@north-light/crouter 0.3.318 → 0.3.319

package/dist/pi-extensions/canvas-inbox-watcher.js

@@ -1,1010 +1 @@
-// Wake mail is claimed through the daemon and acknowledged by delivery identity
-// only after Pi settles. Deferred mail rides a natural input; a refused turn
-// releases its claims instead of acknowledging content the model never consumed.
-import { envNodeId, envProfileId, envWatcherDebounceMs, envWatcherTickMs } from '../shared/env.js';
-import { coalesceBrokerInbox, entryCards, reportRefNodeId, } from '../core/runtime/broker/inbox.js';
-import { acknowledgeBrokerMail, claimBrokerMail, brokerExtensionState } from '../core/runtime/broker/daemon-ops.js';
-import { wasTurnRefused } from '../core/runtime/broker/extension-abort.js';
-import { announceMessageOrigin } from '../core/runtime/stamp/channel.js';
-import { captureGoalIfAbsent, generateAndCommitInitialName } from './broker-local.js';
-import { emitEvent } from '../core/events/emit.js';
-import { errorClassFromError } from '../core/events/errors.js';
-import { operationIdContext } from '../core/events/operation-id.js';
-import { situationalContextEnvelope, SITUATIONAL_CONTEXT_CUSTOM_TYPE } from '../core/runtime/situational-context.js';
-import { isProfilePaused } from '../core/profiles/manifest.js';
-import { brokerIdleTurnStart, HELD_DEFERRED_INBOX_PROMPT_JOIN, } from '../core/runtime/broker/held-deferred-inbox.js';
-const MAX_PENDING_HANDOFFS = 64;
-const MAX_SOURCE_OPERATION_IDS = 16;
-let currentWatcher;
-let nextGeneration = 0;
-class WatcherFatalError extends Error {
-    constructor(message, cause) {
-        super(message, { cause });
-        this.name = 'WatcherFatalError';
-    }
-}
-function resolveCadence() {
-    return {
-        tickMs: envWatcherTickMs(),
-        debounceMs: envWatcherDebounceMs(),
-    };
-}
-function currentNodeId() {
-    const nodeId = envNodeId();
-    return nodeId === undefined || nodeId.trim() === '' ? undefined : nodeId;
-}
-/** Profile pause is read fresh each poll from its owning scoped store. */
-function profilePaused() {
-    const profileId = envProfileId();
-    return profileId !== undefined && profileId !== '' && isProfilePaused(profileId);
-}
-function safeErrorClass(error) {
-    try {
-        return errorClassFromError(error);
-    }
-    catch {
-        return { class: 'unknown' };
-    }
-}
-function emitBestEffort(input) {
-    try {
-        emitEvent(input);
-    }
-    catch {
-        // SQL delivery state remains authoritative if diagnostics fail.
-    }
-}
-function emitFreshBestEffort(input) {
-    try {
-        operationIdContext.fresh((operationId) => {
-            emitBestEffort({ ...input, operation_id: operationId });
-        });
-    }
-    catch {
-        // Diagnostic emission cannot replace the condition being diagnosed.
-    }
-}
-function emitStoredBestEffort(operationId, input) {
-    try {
-        operationIdContext.run(operationId, () => {
-            emitBestEffort({ ...input, operation_id: operationId });
-        });
-    }
-    catch {
-        // Delivery state remains authoritative when its observational record cannot append.
-    }
-}
-/** The authorship stamped onto a delivered message. A person's words arrive
- *  verbatim and are stamped as theirs — no channel, because the durable inbox
- *  is not a transport a reader can attribute. Every other delivery is the
- *  runtime's inbox card, carrying each entry's attribution as the coalescer
- *  received it. */
-function deliveryOrigin(delivery) {
-    if (delivery.kind === 'human')
-        return { type: 'human' };
-    return {
-        type: 'runtime',
-        kind: 'inbox',
-        entries: delivery.entries.map((entry) => ({
-            ...(entry.from === null ? {} : { from: entry.from }),
-            ...(entry.from_name === undefined ? {} : { fromName: entry.from_name }),
-            kind: entry.kind,
-            tier: entry.tier,
-            ...(entry.ref === undefined ? {} : { ref: entry.ref }),
-        })),
-    };
-}
-function deliveryFacts(entries, channel) {
-    if (entries.length === 0)
-        throw new Error(`cannot create an empty ${channel} delivery`);
-    const allSourceOperationIds = [...new Set(entries.map((entry) => entry.operation_id))].sort();
-    const omitted = allSourceOperationIds.length - MAX_SOURCE_OPERATION_IDS;
-    return {
-        channel,
-        entryIds: entries.map((entry) => entry.entry_id),
-        throughEntryId: entries.at(-1).entry_id,
-        sourceOperationIds: allSourceOperationIds.slice(0, MAX_SOURCE_OPERATION_IDS),
-        ...(omitted > 0 ? { sourceOperationIdsOmitted: omitted } : {}),
-    };
-}
-function deliveryFields(facts) {
-    return {
-        channel: facts.channel,
-        entry_ids: facts.entryIds,
-        through_entry_id: facts.throughEntryId,
-        source_operation_ids: facts.sourceOperationIds,
-        ...(facts.sourceOperationIdsOmitted === undefined
-            ? {}
-            : { source_operation_ids_omitted: facts.sourceOperationIdsOmitted }),
-    };
-}
-function emitDeliveryCompleted(handoff) {
-    emitStoredBestEffort(handoff.operationId, {
-        level: 'info',
-        event: 'inbox.delivery.completed',
-        outcome: 'succeeded',
-        fields: deliveryFields(handoff),
-    });
-}
-function emitDeliveryFailure(operationId, facts, stage, error) {
-    emitStoredBestEffort(operationId, {
-        level: 'error',
-        event: 'inbox.delivery.failed',
-        outcome: 'failed',
-        error,
-        error_class: safeErrorClass(error),
-        fields: { stage, ...deliveryFields(facts) },
-    });
-}
-function emitDeliveryAbandoned(handoff, reason) {
-    emitStoredBestEffort(handoff.operationId, {
-        level: 'error',
-        event: 'inbox.delivery.failed',
-        outcome: 'failed',
-        error_class: { class: 'unknown' },
-        fields: { stage: 'abandoned', reason, ...deliveryFields(handoff) },
-    });
-}
-function isSessionShutdownReason(value) {
-    return value === 'quit' || value === 'reload' || value === 'new' || value === 'resume' || value === 'fork';
-}
-function disposalReasonForShutdown(reason) {
-    switch (reason) {
-        case 'quit':
-            return 'shutdown';
-        case 'reload':
-        case 'new':
-        case 'resume':
-        case 'fork':
-            return 'reload';
-        default: {
-            const exhaustive = reason;
-            return exhaustive;
-        }
-    }
-}
-function boundedRuntimeReason(value) {
-    if (typeof value === 'string')
-        return value.slice(0, 128);
-    if (value === null)
-        return 'null';
-    if (value === undefined)
-        return 'undefined';
-    if (typeof value === 'number' || typeof value === 'boolean' || typeof value === 'bigint')
-        return String(value).slice(0, 128);
-    return typeof value;
-}
-class CanvasInboxWatcher {
-    pi;
-    cadence;
-    generation;
-    timer;
-    armed = false;
-    lastCtx;
-    streaming = false;
-    nodeId;
-    claims = new Map();
-    tickInFlight;
-    buffer = [];
-    lastArrival = 0;
-    pendingHandoffs = [];
-    pendingCommit;
-    promptJoinInFlight = false;
-    seeded = false;
-    disposed = false;
-    disposalReason;
-    fatalError;
-    fatalEscaped = false;
-    reportNodes = new Map();
-    reportNodesAsked = new Set();
-    reportNodesRefreshing = false;
-    constructor(pi, cadence, generation) {
-        this.pi = pi;
-        this.cadence = cadence;
-        this.generation = generation;
-    }
-    start() {
-        const capture = (event, ctx) => {
-            if (!this.canMutate())
-                return;
-            this.captureCtx(event, ctx);
-        };
-        // session_start is the ONLY arm point: pi rebinds its action methods
-        // (sendUserMessage/sendMessage) during session construction, AFTER every
-        // extension factory has already run, and emits session_start only once
-        // that bind has happened (see registerCanvasInboxWatcher's header note).
