@jungjaehoon/mama-os 0.32.0 → 0.32.2

package/dist/operator/report-carry.d.ts

@@ -1,24 +1,10 @@
 /**
- * Context carry for the owner console (plan v6 S1-T4).
+ * TG-06 one-shot owner-report carry.
  *
- * Kagemusha's continuity mechanism, minimal form: the chat persona can
- * reference "the report you just received" because the last DELIVERED full
- * report is persisted at delivery time and injected per turn. Carry is
- * DERIVED state (storage-layer, never session accumulation - owner principle
- * "session = cache").
- *
- * Injection rides the user-message prefix path - the only channel that flows
- * on EVERY turn including CONTINUE (per-call system prompts never reach a
- * pooled CLI process).
- */
-/**
- * Whether a delivered report can be traced back to the run that produced it.
- *
- * Discriminated rather than a nullable id, for the reason the turn contract uses the
- * same shape: "no handle recorded" and "no run happened" are different facts, and a
- * delivered artifact that cannot be traced should say which one it is. A report is the
- * most consequential thing this system emits - it goes to a person and gets acted on -
- * so it is the last place an absence should be silent.
+ * The report itself is durable data, but this derived context must only reach
+ * the Telegram chat that received it and only until its first durable owner
+ * turn acknowledgement. Invalid state is deliberately not repaired here: it
+ * cannot safely be attributed to a target or delivery.
  */
 export type ArtifactProvenance = {
     status: 'available';
@@ -27,20 +13,54 @@ export type ArtifactProvenance = {
     status: 'unavailable';
     reason: 'no_run_handle' | 'commit_failed' | 'legacy_record';
 };
-export interface LastFullReport {
+export interface ReportCarryTarget {
+    source: 'telegram';
+    channelId: string;
+}
+export interface ReportCarryV2 {
+    version: 2;
+    deliveryId: string;
+    target: ReportCarryTarget;
     deliveredAt: string;
     text: string;
     provenance: ArtifactProvenance;
+    consumedAt?: string;
+    consumingChannelKey?: string;
+}
+export interface ReportCarryPeek {
+    deliveryId: string;
+    prefix: string;
+}
+export interface PersistDeliveredInput {
+    deliveryId: string;
+    target: ReportCarryTarget;
+    deliveredAt: string;
+    text: string;
+    provenance: ArtifactProvenance;
+}
+export interface AckInput {
+    deliveryId: string;
+    target: ReportCarryTarget;
+    consumingChannelKey: string;
+    consumedAtIso: string;
+}
+export interface ReportCarryPort {
+    peek(target: ReportCarryTarget, nowMs?: number): ReportCarryPeek | null;
+    acknowledge(input: AckInput): boolean;
 }
 export declare function defaultCarryPath(): string;
-/** Persist the delivered full report (atomic write, same pattern as the schedule store). */
-export declare function persistLastFullReport(deliveredAtIso: string, text: string, provenance: ArtifactProvenance, path?: string): void;
-/** Load the last delivered full report; null when none exists or the file is unreadable. */
-export declare function loadLastFullReport(path?: string): LastFullReport | null;
-/**
- * Build the per-turn carry prefix for the owner console. Empty string when no
- * report has been delivered yet (nothing to carry - the persona should use
- * report_request/board_read instead).
- */
-export declare function buildReportCarryPrefix(path?: string): string;
+/** Exact persisted provenance contract shared by report composition and outbox recovery. */
+export declare function isArtifactProvenance(value: unknown): value is ArtifactProvenance;
+/** @internal Atomic publisher used only while FileReportCarryStore owns its SQLite transaction. */
+export declare function writeReportCarryAtomically(path: string, record: ReportCarryV2): void;
+export declare class FileReportCarryStore implements ReportCarryPort {
+    private readonly path;
+    constructor(path?: string);
+    persistDelivered(input: PersistDeliveredInput): void;
+    peek(target: ReportCarryTarget, nowMs?: number): ReportCarryPeek | null;
+    acknowledge(input: AckInput): boolean;
+    private read;
+    private quarantineLegacy;
+    private warn;
+}
 //# sourceMappingURL=report-carry.d.ts.map

package/dist/operator/report-carry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"report-carry.d.ts","sourceRoot":"","sources":["../../src/operator/report-carry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAOH;;;;;;;;GAQG;AACH,MAAM,MAAM,kBAAkB,GAC1B;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAC3C;IAAE,MAAM,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,eAAe,GAAG,eAAe,GAAG,eAAe,CAAA;CAAE,CAAC;AAE3F,MAAM,WAAW,cAAc;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,kBAAkB,CAAC;CAChC;AAID,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC;AAED,4FAA4F;AAC5F,wBAAgB,qBAAqB,CACnC,cAAc,EAAE,MAAM,EACtB,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,kBAAkB,EAC9B,IAAI,GAAE,MAA2B,GAChC,IAAI,CAYN;AAaD,4FAA4F;AAC5F,wBAAgB,kBAAkB,CAAC,IAAI,GAAE,MAA2B,GAAG,cAAc,GAAG,IAAI,CAiC3F;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,GAAE,MAA2B,GAAG,MAAM,CAmBhF"}
+{"version":3,"file":"report-carry.d.ts","sourceRoot":"","sources":["../../src/operator/report-carry.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAiBH,MAAM,MAAM,kBAAkB,GAC1B;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAC3C;IAAE,MAAM,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,eAAe,GAAG,eAAe,GAAG,eAAe,CAAA;CAAE,CAAC;AAE3F,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,UAAU,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,CAAC,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,iBAAiB,CAAC;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,kBAAkB,CAAC;IAC/B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,iBAAiB,CAAC;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,kBAAkB,CAAC;CAChC;AAED,MAAM,WAAW,QAAQ;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,iBAAiB,CAAC;IAC1B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,CAAC,MAAM,EAAE,iBAAiB,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,eAAe,GAAG,IAAI,CAAC;IACxE,WAAW,CAAC,KAAK,EAAE,QAAQ,GAAG,OAAO,CAAC;CACvC;AA0BD,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC;AA8BD,4FAA4F;AAC5F,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,kBAAkB,CAkBhF;AA+ID,mGAAmG;AACnG,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,GAAG,IAAI,CAyDpF;AAED,qBAAa,oBAAqB,YAAW,eAAe;IAC9C,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,GAAE,MAA2B;IAE9D,gBAAgB,CAAC,KAAK,EAAE,qBAAqB,GAAG,IAAI;IAiCpD,IAAI,CAAC,MAAM,EAAE,iBAAiB,EAAE,KAAK,GAAE,MAAmB,GAAG,eAAe,GAAG,IAAI;IAgBnF,WAAW,CAAC,KAAK,EAAE,QAAQ,GAAG,OAAO;IAsBrC,OAAO,CAAC,IAAI;IA4BZ,OAAO,CAAC,gBAAgB;IAUxB,OAAO,CAAC,IAAI;CAGb"}

package/dist/operator/report-carry.js

@@ -1,100 +1,352 @@
 "use strict";
 /**
- * Context carry for the owner console (plan v6 S1-T4).
