@murphai/murph 1.3.0 → 1.3.2

package/node_modules/@murphai/assistant-engine/README.md

@@ -6,6 +6,19 @@ This package owns headless assistant execution and assistant-specific tool surfa
 
 Neutral vault services live in `@murphai/vault-usecases/vault-services`, and inbox service composition lives in `@murphai/inbox-services`. `assistant-engine` consumes those owners instead of owning their factories. Canonical writes still terminate in `packages/core`. Provider-target normalization plus hosted provider preset/config utilities are owned by `@murphai/operator-config` and consumed here directly.
 
+## Prompt time context
+
+Inbound auto-reply prompts render occurrence instants before provider execution.
+Each occurrence includes the local clock derived from the vault's canonical IANA
+timezone and the original UTC instant. Provider models must not be asked to
+convert or relabel a bare UTC clock from separately supplied timezone context.
+The thread-stable prompt also forbids relabeling `Z` or offset timestamps as
+local clock values when a tool or older context exposes an exact instant.
+If vault metadata cannot be read or does not contain a valid canonical zone,
+prompt construction renders the exact UTC instant only. The runtime timezone
+may still support internal date planning, but it is never labeled as the
+member's local timezone.
+
 ## Codex Warmth
 
 Codex app-server turns use one warm process for the full lifetime of a warm Node
@@ -50,19 +63,53 @@ formatter uses a fresh ephemeral thread on the resident App Server. Its
 thread-local deny configuration does not change the ordinary process launch
 identity or persist a resumable notification thread.
 
-The `creative-response` notification prompt profile is an isolated system
-continuation for verified social moments. Its prompt is built only from the
-engine-supplied task and bounded committed conversation history. Planning
-projects only `generate_song`, applies the output-only turn's native-capability
-deny set, and runs as a fresh ephemeral thread on the resident process. The
-application-owned song tool retains the bound provider transport plus the
-existing authority-free public transport required for a validated signed Linq
-upload; those transports are not native Codex browsing capabilities. The
-ordinary response-media and outbox owners remain unchanged. The prompt tells
-the model to call that tool exactly once for one short original sponsor song. A
-creative provider failure settles the optional notification instead of starting
-another song attempt; a committed delivery intent retains the ordinary outbox
-retry and deduplication behavior.
+An authenticated current-sender private Assistant Ask completion is the narrow
+deterministic exception. It starts no formatter or provider turn and does not
+mutate the member's ordinary conversation when the notification is queued.
+Only after the hosted outbox reaches canonical `sent` does the hosted runtime
+import the exact reviewed assistant text into the exact ordinary direct session
+returned by the queue-time hosted-default continuity lookup. Compatible model
+or reasoning changes preserve that binding. If no ordinary session existed,
+the intent remains unbound until the first canonical attended direct turn;
+another same-route detached session is never inferred as the owner. That turn
+may bind its exact session before delivery finishes, but transcript import,
+session advancement, and stale native provider-resume clearing remain gated on
+canonical delivery. The outbox intent journals an interrupted
+import, and nested hosted direct route plus accepted assistant-input authority
+repairs it before provider-resume selection even for text-only payloads.
+An ordinary direct scheduled occurrence also repairs an exact session-bound
+obligation before provider-resume selection, but cannot claim unbound work;
+that remains reserved for the first attended direct turn.
+The direct output-only Assistant Ask continuation uses that same bound-only
+admission before provider planning. A direct exact notification also repairs
+only an obligation already bound to its resolved ordinary session before it
+appends newer history; an isolated notification session cannot import another
+session's obligation. Rejected completions, unrelated-session continuations,
+and every generic detached notification remain unable to claim unbound work.
+An outbox intent written before the explicit continuity binding existed fails
+closed instead of inferring an owner. Partial or ambiguous provider receipts do
+not participate, even when they preserve message metadata for transport retry.
+A current canonically sent continuity
+obligation remains exempt from terminal outbox pruning until its journal is
+applied; applied intents return to ordinary terminal retention.
+
+The `creative-response` and `creative-response-text` notification prompt
+profiles are isolated system continuations for verified, explicitly requested
+social moments. Both prompts are built only from the engine-supplied task and
+bounded committed conversation history. Message and poem requests use an
+output-only turn profile with no tools. Song format projects only
+`generate_song`, the sole format-specific tool, and requires exactly one call
+with `durationSeconds: 15`. The application-owned song tool retains the bound
+provider transport plus the existing authority-free public transport required
+for a validated signed Linq upload; those transports are not native Codex
+browsing capabilities. The ordinary response-media and outbox owners remain
+unchanged. Named style references are reduced to broad musical traits rather
+than copied melody, lyrics, catchphrases, vocal identity, or signature
+arrangement. A creative provider failure settles the optional notification
+instead of starting another song attempt. A selected song without exactly one
+generated voice-memo attachment fails before receipt, transcript persistence,
+or delivery and is never replaced by a text-only response. A committed delivery
+intent retains the ordinary outbox retry and deduplication behavior.