-        // Registering `this.pi.on(...)` here is side-effect-free (no Pi action is
-        // called), so the factory that constructs and starts this watcher can run
-        // safely during extension loading, before actions are bound. Arming the
-        // interval + running the first tick is deferred to `arm()`, which only
-        // this handler calls.
-        this.pi.on('session_start', (event, ctx) => {
-            if (!this.canMutate())
-                return;
-            this.captureCtx(event, ctx);
-            this.arm();
-            void this.refreshReportNodes(currentNodeId());
-        });
-        this.pi.on('turn_end', capture);
-        this.pi.on('agent_start', (event, ctx) => {
-            if (!this.canMutate())
-                return;
-            this.captureCtx(event, ctx);
-            this.streaming = true;
-        });
-        this.pi.on('agent_end', (event, ctx) => {
-            if (!this.canMutate())
-                return;
-            this.captureCtx(event, ctx);
-            this.streaming = false;
-            // agent_end can precede retry, compaction, or queued continuation.
-        });
-        this.pi.on('agent_settled', async (event, ctx) => {
-            if (!this.canMutate())
-                return;
-            this.captureCtx(event, ctx);
-            const nodeId = currentNodeId();
-            if (nodeId === undefined)
-                return;
-            try {
-                this.assertNodeOwnership(nodeId, 'settle');
-                await this.tickInFlight;
-                // Include kickoff claims even when the first turn settled before a poll.
-                if (!this.seeded)
-                    await this.claimMail(nodeId);
-                const result = await this.settle(nodeId, ctx, false, true);
-                if (result === 'refresh_held')
-                    this.dispose('refresh', false);
-            }
-            catch (error) {
-                this.dispose('shutdown', false, undefined, { error, stage: 'settle' });
-            }
-        });
-        this.pi.on('session_shutdown', async (event) => {
-            if (!this.canMutate())
-                return;
-            let runtimeReason;
-            try {
-                runtimeReason = event?.reason;
-            }
-            catch {
-                runtimeReason = undefined;
-            }
-            const reason = isSessionShutdownReason(runtimeReason)
-                ? disposalReasonForShutdown(runtimeReason)
-                : 'reload';
-            if (!isSessionShutdownReason(runtimeReason)) {
-                emitFreshBestEffort({
-                    level: 'warn',
-                    event: 'inbox.lifecycle.unknown_shutdown_reason',
-                    outcome: 'failed',
-                    fields: { reason: boundedRuntimeReason(runtimeReason) },
-                });
-            }
-            try {
-                // Refresh rejects receipts, preserving claims for the replacement broker.
-                await this.disposeAtSettlement(reason, this.lastCtx);
-            }
-            catch (error) {
-                this.dispose(reason, false, undefined, { error, stage: 'settle' });
-            }
-        });
-    }
-    /** Idempotent: arms the poll interval and runs the initial tick exactly
-     *  once, no matter how many times `session_start` fires (a resume, a fork,
-     *  or any other re-emission all land here). Called only from the
-     *  `session_start` handler above, so it never runs before Pi's action
-     *  methods are bound. */
-    async refreshReportNodes(nodeId) {
-        if (nodeId === undefined)
-            return;
-        this.reportNodesRefreshing = true;
-        try {
-            const state = await brokerExtensionState(nodeId);
-            if (!this.canMutate())
-                return;
-            this.reportNodes = new Map(state.report_nodes.map((node) => [node.node_id, node]));
-        }
-        catch {
-            // Report bodies remain canonical pointers until the daemon projection is available.
-        }
-        finally {
-            this.reportNodesRefreshing = false;
-        }
-    }
-    /** Refresh once per unknown report sender, so new children can inline their reports. */
-    refreshForUnknownReportRefs() {
-        const unknown = [];
-        for (const entry of this.buffer) {
-            const refNodeId = reportRefNodeId(entry.ref);
-            if (refNodeId === undefined)
-                continue;
-            if (this.reportNodes.has(refNodeId) || this.reportNodesAsked.has(refNodeId))
-                continue;
-            unknown.push(refNodeId);
-        }
-        if (unknown.length === 0)
-            return false;
-        for (const refNodeId of unknown)
-            this.reportNodesAsked.add(refNodeId);
-        void this.refreshReportNodes(currentNodeId());
-        return this.reportNodesRefreshing;
-    }
-    arm() {
-        if (this.armed)
-            return;
-        this.armed = true;
-        this.timer = setInterval(() => this.runTick(), this.cadence.tickMs);
-        if (typeof this.timer.unref === 'function')
-            this.timer.unref();
-        // A revived broker can already have persisted inbox work. Buffer it now so
-        // the normal debounce owns delivery instead of waiting a full tick.
-        this.runTick('schedule');
-    }
-    /** Await graceful-shutdown receipts before disposing their in-process state. */
-    async disposeAtSettlement(reason, ctx) {
-        const nodeId = currentNodeId();
-        if (nodeId === undefined) {
-            this.dispose(reason, false);
-            return;
-        }
-        try {
-            this.assertNodeOwnership(nodeId, 'settle');
-            const result = await this.settle(nodeId, ctx, reason !== 'refresh');
-            this.dispose(result === 'refresh_held' ? 'refresh' : reason, false);
-        }
-        catch (error) {
-            this.dispose(reason, false, undefined, { error, stage: 'settle' });
-        }
-    }
-    dispose(reason, _atSettleBoundary, _settleCtx, fatalDisposal) {
-        if (this.disposed)
-            return;
-        this.disposed = true;
-        this.disposalReason = reason;
-        this.clearTimer();
-        const fatal = fatalDisposal;
-        {
-            const abandoned = [
-                ...(this.pendingCommit?.handoffs ?? []),
-                ...this.pendingHandoffs.splice(0),
-            ];
-            this.buffer.length = 0;
-            this.claims.clear();
-            this.reportNodes.clear();
-            this.reportNodesAsked.clear();
-            this.pendingCommit = undefined;
-            this.promptJoinInFlight = false;
-            this.nodeId = undefined;
-            this.lastCtx = undefined;
-            this.lastArrival = 0;
-            this.streaming = false;
-            this.seeded = false;
-            if (this.ownsCurrentGeneration())
-                currentWatcher = undefined;
-            for (const handoff of abandoned)
-                emitDeliveryAbandoned(handoff, reason);
-        }
-        if (fatal !== undefined) {
-            this.scheduleHandlerFatal(fatal.error, fatal.stage);
-            return;
-        }
-    }
-    ownsCurrentGeneration() {
-        return currentWatcher === this && currentWatcher.generation === this.generation;
-    }
-    canMutate() {
-        return this.ownsCurrentGeneration() && !this.disposed && this.fatalError === undefined;
-    }
-    captureCtx(_event, ctx) {
-        if (ctx !== undefined)
-            this.lastCtx = ctx;
-    }
-    clearTimer() {
-        if (this.timer === undefined)
-            return;
-        clearInterval(this.timer);
-        this.timer = undefined;
-    }
-    isIdle() {
-        try {
-            if (typeof this.lastCtx?.isIdle === 'function')
-                return this.lastCtx.isIdle() === true;
-        }
-        catch {
-            // The streaming flag remains the local idle signal when context inspection fails.
