@cluesmith/codev 3.3.1 → 3.3.3

package/dist/agent-farm/servers/mailbox-wiring.js

@@ -11,22 +11,22 @@
  * be unit-tested without a live Tower, and lets `handleSend` and the drainer share
  * exactly one delivery path (and one per-agent write serializer).
  */
-import { readFileSync, existsSync, readdirSync } from 'node:fs';
 import { homedir } from 'node:os';
 import { loadConfig } from '../../lib/config.js';
 import { terminalDeliverySignals } from '../../terminal/pty-session.js';
 import { getWorkspaceTerminals, getTerminalManager } from './tower-terminals.js';
 import { broadcastMessage, resolveAgentInRegistry, isResolveError } from './tower-messages.js';
-import { writeMessagePaced } from './message-write.js';
-import { classifyBuffer } from './render-gate.js';
+import { submitMessagePaced } from './message-write.js';
+import { bufferLines, classifyBuffer } from './render-gate.js';
 import { resolveProfile } from './gate-profiles.js';
-import { harnessFromLaunchScript } from '../commands/reset/context.js';
+import { buildContextFsPort, harnessFromLaunchScript, } from '../commands/reset/context.js';
 import { getGlobalDb } from '../db/index.js';
 import { getArchitectByName } from '../state.js';
 import { formatBuilderMessage } from '../utils/message-format.js';
+import { formatVerdict } from '@cluesmith/codev-sdk/hold-verdict';
 import { supersede as supersedeMailbox, dismissHeldWithKey, NOTICE_SUPERSEDE_PREFIX } from '../db/mailbox.js';
 import path from 'node:path';
-import { MailboxDrainer, } from './mailbox-delivery.js';
+import { MailboxDrainer, normalizeForEcho, } from './mailbox-delivery.js';
 /**
  * "Recent output" window for the liveness diagnostic (Spec 1313, Phase 7 — spec line
  * 91). A `no-profile` streak only raises the loud log/broadcast when the session emitted
@@ -42,31 +42,13 @@ export function setMailboxBroadcaster(fn) {
     mailboxBroadcaster = fn;
 }
 /**
- * A node-fs adapter for {@link harnessFromLaunchScript}. Only `.read` is exercised
- * by that function, but `exists`/`listDirs` are implemented faithfully so the port
- * is honest and reusable rather than a lying stub.
+ * The shared node-fs adapter for {@link ContextFsPort}.
+ *
+ * Was a hand-rolled copy — one of three identical ones. A stub in any copy
+ * silently nulls the porch context for that path, and a regression test can only
+ * observe the copy it imports, so the implementations are now one.
  */
-const NODE_FS_PORT = {
-    exists: (p) => existsSync(p),
-    read: (p) => {
-        try {
-            return readFileSync(p, 'utf-8');
-        }
-        catch {
-            return null;
-        }
-    },
-    listDirs: (p) => {
-        try {
-            return readdirSync(p, { withFileTypes: true })
-                .filter((d) => d.isDirectory())
-                .map((d) => d.name);
-        }
-        catch {
-            return null;
-        }
-    },
-};
+const NODE_FS_PORT = buildContextFsPort();
 /**
  * The live, writable {@link PtySession} for an agent in a workspace, or `null`
  * when there is no usable live PTY — unknown agent, an exited session (the
@@ -122,16 +104,25 @@ export function resolveAgentForSession(sessionId) {
  * (fail-safe by construction: an unknown agent is held and surfaced, never guessed
  * — this is what correctly trips on wrapper/boot/relaunch screens too).
  *
- * Stale-identity note (Spec 1313): `session.command` is now sourced from the
- * persisted `terminal_sessions.command` on reconnect. If it ever goes stale (a
- * user re-points `shell.architect` at a different harness and the shellper later
- * auto-restarts into it while the row still names the old one), this can resolve
- * the WRONG profile — but it fails CLOSED today, not misdelivered: CLAUDE_PROFILE
- * and CODEX_PROFILE are behaviourally identical (same marker + region patterns),
- * and any cross-family mismatch (e.g. agy's `> ` marker) fails the composer-marker
- * test → not clean → held. That safety is a property of the current profile TABLE,
- * not of this design; the day codex/claude markers diverge, stale identity becomes
- * a live bug and the authoritative fix is WELCOME-frame hydration (see review).
+ * Identity precedence (PIR #1475): `session.command` is AUTHORITATIVE where it can
+ * be — it reads through to the identity the attached shellper states in its WELCOME
+ * frame, i.e. the argv the process that owns the PTY actually spawned, refreshed
+ * across reconnects and SPAWN relaunches. Only when no shellper identity is
+ * available (a local node-pty session, a pre-#1475 shellper still running from
+ * before an upgrade, or a payload that failed validation) does it fall back to the
+ * Spec 1313 chain: the persisted `terminal_sessions.command`, then the legacy
+ * self-heal from config. So the stale-row hazard this comment used to describe — a
+ * user re-points `shell.architect` at a different harness while the row still names
+ * the old one — no longer decides the profile for a shellper-backed session; the
+ * running process does.
+ *
+ * The fallback tier keeps its original safety property, and it is worth knowing why
+ * it is thin: a stale command fails CLOSED rather than misdelivering only because
+ * CLAUDE_PROFILE and CODEX_PROFILE are behaviourally identical (same marker + region
+ * patterns) and any cross-family mismatch (e.g. agy's `> ` marker) fails the
+ * composer-marker test → not clean → held. That is a property of the current profile
+ * TABLE, not of the design. It matters less now that the authoritative tier exists,
+ * but it is still what protects the fallback the day codex/claude markers diverge.
  */
 export function resolveProfileForSession(session) {
     const direct = resolveProfile({ command: session.command, args: session.launchArgs });
@@ -164,6 +155,88 @@ export async function classifyAgentScreen(session, profile) {
     const { term, cols, rows } = await screen.read();
     return classifyBuffer(term, cols, rows, profile);
 }
+/**
+ * How long {@link watchEchoOnScreen}'s verification waits for a delivered message's header to
+ * show up, and how often it re-reads while waiting (Issue #1573).
+ *
+ * Measured 2026-09-01 against live claude and codex PTYs: the header is on screen from the
+ * first sample after the write completes (the composer echoes it as it is typed, before the
+ * Enter that submits it), and remains present at every sample out to +5 s. The budget is
+ * therefore slack for a loaded machine, not the expected cost — the common case returns on the
+ * first read with no added latency. It is bounded because the `afx send` request path awaits
+ * this before answering the sender.
+ *
+ * Issue #1584: the delivery path calls `verify()` at most TWICE (a second window for a slow
+ * renderer, no bytes written), so this constant is half the worst-case wait a sender sees —
+ * ~1.2 s. Raising it raises that, and the answer is no longer a retry decision: an unconfirmed
+ * delivery is recorded as delivered-unverified, never re-written.
+ */
+const ECHO_VERIFY_TIMEOUT_MS = 600;
+const ECHO_VERIFY_POLL_MS = 50;
+/**
+ * How many times `needle` appears in the session's rendered mirror right now.
+ *
+ * A COUNT rather than a boolean because presence alone is not evidence (CMAP round 1 — codex):
+ * a previous delivery attempt's echo sits in the same scrollback, so "the header is on screen"
+ * would certify a retry whose bytes the composer swallowed. Comparing against a pre-write
+ * sample is what ties the evidence to the write that is being judged.