+ * TG-06 one-shot owner-report carry.
  *
- * Kagemusha's continuity mechanism, minimal form: the chat persona can
- * reference "the report you just received" because the last DELIVERED full
- * report is persisted at delivery time and injected per turn. Carry is
- * DERIVED state (storage-layer, never session accumulation - owner principle
- * "session = cache").
- *
- * Injection rides the user-message prefix path - the only channel that flows
- * on EVERY turn including CONTINUE (per-call system prompts never reach a
- * pooled CLI process).
+ * The report itself is durable data, but this derived context must only reach
+ * the Telegram chat that received it and only until its first durable owner
+ * turn acknowledgement. Invalid state is deliberately not repaired here: it
+ * cannot safely be attributed to a target or delivery.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.FileReportCarryStore = void 0;
 exports.defaultCarryPath = defaultCarryPath;
-exports.persistLastFullReport = persistLastFullReport;
-exports.loadLastFullReport = loadLastFullReport;
-exports.buildReportCarryPrefix = buildReportCarryPrefix;
+exports.isArtifactProvenance = isArtifactProvenance;
+exports.writeReportCarryAtomically = writeReportCarryAtomically;
+const node_crypto_1 = require("node:crypto");
 const node_fs_1 = require("node:fs");
-const untrusted_content_js_1 = require("../utils/untrusted-content.js");
 const node_os_1 = require("node:os");
 const node_path_1 = require("node:path");
+const untrusted_content_js_1 = require("../utils/untrusted-content.js");
+const file_coordination_js_1 = require("./file-coordination.js");
 const CARRY_SUMMARY_MAX_CHARS = 700;
+const CARRY_TTL_MS = 24 * 60 * 60 * 1000;
+const STAGING_DIRECTORY_ATTEMPTS = 8;
+const UNAVAILABLE_REASONS = new Set(['no_run_handle', 'commit_failed', 'legacy_record']);
 function defaultCarryPath() {
     return (0, node_path_1.join)((0, node_os_1.homedir)(), '.mama', 'operator', 'last-full-report.json');
 }
-/** Persist the delivered full report (atomic write, same pattern as the schedule store). */
-function persistLastFullReport(deliveredAtIso, text, provenance, path = defaultCarryPath()) {
-    (0, node_fs_1.mkdirSync)((0, node_path_1.dirname)(path), { recursive: true });
-    const tmp = (0, node_path_1.join)((0, node_path_1.dirname)(path), `.last-full-report.${process.pid}.tmp`);
-    // 0600: the carried report is owner operational data.