-        }
-        return !this.streaming;
-    }
-    assertNodeOwnership(nodeId, stage) {
-        if (!this.seeded || this.nodeId === undefined || this.nodeId === nodeId)
-            return;
-        this.raiseReadFatal(stage, new Error(`watcher node changed from ${this.nodeId} to ${nodeId}`));
-    }
-    raiseFatal(event, message, error, fields) {
-        if (this.fatalError === undefined) {
-            this.fatalError = new WatcherFatalError(message, error);
-            this.clearTimer();
-            emitFreshBestEffort({
-                level: 'error',
-                event,
-                outcome: 'failed',
-                error,
-                error_class: safeErrorClass(error),
-                fields,
-            });
-        }
-        throw this.fatalError;
-    }
-    raiseReadFatal(stage, error) {
-        return this.raiseFatal('inbox.read.failed', `inbox ${stage} state is corrupt`, error, { stage });
-    }
-    raiseSituationalFatal(markerEntryId, error) {
-        return this.raiseFatal('inbox.situational_context.missing', 'situational context marker has no readable sidecar', error, {
-            entry_id: markerEntryId,
-        });
-    }
-    escapeFatal(error, mode) {
-        if (this.fatalEscaped)
-            return;
-        this.fatalEscaped = true;
-        if (mode === 'throw')
-            throw error;
-        queueMicrotask(() => {
-            throw error;
-        });
-    }
-    scheduleHandlerFatal(error, stage) {
-        let fatal;
-        if (error instanceof WatcherFatalError) {
-            fatal = error;
-        }
-        else {
-            try {
-                this.raiseReadFatal(stage, error);
-            }
-            catch (tagged) {
-                fatal = tagged;
-            }
-        }
-        this.escapeFatal(fatal, 'schedule');
-    }
-    runTick(_fatalMode = 'throw') {
-        if (!this.canMutate() || this.tickInFlight !== undefined)
-            return;
-        const attempt = this.tick().catch((error) => {
-            if (this.canMutate())
-                this.scheduleHandlerFatal(error, 'poll');
-        }).finally(() => {
-            if (this.tickInFlight === attempt)
-                this.tickInFlight = undefined;
-        });
-        this.tickInFlight = attempt;
-    }
-    async claimMail(nodeId) {
-        this.assertNodeOwnership(nodeId, 'poll');
-        const result = await claimBrokerMail(nodeId, 'wake');
-        if (!this.canMutate())
-            return false;
-        if (result.action === 'hold')
-            return false;
-        this.nodeId = nodeId;
-        this.seeded = true;
-        const activeIds = new Set(result.deliveries.map((claim) => claim.entry.entry_id));
-        // A canceled buffered delivery disappears from the daemon's claim query.
-        const canceled = this.buffer.filter((entry) => !activeIds.has(entry.entry_id));
-        for (const entry of canceled)
-            this.claims.delete(entry.entry_id);
-        this.buffer.splice(0, this.buffer.length, ...this.buffer.filter((entry) => activeIds.has(entry.entry_id)));
-        for (const claim of result.deliveries) {
-            const id = claim.entry.entry_id;
-            if (this.claims.has(id))
-                continue;
-            this.claims.set(id, claim);
-            if (claim.handoff === 'inherited') {
-                operationIdContext.fresh((operationId) => {
-                    this.pendingHandoffs.push({ ...deliveryFacts([claim.entry], 'visible'), operationId, settleAtAgentSettled: true });
-                });
-            }
-            else {
-                this.buffer.push(claim.entry);
-                this.lastArrival = Date.now();
-            }
-        }
-        return true;
-    }
-    async tick() {
-        const nodeId = currentNodeId();
-        if (nodeId === undefined)
-            return;
-        if (this.pendingCommit !== undefined) {
-            const result = await this.retryPendingCommit(nodeId);
-            if (result === 'refresh_held' && this.canMutate())
-                this.dispose('refresh', false);
-            return;
-        }
-        if (this.promptJoinInFlight || profilePaused())
-            return;
-        if (this.pendingHandoffs.length >= MAX_PENDING_HANDOFFS)
-            return;
-        if (!await this.claimMail(nodeId))
-            return;
-        if (this.buffer.length > 0 && Date.now() - this.lastArrival >= this.cadence.debounceMs) {
-            if (this.refreshForUnknownReportRefs())
-                return;
-            this.flushOrdinary(nodeId);
-        }
-    }
-    missingChannelEntries(entries) {
-        // Each claim refresh removes canceled buffered entries before either channel sends.
-        const live = entries.filter((entry) => this.claims.has(entry.entry_id));
-        const hiddenCoverage = this.coveredEntryIds('hidden');
-        const visibleCoverage = this.coveredEntryIds('visible');
-        return {
-            // The context channel carries a batch's sidecar card and the one-shot
-            // cards of entries that get no visible delivery of their own. A
-            // `situationalOnly` entry is in NO other channel, so its coverage and
-            // commit depend on being routed here even when it carries no sidecar.
-            hiddenEntries: live.filter((entry) => (entry.data?.['situational'] === true || entry.data?.['situationalOnly'] === true)
-                && !hiddenCoverage.has(entry.entry_id)),
-            visibleEntries: live.filter((entry) => entry.data?.['situationalOnly'] !== true && !visibleCoverage.has(entry.entry_id)),
-        };
-    }
-    visibleRoute(entries) {
-        if (entries.length === 0)
-            return 'none';
-        if (this.isIdle())
-            return 'idle';
-        if (entries.some((entry) => entry.tier === 'critical'))
-            return 'critical';
-        if (entries.some((entry) => entry.tier === 'urgent' || entry.kind === 'final'))
-            return 'steer';
-        return 'followUp';
-    }
-    buildPlan(entries) {
-        const { hiddenEntries, visibleEntries } = this.missingChannelEntries(entries);
-        const hiddenIds = new Set(hiddenEntries.map((entry) => entry.entry_id));
-        const visibleIds = new Set(visibleEntries.map((entry) => entry.entry_id));
-        const routedEntries = entries.filter((entry) => hiddenIds.has(entry.entry_id) || visibleIds.has(entry.entry_id));
-        // Deferred-only idle mail remains in this buffer until a non-deferred inbox
-        // entry starts delivery, or a live human prompt claims it through
-        // prependHeldDeferredInbox(). Neither path wakes the node on its own.
-        const deferredHold = this.isIdle()
-            && routedEntries.length > 0
-            && routedEntries.every((entry) => entry.tier === 'deferred');
-        // A critical entry aborts and requeues the whole batch before anything is
-        // sent, so neither channel counts against handoff capacity.
