@mindot/will 0.4.0 → 0.6.0

package/src/channels/whatsapp.ts

@@ -0,0 +1,318 @@
+// ─────────────────────────────────────────────────────────────
+// src/channels/whatsapp.ts — a Will present on WhatsApp
+// ─────────────────────────────────────────────────────────────
+//
+// Same paradigm as the Discord bridge, different room:
+//
+//   inbound   DM / group message → will.perceive({ from, speaker, text, thread })
+//             — every author is `whatsapp:<number>` (stable across chats), the
+//             push name is *learned* by the mind, and each chat (DM or group)
+//             is its own conversation thread.
+//   outbound  will.on('message') → the addressee's last shared group, else
+//             their DM (a WhatsApp DM jid is derivable from the number — no
+//             roster miss is fatal), else the home chat.
+//
+// TRANSPORT — read before deploying. This bridge speaks the *linked-device*
+// protocol via Baileys: the Will pairs to a WhatsApp account by QR scan, like
+// WhatsApp Web. That is not a sanctioned bot API — WhatsApp's terms don't
+// allow automation on personal accounts, and accounts doing it can be banned.
+// Meta's sanctioned path (the Business Cloud API) needs a business account,
+// webhook hosting, and app review — no 2-minute pairing. Operator's choice;
+// docs/channels/whatsapp.md is explicit about the trade. Use a spare number.
+//
+// Baileys is imported lazily inside `createWhatsAppSocket` — tests (and hosts
+// that bring their own transport) inject `socket`, and the structural
+// `WaLikeSocket` type keeps the dependency out of the type graph.
+// ─────────────────────────────────────────────────────────────
+
+import type { Will, WillMessage } from '#sdk/will'
+import { ChannelRoster } from '#channels/roster'
+import { chunkText, type ChannelBridge } from '#channels/types'
+
+/** WhatsApp's hard per-message cap. */
+const WHATSAPP_MESSAGE_LIMIT = 65_536
+
+// ── The slice of a Baileys socket the bridge actually uses (structural) ──────
+
+export interface WaLikeMessage {
+  key: {
+    remoteJid?: string | null
+    fromMe?: boolean | null
+    /** Sender jid inside a group (absent in DMs). */
+    participant?: string | null
+  }
+  /** Sender's display ("push") name. */
+  pushName?: string | null
+  messageStubType?: number | null
+  message?: {
+    conversation?: string | null
+    extendedTextMessage?: { text?: string | null; contextInfo?: { mentionedJid?: string[] | null } | null } | null
+    imageMessage?: { caption?: string | null } | null
+    videoMessage?: { caption?: string | null } | null
+  } | null
+}
+
+export interface WaLikeSocket {
+  /** The paired account, once connected. id like '4915…:12@s.whatsapp.net'. */
+  user?: { id: string; name?: string } | null
+  ev: { on( event: 'messages.upsert', fn: ( u: { messages: WaLikeMessage[]; type?: string } ) => void ): unknown }
+  sendMessage( jid: string, content: { text: string } ): Promise<unknown>
+  sendPresenceUpdate?( state: 'composing' | 'paused', jid?: string ): Promise<unknown>
+  /** Tear the connection down (does not unlink the device). */
+  end?( err?: Error ): void
+}
+
+// ── Options ──────────────────────────────────────────────────────────────────
+
+export interface WhatsAppBridgeOptions {
+  /** Chat jids the Will inhabits (groups `…@g.us`, DMs `…@s.whatsapp.net`). Unset = every chat. */
+  chats?: string[]
+  /** Perceive group messages only when the Will is @mentioned (DMs always perceived). */
+  mentionOnly?: boolean
+  /** Fallback chat jid for utterances with no reachable addressee. */
+  homeChatId?: string
+  /** Linked-device credentials dir (default: ./.will/<willId>.wa-auth). QR pairs on first run. */
+  authPath?: string
+  /** Roster path (default: ./.will/<willId>.whatsapp.json). */
+  rosterPath?: string
+  /** Test / power-user seam: bring your own socket; Baileys is never imported. */
+  socket?: WaLikeSocket
+  log?: ( msg: string ) => void
+}
+
+// ── Helpers ──────────────────────────────────────────────────────────────────
+
+const isGroupJid = ( jid: string ): boolean => jid.endsWith('@g.us')
+
+/** '4915123:7@s.whatsapp.net' → '4915123' (device + server stripped). */
+const bareId = ( jid: string ): string => jid.split('@')[0]!.split(':')[0]!
+
+/** A DM jid is derivable from the bare number — WhatsApp's gift to proactivity. */
+const dmJidFor = ( userId: string ): string => `${ userId }@s.whatsapp.net`
+
+function textOf( m: WaLikeMessage ): string {
+  const msg = m.message
+  return msg?.conversation
+      ?? msg?.extendedTextMessage?.text