+ *
+ * Reads the SAME `SessionScreen` the render gate classifies, so verification and gating can
+ * never disagree about what the terminal shows, and scans its full retained buffer rather than
+ * the viewport — a long message scrolls its own header into scrollback while it types.
+ */
+async function countEchoOnScreen(screen, needle) {
+    const { term } = await screen.read();
+    const text = normalizeForEcho(bufferLines(term).join('\n'));
+    let count = 0;
+    for (let at = text.indexOf(needle); at !== -1; at = text.indexOf(needle, at + needle.length))
+        count++;
+    return count;
+}
+/**
+ * Open an echo watch on a session (Issue #1573) — the live binding for
+ * {@link DeliveryPorts.watchEcho}.
+ *
+ * Samples the terminal BEFORE the write, then `verify()` polls until the needle appears MORE
+ * often than it did in that sample. New evidence, not mere presence.
+ *
+ * A session with no mirror has produced no output and therefore cannot echo anything, so its
+ * watch verifies `false` rather than passing.
+ *
+ * Known residuals — these are why a negative is "could not confirm", not "not delivered". Issue
+ * #1584: they are also why a negative must NOT trigger a redelivery. Each recurs for the same
+ * message on every attempt, so holding-and-rewriting on one of them is a loop that cannot
+ * converge — #1583 saw a message re-injected dozens of times on exactly the second one. The
+ * caller now commits the delivery and reports it unverified instead. None is designed around
+ * here; #1578 tracks smarter verification:
+ *   - a harness on the ALTERNATE screen buffer has no scrollback, so a message longer than one
+ *     viewport can scroll its header out of reach and never confirm. The agy profile boots into
+ *     the alternate buffer and was not measurable here (unauthenticated).
+ *   - a very long write can evict the pre-write copy from the 1000-line mirror, so the count
+ *     comes back equal rather than greater and a genuine delivery reads as unconfirmed.
+ *   - an unconfirmed delivery re-reads and re-normalizes the retained buffer once per poll
+ *     while the `afx send` request waits. Bounded by the timeout (and by the delivery path's
+ *     two windows, ~1.2 s total), and off the happy path entirely — the measured case confirms
+ *     on the first read.
+ */
+export async function watchEchoOnScreen(session, needle) {
+    const screen = session.gateScreen;
+    if (!screen)
+        return { verify: () => Promise.resolve(false) };
+    const before = await countEchoOnScreen(screen, needle);
+    return {
+        verify: async () => {
+            const deadline = Date.now() + ECHO_VERIFY_TIMEOUT_MS;
+            for (;;) {
+                if (await countEchoOnScreen(screen, needle) > before)
+                    return true;
+                if (Date.now() >= deadline)
+                    return false;
+                await new Promise((resolve) => setTimeout(resolve, ECHO_VERIFY_POLL_MS));
+            }
+        },
+    };
+}
 /** Convert a delivered-message frame to the WebSocket bus shape and broadcast it. */
 function broadcastDelivered(frame) {
     broadcastMessage({
@@ -186,14 +259,25 @@ export function makeDeliveryPorts(log) {
         getSessionForAgent: (ws, agent) => resolveLiveSessionForAgent(ws, agent),
         resolveProfile: (session) => resolveProfileForSession(session),
         classify: (session, profile) => classifyAgentScreen(session, profile),
-        writeMessage: (session, msg, noEnter) => writeMessagePaced(session, msg, noEnter),
+        // Issue #1365: the write edge takes the session's per-terminal submission lock as a
+        // LEAF inside the per-agent serializer, so a gated delivery and a concurrent
+        // `--interrupt`/`--escape` can no longer interleave. The precheck is the delivery
+        // module's, re-run inside that lock.
+        writeMessage: (session, msg, noEnter, precheck) => submitMessagePaced(session, msg, noEnter, precheck),
+        // Issue #1573: the only end-to-end evidence that the bytes reached the terminal — opened
+        // before the write. Issue #1584: consulted AFTER the row is marked delivered, because the
+        // commit is what makes a completed write un-repeatable; this only decides what we report.
+        watchEcho: (session, needle) => watchEchoOnScreen(session, needle),
         broadcast: (frame) => broadcastDelivered(frame),
         onHeldStateChange: () => broadcastHeldStateChange(),
         onEscalation: (info) => broadcastEscalation(info),
         onLiveness: (info) => surfaceLiveness(info, log),
+        // Issue #1584: an unconfirmed delivery is committed, not retried, so this notice is the
+        // only human-facing trace for a cron/backstop send with no sender waiting on a response.
+        onUnverifiedDelivery: (info) => surfaceUnverifiedDelivery(info),
         escalateHeldToOwner: (info) => escalateHeldToOwner(info, log),
         clearHeldOwnerNotice: (ws, agent) => clearHeldOwnerNotice(ws, agent),
-        log: (m) => log('INFO', m),
+        log: (m, level) => log(level ?? 'INFO', m),
         now: () => Date.now(),
     };
 }
@@ -203,13 +287,58 @@ const NOTICE_SENDER = 'af-mailbox';
 function noticeSupersedeKey(toAgent) {
     return `${NOTICE_SUPERSEDE_PREFIX}${toAgent}`;
 }
-/** Human-readable notice body (metadata only — never the starved messages' contents). */
-function formatOwnerNoticeBody(info) {
+/**
+ * Human-readable notice body (metadata only — never the starved messages' contents).
+ *
+ * TWO notices, not one (Issue #1482). The old single body said "its composer never classifies
+ * as a ready prompt" and offered `afx interrupt` for every hold, which is wrong advice in the
+ * commonest case: when the detail is `user-text` a human is sitting at that composer with a
+ * draft, and interrupting them is the last thing the owner should do. The gate has always
+ * known which case it is; now the row carries it, so the notice can say it.
+ *
+ * The `streak` — how many consecutive gate checks re-confirmed the same verdict — is what
+ * separates "held ~7m" (which could be one unlucky sample) from "held ~7m, re-confirmed across
+ * 41 checks" (which cannot be).
+ *
+ * Exported for unit testing. This text is operator-facing INSTRUCTIONS during an incident, and
+ * it went un-asserted long enough to ship a remedy line naming `afx interrupt` at a composer a
+ * human was actively typing in. Prose that tells someone what to do to a live terminal is
+ * behaviour, and gets tested like behaviour.
+ */
+export function formatOwnerNoticeBody(info) {
     const mins = Math.max(1, Math.round(info.ageMs / 60_000));
     const plural = info.heldCount === 1 ? 'message' : 'messages';
-    return (`Mailbox delivery is STUCK for builder '${info.toAgent}' @ ${path.basename(info.workspacePath)}. ` +
-        `${info.heldCount} ${plural} held ~${mins}m (reason: ${info.reason ?? 'held'}) — its composer never classifies as a ready prompt, ` +
-        `so nothing is being delivered (cron nudges included). ` +
+    const confirmed = info.streak > 1 ? `, re-confirmed across ${info.streak} consecutive gate checks` : '';
+    const head = `Mailbox delivery is STUCK for builder '${info.toAgent}' @ ${path.basename(info.workspacePath)}. ` +
+        `${info.heldCount} ${plural} held ~${mins}m (${formatVerdict(info.reason, info.detail)}${confirmed}).`;
+    if (info.detail === 'user-text') {
+        // The SAFE hold: the classifier positively identified a draft or menu in the composer.
