@mnemom/mnemom 0.17.34 → 0.17.36

package/dist/vendor/durable-contract/index.js

@@ -36,8 +36,8 @@ function bytesToHex(bytes) {
   for (const b of bytes) out += HEX[b];
   return out;
 }
-function utf8(text) {
-  return new TextEncoder().encode(text);
+function utf8(text2) {
+  return new TextEncoder().encode(text2);
 }
 async function sha256Hex(input) {
   const bytes = typeof input === "string" ? utf8(input) : input;
@@ -61,13 +61,13 @@ function base64urlEncode(bytes) {
   return btoa(bin).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
 }
 var B64URL_RE = /^[A-Za-z0-9_-]*$/;
-function base64urlDecode(text) {
-  if (!B64URL_RE.test(text) || text.length % 4 === 1) return null;
-  const padded = text.replace(/-/g, "+").replace(/_/g, "/") + "===".slice(0, (4 - text.length % 4) % 4);
+function base64urlDecode(text2) {
+  if (!B64URL_RE.test(text2) || text2.length % 4 === 1) return null;
+  const padded = text2.replace(/-/g, "+").replace(/_/g, "/") + "===".slice(0, (4 - text2.length % 4) % 4);
   const bin = atob(padded);
   const out = new Uint8Array(bin.length);
   for (let i = 0; i < bin.length; i++) out[i] = bin.charCodeAt(i);
-  return base64urlEncode(out) === text ? out : null;
+  return base64urlEncode(out) === text2 ? out : null;
 }
 var HEX64_RE = /^[0-9a-f]{64}$/;
 var UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/;
@@ -367,7 +367,8 @@ var RESOLVER_SCHEMA = {
   },
   epoch: { type: "integer", nullable: false },
   fenced: { type: "boolean", nullable: false },
-  agent_id: { type: "uuid", nullable: false },
+  // The opaque agents.id text, e.g. "mnm-<hex>" (ruling 33.29), never a uuid.
+  agent_id: { type: "string", nullable: false },
   home_cell: { type: "enum", nullable: false, values: CANONICAL_CELL_IDS },
   posture: {
     type: "enum",
@@ -434,6 +435,15 @@ var GUARD_STATE_OK = Object.freeze({ spend_usd: 0 });
 var GUARD_STATE_FAULT = Object.freeze({
   spend_usd: "unparseable"
 });
+function guardStateV1Ok(guard) {
+  if (guard === null || guard.schema_version !== 1) return false;
+  return [guard.turns, guard.spend_usd].every(
+    (v) => typeof v === "number" && Number.isFinite(v) && v >= 0
+  );
+}
+function unattendedPoolEligible(d) {
+  return d.durable_mode === "locked" && d.pool === true && !d.fenced && d.lease_executor_id !== null && (d.effective_state === "running" || d.effective_state === "resuming") && d.sealed && Number.isSafeInteger(d.charter_version) && d.charter_version >= 1;
+}
 function nofenceHonoured(durableAdmit) {
   return durableAdmit === NOFENCE_ADMIT_VALUE;
 }
@@ -480,6 +490,12 @@ function isUnchainedCountTokens(r) {
   return r.method === "POST" && isCountTokensPath(r.path) && !r.chain;
 }
 var RESOLVER_FAULT = "fault";
+var INBOX_OPEN_MAX = 64;
+var INBOX_SHA_RE = /^[0-9a-f]{64}$/;
+function unattendedHomedInboxEligible(d, inboxSha2) {
+  const open = d.inbox_open;
+  return d.durable_mode === "locked" && d.pool !== true && !d.fenced && d.lease_executor_id !== null && (d.effective_state === "running" || d.effective_state === "resuming") && d.sealed && Number.isSafeInteger(d.charter_version) && d.charter_version >= 1 && d.host_unattended === true && typeof inboxSha2 === "string" && INBOX_SHA_RE.test(inboxSha2) && Array.isArray(open) && open.length <= INBOX_OPEN_MAX && open.includes(inboxSha2);
+}
 function admit(input) {
   const fenceSource = nofenceHonoured(input.durableAdmit) ? "nofence" : "fresh";
   const posture = input.posture ?? "unattended";
@@ -519,6 +535,24 @@ function admit(input) {
       writes: false
     };
   if (posture === "unattended") {
+    if (unattendedPoolEligible(d) || unattendedHomedInboxEligible(d, input.inboxSha)) {
+      if (guardStateV1Ok(d.guard_state))
+        return {
+          kind: "admit",
+          step: "admit",
+          posture: "unattended",
+          guardFault: false,
+          fenceSource,
+          helloTransition: false
+        };
+      return {
+        kind: "refuse",
+        step: "posture",
+        code: "durable_guard_unavailable",
+        posture,
+        fenceSource
+      };
+    }
     return {
       kind: "refuse",
       step: "posture",
@@ -670,6 +704,120 @@ function admissionTruthTable() {
   }
   return out;
 }
+var GUARD_STATE_V1_OK = Object.freeze({
+  schema_version: 1,
+  turns: 0,
+  spend_usd: 0
+});
+var UNATTENDED_POOL_VECTORS = Object.freeze([
+  { name: "all hold: admitted unattended", over: {}, nofence: false, outcome: "admit" },
+  {
+    name: "all hold, resuming: admitted, no hello",
+    over: { effective_state: "resuming", state: "resuming" },
+    nofence: false,
+    outcome: "admit"
+  },
+  {
+    name: "(b) pool absent",
+    over: { pool: void 0 },
+    nofence: false,
+    outcome: "durable_unattended_unavailable"
+  },
+  {
+    name: "(b) pool false",
+    over: { pool: false },
+    nofence: false,
+    outcome: "durable_unattended_unavailable"
+  },
+  {
+    name: "(c) fenced key under nofence",
+    over: { fenced: true },
+    nofence: true,
+    outcome: "durable_unattended_unavailable"
+  },
+  {
+    name: "(c) no lease executor",
+    over: { lease_executor_id: null },
+    nofence: false,
+    outcome: "durable_unattended_unavailable"
+  },
+  {
+    name: "(c) lease lapsed (detached)",
+    over: { effective_state: "detached" },
+    nofence: false,
+    outcome: "durable_unattended_unavailable"
+  },
+  {
+    name: "(d) not sealed",
+    over: { sealed: false },
+    nofence: false,
+    outcome: "durable_unattended_unavailable"
+  },
+  {
+    name: "(d) no charter version",
+    over: { charter_version: null },
+    nofence: false,
+    outcome: "durable_unattended_unavailable"
+  },
+  {
+    name: "(d) charter version 0",
+    over: { charter_version: 0 },
+    nofence: false,
+    outcome: "durable_unattended_unavailable"
+  },
+  {
+    name: "(d) charter version not an integer",
+    over: { charter_version: 1.5 },
+    nofence: false,
+    outcome: "durable_unattended_unavailable"
+  },
+  {
+    name: "(e) guard null",
+    over: { guard_state: null },
+    nofence: false,
+    outcome: "durable_guard_unavailable"
+  },
+  {
+    name: "(e) guard without schema_version",
+    over: { guard_state: { turns: 0, spend_usd: 0 } },
+    nofence: false,
+    outcome: "durable_guard_unavailable"
+  },
+  {
+    name: "(e) guard without turns",
+    over: { guard_state: { schema_version: 1, spend_usd: 0 } },
+    nofence: false,
+    outcome: "durable_guard_unavailable"
+  },
+  {
+    name: "(e) guard turns as a string",
+    over: { guard_state: { schema_version: 1, turns: "0", spend_usd: 0 } },
+    nofence: false,
+    outcome: "durable_guard_unavailable"
+  },
+  {
+    name: "attended on a pool session: unchanged",
+    over: { posture: "attended" },
+    nofence: false,
+    outcome: "admit"
+  }
+]);
+function decideUnattendedPoolVector(v) {
+  const base = {
+    posture: "unattended",
+    pool: true,
+    charter_version: 1,
+    guard_state: { ...GUARD_STATE_V1_OK }
+  };
+  const resolver = { ...fixtureResolver(base), ...v.over };
+  if (v.over.pool === void 0 && "pool" in v.over) delete resolver.pool;
+  return admit({
+    resolver,
+    pinAgentId: FIXTURE_AGENT,
+    posture: resolver.posture,
+    durableAdmit: v.nofence ? NOFENCE_ADMIT_VALUE : void 0
+  });
+}
 var ADMIT_SWEEP_VECTORS_PATH = "src/vectors/admit-sweep-vectors.json";
 var ADMIT_SWEEP_VALUES = Object.freeze({
   durable_mode: ["locked", "tracked", null],
@@ -789,8 +937,122 @@ function admitSweepText(sweep) {
   }
 }