-    (0, node_fs_1.writeFileSync)(tmp, JSON.stringify({ deliveredAt: deliveredAtIso, text, provenance }), {
-        mode: 0o600,
-    });
-    (0, node_fs_1.renameSync)(tmp, path);
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function hasOnlyKeys(value, keys) {
+    const actualKeys = Object.keys(value);
+    return actualKeys.length === keys.length && actualKeys.every((key) => keys.includes(key));
+}
+function isNonEmptyString(value) {
+    return typeof value === 'string' && value.length > 0;
 }
+function isIsoTimestamp(value) {
+    if (typeof value !== 'string') {
+        return false;
+    }
+    const milliseconds = Date.parse(value);
+    return Number.isFinite(milliseconds) && new Date(milliseconds).toISOString() === value;
+}
+function isTarget(value) {
+    if (!isRecord(value) || !hasOnlyKeys(value, ['source', 'channelId'])) {
+        return false;
+    }
+    return value.source === 'telegram' && isNonEmptyString(value.channelId);
+}
+/** Exact persisted provenance contract shared by report composition and outbox recovery. */
 function isArtifactProvenance(value) {
-    if (value === null || typeof value !== 'object') {
+    if (!isRecord(value)) {
         return false;
     }
-    const record = value;
-    if (record.status === 'available') {
-        return typeof record.modelRunId === 'string' && record.modelRunId.length > 0;
+    if (value.status === 'available') {
+        return (hasOnlyKeys(value, ['status', 'modelRunId']) &&
+            isNonEmptyString(value.modelRunId) &&
+            value.modelRunId.trim() === value.modelRunId &&
+            value.modelRunId.length <= 512);
     }
-    return record.status === 'unavailable' && typeof record.reason === 'string';
+    return (value.status === 'unavailable' &&
+        hasOnlyKeys(value, ['status', 'reason']) &&
+        typeof value.reason === 'string' &&
+        UNAVAILABLE_REASONS.has(value.reason));
 }
-/** Load the last delivered full report; null when none exists or the file is unreadable. */
-function loadLastFullReport(path = defaultCarryPath()) {
-    let raw;
-    try {
-        raw = (0, node_fs_1.readFileSync)(path, 'utf8');
+function isReportCarryV2(value) {
+    if (!isRecord(value)) {
+        return false;
+    }
+    const consumedFieldsPresent = value.consumedAt !== undefined || value.consumingChannelKey !== undefined;
+    const expectedKeys = consumedFieldsPresent
+        ? [
+            'version',
+            'deliveryId',
+            'target',
+            'deliveredAt',
+            'text',
+            'provenance',
+            'consumedAt',
+            'consumingChannelKey',
+        ]
+        : ['version', 'deliveryId', 'target', 'deliveredAt', 'text', 'provenance'];
+    return (hasOnlyKeys(value, expectedKeys) &&
+        value.version === 2 &&
+        isNonEmptyString(value.deliveryId) &&
+        isTarget(value.target) &&
+        isIsoTimestamp(value.deliveredAt) &&
+        typeof value.text === 'string' &&
+        isArtifactProvenance(value.provenance) &&
+        (!consumedFieldsPresent ||
+            (isIsoTimestamp(value.consumedAt) && isNonEmptyString(value.consumingChannelKey))));
+}
+function isLegacyReportCarry(value) {
+    if (!isRecord(value) || !isIsoTimestamp(value.deliveredAt) || typeof value.text !== 'string') {
+        return false;
+    }
+    return (hasOnlyKeys(value, ['deliveredAt', 'text']) ||
+        (hasOnlyKeys(value, ['deliveredAt', 'text', 'provenance']) &&
+            isArtifactProvenance(value.provenance)));
+}
+function sameTarget(left, right) {
+    return left.source === right.source && left.channelId === right.channelId;
+}
+function sameProvenance(left, right) {
+    if (left.status !== right.status) {
+        return false;
+    }
+    if (left.status === 'available' && right.status === 'available') {
+        return left.modelRunId === right.modelRunId;
+    }
+    if (left.status === 'unavailable' && right.status === 'unavailable') {
+        return left.reason === right.reason;
+    }
+    return false;
+}
+function assertPersistInput(input) {
+    if (!isRecord(input) ||
+        !hasOnlyKeys(input, ['deliveryId', 'target', 'deliveredAt', 'text', 'provenance'])) {
+        throw new Error('Report carry persist input must contain exact fields');
+    }
+    if (!isNonEmptyString(input.deliveryId)) {
+        throw new Error('Report carry deliveryId must be a non-empty string');
+    }
+    if (!isTarget(input.target)) {
+        throw new Error('Report carry target must be an exact Telegram target');
+    }
+    if (!isIsoTimestamp(input.deliveredAt)) {
+        throw new Error('Report carry deliveredAt must be an ISO timestamp');
+    }
+    if (typeof input.text !== 'string') {
+        throw new Error('Report carry text must be a string');
+    }
+    if (!isArtifactProvenance(input.provenance)) {
+        throw new Error('Report carry provenance is invalid');
+    }
+}
+function assertAckInput(input) {
+    if (!isRecord(input) ||
+        !hasOnlyKeys(input, ['deliveryId', 'target', 'consumingChannelKey', 'consumedAtIso'])) {
+        throw new Error('Report carry acknowledgement input must contain exact fields');
+    }
+    if (!isNonEmptyString(input.deliveryId) || !isTarget(input.target)) {
+        throw new Error('Report carry acknowledgement has an invalid delivery target');
+    }
+    if (!isNonEmptyString(input.consumingChannelKey) || !isIsoTimestamp(input.consumedAtIso)) {
+        throw new Error('Report carry acknowledgement is invalid');
     }
-    catch {
-        // Missing file is the normal no-report-yet state.