+      ?? msg?.imageMessage?.caption
+      ?? msg?.videoMessage?.caption
+      ?? ''
+}
+
+// ── The bridge ───────────────────────────────────────────────────────────────
+
+/**
+ * Connect a Will to WhatsApp over the linked-device protocol. First run prints
+ * a QR to pair (Settings → Linked devices → Link a device); credentials persist
+ * in `authPath` so later runs reconnect silently. Close via the returned
+ * `ChannelBridge.close()` — the Will keeps ticking; it only loses this surface.
+ */
+export async function connectWhatsApp( will: Will, opts: WhatsAppBridgeOptions = {} ): Promise<ChannelBridge> {
+  const log     = opts.log ?? ( ( m: string ) => console.error(`[will:whatsapp] ${ m }`) )
+  const roster  = new ChannelRoster( opts.rosterPath ?? `.will/${ will.id }.whatsapp.json`)
+  const allowed = opts.chats?.length ? new Set( opts.chats ) : null
+
+  let closed = false
+  const socket = opts.socket ?? await createWhatsAppSocket( {
+    authPath: opts.authPath ?? `.will/${ will.id }.wa-auth`,
+    log,
+    stillOpen: () => !closed,
+  } )
+
+  /** The most recently active allowed chat — last-resort proactive target. */
+  let lastActiveChatId: string | null = opts.homeChatId ?? null
+
+  // ── inbound: platform message → stimulus ──────────────────────────────────
+  socket.ev.on('messages.upsert', ( { messages, type } ) => {
+    if( type && type !== 'notify') return   // history sync/corrections are not new percepts
+    for( const m of messages ) void onMessage( m )
+  } )
+
+  async function onMessage( m: WaLikeMessage ): Promise<void> {
+    const jid = m.key.remoteJid
+    if( !jid || m.key.fromMe || !m.message || m.messageStubType ) return
+    if( jid.endsWith('@broadcast') || jid.endsWith('@newsletter') ) return   // stories/broadcasts aren't a room the Will is in
+    if( allowed && !allowed.has( jid ) ) return
+
+    const isGroup   = isGroupJid( jid )
+    const senderJid = isGroup ? m.key.participant : jid
+    if( !senderJid ) return
+
+    const selfId    = socket.user ? bareId( socket.user.id ) : null
+    const mentioned = m.message.extendedTextMessage?.contextInfo?.mentionedJid ?? []
+    const addressed = !isGroup || ( selfId != null && mentioned.some( j => bareId( j ) === selfId ) )
+    if( opts.mentionOnly && !addressed ) return
+
+    const userId   = bareId( senderJid )
+    const entityId = `whatsapp:${ userId }`
+    const speaker  = m.pushName ?? undefined
+
+    roster.record( {
+      entityId,
+      userId,
+      ...( speaker ? { displayName: speaker } : {} ),
+      ...( isGroup ? { lastChannelId: jid } : { dmChannelId: jid } ),
+    } )
+    if( isGroup ) lastActiveChatId = jid
+
+    // Same rule as Discord: a presence cue only when addressed — the mind may
+    // still choose silence, and 'composing' expires on its own.
+    if( addressed ) await socket.sendPresenceUpdate?.('composing', jid ).catch( () => {} )
+
+    const text = textOf( m )
+    if( !text.trim() ) return
+
+    await will.perceive( {
+      text,
+      from:   entityId,
+      thread: `whatsapp:${ jid }`,
+      ...( speaker ? { speaker } : {} ),
+    } )
+  }
+
+  // ── outbound: projected utterance → the addressee ─────────────────────────
+  will.on('message', ( m: WillMessage ) => { if( !closed ) void deliver( m ) } )
+
+  async function deliver( m: WillMessage ): Promise<void> {
+    const peer   = m.to ? roster.resolve( m.to ) : undefined
+    const chunks = chunkText( m.content, WHATSAPP_MESSAGE_LIMIT )
+
+    // Last shared group → known DM → DM derived from the entity id itself →
+    // home chat → last active chat. Unlike Discord, an unmet-but-addressed
+    // entity is still reachable: `whatsapp:<number>` implies its DM jid.
+    const derivedDm = m.to?.startsWith('whatsapp:') ? dmJidFor( m.to.slice('whatsapp:'.length ) ) : undefined
+    const targets = [ peer?.lastChannelId, peer?.dmChannelId, derivedDm, opts.homeChatId ?? undefined, lastActiveChatId ?? undefined ]
+    for( const jid of targets ){
+      if( !jid ) continue
+      try {
+        for( const chunk of chunks ) await socket.sendMessage( jid, { text: chunk } )
+        return
+      }
+      catch { /* try the next route */ }
+    }
+    log(`no route for utterance to '${ m.to }' — dropped (${ m.content.length } chars)`)
+  }
+
+  // ── lifecycle ──────────────────────────────────────────────────────────────
+  return {
+    kind: 'whatsapp',
+    async start(): Promise<void> {
+      // createWhatsAppSocket resolves already-open; an injected socket is the
+      // caller's to have readied.
