel = new Map();
@@ -933,41 +4097,94 @@ export class TuneOutCoordinator {
         const summary = byChannel.size === 0
             ? 'Nothing was held.'
             : `${fresh.length} message${fresh.length === 1 ? '' : 's'} held in ${byChannel.size} channel${byChannel.size === 1 ? '' : 's'}.`;
+        // A cancel of this hold still queued: the subconscious's note goes out
+        // now, ahead of this release, which says so where it can't, as a
+        // channel's cancel does (queuedNoteFirst).
+        const shownExcept = this.shown(except.serverId, except.channelId);
+        const first = asQueued ? undefined : this.queuedNoteFirst(TuneOutCoordinator.SCOPE_KEY, epochId, { kind: 'subconscious-note', epochId });
+        const lost = first?.lost
+            ? this.lossInRelease(first.entry, first.lost.error, `the all-except hold (all channels except ${shownExcept})`, 'hold')
+            : undefined;
+        const header = `[${NOTICE_TAG.tuneOut}: all channels except ${shownExcept} released — ${reason}, ${scope.wakeCount} wake${scope.wakeCount === 1 ? '' : 's'}]`
+            + (lost ? `\n\n${lost}` : '');
+        // As a channel's: kept in memory by what the write answered.
+        let releaseKept = false;
         if (earlier.length === 0 || fresh.length > 0) {
             const record = { ...keysOf(fresh), total: fresh.length, truncated: truncatedInAll, report: { ids: [], writeIds: [] } };
-            this.hooks.addMessage('user', [{ type: 'text', text: `[${NOTICE_TAG.tuneOut}: all channels except ${this.shown(except.serverId, except.channelId)} released — ${reason}, ${scope.wakeCount} wake${scope.wakeCount === 1 ? '' : 's'}]\n\n${summary}${dumps.length > 0 ? '\n\n' + dumps.join('\n\n') : ''}` }], { system: true, kind: 'tune-out-cancel', scope: 'all-except', channelId: except.channelId, epochId, released: record });
+            releaseKept = this.writeKept(this.hooks.addMessage('user', [{ type: 'text', text: `${header}\n\n${summary}${dumps.length > 0 ? '\n\n' + dumps.join('\n\n') : ''}` }], { system: true, kind: 'tune-out-cancel', scope: 'all-except', channelId: except.channelId, epochId, released: record, cancel: { source, reason, ...(askers.length > 0 ? { by: askers[0], askers } : {}) }, ...(lost ? { lostNote: true } : {}) }));
+        }
+        else if (lost) {
+            releaseKept = this.writeKept(this.hooks.addMessage('user', [{ type: 'text', text: header }], { system: true, kind: 'tune-out-cancel', scope: 'all-except', channelId: except.channelId, epochId, cancel: { source, reason, ...(askers.length > 0 ? { by: askers[0], askers } : {}) }, lostNote: true }));
+        }
+        else if (this.residentToldStillStands(epochId, 'the all-except hold')) {
+            // As a channel's: the boot told the resident the hold still stands.
+            releaseKept = this.writeKept(this.hooks.addMessage('user', [{ type: 'text', text: `${header}\n\n${endedNow('hold')}` }], { system: true, kind: 'tune-out-cancel', scope: 'all-except', channelId: except.channelId, epochId, cancel: { source, reason, ...(askers.length > 0 ? { by: askers[0], askers } : {}) } }));
+        }
+        if (first?.lost) {
+            first.entry.noteSettled = true;
+            first.entry.lostInRelease = first.lost;
+        }
+        // As a channel's cancel: a release kept in memory as it was written
+        // waits for the writes, and a queued cancel's own note is made durable
+        // before the end.
+        if (releaseKept || this.writesHeldNow()) {
+            console.error(`[tune-out] the all-except release ${releaseKept ? 'was kept in memory as it was written' : 'was stored, and writes are held since'}, so the hold stays in force and the cancel waits until the writes are stored`);
+            if (first?.lost && releaseKept)
+                first.entry.heldInMemory = true;
+            return waitForWrites();
         }
         if (this.hooks.commitDeliveries?.() === false) {
             throw new Error('the all-except release could not be made durable, so the hold stays in force');
         }
+        // As a channel's, one kept in memory and lost when the writes are stored
+        // is told lost by the cancel's next run, after the end (heldWriteLost).
+        const own = asQueued
+            ? this.noteNow(asQueued, { kind: 'subconscious-note', epochId, cancel: { source, reason, askers: [...askers] } }, 'itself')
+            : undefined;
+        if (own?.delivered && (own.kept || this.writesHeldNow())) {
+            console.error(`[tune-out] the note left with the all-except release ${own.kept ? 'was kept in memory as it was written' : 'was stored, and writes are held since'}, so the hold stays in force and the cancel waits until the writes are stored`);
+            if (own.kept)
+                asQueued.heldInMemory = true;
+            return waitForWrites();
+        }
+        if (own?.delivered && this.hooks.commitDeliveries?.() === false) {
+            throw new Error('the note left with the all-except release could not be made durable, so the hold stays in force');
+        }
         this.writeScope(null);
         this.clearScopeTimers();
         for (const [key, pending] of this.pendingWakes) {
-            const [serverId, channelId] = key.split('\0');
+            const [serverId, channelId] = this.channelOf(key);
             if (this.channelRegistry.getTuneOutState(serverId, channelId))
                 continue;
             clearTimeout(pending.timer);
             this.pendingWakes.delete(key);
         }
+        // As a channel's: told lost after the hold's timers are cleared.