-        return null;
+}
+function isActive(record, nowMs) {
+    const age = nowMs - Date.parse(record.deliveredAt);
+    return age >= 0 && age <= CARRY_TTL_MS;
+}
+function buildPrefix(record) {
+    const summary = record.text.length > CARRY_SUMMARY_MAX_CHARS
+        ? `${record.text.slice(0, CARRY_SUMMARY_MAX_CHARS)}\n[... truncated - full text was delivered to the owner channel]`
+        : record.text;
+    return (`[Operator context] The last FULL situation report was delivered at ${record.deliveredAt}.\n` +
+        'If the owner asks for a report or current status, reference/refresh THIS instead of ' +
+        `reconstructing state from memory. Content:\n${(0, untrusted_content_js_1.wrapUntrustedContent)('operator-report-carry', summary)}\n---\n`);
+}
+function isErrno(error, code) {
+    return isRecord(error) && error.code === code;
+}
+function createStagingDirectory(path) {
+    const directory = (0, node_path_1.dirname)(path);
+    const stem = (0, node_path_1.basename)(path);
+    for (let attempt = 0; attempt < STAGING_DIRECTORY_ATTEMPTS; attempt += 1) {
+        const stagingDirectory = (0, node_path_1.join)(directory, `.${stem}.${process.pid}.${(0, node_crypto_1.randomUUID)()}.stage`);
+        try {
+            (0, node_fs_1.mkdirSync)(stagingDirectory, { mode: 0o700 });
+            (0, node_fs_1.chmodSync)(stagingDirectory, 0o700);
+            return stagingDirectory;
+        }
+        catch (error) {
+            if (isErrno(error, 'EEXIST')) {
+                continue;
+            }
+            throw new Error(`Unable to create report carry staging directory: ${formatError(error)}`);
+        }
+    }
+    throw new Error('Unable to allocate unique report carry staging directory');
+}
+/** @internal Atomic publisher used only while FileReportCarryStore owns its SQLite transaction. */
+function writeReportCarryAtomically(path, record) {
+    if (!isReportCarryV2(record)) {
+        throw new Error('Refusing to persist invalid report carry state');
     }
+    const directory = (0, node_path_1.dirname)(path);
+    (0, node_fs_1.mkdirSync)(directory, { recursive: true, mode: 0o700 });
+    let stagingDirectory;
+    let payloadPath;
+    let ownsPayload = false;
+    let published = false;
+    let operationError;
+    let cleanupError;
     try {
-        const parsed = JSON.parse(raw);
-        if (typeof parsed.deliveredAt !== 'string' || typeof parsed.text !== 'string') {
-            console.warn(`[report-carry] carry file has invalid shape, ignoring: ${path}`);
+        stagingDirectory = createStagingDirectory(path);
+        payloadPath = (0, node_path_1.join)(stagingDirectory, `${(0, node_crypto_1.randomUUID)()}.json`);
+        (0, node_fs_1.writeFileSync)(payloadPath, `${JSON.stringify(record)}\n`, {
+            encoding: 'utf8',
+            mode: 0o600,
+            flag: 'wx',
+        });
+        ownsPayload = true;
+        (0, node_fs_1.chmodSync)(payloadPath, 0o600);
+        (0, node_fs_1.renameSync)(payloadPath, path);
+        published = true;
+        (0, node_fs_1.chmodSync)(path, 0o600);
+    }
+    catch (error) {
+        operationError = error;
+    }
+    finally {
+        if (ownsPayload && !published && payloadPath !== undefined) {
+            try {
+                (0, node_fs_1.unlinkSync)(payloadPath);
+            }
+            catch (error) {
+                if (!isErrno(error, 'ENOENT')) {
+                    cleanupError = error;
+                }
+            }
+        }
+        if (stagingDirectory !== undefined) {
+            try {
+                (0, node_fs_1.rmdirSync)(stagingDirectory);
+            }
+            catch (error) {
+                if (!isErrno(error, 'ENOENT') && cleanupError === undefined) {
+                    cleanupError = error;
+                }
+            }
+        }
+    }
+    if (cleanupError !== undefined) {
+        throw new Error(`Unable to clean report carry staging directory after ${operationError === undefined ? 'publish' : formatError(operationError)}: ${formatError(cleanupError)}`);
+    }
+    if (operationError !== undefined) {
+        throw operationError;
+    }
+}
+class FileReportCarryStore {
+    path;
+    constructor(path = defaultCarryPath()) {
+        this.path = path;
+    }
+    persistDelivered(input) {
+        assertPersistInput(input);
+        (0, file_coordination_js_1.withFileCoordinationTransaction)(this.path, 'report carry', () => {
+            const current = this.read();
+            if (current.kind === 'invalid') {
+                throw new Error('Refusing to overwrite invalid report carry state');
+            }
+            if (current.kind === 'legacy') {
+                this.quarantineLegacy();
+            }
+            if (current.kind === 'record' && current.record.deliveryId === input.deliveryId) {
+                const record = current.record;
+                if (!sameTarget(record.target, input.target) ||
+                    record.text !== input.text ||
+                    !sameProvenance(record.provenance, input.provenance)) {
+                    throw new Error('Refusing same delivery ID with mismatched report carry content');
+                }
+                return;
+            }
+            writeReportCarryAtomically(this.path, {
+                version: 2,
+                deliveryId: input.deliveryId,
+                target: { ...input.target },
+                deliveredAt: input.deliveredAt,
+                text: input.text,
+                provenance: { ...input.provenance },
+            });
+        });
+    }
+    peek(target, nowMs = Date.now()) {
+        if (!isTarget(target) || !Number.isFinite(nowMs)) {
+            return null;
+        }
+        const current = this.read();
+        if (current.kind !== 'record' ||
+            current.record.consumedAt !== undefined ||
+            !sameTarget(current.record.target, target) ||
+            !isActive(current.record, nowMs)) {
             return null;
         }
-        return {
-            deliveredAt: parsed.deliveredAt,
-            text: parsed.text,
-            // A file written before provenance was carried is not the same as a report with no
-            // run behind it, and flattening the two would make every old record look like a
-            // failure. Named as its own reason instead.
-            provenance: isArtifactProvenance(parsed.provenance)
-                ? parsed.provenance
-                : { status: 'unavailable', reason: 'legacy_record' },
-        };
+        return { deliveryId: current.record.deliveryId, prefix: buildPrefix(current.record) };
     }
-    catch (error) {
-        // Corrupt state must be LOUD (repo rule), then fall back to no-carry.
