@ours.network/fleet 1.2.0-nightly.5 → 1.2.0-nightly.51

package/dist/minimal-setup.d.ts

@@ -0,0 +1,2 @@
+/** Prepare only the web configuration; App onboarding chooses agents and brains later. */
+export declare function ensureMinimalSetup(configuration: string): Promise<void>;

package/dist/minimal-setup.js

@@ -0,0 +1,44 @@
+import { existsSync, linkSync, mkdirSync, mkdtempSync, renameSync, rmSync, unlinkSync, writeFileSync } from 'node:fs';
+import { basename, join } from 'node:path';
+import { withFileLock } from './atomic-file.js';
+import { loadConfig, splitRootFor } from './config.js';
+import { preflightInitPaths } from './init-wizard.js';
+import { workspaceOwnerInvite } from './paths.js';
+/** Prepare only the web configuration; App onboarding chooses agents and brains later. */
+export async function ensureMinimalSetup(configuration) {
+    const initial = preflightInitPaths(configuration);
+    await withFileLock(join(initial.parent, `.${basename(initial.splitRoot)}.init.lock`), async () => {
+        const selected = preflightInitPaths(configuration);
+        if (selected.manifestExisted) {
+            loadConfig(selected.configPath, { yamlMode: 'strict', deferredOwnerInviteFile: workspaceOwnerInvite() });
+            return;
+        }
+        if (selected.rootExisted)
+            throw new Error('Fleet split configuration exists without its manifest; retain it and recover the existing setup before setting up a tunnel');
+        const stage = mkdtempSync(join(selected.parent, '.fleet-web-setup-'));
+        const manifest = join(stage, 'fleet.yaml');
+        const root = splitRootFor(manifest);
+        let publishedRoot = false;
+        try {
+            mkdirSync(join(root, 'agents'), { recursive: true, mode: 0o700 });
+            writeFileSync(manifest, 'api_version: ours.network/fleet/v2\n', { mode: 0o600, flag: 'wx' });
+            loadConfig(manifest, { yamlMode: 'strict' });
+            if (existsSync(selected.splitRoot) || existsSync(selected.configPath))
+                throw new Error('Fleet setup targets changed; refusing replacement');
+            renameSync(root, selected.splitRoot);
+            publishedRoot = true;
+            // Same-filesystem link publishes without replacing an unexpected manifest.
+            linkSync(manifest, selected.configPath);
+            unlinkSync(manifest);
+            loadConfig(selected.configPath, { yamlMode: 'strict' });
+        }
+        catch (cause) {
+            if (publishedRoot)
+                throw new Error('Minimal Fleet setup stopped after publishing its empty split directory; existing files were retained for recovery', { cause });
+            throw cause;
+        }
+        finally {
+            rmSync(stage, { recursive: true, force: true });
+        }
+    });
+}

