@scotthuang/agent-knock-knock 0.12.13 → 0.12.14

package/CHANGELOG.md

@@ -1,5 +1,23 @@
 # Changelog
 
+## 0.12.14 - 2026-08-24
+
+### Added
+
+- Add an exact Codex `0.149.1` native lifecycle and `/status` inspection profile, retaining fail-closed handling for adjacent and future unverified versions.
+- Add a versioned, host-neutral callback route and transport boundary with durable routing and idempotency authority while retaining OpenClaw as the concrete host adapter.
+
+### Fixed
+
+- Distinguish the exact Codex root user row from same-turn synthetic user-role context, preserving Terminal Watch until a later native task actually supersedes it.
+- Safely recover eligible uncertain Send submissions through exact one-shot retry and reconciliation without replaying accepted input or replacing the original request.
+- Make explicit Close honor the user's management-release decision first, with best-effort linked cleanup, warning-only cleanup conflicts, no terminal or coding-agent interruption, and immediate eligibility for a fresh Watch.
+
+### Security
+
+- Freeze callback routing and idempotency authority durably, fail closed on route drift or ambiguous recovery, and keep model-facing callback and retry contracts free of opaque authority material.
+- Require exact adjacent native-event evidence and a privacy-safe content hash when identifying Codex root user rows; missing, duplicate, orphaned, or mismatched evidence fails closed.
+
 ## 0.12.13 - 2026-08-22
 
 ### Added

package/README.md

@@ -91,7 +91,7 @@ terminal resource / process incarnation
 
 The v18 model-facing action contract is semantic-ID only. `send(session_id, request)` is **session-scoped** (`session_exact`): it creates a new `turn_id` in that exact native coding-agent context and never silently follows a different thread now visible in the pane. `send(terminal_id, request)` is **terminal-scoped follow-current** (`terminal_follow_current`): it means “send this ordinary task to the current verified context in this pane,” including when AKK cannot yet name its foreground native thread. `session_id` and `terminal_id` are mutually exclusive; callers may omit both only when AKK must prove one unique eligible pane. Human-facing slash selectors remain a discovery convenience, but structured tools never carry selectors or opaque authority values. The trusted plugin/CLI derives fresh terminal, binding, candidate, prompt, and handoff fences internally, then revalidates them under the canonical terminal and Store locks before a side effect. AKK sends the task once and binds only the single rollout that durably accepts that exact request. The `turn_id` is not a destination for later ordinary sends; it is the exact identity used for status, approval, cancellation, renewal, callback retry, close, and callback correlation. If a Turn is `waiting_for_openclaw`, `respond(turn_id, answer)` supplies the answer inside that same Turn instead of creating another one.
 