+      log(`${ will.name } is present on WhatsApp${ socket.user ? ` as ${ bareId( socket.user.id ) }` : '' }`)
+    },
+    async close(): Promise<void> {
+      if( closed ) return
+      closed = true
+      roster.flush()
+      try { socket.end?.() } catch { /* already down */ }
+    },
+  }
+}
+
+// ── The real transport (Baileys, lazily imported) ────────────────────────────
+
+interface SocketFactoryOpts {
+  authPath:  string
+  log:       ( msg: string ) => void
+  /** Reconnect only while the bridge is open. */
+  stillOpen: () => boolean
+}
+
+/**
+ * A reconnect-stable facade over Baileys. Baileys' own pattern replaces the
+ * socket object on every reconnect; the facade keeps one stable identity the
+ * bridge can hold, re-attaching its subscribers to each inner incarnation.
+ * Resolves once the first connection is open (after QR pairing on first run).
+ */
+async function createWhatsAppSocket( o: SocketFactoryOpts ): Promise<WaLikeSocket> {
+  let baileys: typeof import('baileys')
+  try { baileys = await import('baileys') }
+  catch {
+    throw new Error('baileys is not installed (it is an optionalDependency) — run `bun add baileys` / `npm i baileys` and retry.')
+  }
+  const { default: makeWASocket, useMultiFileAuthState, DisconnectReason } = baileys
+
+  // Baileys logs through pino at info by default — JSON noise all over the
+  // host's stderr. A minimal pino-shaped silent logger (child() returns
+  // itself, every level a no-op) is what it actually needs; hand-rolling it
+  // beats importing a transitive dep that may not resolve from dist/.
+  const noop = (): void => {}
+  const logger = {
+    level: 'silent',
+    child(){ return logger },
+    trace: noop, debug: noop, info: noop, warn: noop, error: noop, fatal: noop,
+  }
+
+  type Handler = ( u: { messages: WaLikeMessage[]; type?: string } ) => void
+  const subscribers: Handler[] = []
+  let inner: ReturnType<typeof makeWASocket> | null = null
+
+  const facade: WaLikeSocket = {
+    get user(){ return inner?.user ? { id: inner.user.id, name: inner.user.name ?? undefined } : null },
+    ev: { on: ( _e, fn ) => { subscribers.push( fn ) } },
+    sendMessage: ( jid, content ) => {
+      if( !inner ) return Promise.reject( new Error('whatsapp socket not connected') )
+      return inner.sendMessage( jid, content )
+    },
+    sendPresenceUpdate: ( state, jid ) => inner?.sendPresenceUpdate( state, jid ) ?? Promise.resolve(),
+    end: () => inner?.end( undefined ),
+  }
+
+  const { state, saveCreds } = await useMultiFileAuthState( o.authPath )
+
+  await new Promise<void>( ( resolveOpen, rejectOpen ) => {
+    let opened = false
+
+    function connect(): void {
+      const sock = makeWASocket( { auth: state, logger: logger as never } )
+      inner = sock
+
+      sock.ev.on('creds.update', saveCreds )
+      sock.ev.on('messages.upsert', u => { for( const fn of subscribers ) fn( u as never ) } )
+
+      sock.ev.on('connection.update', update => {
+        const { connection, lastDisconnect, qr } = update as {
+          connection?: string; lastDisconnect?: { error?: unknown }; qr?: string
+        }
+
+        if( qr ) void printQr( qr, o.log )
+
+        if( connection === 'open' && !opened ){
+          opened = true
+          resolveOpen()
+        }
+        if( connection === 'close'){
+          const code = ( lastDisconnect?.error as { output?: { statusCode?: number } } | undefined )?.output?.statusCode
+          if( code === DisconnectReason.loggedOut ){
+            const err = new Error('WhatsApp unlinked this device (logged out) — delete the auth dir and pair again.')
+            o.log( err.message )
+            if( !opened ) rejectOpen( err )
+            return
+          }
+          if( o.stillOpen() ){
+            o.log(`connection closed (status ${ code ?? '?' }) — reconnecting…`)
+            setTimeout( connect, 3_000 )
+          }
+        }
+      } )
+    }
+
+    connect()
+  } )
+
+  return facade
+}
+
+/** QR to the terminal; falls back to the raw pairing string if the tiny renderer is absent. */
+async function printQr( qr: string, log: ( m: string ) => void ): Promise<void> {
+  log('pair this device: WhatsApp → Settings → Linked devices → Link a device')
+  try {
+    type QrModule = { generate( s: string, o: { small: boolean } ): void }
+    const qrt = ( await import('qrcode-terminal' as string ) ) as QrModule & { default?: QrModule }
+    ;( qrt.default ?? qrt ).generate( qr, { small: true } )
+  }
+  catch {
+    log(`qrcode-terminal not installed — raw pairing code:\n${ qr }`)
+  }
+}