package/dist/monitor.d.ts

@@ -88,33 +88,6 @@ export interface MonitorDeps {
  * turns they trigger keep dying.
  */
 export type StatusCause = 'connectivity' | 'delivery' | 'modal' | 'offline' | 'turns-failing' | 'safe-boundary' | 'auth';
-/** Best-effort daemon config (issue #17): the fields the MCP client reads. */
-interface DaemonConfig {
-    apiToken?: string;
-    port?: number;
-    stateDir?: string;
-}
-/**
- * Read the daemon config the way the MCP client does — best-effort. Any missing,
- * malformed, or unreadable config yields `{}` so token resolution falls through
- * (issue #17). Only the well-typed fields we consume are surfaced.
- */
-export declare function readDaemonConfig(env: NodeJS.ProcessEnv): DaemonConfig;
-/**
- * Resolve the daemon API token exactly like the MCP client (issue #17), a 3-step
- * chain: `OURS_API_TOKEN` (trimmed) → config `apiToken` (trimmed) → the 0600 owner
- * token at `<stateDir>/daemon-token`. Never generates a token; a failed read of
- * any source (missing/unreadable) silently falls through to the next.
- */
-export declare function resolveApiToken(env: NodeJS.ProcessEnv, file?: DaemonConfig): string | undefined;
-export interface DaemonEndpoint {
-    origin: string;
-    port: number;
-    configPath: string;
-    stateDir: string;
-    url(name: string): string;
-    headers: Record<string, string>;
-}
 export type IdentityPresence = {
     state: 'present';
     temporary: boolean;
@@ -125,16 +98,12 @@ export type IdentityPresence = {
     state: 'unknown';
     detail: string;
 };
-/** Resolve the daemon endpoint + auth header from env → config → defaults. */
-export declare function resolveEndpoint(env: NodeJS.ProcessEnv, includeToken?: boolean): DaemonEndpoint;
 /**
  * Ask the daemon's authoritative identity index. The notifications endpoint is
  * intentionally unsuitable for lifecycle: it serves an empty 200 page for a
  * valid but missing identity, which made a closed temp identity look healthy.
  */
 export declare function probeIdentityPresence(name: string, fetch: FetchLike, env: NodeJS.ProcessEnv, deps?: IdentityProbeDeps): Promise<IdentityPresence>;
-/** Actionable, secret-free description of every token source for this profile. */
-export declare function authResolutionHint(ep: DaemonEndpoint): string;
 /** Keep only the events whose type the role asked to wake on. */
 export declare function filterEvents(events: NotifyEvent[], wakeSources: string[]): NotifyEvent[];
 /**
@@ -196,8 +165,7 @@ export declare class Monitor {
     private readonly identity;
     private readonly cfg;
     private readonly deps;
-    private readonly ep?;
-    private readonly profile?;
+    private readonly profile;
     private readonly profileKey;
     private readonly monitorLeaseToken;
     private profileClientPromise?;
@@ -263,4 +231,3 @@ export declare class Monitor {
     private writeStatus;
 }
 export declare function createMonitor(o: MonitorOpts): Monitor;
-export {};