-v15 generalized the human-priority Codex path; v18 preserves that safety while removing opaque fences from model arguments. It covers a status-card-only Session with no rollout, a quiescent managed pane whose exact open-rollout inventory is complete but cannot identify the foreground candidate, and a supported manual `/clear` whose new logical thread is visible before its rollout materializes. The complete exact inventory domain binds the provider terminal, PID and process birth, workspace and canonical endpoint, and every open rollout's UUID, descriptor, device, inode, canonical path, and pre-submit byte offset. Native foreground resolution may be unavailable only when that independent domain is complete and exact; an incomplete, missing, stale, or changed domain fails closed. A `/clear` resume hint is advisory only. Under the terminal lock, AKK isolates the old Session, creates a separate zero-UUID provisional Session and Turn, sends only the real task, and promotes that target only after the post-submit monitor finds a unique exact request acceptance in the pinned rollout domain. The resulting native UUID may match or differ from the old Session; it is never silently merged back into the predecessor. A rollout-backed Codex row therefore advertises `terminal_follow_current` with `terminal_id`, not `session_exact`; a cached or direct `session_exact` attempt revalidates under the terminal lock, rejects before task text, and never downgrades itself to the follow-current path. Only released predecessor Turn history from a strictly earlier binding epoch is excluded from current-send authority; unresolved current-epoch state still blocks. The freshly listed semantic-ID action can work in a narrow pane without `/status`. Until promotion commits, strict `session_id` send, `respond`, managed `approve`, `cancel`, native lifecycle, callback delivery, and `native_inspect` remain unavailable. If terminal delivery or native acceptance is uncertain, AKK does not retry the input. Explicitly closing such an uncertain Turn abandons its missing result and callback; when the exact resolved close ledger, append-only uncertain receipt, frozen predecessor history, absent old rollout, and unclaimed current candidate inventory remain authoritative, the conflict row may restore only a future internally fenced candidate send.
+v15 generalized the human-priority Codex path; v18 preserves that safety while removing opaque fences from model arguments. It covers a status-card-only Session with no rollout, a quiescent managed pane whose exact open-rollout inventory is complete but cannot identify the foreground candidate, and a supported manual `/clear` whose new logical thread is visible before its rollout materializes. The complete exact inventory domain binds the provider terminal, PID and process birth, workspace and canonical endpoint, and every open rollout's UUID, descriptor, device, inode, canonical path, and pre-submit byte offset. Native foreground resolution may be unavailable only when that independent domain is complete and exact; an incomplete, missing, stale, or changed domain fails closed. A `/clear` resume hint is advisory only. Under the terminal lock, AKK isolates the old Session, creates a separate zero-UUID provisional Session and Turn, sends only the real task, and promotes that target only after the post-submit monitor finds a unique exact request acceptance in the pinned rollout domain. The resulting native UUID may match or differ from the old Session; it is never silently merged back into the predecessor. A rollout-backed Codex row therefore advertises `terminal_follow_current` with `terminal_id`, not `session_exact`; a cached or direct `session_exact` attempt revalidates under the terminal lock, rejects before task text, and never downgrades itself to the follow-current path. Only released predecessor Turn history from a strictly earlier binding epoch is excluded from current-send authority; unresolved current-epoch state still blocks. The freshly listed semantic-ID action can work in a narrow pane without `/status`. Until promotion commits, strict `session_id` send, `respond`, managed `approve`, `cancel`, native lifecycle, callback delivery, and `native_inspect` remain unavailable. If terminal delivery or native acceptance is uncertain, AKK does not retry the input. Explicit Close is the user's management escape hatch: AKK closes the selected Turn first, sends no terminal input, leaves the coding agent and pane running, and then best-effort releases only linked AKK metadata. Missing, malformed, stale, or newer cleanup records are preserved and reported as warnings instead of vetoing Close. Refresh the list afterward; if the coding agent is still working, Watch can observe it again.
 
 Approval remains separate from managed attribution. When `list` can prove one exact visible Codex approval prompt, it may advertise managed `approve({turn_id})` or terminal-scoped `approve({terminal_id})`; the latter remains possible when foreground rollout attribution is temporarily unavailable. The user must inspect and explicitly confirm that exact prompt. The plugin/CLI then keeps the confirmation offer private, recaptures the prompt, and revalidates the Store, terminal, process, and prompt fence under lock immediately before sending the exact key once. No token or fingerprint is transported through the model call. Terminal-scoped approval does not attribute the approval to a Turn, mutate Session identity, or create a durable approval receipt, so an uncertain transport result must not be retried blindly. It is never available to auto-approve. A changed prompt, identity, owner, or confirmation offer remains blocked.
 
@@ -99,11 +99,11 @@ The private approval fence remains prompt-scoped. AKK hashes the adapter-isolate
 
 Human-friendly selectors such as `only`, `codex`, `claude`, a terminal ID, or `@short-ref` remain a slash-command discovery layer. Structured model tools use semantic IDs instead: strict continuation pre-fills `session_id`, while follow-current continuation pre-fills `terminal_id`. Merely observing a mismatch or an unbound rollout inventory never mutates the Store. AKK advertises a send only when it can prove a single source claim, an exact live terminal/process incarnation, an idle empty composer, a stable complete rollout inventory, and no unresolved Turn, transition, dispatch, or approval. A foreground ambiguity inside that complete inventory may be resolved after the real request is accepted; incomplete, stale, or unverifiable evidence remains blocked. Other actions likewise expose only their semantic identities, while opaque freshness fences are derived and consumed inside the trusted plugin/CLI boundary.
 