 
 Hosted invocation-scoped automation and device authority enters only the
 current root turn through narrow typed dynamic tools backed by existing domain
@@ -71,6 +118,15 @@ authority. Dynamic-tool dispatch requires the exact active root turn and
 rejects descendant, stale-turn, or foreign-thread calls; closing the invocation
 withdraws the tools without replacing the App Server.
 
+Codex command failures reuse the existing assistant runtime-issue path. The
+turn-scoped classifier persists only a `search` or `unknown` family, a
+turn-local command ordinal saturated at 10,000, the exact numeric exit code,
+and existing duration and output-size buckets. It never persists command text,
+arguments, paths, output, payloads, or provider action identifiers. A direct
+bare `rg` or `grep` exit code 1 is treated as an expected no-match result. When
+a later direct search succeeds, `recoveredAfterFailure` records only
+family-level recovery; it does not assert that the exact query was retried.
+
 MultiAgent V2 descendants admitted before the root final reply may keep working
 through Codex's native lifecycle after that reply. Root completion and the next
 ordinary turn do not terminate them. They retain normal local canonical
@@ -101,9 +157,10 @@ configuration, but starts from a fresh empty working directory and removes that
 directory after the exact child exits. It uses process lifetime `one-shot`; its
 `thread/start` request sets `permissions = "murph-group-read"`, exact
 `runtimeWorkspaceRoots`, `ephemeral = true`, and approval policy `never` without
-legacy `sandbox`. The pinned App Server must attest the effective profile,
-roots, working directory, empty instruction sources, and approval policy before
-the turn starts. The profile permits read-only access to the exact target roots
+legacy `sandbox`. The App Server response is not an authorization boundary;
+production-like Linux smoke proves the named profile's actual filesystem,
+environment, and network enforcement. The profile permits read-only access to
+the exact target roots
 while denying `.runtime/**`, `.codex/**`, environment files, writes, other
 workspaces, and tool network. Model-run shell commands inherit no provider
 credential or hosted secret. The child's only dynamic tool is the consent-aware

package/node_modules/@murphai/assistant-engine/dist/assistant/active-turn-input-controller.d.ts

@@ -1,7 +1,7 @@
 import type { AssistantAskResult } from '@murphai/operator-config/assistant-cli-contracts';
 import { VaultCliError } from '@murphai/operator-config/vault-cli-errors';
-import type { AssistantMessageInput } from './service-contracts.js';
-import type { AssistantAcceptedTurnInputItemInput } from './active-turn-input-journal.js';
+import type { AssistantMessageInput, AssistantProviderAcceptedInputsRelease } from './service-contracts.js';
+import { type AssistantAcceptedTurnInputItemInput } from './active-turn-input-journal.js';
 import type { AssistantActiveTurnInputAdmissionHook, AssistantActiveTurnInputAdmissionResult, AssistantActiveTurnLiveProviderTurn } from './turn-input.js';
 import type { AssistantSessionLocator } from './store/types.js';
 interface AssistantActiveTurnInputControllerKeyInput extends AssistantSessionLocator {
@@ -16,17 +16,27 @@ type AssistantActiveTurnInputSteerResult = {
 } | {
     kind: 'turn-id-mismatch';
 };
+export type AssistantActiveTurnDraftWindowOutcome = {
+    controllerClosed: true;
+    kind: 'commit';
+} | {
+    acceptedInput: Extract<AssistantActiveTurnInputAdmissionResult, {
+        kind: 'accepted';
+    }> | null;
+    kind: 'review';
+};
 export declare function createAssistantActiveTurnInputController(input: {
     acceptedInputValidator?: (validatorInput: {
         acceptedInputs: readonly AssistantAcceptedTurnInputItemInput[];
     }) => Promise<void>;
     beforeProviderSteer?: (steerInput: {
         acceptedInputs: readonly AssistantAcceptedTurnInputItemInput[];
-    }) => Promise<void>;
+    }) => Promise<AssistantProviderAcceptedInputsRelease | void>;
     admissionHook?: AssistantActiveTurnInputAdmissionHook | null;
     conversationKeys?: readonly string[] | null;
     eventAdmissionEnabled?: boolean;
     sessionId: string;
+    signal?: AbortSignal;
     turnId: string;
     vault: string;
 }): {