+        if (own?.lost)
+            this.dropDeferred(asQueued, own.lost);
+        // A cancel of this hold still queued has nothing left to end, and its
+        // note goes out first, as a channel's cancel delivers one: the
+        // subconscious's went out before the release (queuedNoteFirst, settled
+        // then), a reader fork's goes out now; so does a queued cancel's own run
+        // deliver its note (asQueued).
         const subName = this.hooks.subconsciousName();
-        if (note && subName) {
-            this.hooks.addMessage(subName, [{ type: 'text', text: note }], { kind: 'subconscious-note', epochId });
-        }
-        else if (note && noteAuthor && this.hooks.deliverFromReader) {
-            this.hooks.deliverFromReader(noteAuthor, [{ type: 'text', text: note }], { kind: 'subconscious-note', epochId });
-        }
+        const queued = this.takeDeferred(TuneOutCoordinator.SCOPE_KEY, epochId);
+        if (queued && queued !== first?.entry)
+            this.deliverQueuedNote(queued, { kind: 'subconscious-note', epochId }, 'another');
+        this.lossesToldInRelease([first?.entry, queued, asQueued], 'all-except');
+        if (!asQueued && note)
+            this.deliverReaderNote(note, noteAuthor, { kind: 'subconscious-note', epochId });
         const primary = this.hooks.primaryName();
         if (primary)
-            this.hooks.requestInference(primary, `tune-out cancelled (${reason})`, 'tune-out');
+            this.askReleaseTurn(primary, `tune-out cancelled (${reason})`, 'resident');
         const notice = `[${NOTICE_TAG.tuneOutCancelled}: all channels except ${this.shown(except.serverId, except.channelId)} — ${reason}.]`;
         if (source !== 'subconscious' && subName) {
             this.hooks.addMessage('user', [{ type: 'text', text: notice }], { system: true, kind: 'tune-out-cancel-report', scope: 'all-except' }, subName);
-            this.hooks.requestInference(subName, 'tune-out cancelled: all-except', 'tune-out');
+            this.askReleaseTurn(subName, 'tune-out cancelled: all-except', 'subconscious');
         }
         else if (!subName && this.forkReader) {
-            // One last look per channel with messages no fork was handed, stored or
-            // still queued behind the resident's turn. That holds for a reader's
-            // own release too: the reader that released read one channel's
+            // One last look per channel with messages no fork was handed. That
+            // holds for a reader's own release too: the reader that released read one channel's
             // messages, and every other channel's would otherwise reach no reader.
             // A channel is its server and id here, as the readers' bookkeeping is.
             const channels = new Map();
@@ -980,29 +4197,39 @@ export class TuneOutCoordinator {
                 const ofChannel = inChannelOf(serverId, channelId);
                 const inChannel = (m) => ofEpoch(m) && ofChannel(m);
                 const stored = this.hooks.getStoredMessages().filter(inChannel);
-                const queued = this.queuedHeld(inChannel);
-                const rest = this.unhandedBacklog(this.handOffKey(epochId, serverId, channelId), stored, queued);
-                if (rest.backlog.length + rest.queued.length > 0) {
-                    this.invokeReaderFork(serverId, channelId, epochId, 'cancel', notice, stored, queued);
+                if (this.unhandedBacklog(this.handOffKey(epochId, serverId, channelId), stored).length > 0) {
+                    this.invokeReaderFork(serverId, channelId, epochId, 'cancel', notice, stored);
                 }
             }
         }
         for (const key of this.divertedSinceInvocation.keys()) {
-            const [serverId, channelId] = key.split('\0');
+            const [serverId, channelId] = this.channelOf(key);
             if (!this.channelRegistry.getTuneOutState(serverId, channelId))
                 this.divertedSinceInvocation.delete(key);
         }
         this.dropHandOffs(epochId);
         this.dropLooks(epochId);
+        this.forgetWindowStart(epochId);
         this.hooks.emitTrace({ type: 'tune-out:cancelled', serverId: except.serverId, channelId: except.channelId, epochId, scope: 'all-except', reason, wakeCount: scope.wakeCount });
-        this.announce(except, epochId, 'released', `[${NOTICE_TAG.focus}: ${primary ?? 'the resident'} released — ${reason}.]`);
+        // The line the excepted channel sees names no agent but the resident:
+        // a reader's cancel is "by its reader" there, its name kept for the
+        // resident's line, the reader's notice and the trace above.