 async function admitSweepDigest(sweep) {
-  const { tuples, text } = admitSweepText(sweep);
-  return { tuples, verdicts_sha256: await sha256Hex(text) };
+  const { tuples, text: text2 } = admitSweepText(sweep);
+  return { tuples, verdicts_sha256: await sha256Hex(text2) };
+}
+var INBOX_SHA_FIXTURE = "ab".repeat(32);
+var HOMED_INBOX_VECTORS = Object.freeze([
+  { name: "all hold: admitted unattended", over: {}, nofence: false, outcome: "admit" },
+  {
+    name: "all hold, resuming: admitted, no hello",
+    over: { effective_state: "resuming", state: "resuming" },
+    nofence: false,
+    outcome: "admit"
+  },
+  {
+    name: "(a) a pool session takes 58, not 60: still admitted",
+    over: { pool: true },
+    nofence: false,
+    outcome: "admit"
+  },
+  {
+    name: "(b) fenced key under nofence",
+    over: { fenced: true },
+    nofence: true,
+    outcome: "durable_unattended_unavailable"
+  },
+  {
+    name: "(b) no lease executor",
+    over: { lease_executor_id: null },
+    nofence: false,
+    outcome: "durable_unattended_unavailable"
+  },
+  {
+    name: "(b) lease lapsed (detached)",
+    over: { effective_state: "detached" },
+    nofence: false,
+    outcome: "durable_unattended_unavailable"
+  },
+  {
+    name: "(c) not sealed",
+    over: { sealed: false },
+    nofence: false,
+    outcome: "durable_unattended_unavailable"
+  },
+  {
+    name: "(c) no charter version",
+    over: { charter_version: null },
+    nofence: false,
+    outcome: "durable_unattended_unavailable"
+  },
+  {
+    name: "(d) host policy or the owner's opt-out says no",
+    over: { host_unattended: false },
+    nofence: false,
+    outcome: "durable_unattended_unavailable"
+  },
+  {
+    name: "(e) no inbox key on the newest entry",
+    over: {},
+    inboxSha: null,
+    nofence: false,
+    outcome: "durable_unattended_unavailable"
+  },
+  {
+    name: "(e) inbox sha not open (acked, dead or never delivered)",
+    over: { inbox_open: ["cd".repeat(32)] },
+    nofence: false,
+    outcome: "durable_unattended_unavailable"
+  },
+  {
+    name: "(e) inbox_open absent",
+    over: { inbox_open: void 0 },
+    nofence: false,
+    outcome: "durable_unattended_unavailable"
+  },
+  {
+    name: "(e) inbox sha malformed",
+    over: { inbox_open: ["AB".repeat(32)] },
+    inboxSha: "AB".repeat(32),
+    nofence: false,
+    outcome: "durable_unattended_unavailable"
+  },
+  {
+    name: "(f) guard null",
+    over: { guard_state: null },
+    nofence: false,
+    outcome: "durable_guard_unavailable"
+  },
+  {
+    name: "(f) guard without schema_version",
+    over: { guard_state: { turns: 0, spend_usd: 0 } },
+    nofence: false,
+    outcome: "durable_guard_unavailable"
+  },
+  {
+    name: "attended on a homed session: unchanged",
+    over: { posture: "attended" },
+    inboxSha: null,
+    nofence: false,
+    outcome: "admit"
+  }
+]);
+function decideHomedInboxVector(v) {
+  const base = {
+    posture: "unattended",
+    charter_version: 1,
+    inbox_open: [INBOX_SHA_FIXTURE],
+    guard_state: { ...GUARD_STATE_V1_OK }
+  };
+  const resolver = { ...fixtureResolver(base), ...v.over };
+  if ("inbox_open" in v.over && v.over.inbox_open === void 0) delete resolver.inbox_open;
+  return admit({
+    resolver,
+    pinAgentId: FIXTURE_AGENT,
+    posture: resolver.posture,
+    durableAdmit: v.nofence ? NOFENCE_ADMIT_VALUE : void 0,
+    inboxSha: "inboxSha" in v ? v.inboxSha : INBOX_SHA_FIXTURE
+  });
 }
 
 // ../shared/durable-contract/src/codes.ts
@@ -952,7 +1214,29 @@ var DURABLE_CODES = {
    * POST ROUTES.int_charter names an unknown session, a hash that is not one of its charter
    * versions, or no charter at all (a malformed body). The gateway refuses admission on it.
    */
-  durable_charter_not_found: { status: 404, surfaces: ["api"], fields: [] }
+  durable_charter_not_found: { status: 404, surfaces: ["api"], fields: [] },
+  // ---- api inbox, S1 amendment 60 (signed off by Wassim 2026-11-02; inbox.ts INBOX_REJECT_CODES) ----
+  /** An agent sender with no live allowlist row for the recipient agent, set by the session's owner. */
+  durable_inbox_not_allowlisted: { status: 403, surfaces: ["api", "cli"], fields: [] },
+  /** The session cannot take inbox work: reason not_locked, ended, unsealed or unattended_off (host_unattended is not true, so §60 (e) could never admit the turn). */
+  durable_inbox_closed: { status: 409, surfaces: ["api", "cli"], fields: ["reason"] },
+  /** INBOX_OPEN_CAP messages are already open (admitted or delivered). */
+  durable_inbox_full: { status: 429, surfaces: ["api", "cli"], fields: ["open", "cap"] },
+  /** A send, allowlist, take or ack body outside its closed shape or limits; field names the first bad key (null: not an object). */
+  durable_inbox_body_invalid: { status: 422, surfaces: ["api", "cli"], fields: ["field"] },
+  /** An ack of a message not delivered to this session at this epoch with this sha. */
+  durable_inbox_not_open: { status: 409, surfaces: ["api"], fields: [] },
+  /** A sender identity or allowlist change the api refuses; reason is one of inbox.ts INBOX_SENDER_INVALID_REASONS. */
+  durable_inbox_sender_invalid: { status: 422, surfaces: ["api", "cli"], fields: ["reason"] },
+  // ---- api questions, S1 amendment 61 (signed off by Wassim 2026-11-02; question.ts) ----
+  /** An ask, poll, release or answer body outside its closed shape or limits; field names the first bad key. */
+  durable_question_body_invalid: { status: 422, surfaces: ["api", "cli"], fields: ["field"] },
+  /** No question with that approval_id on this session. */
+  durable_question_not_found: { status: 404, surfaces: ["api", "cli"], fields: [] },
+  /** The question is no longer open (answered, dismissed, expired); state names which. */
+  durable_question_closed: { status: 409, surfaces: ["api", "cli"], fields: ["state"] },
+  /** An ask while the session's open question is a different one (another question_sha); approval_id and state name it. Nothing is stored. */
+  durable_question_busy: { status: 409, surfaces: ["api", "cli"], fields: ["approval_id", "state"] }
 };
 function isDurableCode(v) {
   return typeof v === "string" && Object.prototype.hasOwnProperty.call(DURABLE_CODES, v);
@@ -1387,6 +1671,23 @@ var M1_CLI_SURFACE = Object.freeze([
   // BACKBONE C4 (line 147: buildDurableLaunchSpec serves 'sessions adopt'); options: C14 spec
   // (`sessions adopt --dry-run --json`, `sessions adopt --own-agent`); ruling 32.33.
   entry(["agent", "sessions", "adopt"], ["--dry-run", "--json", "--own-agent"]),
+  // S1 amendment 61 (signed off by Wassim 2026-11-02): the owner's answer or dismissal of a locked
+  // session's question (own_answer, via coding_agent).
+  entry(["agent", "sessions", "answer"], ["--dismiss", "--json"]),
+  // S1 amendment 61: the session's questions to its owner (own_questions).
+  entry(["agent", "sessions", "questions"], ["--all", "--json"]),
+  // S1 amendment 60 (signed off by Wassim 2026-11-02): the owner door into a locked session's inbox. `send`
+  // posts own_inbox_send (owner credential, or an allowlisted agent's key named by --sender-key-env);
+  // --agent-id/--conversation address a session the caller cannot list (an allowlisted agent).
+  entry(
+    ["agent", "sessions", "send"],
+    ["--agent-id", "--conversation", "--idempotency-key", "--json", "--sender-key-env"]
+  ),
+  // S1 amendment 60: the owner-managed inbox sender allowlist (own_inbox_senders, _sender_add, _sender_remove).