@@ -35,8 +45,11 @@ export declare function createAssistantActiveTurnInputController(input: {
         signal?: AbortSignal;
     }): Promise<AssistantActiveTurnInputAdmissionResult | undefined>;
     admitLiveSteered(): Promise<AssistantActiveTurnInputAdmissionResult | undefined>;
+    finishDraftWindow(input?: {
+        signal?: AbortSignal;
+    }): Promise<AssistantActiveTurnDraftWindowOutcome>;
     close(): void;
-    closeInputAdmission(): void;
+    closeTurnAdmission(): void;
     complete(result: AssistantAskResult): void;
     fail(error: unknown): void;
     notifyInputAvailable(input?: {
@@ -44,6 +57,10 @@ export declare function createAssistantActiveTurnInputController(input: {
         signal?: AbortSignal;
     }): Promise<AssistantActiveTurnInputAdmissionResult | undefined>;
     registerLiveProviderTurn(input: AssistantActiveTurnLiveProviderTurn): () => void;
+    pauseProviderSteering(): void;
+    commitLiveSteeredLocalAdmission(admission: Extract<AssistantActiveTurnInputAdmissionResult, {
+        kind: 'accepted';
+    }>): void;
 };
 export declare function steerAssistantActiveTurnInput(input: AssistantMessageInput): Promise<AssistantAskResult> | null;
 export declare function steerAssistantActiveTurnInputWithStatus(input: AssistantMessageInput): AssistantActiveTurnInputSteerResult;

package/node_modules/@murphai/assistant-engine/dist/assistant/active-turn-input-controller.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"active-turn-input-controller.d.ts","sourceRoot":"","sources":["../../src/assistant/active-turn-input-controller.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kDAAkD,CAAA;AAC1F,OAAO,EAAE,aAAa,EAAE,MAAM,2CAA2C,CAAA;AACzE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAA;AACnE,OAAO,KAAK,EAAE,mCAAmC,EAAE,MAAM,gCAAgC,CAAA;AACzF,OAAO,KAAK,EACV,qCAAqC,EAErC,uCAAuC,EACvC,mCAAmC,EACpC,MAAM,iBAAiB,CAAA;AAKxB,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAA;AAqB/D,UAAU,0CAA2C,SAAQ,uBAAuB;IAClF,gBAAgB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,CAAA;IAC3C,KAAK,EAAE,MAAM,CAAA;CACd;AAyBD,KAAK,mCAAmC,GACpC;IACE,UAAU,EAAE,OAAO,CAAC,kBAAkB,CAAC,CAAA;IACvC,IAAI,EAAE,QAAQ,CAAA;CACf,GACD;IACE,IAAI,EAAE,gBAAgB,CAAA;CACvB,GACD;IACE,IAAI,EAAE,kBAAkB,CAAA;CACzB,CAAA;AAoiBL,wBAAgB,wCAAwC,CAAC,KAAK,EAAE;IAC9D,sBAAsB,CAAC,EAAE,CAAC,cAAc,EAAE;QACxC,cAAc,EAAE,SAAS,mCAAmC,EAAE,CAAA;KAC/D,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACnB,mBAAmB,CAAC,EAAE,CAAC,UAAU,EAAE;QACjC,cAAc,EAAE,SAAS,mCAAmC,EAAE,CAAA;KAC/D,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACnB,aAAa,CAAC,EAAE,qCAAqC,GAAG,IAAI,CAAA;IAC5D,gBAAgB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,CAAA;IAC3C,qBAAqB,CAAC,EAAE,OAAO,CAAA;IAC/B,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;CACd,GAAG;IACF,cAAc,CAAC,KAAK,CAAC,EAAE;QACrB,WAAW,CAAC,EAAE,OAAO,CAAA;QACrB,MAAM,CAAC,EAAE,WAAW,CAAA;KACrB,GAAG,OAAO,CAAC,uCAAuC,GAAG,SAAS,CAAC,CAAA;IAChE,gBAAgB,IAAI,OAAO,CAAC,uCAAuC,GAAG,SAAS,CAAC,CAAA;IAChF,KAAK,IAAI,IAAI,CAAA;IACb,mBAAmB,IAAI,IAAI,CAAA;IAC3B,QAAQ,CAAC,MAAM,EAAE,kBAAkB,GAAG,IAAI,CAAA;IAC1C,IAAI,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAAA;IAC1B,oBAAoB,CAAC,KAAK,CAAC,EAAE;QAC3B,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;QAC5B,MAAM,CAAC,EAAE,WAAW,CAAA;KACrB,GAAG,OAAO,CAAC,uCAAuC,GAAG,SAAS,CAAC,CAAA;IAChE,wBAAwB,CAAC,KAAK,EAAE,mCAAmC,GAAG,MAAM,IAAI,CAAA;CACjF,CAiDA;AAED,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,qBAAqB,GAC3B,OAAO,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAGpC;AAED,wBAAgB,uCAAuC,CACrD,KAAK,EAAE,qBAAqB,GAC3B,mCAAmC,CAErC;AAED,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,qBAAqB,GAC3B,mCAAmC,CA2BrC;AAED,wBAAsB,uCAAuC,CAC3D,KAAK,EAAE,0CAA0C,GAAG;IAClD,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IAC5B,MAAM,CAAC,EAAE,WAAW,CAAA;CACrB,GACA,OAAO,CAAC,uCAAuC,GAAG,SAAS,CAAC,CAW9D;AAED,wBAAsB,kDAAkD,CAAC,KAAK,EAAE;IAC9E,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAA;IAC3B,MAAM,CAAC,EAAE,WAAW,CAAA;IACpB,KAAK,EAAE,MAAM,CAAA;CACd,GAAG,OAAO,CAAC,IAAI,CAAC,CAkDhB;AAED,wBAAsB,gDAAgD,CAAC,KAAK,EAAE;IAC5E,MAAM,CAAC,EAAE,WAAW,CAAA;IACpB,KAAK,EAAE,MAAM,CAAA;CACd,GAAG,OAAO,CAAC,SAAS,uCAAuC,EAAE,CAAC,CAoB9D;AAgFD,wBAAgB,uCAAuC,IAAI,aAAa,CAKvE"}