+        //
+        // This branch names NO command that touches the terminal, deliberately — not even hedged
+        // with "only if you are sure". An operator reading a notice headed "delivery is STUCK"
+        // treats the remedy line as the instruction, and the person at that composer is mid-thought
+        // by definition of this verdict. The #1583 loop was aggravated by exactly that: an operator
+        // followed an `afx interrupt` suggestion out of this notice. A hedge is not a safeguard
+        // when the surrounding text reads as an incident.
+        return (`${head} Its composer has been OCCUPIED that whole time — a draft or an open menu is on ` +
+            `the line, which usually means a human is working there, and delivery resumes by itself ` +
+            `the moment the line clears. ` +
+            `Remedy: usually none — let it clear. 'afx inbox' inspects the queue (metadata only, ` +
+            `never bodies) if you want to see what is waiting, and talking to whoever is at that ` +
+            `terminal is the only other thing worth doing.`);
+    }
+    if (info.detail || info.reason === 'no-profile') {
+        // The DEFECT class: the gate could not verify the composer at all, so nothing will clear
+        // this without intervention.
+        return (`${head} The render gate CANNOT VERIFY that composer — this is not a busy human, it is a ` +
+            `classifier that cannot find a bounded composer region, so the mail will never deliver on ` +
+            `its own. Usual causes: a drifted TUI profile, a torn/mid-repaint frame, or Tower's ` +
+            `terminal dimensions diverging from the real PTY (Issue #1482). ` +
+            `Remedy: 'afx inbox' to inspect; resizing the viewer forces a repaint; ` +
+            `'afx interrupt ${info.toAgent}' clears a stuck composer.`);
+    }
+    return (`${head} Its composer never classifies as a ready prompt, so nothing is being delivered ` +
+        `(cron nudges included). ` +
         `Remedy: run 'afx inbox' to inspect; 'afx interrupt ${info.toAgent}' clears a stuck composer.`);
 }
 /**
@@ -244,7 +373,7 @@ function escalateHeldToOwner(info, log) {
         workspacePath: info.workspacePath,
         toAgent: owner.agent,
         body,
-        formattedMessage: formatBuilderMessage(NOTICE_SENDER, body),
+        formattedMessage: formatBuilderMessage(NOTICE_SENDER, owner.agent, body),
         fromAgent: NOTICE_SENDER,
         fromWorkspace: info.workspacePath,
     });
@@ -252,7 +381,8 @@ function escalateHeldToOwner(info, log) {
     // Deliver the notice promptly through the SAME gate (it holds if the architect is busy).
     void ensureDrainer().scheduleDrain(owner.workspacePath, owner.agent);
     log('WARN', `[mailbox] STARVATION notice → ${owner.agent} about ${info.toAgent} @ ${path.basename(info.workspacePath)} ` +
-        `(${info.heldCount} held ~${Math.round(info.ageMs / 1000)}s, reason ${info.reason ?? 'held'})`);
+        `(${info.heldCount} held ~${Math.round(info.ageMs / 1000)}s, ${formatVerdict(info.reason, info.detail)}` +
+        `${info.streak > 1 ? `, streak ${info.streak}` : ''})`);
     return true;
 }
 /**
@@ -291,6 +421,10 @@ function broadcastEscalation(info) {
         mailboxId: info.mailboxId,
         ageMs: info.ageMs,
         reason: info.reason,
+        // Issue #1482: a client showing only `busy` cannot tell an occupied composer from one the
+        // gate could not read. The wire is additive — an older client that ignores the field is
+        // unaffected — but the TYPE is required, so this producer cannot forget it.
+        detail: info.detail,
     };
     mailboxBroadcaster?.({
         type: 'mailbox-escalation',
@@ -324,6 +458,26 @@ function surfaceLiveness(info, log) {
         workspace: info.workspacePath,
     });
 }
+/**
+ * Surface an unconfirmed delivery (Issue #1584) on the generic `notification` SSE channel that
+ * {@link surfaceLiveness} already uses — human title/body, no message body.
+ *
+ * Deliberately NOT the `mailbox-escalation` event: that one means "held past the escalation
+ * age", and saying that about a row we just delivered would be false. The wording here states
+ * exactly what is and is not known — the bytes went out, the screen never showed them, and it
+ * will not be sent again.
+ */
+function surfaceUnverifiedDelivery(info) {
+    const where = `${info.toAgent} @ ${path.basename(info.workspacePath)}`;
+    mailboxBroadcaster?.({
+        type: 'notification',
+        title: 'Mailbox: delivered but not confirmed on screen',
+        body: `${where} — the message was written to terminal ${info.terminalId.slice(0, 8)}… and every byte was ` +
+            `accepted, but its header never appeared on that screen. It is recorded as delivered and will NOT ` +
+            `be sent again (mailbox id ${info.mailboxId.slice(0, 8)}…). Check the agent's transcript.`,
+        workspace: info.workspacePath,
+    });
+}
 // The single backstop drainer instance (replaces the retired SendBuffer). Created
 // lazily so it picks up the configured retention window (below) at first use.