+  entry(["agent", "sessions", "senders"]),
+  entry(["agent", "sessions", "senders", "add"], ["--json", "--label"]),
+  entry(["agent", "sessions", "senders", "list"], ["--json"]),
+  entry(["agent", "sessions", "senders", "remove"], ["--json"]),
   // fixlines.ts launch_spec_change_sole_unlock (`mnemom agent sessions unlock <name>`); C11, C16 and
   // C17 specs; no source names an option; ruling 32.33.
   entry(["agent", "sessions", "unlock"])
@@ -1403,6 +1704,13 @@ var M1_CLI_SURFACE_BUILDERS = Object.freeze({
     "agent lock",
     "agent pause",
     "agent resume",
+    "agent sessions answer",
+    "agent sessions questions",
+    "agent sessions send",
+    "agent sessions senders",
+    "agent sessions senders add",
+    "agent sessions senders list",
+    "agent sessions senders remove",
     "agent sessions unlock"
   ]),
   C2: Object.freeze([
@@ -1775,8 +2083,8 @@ function substitute(template, params) {
 }
 function placeholdersOf(key) {
   const entry2 = FIX_LINES[key];
-  const text = entry2.lead + (isRuled(entry2) ? DONE_CLAUSE : "") + entry2.body;
-  return [...new Set([...text.matchAll(PLACEHOLDER_RE)].map((m) => m[1]))];
+  const text2 = entry2.lead + (isRuled(entry2) ? DONE_CLAUSE : "") + entry2.body;
+  return [...new Set([...text2.matchAll(PLACEHOLDER_RE)].map((m) => m[1]))];
 }
 function renderFixLine(key, ctx) {
   const entry2 = FIX_LINES[key];
@@ -1910,18 +2218,18 @@ var FORBIDDEN_FIX_TOKENS = ["--local", "host breakglass"];
 function lintFixCatalogue(catalogue = FIX_LINES) {
   const out = [];
   for (const [key, entry2] of Object.entries(catalogue)) {
-    const text = entry2.lead + entry2.body;
+    const text2 = entry2.lead + entry2.body;
     for (const tok of FORBIDDEN_FIX_TOKENS) {
-      if (text.includes(tok)) out.push({ key, problem: `forbidden token ${tok}` });
+      if (text2.includes(tok)) out.push({ key, problem: `forbidden token ${tok}` });
     }
     if (entry2.lead.includes(NEW_TOKEN))
       out.push({ key, problem: "--new in the lead escapes the rule" });
-    if (text.includes("mnemom agent done <name>"))
+    if (text2.includes("mnemom agent done <name>"))
       out.push({ key, problem: "done clause restated; the rule adds it" });
-    if (text.includes("config set durable always") && key !== "durable_only_agent") {
+    if (text2.includes("config set durable always") && key !== "durable_only_agent") {
       out.push({ key, problem: "launcher suffix restated; the rule adds it" });
     }
-    const commands = [...text.matchAll(/`([^`]+)`/g)].map((m) => m[1]);
+    const commands = [...text2.matchAll(/`([^`]+)`/g)].map((m) => m[1]);
     if (entry2.kind === "command" && commands.length === 0)
       out.push({ key, problem: "command entry has no command" });
     if (entry2.kind === "informational" && commands.length > 0)
@@ -2422,7 +2730,8 @@ var DURABLE_EVENT_KINDS = [
   "session.ready",
   "session.waiting",
   "session.wait_cleared",
-  "executor.turn_continued"
+  "executor.turn_continued",
+  "inbox.acked"
 ];
 function isDurableEventKind(v) {
   return typeof v === "string" && DURABLE_EVENT_KINDS.includes(v);
@@ -2687,7 +2996,62 @@ var KIND_REFS = {
   "session.wait_cleared": obj({ wait_reason: ENUM(PARKED_ONLY_WAIT_REASONS) }),
   // ---- lead ruling 2026-10-28: the spawn that sent the continue; a separate fact, so
   // executor.spawned's refs stay exactly {spawn_id} ----
-  "executor.turn_continued": obj({ spawn_id: UUID })
+  "executor.turn_continued": obj({ spawn_id: UUID }),
+  // ---- S1 amendment 60 (signed off by Wassim 2026-11-02): the inbox. Content-free: ids, shas, enums ----
+  "inbox.admitted": obj(
+    {
+      inbox_id: UUID,
+      sha: S({ pattern: HEX64_PATTERN, maxLength: 64 }),
+      sender_kind: ENUM(["owner", "agent"]),
+      sender_agent_id: S({ pattern: "^[A-Za-z0-9_-]{1,64}$" }),
+      in_reply_to: UUID
+    },
+    ["inbox_id", "sha", "sender_kind"],
+    [
+      { field: "sender_kind", equals: "agent", require: ["sender_agent_id"] },
+      { field: "sender_kind", equals: "owner", forbid: ["sender_agent_id"] }
+    ]
+  ),
+  "inbox.rejected": obj({
+    reason: ENUM([
+      "not_allowlisted",
+      "not_locked",
+      "ended",
+      "unsealed",
+      "inbox_full",
+      "body_too_large",
+      "body_invalid",
+      "unattended_off"
+    ]),
+    sender_kind: ENUM(["owner", "agent"])
+  }),
+  "inbox.coalesced": obj({ inbox_id: UUID, sha: S({ pattern: HEX64_PATTERN, maxLength: 64 }) }),
+  "inbox.delivered": obj({
+    inbox_id: UUID,
+    sha: S({ pattern: HEX64_PATTERN, maxLength: 64 }),
+    attempt: INT(1)
+  }),
+  "inbox.acked": obj({ inbox_id: UUID, sha: S({ pattern: HEX64_PATTERN, maxLength: 64 }) }),
+  "inbox.reverted": obj({
+    inbox_id: UUID,
+    sha: S({ pattern: HEX64_PATTERN, maxLength: 64 }),
+    reason: ENUM(["unconfirmed", "refused", "undeliverable"])
+  }),
+  "inbox.dead": obj({
+    inbox_id: UUID,
+    sha: S({ pattern: HEX64_PATTERN, maxLength: 64 }),
+    reason: ENUM(["expired", "delivery_limit", "session_ended"])
+  }),
+  // ---- S1 amendment 61 (signed off by Wassim 2026-11-02): questions. Content-free: ids, shas, enums ----
+  "question.asked": obj({
+    approval_id: UUID,
+    question_sha: S({ pattern: HEX64_PATTERN, maxLength: 64 })
+  }),
+  "question.answered": obj({
+    approval_id: UUID,
+    outcome: ENUM(["answered", "dismissed"]),
+    via: ENUM(["coding_agent", "slack", "webhook", "mcp", "device"])
+  })
 };
 function refsSchemaOf(kind) {
   return KIND_REFS[kind] ?? EMPTY;
@@ -2723,10 +3087,10 @@ function validateRefs(kind, refs) {
 }
 function eventDetail(kind, refs) {
   const parts = Object.keys(refs).sort().map((k) => `${k}=${refs[k] === null ? "null" : String(refs[k])}`);
-  const text = [kind, ...parts].join(" ");
-  if (text.length > EVENT_DETAIL_MAX_CHARS)
+  const text2 = [kind, ...parts].join(" ");
+  if (text2.length > EVENT_DETAIL_MAX_CHARS)
     throw new RangeError(`detail over ${EVENT_DETAIL_MAX_CHARS} chars`);
-  return text;
+  return text2;
 }
 var EVENT_DETAIL_RE = /^[a-z_]+\.[a-z_]+( [a-z_]+=[A-Za-z0-9_.:-]+)*$/;
 var idempotencyKeys = {
@@ -2760,9 +3124,9 @@ var EVENT_PREIMAGE_FIELDS = [
   "prev_hash"
 ];
 var TS_RE2 = /^(\d{4}-\d{2}-\d{2})[T ](\d{2}:\d{2}:\d{2})(?:\.(\d{1,6}))?(Z|[+-]00(?::?00)?)$/;
-function canonicalEventTs(ts) {
-  const m = TS_RE2.exec(ts);
-  if (!m) throw new RangeError(`not a UTC timestamp: ${ts}`);
+function canonicalEventTs(ts3) {
+  const m = TS_RE2.exec(ts3);
+  if (!m) throw new RangeError(`not a UTC timestamp: ${ts3}`);
   return `${m[1]}T${m[2]}.${(m[3] ?? "").padEnd(6, "0")}Z`;
 }
 function stampEventTs(epochMs) {
@@ -3314,6 +3678,20 @@ function candidatePosture(entries, schemaKnown = true) {
   const continuation = newest.origin === "task" && newest.source === "system" && newest.producer === ATTENDED_TASK_PRODUCER && !newest.inbox && entries.slice(0, -1).some(attendedHuman);
   return continuation ? "attended" : "unattended";
 }
+var sessionTaskContinuation = (e2) => e2.origin === "task" && e2.source === "system" && e2.producer === ATTENDED_TASK_PRODUCER && !e2.inbox;
+function inboxShaOf(entries) {
+  const newest = entries[entries.length - 1];
+  if (newest === void 0) return null;