+        const channelReason = source === 'subconscious' ? 'by its reader' : reason;
+        this.announce(except, epochId, 'released', `[${NOTICE_TAG.focus}: ${primary ?? 'the resident'} released — ${channelReason}.]`);
         return { ok: true };
     }
     /** What is held right now — per-channel epochs and the scope — without releasing. */
     check(opts = {}) {
-        const stored = this.hooks.getStoredMessages();
-        const deferred = this.hooks.getDeferredMessages?.() ?? [];
-        const countOf = (epochId) => [...stored, ...deferred].filter((m) => m.metadata?.tuneOut?.epochId === epochId).length;
+        // Stored, and kept by a surgery's hold until its release (residentMessages).
+        const stored = this.residentMessages();
+        // Held now: an epoch's messages no earlier release of it covered, which
+        // its next release delivers (a release whose end wasn't recorded leaves
+        // the hold in force, and delivered what it covered).
+        const heldOf = (epochId) => {
+            const delivered = keyedBy(releaseRecordsOf(stored, epochId));
+            return (m) => m.metadata?.tuneOut?.epochId === epochId && !delivered(m);
+        };
+        const countOf = (epochId) => stored.filter(heldOf(epochId)).length;
         const channels = this.listActive().map(({ serverId, channelId, params }) => ({
             serverId, channelId, epochId: params.epochId, held: countOf(params.epochId),
             ...(params.expiresAtMs !== undefined ? { expiresAtMs: params.expiresAtMs } : {}),
@@ -1011,7 +4238,8 @@ export class TuneOutCoordinator {
         let allExcept = null;
         if (scope) {
             const held = {};
-            for (const { serverId, channelId, count } of this.scopeHeldCounts(scope.params.epochId).values())
+            const isHeld = heldOf(scope.params.epochId);
+            for (const { serverId, channelId, count } of this.scopeHeldCounts(scope.params.epochId, isHeld).values())
                 held[this.shown(serverId, channelId)] = count;
             allExcept = { epochId: scope.params.epochId, except: scope.params.except, expiresAtMs: scope.params.expiresAtMs, wakeCount: scope.wakeCount, held };
         }
@@ -1028,10 +4256,12 @@ export class TuneOutCoordinator {
             }
             if (scope)
                 active.add(scope.params.epochId);
-            const lines = [...stored, ...deferred]
+            // Nor what an earlier release of the epoch delivered, its end not recorded.
+            const heldIn = new Map([...active].map((epochId) => [epochId, heldOf(epochId)]));
+            const lines = stored
                 .filter((m) => {
                 const meta = m.metadata;
-                return typeof meta?.tuneOut?.epochId === 'string' && active.has(meta.tuneOut.epochId)
+                return typeof meta?.tuneOut?.epochId === 'string' && active.has(meta.tuneOut.epochId) && heldIn.get(meta.tuneOut.epochId)(m)
                     && meta.channelId === opts.peek.channelId
                     && (!opts.peek.serverId || meta.serverId === opts.peek.serverId);
             })
@@ -1229,7 +4459,10 @@ export class TuneOutCoordinator {
     /**
      * One subconscious turn: a system-framed trigger notice (bracket style —
      * what happened, never what to say) plus standing dispositions, then an
-     * inference request. The merged view supplies the actual traffic.
+     * inference request. Its view supplies the actual traffic: the merged
+     * record while its window is the record, and with the presentation index
+     * (#291) what its window holds, which takes what it hasn't been shown at
+     * the turn's start, the notice included.
      */
     invokeSubconscious(serverId, channelId, trigger, count) {
         const subName = this.hooks.subconsciousName();
@@ -1240,39 +4473,55 @@ export class TuneOutCoordinator {
         const notice = trigger === 'wake'
             ? `[${NOTICE_TAG.tuneOutWake}: ${shown} — ${count} addressed message${count === 1 ? '' : 's'}]`
             : `[${NOTICE_TAG.tuneOutCadence}: ${shown} — ${count} diverted message${count === 1 ? '' : 's'} since your last look]`;
+        const ofChannel = inChannelOf(serverId, channelId);
+        const heldIn = (epochId) => (m) => m.metadata?.tuneOut?.epochId === epochId && ofChannel(m);
         if (!subName) {
             const hold = this.holdFor(serverId, channelId);
             if (!hold)
                 return;
-            const ofChannel = inChannelOf(serverId, channelId);
-            const inChannel = (m) => m.metadata?.tuneOut?.epochId === hold.epochId && ofChannel(m);
-            // Stored and still-queued alike: while the resident's turn runs, what
-            // arrives waits in the deferred queue, and that is the traffic a reader
-            // is there for.
-            this.invokeReaderFork(serverId, channelId, hold.epochId, trigger, notice, this.hooks.getStoredMessages().filter(inChannel), this.queuedHeld(inChannel));
+            const inChannel = heldIn(hold.epochId);
+            // A held message is stored as it arrives, the resident's turn alive or
+            // not, and what arrives while the resident is busy is the traffic a
+            // reader is there for.
+            this.invokeReaderFork(serverId, channelId, hold.epochId, trigger, notice, this.hooks.getStoredMessages().filter(inChannel));
             // The count restarts once the fork has been handed what was held, as it
             // does below once the subconscious's turn has been asked for. Otherwise
             // every later cadence period still sees this one's count and derives a
-            // fork with nothing new to read.