 let drainer;

package/dist/agent-farm/servers/mailbox-wiring.js.map

@@ -1 +1 @@
-{"version":3,"file":"mailbox-wiring.js","sourceRoot":"","sources":["../../../src/agent-farm/servers/mailbox-wiring.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAChE,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,uBAAuB,EAAmB,MAAM,+BAA+B,CAAC;AACzF,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AACjF,OAAO,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC/F,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,cAAc,EAAsC,MAAM,kBAAkB,CAAC;AACtF,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,uBAAuB,EAAsB,MAAM,8BAA8B,CAAC;AAC3F,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAE,SAAS,IAAI,gBAAgB,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAC9G,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EACL,cAAc,GAOf,MAAM,uBAAuB,CAAC;AAG/B;;;;;;;GAOG;AACH,MAAM,yBAAyB,GAAG,MAAM,CAAC;AAezC,IAAI,kBAAkD,CAAC;AAEvD,wFAAwF;AACxF,MAAM,UAAU,qBAAqB,CAAC,EAAsB;IAC1D,kBAAkB,GAAG,EAAE,CAAC;AAC1B,CAAC;AAED;;;;GAIG;AACH,MAAM,YAAY,GAAkB;IAClC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;IAC5B,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE;QACV,IAAI,CAAC;YACH,OAAO,YAAY,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE;QACd,IAAI,CAAC;YACH,OAAO,WAAW,CAAC,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;iBAC3C,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;iBAC9B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;CACF,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,0BAA0B,CAAC,aAAqB,EAAE,OAAe;IAC/E,MAAM,KAAK,GAAG,qBAAqB,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IACzD,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACtG,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,MAAM,OAAO,GAAG,kBAAkB,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IACrD,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC/C,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,sBAAsB,CACpC,SAAiB;IAEjB,KAAK,MAAM,CAAC,aAAa,EAAE,KAAK,CAAC,IAAI,qBAAqB,EAAE,EAAE,CAAC;QAC7D,KAAK,MAAM,QAAQ,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YACxE,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,QAAQ,EAAE,CAAC;gBACpC,IAAI,GAAG,KAAK,SAAS;oBAAE,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;YAClE,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,wBAAwB,CAAC,OAAwB;IAC/D,MAAM,MAAM,GAAG,cAAc,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;IACtF,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,MAAM,OAAO,GAAG,uBAAuB,CAAC,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IACnE,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,OAAO,cAAc,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;AAC9C,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,OAAwB,EAAE,OAAoB;IACtF,MAAM,MAAM,GAAI,OAAsB,CAAC,UAAU,CAAC;IAClD,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IACnF,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;IACjD,OAAO,cAAc,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;AACnD,CAAC;AAED,qFAAqF;AACrF,SAAS,kBAAkB,CAAC,KAAyB;IACnD,gBAAgB,CAAC;QACf,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,SAAS,EAAE;QACxF,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,QAAQ,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE;QAC/B,SAAS,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;KACnD,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAU;IAC1C,OAAO;QACL,kBAAkB,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,0BAA0B,CAAC,EAAE,EAAE,KAAK,CAAC;QACxE,cAAc,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,wBAAwB,CAAC,OAAO,CAAC;QAC9D,QAAQ,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC;QACrE,YAAY,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC,iBAAiB,CAAC,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC;QACjF,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,kBAAkB,CAAC,KAAK,CAAC;QAC/C,iBAAiB,EAAE,GAAG,EAAE,CAAC,wBAAwB,EAAE;QACnD,YAAY,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC;QACjD,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,EAAE,GAAG,CAAC;QAChD,mBAAmB,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,mBAAmB,CAAC,IAAI,EAAE,GAAG,CAAC;QAC7D,oBAAoB,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,oBAAoB,CAAC,EAAE,EAAE,KAAK,CAAC;QACpE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QAC1B,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;KACtB,CAAC;AACJ,CAAC;AAED,yFAAyF;AACzF,MAAM,aAAa,GAAG,YAAY,CAAC;AAEnC,oFAAoF;AACpF,SAAS,kBAAkB,CAAC,OAAe;IACzC,OAAO,GAAG,uBAAuB,GAAG,OAAO,EAAE,CAAC;AAChD,CAAC;AAED,yFAAyF;AACzF,SAAS,qBAAqB,CAAC,IAAyB;IACtD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC;IAC7D,OAAO,CACL,0CAA0C,IAAI,CAAC,OAAO,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI;QAClG,GAAG,IAAI,CAAC,SAAS,IAAI,MAAM,UAAU,IAAI,cAAc,IAAI,CAAC,MAAM,IAAI,MAAM,uDAAuD;QACnI,wDAAwD;QACxD,sDAAsD,IAAI,CAAC,OAAO,4BAA4B,CAC/F,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAS,mBAAmB,CAAC,IAAyB,EAAE,GAAU;IAChE,mFAAmF;IACnF,IAAI,kBAAkB,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IACvE,4FAA4F;IAC5F,mFAAmF;IACnF,MAAM,KAAK,GAAG,sBAAsB,CAAC,WAAW,EAAE,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACpF,IAAI,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,GAAG,CAAC,MAAM,EAAE,mCAAmC,IAAI,CAAC,OAAO,qCAAqC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC;QAClH,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC,CAAC,gDAAgD;IAChG,MAAM,IAAI,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;IACzC,gBAAgB,CAAC,WAAW,EAAE,EAAE,IAAI,CAAC,aAAa,EAAE,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE;QACpF,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,OAAO,EAAE,KAAK,CAAC,KAAK;QACpB,IAAI;QACJ,gBAAgB,EAAE,oBAAoB,CAAC,aAAa,EAAE,IAAI,CAAC;QAC3D,SAAS,EAAE,aAAa;QACxB,aAAa,EAAE,IAAI,CAAC,aAAa;KAClC,CAAC,CAAC;IACH,wBAAwB,EAAE,CAAC;IAC3B,yFAAyF;IACzF,KAAK,aAAa,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IACrE,GAAG,CACD,MAAM,EACN,iCAAiC,KAAK,CAAC,KAAK,UAAU,IAAI,CAAC,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG;QAC1G,IAAI,IAAI,CAAC,SAAS,UAAU,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,aAAa,IAAI,CAAC,MAAM,IAAI,MAAM,GAAG,CACjG,CAAC;IACF,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,SAAS,oBAAoB,CAAC,aAAqB,EAAE,OAAe;IAClE,MAAM,SAAS,GAAG,kBAAkB,CAAC,WAAW,EAAE,EAAE,aAAa,EAAE,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC;IAChG,IAAI,SAAS,GAAG,CAAC;QAAE,wBAAwB,EAAE,CAAC;AAChD,CAAC;AAED;;;;;GAKG;AACH,SAAS,wBAAwB;IAC/B,kBAAkB,EAAE,CAAC;QACnB,IAAI,EAAE,kBAAkB;QACxB,KAAK,EAAE,mBAAmB;QAC1B,IAAI,EAAE,0BAA0B;KACjC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,SAAS,mBAAmB,CAAC,IAAoB;IAC/C,MAAM,OAAO,GAA6B;QACxC,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,MAAM,EAAE,IAAI,CAAC,MAAM;KACpB,CAAC;IACF,kBAAkB,EAAE,CAAC;QACnB,IAAI,EAAE,oBAAoB;QAC1B,KAAK,EAAE,kCAAkC;QACzC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;QAC7B,SAAS,EAAE,IAAI,CAAC,aAAa;KAC9B,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,eAAe,CAAC,IAAkB,EAAE,GAAU;IACrD,MAAM,OAAO,GAAG,0BAA0B,