+  const own2 = (e2) => e2.inbox && typeof e2.inboxSha === "string" && TURN_HASH_RE.test(e2.inboxSha) ? e2.inboxSha : null;
+  if (newest.inbox) return own2(newest);
+  if (!sessionTaskContinuation(newest)) return null;
+  for (let i = entries.length - 2; i >= 0; i--) {
+    const e2 = entries[i];
+    if (sessionTaskContinuation(e2)) continue;
+    return own2(e2);
+  }
+  return null;
+}
 async function chainIdOf(rootPromptId) {
   if (typeof rootPromptId !== "string" || rootPromptId.length === 0)
     throw new RangeError("root promptId is required");
@@ -3976,8 +4354,8 @@ function parseLaunchSpec(raw) {
 }
 function hasRemoteControl(raw) {
   if (raw === null || typeof raw !== "object") return false;
-  const text = JSON.stringify(raw).toLowerCase();
-  return text.includes("remote_control") || text.includes("remote-control") || text.includes("remotecontrol");
+  const text2 = JSON.stringify(raw).toLowerCase();
+  return text2.includes("remote_control") || text2.includes("remote-control") || text2.includes("remotecontrol");
 }
 async function specHash(spec) {
   return sha256Hex(canonicalJson(spec));
@@ -4206,8 +4584,8 @@ function dekWrapInput(dek) {
   if (dek.length !== DEK_BYTES) throw new RangeError("DEK must be 32 bytes");
   return base64urlEncode(dek);
 }
-function dekFromWrapInput(text) {
-  const b = base64urlDecode(text);
+function dekFromWrapInput(text2) {
+  const b = base64urlDecode(text2);
   return b !== null && b.length === DEK_BYTES ? b : null;
 }
 function newDek(random = (n) => crypto.getRandomValues(new Uint8Array(n))) {
@@ -4235,8 +4613,8 @@ async function sealContract(dek, sessionId, charterVersion, contract, random = (
   );
   return `${ENVELOPE_VERSION}.${base64urlEncode(iv)}.${base64urlEncode(new Uint8Array(ct))}`;
 }
-function parseEnvelope(text) {
-  const parts = text.split(".");
+function parseEnvelope(text2) {
+  const parts = text2.split(".");
   if (parts.length !== 3 || parts[0] !== ENVELOPE_VERSION) return null;
   const iv = base64urlDecode(parts[1]);
   const ct = base64urlDecode(parts[2]);
@@ -4409,10 +4787,10 @@ var CEILINGS = [
 async function splitSealedContract(seal) {
   const known = SEALED_CONTRACT_FIELDS;
   if (Object.keys(seal).some((k) => !known.includes(k))) return null;
-  const text = {};
+  const text2 = {};
   for (const k of ["statement", "requirements", "allowed_paths", "forbidden_paths", "goal_id", "work_card", "shape"])
-    if (seal[k] !== void 0) text[k] = seal[k];
-  const contract = parseContract(text);
+    if (seal[k] !== void 0) text2[k] = seal[k];
+  const contract = parseContract(text2);
   if (contract === null) return null;
   const commitments = {
     statement_hash: await statementHash(contract.statement),
@@ -4488,6 +4866,22 @@ var ROUTES = Object.freeze({
   exec_ready_list: fixed("GET", "executor_key", "/v1/executor/ready"),
   /** Body {oidc_token}; answers a one-lease org-scope executor key or an OIDC_EXCHANGE_REFUSALS refusal. */
   exec_oidc_exchange: fixed("POST", "github_oidc", "/v1/executor/oidc/exchange"),
+  // ---- inbox, executor side (S1 amendment 60) ----
+  /** Content-free summary {admitted, delivered, oldest_admitted_at} (inboxSummaryResponseOk); marks nothing. */
+  exec_inbox: scoped("GET", "executor_key", EXEC_SESSION_PRE, "/inbox"),
+  /** Body {epoch, nonce, limit?}: marks up to limit messages delivered at the live epoch, journals inbox.delivered, answers their delivery text. */
+  exec_inbox_take: scoped("POST", "executor_key", EXEC_SESSION_PRE, "/inbox/take"),
+  /** Body {epoch, nonce, inbox_id, sha}: acks a message delivered at this epoch, journals inbox.acked. */
+  exec_inbox_ack: scoped("POST", "executor_key", EXEC_SESSION_PRE, "/inbox/ack"),
+  /** Body {epoch, nonce, inbox_id, sha, reason}: hands a delivered message back undone (admitted again, or dead at the limit), journals inbox.reverted. */
+  exec_inbox_release: scoped("POST", "executor_key", EXEC_SESSION_PRE, "/inbox/release"),
+  // ---- questions, executor side (S1 amendment 61) ----
+  /** Body {epoch, nonce, tool_use_id, questions}: opens the session's question approval (or returns it when the open one has this question_sha), journals question.asked. */
+  exec_question: scoped("POST", "executor_key", EXEC_SESSION_PRE, "/questions"),
+  /** Body {epoch, nonce, approval_id}: the question's state; an answer is handed over once (marked taken). */
+  exec_question_poll: scoped("POST", "executor_key", EXEC_SESSION_PRE, "/questions/poll"),
+  /** Body {epoch, nonce, approval_id}: the seat stopped waiting; the answer (now or later) goes to the inbox. */
+  exec_question_release: scoped("POST", "executor_key", EXEC_SESSION_PRE, "/questions/release"),
   // ---- owner session verbs (ruling 33.22) ----
   own_lock: scoped("POST", "owner", OWNER_SESSION_PRE, "/lock"),
   own_unlock: scoped("POST", "owner", OWNER_SESSION_PRE, "/unlock"),
@@ -4498,6 +4892,22 @@ var ROUTES = Object.freeze({
   own_amend: scoped("POST", "owner", OWNER_SESSION_PRE, "/amend"),
   own_fail: scoped("POST", "owner", OWNER_SESSION_PRE, "/fail"),
   own_events: scoped("GET", "owner", OWNER_SESSION_PRE, "/events"),
+  // ---- inbox, owner side (S1 amendment 60) ----
+  /** Body {text, idempotency_key} (inboxSendBodyOk); answer INBOX_SEND_RESPONSE or an INBOX_REJECT_CODES refusal. */
+  own_inbox_send: scoped("POST", "inbox_sender", OWNER_SESSION_PRE, "/inbox"),
+  /** {messages: [INBOX_LIST_ITEM, ...]}, newest first, content-free. */
+  own_inbox_list: scoped("GET", "owner", OWNER_SESSION_PRE, "/inbox"),
+  /** {recipient_agent_id, senders: [INBOX_SENDER_ITEM, ...]}: the session's agent's live allowlist. */
+  own_inbox_senders: scoped("GET", "owner", OWNER_SESSION_PRE, "/inbox/senders"),
+  /** Body {agent_id, label?}: allowlists one of the owner's own agents in the same org. */
+  own_inbox_sender_add: scoped("POST", "owner", OWNER_SESSION_PRE, "/inbox/senders"),
+  /** Body {agent_id}: revokes it (the row keeps revoked_at and revoked_by). */
+  own_inbox_sender_remove: scoped("DELETE", "owner", OWNER_SESSION_PRE, "/inbox/senders"),
+  // ---- questions, owner side (S1 amendment 61) ----
+  /** {questions: [QUESTION_LIST_ITEM, ...]}, newest first; the owner reads the question text. */
+  own_questions: scoped("GET", "owner", OWNER_SESSION_PRE, "/questions"),
+  /** Body {approval_id, via, answers | dismiss: true}: answers or dismisses, journals question.answered. */
+  own_answer: scoped("POST", "owner", OWNER_SESSION_PRE, "/questions/answer"),
   // ---- gateway internal ----
   int_events: fixed("POST", "internal", GATEWAY_EVENTS_ROUTE),
   int_arm: fixed("GET", "internal", ARM_ROUTE),
@@ -4624,6 +5034,399 @@ function gatewayEventsBodyOk(v) {
   return validateRefs(kind, v.refs ?? {});
 }
 
+// ../shared/durable-contract/src/inbox.ts
+var INBOX_BODY_MAX_BYTES = 16384;
+var INBOX_TTL_S = 7 * 24 * 60 * 60;
+var INBOX_DELIVERY_LIMIT = 5;
+var INBOX_TAKE_LIMIT_MAX = 8;
+var INBOX_LIST_LIMIT = 100;
+var INBOX_SENDERS_MAX = 32;
+var INBOX_OPEN_CAP = INBOX_OPEN_MAX;
+var INBOX_REOFFER_S = 15 * 60;
+var INBOX_IDEMPOTENCY_KEY_RE = /^[A-Za-z0-9_.:-]{1,200}$/;
+var INBOX_AGENT_ID_RE = /^[A-Za-z0-9_-]{1,64}$/;
+var INBOX_SENDER_LABEL_RE = /^[ -Z\\^-~]{1,128}$/;