-            this.divertedSinceInvocation.set(key, 0);
+            // fork with nothing new to read. A held message a surgery's hold, or a
+            // manager waiting for its recovery, keeps in memory wasn't handed: it
+            // isn't stored yet. It still counts, so the first cadence period after
+            // it is stored hands it.
+            this.divertedSinceInvocation.set(key, this.keptInMemory(inChannel));
             return;
         }
         this.hooks.addMessage('user', [{ type: 'text', text: notice }], { system: true, kind: `tune-out-${trigger}`, channelId }, subName);
         this.hooks.requestInference(subName, `tune-out ${trigger}: ${shown}`, 'tune-out');
         // Counted from here only once the turn has been asked for, so a turn that
-        // throws leaves its messages for the next period's turn.
-        this.divertedSinceInvocation.set(key, 0);
+        // throws leaves its messages for the next period's turn. A held message
+        // kept in memory isn't in the subconscious's window yet, so it still
+        // counts, as for a fork above, and the first period after it is stored
+        // looks again.
         const epochId = this.holdFor(serverId, channelId)?.epochId;
+        this.divertedSinceInvocation.set(key, epochId ? this.keptInMemory(heldIn(epochId)) : 0);
         if (epochId)
             this.markLook(epochId, serverId, channelId);
     }
+    /** How many of the writes the framework keeps in memory (getSurgeryHeldMessages) `keep` keeps; 0 where they can't be read. */
+    keptInMemory(keep) {
+        try {
+            return (this.hooks.getSurgeryHeldMessages?.() ?? []).filter(keep).length;
+        }
+        catch (err) {
+            console.error('[tune-out] could not read the writes a surgery holds in memory, so none is counted:', err);
+            return 0;
+        }
+    }
     /**
-     * Count again, from the held messages, stored or still queued behind the
-     * resident's turn, those the reader of the epoch holding this channel now
-     * hasn't looked at: for reader forks, those no fork was handed; for the
-     * persistent subconscious, the stored ones held since its last look
-     * (lastLooks) and every queued one, which no view of it can show yet.
-     * Nothing holding the channel leaves no count.
+     * Count again, from the held messages (all stored, #291), those the reader
+     * of the epoch holding this channel now hasn't looked at: for reader
+     * forks, those no fork was handed; for the persistent subconscious, those
+     * held since its last look (lastLooks). Nothing holding the channel leaves
+     * no count.
      */
     rebuildTally(serverId, channelId) {
         const key = this.key(serverId, channelId);
@@ -1284,15 +4533,13 @@ export class TuneOutCoordinator {
         const ofChannel = inChannelOf(serverId, channelId);
         const inEpoch = (m) => m.metadata?.tuneOut?.epochId === hold.epochId && ofChannel(m);
         const rows = this.hooks.getStoredMessages().filter(inEpoch);
-        const queued = this.queuedHeld(inEpoch);
         let count;
         if (this.forkReader) {
-            const unread = this.unhandedBacklog(this.handOffKey(hold.epochId, serverId, channelId), rows, queued);
-            count = unread.backlog.length + unread.queued.length;
+            count = this.unhandedBacklog(this.handOffKey(hold.epochId, serverId, channelId), rows).length;
         }
         else {
             const mark = this.lastLooks()?.[hold.epochId]?.[key];
-            count = (mark === undefined ? rows.length : rows.filter((m) => m.sequence > mark).length) + queued.length;
+            count = mark === undefined ? rows.length : rows.filter((m) => m.sequence > mark).length;
         }
         this.divertedSinceInvocation.set(key, count);
     }
@@ -1356,17 +4603,20 @@ export class TuneOutCoordinator {
         const { [epochId]: _ended, ...rest } = looks;
         this.writeLooks(rest);
     }
-    /** At boot: the last looks of epochs no longer active go. */
     pruneLooks() {
         if (this.hooks.subconsciousName() == null)
             return;
         const looks = this.lastLooks();
         if (!looks)
             return;
-        const active = new Set(this.listActive().map((e) => e.params.epochId));
-        const scope = this.getAllExcept();
-        if (scope)
-            active.add(scope.params.epochId);
+        let active;
+        try {
+            active = new Set(this.holdsOnRecord().map((hold) => hold.epochId));
+        }
+        catch (err) {
+            console.error(`[tune-out] the holds on record could not be read, so the subconscious's last looks are all kept: ${thrownReason(err)}`);
+            return;
+        }
         const kept = Object.fromEntries(Object.entries(looks).filter(([epochId]) => active.has(epochId)));
         if (Object.keys(kept).length !== Object.keys(looks).length)
             this.writeLooks(kept);
@@ -1374,47 +4624,26 @@ export class TuneOutCoordinator {
     /**
      * `reader: 'forks'`: hand the framework one invocation. The backlog is
      * the epoch's held messages not yet handed to any fork — each is
-     * delivered to exactly one reader — stored ones first, then those still
-     * queued behind the resident's turn, plus the standing dispositions. A
+     * delivered to exactly one reader — plus the standing dispositions. A
      * cadence look with nothing new is skipped. True when a fork was asked for.