-        console.warn(`[report-carry] carry file corrupt, ignoring (${path}): ${error instanceof Error ? error.message : String(error)}`);
-        return null;
+    acknowledge(input) {
+        assertAckInput(input);
+        return (0, file_coordination_js_1.withFileCoordinationTransaction)(this.path, 'report carry', () => {
+            const current = this.read();
+            if (current.kind !== 'record' ||
+                current.record.consumedAt !== undefined ||
+                !sameTarget(current.record.target, input.target) ||
+                current.record.deliveryId !== input.deliveryId ||
+                !isActive(current.record, Date.now())) {
+                return false;
+            }
+            writeReportCarryAtomically(this.path, {
+                ...current.record,
+                consumedAt: input.consumedAtIso,
+                consumingChannelKey: input.consumingChannelKey,
+            });
+            return true;
+        });
+    }
+    read() {
+        let raw;
+        try {
+            raw = (0, node_fs_1.readFileSync)(this.path, 'utf8');
+        }
+        catch (error) {
+            if (isRecord(error) && error.code === 'ENOENT') {
+                return { kind: 'missing' };
+            }
+            this.warn(`could not read carry state: ${formatError(error)}`);
+            return { kind: 'invalid' };
+        }
+        try {
+            const parsed = JSON.parse(raw);
+            if (isLegacyReportCarry(parsed)) {
+                this.warn('legacy unscoped carry state');
+                return { kind: 'legacy' };
+            }
+            if (!isReportCarryV2(parsed)) {
+                throw new Error('carry state is not an exact version 2 record');
+            }
+            return { kind: 'record', record: parsed };
+        }
+        catch (error) {
+            this.warn(`invalid carry state: ${formatError(error)}`);
+            return { kind: 'invalid' };
+        }
+    }
+    quarantineLegacy() {
+        const quarantinePath = `${this.path}.legacy-v1.${process.pid}.${(0, node_crypto_1.randomUUID)()}.json`;
+        (0, node_fs_1.renameSync)(this.path, quarantinePath);
+        (0, node_fs_1.chmodSync)(quarantinePath, 0o600);
+        console.warn(`[report-carry] quarantined legacy unscoped carry at ${quarantinePath}; ` +
+            'a new target-bound delivery may now replace it');
+    }
+    warn(message) {
+        console.warn(`[report-carry] ${message}; refusing to inject ${this.path}`);
     }
 }
-/**
- * Build the per-turn carry prefix for the owner console. Empty string when no
- * report has been delivered yet (nothing to carry - the persona should use
- * report_request/board_read instead).
- */
-function buildReportCarryPrefix(path = defaultCarryPath()) {
-    const last = loadLastFullReport(path);
-    if (!last) {
-        return '';
-    }
-    const summary = last.text.length > CARRY_SUMMARY_MAX_CHARS
-        ? `${last.text.slice(0, CARRY_SUMMARY_MAX_CHARS)}\n[... truncated - full text was delivered to the owner channel]`
-        : last.text;
-    // The report is agent-authored but SUMMARIZES third-party content; wrapping
-    // it keeps reproduced instructions inert across every future turn it rides.
-    return (`[Operator context] The last FULL situation report was delivered at ${last.deliveredAt}.\n` +
-        `If the owner asks for a report or current status, reference/refresh THIS instead of ` +
-        `reconstructing state from memory. Content:\n${(0, untrusted_content_js_1.wrapUntrustedContent)('operator-report-carry', summary)}\n---\n`);
+exports.FileReportCarryStore = FileReportCarryStore;
+function formatError(error) {
+    return error instanceof Error ? error.message : String(error);
 }
 //# sourceMappingURL=report-carry.js.map

package/dist/operator/report-carry.js.map

@@ -1 +1 @@
-{"version":3,"file":"report-carry.js","sourceRoot":"","sources":["../../src/operator/report-carry.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;GAYG;;AA4BH,4CAEC;AAGD,sDAiBC;AAcD,gDAiCC;AAOD,wDAmBC;AAzHD,qCAA6E;AAC7E,wEAAqE;AACrE,qCAAkC;AAClC,yCAA0C;AAqB1C,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAEpC,SAAgB,gBAAgB;IAC9B,OAAO,IAAA,gBAAI,EAAC,IAAA,iBAAO,GAAE,EAAE,OAAO,EAAE,UAAU,EAAE,uBAAuB,CAAC,CAAC;AACvE,CAAC;AAED,4FAA4F;AAC5F,SAAgB,qBAAqB,CACnC,cAAsB,EACtB,IAAY,EACZ,UAA8B,EAC9B,OAAe,gBAAgB,EAAE;IAEjC,IAAA,mBAAS,EAAC,IAAA,mBAAO,EAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,MAAM,GAAG,GAAG,IAAA,gBAAI,EAAC,IAAA,mBAAO,EAAC,IAAI,CAAC,EAAE,qBAAqB,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC;IACxE,sDAAsD;IACtD,IAAA,uBAAa,EACX,GAAG,EACH,IAAI,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,cAAc,EAAE,IAAI,EAAE,UAAU,EAA2B,CAAC,EAC1F;QACE,IAAI,EAAE,KAAK;KACZ,CACF,CAAC;IACF,IAAA,oBAAU,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AACxB,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc;IAC1C,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,MAAM,GAAG,KAAqE,CAAC;IACrF,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QAClC,OAAO,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,KAAK,aAAa,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC;AAC9E,CAAC;AAED,4FAA4F;AAC5F,SAAgB,kBAAkB,CAAC,OAAe,gBAAgB,EAAE;IAClE,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,IAAA,sBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,kDAAkD;QAClD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC;QAC1D,IAAI,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC9E,OAAO,CAAC,IAAI,CAAC,0DAA0D,IAAI,EAAE,CAAC,CAAC;YAC/E,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO;YACL,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,mFAAmF;YACnF,gFAAgF;YAChF,4CAA4C;YAC5C,UAAU,EAAE,oBAAoB,CAAC,MAAM,CAAC,UAAU,CAAC;gBACjD,CAAC,CAAC,MAAM,CAAC,UAAU;gBACnB,CAAC,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,eAAe,EAAE;SACvD,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,sEAAsE;QACtE,OAAO,CAAC,IAAI,CACV,gDAAgD,IAAI,MAClD,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,EAAE,CACH,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAgB,sBAAsB,CAAC,OAAe,gBAAgB,EAAE;IACtE,MAAM,IAAI,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,OAAO,GACX,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,uBAAuB;QACxC,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,uBAAuB,CAAC,kEAAkE;QAClH,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;IAChB,4EAA4E;IAC5E,4EAA4E;IAC5E,OAAO,CACL,sEAAsE,IAAI,CAAC,WAAW,KAAK;QAC3F,sFAAsF;QACtF,+CAA+C,IAAA,2CAAoB,EACjE,uBAAuB,EACvB,OAAO,CACR,SAAS,CACX,CAAC;AACJ,CAAC"}
+{"version":3,"file":"report-carry.js","sourceRoot":"","sources":["../../src/operator/report-carry.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;AAsFH,4CAEC;AA+BD,oDAkBC;AAgJD,gEAyDC;AAhVD,6CAAyC;AACzC,qCAQiB;AACjB,qCAAkC;AAClC,yCAAoD;AACpD,wEAAqE;AACrE,iEAAyE;AAkEzE,MAAM,uBAAuB,GAAG,GAAG,CAAC;AACpC,MAAM,YAAY,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACzC,MAAM,0BAA0B,GAAG,CAAC,CAAC;AACrC,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,CAAC,eAAe,EAAE,eAAe,EAAE,eAAe,CAAC,CAAC,CAAC;AAEzF,SAAgB,gBAAgB;IAC9B,OAAO,IAAA,gBAAI,EAAC,IAAA,iBAAO,GAAE,EAAE,OAAO,EAAE,UAAU,EAAE,uBAAuB,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,WAAW,CAAC,KAA8B,EAAE,IAAuB;IAC1E,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtC,OAAO,UAAU,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;AAC5F,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACvC,OAAO,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,IAAI,IAAI,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC;AACzF,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC;QACrE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,KAAK,UAAU,IAAI,gBAAgB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;AAC1E,CAAC;AAED,4FAA4F;AAC5F,SAAgB,oBAAoB,CAAC,KAAc;IACjD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QACjC,OAAO,CACL,WAAW,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;YAC5C,gBAAgB,CAAC,KAAK,CAAC,UAAU,CAAC;YAClC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,KAAK,CAAC,UAAU;YAC5C,KAAK,CAAC,UAAU,CAAC,MAAM,IAAI,GAAG,CAC/B,CAAC;IACJ,CAAC;IACD,OAAO,CACL,KAAK,CAAC,MAAM,KAAK,aAAa;QAC9B,WAAW,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACxC,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;QAChC,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CACtC,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,qBAAqB,GACzB,KAAK,CAAC,UAAU,KAAK,SAAS,IAAI,KAAK,CAAC,mBAAmB,KAAK,SAAS,CAAC;IAC5E,MAAM,YAAY,GAAG,qBAAqB;QACxC,CAAC,CAAC;YACE,SAAS;YACT,YAAY;YACZ,QAAQ;YACR,aAAa;YACb,MAAM;YACN,YAAY;YACZ,YAAY;YACZ,qBAAqB;SACtB;QACH,CAAC,CAAC,CAAC,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;IAC7E,OAAO,CACL,WAAW,CAAC,KAAK,EAAE,YAAY,CAAC;QAChC,KAAK,CAAC,OAAO,KAAK,CAAC;QACnB,gBAAgB,CAAC,KAAK,CAAC,UAAU,CAAC;QAClC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;QACtB,cAAc,CAAC,KAAK,CAAC,WAAW,CAAC;QACjC,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;QAC9B,oBAAoB,CAAC,KAAK,CAAC,UAAU,CAAC;QACtC,CAAC,CAAC,qBAAqB;YACrB,CAAC,cAAc,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,gBAAgB,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,CACrF,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7F,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,CACL,WAAW,CAAC,KAAK,EAAE,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;QAC3C,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,aAAa,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;YACxD,oBAAoB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAC1C,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,IAAuB,EAAE,KAAwB;IACnE,OAAO,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,CAAC;AAC5E,CAAC;AAED,SAAS,cAAc,CAAC,IAAwB,EAAE,KAAyB;IACzE,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;QACjC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,WAAW,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QAChE,OAAO,IAAI,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,CAAC;IAC9C,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,aAAa,IAAI,KAAK,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;QACpE,OAAO,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,CAAC;IACtC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,kBAAkB,CAAC,KAA4B;IACtD,IACE,CAAC,QAAQ,CAAC,KAAK,CAAC;QAChB,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,YAAY,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC,EAClF,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACxD,CAAC;IACD,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACxD,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,KAAe;IACrC,IACE,CAAC,QAAQ,CAAC,KAAK,CAAC;QAChB,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,YAAY,EAAE,QAAQ,EAAE,qBAAqB,EAAE,eAAe,CAAC,CAAC,EACrF,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,mBAAmB,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC;QACzF,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,MAAqB,EAAE,KAAa;IACpD,MAAM,GAAG,GAAG,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACnD,OAAO,GAAG,IAAI,CAAC,IAAI,GAAG,IAAI,YAAY,CAAC;AACzC,CAAC;AAED,SAAS,WAAW,CAAC,MAAqB;IACxC,MAAM,OAAO,GACX,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,uBAAuB;QAC1C,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,uBAAuB,CAAC,kEAAkE;QACpH,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;IAClB,OAAO,CACL,sEAAsE,MAAM,CAAC,WAAW,KAAK;QAC7F,sFAAsF;QACtF,+CAA+C,IAAA,2CAAoB,EACjE,uBAAuB,EACvB,OAAO,CACR,SAAS,CACX,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CAAC,KAAc,EAAE,IAAY;IAC3C,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;AAChD,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAY;IAC1C,MAAM,SAAS,GAAG,IAAA,mBAAO,EAAC,IAAI,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,IAAA,oBAAQ,EAAC,IAAI,CAAC,CAAC;IAC5B,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,0BAA0B,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QACzE,MAAM,gBAAgB,GAAG,IAAA,gBAAI,EAAC,SAAS,EAAE,IAAI,IAAI,IAAI,OAAO,CAAC,GAAG,IAAI,IAAA,wBAAU,GAAE,QAAQ,CAAC,CAAC;QAC1F,IAAI,CAAC;YACH,IAAA,mBAAS,EAAC,gBAAgB,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAC7C,IAAA,mBAAS,EAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC;YACnC,OAAO,gBAAgB,CAAC;QAC1B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;gBAC7B,SAAS;YACX,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,oDAAoD,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;AAC9E,CAAC;AAED,mGAAmG;AACnG,SAAgB,0BAA0B,CAAC,IAAY,EAAE,MAAqB;IAC5E,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,SAAS,GAAG,IAAA,mBAAO,EAAC,IAAI,CAAC,CAAC;IAChC,IAAA,mBAAS,EAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACvD,IAAI,gBAAoC,CAAC;IACzC,IAAI,WAA+B,CAAC;IACpC,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,cAAuB,CAAC;IAC5B,IAAI,YAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,gBAAgB,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;QAChD,WAAW,GAAG,IAAA,gBAAI,EAAC,gBAAgB,EAAE,GAAG,IAAA,wBAAU,GAAE,OAAO,CAAC,CAAC;QAC7D,IAAA,uBAAa,EAAC,WAAW,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE;YACxD,QAAQ,EAAE,MAAM;YAChB,IAAI,EAAE,KAAK;YACX,IAAI,EAAE,IAAI;SACX,CAAC,CAAC;QACH,WAAW,GAAG,IAAI,CAAC;QACnB,IAAA,mBAAS,EAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QAC9B,IAAA,oBAAU,EAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QAC9B,SAAS,GAAG,IAAI,CAAC;QACjB,IAAA,mBAAS,EAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,cAAc,GAAG,KAAK,CAAC;IACzB,CAAC;YAAS,CAAC;QACT,IAAI,WAAW,IAAI,CAAC,SAAS,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC3D,IAAI,CAAC;gBACH,IAAA,oBAAU,EAAC,WAAW,CAAC,CAAC;YAC1B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;oBAC9B,YAAY,GAAG,KAAK,CAAC;gBACvB,CAAC;YACH,CAAC;QACH,CAAC;QACD,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;YACnC,IAAI,CAAC;gBACH,IAAA,mBAAS,EAAC,gBAAgB,CAAC,CAAC;YAC9B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;oBAC5D,YAAY,GAAG,KAAK,CAAC;gBACvB,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CACb,wDACE,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,cAAc,CACvE,KAAK,WAAW,CAAC,YAAY,CAAC,EAAE,CACjC,CAAC;IACJ,CAAC;IACD,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,cAAc,CAAC;IACvB,CAAC;AACH,CAAC;AAED,MAAa,oBAAoB;IACF;IAA7B,YAA6B,OAAe,gBAAgB,EAAE;QAAjC,SAAI,GAAJ,IAAI,CAA6B;IAAG,CAAC;IAElE,gBAAgB,CAAC,KAA4B;QAC3C,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAA,sDAA+B,EAAC,IAAI,CAAC,IAAI,EAAE,cAAc,EAAE,GAAG,EAAE;YAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAC5B,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC/B,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;YACtE,CAAC;YACD,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC9B,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC1B,CAAC;YACD,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,EAAE,CAAC;gBAChF,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;gBAC9B,IACE,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC;oBACxC,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;oBAC1B,CAAC,cAAc,CAAC,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,EACpD,CAAC;oBACD,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;gBACpF,CAAC;gBACD,OAAO;YACT,CAAC;YAED,0BAA0B,CAAC,IAAI,CAAC,IAAI,EAAE;gBACpC,OAAO,EAAE,CAAC;gBACV,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,MAAM,EAAE,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE;gBAC3B,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,UAAU,EAAE,EAAE,GAAG,KAAK,CAAC,UAAU,EAAE;aACpC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,MAAyB,EAAE,QAAgB,IAAI,CAAC,GAAG,EAAE;QACxD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACjD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IACE,OAAO,CAAC,IAAI,KAAK,QAAQ;YACzB,OAAO,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS;YACvC,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;YAC1C,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,EAChC,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;IACxF,CAAC;IAED,WAAW,CAAC,KAAe;QACzB,cAAc,CAAC,KAAK,CAAC,CAAC;QACtB,OAAO,IAAA,sDAA+B,EAAC,IAAI,CAAC,IAAI,EAAE,cAAc,EAAE,GAAG,EAAE;YACrE,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAC5B,IACE,OAAO,CAAC,IAAI,KAAK,QAAQ;gBACzB,OAAO,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS;gBACvC,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC;gBAChD,OAAO,CAAC,MAAM,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU;gBAC9C,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,EACrC,CAAC;gBACD,OAAO,KAAK,CAAC;YACf,CAAC;YACD,0BAA0B,CAAC,IAAI,CAAC,IAAI,EAAE;gBACpC,GAAG,OAAO,CAAC,MAAM;gBACjB,UAAU,EAAE,KAAK,CAAC,aAAa;gBAC/B,