@intentic/sandbox-contract 1.345.0 → 1.346.0

package/src/text/transcript-fold.ts

@@ -15,12 +15,13 @@ import { contextTrimLine, contextTrimNotice } from "../schemas/context-trim.js";
 import { keptWarmLine, keptWarmNotice } from "../schemas/keep-warm.js";
 import { handedOffLine, handedOffNotice } from "../schemas/providers/handoff.js";
 import { isLandConflict } from "../events/land-conflict.js";
-import { anotherModelClears, turnedAwayCode } from "../policy/turned-away.js";
-import { stoppedPartwayRow, undeliveredRow } from "../events/undelivered.js";
+import { turnedAwayCode } from "../policy/turned-away.js";
+import { errorRow, RENEWAL_WITHDRAWN, RENEWING } from "../events/failure-rows.js";
 import { mentionedPathTokens } from "./mentions.js";
 import { unspokenPromptRow } from "../events/agent-words.js";
 import { needRowText } from "../events/need-wake.js";
 import { noticeCode, sandboxNoticeOf } from "../events/sandbox-notice.js";
+import { installRow, landedRow, syncLine } from "./land-rows.js";
 
 // Folds a turn's frames into rows once, live and for the settled record alike, so a reopened chat matches what was on
 // screen. The main turn's frames are its rows; a frame a subagent produced (tagged with the call that spawned it) nests
@@ -89,222 +90,6 @@ const empty = (row: TranscriptRow): boolean =>
     row.usage === undefined &&
     !holdsRequest(row);
 