      */
-    invokeReaderFork(serverId, channelId, epochId, trigger, notice, epochBacklog, epochQueued = []) {
+    invokeReaderFork(serverId, channelId, epochId, trigger, notice, epochBacklog) {
         if (!this.hooks.invokeReader)
             return false;
         const key = this.handOffKey(epochId, serverId, channelId);
-        const { backlog, queued } = this.unhandedBacklog(key, epochBacklog, epochQueued);
-        if (trigger === 'cadence' && backlog.length === 0 && queued.length === 0)
+        const backlog = this.unhandedBacklog(key, epochBacklog);
+        if (trigger === 'cadence' && backlog.length === 0)
             return false;
         // The cursor only moves forward: a returned row handed again can be
         // behind it.
-        const cursor = Math.max(this.readerCursor.get(key) ?? -1, ...backlog.map((m) => m.sequence));
+        const cursor = backlog.reduce((max, m) => Math.max(max, m.sequence), this.readerCursor.get(key) ?? -1);
         if (backlog.length > 0)
             this.readerCursor.set(key, cursor);
-        const handed = this.readerHandedWrites.get(key) ?? new Set();
-        for (const m of queued)
-            handed.add(m.writeId);
-        // A handed write whose row has landed behind the cursor can no longer be
-        // handed by sequence, so its id has done its work.
-        for (const m of epochBacklog) {
-            const writeId = writeIdOf(m);
-            if (writeId !== undefined && m.sequence <= cursor)
-                handed.delete(writeId);
-        }
-        if (handed.size > 0)
-            this.readerHandedWrites.set(key, handed);
-        else
-            this.readerHandedWrites.delete(key);
         const returned = this.readerReturned.get(key);
         if (returned) {
-            for (const m of backlog) {
-                returned.ids.delete(m.id);
-                const writeId = writeIdOf(m);
-                if (writeId !== undefined)
-                    returned.writeIds.delete(writeId);
-            }
-            for (const m of queued)
-                returned.writeIds.delete(m.writeId);
-            if (returned.ids.size === 0 && returned.writeIds.size === 0)
+            for (const m of backlog)
+                returned.delete(m.id);
+            if (returned.size === 0)
                 this.readerReturned.delete(key);
         }
         const entries = Object.entries(this.readDispositions());
@@ -1425,32 +4654,21 @@ export class TuneOutCoordinator {
             trigger,
             notice,
             backlog,
-            queued,
             dispositions: entries.length > 0 ? entries.map(([k, v]) => `- ${k}: ${v}`).join('\n') : null,
         });
         return true;
     }
     /**
-     * What no reader fork has read yet, of the given held messages: the stored
-     * ones past the epoch's cursor for the channel, less those a fork was handed while they
-     * were still queued, plus those a failed fork returned, oldest first; then
-     * the queued ones no fork was handed, or a failed fork returned.
+     * What no reader fork has read yet, of the given held messages, oldest
+     * first: those past the epoch's cursor for the channel, plus those a
+     * failed fork returned.
      */
-    unhandedBacklog(key, stored, queued) {
+    unhandedBacklog(key, stored) {
         const cursor = this.readerCursor.get(key) ?? -1;
-        const handed = this.readerHandedWrites.get(key);
         const returned = this.readerReturned.get(key);
-        const wasReturned = (id, writeId) => returned !== undefined && ((id !== undefined && returned.ids.has(id)) || (writeId !== undefined && returned.writeIds.has(writeId)));
-        const unread = (m) => {
-            const writeId = writeIdOf(m);
-            if (wasReturned(m.id, writeId))
-                return true;
-            return m.sequence > cursor && !(handed !== undefined && writeId !== undefined && handed.has(writeId));
-        };
-        return {
-            backlog: stored.filter(unread).sort((a, b) => a.sequence - b.sequence),
-            queued: queued.filter((m) => !handed?.has(m.writeId) || wasReturned(undefined, m.writeId)),
-        };
+        return stored
+            .filter((m) => returned?.has(m.id) || m.sequence > cursor)
+            .sort((a, b) => a.sequence - b.sequence);
     }
     /**
      * A reader fork that never read what it was handed: its derive failed, or
@@ -1471,12 +4689,10 @@ export class TuneOutCoordinator {
         if (!active)
             return this.lateFork(invocation);
         const key = this.handOffKey(epochId, serverId, channelId);
-        const returned = this.readerReturned.get(key) ?? { ids: new Set(), writeIds: new Set() };
+        const returned = this.readerReturned.get(key) ?? new Set();
         for (const m of invocation.backlog)
-            returned.ids.add(m.id);
-        for (const m of invocation.queued)
-            returned.writeIds.add(m.writeId);
-        const count = invocation.backlog.length + invocation.queued.length;
+            returned.add(m.id);
+        const count = invocation.backlog.length;
         if (count > 0) {
             this.readerReturned.set(key, returned);
             // They count again toward the next cadence look of the epoch holding
@@ -1493,25 +4709,17 @@ export class TuneOutCoordinator {
     /**
      * A fork that failed after its epoch ended: one late fork is handed what it
      * was, with a notice saying a reader handed them failed after the tune-out
-     * ended. Those still queued when it was handed that have landed since are
-     * handed as stored. A late fork's own failure derives no other, so a
-     * reader that keeps failing costs one more fork, not a chain of them.