package/dist/monitor.js

@@ -1,6 +1,5 @@
 import { existsSync, readFileSync, renameSync, writeFileSync } from 'node:fs';
 import { randomUUID } from 'node:crypto';
-import { homedir } from 'node:os';
 import { join } from 'node:path';
 import { attachOursClient } from '@ours.network/sdk/client';
 import { clientProfileKey, readClientProfile, } from './client-profile.js';
@@ -42,124 +41,28 @@ const TURN_OBSERVE_INTERVAL_MS = 1_500;
 const DEFAULT_TURN_FAIL_THRESHOLD = 3; // fallback when the resolved config omits it
 class AuthError extends Error {
 }
-/** Path to the daemon config the MCP client uses: OURS_CONFIG ?? real ~/.ours/config.json. */
-const daemonConfigPath = (env) => env.OURS_CONFIG ?? join(homedir(), '.ours', 'config.json');
-/** Preserve the daemon's legacy env integer semantics: parseInt, invalid → absent. */
-function envInt(env, name) {
-    const raw = env[name];
-    if (raw === undefined)
-        return undefined;
-    const n = parseInt(raw, 10);
-    return Number.isNaN(n) ? undefined : n;
-}
-/**
- * Read the daemon config the way the MCP client does — best-effort. Any missing,
- * malformed, or unreadable config yields `{}` so token resolution falls through
- * (issue #17). Only the well-typed fields we consume are surfaced.
- */
-export function readDaemonConfig(env) {
-    try {
-        const p = JSON.parse(readFileSync(daemonConfigPath(env), 'utf8'));
-        const o = {};
-        if (typeof p.apiToken === 'string' && p.apiToken.trim())
-            o.apiToken = p.apiToken.trim();
-        if (typeof p.port === 'number' && Number.isFinite(p.port))
-            o.port = p.port;
-        if (typeof p.stateDir === 'string')
-            o.stateDir = p.stateDir;
-        return o;
-    }
-    catch {
-        return {};
-    }
-}
-/**
- * Resolve the daemon API token exactly like the MCP client (issue #17), a 3-step
- * chain: `OURS_API_TOKEN` (trimmed) → config `apiToken` (trimmed) → the 0600 owner
- * token at `<stateDir>/daemon-token`. Never generates a token; a failed read of
- * any source (missing/unreadable) silently falls through to the next.
- */
-export function resolveApiToken(env, file = readDaemonConfig(env)) {
-    const e = env.OURS_API_TOKEN?.trim();
-    if (e)
-        return e;
-    if (file.apiToken)
-        return file.apiToken;
-    const sd = env.OURS_STATE_DIR ?? file.stateDir ?? join(homedir(), '.ours');
-    try {
-        const t = readFileSync(join(sd, 'daemon-token'), 'utf8').trim();
-        if (t)
-            return t;
-    }
-    catch { /* missing/unreadable (e.g. cross-user 0600) → fall through */ }
-    return undefined;
-}
-/** Resolve the daemon endpoint + auth header from env → config → defaults. */
-export function resolveEndpoint(env, includeToken = true) {
-    const file = readDaemonConfig(env);
-    const port = envInt(env, 'OURS_PORT') ?? file.port ?? DEFAULT_PORT;
-    const configPath = daemonConfigPath(env);
-    const stateDir = env.OURS_STATE_DIR ?? file.stateDir ?? join(homedir(), '.ours');
-    const token = includeToken ? resolveApiToken(env, file) : undefined;
-    const origin = `http://127.0.0.1:${port}`;
-    return {
-        origin,
-        port,
-        configPath,
-        stateDir,
-        url: (name) => `${origin}/identities/${encodeURIComponent(name)}/notifications`,
-        headers: token ? { 'x-ours-api-token': token } : {},
-    };
-}
 /**
  * Ask the daemon's authoritative identity index. The notifications endpoint is
  * intentionally unsuitable for lifecycle: it serves an empty 200 page for a
  * valid but missing identity, which made a closed temp identity look healthy.
  */
 export async function probeIdentityPresence(name, fetch, env, deps = {}) {
-    const profile = readClientProfile(env);
-    if (profile) {
-        let client;
-        try {
-            client = await (deps.attachClient?.({
-                endpoint: profile.endpoint, expectedInstanceId: profile.expectedInstanceId,
-                credentialPath: profile.credentialPath,
-                sessionMode: 'external', leaseToken: randomUUID(), env: {},
-            }) ?? attachOursClient({
-                endpoint: profile.endpoint, expectedInstanceId: profile.expectedInstanceId,
-                credentialPath: profile.credentialPath,
-                sessionMode: 'external', leaseToken: randomUUID(), env: {},
-            }));
-            return classifyIdentityPresence(name, await client.identities());
-        }
-        catch {
-            return { state: 'unknown', detail: 'selected identity index is unavailable' };
-        }
-        finally {
-            await client?.close().catch(() => undefined);
-        }
-    }
-    const ep = resolveEndpoint(env);
-    let response;
+    let client;
     try {
-        response = await fetch(`${ep.origin}/identities`, { headers: ep.headers });
-    }
-    catch (error) {
-        return { state: 'unknown', detail: `identity index unreachable (${msg(error)})` };
-    }
-    if (!response.ok)
-        return {
-            state: 'unknown',
-            detail: response.status === 401
-                ? `daemon rejected the API token (401) — ${authResolutionHint(ep)}`
-                : `identity index returned HTTP ${response.status}`,
+        const profile = readClientProfile(env);
+        const options = {
+            endpoint: profile.endpoint, expectedInstanceId: profile.expectedInstanceId,
+            credentialPath: profile.credentialPath,
+            sessionMode: 'external', leaseToken: randomUUID(), env: {},
         };
-    try {
-        const body = await response.json();
-        return classifyIdentityPresence(name, body.identities);