-An exact human switch while the old Session still has one active Turn is a decision point, not an automatic redirect. In that case the terminal row may expose `handoff_decision` instead of a follow-current send. Its nested `choices.take_over_current.action` is the only authoritative supersede action: after explicit user confirmation, invoke `agent_knock_knock_close({turn_id, reason:"superseded_by_human_context_switch"})`. The plugin/CLI resolves and revalidates the exact advertised handoff decision privately; no live native UUID or handoff token crosses the model boundary. The close records the old Turn's disposition and sends no terminal input. Then list again and use only the newly advertised follow-current send. Choosing `keep_source` changes no AKK state: restore the old native thread in the Codex or Claude TUI, then refresh the list. A completed/changed Turn or another human thread switch invalidates the private decision fence and requires a fresh decision.
+An exact human switch while the old Session still has one active Turn is a decision point, not an automatic redirect. The terminal row may expose `handoff_decision` instead of a follow-current send. If the user chooses to close the old Turn, explicit Close takes priority and releases only its AKK management; it does not depend on the live native thread remaining unchanged, sends no terminal input, and does not stop the coding agent. Then list again and use only the newly advertised follow-current send or Watch action. Choosing `keep_source` changes no AKK state: restore the old native thread in the Codex or Claude TUI, then refresh the list.
 
-Native clear/new/resume operations requested through AKK are explicit lifecycle actions, separate from ordinary Turn creation. A successful new/clear creates a new native thread and AKK Session; resume activates the exact historical native thread and its corresponding Session. Each successful lifecycle transition creates no Turn. A human may also run native `/clear`, `/new`, `/resume`, or the equivalent directly in the shared terminal. AKK does not forbid that takeover: the next exact, fresh terminal-scoped follow-current send can absorb the human-driven transition when it is safe, while a `session_id` send deliberately remains pinned to its old context. AKK serializes either transition, verifies the resulting native identity, and advances the terminal binding generation so work and callbacks from the previous context cannot cross the boundary. Exact AKK-driven lifecycle profiles are verified for Codex 0.146.0/0.146.1/0.147.0/0.148.0 and Claude Code 2.1.218/2.1.226/2.1.237.
+Native clear/new/resume operations requested through AKK are explicit lifecycle actions, separate from ordinary Turn creation. A successful new/clear creates a new native thread and AKK Session; resume activates the exact historical native thread and its corresponding Session. Each successful lifecycle transition creates no Turn. A human may also run native `/clear`, `/new`, `/resume`, or the equivalent directly in the shared terminal. AKK does not forbid that takeover: the next exact, fresh terminal-scoped follow-current send can absorb the human-driven transition when it is safe, while a `session_id` send deliberately remains pinned to its old context. AKK serializes either transition, verifies the resulting native identity, and advances the terminal binding generation so work and callbacks from the previous context cannot cross the boundary. Exact AKK-driven lifecycle profiles are verified for Codex 0.146.0/0.146.1/0.147.0/0.148.0/0.149.1 and Claude Code 2.1.218/2.1.226/2.1.237.
 