-// Clause appended to the landed notice for a workspace dependency change, or empty when there is none. Reports the
-// install as already started, or as on its way: the daemon starts it within seconds, in the install lane, behind any
-// install already running; never as a request.
-const dependencyLine = (deps: { missing: number; started: string[]; deferred: boolean } | undefined): string => {
-    if (deps === undefined || deps.missing === 0) {
-        return ``;
-    }
-    // `missing` counts versions the turn bumped as well as names it added, so the sentence names both.
-    const what = `${deps.missing} ${deps.missing === 1 ? `dependency` : `dependencies`} it added or changed`;
-    return deps.deferred
-        ? ` ${what} ${deps.missing === 1 ? `is` : `are`} being installed in your tree: the install waits for any other install to finish, appears in Work terminals, and its outcome lands in Activity.`
-        : ` Installing ${what}; the project's checks run when that finishes, and the outcome lands in Activity.`;
-};
-
-// Said as an agent's own install starts: where it writes and what outlasts it. Names up to three projects, the workspace
-// root first; an install the gate could not place in a project says only where it writes. Coded like every sandbox
-// notice (sandbox-notice.ts `installing`), so the chat can say it in the reader's language.
-const INSTALL_NAMED = 3;
-const installRow = (event: { readonly reach: "own-copy" | "main-tree"; readonly projects: readonly string[] }): TranscriptRow => {
-    const root = event.projects.includes(``);
-    const dirs = event.projects.filter((dir) => dir !== ``).map((dir) => `${dir}/`);
-    const shownDirs = dirs.slice(0, INSTALL_NAMED - (root ? 1 : 0));
-    const more = dirs.length - shownDirs.length;
-    const named = [...(root ? [`the workspace root`] : []), ...shownDirs].join(`, `);
-    const list = more > 0 ? `${named} and ${more} more` : named;
-    const where = list === `` ? `` : ` in ${list}`;
-    const ownCopy = event.reach === `own-copy`;
-    return {
-        role: "notice",
-        text: ownCopy
-            ? `Installing packages${where} into this conversation's own copy. The manifest and lockfile land with the work, and the review lists what it adds.`
-            : `Installing packages${where} in the main tree, one install at a time.`,
-        noticeCode: noticeCode({
-            code: "installing",
-            params: {
-                ownCopy,
-                root: root || undefined,
-                projects: shownDirs.length === 0 ? undefined : shownDirs.join(`, `),
-                more: more > 0 ? more : undefined,
-            },
-        }),
-    };
-};
-
-// One line reporting the daemon's rebase of this agent's branch onto the current workspace; `blocked` names repos it
-// couldn't rebase, where the turn ran from an older base.
-const syncLine = (sync: { commits: number; blocked: readonly string[] }): string => {
-    const moved =
-        sync.commits > 0
-            ? `Your workspace moved on while this agent waited, its branch was rebased onto your latest ${sync.commits} commit${sync.commits === 1 ? `` : `s`}.`
-            : undefined;
-    const blocked =
-        sync.blocked.length > 0
-            ? `Couldn't rebase onto your workspace in ${sync.blocked.join(`, `)}: the turn is running from the older base, so its land may need a resolve.`
-            : undefined;
-    return [moved, blocked].filter((line) => line !== undefined).join(` `);
-};
-
-// Row for a spawned child's work gone into its parent's checkout, or held off it by a clash with the parent's edits.
-const intoParentRow = (event: Extract<AgentEvent, { kind: "landed" }>): TranscriptRow => {
-    if (event.landed) {
-        return {
-            role: "notice",
-            text: `Changes went into the parent agent's checkout, as its in-process subagents' edits do: they reach your workspace with its land.`,
-            noticeCode: noticeCode({ code: "intoParent" }),
-        };
-    }
-    const files = (event.conflicts ?? []).flatMap((conflict) => conflict.paths).length;
-    return {
-        role: "notice",
-        text: `${files} file(s) clash with the parent agent's own edits, so nothing was written into its checkout. The parent was told, and can bring the changes in to resolve.`,
-        noticeCode: noticeCode({ code: "intoParentClash", params: { files } }),
-    };
-};
-
-// Row for a finished turn: held on its branch, landed automatically, or conflicted. A landed turn that changed
-// dependencies appends dependencyLine, since the Changes diff can't show that.
-const landedRow = (event: Extract<AgentEvent, { kind: "landed" }>): TranscriptRow => {
-    if (event.into !== undefined) {
-        return intoParentRow(event);
-    }
-    if (event.held === true) {
-        return { role: "notice", text: `Finished: the work is on this agent's branch, ready to land from its review.`, noticeCode: noticeCode({ code: "landHeld" }) };
-    }
-    if (!event.landed) {
-        // Per-file cause (your edits, a moved main line, a binary) is spelled out in the review, not named here.
-        const conflicts = event.conflicts ?? [];
-        const files = conflicts.flatMap((conflict) => conflict.paths).length;
-        const repos = conflicts.map((conflict) => conflict.repo).join(`, `);
-        return {
-            role: "notice",
-            text: `${files} file(s) couldn't land automatically in ${repos}. Open the agent's review to see what blocked them and land from there.`,
-            noticeCode: noticeCode({ code: "landConflict", params: { files, repos } }),
-        };
-    }
-    // noticeAction fires only here, right as the auto-behavior ran; an active install takes the slot instead.
-    const deps = event.deps === undefined || event.deps.missing === 0 ? undefined : event.deps;
-    return {
-        role: "notice",
-        text: `Changes landed in your workspace: review them in the Changes panel.${dependencyLine(event.deps)}`,
-        noticeAction: (event.deps?.started.length ?? 0) > 0 ? "depsInstall" : "landHold",
-        noticeCode: noticeCode({ code: "landed", params: deps === undefined ? undefined : { deps: deps.missing, queued: deps.deferred || undefined } }),
-    };
-};
-
-// A failure's own sentence and code, which every coded error row carries ahead of what it adds.
-const failureOf = (event: Extract<AgentEvent, { kind: "error" }>): { message: string; error?: string } =>
-    event.code === undefined ? { message: event.message } : { message: event.message, error: event.code };
-
-// The press a memory hold offers: the raise rides along only when the hold carried a ceiling to size it by, since a
-// stall names none and raising one would not clear it.
-const memoryPress = (event: Extract<AgentEvent, { kind: "error" }>): "sendAnyway" | "sandboxMemory" =>
-    event.memory === undefined ? "sendAnyway" : "sandboxMemory";
-
-// A memory hold is asked once and never again that spell (resource-budget.ts), so the next send always runs. A turn the
-// sandbox started itself (a fix press, a peer's message, a re-run) was never in a composer: its message stays above, and
-// the press asks the sandbox to run the turn it kept rather than sending a queue that holds nothing.
-const heldRow = (event: Extract<AgentEvent, { kind: "error" }>): TranscriptRow => {
-    const unattended = event.unattended === true;
-    const memory = event.code === "sandbox-memory-low";
-    const said = failureOf(event);
-    if (event.held !== undefined && !unattended) {
-        return {
-            role: "notice",
-            text: memory
-                ? `${event.message} Nothing has run yet: the message above is kept here, and sending it anyway starts it.`
-                : `${event.message} Nothing has run yet: the message above is kept here to send again once that is sorted.`,
-            noticeAction: memory ? memoryPress(event) : "sendAgain",
-            sandboxHeld: true,
-            noticeCode: noticeCode({ code: "kept", params: { ...said, memory: memory || undefined } }),
-        };
-    }
-    if (!memory || unattended) {
-        return undeliveredRow(said, unattended);
-    }
-    return {
-        role: "notice",
-        text: `${event.message} Your message is held: send it again to start anyway.`,
-        noticeAction: memoryPress(event),
-        noticeCode: noticeCode({ code: "memoryHeld", params: said }),
-    };
-};
-
-// What an armed credential renewal promises, and what its row says instead once a later failure in the same run took
-// that promise back (TranscriptFold.withdrawRenewal).
-const RENEWING = "The credential is being renewed and this turn continues automatically.";
-const RENEWAL_WITHDRAWN =
-    "The credential was being renewed, but the turn stopped before it could continue: it will not carry on by itself, so press Continue to pick it back up.";
-
-// Row for a turn-ending error: the provider's own message plus one clause on what happens next. The live wait itself is
-// drawn by the chat, not stored here. `ran`: an assistant row stands, so a door refusal stopped the turn partway.
-const errorRow = (event: Extract<AgentEvent, { kind: "error" }>, ran: boolean): TranscriptRow => {
-    const { message, code } = event;
-    const said = failureOf(event);
-    switch (code) {
-        case "provider-outage": {
-            const retry = retryClause(event);
-            return retry === undefined
-                ? {
-                      role: "notice",
-                      text: `${message} Nothing is retrying it, so the turn is waiting here.`,
-                      noticeCode: noticeCode({ code: "outageWaiting", params: said }),
-                  }
-                : { role: "notice", text: `${message} ${retry.text}`, noticeCode: retry.code };
-        }
-        case "claude-token-refused":
-            return event.autoResume === "scheduled"
-                ? {
-                      role: "notice",
-                      text: `${message} ${RENEWING}`,
-                      noticeWait: "credentialRenewal",
-                      noticeCode: noticeCode({ code: "renewing", params: said }),
-                  }
-                : {
-                      role: "notice",
-                      text: `${message} Reconnect the account to pick this conversation back up.`,
-                      noticeCode: noticeCode({ code: "reconnect", params: said }),
-                  };
-        case "rate_limit":
-            return { role: "notice", text: message };
-        default:
-            break;
-    }
-    if (!turnedAwayCode(code)) {
-        const retry = retryClause(event);
-        if (retry !== undefined) {
-            return { role: "notice", text: `${message} ${retry.text}`, noticeCode: retry.code };
-        }
-        // A failure the sandbox names by code is coded too, so a reader that words that failure itself can; the
-        // provider's own uncoded words are only ever themselves.
-        return code === undefined ? { role: "notice", text: message } : { role: "notice", text: message, noticeCode: noticeCode({ code: "failed", params: said }) };
-    }
-    return ran && event.held === undefined ? stoppedPartwayRow(said, anotherModelClears(code)) : heldRow(event);
-};
-
-// What a laddered wall's automatic re-runs are doing, said on the failure's own row so the count stays in the record.
-const retryClause = (event: Extract<AgentEvent, { kind: "error" }>): { text: string; code: NonNullable<TranscriptRow["noticeCode"]> } | undefined => {
-    const { retries } = event;
-    if (retries === undefined) {
-        return undefined;
-    }
-    const said = failureOf(event);
-    if (event.autoResume === "scheduled") {
-        return {
-            text: `Retrying by itself: attempt ${retries.made + 1} of ${retries.max}.`,
-            code: noticeCode({ code: "retrying", params: { ...said, attempt: retries.made + 1, of: retries.max } }),
-        };
-    }
-    return retries.made >= retries.max
-        ? {
-              text: `Retried ${retries.made} of ${retries.max} times by itself; nothing more is sent automatically.`,
-              code: noticeCode({ code: "retried", params: { ...said, made: retries.made, of: retries.max } }),
-          }
-        : undefined;
-};
-
 // The turn's opening user row: text, timestamp, attachments, the message's id, and whatever the daemon later stamps onto
 // it (checkpoint, notes).
 export const userRow = (text: string, sentAt: number, attachments: readonly string[], messageId?: string): TranscriptRow => {
@@ -926,36 +711,49 @@ export const foldTurn = (opening: readonly TranscriptRow[], events: readonly Age
     return fold.rows;
 };
 