+{"version":3,"file":"active-turn-input-controller.d.ts","sourceRoot":"","sources":["../../src/assistant/active-turn-input-controller.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kDAAkD,CAAA;AAC1F,OAAO,EAAE,aAAa,EAAE,MAAM,2CAA2C,CAAA;AAEzE,OAAO,KAAK,EACV,qBAAqB,EACrB,sCAAsC,EACvC,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EAEL,KAAK,mCAAmC,EAEzC,MAAM,gCAAgC,CAAA;AACvC,OAAO,KAAK,EACV,qCAAqC,EAErC,uCAAuC,EACvC,mCAAmC,EACpC,MAAM,iBAAiB,CAAA;AAKxB,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAA;AAqB/D,UAAU,0CAA2C,SAAQ,uBAAuB;IAClF,gBAAgB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,CAAA;IAC3C,KAAK,EAAE,MAAM,CAAA;CACd;AA0BD,KAAK,mCAAmC,GACpC;IACE,UAAU,EAAE,OAAO,CAAC,kBAAkB,CAAC,CAAA;IACvC,IAAI,EAAE,QAAQ,CAAA;CACf,GACD;IACE,IAAI,EAAE,gBAAgB,CAAA;CACvB,GACD;IACE,IAAI,EAAE,kBAAkB,CAAA;CACzB,CAAA;AAEL,MAAM,MAAM,qCAAqC,GAC7C;IACE,gBAAgB,EAAE,IAAI,CAAA;IACtB,IAAI,EAAE,QAAQ,CAAA;CACf,GACD;IACE,aAAa,EAAE,OAAO,CACpB,uCAAuC,EACvC;QAAE,IAAI,EAAE,UAAU,CAAA;KAAE,CACrB,GAAG,IAAI,CAAA;IACR,IAAI,EAAE,QAAQ,CAAA;CACf,CAAA;AA2sBL,wBAAgB,wCAAwC,CAAC,KAAK,EAAE;IAC9D,sBAAsB,CAAC,EAAE,CAAC,cAAc,EAAE;QACxC,cAAc,EAAE,SAAS,mCAAmC,EAAE,CAAA;KAC/D,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACnB,mBAAmB,CAAC,EAAE,CAAC,UAAU,EAAE;QACjC,cAAc,EAAE,SAAS,mCAAmC,EAAE,CAAA;KAC/D,KAAK,OAAO,CAAC,sCAAsC,GAAG,IAAI,CAAC,CAAA;IAC5D,aAAa,CAAC,EAAE,qCAAqC,GAAG,IAAI,CAAA;IAC5D,gBAAgB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,CAAA;IAC3C,qBAAqB,CAAC,EAAE,OAAO,CAAA;IAC/B,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,CAAC,EAAE,WAAW,CAAA;IACpB,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;CACd,GAAG;IACF,cAAc,CAAC,KAAK,CAAC,EAAE;QACrB,WAAW,CAAC,EAAE,OAAO,CAAA;QACrB,MAAM,CAAC,EAAE,WAAW,CAAA;KACrB,GAAG,OAAO,CAAC,uCAAuC,GAAG,SAAS,CAAC,CAAA;IAChE,gBAAgB,IAAI,OAAO,CAAC,uCAAuC,GAAG,SAAS,CAAC,CAAA;IAChF,iBAAiB,CAAC,KAAK,CAAC,EAAE;QACxB,MAAM,CAAC,EAAE,WAAW,CAAA;KACrB,GAAG,OAAO,CAAC,qCAAqC,CAAC,CAAA;IAClD,KAAK,IAAI,IAAI,CAAA;IACb,kBAAkB,IAAI,IAAI,CAAA;IAC1B,QAAQ,CAAC,MAAM,EAAE,kBAAkB,GAAG,IAAI,CAAA;IAC1C,IAAI,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAAA;IAC1B,oBAAoB,CAAC,KAAK,CAAC,EAAE;QAC3B,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;QAC5B,MAAM,CAAC,EAAE,WAAW,CAAA;KACrB,GAAG,OAAO,CAAC,uCAAuC,GAAG,SAAS,CAAC,CAAA;IAChE,wBAAwB,CAAC,KAAK,EAAE,mCAAmC,GAAG,MAAM,IAAI,CAAA;IAChF,qBAAqB,IAAI,IAAI,CAAA;IAC7B,+BAA+B,CAC7B,SAAS,EAAE,OAAO,CAAC,uCAAuC,EAAE;QAAE,IAAI,EAAE,UAAU,CAAA;KAAE,CAAC,GAChF,IAAI,CAAA;CACR,CA4DA;AAED,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,qBAAqB,GAC3B,OAAO,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAGpC;AAED,wBAAgB,uCAAuC,CACrD,KAAK,EAAE,qBAAqB,GAC3B,mCAAmC,CAErC;AAED,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,qBAAqB,GAC3B,mCAAmC,CA2BrC;AAED,wBAAsB,uCAAuC,CAC3D,KAAK,EAAE,0CAA0C,GAAG;IAClD,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IAC5B,MAAM,CAAC,EAAE,WAAW,CAAA;CACrB,GACA,OAAO,CAAC,uCAAuC,GAAG,SAAS,CAAC,CAW9D;AAED,wBAAsB,kDAAkD,CAAC,KAAK,EAAE;IAC9E,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAA;IAC3B,MAAM,CAAC,EAAE,WAAW,CAAA;IACpB,KAAK,EAAE,MAAM,CAAA;CACd,GAAG,OAAO,CAAC,IAAI,CAAC,CAkDhB;AAED,wBAAsB,gDAAgD,CAAC,KAAK,EAAE;IAC5E,MAAM,CAAC,EAAE,WAAW,CAAA;IACpB,KAAK,EAAE,MAAM,CAAA;CACd,GAAG,OAAO,CAAC,SAAS,uCAAuC,EAAE,CAAC,CAoB9D;AAgFD,wBAAgB,uCAAuC,IAAI,aAAa,CAKvE"}

package/node_modules/@murphai/assistant-engine/dist/assistant/active-turn-input-controller.js

@@ -1,10 +1,13 @@
 import { VaultCliError } from '@murphai/operator-config/vault-cli-errors';
+import { setTimeout as sleep } from 'node:timers/promises';
+import { resolveAssistantAcceptedTurnInputReferenceWindow, } from './active-turn-input-journal.js';
 import { isAssistantActiveTurnInputCheckpointRejectedError, } from './turn-input.js';
 import { conversationRefFromAssistantInputConversation, } from './conversation-ref.js';
 import { readAssistantInputEvent, } from './input-store.js';
 import { normalizeNullableString, warnAssistantBestEffortFailure, } from './shared.js';
 import { resolveAssistantConversationLookupKey } from './store/paths.js';
 import { mergeAssistantReplyDeliveryContextOverrides, pickDefinedAssistantReplyDeliveryContext, } from './reply-delivery-context.js';
+const ASSISTANT_ACTIVE_TURN_DRAFT_GRACE_MS = 4_000;
 class AssistantActiveTurnInputController {
     input;
     nextInputOrdinal = 1;
@@ -15,8 +18,11 @@ class AssistantActiveTurnInputController {