-AKK status and native status inspection are different operations. `agent_knock_knock_status` (and `/akk status`) reads AKK Turn state plus a bounded current terminal screen; it does not execute the coding agent's `/status`. When an idle terminal row advertises `native_inspect`, `agent_knock_knock_native_inspect({terminal_id, inspection:"status"})` can execute only that closed, version-scoped inspection. AKK derives and revalidates the fresh binding fence internally. Supported profiles are Codex 0.146.0/0.146.1/0.147.0/0.148.0 and Claude Code 2.1.218/2.1.226/2.1.237. Claude's adapter parses a newly opened Status panel, dismisses that exact panel once, and proves the same pane returned to an idle empty composer. The action creates no Session, Turn, receipt, monitor, or callback. `/usage`, `/cost`, `/stats`, `/usage-credits`, `/model`, `/compact`, arbitrary slash strings, and unsupported versions remain unavailable. In particular, bare Codex `/usage` opens an interactive menu whose later Enter can select an account-side usage-limit reset; do not automate it as a read-only inspection.
+AKK status and native status inspection are different operations. `agent_knock_knock_status` (and `/akk status`) reads AKK Turn state plus a bounded current terminal screen; it does not execute the coding agent's `/status`. When an idle terminal row advertises `native_inspect`, `agent_knock_knock_native_inspect({terminal_id, inspection:"status"})` can execute only that closed, version-scoped inspection. AKK derives and revalidates the fresh binding fence internally. Supported profiles are Codex 0.146.0/0.146.1/0.147.0/0.148.0/0.149.1 and Claude Code 2.1.218/2.1.226/2.1.237. Claude's adapter parses a newly opened Status panel, dismisses that exact panel once, and proves the same pane returned to an idle empty composer. The action creates no Session, Turn, receipt, monitor, or callback. `/usage`, `/cost`, `/stats`, `/usage-credits`, `/model`, `/compact`, arbitrary slash strings, and unsupported versions remain unavailable. In particular, bare Codex `/usage` opens an interactive menu whose later Enter can select an account-side usage-limit reset; do not automate it as a read-only inspection.
 
 ## Optional: Natural-Language Delegation
 
@@ -254,7 +254,7 @@ The number and short-ID resume forms refer only to that displayed snapshot; neit
 
 To request a native Codex status card or Claude Status panel, first run `agent_knock_knock_list` and use only that terminal row's advertised `native_inspect({terminal_id,inspection:"status"})` action. The structured tool schema is closed to those two semantic fields; callers cannot provide `/status`, another slash command, or an authority token. AKK serializes the inspection with terminal mutations, derives and revalidates its private binding fence and exact terminal identity, and returns only after it proves one fresh bounded status result and an idle postcondition. Codex status probes additionally require an exact viewport of at least 80 columns to preserve the full Session UUID, cross the versioned paste-settle boundary, and dispatch Enter exactly once. An initially narrow or unknown viewport fails before text input with a widen/zoom diagnostic; post-injection viewport or composer drift fails closed before Enter and leaves the draft for manual inspection. Codex `/status` and that viewport requirement apply only to operations that must prove the UUID before terminal input. An otherwise eligible terminal-scoped ordinary task can send once and bind from exact native acceptance afterward, so it does not run `/status` or fail merely because the pane is narrow. For Claude, the inspection safely dismisses the exact modal once. It never turns ordinary `send` or `respond` into a slash-command escape hatch.
 
-The current OpenClaw surface registers 16 tools, and the top-level v18 `action_contracts` documents Terminal Watch alongside closed native inspection, human-priority current-pane send/approval, lifecycle, and Turn actions. Every model-facing action carries semantic IDs only; opaque freshness and compare-and-swap fences stay inside the trusted plugin/CLI boundary. `available_actions` remains the authority for ordinary current actions. Two deliberate nested exceptions require explicit user confirmation: an active human-handoff conflict may expose `handoff_decision.choices.take_over_current.action`, while a collateral terminal-wide unresolved Turn may appear in `blocking_turns[]` with its exact Store-only `recovery_action`. An active handoff source Turn is never generically closable through `blocking_turns`; it remains governed only by the handoff decision. Invoke only the advertised semantic-ID action, then refresh the list before doing anything else.
+The current OpenClaw surface registers 16 tools, and the top-level v18 `action_contracts` documents Terminal Watch alongside closed native inspection, human-priority current-pane send/approval, lifecycle, and Turn actions. Every model-facing action carries semantic IDs only; opaque freshness and compare-and-swap fences stay inside the trusted plugin/CLI boundary. `available_actions` remains the authority for ordinary current actions. Explicit Close is always available for a selected managed Turn after user confirmation, including deferred-transfer and handoff conflicts; it releases AKK management without terminal input or stopping the coding agent. A terminal row may also expose a nested `blocking_turns[].recovery_action` for the same user-owned Close. Invoke the advertised semantic-ID action, then refresh the list before doing anything else.
 