+// A patch that changes the row it names, rather than adding one or taking one away.
+export type RowPatch = Exclude<TranscriptPatch, { op: "append" | "drop" }>;
+
 /**
- * Applies one patch to a row list; only what the patch names moves. `tool` upserts by id anywhere in the tree,
- * top-level or nested alike.
+ * What one patch makes of the row it names: the one rule every copy of a run's rows follows (a window drawing the run,
+ * the run log a restart folds back, this module's own replay), so no copy can draw a change its own way. `tool` upserts
+ * by id anywhere in the tree, top-level or nested alike. Every field the patch does not name is kept, a window's own
+ * marks on the row included; `replace` is the row whole.
  */
-export const applyTranscriptPatch = (rows: readonly TranscriptRow[], patch: TranscriptPatch): TranscriptRow[] => {
+export const patchedRow = <R extends TranscriptRow>(row: R, patch: RowPatch): R | TranscriptRow => {
     switch (patch.op) {
-        case "append":
-            return [...rows, patch.row];
         case "replace":
-            return rows.map((row, index) => (index === patch.index ? patch.row : row));
-        case "drop":
-            return rows.filter((_row, index) => index !== patch.index);
+            return patch.row;
         case "text":
-            return rows.map((row, index) => (index === patch.index ? { ...row, text: `${row.text}${patch.text}` } : row));
+            return { ...row, text: `${row.text}${patch.text}` };
         case "thinking":
-            return rows.map((row, index) => (index === patch.index ? { ...row, thinking: `${row.thinking ?? ""}${patch.text}` } : row));
+            return { ...row, thinking: `${row.thinking ?? ""}${patch.text}` };
         case "toolThinking":
-            return rows.map((row, index) => (index === patch.index ? { ...row, tools: [...appendToolThinking(row.tools ?? [], patch.id, patch.text)] } : row));
+            return { ...row, tools: [...appendToolThinking(row.tools ?? [], patch.id, patch.text)] };
         case "tool":
-            return rows.map((row, index) => (index === patch.index ? { ...row, tools: upsertTool(row.tools ?? [], patch.tool, patch.parent) } : row));
+            return { ...row, tools: upsertTool(row.tools ?? [], patch.tool, patch.parent) };
+    }
+};
+
+/** Applies one patch to a row list; only what the patch names moves (patchedRow). */
+export const applyTranscriptPatch = (rows: readonly TranscriptRow[], patch: TranscriptPatch): TranscriptRow[] => {
+    switch (patch.op) {
+        case "append":
+            return [...rows, patch.row];
+        case "drop":
+            return rows.filter((_row, index) => index !== patch.index);
+        default:
+            return rows.map((row, index) => (index === patch.index ? patchedRow(row, patch) : row));
     }
 };
 
 // Appends a delegated subagent's reasoning onto the card with this id, wherever it nests.
-export const appendToolThinking = (tools: readonly TranscriptTool[], id: string, text: string): readonly TranscriptTool[] =>
+const appendToolThinking = (tools: readonly TranscriptTool[], id: string, text: string): readonly TranscriptTool[] =>
     mapTool(tools, id, (card) => ({ ...card, thinking: `${card.thinking ?? ""}${text}` }));
 