-        const critical = this.visibleRoute(visibleEntries) === 'critical';
-        const hiddenSend = !deferredHold && !critical && hiddenEntries.length > 0;
-        const visibleSend = !deferredHold && !critical && visibleEntries.length > 0;
-        return {
-            hiddenEntries,
-            visibleEntries,
-            deferredHold,
-            sendCount: Number(hiddenSend) + Number(visibleSend),
-        };
-    }
-    ordinaryPlan() {
-        return this.buildPlan(this.buffer);
-    }
-    /** The context channel's ordered cards for one batch: the sidecar envelope
-     *  once (a batch containing any situational-marked entry), then the one-shot
-     *  cards of entries that have no visible delivery to ride. */
-    contextCards(nodeId, entries) {
-        const cards = [];
-        if (entries.some((entry) => entry.data?.['situational'] === true)) {
-            const markerEntryId = entries.at(-1).entry_id;
-            let envelope;
-            try {
-                envelope = situationalContextEnvelope(nodeId);
-            }
-            catch (error) {
-                this.raiseSituationalFatal(markerEntryId, error);
-            }
-            if (envelope === null) {
-                this.raiseSituationalFatal(markerEntryId, new Error(`missing situational context for entry ${markerEntryId}`));
-            }
-            cards.push(envelope);
-        }
-        for (const entry of entries) {
-            if (entry.data?.['situationalOnly'] === true)
-                cards.push(...entryCards(entry));
-        }
-        return cards;
-    }
-    digest(entries, stage) {
-        try {
-            return coalesceBrokerInbox(entries, this.reportNodes);
-        }
-        catch (error) {
-            this.raiseReadFatal(stage, error);
-        }
-    }
-    sendDelivery(channel, entries, send, fatalStage) {
-        if (this.pendingHandoffs.length >= MAX_PENDING_HANDOFFS) {
-            this.raiseReadFatal(fatalStage, new Error(`pending handoff capacity exceeded before ${channel} send`));
-        }
-        let facts;
-        try {
-            facts = deliveryFacts(entries, channel);
-        }
-        catch (error) {
-            this.raiseReadFatal(fatalStage, error);
-        }
-        let operationId;
-        try {
-            operationIdContext.fresh((freshOperationId) => {
-                operationId = freshOperationId;
-                emitBestEffort({
-                    level: 'info',
-                    event: 'inbox.delivery.started',
-                    operation_id: freshOperationId,
-                    fields: deliveryFields(facts),
-                });
-                send();
-            });
-        }
-        catch (error) {
-            if (operationId === undefined)
-                this.raiseReadFatal(fatalStage, error);
-            emitDeliveryFailure(operationId, facts, 'send', error);
-            return 'failed';
-        }
-        if (operationId === undefined) {
-            this.raiseReadFatal(fatalStage, new Error(`${channel} delivery returned without an operation id`));
-        }
-        const handoff = { operationId, ...facts };
-        if (!this.canMutate()) {
-            if (this.disposed && this.disposalReason !== undefined)
-                emitDeliveryAbandoned(handoff, this.disposalReason);
-            return 'inactive';
-        }
-        this.pendingHandoffs.push(handoff);
-        return 'handed-off';
-    }
-    /** Send the batch's context cards. `route` is the route the visible delivery
-     *  of this same cycle takes, so a streaming card queues behind nothing and
-     *  ahead of the body. `triggersTurn` is set only when this cycle has no
-     *  visible send at all — then the LAST card carries the wake. */
-    sendContext(nodeId, entries, cards, route, triggersTurn, stage) {
-        return this.sendDelivery('hidden', entries, () => {
-            const streamingRoute = route === 'steer' || route === 'followUp'
-                ? route
-                : this.isIdle() ? undefined : 'followUp';
-            cards.forEach((card, index) => {
-                const wake = triggersTurn && index === cards.length - 1;
-                this.pi.sendMessage({
-                    customType: SITUATIONAL_CONTEXT_CUSTOM_TYPE,
-                    content: card,
-                    display: true,
-                    details: { nodeId },
-                }, streamingRoute !== undefined
-                    ? { deliverAs: streamingRoute }
-                    : wake ? { deliverAs: 'followUp', triggerTurn: true } : {});
-            });
-        }, stage);
-    }
-    /** The visible delivery and its own entry's one-shot cards share ONE failure
-     *  unit: a throw anywhere requeues the whole entry, so a retry may repeat a
-     *  card already handed off (context is restatable; the human's body is not,
-     *  and it is sent last). */
-    sendVisible(entries, cards, content, origin, route, stage) {
-        return this.sendDelivery('visible', entries, () => {
-            if (route !== 'idle' && route !== 'steer' && route !== 'followUp') {
-                throw new Error(`visible send requested for non-send route ${route}`);
-            }
-            for (const card of cards) {
-                this.pi.sendMessage({ customType: SITUATIONAL_CONTEXT_CUSTOM_TYPE, content: card, display: true }, route === 'idle' ? {} : { deliverAs: route });
-            }
-            // Claimed by the stamp writer against the message pi persists, so a send
-            // that throws here leaves an announcement nobody claims rather than one
-            // that mislabels a later message.
-            announceMessageOrigin(content, origin);
-            if (route === 'idle') {
-                const start = brokerIdleTurnStart();
-                if (start === undefined)
-                    throw new Error('broker idle-turn admission is unavailable');
-                start(content);
-            }
-            else {
-                this.pi.sendUserMessage(content, { deliverAs: route });
-            }
-        }, stage);
-    }
-    abortCritical() {
-        try {
-            this.lastCtx?.abort?.();
-        }
-        catch {
-            // Abort is best-effort; the retained entries remain the retry source.
-        }
-    }
-    requeueFromBatch(batch, entryIds) {
-        if (entryIds.size === 0)
-            return;
-        const requeued = batch.filter((entry) => entryIds.has(entry.entry_id));
-        const requeuedIds = new Set(requeued.map((entry) => entry.entry_id));
-        const tail = this.buffer.filter((entry) => !requeuedIds.has(entry.entry_id));
-        this.buffer.splice(0, this.buffer.length, ...requeued, ...tail);
-    }
-    executePlan(nodeId, plan, stage) {
-        const requeueEntryIds = new Set();
-        // Route over the WHOLE visible set BEFORE anything is sent: a critical entry
-        // anywhere aborts the live turn and requeues the batch, cards included.
-        const route = this.visibleRoute(plan.visibleEntries);
-        if (route === 'critical') {
-            this.abortCritical();
-            if (!this.canMutate())
-                return { inactive: true, requeueEntryIds };
-            for (const entry of plan.visibleEntries)
-                requeueEntryIds.add(entry.entry_id);
-            for (const entry of plan.hiddenEntries)
-                requeueEntryIds.add(entry.entry_id);
-            return { inactive: false, requeueEntryIds };
-        }
-        // A mixed batch splits into several deliveries, and exactly one goes out
-        // per cycle: pi marks the session streaming only after awaits inside
-        // prompt(), so two user sends in one tick start two concurrent agent runs.
-        // The rest requeue and go out on later ticks, in order, behind this one —
-        // a requeued delivery's one-shot cards requeue with it.
-        const deliveries = plan.visibleEntries.length > 0 ? this.digest(plan.visibleEntries, stage) : [];
-        const [delivery, ...deferred] = deliveries;
-        for (const rest of deferred) {
-            for (const entry of rest.entries)
-                requeueEntryIds.add(entry.entry_id);
-        }
-        if (plan.hiddenEntries.length > 0) {
-            const cards = this.contextCards(nodeId, plan.hiddenEntries);
-            const result = this.sendContext(nodeId, plan.hiddenEntries, cards, route, delivery === undefined, stage);
-            if (result === 'inactive')
-                return { inactive: true, requeueEntryIds };
-            if (result === 'failed') {
-                for (const entry of plan.hiddenEntries)
-                    requeueEntryIds.add(entry.entry_id);
-            }
-        }
-        if (!this.canMutate())
-            return { inactive: true, requeueEntryIds };
-        if (delivery !== undefined) {
-            const result = this.sendVisible(delivery.entries, delivery.cards, delivery.text, deliveryOrigin(delivery), route, stage);
-            if (result === 'inactive')
-                return { inactive: true, requeueEntryIds };
-            if (result === 'failed') {
-                for (const entry of delivery.entries)
-                    requeueEntryIds.add(entry.entry_id);
-            }
-            else if (delivery.kind === 'human') {
-                // A person's own words, delivered through the durable inbox because the
-                // broker was cold when they arrived (crtrd's revive path, not pi's live
-                // socket). pi never fires its own `input` event for this path, so
-                // canvas-goal-capture's first-message hooks never run — mirror both here
-                // so an inbox-delivered first message names the node and survives a
-                // fresh revive exactly like a live-socket one. Both helpers are
-                // idempotent (no-op once a goal/description already exists).