 For natural-language tool use, `agent_knock_knock_list` is terminal-first. Each live pane appears exactly once in `terminals[]`; `process_state` reports whether its coding-agent process is alive and `activity_state` reports the parsed screen state. `managed.session_id` identifies the continuing AKK session, `managed.current_turn` is its optional active Turn, and `managed.recent_turn` is retained history; retained Turns do not occupy the terminal. A human-driven native-thread mismatch remains honestly classified as `management_state="conflict"`; its `handoff_state` is `external_handoff_adoptable` only when the row advertises the fenced follow-current `send`, otherwise it is `external_handoff_blocked`. Listing never performs the adoption. Pass `all=true` to include older entries in `managed.history`. By default, `unavailable_managed_turns[]` contains attention-needed records whose pane cannot be presented as a live terminal; `all=true` also includes retained unavailable history.
 

package/dist/src/callback-cli-adapter.d.ts

@@ -1,6 +1,6 @@
-import { createCallbackOutboxService, type ApprovalNotificationPreparationInput, type CallbackDeliveryReconciliationInput, type CallbackExecutionResult, type CallbackOutboxServicePorts, type CallbackPreparationOptions, type CallbackRetryMonitorInput, type PreparedCallback, type TerminalCompletionPreparationInput } from "./callback-outbox-service.js";
-import type { CallbackRetryDisposition } from "./callback-outbox-policy.js";
-import { type CallbackProcessDelivery, type DeliverChatSendInput, type DeliverGatewayMethodInput } from "./openclaw-callback-transport.js";
+import { createCallbackOutboxService, type ApprovalNotificationPreparationInput, type CallbackDeliveryReconciliationInput, type CallbackExecutionResult, type CallbackOutboxServicePorts, type CallbackPreparationOptions, type CallbackRetryMonitorInput, type PreparedCallback, type StallNotificationPreparationInput, type TerminalCompletionPreparationInput } from "./callback-outbox-service.js";
+import type { CallbackRetryDisposition, DeliverCallbackInput } from "./callback-outbox-policy.js";
+import { type CallbackTransport, type CallbackTransportDeliverInput } from "./callback-transport.js";
 import { type Conversation } from "./protocol.js";
 import type { TranscriptEvent } from "./transcript.js";
 export type CallbackCliOptions = Omit<CallbackPreparationOptions, "statePath"> & {
@@ -9,6 +9,7 @@ export type CallbackCliOptions = Omit<CallbackPreparationOptions, "statePath"> &
     statePath?: string;
     [option: string]: unknown;
 };
+type ResolvedCallbackTransportDelivery = Omit<CallbackTransportDeliverInput, "reportCheckpoint">;
 export interface CallbackCliDependencies {
     state: {
         acquireFileLock(lockPath: string): () => void;
@@ -22,8 +23,11 @@ export interface CallbackCliDependencies {
     };
     authority: CallbackOutboxServicePorts["authority"];
     retry: CallbackOutboxServicePorts["retry"];
+    delivery: {
+        transport: CallbackTransport;
+        resolve(input: DeliverCallbackInput): ResolvedCallbackTransportDelivery;
+    };
     runtime: {
-        classifyProcessFailure(delivery: CallbackProcessDelivery): string | undefined;
         textSummary(value: unknown): unknown;
     };
 }
@@ -35,13 +39,12 @@ export interface CallbackCliFacade {
     reconcileDelivery(input: CallbackDeliveryReconciliationInput): ReturnType<CallbackOutboxService["reconcileDelivery"]>;
     runRetryMonitor(input: CallbackRetryMonitorInput): void;
     prepareApprovalNotification(input: ApprovalNotificationPreparationInput): ReturnType<CallbackOutboxService["prepareApprovalNotification"]>;
+    prepareStallNotification(input: StallNotificationPreparationInput): ReturnType<CallbackOutboxService["prepareStallNotification"]>;
     prepareTerminalCompletion(input: TerminalCompletionPreparationInput): ReturnType<CallbackOutboxService["prepareTerminalCompletion"]>;
     runPrepared(prepared: PreparedCallback, options?: {
         emit?: boolean;
     }): CallbackExecutionResult;
     emitPreparedResult(result: CallbackExecutionResult): void;
-    deliverGatewayMethod(input: DeliverGatewayMethodInput): CallbackProcessDelivery;
-    deliverChatSend(input: DeliverChatSendInput): CallbackProcessDelivery;
 }
 export declare function createCallbackCliFacade(dependencies: CallbackCliDependencies): CallbackCliFacade;
 export {};