-     * Returns how many the late fork was handed.
+     * ended. Every held message is stored as it arrives (#291), so what it was
+     * handed is what the late fork is. A late fork's own failure derives no
+     * other, so a reader that keeps failing costs one more fork, not a chain
+     * of them. Returns how many the late fork was handed.
      */
     lateFork(invocation) {
         if (!this.hooks.invokeReader || this.lateForks.has(invocation))
             return 0;
         const { serverId, channelId, epochId } = invocation;
-        const landed = new Map();
-        for (const m of this.hooks.getStoredMessages()) {
-            const writeId = writeIdOf(m);
-            if (writeId !== undefined)
-                landed.set(writeId, m);
-        }
-        const backlog = [...invocation.backlog, ...invocation.queued.flatMap((m) => landed.get(m.writeId) ?? [])]
-            .sort((a, b) => a.sequence - b.sequence);
-        const queued = invocation.queued.filter((m) => !landed.has(m.writeId));
-        const count = backlog.length + queued.length;
+        const backlog = [...invocation.backlog].sort((a, b) => a.sequence - b.sequence);
+        const count = backlog.length;
         if (count === 0)
             return 0;
         const these = count === 1 ? 'This message was' : `These ${count} messages were`;
@@ -1525,23 +4733,12 @@ export class TuneOutCoordinator {
             trigger: 'cancel',
             notice,
             backlog,
-            queued,
             dispositions: entries.length > 0 ? entries.map(([k, v]) => `- ${k}: ${v}`).join('\n') : null,
         };
         this.lateForks.add(late);
         this.hooks.invokeReader(late);
         return count;
     }
-    /**
-     * The held messages still queued behind the resident's turn that `keep`
-     * keeps, oldest first, with their write ids. One the host gives no id for
-     * is left to reach a reader once it is stored: without the id, its stored
-     * row couldn't be told from a message no reader has had.
-     */
-    queuedHeld(keep) {
-        return (this.hooks.getDeferredMessages?.() ?? [])
-            .filter((m) => typeof m.writeId === 'string' && keep(m));
-    }
     // ==========================================================================
     // Dispositions (standing notes, snapshot slot)
     // ==========================================================================
@@ -1624,8 +4821,7 @@ export class TuneOutCoordinator {
                 if (!text) {
                     return {
                         success: false,
-                        error: 'Nothing was delivered: deliver_summary needs the summary in "text". If there\'s nothing to '
-                            + "report, don't call it: staying silent is allowed.",
+                        error: 'Nothing was delivered: deliver_summary needs the summary in "text".',
                         isError: true,
                     };
                 }
@@ -1644,7 +4840,7 @@ export class TuneOutCoordinator {
                 // server, which a re-pin reads by name when it weighs the row, as it
                 // reads any message without its server.
                 if (!subName && !(caller && this.hooks.deliverFromReader)) {
-                    return { success: false, error: 'subconscious not configured', isError: true };
+                    return { success: false, error: 'Nothing was delivered: no reader is running here.', isError: true };
                 }
                 const mine = this.channelRegistry.ownChannelFor(channelId, own, 'deliver');
                 if (mine && 'error' in mine)
@@ -1679,10 +4875,12 @@ export class TuneOutCoordinator {
                         : undefined;
                     if (refused)
                         return { success: false, error: refused, isError: true };
-                    const result = this.cancelAllExcept('subconscious', 'subconscious judgment', note, caller);
-                    return result.ok
-                        ? { success: true, data: { cancelled: true, scope: 'all-except' } }
-                        : { success: false, error: result.error, isError: true };
+                    const result = this.cancelAllExcept('subconscious', cancelledBy(caller), note, caller);
+                    if (!result.ok)
+                        return { success: false, error: result.error, isError: true };
+                    return result.deferred
+                        ? { success: true, data: { waiting: true, scope: 'all-except', note: cancelWaitsNote('The all-except hold', result.noteDropped === true, note === undefined ? undefined : fork ? 'fork' : 'persistent', this.markerPending !== undefined) } }
+                        : { success: true, data: { cancelled: true, scope: 'all-except' } };
                 };
                 // A call naming the all-except scope ends that hold outright, as the
                 // tool describes it and as the resident's tune_out cancel does: the
@@ -1733,10 +4931,14 @@ export class TuneOutCoordinator {
                 const refused = fork && this.forkRefusal(fork, { epochId: held.params.epochId }, 'cancel', `the tune-out on ${this.quotedShown(channel.serverId, channel.channelId)} isn't the hold you were started to read`);
                 if (refused)
                     return { success: false, error: refused, isError: true };
-                const result = this.cancel(channel.serverId, channel.channelId, 'subconscious', 'subconscious judgment', note, caller);
-                return result.ok
-                    ? { success: true, data: { cancelled: true } }
-                    : { success: false, error: result.error, isError: true };
+                const result = this.cancel(channel.serverId, channel.channelId, 'subconscious', cancelledBy(caller), note, caller);
+                if (!result.ok)
+                    return { success: false, error: result.error, isError: true };
+                return result.deferred
+                    // The server it resolved to, which a boot reads to tell two
+                    // servers' channels of one id apart (askedCancelOf).