     inputAvailableAdmissionRerunRequested = false;
     liveProviderTurn = null;
     liveProviderTurnKey = null;
-    liveProviderTurnEnded = false;
     completedProviderTurnKey = null;
+    liveSteeredInputCommitted = false;
+    draftWindowAbortController = new AbortController();
+    draftWindowEndsAtMs = null;
+    draftWindowOutcome = null;
     pending = [];
     manualCompletions = [];
     availableInputIds = new Set();
@@ -24,7 +30,9 @@ class AssistantActiveTurnInputController {
         this.input = input;
     }
     enqueueManualActiveTurnInput(input) {
-        if (this.closed || typeof input.expectedActiveTurnId !== 'string') {
+        if (this.closed ||
+            this.isDraftWindowExpired() ||
+            typeof input.expectedActiveTurnId !== 'string') {
             return {
                 kind: 'no-active-turn',
             };
@@ -34,20 +42,19 @@ class AssistantActiveTurnInputController {
                 kind: 'turn-id-mismatch',
             };
         }
-        if (this.liveProviderTurnEnded) {
-            return {
-                kind: 'no-active-turn',
-            };
-        }
         const id = `manual-${this.nextInputOrdinal}`;
+        const acceptedAt = new Date().toISOString();
         const manualCompletion = createAssistantActiveTurnManualInputCompletion();
+        const admission = buildManualAcceptedActiveTurnInputAdmission({
+            acceptedAt,
+            id,
+            input,
+        });
         const queued = {
-            admission: buildManualAcceptedActiveTurnInputAdmission({
-                id,
-                input,
-            }),
+            admission,
             manualCompletion,
             providerInputAcknowledgedTurnKey: null,
+            relativeDateReferenceWindow: resolveAssistantAcceptedTurnInputReferenceWindow(admission.acceptedInputs),
         };
         this.pending.push(queued);
         this.manualCompletions.push(manualCompletion);
@@ -60,7 +67,8 @@ class AssistantActiveTurnInputController {
     }
     notifyInputAvailable(input) {
         if (this.input.eventAdmissionEnabled === false ||
-            this.liveProviderTurnEnded) {
+            this.closed ||
+            this.isDraftWindowExpired()) {
             return Promise.resolve(undefined);
         }
         for (const inputId of input?.inputIds ?? []) {
@@ -81,20 +89,32 @@ class AssistantActiveTurnInputController {
     }
     close() {
         this.closed = true;
+        this.draftWindowAbortController.abort();
         this.liveProviderTurn = null;
         this.liveProviderTurnKey = null;
         this.completedProviderTurnKey = null;
-        this.liveProviderTurnEnded = true;
     }
-    closeInputAdmission() {
+    closeTurnAdmission() {
         this.closed = true;
-        // First-response closure blocks every new admission, but the exact provider
+        this.draftWindowAbortController.abort();
+        // Final cutoff blocks every new admission, but the exact provider
         // turn key remains necessary until a steer already started under it settles.
         this.completedProviderTurnKey =
             this.liveProviderTurnKey ?? this.completedProviderTurnKey;
         this.liveProviderTurn = null;
         this.liveProviderTurnKey = null;
-        this.liveProviderTurnEnded = true;
+    }
+    pauseProviderSteering() {
+        if (this.closed) {
+            return;
+        }
+        this.draftWindowEndsAtMs ??=
+            Date.now() + ASSISTANT_ACTIVE_TURN_DRAFT_GRACE_MS;
+        this.completedProviderTurnKey =
+            this.liveProviderTurnKey ?? this.completedProviderTurnKey;
+        this.liveProviderTurn = null;
+        this.liveProviderTurnKey = null;
+        void this.startDraftWindow();
     }
     registerLiveProviderTurn(input) {
         if (this.closed ||
@@ -107,18 +127,77 @@ class AssistantActiveTurnInputController {
         const liveProviderTurnKey = formatAssistantActiveTurnLiveProviderTurnKey(input);
         this.liveProviderTurn = input;
         this.liveProviderTurnKey = liveProviderTurnKey;
-        this.liveProviderTurnEnded = false;
         this.completedProviderTurnKey = null;
         this.tryStartLiveSteers();
         return () => {
             if (this.liveProviderTurn === input) {
                 this.liveProviderTurn = null;