+        client = await (deps.attachClient?.(options) ?? attachOursClient(options));
+        return classifyIdentityPresence(name, await client.identities());
     }
-    catch (error) {
-        return { state: 'unknown', detail: `identity index response is unreadable (${msg(error)})` };
+    catch {
+        return { state: 'unknown', detail: 'gateway identity index unavailable; check the shared client profile and issued credential' };
+    }
+    finally {
+        await client?.close().catch(() => undefined);
     }
 }
 function classifyIdentityPresence(name, identities) {
@@ -186,12 +89,6 @@ function classifyIdentityPresence(name, identities) {
             stale: found.stale === true,
         };
 }
-/** Actionable, secret-free description of every token source for this profile. */
-export function authResolutionHint(ep) {
-    const tokenPath = join(ep.stateDir, 'daemon-token');
-    return `set OURS_API_TOKEN, set apiToken in ${JSON.stringify(ep.configPath)}, or ensure ` +
-        `${JSON.stringify(tokenPath)} is readable by the fleet supervisor`;
-}
 /** Keep only the events whose type the role asked to wake on. */
 export function filterEvents(events, wakeSources) {
     const set = new Set(wakeSources);
@@ -414,7 +311,6 @@ export class Monitor {
     identity;
     cfg;
     deps;
-    ep;
     profile;
     profileKey;
     monitorLeaseToken = `ours-fleet-monitor-${process.pid}-${randomUUID()}`;
@@ -441,8 +337,7 @@ export class Monitor {
         this.cfg = o.cfg;
         this.deps = o.deps;
         this.profile = readClientProfile(o.deps.env);
-        this.ep = this.profile ? undefined : resolveEndpoint(o.deps.env);
-        this.profileKey = this.profile ? clientProfileKey(this.profile) : this.ep.origin;
+        this.profileKey = clientProfileKey(this.profile);
         this.statusPath = join(o.agentDir, '.monitor-status');
         this.cursorPath = join(o.agentDir, '.notify-cursor');
         this.statePath = join(o.agentDir, '.monitor-state.json');
@@ -470,14 +365,8 @@ export class Monitor {
         }
         catch (e) {
             if (e instanceof AuthError) {
-                if (this.profile) {
-                    this.cursor = null;
-                    this.degrade('auth', e.message);
-                }
-                else {
-                    this.fatal = true;
-                    this.degrade('auth', e.message, 'failed');
-                }
+                this.cursor = null;
+                this.degrade('auth', e.message);
             }
             else {
                 this.cursor = null;
@@ -510,11 +399,6 @@ export class Monitor {
                 catch (e) {
                     if (this.stopped)
                         return;
-                    if (e instanceof AuthError && !this.profile) {
-                        this.fatal = true;
-                        this.degrade('auth', e.message, 'failed');
-                        return;
-                    }
                     backoff = Math.min(backoff + BACKOFF_STEP_MS, BACKOFF_MAX_MS);
                     if (e instanceof AuthError)
                         this.degrade('auth', e.message);
@@ -630,23 +514,19 @@ export class Monitor {
         this.currentAbort = ctrl;
         let timedOut = false;
         const timer = this.deps.timers.set(() => { timedOut = true; ctrl.abort(); }, timeoutMs);
-        let resp;
         try {
-            if (this.profile) {
-                const client = await this.profileClient();
-                const page = await client.readNotificationPage(this.identity, {
-                    since: since === 'tip' ? 'tip' : Number.parseInt(since, 10),
-                    signal: ctrl.signal,
-                    requestTimeoutMs: timeoutMs,
-                });
-                return { cursor: page.cursor, events: page.events };
-            }
-            resp = await this.deps.fetch(`${this.ep.url(this.identity)}?since=${since}`, { headers: this.ep.headers, signal: ctrl.signal });
+            const client = await this.profileClient();
+            const page = await client.readNotificationPage(this.identity, {
+                since: since === 'tip' ? 'tip' : Number.parseInt(since, 10),
+                signal: ctrl.signal,
+                requestTimeoutMs: timeoutMs,
+            });
+            return { cursor: page.cursor, events: page.events };
         }
         catch (error) {
             if (timedOut && timeoutKind === 'stall')
                 throw new Error(`notification stream stalled for ${Math.round(timeoutMs / 1000)}s`);
-            if (this.profile && /(?:HTTP\s*401|unauthori[sz]ed|API token)/i.test(msg(error)))
+            if (/(?:HTTP\s*401|unauthori[sz]ed|API token)/i.test(msg(error)))
                 throw new AuthError(`daemon rejected the API token (401) — verify the credential file `
                     + `${JSON.stringify(this.profile.credentialPath)} selected by `
                     + `${JSON.stringify(this.profile.configPath)}`);
@@ -656,15 +536,8 @@ export class Monitor {
             this.deps.timers.clear(timer);
             this.currentAbort = null;
         }
-        if (resp.status === 401)
-            throw new AuthError(`daemon rejected the API token (401) — ${authResolutionHint(this.ep)}`);
-        if (!resp.ok)
-            throw new Error(`daemon returned HTTP ${resp.status}`);
-        return resp.json();
     }
     profileClient() {
-        if (!this.profile)
-            throw new Error('explicit client profile is not selected');
         if (!this.profileClientPromise) {
             const { endpoint, expectedInstanceId, credentialPath } = this.profile;
             const options = {