package/src/cli.ts

@@ -3,9 +3,11 @@
 // src/cli.ts — the `will` command: host a persistent mind
 // ─────────────────────────────────────────────────────────────
 //
-//   will mcp      host over MCP stdio (Claude Desktop / Claude Code / IDEs)
-//   will serve    host over HTTP (any language; the sidecar) — WILL_PORT/WILL_HOST
-//   will discord  a presence in a Discord server — DISCORD_BOT_TOKEN
+//   will mcp       host over MCP stdio (Claude Desktop / Claude Code / IDEs)
+//   will serve     host over HTTP (any language; the sidecar) — WILL_PORT/WILL_HOST
+//   will discord   a presence in a Discord server — DISCORD_BOT_TOKEN
+//   will whatsapp  a presence on WhatsApp — QR-pairs a linked device (unofficial
+//                  protocol; see docs/channels/whatsapp.md before deploying)
 //
 // Both hosts raise the same mind the same way (see host/boot.ts): env-configured,
 // woken from its PMA artifact when one exists, hibernated back on the way out —
@@ -26,16 +28,20 @@ import { routeLogsToStderr, bootWillFromEnv } from '#root/host/boot'
 import { buildWillMcpServer } from '#root/mcp/server'
 import { buildWillHttpServer } from '#root/serve/server'
 import { connectDiscord } from '#channels/discord'
+import { connectWhatsApp } from '#channels/whatsapp'
 
 // stdout is the MCP protocol channel under `will mcp` — route logs FIRST.
 routeLogsToStderr()
 
-const USAGE = `usage: will <mcp | serve | discord>
+const USAGE = `usage: will <mcp | serve | discord | whatsapp>
 
-  mcp      host a persistent mind over MCP stdio (Claude Desktop / Claude Code)
-  serve    host a persistent mind over HTTP (any language; WILL_PORT, default 7777)
-  discord  put a persistent mind in a Discord server (DISCORD_BOT_TOKEN; optional
-           WILL_DISCORD_CHANNELS, WILL_DISCORD_MENTION_ONLY, WILL_DISCORD_HOME_CHANNEL)
+  mcp       host a persistent mind over MCP stdio (Claude Desktop / Claude Code)
+  serve     host a persistent mind over HTTP (any language; WILL_PORT, default 7777)
+  discord   put a persistent mind in a Discord server (DISCORD_BOT_TOKEN; optional
+            WILL_DISCORD_CHANNELS, WILL_DISCORD_MENTION_ONLY, WILL_DISCORD_HOME_CHANNEL)
+  whatsapp  put a persistent mind on WhatsApp — QR-pairs as a linked device; no token.
+            UNOFFICIAL protocol (ban risk; use a spare number — docs/channels/whatsapp.md).
+            Optional WILL_WHATSAPP_CHATS, WILL_WHATSAPP_MENTION_ONLY, WILL_WHATSAPP_HOME_CHAT
 