                 this.liveProviderTurnKey = null;
-                this.liveProviderTurnEnded = true;
                 this.completedProviderTurnKey = liveProviderTurnKey;
             }
         };
     }
+    async finishDraftWindow(input) {
+        return await this.startDraftWindow(input?.signal);
+    }
+    startDraftWindow(signal) {
+        if (this.draftWindowOutcome) {
+            return this.draftWindowOutcome;
+        }
+        this.draftWindowEndsAtMs ??=
+            Date.now() + ASSISTANT_ACTIVE_TURN_DRAFT_GRACE_MS;
+        const signals = [
+            this.draftWindowAbortController.signal,
+            this.input.signal,
+            signal,
+        ].filter((candidate) => candidate !== undefined);
+        const draftWindowSignal = signals.length === 1
+            ? signals[0]
+            : AbortSignal.any(signals);
+        const outcome = this.runDraftWindow(draftWindowSignal);
+        outcome.catch(() => undefined);
+        this.draftWindowOutcome = outcome;
+        return outcome;
+    }
+    async runDraftWindow(signal) {
+        const draftWindowEndsAtMs = this.draftWindowEndsAtMs ?? Date.now();
+        await sleep(Math.max(0, draftWindowEndsAtMs - Date.now()), undefined, { signal });
+        return await this.runWithAdmissionHookQueue(async () => {
+            signal.throwIfAborted();
+            this.throwFatalAdmissionError();
+            let acceptedInput = await this.admitPending();
+            if (acceptedInput?.kind !== 'accepted' &&
+                this.input.admissionHook &&
+                !this.closed) {
+                const result = await this.input.admissionHook(this.buildAdmissionInput({ signal }));
+                await this.queueAvailableInputAdmissionResult(result);
+                acceptedInput = await this.admitPending();
+            }
+            if (acceptedInput?.kind === 'accepted') {
+                this.draftWindowEndsAtMs = null;
+                return {
+                    acceptedInput,
+                    kind: 'review',
+                };
+            }
+            if (this.liveSteeredInputCommitted) {
+                this.draftWindowEndsAtMs = null;
+                return {
+                    acceptedInput: null,
+                    kind: 'review',
+                };
+            }
+            this.closeTurnAdmission();
+            return {
+                controllerClosed: true,
+                kind: 'commit',
+            };
+        });
+    }
+    isDraftWindowExpired() {
+        return this.draftWindowEndsAtMs !== null &&
+            Date.now() >= this.draftWindowEndsAtMs;
+    }
     async admitAvailable(input) {
         this.throwFatalAdmissionError();
         const queuedAdmission = await this.admitPending();
@@ -136,13 +215,32 @@ class AssistantActiveTurnInputController {
     async admitLiveSteered() {
         this.throwFatalAdmissionError();
         await this.waitForInputAvailableAdmission();
-        return await this.admitPending({ requireProviderAcknowledged: true });
+        return await this.admitPending({
+            requireProviderAcknowledged: true,
+            retainPending: true,
+        });
+    }
+    commitLiveSteeredLocalAdmission(admission) {
+        const first = this.pending[0];
+        if (admission.providerAlreadySteered !== true ||
+            !first ||
+            first.admission.acceptedInputs !== admission.acceptedInputs ||
+            first.providerInputAcknowledgedTurnKey === null) {
+            throw new Error('Live-steered local admission does not match the acknowledged queue head.');
+        }
+        this.pending.shift();
+        if (first.manualCompletion) {
+            first.manualCompletion.accepted = true;
+        }
+        this.tryStartLiveSteers();
+        this.liveSteeredInputCommitted = true;
     }
     async admitPending(input) {
         const providerTurnKey = this.resolveProviderAcknowledgementKey();
-        const accepted = await this.dequeueAdmissiblePendingPrefix({
+        const accepted = await this.resolveAdmissiblePendingPrefix({
             providerTurnKey,
             requireProviderAcknowledged: input?.requireProviderAcknowledged,
+            retainPending: input?.retainPending,
         });
         if (accepted.length === 0) {