package/dist/notifications/fleet-producer.d.ts

@@ -0,0 +1,19 @@
+import { type ProducerConfig } from './outbox.js';
+/** Read durable supervisor ledgers without restarting agents or attaching a
+ * conversation controller. Each tick reads at most 256 KiB per role, from its
+ * checkpoint; it never loads a complete transcript or requests model history. */
+export declare class FleetNotificationProducer {
+    private readonly roots;
+    private readonly stateDir;
+    private readonly config;
+    private readonly warn;
+    private readonly queues;
+    private readonly timer;
+    private readonly existing;
+    private cleanup?;
+    constructor(roots: string[], stateDir: string, config: ProducerConfig, warn?: (line: string) => void);
+    private names;
+    poll(): void;
+    drain(): Promise<void>;
+    close(): Promise<void>;
+}

package/dist/notifications/fleet-producer.js

@@ -0,0 +1,208 @@
+import { roomsDir } from '../rooms-tasks/room-state.js';
+import { drainNotificationTargetCleanup } from './target-cleanup.js';
+import { closeSync, existsSync, lstatSync, openSync, readSync, readFileSync, readdirSync, statSync } from 'node:fs';
+import { join } from 'node:path';
+import { createHash } from 'node:crypto';
+import { NotificationOutbox } from './outbox.js';
+/** Unlike a UI inventory, unread classification must not treat unreadable records as absence. */
+function taskRoleAssociations() {
+    const dir = roomsDir(), result = new Map();
+    let files;
+    try {
+        files = readdirSync(dir);
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return result;
+        throw error;
+    }
+    for (const name of files.filter(name => name.endsWith('.json'))) {
+        const file = join(dir, name), stat = lstatSync(file);
+        if (!stat.isFile() || stat.isSymbolicLink() || stat.size > 1024 * 1024)
+            throw Error('Unreadable room association');
+        const room = JSON.parse(readFileSync(file, 'utf8'));
+        if (!room || typeof room.room_id !== 'string' || !Array.isArray(room.member_seats))
+            throw Error('Invalid room association');
+        if (room.task_id === undefined)
+            continue;
+        if (typeof room.task_id !== 'string' || !/^[A-Za-z0-9_-]{1,120}$/.test(room.task_id))
+            throw Error('Invalid task association');
+        for (const seat of room.member_seats) {
+            if (typeof seat.role_name !== 'string')
+                throw Error('Invalid member association');
+            if (result.has(seat.role_name) && result.get(seat.role_name) !== room.task_id)
+                throw Error('Ambiguous task association');
+            result.set(seat.role_name, room.task_id);
+        }
+    }
+    return result;
+}
+/** Read durable supervisor ledgers without restarting agents or attaching a
+ * conversation controller. Each tick reads at most 256 KiB per role, from its
+ * checkpoint; it never loads a complete transcript or requests model history. */
+export class FleetNotificationProducer {
+    roots;
+    stateDir;
+    config;
+    warn;
+    queues = new Map();
+    timer;
+    existing = new Set();
+    cleanup;
+    constructor(roots, stateDir, config, warn = () => { }) {
+        this.roots = roots;
+        this.stateDir = stateDir;
+        this.config = config;
+        this.warn = warn;
+        for (const root of roots)
+            for (const name of this.names(root))
+                this.existing.add(join(root, name));
+        this.poll();
+        this.timer = setInterval(() => this.poll(), 1000);
+        this.timer.unref();
+    }
+    names(root) {
+        try {
+            return readdirSync(root, { withFileTypes: true }).filter(d => d.isDirectory() && /^[a-zA-Z0-9_-]+$/.test(d.name)).map(d => d.name);
+        }
+        catch {
+            return [];
+        }
+    }
+    poll() {
+        this.cleanup ??= drainNotificationTargetCleanup(this.config, undefined, undefined, { beforeDelete: async (url) => {
+                const name = new URL(url, 'https://ours.invalid').searchParams.get('chat');
+                if (!name || !/^[A-Za-z0-9_-]+$/.test(name))
+                    return false;
+                // A recreated or retained role still has a valid target. Filesystem errors cannot prove removal.
+                for (const root of this.roots) {
+                    try {
+                        lstatSync(join(root, name));
+                        return false;
+                    }
+                    catch (error) {
+                        if (error.code !== 'ENOENT')
+                            throw error;
+                    }
+                }
+                for (const root of this.roots) {
+                    const roleDir = join(root, name), queue = this.queues.get(roleDir);
+                    if (queue) {
+                        await queue.retire();
+                        this.queues.delete(roleDir);
+                    }
+                    else {
+                        const file = join(this.stateDir, createHash('sha256').update(roleDir).digest('hex') + '.json');
+                        if (existsSync(file)) {
+                            const queue = new NotificationOutbox(file, this.config, async () => { throw Error('retired target'); });
+                            try {
+                                await queue.retire();
+                            }
+                            finally {
+                                await queue.close();
+                            }
+                        }
+                    }
+                }
+                return true;
+            } }).catch(() => { }).finally(() => { this.cleanup = undefined; });
+        let taskRoles;
+        try {
+            taskRoles = taskRoleAssociations();
+        }
+        catch {
+            this.warn('Notification task association unavailable; delivering unclassified events');
+        }
+        for (const root of this.roots)
+            for (const roleId of this.names(root)) {