package/dist/src/callback-cli-adapter.js

@@ -2,11 +2,11 @@
 import { AsyncLocalStorage } from "node:async_hooks";
 import path from "node:path";
 import { createCallbackOutboxService } from "./callback-outbox-service.js";
-import { createOpenClawCallbackTransport } from "./openclaw-callback-transport.js";
+import { parseCallbackAttemptOutcome } from "./callback-transport.js";
 import { budgetAction } from "./protocol.js";
-import { redactString } from "./runtime-log.js";
 import { appendEvent, assertStoreWriterCompatible, loadState, logPathForStatePath, messageEvent, pathsForConversationDir, saveState } from "./store.js";
-import { expandHome, redactCliOutput, writeCliJson } from "./cli-command-runtime.js";
+import { nonBlankString, recordValue } from "./value-guards.js";
+import { expandHome, writeCliJson } from "./cli-command-runtime.js";
 import { cliEnv, cliExit, cliNow, cliNowMs, cliPid, cliRuntimeLog, cliSleepSync } from "./cli-runtime-context.js";
 const callbackCliContext = new AsyncLocalStorage();
 function callbackRuntime() {
@@ -58,6 +58,118 @@ function runCallbackTransaction(options) {
     });
     return runPreparedCallback(prepared);
 }
+function deliverCallbackViaTransport(input) {
+    const runtime = callbackRuntime();
+    let resolved;
+    try {
+        resolved = runtime.delivery.resolve(input);
+    }
+    catch {
+        return callbackDeliveryOutcome(undefined, {
+            disposition: "permanent_failure",
+            error_code: "callback_route_resolution_failed"
+        });
+    }
+    let acceptedCheckpoint;
+    let invalidCheckpoint = false;
+    const reportCheckpoint = (value) => {
+        let outcome;
+        try {
+            outcome = parseCallbackAttemptOutcome(value);
+        }
+        catch {
+            invalidCheckpoint = true;
+            return;
+        }
+        const delivery = callbackDeliveryOutcome(resolved.route, outcome);
+        if (outcome.disposition === "accepted") {
+            acceptedCheckpoint = outcome;
+            input.onAccepted?.(delivery);
+        }
+        input.onProgress?.({
+            stage: "transport_checkpoint",
+            ...delivery
+        });
+    };
+    let value;
+    try {
+        value = runtime.delivery.transport.deliver({
+            ...resolved,
+            reportCheckpoint
+        });
+    }
+    catch {
+        return callbackDeliveryOutcome(resolved.route, acceptedCheckpoint ?? callbackTransportContractViolation());
+    }
+    let outcome;
+    try {
+        outcome = parseCallbackAttemptOutcome(value);
+    }
+    catch {
+        outcome = acceptedCheckpoint ?? callbackTransportContractViolation();
+    }
+    if (acceptedCheckpoint && outcome.disposition !== "accepted") {
+        outcome = acceptedCheckpoint;
+    }
+    else if (invalidCheckpoint && outcome.disposition !== "accepted") {
+        outcome = callbackTransportContractViolation();
+    }
+    return callbackDeliveryOutcome(resolved.route, outcome);
+}
+function callbackTransportContractViolation() {
+    return {
+        disposition: "uncertain",
+        error_code: "callback_transport_contract_violation",
+        observed_at: cliNow().toISOString()
+    };
+}
+function callbackDeliveryOutcome(route, outcome) {
+    const legacyDelivery = legacyCallbackDelivery(outcome);
+    if (legacyDelivery) {
+        return { ...legacyDelivery, attempt_outcome: outcome };
+    }
+    const accepted = outcome.disposition === "accepted";
+    const uncertain = outcome.disposition === "uncertain";
+    const errorCode = accepted ? undefined : outcome.error_code;
+    const injectionStatus = outcomeEvidenceString(outcome, "injection_status") ?? (accepted ? "accepted" : uncertain ? "uncertain" : "failed");
+    const wakeStatus = outcomeEvidenceString(outcome, "wake_status") ??
+        (accepted ? "not_required" : "not_attempted");
+    return {
+        kind: outcomeEvidenceString(outcome, "delivery_kind") ??
+            route?.transport ?? "callback_transport",
+        injection: {
+            status: injectionStatus,
+            ...(accepted
+                ? {
+                    accepted_at: outcome.accepted_at
+                }