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7E,MAAM,eAAe,GAAG,OAAO,IAAI,IAAI,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,UAAU,IAAI,yBAAyB,CAAC;IACxG,IAAI,CAAC,eAAe;QAAE,OAAO,CAAC,iEAAiE;IAC/F,MAAM,KAAK,GAAG,GAAG,IAAI,CAAC,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;IACvE,GAAG,CACD,MAAM,EACN,uBAAuB,KAAK,wBAAwB,IAAI,CAAC,MAAM,2CAA2C;QACxG,yGAAyG,CAC5G,CAAC;IACF,kBAAkB,EAAE,CAAC;QACnB,IAAI,EAAE,cAAc;QACpB,KAAK,EAAE,8CAA8C;QACrD,IAAI,EAAE,GAAG,KAAK,8HAA8H;QAC5I,SAAS,EAAE,IAAI,CAAC,aAAa;KAC9B,CAAC,CAAC;AACL,CAAC;AAED,kFAAkF;AAClF,8EAA8E;AAC9E,IAAI,OAAmC,CAAC;AAExC;;;;;;;GAOG;AACH,SAAS,uBAAuB;IAC9B,IAAI,CAAC;QACH,OAAO,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,aAAa,IAAI,EAAE,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,sBAAsB;IAC7B,IAAI,CAAC;QACH,OAAO,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,iBAAiB,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;IACzE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC;IAChB,CAAC;AACH,CAAC;AAED,SAAS,aAAa;IACpB,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,GAAG,IAAI,cAAc,CAAC;YAC3B,kBAAkB,EAAE,uBAAuB,EAAE;YAC7C,YAAY,EAAE,sBAAsB,EAAE;SACvC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,qFAAqF;AACrF,uFAAuF;AACvF,yEAAyE;AACzE,IAAI,qBAAgE,CAAC;AAErE;;;;;;GAMG;AACH,SAAS,wBAAwB;IAC/B,IAAI,qBAAqB;QAAE,OAAO;IAClC,MAAM,OAAO,GAAG,CAAC,SAAiB,EAAQ,EAAE;QAC1C,MAAM,MAAM,GAAG,sBAAsB,CAAC,SAAS,CAAC,CAAC;QACjD,IAAI,MAAM;YAAE,KAAK,aAAa,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IACvF,CAAC,CAAC;IACF,qBAAqB,GAAG,OAAO,CAAC;IAChC,uBAAuB,CAAC,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC9C,uBAAuB,CAAC,EAAE,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;AACpD,CAAC;AAED,sFAAsF;AACtF,SAAS,0BAA0B;IACjC,IAAI,CAAC,qBAAqB;QAAE,OAAO;IACnC,uBAAuB,CAAC,GAAG,CAAC,QAAQ,EAAE,qBAAqB,CAAC,CAAC;IAC7D,uBAAuB,CAAC,GAAG,CAAC,YAAY,EAAE,qBAAqB,CAAC,CAAC;IACjE,qBAAqB,GAAG,SAAS,CAAC;AACpC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAU;IAC5C,aAAa,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC;IAC7D,wBAAwB,EAAE,CAAC;IAC3B,GAAG,CAAC,MAAM,EAAE,oCAAoC,CAAC,CAAC;AACpD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB;IAChC,0BAA0B,EAAE,CAAC;IAC7B,OAAO,EAAE,IAAI,EAAE,CAAC;AAClB,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,iBAAiB;IAC/B,OAAO,aAAa,EAAE,CAAC;AACzB,CAAC"}
+{"version":3,"file":"mailbox-wiring.js","sourceRoot":"","sources":["../../../src/agent-farm/servers/mailbox-wiring.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,uBAAuB,EAAmB,MAAM,+BAA+B,CAAC;AAEzF,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AACjF,OAAO,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC/F,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,cAAc,EAAsC,MAAM,kBAAkB,CAAC;AACnG,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EACL,kBAAkB,EAClB,uBAAuB,GAExB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAClE,OAAO,EAAE,SAAS,IAAI,gBAAgB,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAC9G,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EACL,cAAc,EACd,gBAAgB,GASjB,MAAM,uBAAuB,CAAC;AAG/B;;;;;;;GAOG;AACH,MAAM,yBAAyB,GAAG,MAAM,CAAC;AAezC,IAAI,kBAAkD,CAAC;AAEvD,wFAAwF;AACxF,MAAM,UAAU,qBAAqB,CAAC,EAAsB;IAC1D,kBAAkB,GAAG,EAAE,CAAC;AAC1B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,YAAY,GAAkB,kBAAkB,EAAE,CAAC;AAEzD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,0BAA0B,CAAC,aAAqB,EAAE,OAAe;IAC/E,MAAM,KAAK,GAAG,qBAAqB,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IACzD,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACtG,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,MAAM,OAAO,GAAG,kBAAkB,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IACrD,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC/C,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,sBAAsB,CACpC,SAAiB;IAEjB,KAAK,MAAM,CAAC,aAAa,EAAE,KAAK,CAAC,IAAI,qBAAqB,EAAE,EAAE,CAAC;QAC7D,KAAK,MAAM,QAAQ,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YACxE,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,QAAQ,EAAE,CAAC;gBACpC,IAAI,GAAG,KAAK,SAAS;oBAAE,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;YAClE,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,UAAU,wBAAwB,CAAC,OAAwB;IAC/D,MAAM,MAAM,GAAG,cAAc,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;IACtF,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,MAAM,OAAO,GAAG,uBAAuB,CAAC,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IACnE,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,OAAO,cAAc,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;AAC9C,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,OAAwB,EAAE,OAAoB;IACtF,MAAM,MAAM,GAAI,OAAsB,CAAC,UAAU,CAAC;IAClD,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IACnF,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;IACjD,OAAO,cAAc,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;AACnD,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,sBAAsB,GAAG,GAAG,CAAC;AACnC,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAE/B;;;;;;;;;;;GAWG;AACH,KAAK,UAAU,iBAAiB,CAAC,MAAqB,EAAE,MAAc;IACpE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;IACrC,MAAM,IAAI,GAAG,gBAAgB,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5D,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,IAAI,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC;QAAE,KAAK,EAAE,CAAC;IACtG,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAAwB,EAAE,MAAc;IAC9E,MAAM,MAAM,GAAI,OAAsB,CAAC,UAAU,CAAC;IAClD,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;IAC7D,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvD,OAAO;QACL,MAAM,EAAE,KAAK,IAAsB,EAAE;YACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,sBAAsB,CAAC;YACrD,SAAS,CAAC;gBACR,IAAI,MAAM,iBAAiB,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM;oBAAE,OAAO,IAAI,CAAC;gBAClE,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ;oBAAE,OAAO,KAAK,CAAC;gBACzC,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC,CAAC;YAC3E,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,qFAAqF;AACrF,SAAS,kBAAkB,CAAC,KAAyB;IACnD,gBAAgB,CAAC;QACf,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,SAAS,EAAE;QACxF,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,QAAQ,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE;QAC/B,SAAS,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;KACnD,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAU;IAC1C,OAAO;QACL,kBAAkB,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,0BAA0B,CAAC,EAAE,EAAE,KAAK,CAAC;QACxE,cAAc,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,wBAAwB,CAAC,OAAO,CAAC;QAC9D,QAAQ,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC;QACrE,oFAAoF;QACpF,6EAA6E;QAC7E,kFAAkF;QAClF,qCAAqC;QACrC,YAAY,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,CAAC,kBAAkB,CAAC,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,CAAC;QACtG,yFAAyF;QACzF,0FAA0F;QAC1F,0FAA0F;QAC1F,SAAS,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC;QAClE,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,kBAAkB,CAAC,KAAK,CAAC;QAC/C,iBAAiB,EAAE,GAAG,EAAE,CAAC,wBAAwB,EAAE;QACnD,YAAY,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC;QACjD,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,EAAE,GAAG,CAAC;QAChD,wFAAwF;QACxF,yFAAyF;QACzF,oBAAoB,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,yBAAyB,CAAC,IAAI,CAAC;QAC/D,mBAAmB,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,mBAAmB,CAAC,IAAI,EAAE,GAAG,CAAC;QAC7D,oBAAoB,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,oBAAoB,CAAC,EAAE,EAAE,KAAK,CAAC;QACpE,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,IAAI,MAAM,EAAE,CAAC,CAAC;QAC1C,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;KACtB,CAAC;AACJ,CAAC;AAED,yFAAyF;AACzF,MAAM,aAAa,GAAG,YAAY,CAAC;AAEnC,oFAAoF;AACpF,SAAS,kBAAkB,CAAC,OAAe;IACzC,OAAO,GAAG,uBAAuB,GAAG,OAAO,EAAE,CAAC;AAChD,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAAyB;IAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC;IAC7D,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,yBAAyB,IAAI,CAAC,MAAM,0BAA0B,CAAC,CAAC,CAAC,EAAE,CAAC;IACxG,MAAM,IAAI,GACR,0CAA0C,IAAI,CAAC,OAAO,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI;QAClG,GAAG,IAAI,CAAC,SAAS,IAAI,MAAM,UAAU,IAAI,MAAM,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,SAAS,IAAI,CAAC;IAEzG,IAAI,IAAI,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QAChC,uFAAuF;QACvF,EAAE;QACF,yFAAyF;QACzF,uFAAuF;QACvF,4FAA4F;QAC5F,4FAA4F;QAC5F,wFAAwF;QACxF,kDAAkD;QAClD,OAAO,CACL,GAAG,IAAI,kFAAkF;YACzF,yFAAyF;YACzF,8BAA8B;YAC9B,sFAAsF;YACtF,sFAAsF;YACtF,+CAA+C,CAChD,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;QAChD,yFAAyF;QACzF,6BAA6B;QAC7B,OAAO,CACL,GAAG,IAAI,mFAAmF;YAC1F,2FAA2F;YAC3F,qFAAqF;YACrF,iEAAiE;YACjE,wEAAwE;YACxE,kBAAkB,IAAI,CAAC,OAAO,4BAA4B,CAC3D,CAAC;IACJ,CAAC;IACD,OAAO,CACL,GAAG,IAAI,kFAAkF;QACzF,0BAA0B;QAC1B,sDAAsD,IAAI,CAAC,OAAO,4BAA4B,CAC/F,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAS,mBAAmB,CAAC,IAAyB,EAAE,GAAU;IAChE,mFAAmF;IACnF,IAAI,kBAAkB,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IACvE,4FAA4F;IAC5F,mFAAmF;IACnF,MAAM,KAAK,GAAG,sBAAsB,CAAC,WAAW,EAAE,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACpF,IAAI,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,GAAG,CAAC,MAAM,EAAE,mCAAmC,IAAI,CAAC,OAAO,qCAAqC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC;QAClH,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC,CAAC,gDAAgD;IAChG,MAAM,IAAI,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;IACzC,gBAAgB,CAAC,WAAW,EAAE,EAAE,IAAI,CAAC,aAAa,EAAE,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE;QACpF,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,OAAO,EAAE,KAAK,CAAC,KAAK;QACpB,IAAI;QACJ,gBAAgB,EAAE,oBAAoB,CAAC,aAAa,EAAE,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC;QACxE,SAAS,EAAE,aAAa;QACxB,aAAa,EAAE,IAAI,CAAC,aAAa;KAClC,CAAC,CAAC;IACH,wBAAwB,EAAE,CAAC;IAC3B,yFAAyF;IACzF,KAAK,aAAa,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IACrE,GAAG,CACD,MAAM,EACN,iCAAiC,KAAK,CAAC,KAAK,UAAU,IAAI,CAAC,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG;QAC1G,IAAI,IAAI,CAAC,SAAS,UAAU,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE;QACxG,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CACzD,CAAC;IACF,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,SAAS,oBAAoB,CAAC,aAAqB,EAAE,OAAe;IAClE,MAAM,SAAS,GAAG,kBAAkB,CAAC,WAAW,EAAE,EAAE,aAAa,EAAE,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC;IAChG,IAAI,SAAS,GAAG,CAAC;QAAE,wBAAwB,EAAE,CAAC;AAChD,CAAC;AAED;;;;;GAKG;AACH,SAAS,wBAAwB;IAC/B,kBAAkB,EAAE,CAAC;QACnB,IAAI,EAAE,kBAAkB;QACxB,KAAK,EAAE,mBAAmB;QAC1B,IAAI,EAAE,0BAA0B;KACjC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,SAAS,mBAAmB,CAAC,IAAoB;IAC/C,MAAM,OAAO,GAA6B;QACxC,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,0FAA0F;QAC1F,wFAAwF;QACxF,4EAA4E;QAC5E,MAAM,EAAE,IAAI,CAAC,MAAM;KACpB,CAAC;IACF,kBAAkB,EAAE,CAAC;QACnB,IAAI,EAAE,oBAAoB;QAC1B,KAAK,EAAE,kCAAkC;QACzC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;QAC7B,SAAS,EAAE,IAAI,CAAC,aAAa;KAC9B,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,eAAe,CAAC,IAAkB,EAAE,GAAU;IACrD,MAAM,OAAO,GAAG,0BAA0B,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7E,MAAM,eAAe,GAAG,OAAO,IAAI,IAAI,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,UAAU,IAAI,yBAAyB,CAAC;IACxG,IAAI,CAAC,eAAe;QAAE,OAAO,CAAC,iEAAiE;IAC/F,MAAM,KAAK,GAAG,GAAG,IAAI,CAAC,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;IACvE,GAAG,CACD,MAAM,EACN,uBAAuB,KAAK,wBAAwB,IAAI,CAAC,MAAM,2CAA2C;QACxG,yGAAyG,CAC5G,CAAC;IACF,kBAAkB,EAAE,CAAC;QACnB,IAAI,EAAE,cAAc;QACpB,KAAK,EAAE,8CAA8C;QACrD,IAAI,EAAE,GAAG,KAAK,8HAA8H;QAC5I,SAAS,EAAE,IAAI,CAAC,aAAa;KAC9B,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,yBAAyB,CAAC,IAA4B;IAC7D,MAAM,KAAK,GAAG,GAAG,IAAI,CAAC,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;IACvE,kBAAkB,EAAE,CAAC;QACnB,IAAI,EAAE,cAAc;QACpB,KAAK,EAAE,gDAAgD;QACvD,IAAI,EACF,GAAG,KAAK,0CAA0C,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,uBAAuB;YACpG,mGAAmG;YACnG,6BAA6B,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,mCAAmC;QAC5F,SAAS,EAAE,IAAI,CAAC,aAAa;KAC9B,CAAC,CAAC;AACL,CAAC;AAED,kFAAkF;AAClF,8EAA8E;AAC9E,IAAI,OAAmC,CAAC;AAExC;;;;;;;GAOG;AACH,SAAS,uBAAuB;IAC9B,IAAI,CAAC;QACH,OAAO,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,aAAa,IAAI,EAAE,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,sBAAsB;IAC7B,IAAI,CAAC;QACH,OAAO,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,iBAAiB,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;IACzE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC;IAChB,CAAC;AACH,CAAC;AAED,SAAS,aAAa;IACpB,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,GAAG,IAAI,cAAc,CAAC;YAC3B,kBAAkB,EAAE,uBAAuB,EAAE;YAC7C,YAAY,EAAE,sBAAsB,EAAE;SACvC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,qFAAqF;AACrF,uFAAuF;AACvF,yEAAyE;AACzE,IAAI,qBAAgE,CAAC;AAErE;;;;;;GAMG;AACH,SAAS,wBAAwB;IAC/B,IAAI,qBAAqB;QAAE,OAAO;IAClC,MAAM,OAAO,GAAG,CAAC,SAAiB,EAAQ,EAAE;QAC1C,MAAM,MAAM,GAAG,sBAAsB,CAAC,SAAS,CAAC,CAAC;QACjD,IAAI,MAAM;YAAE,KAAK,aAAa,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IACvF,CAAC,CAAC;IACF,qBAAqB,GAAG,OAAO,CAAC;IAChC,uBAAuB,CAAC,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC9C,uBAAuB,CAAC,EAAE,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;AACpD,CAAC;AAED,sFAAsF;AACtF,SAAS,0BAA0B;IACjC,IAAI,CAAC,qBAAqB;QAAE,OAAO;IACnC,uBAAuB,CAAC,GAAG,CAAC,QAAQ,EAAE,qBAAqB,CAAC,CAAC;IAC7D,uBAAuB,CAAC,GAAG,CAAC,YAAY,EAAE,qBAAqB,CAAC,CAAC;IACjE,qBAAqB,GAAG,SAAS,CAAC;AACpC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAU;IAC5C,aAAa,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC;IAC7D,wBAAwB,EAAE,CAAC;IAC3B,GAAG,CAAC,MAAM,EAAE,oCAAoC,CAAC,CAAC;AACpD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB;IAChC,0BAA0B,EAAE,CAAC;IAC7B,OAAO,EAAE,IAAI,EAAE,CAAC;AAClB,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,iBAAiB;IAC/B,OAAO,aAAa,EAAE,CAAC;AACzB,CAAC"}

package/dist/agent-farm/servers/message-write.d.ts

@@ -4,12 +4,13 @@
  * Extracted to a shared module to avoid circular imports between
  * tower-routes.ts and tower-cron.ts.