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;aAC/C,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,IAAI;QACV,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,IAAA,sBAAY,EAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC/C,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;YAC7B,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,+BAA+B,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC/D,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QAC7B,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACxC,IAAI,mBAAmB,CAAC,MAAM,CAAC,EAAE,CAAC;gBAChC,IAAI,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;gBACzC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;YAC5B,CAAC;YACD,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC7B,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;YAClE,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAC5C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,IAAI,CAAC,wBAAwB,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACxD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QAC7B,CAAC;IACH,CAAC;IAEO,gBAAgB;QACtB,MAAM,cAAc,GAAG,GAAG,IAAI,CAAC,IAAI,cAAc,OAAO,CAAC,GAAG,IAAI,IAAA,wBAAU,GAAE,OAAO,CAAC;QACpF,IAAA,oBAAU,EAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;QACtC,IAAA,mBAAS,EAAC,cAAc,EAAE,KAAK,CAAC,CAAC;QACjC,OAAO,CAAC,IAAI,CACV,uDAAuD,cAAc,IAAI;YACvE,gDAAgD,CACnD,CAAC;IACJ,CAAC;IAEO,IAAI,CAAC,OAAe;QAC1B,OAAO,CAAC,IAAI,CAAC,kBAAkB,OAAO,wBAAwB,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7E,CAAC;CACF;AAnHD,oDAmHC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC"}

package/dist/operator/situation-report.d.ts

@@ -18,10 +18,11 @@
 import type { OperatorChannelEvent, OutputSink } from './operator-interfaces.js';
 import type { AskAgent } from './trigger-author.js';
 import type { BackendType } from '../agent/model-runner.js';
+import { type ArtifactProvenance, type ReportCarryTarget } from './report-carry.js';
 /**
  * Machine frame tag prepended to the FULL report prompt so the report-run wiring can tell a full
- * report from a digest for tool-use auditing (report-run.ts). Kagemusha frames its scheduled full
- * report with the same bracketed-tag convention (report-prompts.ts buildFullReportPrompt).
+ * report from a digest for tool-use auditing (report-run.ts). The bracketed tag keeps framing
+ * source-neutral while remaining machine-readable.
  */
 export declare const OPERATOR_FULL_REPORT_TAG = "[operator_full_report]";
 export interface FireActivity {
@@ -40,6 +41,26 @@ export interface PreparedSituationReport {
     citedTriggerIds: string[];
     createdAtIso: string;
     deliveryId?: string;
+    provenance?: ArtifactProvenance;
+    target?: ReportCarryTarget;
+    payloadIdentity?: string;
+    occurrence?: {
+        kind: 'digest' | 'scheduled_full' | 'on_demand_full';
+        hourKey?: string;
+        firedAtIso?: string;
+    };
+}
+export interface DeliveredFullReport {
+    mode: 'full';
+    deliveryId: string;
+    citedTriggerIds: string[];
+    createdAtIso: string;
+    deliveredAtIso: string;
+    text: string;
+    provenance: ArtifactProvenance;
+    target?: ReportCarryTarget;
+    payloadIdentity?: string;
+    occurrence?: PreparedSituationReport['occurrence'];
 }
 export interface SituationReporterSnapshot {
     version: 1;
@@ -69,8 +90,8 @@ export interface SituationReporterOptions {
     /**
      * M2.3: tool-call instructions injected into the FULL report framing so the agent
      * ACTIVELY gathers current context (channels, tasks, memory) before writing - the
-     * lesson from Kagemusha, whose report prompt instructs its agent to call its tools
-     * (and which deleted its deterministic report builder for low quality). The lines
+     * lesson from the reference owner console: report prompts instruct the agent to call tools
+     * instead of relying on a low-quality deterministic report builder. The lines
      * are injected from the runtime wiring (which knows the daemon's toolset); this
      * module stays generic. Digest mode never uses them (frequent + must stay light).
      *
@@ -80,7 +101,7 @@ export interface SituationReporterOptions {
      */
     selfGatherLines?: string[] | (() => string[]);
     /**
-     * Kagemusha dual-output mechanism: lines instructing the FULL report run to also
+     * Dual-output mechanism: lines instructing the FULL report run to also
      * publish the operator board slots (report_publish) before writing the text
      * report. Injected from runtime wiring (board-slot-instructions.ts); digest mode
      * never publishes the board.
@@ -94,12 +115,10 @@ export interface SituationReporterOptions {
      * of being elimination-only. Uncited fires stay NEUTRAL - not failures.
      */
     recordTriggerUse?: (triggerIds: string[]) => void;
-    /**
-     * Context carry (plan v6 S1-T4): called with (deliveredAtIso, reportText)
-     * after a FULL report is successfully delivered. Runtime wiring persists it
-     * so the owner console can reference the latest report per chat turn.
-     */
-    persistLastFullReport?: (deliveredAtIso: string, text: string) => void;
+    /** Reads the provenance of the run that just composed a FULL report. */
+    fullReportProvenance?: () => ArtifactProvenance;
+    /** Called only after a FULL report has definitely been delivered. */
+    persistLastFullReport?: (report: DeliveredFullReport) => void;
 }
 export declare class SituationReporter {
     private windowByChannel;