+                : { error_code: errorCode })
+        },
+        wake: {
+            status: wakeStatus
+        },
+        attempt_outcome: outcome
+    };
+}
+function legacyCallbackDelivery(outcome) {
+    const value = recordValue(outcome.evidence?.legacy_delivery);
+    const kind = nonBlankString(value?.kind);
+    const injection = recordValue(value?.injection);
+    const wake = recordValue(value?.wake);
+    const runObservation = recordValue(value?.run_observation);
+    if (!kind || !injection || !wake)
+        return undefined;
+    return {
+        kind,
+        injection,
+        wake,
+        ...(runObservation ? { run_observation: runObservation } : {})
+    };
+}
+function outcomeEvidenceString(outcome, field) {
+    const value = outcome.evidence?.[field];
+    return typeof value === "string" && value.trim() ? value : undefined;
+}
 function callbackOutboxService() {
     const runtime = callbackRuntime();
     return createCallbackOutboxService({
@@ -76,6 +188,7 @@ function callbackOutboxService() {
                     releaseState();
                 }
             },
+            withWriter: runtime.state.withWriter,
             storeDirForStatePath: callbackStoreDir, logPathForStatePath
         },
         authority: runtime.authority,
@@ -90,7 +203,7 @@ function callbackOutboxService() {
                 }
             }
         },
-        delivery: { deliver: (input) => openClawCallbackTransport().deliverCallback(input),
+        delivery: { deliver: deliverCallbackViaTransport,
             runTransaction: runCallbackTransaction }
     });
 }
@@ -114,29 +227,6 @@ function runPreparedCallback(prepared, { emit = true } = {}) {
         emitPreparedCallbackResult(result);
     return result;
 }
-function recordCallbackProcessDelivery(observation) {
-    const { logPath, conversation, message, event, runtimeEvent, delivery } = observation;
-    const detail = observation.detail ?? {};
-    appendEvent(logPath, {
-        ts: cliNow().toISOString(), conversation_id: conversation.conversation_id,
-        event, from: message.from, to: "openclaw", round: message.round, ...detail,
-        status: delivery.status, stdout: redactString(delivery.stdout),
-        stderr: redactString(delivery.stderr)
-    });
-    cliRuntimeLog("info", runtimeEvent, {
-        conversation_id: conversation.conversation_id, ...detail,
-        status: delivery.status,
-        failure_kind: callbackRuntime().runtime.classifyProcessFailure(delivery),
-        stdout: callbackRuntime().runtime.textSummary(delivery.stdout),
-        stderr: callbackRuntime().runtime.textSummary(delivery.stderr)
-    });
-}
-function openClawCallbackTransport() {
-    return createOpenClawCallbackTransport({
-        now: cliNow, environment: cliEnv, redactConversation: redactCliOutput,
-        recordCallbackProcessDelivery
-    });
-}
 export function createCallbackCliFacade(dependencies) {
     const call = (operation) => callbackCliContext.run(dependencies, operation);
     return Object.freeze({
@@ -146,11 +236,10 @@ export function createCallbackCliFacade(dependencies) {
         reconcileDelivery: (input) => call(() => callbackOutboxService().reconcileDelivery(input)),
         runRetryMonitor: (input) => call(() => callbackOutboxService().runRetryMonitor(input)),
         prepareApprovalNotification: (input) => call(() => callbackOutboxService().prepareApprovalNotification(input)),
+        prepareStallNotification: (input) => call(() => callbackOutboxService().prepareStallNotification(input)),
         prepareTerminalCompletion: (input) => call(() => callbackOutboxService().prepareTerminalCompletion(input)),
         runPrepared: (prepared, options) => call(() => runPreparedCallback(prepared, options)),
-        emitPreparedResult: (result) => call(() => emitPreparedCallbackResult(result)),
-        deliverGatewayMethod: (input) => call(() => openClawCallbackTransport().deliverGatewayMethod(input)),
-        deliverChatSend: (input) => call(() => openClawCallbackTransport().deliverChatSend(input))
+        emitPreparedResult: (result) => call(() => emitPreparedCallbackResult(result))
     });
 }
 //# sourceMappingURL=callback-cli-adapter.js.map