 Shared env: WILL_NAME, WILL_IDENTITY, WILL_TIER, WILL_LLM, WILL_TICK_MS,
 WILL_SEED, WILL_PMA_PATH, WILL_MCP_SERVERS. The mind persists across runs via
@@ -44,57 +50,74 @@ its PMA artifact.`
 async function main(): Promise<void> {
   const sub = process.argv[2]
 
-  if( sub !== 'mcp' && sub !== 'serve' && sub !== 'discord' ){
+  if( sub !== 'mcp' && sub !== 'serve' && sub !== 'discord' && sub !== 'whatsapp'){
     console.error( sub ? `unknown subcommand: ${ sub }\n\n${ USAGE }` : USAGE )
     process.exit( sub ? 2 : 0 )
   }
 
   // Fail on missing platform credentials BEFORE raising a mind.
   if( sub === 'discord' && !process.env.DISCORD_BOT_TOKEN ){
-    console.error( '[will] DISCORD_BOT_TOKEN is required for `will discord` — create a bot at https://discord.com/developers/applications (enable the Message Content intent) and set the token.' )
+    console.error('[will] DISCORD_BOT_TOKEN is required for `will discord` — create a bot at https://discord.com/developers/applications (enable the Message Content intent) and set the token.')
     process.exit( 2 )
   }
 
   const { will, name, pmaPath, tickMs, anatomy, onCleanup, shutdown } = await bootWillFromEnv()
 
-  if( sub === 'mcp' ){
+  if( sub === 'mcp'){
     // The MCP client owns our stdin — its disconnect is the shutdown signal.
-    process.stdin.on( 'end', () => void shutdown( 'client disconnected' ) )
+    process.stdin.on('end', () => void shutdown('client disconnected') )
     const server = buildWillMcpServer( will, { pmaPath } )
     await server.connect( new StdioServerTransport() )
-    console.error( `[will] ${ name } is listening on MCP stdio (tick ${ tickMs }ms, anatomy ${ anatomy })` )
+    console.error(`[will] ${ name } is listening on MCP stdio (tick ${ tickMs }ms, anatomy ${ anatomy })`)
     return
   }
 
-  if( sub === 'discord' ){
-    const csv = ( v?: string ) => v?.split( ',' ).map( s => s.trim() ).filter( Boolean )
+  if( sub === 'discord'){
+    const csv = ( v?: string ) => v?.split(',').map( s => s.trim() ).filter( Boolean )
     const bridge = await connectDiscord( will, {
       token:         process.env.DISCORD_BOT_TOKEN!,
       channels:      csv( process.env.WILL_DISCORD_CHANNELS ),
-      mentionOnly:   /^(1|true|yes)$/i.test( process.env.WILL_DISCORD_MENTION_ONLY ?? '' ),
+      mentionOnly:   /^(1|true|yes)$/i.test( process.env.WILL_DISCORD_MENTION_ONLY ?? ''),
       homeChannelId: process.env.WILL_DISCORD_HOME_CHANNEL,
-      rosterPath:    pmaPath.replace( /(\.pma)?\.json$/, '' ) + '.discord.json',
+      rosterPath:    pmaPath.replace( /(\.pma)?\.json$/, '') + '.discord.json',
     } )
     onCleanup( () => bridge.close() )
     await bridge.start()
-    console.error( `[will] ${ name } is present on Discord (tick ${ tickMs }ms, anatomy ${ anatomy }) — it speaks when it decides to.` )
+    console.error(`[will] ${ name } is present on Discord (tick ${ tickMs }ms, anatomy ${ anatomy }) — it speaks when it decides to.`)
+    return
+  }
+
+  if( sub === 'whatsapp'){
+    const csv = ( v?: string ) => v?.split(',').map( s => s.trim() ).filter( Boolean )
+    const stem = pmaPath.replace( /(\.pma)?\.json$/, '')
+    // connectWhatsApp blocks here on first run until the printed QR is scanned.
+    const bridge = await connectWhatsApp( will, {
+      chats:       csv( process.env.WILL_WHATSAPP_CHATS ),
+      mentionOnly: /^(1|true|yes)$/i.test( process.env.WILL_WHATSAPP_MENTION_ONLY ?? ''),
+      homeChatId:  process.env.WILL_WHATSAPP_HOME_CHAT,
+      authPath:    stem + '.wa-auth',
+      rosterPath:  stem + '.whatsapp.json',
+    } )
+    onCleanup( () => bridge.close() )
+    await bridge.start()
+    console.error(`[will] ${ name } is present on WhatsApp (tick ${ tickMs }ms, anatomy ${ anatomy }) — it speaks when it decides to.`)
     return
   }
 