-                captureGoalIfAbsent(nodeId, delivery.text);
-                generateAndCommitInitialName(nodeId, delivery.text);
-            }
-        }
-        return { inactive: false, requeueEntryIds };
-    }
-    flushOrdinary(nodeId) {
-        if (this.buffer.length === 0)
-            return 'empty';
-        const plan = this.ordinaryPlan();
-        if (plan.deferredHold)
-            return 'held';
-        if (this.pendingHandoffs.length + plan.sendCount > MAX_PENDING_HANDOFFS)
-            return 'capacity-blocked';
-        const batch = [...this.buffer];
-        const execution = this.executePlan(nodeId, plan, 'poll');
-        if (execution.inactive)
-            return 'attempted';
-        this.buffer.splice(0, batch.length);
-        this.requeueFromBatch(batch, execution.requeueEntryIds);
-        return 'attempted';
-    }
-    /** Deferred mail joins an admitted human prompt but remains unacknowledged until settlement. */
-    async prependHeldDeferredInbox(session) {
-        if (!this.canMutate() || this.nodeId === undefined || profilePaused())
-            return;
-        const plan = this.ordinaryPlan();
-        if (!plan.deferredHold)
-            return;
-        const deliveries = plan.visibleEntries.length === 0
-            ? []
-            : this.digest(plan.visibleEntries, 'poll');
-        const handoffCount = Number(plan.hiddenEntries.length > 0) + deliveries.length;
-        if (this.pendingHandoffs.length + handoffCount > MAX_PENDING_HANDOFFS)
-            return;
-        const batch = [...this.buffer];
-        this.promptJoinInFlight = true;
-        try {
-            if (plan.hiddenEntries.length > 0) {
-                await this.sendPromptJoinDelivery(session, 'hidden', plan.hiddenEntries, this.contextCards(this.nodeId, plan.hiddenEntries));
-            }
-            for (const delivery of deliveries) {
-                await this.sendPromptJoinDelivery(session, 'visible', delivery.entries, [...delivery.cards, delivery.text]);
-            }
-            if (!this.canMutate())
-                return;
-            this.buffer.splice(0, batch.length);
-        }
-        finally {
-            this.promptJoinInFlight = false;
-        }
-    }
-    async sendPromptJoinDelivery(session, channel, entries, messages) {
-        let facts;
-        try {
-            facts = deliveryFacts(entries, channel);
-        }
-        catch (error) {
-            this.raiseReadFatal('poll', error);
-        }
-        let operationId;
-        try {
-            await operationIdContext.fresh(async (freshOperationId) => {
-                operationId = freshOperationId;
-                emitBestEffort({
-                    level: 'info',
-                    event: 'inbox.delivery.started',
-                    operation_id: freshOperationId,
-                    fields: deliveryFields(facts),
-                });
-                for (const content of messages) {
-                    await session.sendCustomMessage({
-                        customType: SITUATIONAL_CONTEXT_CUSTOM_TYPE,
-                        content,
-                        display: true,
-                    });
-                }
-            });
-        }
-        catch (error) {
-            if (operationId === undefined)
-                this.raiseReadFatal('poll', error);
-            emitDeliveryFailure(operationId, facts, 'send', error);
-            throw error;
-        }
-        if (operationId === undefined) {
-            this.raiseReadFatal('poll', new Error(`${channel} prompt-join delivery returned without an operation id`));
-        }
-        const handoff = { operationId, ...facts, settleAtAgentSettled: true };
-        if (!this.canMutate()) {
-            if (this.disposed && this.disposalReason !== undefined)
-                emitDeliveryAbandoned(handoff, this.disposalReason);
-            return;
-        }
-        this.pendingHandoffs.push(handoff);
-    }
-    coveredEntryIds(channel) {
-        const covered = new Set();
-        for (const handoff of this.pendingHandoffs) {
-            if (handoff.channel !== channel)
-                continue;
-            for (const entryId of handoff.entryIds)
-                covered.add(entryId);
-        }
-        return covered;
-    }
-    retryPendingCommit(nodeId) {
-        const pending = this.pendingCommit;
-        if (pending === undefined)
-            return Promise.resolve('settled');
-        if (pending.attempt !== undefined)
-            return pending.attempt;
-        const attempt = this.attemptPendingCommit(nodeId, pending).finally(() => {
-            if (pending.attempt === attempt)
-                pending.attempt = undefined;
-        });
-        pending.attempt = attempt;
-        return attempt;
-    }
-    async attemptPendingCommit(nodeId, pending) {
-        let acknowledged = false;
-        try {
-            const directive = await acknowledgeBrokerMail(nodeId, pending.receipts);
-            if (directive.action === 'hold')
-                return 'refresh_held';
-            for (const receipt of pending.receipts) {
-                const result = directive.results.find((result) => result.delivery_id === receipt.delivery_id);
-                if (result?.outcome !== receipt.disposition && result?.outcome !== 'stale')
-                    throw new Error('daemon returned no terminal mail settlement outcome');
-            }
-            acknowledged = directive.results.every((result) => result.outcome === 'acknowledged');
-        }
-        catch (error) {
-            if (this.pendingCommit === pending) {
-                for (const handoff of pending.handoffs) {
-                    emitDeliveryFailure(handoff.operationId, handoff, 'receipt_commit', error);
-                }
-            }
-            return 'held';
-        }
-        if (this.pendingCommit !== pending)
-            return 'settled';
-        for (const id of pending.entryIds)
-            this.claims.delete(id);
-        if (pending.receipts.some((receipt) => receipt.disposition === 'released')) {
-            const released = new Set(pending.entryIds);
-            this.buffer.splice(0, this.buffer.length, ...this.buffer.filter((entry) => !released.has(entry.entry_id)));
-        }
-        this.pendingCommit = undefined;
-        const completed = this.detachPending((handoff) => handoff.entryIds.every((id) => !this.claims.has(id)));
-        for (const handoff of completed) {
-            if (acknowledged)
-                emitDeliveryCompleted(handoff);
-        }
-        return 'settled';
-    }
-    async settle(nodeId, ctx, holdPendingMessages, atAgentSettled = false) {
-        if (holdPendingMessages) {
-            try {
-                if (ctx?.hasPendingMessages?.() === true)
-                    return 'held';
-            }
-            catch {
-                // A missing context signal does not invent a pending-message hold.
-            }
-        }
-        if (this.pendingCommit !== undefined)
-            return this.retryPendingCommit(nodeId);
-        const refused = wasTurnRefused();
-        const buffered = new Set(this.buffer.map((entry) => entry.entry_id));
-        const eligible = this.pendingHandoffs.filter((handoff) => atAgentSettled || handoff.settleAtAgentSettled !== true);
-        const handedOff = new Set(eligible.flatMap((handoff) => [...handoff.entryIds]));
-        const entryIds = [...this.claims.keys()].filter((id) => refused || (handedOff.has(id) && !buffered.has(id)));
-        if (entryIds.length === 0)
-            return 'settled';
-        this.pendingCommit = {
-            handoffs: eligible,
-            entryIds,
-            receipts: entryIds.map((id) => {
-                const claim = this.claims.get(id);
-                return { delivery_id: claim.delivery_id, attempts: claim.attempts, disposition: refused ? 'released' : 'acknowledged' };
-            }),
-        };
-        return this.retryPendingCommit(nodeId);
-    }
-    detachPending(predicate) {
-        const removed = [];
-        for (let index = this.pendingHandoffs.length - 1; index >= 0; index -= 1) {
-            const handoff = this.pendingHandoffs[index];
-            if (!predicate(handoff))
-                continue;
-            removed.push(...this.pendingHandoffs.splice(index, 1));
-        }
-        removed.reverse();
-        return removed;
-    }
-}
-function installWatcher(pi, cadence) {
-    currentWatcher?.dispose('reload', false);
-    const watcher = new CanvasInboxWatcher(pi, cadence, ++nextGeneration);
-    currentWatcher = watcher;
-    // Pi loads this extension through Jiti while the broker driver is native ESM,
-    // so their module-level singletons differ. Register the bound watcher on the
-    // process-global key that the broker reads immediately before a human prompt.