 // Replaces the tool with this id anywhere in the tree, keeping the nested calls and thinking it already holds, or appends
 // it under `parent`, or at top level with no parent or no match.
-export const upsertTool = (tools: readonly TranscriptTool[], tool: TranscriptTool, parent: string | undefined): TranscriptTool[] => {
+const upsertTool = (tools: readonly TranscriptTool[], tool: TranscriptTool, parent: string | undefined): TranscriptTool[] => {
     const replaced = mapTool(tools, tool.id, (current) => ({
         ...tool,
         ...(current.children === undefined ? {} : { children: current.children }),

package/dist/events/undelivered.d.ts

@@ -1,10 +0,0 @@
-import type { TranscriptRow } from "./transcript.js";
-export declare const stoppedPartwayRow: (said: {
-    readonly message: string;
-    readonly error?: string;
-}, switchModel: boolean) => TranscriptRow;
-export declare const undeliveredRow: (said: {
-    readonly message: string;
-    readonly error?: string;
-}, unattended: boolean) => TranscriptRow;
-//# sourceMappingURL=undelivered.d.ts.map

package/dist/events/undelivered.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"undelivered.d.ts","sourceRoot":"","sources":["../../src/events/undelivered.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAWrD,eAAO,MAAM,iBAAiB,SAAU;IAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,eAAe,OAAO,KAAG,aAYrH,CAAC;AAEF,eAAO,MAAM,cAAc,SAAU;IAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,cAAc,OAAO,KAAG,aAMhH,CAAC"}

package/dist/events/undelivered.js

@@ -1,22 +0,0 @@
-import { noticeCode } from "./sandbox-notice.js";
-export const stoppedPartwayRow = (said, switchModel) => {
-    const row = {
-        role: "notice",
-        text: switchModel
-            ? `${said.message} The run stopped partway. The changes it made so far are kept: continue with another model to pick up from here.`
-            : `${said.message} The run stopped partway. The changes it made so far are kept: send a message to pick up from here.`,
-        noticeCode: noticeCode({ code: "stoppedPartway", params: { ...said, switchModel: switchModel || undefined } }),
-    };
-    if (switchModel) {
-        row.noticeAction = "switchModel";
-    }
-    return row;
-};
-export const undeliveredRow = (said, unattended) => ({
-    role: "notice",
-    text: unattended
-        ? `${said.message} Nothing ran, and nothing is held: this run started on its own, so there is no message waiting to be sent again.`
-        : `${said.message} Your message was not delivered: it is held for you to send again.`,
-    noticeCode: noticeCode({ code: "undelivered", params: { ...said, unattended: unattended || undefined } }),
-});
-//# sourceMappingURL=undelivered.js.map

package/dist/events/undelivered.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"undelivered.js","sourceRoot":"","sources":["../../src/events/undelivered.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAYjD,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,IAA2D,EAAE,WAAoB,EAAiB,EAAE;IAClI,MAAM,GAAG,GAAkB;QACvB,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE,WAAW;YACb,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,kHAAkH;YACnI,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,qGAAqG;QAC1H,UAAU,EAAE,UAAU,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,EAAE,GAAG,IAAI,EAAE,WAAW,EAAE,WAAW,IAAI,SAAS,EAAE,EAAE,CAAC;KACjH,CAAC;IACF,IAAI,WAAW,EAAE,CAAC;QACd,GAAG,CAAC,YAAY,GAAG,aAAa,CAAC;IACrC,CAAC;IACD,OAAO,GAAG,CAAC;AACf,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,IAA2D,EAAE,UAAmB,EAAiB,EAAE,CAAC,CAAC;IAChI,IAAI,EAAE,QAAQ;IACd,IAAI,EAAE,UAAU;QACZ,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,kHAAkH;QACnI,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,oEAAoE;IACzF,UAAU,EAAE,UAAU,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,EAAE,GAAG,IAAI,EAAE,UAAU,EAAE,UAAU,IAAI,SAAS,EAAE,EAAE,CAAC;CAC5G,CAAC,CAAC"}

package/dist/state/history-state.d.ts

@@ -1,3 +0,0 @@
-import type { StateFile } from "./state-portability.js";
-export declare const HISTORY_STATE_FILES: readonly StateFile[];
-//# sourceMappingURL=history-state.d.ts.map

package/dist/state/history-state.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"history-state.d.ts","sourceRoot":"","sources":["../../src/state/history-state.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAQxD,eAAO,MAAM,mBAAmB,EAAE,SAAS,SAAS,EAgTnD,CAAC"}