   // serve — the HTTP sidecar.
-  const port = parseInt( process.env.WILL_PORT ?? '7777' )
+  const port = parseInt( process.env.WILL_PORT ?? '7777')
   const host = process.env.WILL_HOST ?? '127.0.0.1'
   const server = buildWillHttpServer( will, { pmaPath } )
   onCleanup( () => new Promise<void>( r => server.close( () => r() ) ) )
   await new Promise<void>( ( resolve, reject ) => {
-    server.once( 'error', reject )
+    server.once('error', reject )
     server.listen( port, host, () => resolve() )
   } )
-  console.error( `[will] ${ name } is listening on http://${ host }:${ port } (tick ${ tickMs }ms, anatomy ${ anatomy })` )
-  console.error( `[will] try: curl -X POST http://${ host }:${ port }/perceive -H 'content-type: application/json' -d '{"text":"Hello"}'` )
+  console.error(`[will] ${ name } is listening on http://${ host }:${ port } (tick ${ tickMs }ms, anatomy ${ anatomy })`)
+  console.error(`[will] try: curl -X POST http://${ host }:${ port }/perceive -H 'content-type: application/json' -d '{"text":"Hello"}'`)
 }
 
 main().catch( e => {
-  console.error( `[will] fatal: ${ e instanceof Error ? e.stack ?? e.message : String( e ) }` )
+  console.error(`[will] fatal: ${ e instanceof Error ? e.stack ?? e.message : String( e ) }`)
   process.exit( 1 )
 } )

package/src/cognition/acp.ts

@@ -0,0 +1,28 @@
+// ─────────────────────────────────────────────────────────────
+// src/cognition/acp.ts — action-conditioned prediction constants
+// ─────────────────────────────────────────────────────────────
+//
+// Shared by every ACP-P2 consumer (ACTION_CONDITIONED_PREDICTION §3) so the
+// safety-relevant number cannot drift between engines. The pattern each
+// consumer implements:
+//
+//   1. subscribe `agency.enacted` / `agency.communicate` / `agency.invocation`;
+//   2. on any of them, setPrecision(stream, ACP_SELF_PRECISION) on the streams
+//      whose prediction errors are actually CONSUMED (gate or weight a
+//      publish) — anticipating unconsumed streams is theater;
+//   3. restore precision to 1.0 explicitly after ONE observe in react() —
+//      GenerativeModel's own mean-reversion (0.02/observe ≈ 50 ticks) would
+//      keep dampening GENUINE world surprise arriving after our action.
+//
+// Measured on the first consumer (AttentionAllocator): after a stable
+// stretch the salience denominator (EW variance) collapses, so any deviation
+// saturates salience at 1.0 — precision is the only lever that stays
+// measurable there; a conservative anticipate() nudge is invisible.
+// ─────────────────────────────────────────────────────────────
+
+/**
+ * The weight a self-caused observe carries. Below the executive's
+ * `WORKSPACE_THRESHOLD` (0.4) even when the base salience saturates at 1.0 —
+ * our own action's swing does not recruit our own executive.
+ */
+export const ACP_SELF_PRECISION = 0.35