+                    ? { success: true, data: { waiting: true, serverId: channel.serverId, note: cancelWaitsNote('The tune-out', result.noteDropped === true, note === undefined ? undefined : fork ? 'fork' : 'persistent', this.markerPending !== undefined) } }
+                    : { success: true, data: { cancelled: true } };
             }
             case 'note_disposition': {
                 const key = String(input.key ?? '').trim();
@@ -1774,9 +4976,9 @@ export class TuneOutCoordinator {
                         success: false,
                         isError: true,
                         error: "Nothing was posted: speak_in_channel is turned off for you in the resident's configuration, and "
-                            + "calling it again won't change that. The resident can speak there: tell it what's needed with "
-                            + 'deliver_summary, or, if the channel is tuned out and needs the resident now, end the tune-out with '
-                            + 'cancel_tuneout.',
+                            + "calling it again won't change that. The resident can speak there. deliver_summary puts your text in "
+                            + "the resident's context, and cancel_tuneout ends the tune-out and delivers its backlog to the resident, up "
+                            + 'to its backlog cap (its answer says if the cancel has to wait).',
                     };
                 }
                 const channelId = String(input.channelId ?? '');
@@ -1803,7 +5005,7 @@ export class TuneOutCoordinator {
                 return this.channelRegistry.publishForAgent(mine ? mine.channel : channelId, text, this.hooks.subconsciousName() ?? caller ?? 'Subconscious');
             }
             default:
-                return { success: false, error: `unknown subconscious tool: ${name}`, isError: true };
+                return { success: false, error: `unknown reader tool: ${name}`, isError: true };
         }
     }
     /**
@@ -1847,8 +5049,9 @@ export class TuneOutCoordinator {
     }
     /**
      * The reader ended, not the framework: its turns stop (cadence and
-     * coalescing wakes), and every hold keeps its end time, which releases it
-     * to the resident with no reader.
+     * coalescing wakes). The framework then releases every hold with
+     * releaseAll ("its reader ended"); a hold whose release fails keeps its end
+     * time, which releases it to the resident with no reader.
      */
     stopReader() {
         for (const timer of this.cadenceTimers.values())
@@ -1858,8 +5061,168 @@ export class TuneOutCoordinator {
             clearTimeout(timer);
         this.pendingWakes.clear();
     }
-    /** Stop all timers (framework shutdown). */
+    /**
+     * The stop's keeping of the loss notices kept (stop): the persistent
+     * subconscious's in the store (writeLossRecord), the stop stamped
+     * (writeStopStamp, leaving out `unaccounted`) at the stop (`stamp`
+     * 'stop'), or again where the store refused the record (`unrecorded`),
+     * and each logged and dropped from memory. Never throws.
+     */
+    keepAtStop(stamp, unaccounted) {
+        const recorded = this.writeLossRecord('stop');
+        if (stamp === 'stop' || (stamp === 'unrecorded' && !recorded))
+            this.writeStopStamp(recorded, unaccounted);
+        this.markerPending = undefined;
+        for (const [author, kept] of this.lossNotices) {
+            for (const notice of kept) {
+                const told = `the notice telling ${author} ${lossSubject(notice)}`;
+                if (notice.persistent && recorded) {
+                    console.error(`[tune-out] stopping: ${told} isn't written yet, and is kept in the store for the next boot to write`);
+                }
+                else if (notice.persistent) {
+                    console.error(`[tune-out] stopping: ${told} was never written, and the store couldn't keep it, so it is dropped`);
+                }
+                else {
+                    console.error(`[tune-out] stopping: ${told} was never written, and is dropped: a reader fork's run doesn't outlast a stop`);
+                }
+            }
+        }
+        this.lossNotices.clear();
+    }
+    /**
+     * A loss told once the stop had kept what it found (a trace listener's
+     * stop, during a queued cancel's run or a notice's write, that found the
+     * cancel or the notice off its queue): kept as the stop keeps those
+     * (keepAtStop), the store's record read in again first, so that what the
+     * stop kept there stays, and the stamp written again, its hold left out,
+     * where the store refuses the record. Never throws.
+     */
+    keepAfterStop() {
+        if (this.lossNotices.size === 0)
+            return;
+        if (this.persistedLossNotices().length > 0)
+            this.lossRecordUnread = true;
+        this.keepAtStop('unrecorded', this.stopUnaccounted);
+    }
+    /**
+     * The timers quieted, at the start of the framework's stop: a hold's end
+     * time, a reader's cadence and wake, a release's or a waiting cancel's
+     * retry. Nothing else stops: a waiting cancel still runs when the
+     * framework stores the writes it waits for (runDeferredCancels), which the
+     * stop's wait for an operator's operation can let happen; then stop()
+     * tells and keeps what is left (Weft's hold 2, #844). Never throws.