package/dist/state/history-state.js

@@ -1,153 +0,0 @@
-export const HISTORY_STATE_FILES = [
-    { path: "gits/", portability: "carry" },
-    { path: "scopes/", portability: "carry" },
-    { path: "conversations.db", portability: "carry" },
-    { path: "conversations/", portability: "carry" },
-    { path: "links/linked-children.json", portability: "carry" },
-    { path: "spawned-children/", portability: "carry" },
-    { path: "script-runs/", portability: "carry" },
-    { path: "blobs/", portability: "carry" },
-    { path: "shares.json", portability: "carry" },
-    { path: "member-audience.json", portability: "carry" },
-    { path: "member-getting-started.json", portability: "carry" },
-    { path: "member-ai-literacy.json", portability: "carry" },
-    { path: "activity.jsonl", portability: "carry" },
-    { path: "audit/", portability: "carry" },
-    { path: "usage.jsonl", portability: "carry" },
-    { path: "account-usage.json", portability: "carry" },
-    { path: "provider-answers.json", portability: "carry" },
-    { path: "usage-parks.json", portability: "carry" },
-    { path: "provider-refusals.json", portability: "carry" },
-    { path: "model-refusals.json", portability: "carry" },
-    { path: "model-cooldowns.json", portability: "carry" },
-    { path: "observed-limits.json", portability: "carry" },
-    { path: "run-outs.json", portability: "carry" },
-    { path: "dependency-requests.json", portability: "carry" },
-    { path: "host-setup-seeded.json", portability: "carry" },
-    { path: "apply-events.ndjson", portability: "carry" },
-    { path: "check-events/", portability: "carry" },
-    { path: "panels.json", portability: "derived" },
-    { path: "kept-jobs/", portability: "derived" },
-    { path: "turn-starts.json", portability: "derived" },
-    {
-        path: "worktrees/",
-        portability: "derived",
-        note: "Each conversation re-attaches its checkout from its branch on its next turn.",
-    },
-    { path: "said-index/", portability: "derived", note: "Rebuilt from the carried transcripts by the first boot's backfill." },
-    { path: "peer-tools.json", portability: "derived" },
-    { path: "overlays/", portability: "derived" },
-    { path: "logs/", portability: "derived" },
-    { path: "trash/", portability: "derived" },
-    { path: ".isolation-probe", portability: "derived" },
-    { path: "exports/", portability: "derived" },
-    { path: "backups/", portability: "derived" },
-    { path: "arrivals/", portability: "derived" },
-    { path: "engines/", portability: "derived" },
-    { path: "update-staged.json", portability: "derived" },
-    { path: "update-preparing.json", portability: "derived" },
-    { path: "update-outcome.json", portability: "derived" },
-    { path: "update-skipped.json", portability: "derived" },
-    { path: "update-policy.json", portability: "derived" },
-    { path: "boot-failure.json", portability: "derived" },
-    { path: "restart-resume.json", portability: "derived" },
-    { path: "paused-children.json", portability: "derived" },
-    { path: "boot-history.json", portability: "derived" },
-    { path: "chore-clock.json", portability: "derived" },
-    { path: "storage-scan.json", portability: "derived" },
-    {
-        path: "agent-home/",
-        portability: "secret",
-        note: "Sign the agent's own command-line tools in again where it used them.",
-    },
-    {
-        path: "agent-homes/",
-        portability: "secret",
-        note: "Sign the agent's own command-line tools in again where it used them.",
-    },
-    { path: "agent-containers/", portability: "derived" },
-    { path: "agent-domain-", portability: "derived" },
-    {
-        path: "ssh-hosts/",
-        portability: "secret",
-        note: "Re-add each ssh host on the Capabilities view, its key does not travel.",
-    },
-    {
-        path: "ssh-host-keys/",
-        portability: "secret",
-        note: "Clear this sandbox's old host key from your computer's known_hosts before syncing it again.",
-    },
-    {
-        path: "translator/",
-        portability: "secret",
-        note: "Sign the routed AI subscriptions in again on the Agent tab.",
-    },
-    { path: "session-secret", portability: "identity", note: "Sign in again, the target signs its own sessions." },
-    { path: "platform-row.json", portability: "identity", note: "The target learns its own platform id when it first announces." },
-    { path: "identity/owner.json", portability: "identity", note: "The target is bound by its own owner's first sign-in." },
-    {
-        path: "identity/members.json",
-        portability: "identity",
-        note: "Re-invite collaborators from the Access tab, a grant is the platform's record, and the target enforces its own copy.",
-    },
-    {
-        path: "identity/control-tokens.json",
-        portability: "identity",
-        note: "Mint fresh control tokens, the old ones authenticate against the source sandbox.",
-    },
-    {
-        path: "identity/links.json",
-        portability: "identity",
-        note: "Pair the sandboxes that hand this one tasks again from its Access tab: their links name the source sandbox.",
-    },
-    {
-        path: "identity/passkeys.json",
-        portability: "identity",
-        note: "Passkeys are bound to the sandbox they were registered with: add them again on the new one from its Access tab.",
-    },
-    {
-        path: "browser-access-disabled",
-        portability: "identity",
-        note: "Account-deletion retirement belongs to the source sandbox; the imported copy starts with fresh browser access.",
-    },
-    {
-        path: "push.json",
-        portability: "identity",
-        note: "Re-enable notifications in the browsers you use, a push subscription is bound to the sandbox that minted it.",
-    },
-    { path: "sync-enrollments.json", portability: "identity", note: "Re-pair desktop sync from the Sync tab." },
-    { path: "sync-pair-consumed.json", portability: "identity" },
-    { path: "host-enrollments.json", portability: "identity" },
-    { path: "webext-enrollments.json", portability: "identity", note: "Pair your browser again from its card: the extension is still installed." },
-    { path: "webext-pair-consumed.json", portability: "identity" },
-    { path: "phone-enrollments.json", portability: "identity", note: "Pair your phone again from its card: the app is still installed." },
-    { path: "phone-pair-consumed.json", portability: "identity" },
-    { path: "phone-wake.json", portability: "identity" },
-    { path: "phone-pairings.json", portability: "identity" },
-    { path: "host-pair-consumed.json", portability: "identity" },
-    { path: "project-deliveries.json", portability: "identity" },
-    { path: "projects.json", portability: "identity", note: "Attach the folders again from the desktop app on the computer that holds them." },
-    { path: "runner-enrollments.json", portability: "identity" },
-    { path: "runner-pair-consumed.json", portability: "identity" },
-    { path: "runner-identity.json", portability: "identity" },
-    { path: "hook-approvals.json", portability: "identity", note: "Approve the workspace's Claude Code hooks again from Approvals." },
-    { path: "hook-requests.json", portability: "derived" },
-    { path: "extension-approvals.json", portability: "identity", note: "Approve the extensions written in this workspace again from Extensions." },
-    {
-        path: "approval-decisions.json",
-        portability: "identity",
-        note: "Approve again from Approvals anything that was approved and had not run yet.",
-    },
-    { path: "automation-holds/", portability: "carry" },
-    { path: "automation-holds.key", portability: "identity", note: "A held wake that was counting down arrives waiting for your yes instead." },
-    { path: "automation-listener-inbox.json", portability: "carry" },
-    { path: "automation-workspace-inbox.json", portability: "carry" },
-    { path: "local-cert/", portability: "identity" },
-    { path: "converting/", portability: "secret", note: "An update's undo record stays with the sandbox it happened on." },
-    { path: "state-journal.json", portability: "derived" },
-    { path: "pre-1308-import.json", portability: "derived" },
-    { path: "shell/", portability: "secret" },
-    { path: ".ic/", portability: "identity" },
-    { path: ".pnpm-store/", portability: "derived" },
-];
-//# sourceMappingURL=history-state.js.map