+                const roleDir = join(root, roleId), dir = join(roleDir, '.conversation');
+                try {
+                    if (!existsSync(dir) || lstatSync(dir).isSymbolicLink())
+                        continue;
+                    const segments = readdirSync(dir).filter(n => /^events-\d{6}\.jsonl$/.test(n) && !lstatSync(join(dir, n)).isSymbolicLink()).sort();
+                    if (!segments.length)
+                        continue;
+                    let outbox = this.queues.get(roleDir);
+                    if (!outbox) {
+                        const key = createHash('sha256').update(roleDir).digest('hex');
+                        outbox = new NotificationOutbox(join(this.stateDir, key + '.json'), this.config, async (value, eventId) => ({ eventId, title: `${roleId}: agent completed`, body: 'Your agent finished responding. Open the chat to view the result.',
+                            url: `/fleet/chats?chat=${encodeURIComponent(roleId)}&detail=1`, ...value }), this.warn);
+                        if (!outbox.checkpoint) {
+                            const segment = this.existing.has(roleDir) ? segments.at(-1) : segments[0];
+                            outbox.saveCheckpoint({ segment, offset: this.existing.has(roleDir) ? statSync(join(dir, segment)).size : 0, prompts: [] });
+                        }
+                        this.queues.set(roleDir, outbox);
+                    }
+                    const saved = outbox.checkpoint;
+                    const current = { ...saved, prompts: [...saved.prompts], messages: { ...saved.messages } };
+                    let index = segments.indexOf(current.segment);
+                    if (index < 0) {
+                        this.warn('Notification ledger segment unavailable; checkpoint retained');
+                        continue;
+                    }
+                    const file = join(dir, current.segment), size = statSync(file).size;
+                    if (size < current.offset) {
+                        this.warn('Notification ledger truncated; checkpoint retained');
+                        continue;
+                    }
+                    if (size === current.offset && index < segments.length - 1) {
+                        current.segment = segments[++index];
+                        current.offset = 0;
+                    }
+                    const fd = openSync(join(dir, current.segment), 'r'), buffer = Buffer.alloc(256 * 1024);
+                    let count;
+                    try {
+                        count = readSync(fd, buffer, 0, buffer.length, current.offset);
+                    }
+                    finally {
+                        closeSync(fd);
+                    }
+                    let position = 0;
+                    while (position < count) {
+                        const end = buffer.indexOf(10, position);
+                        if (end < 0 || end >= count) {
+                            // Oversized model/media events are irrelevant to prompt/completion
+                            // correlation. Skip in bounded chunks; retain partial small lines.
+                            if (current.discarding || (position === 0 && count === buffer.length)) {
+                                current.offset += count - position;
+                                current.discarding = true;
+                                this.warn('Notification observer skipping oversized ledger record');
+                            }
+                            break;
+                        }
+                        if (current.discarding) {
+                            current.offset += end - position + 1;
+                            position = end + 1;
+                            current.discarding = false;
+                            continue;
+                        }
+                        const event = JSON.parse(buffer.subarray(position, end).toString('utf8'));
+                        if (event.schemaVersion !== 1 || event.roleId !== roleId)
+                            throw new Error('invalid ledger event');
+                        const prompt = `${event.sessionGeneration}:${event.promptId}`;
+                        if (event.kind === 'prompt.admitted' && event.promptId && ['browser', 'owner_admin_console', 'owner_channel'].includes(event.source ?? '')) {
+                            if (!current.prompts.includes(prompt))
+                                current.prompts.push(prompt);
+                        }
+                        if (['message.chunk', 'message.replace'].includes(event.kind) && event.promptId && event.messageId && current.prompts.includes(prompt))
+                            current.messages[prompt] = event.messageId;
+                        if (event.kind === 'turn.completed' && event.promptId && current.prompts.includes(prompt)) {
+                            if (!outbox.enqueue(`${roleId}:${event.sessionGeneration}:${event.seq}`, { ...(taskRoles ? { taskId: taskRoles.get(roleId) ?? null } : {}), url: `/fleet/chats?chat=${encodeURIComponent(roleId)}&detail=1#fleet-message-${encodeURIComponent(current.messages[prompt] ?? event.promptId)}` }))
+                                break;
+                            current.prompts = current.prompts.filter(p => p !== prompt);
+                            delete current.messages[prompt];
+                        }
+                        current.offset += end - position + 1;
+                        position = end + 1;
+                    }
+                    if (current.segment !== saved.segment || current.offset !== saved.offset)
+                        outbox.saveCheckpoint(current);
+                }
+                catch {
+                    this.warn('Notification ledger admission pending; checkpoint will replay');
+                }
+            }
+    }
+    async drain() { await Promise.all([...this.queues.values()].map(q => q.drain())); }
+    async close() { clearInterval(this.timer); await this.cleanup; await Promise.all([...this.queues.values()].map(q => q.close())); }
+}