package/src/cognition/agency/consequence.ts

@@ -0,0 +1,174 @@
+// ─────────────────────────────────────────────────────────────
+// src/agency/consequence.ts  —  expected-consequence descriptors
+// ─────────────────────────────────────────────────────────────
+//
+// EXAFFERENCE P1. The efference copy predicts an action's *reward*; a
+// consequence descriptor predicts its *sensory footprint* — what the world will
+// look like because we acted. The MotorSchemaExecutor registers one at the
+// enaction moment for world-facing actions only (delivered communicate, or the
+// async communicate/external hold); sync innate enactions have internal effects
+// and get none. Descriptors are ordinary entities, so they snapshot/restore and
+// replay with the state (FN9), and they expire on a tick-denominated TTL that
+// deliberately OUTLIVES intent resolution — a host ack does not stop the
+// channel echo from arriving two ticks later.
+//
+// Dark in P1: written and expired, consumed by nothing. P2's corollary-
+// discharge matcher reads them to tag percept provenance
+// ('reafferent' | 'exafferent') and attenuate self-caused salience.
+// Matching stays deterministic: FNV-1a content hashes, no clocks, no RNG.
+// ─────────────────────────────────────────────────────────────
+
+import type { EntityInput, Tick } from '#core/types'
+
+export const CONSEQUENCE_TYPE = 'agency.consequence'
+
+/** Salience multiplier applied to a matched (reafferent) percept — attenuated,
+ *  not zeroed: a *surprising* consequence of our own action can still climb. */
+export const ATTENUATION = 0.25
+
+/** Minimum descriptor-text length for substring matching — below this a
+ *  containment hit is too cheap to mean "these are my own words". */
+export const MIN_TEXT_MATCH_LEN = 12
+
+/**
+ * Ticks a descriptor stays live — 2 × the executor's `AWAIT_TIMEOUT`, so a
+ * descriptor survives both a stranded await (15 ticks) and the late sensory
+ * echo of an already-reconciled action.
+ */
+export const CONSEQUENCE_TTL_TICKS = 30
+
+export interface ConsequenceDescriptor {
+  /** The enacting intent — sensory reafference can reconcile to it (P5). */
+  intentId:        string
+  schema:          string
+  mode:            'communicate' | 'external'
+  /** Communication effector name (talk/text/gesture/broadcast), when known. */
+  effector?:       string
+  targetEntityId?: string
+  /** FNV-1a over the authored outbound text (delivered communicate). */
+  textHash?:       number
+  /** The authored outbound text itself — enables substring matching on echoes
+   *  that arrive decorated ("Alice said: …"). Internal state, never emitted. */
+  text?:           string
+  /** FNV-1a over the canonicalized parameters (async dispatch). */
+  paramsHash?:     number
+  expiresAt:       Tick
+  tick:            Tick
+}
+
+/** Deterministic 32-bit FNV-1a — the shared content-match key (P2 matcher uses the same). */
+export function fnv1a( text: string ): number {
+  let h = 0x811c9dc5
+  for( let i = 0; i < text.length; i++ ){
+    h ^= text.charCodeAt( i )
+    h = Math.imul( h, 0x01000193 ) >>> 0
+  }
+  return h >>> 0
+}
+
+/**
+ * Canonicalize parameters into a stable string before hashing: keys sorted
+ * recursively so `{a,b}` and `{b,a}` produce the same key. Deterministic and
+ * cheap; not a serialization format (never parsed back).
+ */
+export function paramsKey( value: unknown ): string {
+  if( value === null || typeof value !== 'object')
+    return typeof value === 'string' ? JSON.stringify( value ) : String( value )
+  if( Array.isArray( value ) )
+    return `[${ value.map( paramsKey ).join(',') }]`
+  const obj = value as Record<string, unknown>
+  const keys = Object.keys( obj ).sort()
+  return `{${ keys.map( k => `${ k }:${ paramsKey( obj[k] ) }` ).join(',') }}`
+}
+
+/** Build the descriptor entity (id keyed by intent — one footprint per enaction). */
+export function consequenceEntity( d: ConsequenceDescriptor ): EntityInput {
+  return {
+    id:   `agency-consequence-${ d.intentId }`,
+    type: CONSEQUENCE_TYPE,
+    metadata: { ...d },
+  }
+}
+
+/** Read a descriptor back off entity metadata (P2 matcher + tests). */