package/dist/state/history-state.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"history-state.js","sourceRoot":"","sources":["../../src/state/history-state.ts"],"names":[],"mappings":"AAQA,MAAM,CAAC,MAAM,mBAAmB,GAAyB;IAIrD,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE;IAEvC,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,EAAE;IAKzC,EAAE,IAAI,EAAE,kBAAkB,EAAE,WAAW,EAAE,OAAO,EAAE;IAIlD,EAAE,IAAI,EAAE,gBAAgB,EAAE,WAAW,EAAE,OAAO,EAAE;IAGhD,EAAE,IAAI,EAAE,4BAA4B,EAAE,WAAW,EAAE,OAAO,EAAE;IAI5D,EAAE,IAAI,EAAE,mBAAmB,EAAE,WAAW,EAAE,OAAO,EAAE;IAInD,EAAE,IAAI,EAAE,cAAc,EAAE,WAAW,EAAE,OAAO,EAAE;IAG9C,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE;IAExC,EAAE,IAAI,EAAE,aAAa,EAAE,WAAW,EAAE,OAAO,EAAE;IAI7C,EAAE,IAAI,EAAE,sBAAsB,EAAE,WAAW,EAAE,OAAO,EAAE;IAItD,EAAE,IAAI,EAAE,6BAA6B,EAAE,WAAW,EAAE,OAAO,EAAE;IAG7D,EAAE,IAAI,EAAE,yBAAyB,EAAE,WAAW,EAAE,OAAO,EAAE;IACzD,EAAE,IAAI,EAAE,gBAAgB,EAAE,WAAW,EAAE,OAAO,EAAE;IAIhD,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE;IACxC,EAAE,IAAI,EAAE,aAAa,EAAE,WAAW,EAAE,OAAO,EAAE;IAC7C,EAAE,IAAI,EAAE,oBAAoB,EAAE,WAAW,EAAE,OAAO,EAAE;IAIpD,EAAE,IAAI,EAAE,uBAAuB,EAAE,WAAW,EAAE,OAAO,EAAE;IAGvD,EAAE,IAAI,EAAE,kBAAkB,EAAE,WAAW,EAAE,OAAO,EAAE;IAClD,EAAE,IAAI,EAAE,wBAAwB,EAAE,WAAW,EAAE,OAAO,EAAE;IAExD,EAAE,IAAI,EAAE,qBAAqB,EAAE,WAAW,EAAE,OAAO,EAAE;IAGrD,EAAE,IAAI,EAAE,sBAAsB,EAAE,WAAW,EAAE,OAAO,EAAE;IAGtD,EAAE,IAAI,EAAE,sBAAsB,EAAE,WAAW,EAAE,OAAO,EAAE;IAGtD,EAAE,IAAI,EAAE,eAAe,EAAE,WAAW,EAAE,OAAO,EAAE;IAE/C,EAAE,IAAI,EAAE,0BAA0B,EAAE,WAAW,EAAE,OAAO,EAAE;IAE1D,EAAE,IAAI,EAAE,wBAAwB,EAAE,WAAW,EAAE,OAAO,EAAE;IAExD,EAAE,IAAI,EAAE,qBAAqB,EAAE,WAAW,EAAE,OAAO,EAAE;IACrD,EAAE,IAAI,EAAE,eAAe,EAAE,WAAW,EAAE,OAAO,EAAE;IAG/C,EAAE,IAAI,EAAE,aAAa,EAAE,WAAW,EAAE,SAAS,EAAE;IAE/C,EAAE,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,SAAS,EAAE;IAG9C,EAAE,IAAI,EAAE,kBAAkB,EAAE,WAAW,EAAE,SAAS,EAAE;IAKpD;QACI,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,SAAS;QACtB,IAAI,EAAE,8EAA8E;KACvF;IAED,EAAE,IAAI,EAAE,aAAa,EAAE,WAAW,EAAE,SAAS,EAAE,IAAI,EAAE,oEAAoE,EAAE;IAI3H,EAAE,IAAI,EAAE,iBAAiB,EAAE,WAAW,EAAE,SAAS,EAAE;IACnD,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,SAAS,EAAE;IAC7C,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE;IACzC,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE;IAC1C,EAAE,IAAI,EAAE,kBAAkB,EAAE,WAAW,EAAE,SAAS,EAAE;IAEpD,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE;IAE5C,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE;IAE5C,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,SAAS,EAAE;IAE7C,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE;IAE5C,EAAE,IAAI,EAAE,oBAAoB,EAAE,WAAW,EAAE,SAAS,EAAE;IAEtD,EAAE,IAAI,EAAE,uBAAuB,EAAE,WAAW,EAAE,SAAS,EAAE;IAGzD,EAAE,IAAI,EAAE,qBAAqB,EAAE,WAAW,EAAE,SAAS,EAAE;IACvD,EAAE,IAAI,EAAE,qBAAqB,EAAE,WAAW,EAAE,SAAS,EAAE;IAGvD,EAAE,IAAI,EAAE,oBAAoB,EAAE,WAAW,EAAE,SAAS,EAAE;IACtD,EAAE,IAAI,EAAE,mBAAmB,EAAE,WAAW,EAAE,SAAS,EAAE;IAGrD,EAAE,IAAI,EAAE,qBAAqB,EAAE,WAAW,EAAE,SAAS,EAAE;IAIvD,EAAE,IAAI,EAAE,sBAAsB,EAAE,WAAW,EAAE,SAAS,EAAE;IAGxD,EAAE,IAAI,EAAE,mBAAmB,EAAE,WAAW,EAAE,SAAS,EAAE;IAGrD,EAAE,IAAI,EAAE,kBAAkB,EAAE,WAAW,EAAE,SAAS,EAAE;IAGpD