package/dist/notifications/outbox.d.ts

@@ -0,0 +1,46 @@
+export interface NotificationInput {
+    eventId: string;
+    title: string;
+    body: string;
+    url: string;
+    taskId?: string | null;
+}
+export interface ProducerConfig {
+    /** Service base URL. With a gateway credential it is the server gateway's notifications route. */
+    origin: string;
+    token: string;
+    /** Daemon API credential that authenticates this client to the server gateway. */
+    gatewayCredential?: string;
+}
+type ProfileLocation = {
+    serverUrl: string;
+    expectedInstanceId: string;
+    credentialPath: string;
+};
+/** The installer delivers the producer credential beside the profile credential, bound to that server installation. */
+export declare const PRODUCER_CREDENTIAL_FILE = "notifications-producer.json";
+export declare function producerConfig(env?: NodeJS.ProcessEnv, profile?: () => ProfileLocation | undefined, warn?: (message: string) => void): ProducerConfig | undefined;
+/** Durable producer queue. Service dedupe makes crash-after-acceptance replay safe. */
+export declare class NotificationOutbox {
+    private readonly file;
+    private readonly config;
+    private readonly project;
+    private readonly warn;
+    private entries;
+    cursor?: number;
+    checkpoint?: unknown;
+    private running?;
+    private retired;
+    private timer;
+    constructor(file: string, config: ProducerConfig, project: (value: unknown, id: string) => Promise<NotificationInput>, warn?: (message: string) => void);
+    private persist;
+    advance(cursor: number): void;
+    saveCheckpoint(checkpoint: unknown): void;
+    enqueue(id: string, value: unknown, cursor?: number | undefined): boolean;
+    drain(): Promise<void>;
+    private drainOnce;
+    /** Wait for the current send before clearing queued sends and retiring its target. */
+    retire(): Promise<void>;
+    close(): Promise<void>;
+}
+export {};