-    const promptJoin = (session) => watcher.prependHeldDeferredInbox(session);
-    globalThis[HELD_DEFERRED_INBOX_PROMPT_JOIN] = promptJoin;
-    try {
-        watcher.start();
-    }
-    catch (error) {
-        watcher.dispose('reload', false);
-        throw error;
-    }
-    return watcher;
-}
-/** Register one current watcher. `start()` only wires up pi's event handlers —
- *  it calls no Pi action, so this is safe to run during extension factory
- *  execution, before Pi has bound its action methods (sendUserMessage /
- *  sendMessage throw until then). The watcher only starts polling and sending
- *  once its own `session_start` handler fires and arms it — the first event
- *  Pi emits once actions are bound. The returned disposer owns only this
- *  registration's generation. */
-export function registerCanvasInboxWatcher(pi) {
-    const watcher = installWatcher(pi, resolveCadence());
-    return () => watcher.dispose('shutdown', false);
-}
-export default registerCanvasInboxWatcher;
+var N=Object.defineProperty;var f=(s,t)=>N(s,"name",{value:t,configurable:!0});import{envNodeId as S,envProfileId as A,envWatcherDebounceMs as O,envWatcherTickMs as P}from"../shared/env.js";import{coalesceBrokerInbox as H,entryCards as T,reportRefNodeId as D}from"../core/runtime/broker/inbox.js";import{acknowledgeBrokerMail as U,claimBrokerMail as q,brokerExtensionState as B}from"../core/runtime/broker/daemon-ops.js";import{wasTurnRefused as J}from"../core/runtime/broker/extension-abort.js";import{announceMessageOrigin as $}from"../core/runtime/stamp/channel.js";import{captureGoalIfAbsent as W,generateAndCommitInitialName as G}from"./broker-local.js";import{emitEvent as X}from"../core/events/emit.js";import{errorClassFromError as L}from"../core/events/errors.js";import{operationIdContext as u}from"../core/events/operation-id.js";import{situationalContextEnvelope as V,SITUATIONAL_CONTEXT_CUSTOM_TYPE as w}from"../core/runtime/situational-context.js";import{isProfilePaused as j}from"../core/profiles/manifest.js";import{brokerIdleTurnStart as z,HELD_DEFERRED_INBOX_PROMPT_JOIN as Y}from"../core/runtime/broker/held-deferred-inbox.js";const g=64,C=16;let p,K=0;class x extends Error{static{f(this,"WatcherFatalError")}constructor(t,e){super(t,{cause:e}),this.name="WatcherFatalError"}}function Q(){return{tickMs:P(),debounceMs:O()}}f(Q,"resolveCadence");function m(){const s=S();return s===void 0||s.trim()===""?void 0:s}f(m,"currentNodeId");function k(){const s=A();return s!==void 0&&s!==""&&j(s)}f(k,"profilePaused");function F(s){try{return L(s)}catch{return{class:"unknown"}}}f(F,"safeErrorClass");function v(s){try{X(s)}catch{}}f(v,"emitBestEffort");function M(s){try{u.fresh(t=>{v({...s,operation_id:t})})}catch{}}f(M,"emitFreshBestEffort");function b(s,t){try{u.run(s,()=>{v({...t,operation_id:s})})}catch{}}f(b,"emitStoredBestEffort");function Z(s){return s.kind==="human"?{type:"human"}:{type:"runtime",kind:"inbox",entries:s.entries.map(t=>({...t.from===null?{}:{from:t.from},...t.from_name===void 0?{}:{fromName:t.from_name},kind:t.kind,tier:t.tier,...t.ref===void 0?{}:{ref:t.ref}}))}}f(Z,"deliveryOrigin");function _(s,t){if(s.length===0)throw new Error(`cannot create an empty ${t} delivery`);const e=[...new Set(s.map(n=>n.operation_id))].sort(),i=e.length-C;return{channel:t,entryIds:s.map(n=>n.entry_id),throughEntryId:s.at(-1).entry_id,sourceOperationIds:e.slice(0,C),...i>0?{sourceOperationIdsOmitted:i}:{}}}f(_,"deliveryFacts");function y(s){return{channel:s.channel,entry_ids:s.entryIds,through_entry_id:s.throughEntryId,source_operation_ids:s.sourceOperationIds,...s.sourceOperationIdsOmitted===void 0?{}:{source_operation_ids_omitted:s.sourceOperationIdsOmitted}}}f(y,"deliveryFields");function ee(s){b(s.operationId,{level:"info",event:"inbox.delivery.completed",outcome:"succeeded",fields:y(s)})}f(ee,"emitDeliveryCompleted");function I(s,t,e,i){b(s,{level:"error",event:"inbox.delivery.failed",outcome:"failed",error:i,error_class:F(i),fields:{stage:e,...y(t)}})}f(I,"emitDeliveryFailure");function E(s,t){b(s.operationId,{level:"error",event:"inbox.delivery.failed",outcome:"failed",error_class:{class:"unknown"},fields:{stage:"abandoned",reason:t,...y(s)}})}f(E,"emitDeliveryAbandoned");function R(s){return s==="quit"||s==="reload"||s==="new"||s==="resume"||s==="fork"}f(R,"isSessionShutdownReason");function te(s){switch(s){case"quit":return"shutdown";case"reload":case"new":case"resume":case"fork":return"reload";default:return s}}f(te,"disposalReasonForShutdown");function ie(s){return typeof s=="string"?s.slice(0,128):s===null?"null":s===void 0?"undefined":typeof s=="number"||typeof s=="boolean"||typeof s=="bigint"?String(s).slice(0,128):typeof s}f(ie,"boundedRuntimeReason");class re{static{f(this,"CanvasInboxWatcher")}pi;cadence;generation;timer;armed=!1;lastCtx;streaming=!1;nodeId;claims=new Map;tickInFlight;buffer=[];lastArrival=0;pendingHandoffs=[];pendingCommit;promptJoinInFlight=!1;seeded=!1;disposed=!1;disposalReason;fatalError;fatalEscaped=!1;reportNodes=new Map;reportNodesAsked=new Set;reportNodesRefreshing=!1;constructor(t,e,i){this.pi=t,this.cadence=e,this.generation=i}start(){const t=f((e,i)=>{this.canMutate()&&this.captureCtx(e,i)},"capture");this.pi.on("session_start",(e,i)=>{this.canMutate()&&(this.captureCtx(e,i),this.arm(),this.refreshReportNodes(m()))}),this.pi.on("turn_end",t),this.pi.on("agent_start",(e,i)=>{this.canMutate()&&(this.captureCtx(e,i),this.streaming=!0)}),this.pi.on("agent_end",(e,i)=>{this.canMutate()&&(this.captureCtx(e,i),this.streaming=!1)}),this.pi.on("agent_settled",async(e,i)=>{if(!this.canMutate())return;this.captureCtx(e,i);const n=m();if(n!==void 0)try{this.assertNodeOwnership(n,"settle"),await this.tickInFlight,this.seeded||await this.claimMail(n),await this.settle(n,i,!1,!0)==="refresh_held"&&this.dispose("refresh",!1)}catch(r){this.dispose("shutdown",!1,void 0,{error:r,stage:"settle"})}}),this.pi.on("session_shutdown",async e=>{if(!this.canMutate())return;let i;try{i=e?.reason}catch{i=void 0}const n=R(i)?te(i):"reload";R(i)||M({level:"warn",event:"inbox.lifecycle.unknown_shutdown_reason",outcome:"failed",fields:{reason:ie(i)}});try{await this.disposeAtSettlement(n,this.lastCtx)}catch(r){this.dispose(n,!1,void 0,{error:r,stage:"settle"})}})}async refreshReportNodes(t){if(t!