  */
+import { type SubmitClock } from './session-submit.js';
 /** Minimal writable session interface — avoids coupling to PtySession. */
 export interface WritableSession {
     /**
      * Write input to the underlying PTY. Returns `false` when the write was dropped
      * (#1198: a shellper-backed session whose socket has died still reports status
-     * 'running', yet its writes silently no-op). {@link writeMessagePaced} threads this
+     * 'running', yet its writes silently no-op). {@link submitMessagePaced} threads this
      * boolean so a mailbox delivery whose bytes never reached the terminal is held, not
      * marked delivered (Spec 1313 integration review — the silent-loss finding).
      */
@@ -53,24 +54,63 @@ export declare function writeEscapeToSession(session: WritableSession, noEnter:
  */
 export declare function writeMessageToSession(session: WritableSession, message: string, noEnter: boolean, delayOffset?: number): number;
 /**
- * Paced write of a message (text + trailing Enter unless `noEnter`) that reports
- * whether every byte reached the PTY. Resolves `true` when the whole submit landed,
- * `false` when ANY scheduled write was dropped (#1198: a shellper socket that died
- * mid-pace). This is the delivery layer's authoritative success signal — a mailbox
- * delivery holds a row whose bytes never made it instead of marking it delivered
- * (Spec 1313 integration review — the silent-loss finding).
+ * Outcome of a {@link submitMessagePaced} attempt. Generic in the caller's own abort
+ * vocabulary so this module stays free of mailbox concepts — the delivery layer
+ * instantiates `A` with its hold reasons.
+ */
+export type PacedSubmitResult<A> = 
+/** The whole submit — text and, unless `noEnter`, the trailing Enter — reached the PTY. */
+{
+    status: 'written';
+}
+/** #1198: a scheduled write was dropped mid-pace (the shellper socket died). */
+ | {
+    status: 'dropped';
+}
+/**
+ * The bytes went out, but an operator submission bypassed the lock while they did
+ * (the ceiling-expired degraded path), so this submit cannot be trusted to have
+ * landed intact.
+ */
+ | {
+    status: 'preempted';
+}
+/** Another submission held the terminal. NOTHING was written; the caller may retry later. */
+ | {
+    status: 'contended';
+}
+/** The caller's in-lock precheck refused. NOTHING was written. */
+ | {
+    status: 'aborted';
+    abort: A;
+};
+/**
+ * Paced write of a message (text + trailing Enter unless `noEnter`) performed as ONE
+ * submission on the session's per-terminal lock (Issue #1365).
+ *
+ * This is the mailbox delivery path's write edge. Before #1365 it wrote directly, under
+ * the per-agent serializer only, so a gated delivery could interleave with a concurrent
+ * `--interrupt`/`--escape` on the same terminal: a `^C` or ESC landing between the text
+ * and its Enter cleared or truncated the composer while every byte still reported
+ * success, and the row was marked `delivered` for a message the agent never saw whole.
+ * Taking the same lock those paths take is what makes that impossible.
+ *
+ * Two properties are load-bearing and easy to lose in a refactor:
  *
- * `writeMessageToSession` fires the text, any subsequent lines, and the trailing
- * Enter across `setTimeout` gaps (10–130ms+), and a t=0 `writable` precheck cannot
- * see a socket that dies *during* that sequence. So wrap the session and record
- * whether any of those writes returned false. The returned promise resolves at the
- * final scheduled offset (`doneMs`); `writeMessageToSession` registers the Enter's
- * `setTimeout` at that same offset *before* this resolve is scheduled, so the Enter
- * executes first and its result is observed by resolution time.
+ *   - **`precheck` runs INSIDE the lock**, immediately before the first byte. Acquiring
+ *     the lock without it would merely move the race: a delivery that classified a clean
+ *     screen, then waited behind another submission, would write onto the screen that
+ *     submission just changed. Returning non-null aborts with nothing written.
+ *   - **Contention is declined, not queued** (see {@link trySubmitToSession}). The gated
+ *     delivery path must never block, because the drainer walks agents sequentially.
  *
- * Awaiting the promise is also what makes the per-agent write serializer's
- * completion-chaining real — the next delivery cannot begin until this submit
- * (Enter included) is entirely on the wire.
+ * The completion semantics callers depend on are unchanged from the pre-#1365
+ * `writeMessagePaced`: the returned promise resolves only after the trailing Enter has
+ * been written. `writeMessageToSession` registers the Enter's `setTimeout` before
+ * `submitToSession` schedules its own equal-offset sleep, so the Enter still executes
+ * first — which is what makes the per-agent serializer's completion-chaining real.