             return undefined;
@@ -164,10 +262,10 @@ class AssistantActiveTurnInputController {
     }
     fail(error) {
         this.closed = true;
+        this.draftWindowAbortController.abort();
         this.liveProviderTurn = null;
         this.liveProviderTurnKey = null;
         this.completedProviderTurnKey = null;
-        this.liveProviderTurnEnded = true;
         for (const completion of this.manualCompletions) {
             completion.reject(error);
         }
@@ -217,7 +315,7 @@ class AssistantActiveTurnInputController {
             this.input.admissionHook);
         return acceptedResult ?? result;
     }
-    async runAdmissionHook(buildInput) {
+    async runWithAdmissionHookQueue(task) {
         const previous = this.admissionHookQueue;
         let release;
         const current = new Promise((resolve) => {
@@ -226,6 +324,14 @@ class AssistantActiveTurnInputController {
         this.admissionHookQueue = previous.then(() => current, () => current);
         await previous.catch(() => undefined);
         try {
+            return await task();
+        }
+        finally {
+            release();
+        }
+    }
+    async runAdmissionHook(buildInput) {
+        return await this.runWithAdmissionHookQueue(async () => {
             if (!this.input.admissionHook || this.closed) {
                 return undefined;
             }
@@ -237,10 +343,7 @@ class AssistantActiveTurnInputController {
                 };
             }
             return result;
-        }
-        finally {
-            release();
-        }
+        });
     }
     async waitForInputAvailableAdmission() {
         if (!this.inputAvailableAdmission) {
@@ -274,7 +377,7 @@ class AssistantActiveTurnInputController {
         if (result?.kind !== 'accepted') {
             return true;
         }
-        if (this.liveProviderTurnEnded && !this.liveProviderTurn) {
+        if (this.closed) {
             return false;
         }
         await this.input.acceptedInputValidator?.({
@@ -283,11 +386,20 @@ class AssistantActiveTurnInputController {
         const queued = {
             admission: normalizeAcceptedActiveTurnInputAdmission(result),
             providerInputAcknowledgedTurnKey: null,
+            relativeDateReferenceWindow: resolveAssistantAcceptedTurnInputReferenceWindow(result.acceptedInputs),
         };
         this.pending.push(queued);
         this.tryStartLiveSteers();
         return true;
     }
+    async queueAvailableInputAdmissionResult(result) {
+        if (result?.kind === 'accepted') {
+            for (const acceptedInput of result.acceptedInputs) {
+                this.availableInputIds.delete(acceptedInput.id);
+            }
+        }
+        return await this.queueHookAdmission(result);
+    }
     resolveKnownAdmissionInput() {
         const knownProjectionCaptureIds = new Set();
         const knownInputIds = new Set();
@@ -307,7 +419,7 @@ class AssistantActiveTurnInputController {
     resolveProviderAcknowledgementKey() {
         return this.liveProviderTurnKey ?? this.completedProviderTurnKey;
     }
-    async dequeueAdmissiblePendingPrefix(input) {
+    async resolveAdmissiblePendingPrefix(input) {
         const first = this.pending[0];
         if (!first) {
             return [];
@@ -337,13 +449,14 @@ class AssistantActiveTurnInputController {
             }
             accepted.push(item);
         }
-        this.pending.splice(0, accepted.length);
-        for (const item of accepted) {
-            if (item.manualCompletion) {
-                item.manualCompletion.accepted = true;
+        if (input.retainPending !== true) {
+            this.pending.splice(0, accepted.length);
+            for (const item of accepted) {
+                if (item.manualCompletion) {
+                    item.manualCompletion.accepted = true;
+                }
             }
         }
-        this.tryStartLiveSteers();
         return accepted;
     }
     tryStartLiveSteers() {
@@ -354,7 +467,8 @@ class AssistantActiveTurnInputController {
         }
         for (const item of this.pending) {
             if (item.providerInputAcknowledgedTurnKey === liveProviderTurnKey) {
-                continue;
+                // Provider acknowledgement alone is not durable local admission.