==void 0){this.reportNodesRefreshing=!0;try{const e=await B(t);if(!this.canMutate())return;this.reportNodes=new Map(e.report_nodes.map(i=>[i.node_id,i]))}catch{}finally{this.reportNodesRefreshing=!1}}}refreshForUnknownReportRefs(){const t=[];for(const e of this.buffer){const i=D(e.ref);i!==void 0&&(this.reportNodes.has(i)||this.reportNodesAsked.has(i)||t.push(i))}if(t.length===0)return!1;for(const e of t)this.reportNodesAsked.add(e);return this.refreshReportNodes(m()),this.reportNodesRefreshing}arm(){this.armed||(this.armed=!0,this.timer=setInterval(()=>this.runTick(),this.cadence.tickMs),typeof this.timer.unref=="function"&&this.timer.unref(),this.runTick("schedule"))}async disposeAtSettlement(t,e){const i=m();if(i===void 0){this.dispose(t,!1);return}try{this.assertNodeOwnership(i,"settle");const n=await this.settle(i,e,t!=="refresh");this.dispose(n==="refresh_held"?"refresh":t,!1)}catch(n){this.dispose(t,!1,void 0,{error:n,stage:"settle"})}}dispose(t,e,i,n){if(this.disposed)return;this.disposed=!0,this.disposalReason=t,this.clearTimer();const r=n;{const o=[...this.pendingCommit?.handoffs??[],...this.pendingHandoffs.splice(0)];this.buffer.length=0,this.claims.clear(),this.reportNodes.clear(),this.reportNodesAsked.clear(),this.pendingCommit=void 0,this.promptJoinInFlight=!1,this.nodeId=void 0,this.lastCtx=void 0,this.lastArrival=0,this.streaming=!1,this.seeded=!1,this.ownsCurrentGeneration()&&(p=void 0);for(const a of o)E(a,t)}if(r!==void 0){this.scheduleHandlerFatal(r.error,r.stage);return}}ownsCurrentGeneration(){return p===this&&p.generation===this.generation}canMutate(){return this.ownsCurrentGeneration()&&!this.disposed&&this.fatalError===void 0}captureCtx(t,e){e!==void 0&&(this.lastCtx=e)}clearTimer(){this.timer!==void 0&&(clearInterval(this.timer),this.timer=void 0)}isIdle(){try{if(typeof this.lastCtx?.isIdle=="function")return this.lastCtx.isIdle()===!0}catch{}return!this.streaming}assertNodeOwnership(t,e){!this.seeded||this.nodeId===void 0||this.nodeId===t||this.raiseReadFatal(e,new Error(`watcher node changed from ${this.nodeId} to ${t}`))}raiseFatal(t,e,i,n){throw this.fatalError===void 0&&(this.fatalError=new x(e,i),this.clearTimer(),M({level:"error",event:t,outcome:"failed",error:i,error_class:F(i),fields:n})),this.fatalError}raiseReadFatal(t,e){return this.raiseFatal("inbox.read.failed",`inbox ${t} state is corrupt`,e,{stage:t})}raiseSituationalFatal(t,e){return this.raiseFatal("inbox.situational_context.missing","situational context marker has no readable sidecar",e,{entry_id:t})}escapeFatal(t,e){if(!this.fatalEscaped){if(this.fatalEscaped=!0,e==="throw")throw t;queueMicrotask(()=>{throw t})}}scheduleHandlerFatal(t,e){let i;if(t instanceof x)i=t;else try{this.raiseReadFatal(e,t)}catch(n){i=n}this.escapeFatal(i,"schedule")}runTick(t="throw"){if(!this.canMutate()||this.tickInFlight!==void 0)return;const e=this.tick().catch(i=>{this.canMutate()&&this.scheduleHandlerFatal(i,"poll")}).finally(()=>{this.tickInFlight===e&&(this.tickInFlight=void 0)});this.tickInFlight=e}async claimMail(t){this.assertNodeOwnership(t,"poll");const e=await q(t,"wake");if(!this.canMutate()||e.action==="hold")return!1;this.nodeId=t,this.seeded=!0;const i=new Set(e.deliveries.map(r=>r.entry.entry_id)),n=this.buffer.filter(r=>!i.has(r.entry_id));for(const r of n)this.claims.delete(r.entry_id);this.buffer.splice(0,this.buffer.length,...this.buffer.filter(r=>i.has(r.entry_id)));for(const r of e.deliveries){const o=r.entry.entry_id;this.claims.has(o)||(this.claims.set(o,r),r.handoff==="inherited"?u.fresh(a=>{this.pendingHandoffs.push({..._([r.entry],"visible"),operationId:a,settleAtAgentSettled:!0})}):(this.buffer.push(r.entry),this.lastArrival=Date.now()))}return!0}async tick(){const t=m();if(t!==void 0){if(this.pendingCommit!==void 0){await this.retryPendingCommit(t)==="refresh_held"&&this.canMutate()&&this.dispose("refresh",!1);return}if(!(this.promptJoinInFlight||k())&&!(this.pendingHandoffs.length>=g)&&await this.claimMail(t)&&this.buffer.length>0&&Date.now()-this.lastArrival>=this.cadence.debounceMs){if(this.refreshForUnknownReportRefs())return;this.flushOrdinary(t)}}}missingChannelEntries(t){const e=t.filter(r=>this.claims.has(r.entry_id)),i=this.coveredEntryIds("hidden"),n=this.coveredEntryIds("visible");return{hiddenEntries:e.filter(r=>(r.data?.situational===!0||r.data?.situationalOnly===!0)&&!i.has(r.entry_id)),visibleEntries:e.filter(r=>r.data?.situationalOnly!==!0&&!n.has(r.entry_id))}}visibleRoute(t){return t.length===0?"none":this.isIdle()?"idle":t.some(e=>e.tier==="critical")?"critical":t.some(e=>e.tier==="urgent"||e.kind==="final")?"steer":"followUp"}buildPlan(t){const{hiddenEntries:e,visibleEntries:i}=this.missingChannelEntries(t),n=new Set(e.map(c=>c.entry_id)),r=new Set(i.map(c=>c.entry_id)),o=t.filter(c=>n.has(c.entry_id)||r.has(c.entry_id)),a=this.isIdle()&&o.length>0&&o.every(c=>c.tier==="deferred"),d=this.visibleRoute(i)==="critical",h=!a&&!d&&e.length>0,l=!a&&!d&&i.length>0;return{hiddenEntries:e,visibleEntries:i,deferredHold:a,sendCount:Number(h)+Number(l)}}ordinaryPlan(){return this.buildPlan(this.buffer)}contextCards(t,e){const i=[];if(e.some(n=>n.data?.situational===!0)){const n=e.at(-1).entry_id;let r;try{r=V(t)}catch(o){this.raiseSituationalFatal(n,o)}r===null&&this.raiseSituationalFatal(n,new Error(`missing situational context for entry ${n}`)),i.push(r)}for(const n of e)n.data?.situationalOnly===!0&&i.push(...T(n));return i}digest(t,e){try{return H(t,this.reportNodes)}catch(i){this.raiseReadFatal(e,i)}}sendDelivery(t,e,i,n){this.pendingHandoffs.length>=g&&this.raiseReadFatal(n,new Error(`pending handoff capacity exceeded before ${t} send`));let r;try{r=_(e,t)}catch(d){this.raiseReadFatal(n,d)}let o;try{u.fresh(d=>{o=d,v({level:"info",event:"inbox.delivery.started",operation_id:d,fields:y(r)}),i()})}catch(d){return o===void 0&&this.raiseReadFatal(n,d),I(o,r,"send",d),"failed"}o===void 0&&this.raiseReadFatal(n,new Error(`${t} delivery returned without an operation id`));const a={operationId:o,...r};return this.canMutate()?(this.pendingHandoffs.push(a),"handed-off"):(this.disposed&&this.disposalReason!