+     */
+    stopTimers() {
+        this.timersStopped = true;
+        if (this.releaseRetry) {
+            clearTimeout(this.releaseRetry);
+            this.releaseRetry = null;
+        }
+        if (this.deferredRetry !== undefined)
+            clearTimeout(this.deferredRetry);
+        this.deferredRetry = undefined;
+        for (const timer of this.cadenceTimers.values())
+            clearTimeout(timer);
+        this.cadenceTimers.clear();
+        for (const timer of this.expiryTimers.values())
+            clearTimeout(timer);
+        this.expiryTimers.clear();
+        for (const { timer } of this.pendingWakes.values())
+            clearTimeout(timer);
+        this.pendingWakes.clear();
+    }
+    /**
+     * Stop all timers (framework shutdown), tell each waiting cancel's note
+     * lost (one still kept in memory left for the next boot instead, its hold
+     * out of the stamp: a release after the stop may store it), keep the
+     * persistent subconscious's notices in the store, and
+     * stamp the stop (writeStopStamp). A second stop stamps nothing: the
+     * first one's notices are no longer in memory to say what it kept. The
+     * framework calls it once its stop has waited for an operator's
+     * operations, so a hold that keeps a waiting cancel's writes, released
+     * during that wait, lets the cancel run first (stopTimers, before the
+     * wait, quiets the timers).
+     */
     stop() {
+        const again = this.stopped;
+        this.stopped = true;
+        if (this.releaseRetry) {
+            clearTimeout(this.releaseRetry);
+            this.releaseRetry = null;
+        }
+        // A cancel still waiting for held writes ends nothing: the tune-out stays
+        // in force on disk, for the next boot, which doesn't run the cancel
+        // again. A note it carries is lost with it, and told lost as any other
+        // (dropDeferred: `stopped`, or `hold-ended` where its hold ended without
+        // it), the notice kept, not written (tellNoteLost). A loss notice not
+        // written yet for the persistent subconscious, that one included, stays
+        // kept in the store (writeLossRecord), for the next boot to write
+        // (restoreLossNotices); a reader fork's, whose run doesn't outlast the
+        // stop, is dropped, as is one the store couldn't keep, which the stamp
+        // then leaves out (writeStopStamp), for the next boot to tell. Each is
+        // logged, naming its author.
+        // Every one is logged and traced, one with no note, or one whose note
+        // was delivered or told lost already, as one that loses no note.
+        // One whose note, or the release telling its loss, is still kept in
+        // memory (heldInMemory: a hold this stop's wait for an operator's
+        // operation didn't see end, its budget run out, or a manager refusing
+        // its work) isn't told lost: a release after the stop, in this process,
+        // may store it yet. For the persistent subconscious, its hold, still in
+        // force, is left out of the stamp as one whose note was kept
+        // (notesKept), and the next boot tells it what that run's rows show
+        // then, that the note may be lost where they don't hold it
+        // (noteUnstampedStop; AF #844, the stop's budget, nissa's house). A
+        // reader fork's is dropped as before: no fork outlives the stop.
+        const waiting = [...this.deferredCancels.values()];
+        this.deferredCancels.clear();
+        const unaccounted = new Set();
+        const notesKept = new Set();
+        let persistent;
+        try {
+            persistent = !!this.hooks.subconsciousName();
+        }
+        catch {
+            persistent = false;
+        }
+        for (const entry of waiting) {
+            try {
+                let now;
+                let read = true;
+                try {
+                    now = entry.for.current();
+                }
+                catch {
+                    read = false;
+                }
+                if (persistent && entry.note !== undefined && entry.heldInMemory && (!read || now === entry.for.epochId)) {
+                    const { note: _kept, ...cancel } = entry;
+                    this.dropDeferred(cancel, { reason: 'stopped' });
+                    unaccounted.add(entry.for.epochId);
+                    notesKept.add(entry.for.epochId);
+                    console.error(`[tune-out] stopping: the note left with the cancel of ${entry.what} is still kept in memory, to be stored when that hold ends, `
+                        + "so it isn't told lost: the stop's stamp leaves its hold out, and the next boot tells what the store holds of it then");
+                    continue;
+                }
+                this.dropQueued(entry, read && now !== entry.for.epochId
+                    ? { reason: 'hold-ended', ...(now !== undefined ? { current: now } : {}) }
+                    : { reason: 'stopped' });
+            }
+            catch (err) {
+                const noteLost = entry.note !== undefined && !entry.noteSettled;
+                if (noteLost)
+                    unaccounted.add(entry.for.epochId);
+                console.error(`[tune-out] stopping: ${noteLost ? 'the note left with ' : ''}the cancel of ${entry.what} is lost, and ${noteLost ? 'its loss' : 'that'} could not be kept: ${thrownReason(err)}`);
+            }
+        }
+        if (!again) {
+            this.stopUnaccounted = unaccounted;
+            this.stopNotesKept = notesKept;
+        }
+        this.keepAtStop(again ? 'none' : 'stop', unaccounted);
+        this.stopDone = true;
+        if (this.deferredRetry !== undefined)
+            clearTimeout(this.deferredRetry);
+        this.deferredRetry = undefined;
         for (const timer of this.cadenceTimers.values())
             clearTimeout(timer);
         this.cadenceTimers.clear();