+                return;
             }
             if (item.providerInputAck && item.providerInputAckTurnKey === liveProviderTurnKey) {
                 return;
@@ -362,13 +476,19 @@ class AssistantActiveTurnInputController {
             item.providerInputAckTurnKey = liveProviderTurnKey;
             item.providerInputAck = Promise.resolve()
                 .then(async () => {
-                await this.input.beforeProviderSteer?.({
+                const releaseProviderAcceptedInputs = await this.input.beforeProviderSteer?.({
                     acceptedInputs: item.admission.acceptedInputs,
                 });
-                await liveProviderTurn.steer({
-                    prompt: normalizeNullableString(item.admission.prompt) ?? '',
-                    userMessageContent: item.admission.userMessageContent ?? null,
-                });
+                try {
+                    await liveProviderTurn.steer({
+                        prompt: normalizeNullableString(item.admission.prompt) ?? '',
+                        relativeDateReferenceWindow: item.relativeDateReferenceWindow,
+                        userMessageContent: item.admission.userMessageContent ?? null,
+                    });
+                }
+                finally {
+                    await releaseProviderAcceptedInputs?.();
+                }
             })
                 .then(() => {
                 if ((!this.closed ||
@@ -376,7 +496,6 @@ class AssistantActiveTurnInputController {
                     item.providerInputAckTurnKey === liveProviderTurnKey) {
                     item.providerInputAcknowledgedTurnKey = liveProviderTurnKey;
                 }
-                this.tryStartLiveSteers();
                 return item.providerInputAcknowledgedTurnKey === liveProviderTurnKey;
             })
                 .catch(async (error) => {
@@ -440,6 +559,7 @@ export function createAssistantActiveTurnInputController(input) {
         admissionHook: input.admissionHook,
         eventAdmissionEnabled: input.eventAdmissionEnabled,
         sessionId: input.sessionId,
+        signal: input.signal,
         turnId: input.turnId,
         vault: input.vault,
     });
@@ -458,24 +578,33 @@ export function createAssistantActiveTurnInputController(input) {
             }
         }
     };
-    const closeInputAdmission = () => {
-        controller.closeInputAdmission();
+    const closeTurnAdmission = () => {
+        controller.closeTurnAdmission();
         dispose();
     };
     return {
         admitAvailable: (input) => controller.admitAvailable(input),
         admitLiveSteered: () => controller.admitLiveSteered(),
+        commitLiveSteeredLocalAdmission: (admission) => controller.commitLiveSteeredLocalAdmission(admission),
         close() {
             controller.close();
             dispose();
         },
-        closeInputAdmission,
+        closeTurnAdmission,
         complete: (result) => controller.complete(result),
+        async finishDraftWindow(windowInput) {
+            const outcome = await controller.finishDraftWindow(windowInput);
+            if (outcome.kind === 'commit') {
+                dispose();
+            }
+            return outcome;
+        },
         fail(error) {
             controller.fail(error);
             dispose();
         },
         notifyInputAvailable: (notificationInput) => controller.notifyInputAvailable(notificationInput),
+        pauseProviderSteering: () => controller.pauseProviderSteering(),
         registerLiveProviderTurn: (turn) => controller.registerLiveProviderTurn(turn),
     };
 }
@@ -750,6 +879,7 @@ function buildManualAcceptedActiveTurnInputAdmission(input) {
     return {
         acceptedInputs: [
             {
+                acceptedAt: input.acceptedAt,
                 id: input.id,
                 promptFallbackReason: 'manual-input',
                 promptFallbackText: normalizeNullableString(input.input.prompt) ?? undefined,