  */
-export declare function writeMessagePaced(session: WritableSession, message: string, noEnter: boolean): Promise<boolean>;
+export declare function submitMessagePaced<A>(session: WritableSession & {
+    id: string;
+}, message: string, noEnter: boolean, precheck: () => A | null, clock?: SubmitClock): Promise<PacedSubmitResult<A>>;
 //# sourceMappingURL=message-write.d.ts.map

package/dist/agent-farm/servers/message-write.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"message-write.d.ts","sourceRoot":"","sources":["../../../src/agent-farm/servers/message-write.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,0EAA0E;AAC1E,MAAM,WAAW,eAAe;IAC9B;;;;;;OAMG;IACH,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;CAC9B;AAUD,iEAAiE;AACjE,eAAO,MAAM,GAAG,WAAS,CAAC;AAE1B;;;GAGG;AACH,eAAO,MAAM,qBAAqB,KAAwB,CAAC;AAE3D;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,CAKvF;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,SAAI,GAC3E,MAAM,CAqCR;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAC1D,OAAO,CAAC,OAAO,CAAC,CAWlB"}
+{"version":3,"file":"message-write.d.ts","sourceRoot":"","sources":["../../../src/agent-farm/servers/message-write.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAqC,KAAK,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAE1F,0EAA0E;AAC1E,MAAM,WAAW,eAAe;IAC9B;;;;;;OAMG;IACH,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;CAC9B;AAUD,iEAAiE;AACjE,eAAO,MAAM,GAAG,WAAS,CAAC;AAE1B;;;GAGG;AACH,eAAO,MAAM,qBAAqB,KAAwB,CAAC;AAE3D;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,CAKvF;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,SAAI,GAC3E,MAAM,CAqCR;AAED;;;;GAIG;AACH,MAAM,MAAM,iBAAiB,CAAC,CAAC;AAC7B,2FAA2F;AACzF;IAAE,MAAM,EAAE,SAAS,CAAA;CAAE;AACvB,gFAAgF;GAC9E;IAAE,MAAM,EAAE,SAAS,CAAA;CAAE;AACvB;;;;GAIG;GACD;IAAE,MAAM,EAAE,WAAW,CAAA;CAAE;AACzB,6FAA6F;GAC3F;IAAE,MAAM,EAAE,WAAW,CAAA;CAAE;AACzB,kEAAkE;GAChE;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,KAAK,EAAE,CAAC,CAAA;CAAE,CAAC;AAEpC;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAsB,kBAAkB,CAAC,CAAC,EACxC,OAAO,EAAE,eAAe,GAAG;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,EACzC,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,OAAO,EAChB,QAAQ,EAAE,MAAM,CAAC,GAAG,IAAI,EACxB,KAAK,CAAC,EAAE,WAAW,GAClB,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAkD/B"}

package/dist/agent-farm/servers/message-write.js

@@ -4,6 +4,7 @@
  * Extracted to a shared module to avoid circular imports between
  * tower-routes.ts and tower-cron.ts.
  */
+import { trySubmitToSession, watchBypasses } from './session-submit.js';
 // Messages longer than this threshold are written line-by-line with delays
 // to prevent the receiving terminal from classifying the input as a paste
 // and swallowing the final Enter.
@@ -91,36 +92,80 @@ export function writeMessageToSession(session, message, noEnter, delayOffset = 0
     return lastLineTime;
 }
 /**
- * Paced write of a message (text + trailing Enter unless `noEnter`) that reports
- * whether every byte reached the PTY. Resolves `true` when the whole submit landed,
- * `false` when ANY scheduled write was dropped (#1198: a shellper socket that died
- * mid-pace). This is the delivery layer's authoritative success signal — a mailbox
- * delivery holds a row whose bytes never made it instead of marking it delivered
- * (Spec 1313 integration review — the silent-loss finding).
+ * Paced write of a message (text + trailing Enter unless `noEnter`) performed as ONE
+ * submission on the session's per-terminal lock (Issue #1365).
  *
- * `writeMessageToSession` fires the text, any subsequent lines, and the trailing
- * Enter across `setTimeout` gaps (10–130ms+), and a t=0 `writable` precheck cannot
- * see a socket that dies *during* that sequence. So wrap the session and record
- * whether any of those writes returned false. The returned promise resolves at the
- * final scheduled offset (`doneMs`); `writeMessageToSession` registers the Enter's
- * `setTimeout` at that same offset *before* this resolve is scheduled, so the Enter
- * executes first and its result is observed by resolution time.
+ * This is the mailbox delivery path's write edge. Before #1365 it wrote directly, under
+ * the per-agent serializer only, so a gated delivery could interleave with a concurrent
+ * `--interrupt`/`--escape` on the same terminal: a `^C` or ESC landing between the text
+ * and its Enter cleared or truncated the composer while every byte still reported
+ * success, and the row was marked `delivered` for a message the agent never saw whole.
+ * Taking the same lock those paths take is what makes that impossible.
  *
- * Awaiting the promise is also what makes the per-agent write serializer's
- * completion-chaining real — the next delivery cannot begin until this submit
- * (Enter included) is entirely on the wire.
+ * Two properties are load-bearing and easy to lose in a refactor:
+ *
+ *   - **`precheck` runs INSIDE the lock**, immediately before the first byte. Acquiring
+ *     the lock without it would merely move the race: a delivery that classified a clean
+ *     screen, then waited behind another submission, would write onto the screen that
+ *     submission just changed. Returning non-null aborts with nothing written.
+ *   - **Contention is declined, not queued** (see {@link trySubmitToSession}). The gated
+ *     delivery path must never block, because the drainer walks agents sequentially.
+ *
+ * The completion semantics callers depend on are unchanged from the pre-#1365
+ * `writeMessagePaced`: the returned promise resolves only after the trailing Enter has
+ * been written. `writeMessageToSession` registers the Enter's `setTimeout` before
+ * `submitToSession` schedules its own equal-offset sleep, so the Enter still executes
+ * first — which is what makes the per-agent serializer's completion-chaining real.
  */
-export function writeMessagePaced(session, message, noEnter) {
-    let delivered = true;
-    const tracked = {
-        write: (data) => {
-            const ok = session.write(data);
-            if (!ok)
-                delivered = false;
-            return ok;
-        },
-    };
-    const doneMs = writeMessageToSession(tracked, message, noEnter);
-    return new Promise((resolve) => setTimeout(() => resolve(delivered), doneMs));
+export async function submitMessagePaced(session, message, noEnter, precheck, clock) {
+    // Fail LOUD on a missing id rather than keying the lock on `undefined`. Sessions reach
+    // this through structurally-typed ports, so a double without an id compiles fine and
+    // would silently collapse every per-terminal lock into one global lock — serialization
+    // that looks present and is not. A throw here surfaces as a held row (the delivery path
+    // never marks a row delivered on a throw), which is the safe failure.
+    if (typeof session.id !== 'string' || session.id === '') {
+        throw new Error('submitMessagePaced: session.id must be a non-empty string (the per-terminal lock key)');
+    }
+    // The one thing the lock cannot stop is an operator submission whose wait ceiling expired
+    // and wrote anyway. Watch the session's degraded-write counter across our own submission:
+    // a bump means a `^C`/ESC bypassed us mid-write, so the composer may have been cleared or
+    // truncated under our bytes. Cheaper and more direct than re-classifying the screen — and it
+    // is the difference between re-holding the row and falsely reporting a delivery, which is
+    // the whole point of Issue #1365. The watch also pins the counter against eviction for
+    // exactly as long as we need to compare it; `finally` is what keeps that pin from leaking.
+    const bypasses = watchBypasses(session.id);
+    try {
+        let delivered = true;
+        let abort = null;
+        const tracked = {
+            write: (data) => {
+                const ok = session.write(data);
+                if (!ok)
+                    delivered = false;
+                return ok;
+            },
+        };
+        const ran = await trySubmitToSession(session.id, () => {
+            abort = precheck();
+            if (abort !== null)
+                return 0; // refused in-lock: not one byte goes out
+            return writeMessageToSession(tracked, message, noEnter);
+        }, clock);
+        if (!ran)
+            return { status: 'contended' };
+        // Read through a cast: both flags are assigned inside the callback above, which
+        // TypeScript's flow analysis does not track back to this scope.
+        const refused = abort;
+        if (refused !== null)
+            return { status: 'aborted', abort: refused };
+        if (!delivered)
+            return { status: 'dropped' };
+        if (bypasses.raced())
+            return { status: 'preempted' };
+        return { status: 'written' };
+    }
+    finally {
+        bypasses.release();
+    }
 }
 //# sourceMappingURL=message-write.js.map