,EAAE,IAAI,EAAE,mBAAmB,EAAE,WAAW,EAAE,SAAS,EAAE;IAMrD;QACI,IAAI,EAAE,aAAa;QACnB,WAAW,EAAE,QAAQ;QACrB,IAAI,EAAE,sEAAsE;KAC/E;IACD;QACI,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,QAAQ;QACrB,IAAI,EAAE,sEAAsE;KAC/E;IAED,EAAE,IAAI,EAAE,mBAAmB,EAAE,WAAW,EAAE,SAAS,EAAE;IAErD,EAAE,IAAI,EAAE,eAAe,EAAE,WAAW,EAAE,SAAS,EAAE;IAMjD;QACI,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,QAAQ;QACrB,IAAI,EAAE,yEAAyE;KAClF;IAGD;QACI,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,QAAQ;QACrB,IAAI,EAAE,6FAA6F;KACtG;IAED;QACI,IAAI,EAAE,aAAa;QACnB,WAAW,EAAE,QAAQ;QACrB,IAAI,EAAE,6DAA6D;KACtE;IAKD,EAAE,IAAI,EAAE,gBAAgB,EAAE,WAAW,EAAE,UAAU,EAAE,IAAI,EAAE,mDAAmD,EAAE;IAG9G,EAAE,IAAI,EAAE,mBAAmB,EAAE,WAAW,EAAE,UAAU,EAAE,IAAI,EAAE,gEAAgE,EAAE;IAK9H,EAAE,IAAI,EAAE,qBAAqB,EAAE,WAAW,EAAE,UAAU,EAAE,IAAI,EAAE,uDAAuD,EAAE;IACvH;QACI,IAAI,EAAE,uBAAuB;QAC7B,WAAW,EAAE,UAAU;QACvB,IAAI,EAAE,sHAAsH;KAC/H;IACD;QACI,IAAI,EAAE,8BAA8B;QACpC,WAAW,EAAE,UAAU;QACvB,IAAI,EAAE,kFAAkF;KAC3F;IAID;QACI,IAAI,EAAE,qBAAqB;QAC3B,WAAW,EAAE,UAAU;QACvB,IAAI,EAAE,6GAA6G;KACtH;IAID;QACI,IAAI,EAAE,wBAAwB;QAC9B,WAAW,EAAE,UAAU;QACvB,IAAI,EAAE,iHAAiH;KAC1H;IACD;QACI,IAAI,EAAE,yBAAyB;QAC/B,WAAW,EAAE,UAAU;QACvB,IAAI,EAAE,gHAAgH;KACzH;IACD;QACI,IAAI,EAAE,WAAW;QACjB,WAAW,EAAE,UAAU;QACvB,IAAI,EAAE,8GAA8G;KACvH;IACD,EAAE,IAAI,EAAE,uBAAuB,EAAE,WAAW,EAAE,UAAU,EAAE,IAAI,EAAE,yCAAyC,EAAE;IAC3G,EAAE,IAAI,EAAE,yBAAyB,EAAE,WAAW,EAAE,UAAU,EAAE;IAC5D,EAAE,IAAI,EAAE,uBAAuB,EAAE,WAAW,EAAE,UAAU,EAAE;IAE1D,EAAE,IAAI,EAAE,yBAAyB,EAAE,WAAW,EAAE,UAAU,EAAE,IAAI,EAAE,0EAA0E,EAAE;IAE9I,EAAE,IAAI,EAAE,2BAA2B,EAAE,WAAW,EAAE,UAAU,EAAE;IAE9D,EAAE,IAAI,EAAE,wBAAwB,EAAE,WAAW,EAAE,UAAU,EAAE,IAAI,EAAE,kEAAkE,EAAE;IACrI,EAAE,IAAI,EAAE,0BAA0B,EAAE,WAAW,EAAE,UAAU,EAAE;IAC7D,EAAE,IAAI,EAAE,iBAAiB,EAAE,WAAW,EAAE,UAAU,EAAE;IAGpD,EAAE,IAAI,EAAE,qBAAqB,EAAE,WAAW,EAAE,UAAU,EAAE;IAExD,EAAE,IAAI,EAAE,yBAAyB,EAAE,WAAW,EAAE,UAAU,EAAE;IAI5D,EAAE,IAAI,EAAE,yBAAyB,EAAE,WAAW,EAAE,UAAU,EAAE;IAI5D,EAAE,IAAI,EAAE,eAAe,EAAE,WAAW,EAAE,UAAU,EAAE,IAAI,EAAE,gFAAgF,EAAE;IAE1I,EAAE,IAAI,EAAE,yBAAyB,EAAE,WAAW,EAAE,UAAU,EAAE;IAC5D,EAAE,IAAI,EAAE,2BAA2B,EAAE,WAAW,EAAE,UAAU,EAAE;IAE9D,EAAE,IAAI,EAAE,sBAAsB,EAAE,WAAW,EAAE,UAAU,EAAE;IAEzD,EAAE,IAAI,EAAE,qBAAqB,EAAE,WAAW,EAAE,UAAU,EAAE,IAAI,EAAE,iEAAiE,EAAE;IAEjI,EAAE,IAAI,EAAE,oBAAoB,EAAE,WAAW,EAAE,SAAS,EAAE;IAEtD,EAAE,IAAI,EAAE,0BAA0B,EAAE,WAAW,EAAE,UAAU,EAAE,IAAI,EAAE,yEAAyE,EAAE;IAG9I;QACI,IAAI,EAAE,yBAAyB;QAC/B,WAAW,EAAE,UAAU;QACvB,IAAI,EAAE,8EAA8E;KACvF;IAID,EAAE,IAAI,EAAE,mBAAmB,EAAE,WAAW,EAAE,OAAO,EAAE;IACnD,EAAE,IAAI,EAAE,sBAAsB,EAAE,WAAW,EAAE,UAAU,EAAE,IAAI,EAAE,0EAA0E,EAAE;IAI3I,EAAE,IAAI,EAAE,gCAAgC,EAAE,WAAW,EAAE,OAAO,EAAE;IAChE,EAAE,IAAI,EAAE,iCAAiC,EAAE,WAAW,EAAE,OAAO,EAAE;IACjE,EAAE,IAAI,EAAE,aAAa,EAAE,WAAW,EAAE,UAAU,EAAE;IAKhD,EAAE,IAAI,EAAE,aAAa,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,EAAE,gEAAgE,EAAE;IAEtH,EAAE,IAAI,EAAE,oBAAoB,EAAE,WAAW,EAAE,SAAS,EAAE;IAGtD,EAAE,IAAI,EAAE,sBAAsB,EAAE,WAAW,EAAE,SAAS,EAAE;IAMxD,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE;IAGzC,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE;IAEzC,EAAE,IAAI,EAAE,cAAc,EAAE,WAAW,EAAE,SAAS,EAAE;CACnD,CAAC"}