==void 0&&E(a,this.disposalReason),"inactive")}sendContext(t,e,i,n,r,o){return this.sendDelivery("hidden",e,()=>{const a=n==="steer"||n==="followUp"?n:this.isIdle()?void 0:"followUp";i.forEach((d,h)=>{const l=r&&h===i.length-1;this.pi.sendMessage({customType:w,content:d,display:!0,details:{nodeId:t}},a!==void 0?{deliverAs:a}:l?{deliverAs:"followUp",triggerTurn:!0}:{})})},o)}sendVisible(t,e,i,n,r,o){return this.sendDelivery("visible",t,()=>{if(r!=="idle"&&r!=="steer"&&r!=="followUp")throw new Error(`visible send requested for non-send route ${r}`);for(const a of e)this.pi.sendMessage({customType:w,content:a,display:!0},r==="idle"?{}:{deliverAs:r});if($(i,n),r==="idle"){const a=z();if(a===void 0)throw new Error("broker idle-turn admission is unavailable");a(i)}else this.pi.sendUserMessage(i,{deliverAs:r})},o)}abortCritical(){try{this.lastCtx?.abort?.()}catch{}}requeueFromBatch(t,e){if(e.size===0)return;const i=t.filter(o=>e.has(o.entry_id)),n=new Set(i.map(o=>o.entry_id)),r=this.buffer.filter(o=>!n.has(o.entry_id));this.buffer.splice(0,this.buffer.length,...i,...r)}executePlan(t,e,i){const n=new Set,r=this.visibleRoute(e.visibleEntries);if(r==="critical"){if(this.abortCritical(),!this.canMutate())return{inactive:!0,requeueEntryIds:n};for(const h of e.visibleEntries)n.add(h.entry_id);for(const h of e.hiddenEntries)n.add(h.entry_id);return{inactive:!1,requeueEntryIds:n}}const o=e.visibleEntries.length>0?this.digest(e.visibleEntries,i):[],[a,...d]=o;for(const h of d)for(const l of h.entries)n.add(l.entry_id);if(e.hiddenEntries.length>0){const h=this.contextCards(t,e.hiddenEntries),l=this.sendContext(t,e.hiddenEntries,h,r,a===void 0,i);if(l==="inactive")return{inactive:!0,requeueEntryIds:n};if(l==="failed")for(const c of e.hiddenEntries)n.add(c.entry_id)}if(!this.canMutate())return{inactive:!0,requeueEntryIds:n};if(a!==void 0){const h=this.sendVisible(a.entries,a.cards,a.text,Z(a),r,i);if(h==="inactive")return{inactive:!0,requeueEntryIds:n};if(h==="failed")for(const l of a.entries)n.add(l.entry_id);else a.kind==="human"&&(W(t,a.text),G(t,a.text))}return{inactive:!1,requeueEntryIds:n}}flushOrdinary(t){if(this.buffer.length===0)return"empty";const e=this.ordinaryPlan();if(e.deferredHold)return"held";if(this.pendingHandoffs.length+e.sendCount>g)return"capacity-blocked";const i=[...this.buffer],n=this.executePlan(t,e,"poll");return n.inactive||(this.buffer.splice(0,i.length),this.requeueFromBatch(i,n.requeueEntryIds)),"attempted"}async prependHeldDeferredInbox(t){if(!this.canMutate()||this.nodeId===void 0||k())return;const e=this.ordinaryPlan();if(!e.deferredHold)return;const i=e.visibleEntries.length===0?[]:this.digest(e.visibleEntries,"poll"),n=+(e.hiddenEntries.length>0)+i.length;if(this.pendingHandoffs.length+n>g)return;const r=[...this.buffer];this.promptJoinInFlight=!0;try{e.hiddenEntries.length>0&&await this.sendPromptJoinDelivery(t,"hidden",e.hiddenEntries,this.contextCards(this.nodeId,e.hiddenEntries));for(const o of i)await this.sendPromptJoinDelivery(t,"visible",o.entries,[...o.cards,o.text]);if(!this.canMutate())return;this.buffer.splice(0,r.length)}finally{this.promptJoinInFlight=!1}}async sendPromptJoinDelivery(t,e,i,n){let r;try{r=_(i,e)}catch(d){this.raiseReadFatal("poll",d)}let o;try{await u.fresh(async d=>{o=d,v({level:"info",event:"inbox.delivery.started",operation_id:d,fields:y(r)});for(const h of n)await t.sendCustomMessage({customType:w,content:h,display:!0})})}catch(d){throw o===void 0&&this.raiseReadFatal("poll",d),I(o,r,"send",d),d}o===void 0&&this.raiseReadFatal("poll",new Error(`${e} prompt-join delivery returned without an operation id`));const a={operationId:o,...r,settleAtAgentSettled:!0};if(!this.canMutate()){this.disposed&&this.disposalReason!==void 0&&E(a,this.disposalReason);return}this.pendingHandoffs.push(a)}coveredEntryIds(t){const e=new Set;for(const i of this.pendingHandoffs)if(i.channel===t)for(const n of i.entryIds)e.add(n);return e}retryPendingCommit(t){const e=this.pendingCommit;if(e===void 0)return Promise.resolve("settled");if(e.attempt!==void 0)return e.attempt;const i=this.attemptPendingCommit(t,e).finally(()=>{e.attempt===i&&(e.attempt=void 0)});return e.attempt=i,i}async attemptPendingCommit(t,e){let i=!1;try{const r=await U(t,e.receipts);if(r.action==="hold")return"refresh_held";for(const o of e.receipts){const a=r.results.find(d=>d.delivery_id===o.delivery_id);if(a?.outcome!==o.disposition&&a?.outcome!=="stale")throw new Error("daemon returned no terminal mail settlement outcome")}i=r.results.every(o=>o.outcome==="acknowledged")}catch(r){if(this.pendingCommit===e)for(const o of e.handoffs)I(o.operationId,o,"receipt_commit",r);return"held"}if(this.pendingCommit!==e)return"settled";for(const r of e.entryIds)this.claims.delete(r);if(e.receipts.some(r=>r.disposition==="released")){const r=new Set(e.entryIds);this.buffer.splice(0,this.buffer.length,...this.buffer.filter(o=>!r.has(o.entry_id)))}this.pendingCommit=void 0;const n=this.detachPending(r=>r.entryIds.every(o=>!this.claims.has(o)));for(const r of n)i&&ee(r);return"settled"}async settle(t,e,i,n=!1){if(i)try{if(e?.hasPendingMessages?.()===!0)return"held"}catch{}if(this.pendingCommit!==void 0)return this.retryPendingCommit(t);const r=J(),o=new Set(this.buffer.map(l=>l.entry_id)),a=this.pendingHandoffs.filter(l=>n||l.settleAtAgentSettled!==!0),d=new Set(a.flatMap(l=>[...l.entryIds])),h=[...this.claims.keys()].filter(l=>r||d.has(l)&&!o.has(l));return h.length===0?"settled":(this.pendingCommit={handoffs:a,entryIds:h,receipts:h.map(l=>{const c=this.claims.get(l);return{delivery_id:c.delivery_id,attempts:c.attempts,disposition:r?"released":"acknowledged"}})},this.retryPendingCommit(t))}detachPending(t){const e=[];for(let i=this.pendingHandoffs.length-1;i>=0;i-=1){const n=this.pendingHandoffs[i];t(n)&&e.push(...this.pendingHandoffs.splice(i,1))}return e.reverse(),e}}function ne(s,t){p?.dispose("reload",!1);const e=new re(s,t,++K);p=e;const i=f(n=>e.prependHeldDeferredInbox(n),"promptJoin");globalThis[Y]=i;try{e.start()}catch(n){throw e.dispose("reload",!1),n}return e}f(ne,"installWatcher");function se(s){const t=ne(s,Q());return()=>t.dispose("shutdown",!1)}f(se,"registerCanvasInboxWatcher");var we=se;export{we as default,se as registerCanvasInboxWatcher};