+var INBOX_STATUSES = ["admitted", "delivered", "acked", "dead"];
+var INBOX_SENDER_KINDS = ["owner", "agent"];
+var INBOX_REJECT_REASONS = [
+  "not_allowlisted",
+  "not_locked",
+  "ended",
+  "unsealed",
+  "inbox_full",
+  "body_too_large",
+  "body_invalid",
+  "unattended_off"
+];
+var INBOX_DEAD_REASONS = ["expired", "delivery_limit", "session_ended"];
+var INBOX_RELEASE_REASONS = ["unconfirmed", "refused", "undeliverable"];
+var INBOX_SENDER_INVALID_REASONS = [
+  "sender",
+  "on_behalf_of",
+  "agent_id",
+  "label",
+  "self",
+  "not_found",
+  "other_org",
+  "not_owned",
+  "too_many"
+];
+var INBOX_REJECT_CODES = Object.freeze({
+  not_allowlisted: { code: "durable_inbox_not_allowlisted", status: 403 },
+  not_locked: { code: "durable_inbox_closed", status: 409 },
+  ended: { code: "durable_inbox_closed", status: 409 },
+  unsealed: { code: "durable_inbox_closed", status: 409 },
+  inbox_full: { code: "durable_inbox_full", status: 429 },
+  body_too_large: { code: "durable_inbox_body_invalid", status: 422 },
+  body_invalid: { code: "durable_inbox_body_invalid", status: 422 },
+  unattended_off: { code: "durable_inbox_closed", status: 409 }
+});
+var A60_EMITTED_KINDS = [
+  "inbox.admitted",
+  "inbox.rejected",
+  "inbox.coalesced",
+  "inbox.delivered",
+  "inbox.acked",
+  "inbox.reverted",
+  "inbox.dead"
+];
+function inboxShaPreimage(m) {
+  return canonicalJson({
+    v: 1,
+    session_id: m.session_id,
+    sender_kind: m.sender_kind,
+    sender_agent_id: m.sender_agent_id ?? null,
+    on_behalf_of: m.on_behalf_of ?? null,
+    in_reply_to: m.in_reply_to ?? null,
+    body: m.body
+  });
+}
+async function inboxSha(m) {
+  return sha256Hex(inboxShaPreimage(m));
+}
+var INBOX_BODY_CONTROL_RE = /[\u0000-\u0008\u000b\u000c\u000e-\u001f\u007f-\u009f]/;
+function inboxBodyOk(body) {
+  if (typeof body !== "string" || body.length === 0 || INBOX_BODY_CONTROL_RE.test(body))
+    return false;
+  return utf8(body).length <= INBOX_BODY_MAX_BYTES;
+}
+var INBOX_MARKER_RE = /^\[mnemom inbox ([0-9a-f]{64})\]/;
+function inboxDeliveryText(m) {
+  if (!HEX64_RE.test(m.sha)) throw new RangeError("inbox sha must be 64 lowercase hex");
+  let who = "the owner";
+  if (m.sender_kind === "agent") {
+    const label = m.sender_label ?? "";
+    if (!INBOX_SENDER_LABEL_RE.test(label)) throw new RangeError("inbox sender label invalid");
+    who = `agent ${label} on behalf of the owner`;
+  }
+  if (m.in_reply_to !== null && !UUID_RE.test(m.in_reply_to))
+    throw new RangeError("in_reply_to must be a lowercase uuid");
+  const reply = m.in_reply_to === null ? "" : ` (answer to question ${m.in_reply_to})`;
+  return `[mnemom inbox ${m.sha}] from ${who}${reply}
+
+${m.body}`;
+}
+function inboxMarkerOf(text2) {
+  const nl = text2.indexOf("\n");
+  return INBOX_MARKER_RE.exec(nl < 0 ? text2 : text2.slice(0, nl))?.[1] ?? null;
+}
+var isObj2 = (v) => v !== null && typeof v === "object" && !Array.isArray(v);
+var keysExactly2 = (o, keys) => Object.keys(o).length === keys.length && keys.every((k) => k in o);
+var keysWithin = (o, required, optional) => required.every((k) => k in o) && Object.keys(o).every((k) => required.includes(k) || optional.includes(k));
+var str = (v, re) => typeof v === "string" && re.test(v);
+var uuid2 = (v, nullable = false) => fieldOk({ type: "uuid", nullable }, v);
+var ts = (v, nullable = false) => fieldOk({ type: "timestamp", nullable }, v);
+var int = (v, min = 0) => Number.isSafeInteger(v) && v >= min;
+var oneOf = (v, values) => typeof v === "string" && values.includes(v);
+var agentId = (v) => str(v, INBOX_AGENT_ID_RE);
+var nonEmpty2 = (v) => typeof v === "string" && v.length > 0;
+var INBOX_SEND_BODY_KEYS = ["text", "idempotency_key"];
+function inboxSendBodyOk(v) {
+  return isObj2(v) && keysExactly2(v, INBOX_SEND_BODY_KEYS) && inboxBodyOk(v.text) && str(v.idempotency_key, INBOX_IDEMPOTENCY_KEY_RE);
+}
+var INBOX_SEND_RESPONSE = Object.freeze({
+  inbox_id: "uuid",
+  sha: "hex64",
+  status: "inbox_status",
+  coalesced: "boolean",
+  deduped: "boolean",
+  sender_kind: "inbox_sender_kind",
+  sender_agent_id: "agent_id|null",
+  on_behalf_of: "string|null",
+  expires_at: "timestamp"
+});
+var senderOk = (v) => oneOf(v.sender_kind, INBOX_SENDER_KINDS) && (v.sender_kind === "owner" ? v.sender_agent_id === null && v.on_behalf_of === null : agentId(v.sender_agent_id) && nonEmpty2(v.on_behalf_of));
+function inboxSendResponseOk(v) {
+  return isObj2(v) && keysExactly2(v, Object.keys(INBOX_SEND_RESPONSE)) && uuid2(v.inbox_id) && str(v.sha, HEX64_RE) && oneOf(v.status, INBOX_STATUSES) && typeof v.coalesced === "boolean" && typeof v.deduped === "boolean" && senderOk(v) && ts(v.expires_at);
+}
+var INBOX_LIST_ITEM = Object.freeze({
+  inbox_id: "uuid",
+  sha: "hex64",
+  status: "inbox_status",
+  sender_kind: "inbox_sender_kind",
+  sender_agent_id: "agent_id|null",
+  on_behalf_of: "string|null",
+  in_reply_to: "uuid|null",
+  body_bytes: "integer>=1",
+  delivery_count: "integer",
+  dead_reason: "inbox_dead_reason|null",
+  created_at: "timestamp",
+  delivered_at: "timestamp|null",
+  acked_at: "timestamp|null",
+  expires_at: "timestamp"
+});
+function inboxListItemOk(v) {
+  return isObj2(v) && keysExactly2(v, Object.keys(INBOX_LIST_ITEM)) && uuid2(v.inbox_id) && str(v.sha, HEX64_RE) && oneOf(v.status, INBOX_STATUSES) && senderOk(v) && uuid2(v.in_reply_to, true) && int(v.body_bytes, 1) && v.body_bytes <= INBOX_BODY_MAX_BYTES && int(v.delivery_count) && (v.status === "dead" ? oneOf(v.dead_reason, INBOX_DEAD_REASONS) : v.dead_reason === null) && ts(v.created_at) && ts(v.delivered_at, true) && ts(v.acked_at, true) && ts(v.expires_at);
+}
+function inboxListResponseOk(v) {
+  return isObj2(v) && keysExactly2(v, ["messages"]) && Array.isArray(v.messages) && v.messages.length <= INBOX_LIST_LIMIT && v.messages.every(inboxListItemOk);
+}
+var INBOX_SENDER_ADD_BODY_KEYS = ["agent_id", "label"];
+function inboxSenderAddBodyOk(v) {
+  return isObj2(v) && keysWithin(v, ["agent_id"], ["label"]) && str(v.agent_id, INBOX_AGENT_ID_RE) && (!("label" in v) || str(v.label, INBOX_SENDER_LABEL_RE));
+}
+var INBOX_SENDER_REMOVE_BODY_KEYS = ["agent_id"];
+function inboxSenderRemoveBodyOk(v) {
+  return isObj2(v) && keysExactly2(v, INBOX_SENDER_REMOVE_BODY_KEYS) && str(v.agent_id, INBOX_AGENT_ID_RE);
+}
+var INBOX_SENDER_ITEM = Object.freeze({
+  sender_agent_id: "agent_id",
+  label: "label|null",
+  added_by: "string|null",
+  created_at: "timestamp"
+});
+function inboxSenderItemOk(v) {
+  return isObj2(v) && keysExactly2(v, Object.keys(INBOX_SENDER_ITEM)) && agentId(v.sender_agent_id) && (v.label === null || str(v.label, INBOX_SENDER_LABEL_RE)) && (v.added_by === null || nonEmpty2(v.added_by)) && ts(v.created_at);
+}
+function inboxSendersResponseOk(v) {
+  return isObj2(v) && keysExactly2(v, ["recipient_agent_id", "senders"]) && agentId(v.recipient_agent_id) && Array.isArray(v.senders) && v.senders.length <= INBOX_SENDERS_MAX && v.senders.every(inboxSenderItemOk);
+}
+function inboxSenderChangeResponseOk(v) {
+  return isObj2(v) && keysExactly2(v, ["recipient_agent_id", "sender_agent_id", "changed"]) && agentId(v.recipient_agent_id) && agentId(v.sender_agent_id) && v.recipient_agent_id !== v.sender_agent_id && typeof v.changed === "boolean";