package/src/events/undelivered.ts

@@ -1,33 +0,0 @@
-import { noticeCode } from "./sandbox-notice.js";
-import type { TranscriptRow } from "./transcript.js";
-
-// The row a refusal that ran nothing leaves when the conversation's queue holds the words (transcript-fold's heldRow).
-// A turn somebody typed is held in its conversation's queue for another press; a turn that started itself (an
-// automation, a loop, a watch wake) has no typed message and nobody watching, so promising a resend there names a
-// composer the reader is not looking at. Neither version promises a retry: whether one comes is the scheduler's
-// decision, not this row's to state. The code carries the same fact, so the editor's localized line agrees.
-// The row the same refusal leaves once the turn had already run: a trial spent, or a model refused, on a later step. The
-// message was read and acted on, so it is neither undelivered nor held (turn-runs keeps only a turn turned away at the
-// door), and saying so invited a resend of something that had already changed files (onboarding review 2026-10-18,
-// F07). What it did stays in the conversation's copy; the press, when another model gets past the refusal, carries on there.
-export const stoppedPartwayRow = (said: { readonly message: string; readonly error?: string }, switchModel: boolean): TranscriptRow => {
-    const row: TranscriptRow = {
-        role: "notice",
-        text: switchModel
-            ? `${said.message} The run stopped partway. The changes it made so far are kept: continue with another model to pick up from here.`
-            : `${said.message} The run stopped partway. The changes it made so far are kept: send a message to pick up from here.`,
-        noticeCode: noticeCode({ code: "stoppedPartway", params: { ...said, switchModel: switchModel || undefined } }),
-    };
-    if (switchModel) {
-        row.noticeAction = "switchModel";
-    }
-    return row;
-};
-
-export const undeliveredRow = (said: { readonly message: string; readonly error?: string }, unattended: boolean): TranscriptRow => ({
-    role: "notice",
-    text: unattended
-        ? `${said.message} Nothing ran, and nothing is held: this run started on its own, so there is no message waiting to be sent again.`
-        : `${said.message} Your message was not delivered: it is held for you to send again.`,
-    noticeCode: noticeCode({ code: "undelivered", params: { ...said, unattended: unattended || undefined } }),
-});