+export function readConsequence(
+  m: ReadonlyMap<string, unknown> | Record<string, unknown> | undefined,
+): ConsequenceDescriptor | null {
+  const meta = ( m ?? {} ) as Record<string, unknown>
+  const intentId = typeof meta['intentId'] === 'string' ? meta['intentId'] as string : undefined
+  const schema   = typeof meta['schema']   === 'string' ? meta['schema']   as string : undefined
+  const mode     = meta['mode'] === 'communicate' || meta['mode'] === 'external' ? meta['mode'] : undefined
+  if( !intentId || !schema || !mode ) return null
+  return {
+    intentId, schema, mode,
+    effector:       typeof meta['effector']       === 'string' ? meta['effector']       as string : undefined,
+    targetEntityId: typeof meta['targetEntityId'] === 'string' ? meta['targetEntityId'] as string : undefined,
+    textHash:       typeof meta['textHash']       === 'number' ? meta['textHash']       as number : undefined,
+    text:           typeof meta['text']           === 'string' ? meta['text']           as string : undefined,
+    paramsHash:     typeof meta['paramsHash']     === 'number' ? meta['paramsHash']     as number : undefined,
+    expiresAt:      typeof meta['expiresAt']      === 'number' ? meta['expiresAt']      as number : 0,
+    tick:           typeof meta['tick']           === 'number' ? meta['tick']           as number : 0,
+  }
+}
+
+// ── P2: the corollary-discharge matcher ──────────────────────────────────────
+
+/** Collect the live (unexpired) descriptors from frozen state, in stable id order. */
+export function liveConsequences(
+  entities: ReadonlyMap<string, { type: string; metadata?: ReadonlyMap<string, unknown> | Record<string, unknown> }>,
+  tick:     Tick,
+): ConsequenceDescriptor[] {
+  const out: ConsequenceDescriptor[] = []
+  for( const [ , e ] of entities ){
+    if( e.type !== CONSEQUENCE_TYPE ) continue
+    const d = readConsequence( e.metadata )
+    if( d && tick < d.expiresAt ) out.push( d )
+  }
+  return out.sort( ( a, b ) => ( a.intentId < b.intentId ? -1 : a.intentId > b.intentId ? 1 : 0 ) )
+}
+
+/**
+ * High-precision text matching only (P2): a candidate text is *ours* when it
+ * hashes exactly to a descriptor's outbound text, or contains that text
+ * verbatim (echoes arrive decorated — "Alice said: …"). Deliberately NO
+ * entity-correspondence matching for external effectors yet: over-attribution
+ * (muting a genuine world event) is the dangerous direction; under-attribution
+ * is the status quo. Pure, deterministic, first match in stable order wins.
+ */
+export function matchConsequenceText(
+  descriptors: readonly ConsequenceDescriptor[],
+  candidate:   string,
+): ConsequenceDescriptor | null {
+  if( candidate.length === 0 ) return null
+  const candidateHash = fnv1a( candidate )
+  for( const d of descriptors ){
+    if( d.textHash !== undefined && d.textHash === candidateHash ) return d
+    if( d.text !== undefined && d.text.length >= MIN_TEXT_MATCH_LEN && candidate.includes( d.text ) ) return d
+  }
+  return null
+}
+
+// ── ACP-P1: entity correspondence (ACTION_CONDITIONED_PREDICTION §2) ─────────
+
+/** Salience multiplier for an entity-correspondence match — gentler than a
+ *  text match (0.25): the change is on our action's target while its
+ *  descriptor lives, but we are less certain it is ours. */
+export const CORRESPONDENCE_ATTENUATION = 0.5
+
+/**
+ * A live **external**-mode descriptor is a standing prediction that its
+ * `targetEntityId` is about to change *because of us*. A `modified` percept on
+ * exactly that entity is claimed as reafference (an `appeared` entity is new
+ * information, not our footprint). Communicate descriptors are excluded — the
+ * text path owns them. First match in stable order; pure.
+ */
+export function matchConsequenceEntity(
+  descriptors: readonly ConsequenceDescriptor[],
+  entityId:    string,
+  changeType:  string,
+): ConsequenceDescriptor | null {
+  if( changeType !== 'modified' || entityId.length === 0 ) return null
+  for( const d of descriptors )
+    if( d.mode === 'external' && d.targetEntityId === entityId ) return d
+  return null
+}