+}
+function inboxSummaryResponseOk(v) {
+  return isObj2(v) && keysExactly2(v, ["admitted", "delivered", "oldest_admitted_at"]) && int(v.admitted) && int(v.delivered) && (v.admitted === 0 ? v.oldest_admitted_at === null : ts(v.oldest_admitted_at));
+}
+var INBOX_TAKE_BODY_KEYS = ["epoch", "nonce", "limit"];
+function inboxTakeBodyOk(v) {
+  return isObj2(v) && keysWithin(v, ["epoch", "nonce"], ["limit"]) && int(v.epoch) && nonEmpty2(v.nonce) && (!("limit" in v) || int(v.limit, 1) && v.limit <= INBOX_TAKE_LIMIT_MAX);
+}
+var INBOX_TAKE_ITEM = Object.freeze({
+  inbox_id: "uuid",
+  sha: "hex64",
+  text: "string",
+  attempt: "integer>=1",
+  sender_kind: "inbox_sender_kind",
+  sender_agent_id: "agent_id|null",
+  on_behalf_of: "string|null",
+  in_reply_to: "uuid|null",
+  created_at: "timestamp"
+});
+function inboxTakeItemOk(v) {
+  return isObj2(v) && keysExactly2(v, Object.keys(INBOX_TAKE_ITEM)) && uuid2(v.inbox_id) && str(v.sha, HEX64_RE) && typeof v.text === "string" && inboxMarkerOf(v.text) === v.sha && int(v.attempt, 1) && v.attempt <= INBOX_DELIVERY_LIMIT && senderOk(v) && uuid2(v.in_reply_to, true) && ts(v.created_at);
+}
+function inboxTakeResponseOk(v) {
+  return isObj2(v) && keysExactly2(v, ["messages"]) && Array.isArray(v.messages) && v.messages.length <= INBOX_TAKE_LIMIT_MAX && v.messages.every(inboxTakeItemOk);
+}
+var INBOX_ACK_BODY_KEYS = ["epoch", "nonce", "inbox_id", "sha"];
+function inboxAckBodyOk(v) {
+  return isObj2(v) && keysExactly2(v, INBOX_ACK_BODY_KEYS) && int(v.epoch) && nonEmpty2(v.nonce) && uuid2(v.inbox_id) && str(v.sha, HEX64_RE);
+}
+function inboxAckResponseOk(v) {
+  return isObj2(v) && keysExactly2(v, ["inbox_id", "sha", "status", "deduped"]) && uuid2(v.inbox_id) && str(v.sha, HEX64_RE) && v.status === "acked" && typeof v.deduped === "boolean";
+}
+var INBOX_RELEASE_BODY_KEYS = ["epoch", "nonce", "inbox_id", "sha", "reason"];
+function inboxReleaseBodyOk(v) {
+  return isObj2(v) && keysExactly2(v, INBOX_RELEASE_BODY_KEYS) && int(v.epoch) && nonEmpty2(v.nonce) && uuid2(v.inbox_id) && str(v.sha, HEX64_RE) && oneOf(v.reason, INBOX_RELEASE_REASONS);
+}
+function inboxReleaseResponseOk(v) {
+  return isObj2(v) && keysExactly2(v, ["inbox_id", "sha", "status"]) && uuid2(v.inbox_id) && str(v.sha, HEX64_RE) && (v.status === "admitted" || v.status === "dead");
+}
+var inboxIdempotencyKeys = {
+  admitted: (inboxId) => `inbox:${inboxId}:admitted`,
+  coalesced: (inboxId, idempotencyKey) => `inbox:${inboxId}:coalesced:${idempotencyKey}`,
+  /**
+   * A refused send: keyed on the caller's idempotency_key when it is well-formed, else on the api's
+   * own request id (a body_invalid refusal may carry no usable key).
+   */
+  rejected: (sessionId, idempotencyKey, requestId) => typeof idempotencyKey === "string" && INBOX_IDEMPOTENCY_KEY_RE.test(idempotencyKey) ? `inbox:${sessionId}:rejected:${idempotencyKey}` : `inbox:${sessionId}:rejected:request:${requestId}`,
+  delivered: (inboxId, epoch, attempt) => `inbox:${inboxId}:delivered:${epoch}:${attempt}`,
+  acked: (inboxId) => `inbox:${inboxId}:acked`,
+  reverted: (inboxId, epoch, attempt) => `inbox:${inboxId}:reverted:${epoch}:${attempt}`,
+  dead: (inboxId) => `inbox:${inboxId}:dead`
+};
+
+// ../shared/durable-contract/src/question.ts
+var QUESTION_MAX_QUESTIONS = 4;
+var QUESTION_MIN_OPTIONS = 2;
+var QUESTION_MAX_OPTIONS = 4;
+var QUESTION_TEXT_MAX_BYTES = 2048;
+var QUESTION_HEADER_MAX_BYTES = 64;
+var QUESTION_LABEL_MAX_BYTES = 256;
+var QUESTION_DESCRIPTION_MAX_BYTES = 2048;
+var QUESTION_ANSWER_MAX_BYTES = 4096;
+var QUESTION_BODY_MAX_BYTES = 16384;
+var QUESTION_APPROVAL_TTL_S = 24 * 60 * 60;
+var QUESTION_LIST_LIMIT = 20;
+var QUESTION_TOOL_USE_ID_RE = /^[A-Za-z0-9_-]{1,128}$/;
+var QUESTION_RECOMMENDED_SUFFIX = "(Recommended)";
+var QUESTION_ANSWER_VIAS = ["coding_agent", "slack", "webhook", "mcp", "device"];
+var QUESTION_OUTCOMES = ["answered", "dismissed"];
+var QUESTION_STATES = ["open", "answered", "dismissed", "expired", "handed_off"];
+var A61_EMITTED_KINDS = ["question.asked", "question.answered"];
+var QUESTION_HANDOFF_REASON = "This question is now with your owner. End your turn now without guessing; the owner's answer will arrive as your next message.";
+var QUESTION_DISMISSED_REASON = "Your owner dismissed this question without answering. Decide without it, or ask differently.";
+var isObj3 = (v) => v !== null && typeof v === "object" && !Array.isArray(v);
+var keysExactly3 = (o, keys) => Object.keys(o).length === keys.length && keys.every((k) => k in o);
+var keysWithin2 = (o, required, optional) => required.every((k) => k in o) && Object.keys(o).every((k) => required.includes(k) || optional.includes(k));
+var text = (v, min, max) => typeof v === "string" && !v.includes("\0") && utf8(v).length >= min && utf8(v).length <= max;
+var uuid3 = (v, nullable = false) => fieldOk({ type: "uuid", nullable }, v);
+var ts2 = (v, nullable = false) => fieldOk({ type: "timestamp", nullable }, v);
+var int2 = (v, min = 0) => Number.isSafeInteger(v) && v >= min;
+var nonEmpty3 = (v) => typeof v === "string" && v.length > 0;
+var oneOf2 = (v, values) => typeof v === "string" && values.includes(v);
+function optionOk(v) {
+  return isObj3(v) && keysExactly3(v, ["label", "description"]) && text(v.label, 1, QUESTION_LABEL_MAX_BYTES) && text(v.description, 0, QUESTION_DESCRIPTION_MAX_BYTES);
+}
+function questionItemOk(v) {
+  if (!isObj3(v) || !keysExactly3(v, ["question", "header", "options", "multiSelect"]) || !text(v.question, 1, QUESTION_TEXT_MAX_BYTES) || !text(v.header, 1, QUESTION_HEADER_MAX_BYTES) || typeof v.multiSelect !== "boolean" || !Array.isArray(v.options) || v.options.length < QUESTION_MIN_OPTIONS || v.options.length > QUESTION_MAX_OPTIONS || !v.options.every(optionOk))
+    return false;
+  const labels = v.options.map((o) => o.label);
+  return new Set(labels).size === labels.length;
+}
+function questionsOk(v) {
+  if (!Array.isArray(v) || v.length < 1 || v.length > QUESTION_MAX_QUESTIONS) return false;
+  if (!v.every(questionItemOk)) return false;
+  const texts = v.map((q) => q.question);
+  if (new Set(texts).size !== texts.length) return false;
+  return utf8(canonicalJson(v)).length <= QUESTION_BODY_MAX_BYTES;
+}
+function normalizeQuestions(v) {
+  if (!Array.isArray(v)) return null;
+  const out = v.map((q) => {
+    const r = isObj3(q) ? q : {};
+    const opts = Array.isArray(r.options) ? r.options : [];
+    return {
+      question: r.question,
+      header: r.header,
+      options: opts.map((o) => {
+        const x = isObj3(o) ? o : {};
+        return { label: x.label, description: x.description ?? "" };
+      }),
+      multiSelect: r.multiSelect ?? false
+    };
+  });
+  return questionsOk(out) ? out : null;
+}
+function recommendedOption(q) {
+  const i = q.options.findIndex((o) => o.label.trimEnd().endsWith(QUESTION_RECOMMENDED_SUFFIX));
+  return i < 0 ? null : i;
+}
+function questionShaPreimage(m) {
+  return canonicalJson({
+    v: 1,
+    session_id: m.session_id,
+    tool_use_id: m.tool_use_id,
+    questions: m.questions
+  });
+}
+async function questionSha(m) {
+  return sha256Hex(questionShaPreimage(m));
+}
+function answersOk(answers, questions) {
+  return isObj3(answers) && keysExactly3(
+    answers,
+    questions.map((q) => q.question)
+  ) && Object.values(answers).every((a) => text(a, 1, QUESTION_ANSWER_MAX_BYTES));
+}
+function answersShapeOk(answers) {
+  return isObj3(answers) && Object.keys(answers).length >= 1 && Object.keys(answers).length <= QUESTION_MAX_QUESTIONS && Object.keys(answers).every((k) => text(k, 1, QUESTION_TEXT_MAX_BYTES)) && Object.values(answers).every((a) => text(a, 1, QUESTION_ANSWER_MAX_BYTES));
+}
+function answerFromChoice(q, choice) {
+  const c = choice.trim();
+  const byNumber = (s) => {
+    if (!/^[1-9][0-9]*$/.test(s)) return null;
+    const o = q.options[Number(s) - 1];
+    return o ? o.label : null;
+  };
+  const parts = q.multiSelect ? c.split(",").map((p) => p.trim()) : [c];
+  if (parts.length > 0 && parts.every((p) => byNumber(p) !== null))
+    return parts.map((p) => byNumber(p)).join(", ");
+  const norm = (s) => s.trim().replace(QUESTION_RECOMMENDED_SUFFIX, "").trim().toLowerCase();
+  const hit = q.options.find((o) => norm(o.label) === norm(c));
+  return hit ? hit.label : c;
+}
+function questionAnswerInboxBody(questions, answers) {
+  const lines = ["Your owner answered your question:"];
+  for (const q of questions) {
+    lines.push("", `Q: ${q.question}`, `A: ${answers[q.question] ?? ""}`);
+  }
+  return lines.join("\n");
+}
+var QUESTION_ASK_BODY_KEYS = ["epoch", "nonce", "tool_use_id", "questions"];
+function questionAskBodyOk(v) {
+  return isObj3(v) && keysExactly3(v, QUESTION_ASK_BODY_KEYS) && int2(v.epoch) && nonEmpty3(v.nonce) && typeof v.tool_use_id === "string" && QUESTION_TOOL_USE_ID_RE.test(v.tool_use_id) && questionsOk(v.questions);
+}
+function questionAskResponseOk(v) {
+  return isObj3(v) && keysExactly3(v, ["approval_id", "question_sha", "created", "expires_at"]) && uuid3(v.approval_id) && typeof v.question_sha === "string" && HEX64_RE.test(v.question_sha) && typeof v.created === "boolean" && ts2(v.expires_at);
+}
+async function questionAskMatches(answer, ask) {
+  return answer.question_sha === await questionSha(ask);
+}
+var QUESTION_POLL_BODY_KEYS = ["epoch", "nonce", "approval_id"];
+function questionPollBodyOk(v) {
+  return isObj3(v) && keysExactly3(v, QUESTION_POLL_BODY_KEYS) && int2(v.epoch) && nonEmpty3(v.nonce) && uuid3(v.approval_id);
+}
+function questionPollResponseOk(v) {
+  return isObj3(v) && keysExactly3(v, ["approval_id", "state", "answers"]) && uuid3(v.approval_id) && oneOf2(v.state, QUESTION_STATES) && (v.state === "answered" ? answersShapeOk(v.answers) : v.answers === null);
+}
+function questionReleaseResponseOk(v) {
+  return isObj3(v) && keysExactly3(v, ["approval_id", "state", "inbox_id"]) && uuid3(v.approval_id) && oneOf2(v.state, QUESTION_STATES) && uuid3(v.inbox_id, true);
+}
+var QUESTION_LIST_ITEM = Object.freeze({
+  approval_id: "uuid",
+  state: "question_state",
+  questions: "questions",
+  recommended: "(integer|null)[]",
+  answers: "answers|null",
+  answered_via: "question_answer_via|null",
+  created_at: "timestamp",
+  expires_at: "timestamp",
+  answered_at: "timestamp|null"
+});
+function questionListItemOk(v) {
+  if (!isObj3(v) || !keysExactly3(v, Object.keys(QUESTION_LIST_ITEM))) return false;
+  if (!uuid3(v.approval_id) || !oneOf2(v.state, QUESTION_STATES) || !questionsOk(v.questions))
+    return false;
+  const qs = v.questions;
+  if (!Array.isArray(v.recommended) || v.recommended.length !== qs.length || !v.recommended.every((r, i) => r === recommendedOption(qs[i])))
+    return false;
+  const answered = v.answers !== null;
+  if (answered && !answersOk(v.answers, qs)) return false;
+  if (answered !== (v.answered_via !== null)) return false;
+  if (answered && !oneOf2(v.answered_via, QUESTION_ANSWER_VIAS)) return false;
+  return ts2(v.created_at) && ts2(v.expires_at) && ts2(v.answered_at, true);
+}
+function questionListResponseOk(v) {
+  return isObj3(v) && keysExactly3(v, ["questions"]) && Array.isArray(v.questions) && v.questions.length <= QUESTION_LIST_LIMIT && v.questions.every(questionListItemOk);
+}
+var QUESTION_ANSWER_BODY_KEYS = ["approval_id", "via", "answers", "dismiss"];
+function questionAnswerBodyOk(v) {
+  if (!isObj3(v) || !keysWithin2(v, ["approval_id", "via"], ["answers", "dismiss"])) return false;
+  if (!uuid3(v.approval_id) || !oneOf2(v.via, QUESTION_ANSWER_VIAS)) return false;
+  if ("answers" in v === "dismiss" in v) return false;
+  return "dismiss" in v ? v.dismiss === true : answersShapeOk(v.answers);
+}
+var QUESTION_DELIVERIES = ["live", "inbox", "none"];
+function questionAnswerResponseOk(v) {
+  return isObj3(v) && keysExactly3(v, ["approval_id", "outcome", "delivery", "inbox_id"]) && uuid3(v.approval_id) && oneOf2(v.outcome, QUESTION_OUTCOMES) && oneOf2(v.delivery, QUESTION_DELIVERIES) && (v.delivery === "inbox" ? uuid3(v.inbox_id) : v.inbox_id === null) && (v.outcome === "dismissed" ? v.delivery === "none" : v.delivery !== "none");
+}
+var questionIdempotencyKeys = {
+  asked: (approvalId) => `question:${approvalId}:asked`,
+  answered: (approvalId) => `question:${approvalId}:answered`
+};
+var QUESTION_ID_RE = UUID_RE;
+
 // ../shared/durable-contract/src/journal-approvals.ts
 var JOURNAL_APPROVAL_KINDS = ["approval.resolved", "approval.consumed"];
 var idOf = (e2) => e2.refs !== null && typeof e2.refs.approval_id === "string" ? e2.refs.approval_id : null;
@@ -5360,7 +6163,53 @@ var SEAL_VECTORS = {
     "hash": "5a3bb041c155d67e50d18ee9afb0e6903f7a64988c881ab6373d3447fd5906f5"
   }
 };
+var INBOX_SHA_VECTORS = [
+  {
+    identity: {
+      session_id: "11111111-2222-4333-8444-555555555555",
+      sender_kind: "owner",
+      sender_agent_id: null,
+      on_behalf_of: null,
+      in_reply_to: null,
+      body: "Please rebase PR 3220 and rerun the contract tests."
+    },
+    sender_label: null,
+    preimage: '{"body":"Please rebase PR 3220 and rerun the contract tests.","in_reply_to":null,"on_behalf_of":null,"sender_agent_id":null,"sender_kind":"owner","session_id":"11111111-2222-4333-8444-555555555555","v":1}',
+    sha: "87fc04e971ee9fde7c3db3536772f4a7402c30a911111eff9fb37cbd3927c72f",
+    text: "[mnemom inbox 87fc04e971ee9fde7c3db3536772f4a7402c30a911111eff9fb37cbd3927c72f] from the owner\n\nPlease rebase PR 3220 and rerun the contract tests."
+  },
+  {
+    identity: {
+      session_id: "11111111-2222-4333-8444-555555555555",
+      sender_kind: "agent",
+      sender_agent_id: "mnm-chief01",
+      on_behalf_of: "user_owner_1",
+      in_reply_to: null,
+      body: "Wassim asks: status on the inbox migration?"
+    },
+    sender_label: "chief",
+    preimage: '{"body":"Wassim asks: status on the inbox migration?","in_reply_to":null,"on_behalf_of":"user_owner_1","sender_agent_id":"mnm-chief01","sender_kind":"agent","session_id":"11111111-2222-4333-8444-555555555555","v":1}',
+    sha: "8a955bd0811770262fa0d400472472b9cd8bc1cff8a41abb2955a2c1582eea54",
+    text: "[mnemom inbox 8a955bd0811770262fa0d400472472b9cd8bc1cff8a41abb2955a2c1582eea54] from agent chief on behalf of the owner\n\nWassim asks: status on the inbox migration?"
+  },
+  {
+    identity: {
+      session_id: "11111111-2222-4333-8444-555555555555",
+      sender_kind: "owner",
+      sender_agent_id: null,
+      on_behalf_of: null,
+      in_reply_to: "aaaaaaaa-bbbb-4ccc-8ddd-eeeeeeeeeeee",
+      body: "Yes, ship it as a draft. \u2014 W \u2713"
+    },
+    sender_label: null,
+    preimage: '{"body":"Yes, ship it as a draft. \u2014 W \u2713","in_reply_to":"aaaaaaaa-bbbb-4ccc-8ddd-eeeeeeeeeeee","on_behalf_of":null,"sender_agent_id":null,"sender_kind":"owner","session_id":"11111111-2222-4333-8444-555555555555","v":1}',
+    sha: "f79c83ca6fd83b8b918fe6464479c79ba4abea1ec30f43fd62b9b6d5950cc218",
+    text: "[mnemom inbox f79c83ca6fd83b8b918fe6464479c79ba4abea1ec30f43fd62b9b6d5950cc218] from the owner (answer to question aaaaaaaa-bbbb-4ccc-8ddd-eeeeeeeeeeee)\n\nYes, ship it as a draft. \u2014 W \u2713"
+  }
+];
 export {
+  A60_EMITTED_KINDS,
+  A61_EMITTED_KINDS,
   ABSENT_FUNCTIONS_M1,
   ADMISSION_PRECEDENCE,
   ADMISSION_REQUEST_KINDS,
@@ -5521,18 +6370,52 @@ export {
   GUARD_LISTS,
   GUARD_STATE_FAULT,
   GUARD_STATE_OK,
+  GUARD_STATE_V1_OK,
   HEARTBEAT_DIVISOR,
   HEARTBEAT_ENTRY_FIELDS,
   HEARTBEAT_REASONS,
   HEARTBEAT_REQUEST_KEYS,
   HEARTBEAT_RESULT_FIELDS,
   HEX64_RE,
+  HOMED_INBOX_VECTORS,
   HOST_STATUS_JSON,
   HOST_STATUS_JSON_VECTORS,
   HOST_STATUS_SEAT,
   HOST_STATUS_SESSION,
   ID_RE,
+  INBOX_ACK_BODY_KEYS,
+  INBOX_AGENT_ID_RE,
+  INBOX_BODY_MAX_BYTES,
+  INBOX_DEAD_REASONS,
+  INBOX_DELIVERY_LIMIT,
+  INBOX_IDEMPOTENCY_KEY_RE,
   INBOX_KEY,
+  INBOX_LIST_ITEM,
+  INBOX_LIST_LIMIT,
+  INBOX_MARKER_RE,
+  INBOX_OPEN_CAP,
+  INBOX_OPEN_MAX,
+  INBOX_REJECT_CODES,
+  INBOX_REJECT_REASONS,
+  INBOX_RELEASE_BODY_KEYS,
+  INBOX_RELEASE_REASONS,
+  INBOX_REOFFER_S,
+  INBOX_SENDERS_MAX,
+  INBOX_SENDER_ADD_BODY_KEYS,
+  INBOX_SENDER_INVALID_REASONS,
+  INBOX_SENDER_ITEM,
+  INBOX_SENDER_KINDS,
+  INBOX_SENDER_LABEL_RE,
+  INBOX_SENDER_REMOVE_BODY_KEYS,
+  INBOX_SEND_BODY_KEYS,
+  INBOX_SEND_RESPONSE,
+  INBOX_SHA_FIXTURE,
+  INBOX_SHA_VECTORS,
+  INBOX_STATUSES,
+  INBOX_TAKE_BODY_KEYS,
+  INBOX_TAKE_ITEM,
+  INBOX_TAKE_LIMIT_MAX,
+  INBOX_TTL_S,
   INTERNAL_KEY_HEADER,
   IV_BYTES,
   JOURNAL_APPROVAL_KINDS,
@@ -5626,6 +6509,30 @@ export {
   PURE_FN_M1_PENDING,
   PURE_FN_PRODUCT_BASE,
   PURE_FN_S1_MODULE,
+  QUESTION_ANSWER_BODY_KEYS,
+  QUESTION_ANSWER_MAX_BYTES,
+  QUESTION_ANSWER_VIAS,
+  QUESTION_APPROVAL_TTL_S,
+  QUESTION_ASK_BODY_KEYS,
+  QUESTION_BODY_MAX_BYTES,
+  QUESTION_DELIVERIES,
+  QUESTION_DESCRIPTION_MAX_BYTES,
+  QUESTION_DISMISSED_REASON,
+  QUESTION_HANDOFF_REASON,
+  QUESTION_HEADER_MAX_BYTES,
+  QUESTION_ID_RE,
+  QUESTION_LABEL_MAX_BYTES,
+  QUESTION_LIST_ITEM,
+  QUESTION_LIST_LIMIT,
+  QUESTION_MAX_OPTIONS,
+  QUESTION_MAX_QUESTIONS,
+  QUESTION_MIN_OPTIONS,
+  QUESTION_OUTCOMES,
+  QUESTION_POLL_BODY_KEYS,
+  QUESTION_RECOMMENDED_SUFFIX,
+  QUESTION_STATES,
+  QUESTION_TEXT_MAX_BYTES,
+  QUESTION_TOOL_USE_ID_RE,
   READY_CAUSES,
   READY_SESSIONS_LIMIT_MAX,
   READY_SESSIONS_LIMIT_MIN,
@@ -5733,6 +6640,7 @@ export {
   U05_CHECK_TEXT_ATTESTATION_FAILED,
   U05_CHECK_TEXT_RESPAWN_FAILED,
   U05_FIXTURE_CHECK,
+  UNATTENDED_POOL_VECTORS,
   UNSUPPORTED_FEATURES,
   USER_STATES,
   UUID_RE,
@@ -5744,6 +6652,9 @@ export {
   admitSweepDigest,
   admitSweepText,
   amendDecision,
+  answerFromChoice,
+  answersOk,
+  answersShapeOk,
   applyDeviceStep,
   approvalSubjectHash,
   approvalTargetOk,
@@ -5784,6 +6695,8 @@ export {
   contractPlaintext,
   countJournalApprovals,
   createReadySessionAnswerOk,
+  decideHomedInboxVector,
+  decideUnattendedPoolVector,
   dekFromWrapInput,
   dekWrapInput,
   deriveEffectiveState,
@@ -5813,6 +6726,7 @@ export {
   gatewayEventsBodyOk,
   grantWarningDays,
   guardStateOk,
+  guardStateV1Ok,
   hasRemoteControl,
   heartbeatRequestOk,
   heartbeatResultOk,
@@ -5820,6 +6734,30 @@ export {
   hmacSha256Hex,
   hostStatusJsonOk,
   idempotencyKeys,
+  inboxAckBodyOk,
+  inboxAckResponseOk,
+  inboxBodyOk,
+  inboxDeliveryText,
+  inboxIdempotencyKeys,
+  inboxListItemOk,
+  inboxListResponseOk,
+  inboxMarkerOf,
+  inboxReleaseBodyOk,
+  inboxReleaseResponseOk,
+  inboxSendBodyOk,
+  inboxSendResponseOk,
+  inboxSenderAddBodyOk,
+  inboxSenderChangeResponseOk,
+  inboxSenderItemOk,
+  inboxSenderRemoveBodyOk,
+  inboxSendersResponseOk,
+  inboxSha,
+  inboxShaOf,
+  inboxShaPreimage,
+  inboxSummaryResponseOk,
+  inboxTakeBodyOk,
+  inboxTakeItemOk,
+  inboxTakeResponseOk,
   invalidTransitionFix,
   isCountTokensPath,
   isDurableCode,
@@ -5848,6 +6786,7 @@ export {
   newDek,
   nofenceHonoured,
   normalizeCellId,
+  normalizeQuestions,
   normalizeSessionName,
   openContract,
   ownerSessionViewOk,
@@ -5873,7 +6812,24 @@ export {
   protectionRefusals,
   proxyLockPath,
   pureFnArgs,
+  questionAnswerBodyOk,
+  questionAnswerInboxBody,
+  questionAnswerResponseOk,
+  questionAskBodyOk,
+  questionAskMatches,
+  questionAskResponseOk,
+  questionIdempotencyKeys,
+  questionItemOk,
+  questionListItemOk,
+  questionListResponseOk,
+  questionPollBodyOk,
+  questionPollResponseOk,
+  questionReleaseResponseOk,
+  questionSha,
+  questionShaPreimage,
+  questionsOk,
   readyRowOk,
+  recommendedOption,
   recordValueIn,
   refsInvalidDetailsOk,
   refsPropertyOk,
@@ -5913,6 +6869,8 @@ export {
   testModeActive,
   toolClassesSupportedM1,
   transcriptGuardPath,
+  unattendedHomedInboxEligible,
+  unattendedPoolEligible,
   userStateOf,
   utf8,
   validateRefs,