package/dist/src/callback-cli-adapter.js.map

@@ -1 +1 @@
-{"version":3,"file":"callback-cli-adapter.js","sourceRoot":"","sources":["../../src/callback-cli-adapter.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EACL,2BAA2B,EAK5B,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EACL,+BAA+B,EAIhC,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAqB,MAAM,eAAe,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EACL,WAAW,EAAE,2BAA2B,EAAE,SAAS,EAAE,mBAAmB,EACxE,YAAY,EAAE,uBAAuB,EAAE,SAAS,EACjD,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,YAAY,EAAE,MAClD,0BAA0B,CAAC;AAC7B,OAAO,EACL,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,EACxD,YAAY,EACb,MAAM,0BAA0B,CAAC;AA0ClC,MAAM,kBAAkB,GAAG,IAAI,iBAAiB,EAA2B,CAAC;AAC5E,SAAS,eAAe;IACtB,MAAM,OAAO,GAAG,kBAAkB,CAAC,QAAQ,EAAE,CAAC;IAC9C,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAC5E,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,QAAQ,CAAQ,KAAY,EAAE,OAAe;IACpD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;IAClE,OAAO,KAAuC,CAAC;AACjD,CAAC;AAED,SAAS,gBAAgB,CAAC,SAAiB;IACzC,OAAO,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;AACnE,CAAC;AAED,SAAS,WAAW,CAAC,OAA2B;IAC9C,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAC7E,sBAAsB,CAAC,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,gBAAgB,CAAC,OAA2B;IACnD,MAAM,OAAO,GAAG,eAAe,EAAE,CAAC;IAClC,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACrF,MAAM,QAAQ,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAC7C,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,EAAE,GAAG,EAAE;QACtC,MAAM,KAAK,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;QACnC,OAAO,CAAC,SAAS,CAAC,wBAAwB,CAAC;YACzC,QAAQ;YACR,YAAY,EAAE,KAAK;YACnB,MAAM,EAAE,oBAAoB;SAC7B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,qBAAqB,EAAE,CAAC,KAAK,CAAC;QAC5C,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,EAAE,YAAY,EAAE,SAAS,EAAE,OAAO;KACrE,CAAC,CAAC;IACH,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW;QAAE,0BAA0B,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,sBAAsB,CAAC,OAAmC;IAEjE,IAAI,QAA0B,CAAC;IAC/B,eAAe,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,gBAAgB,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE;QAC3E,MAAM,YAAY,GAAG,eAAe,EAAE,CAAC,KAAK,CAAC,eAAe,CAC1D,GAAG,OAAO,CAAC,SAAS,OAAO,CAAC,CAAC;QAC/B,IAAI,CAAC;YACH,QAAQ,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;QAC5C,CAAC;gBAAS,CAAC;YACT,YAAY,EAAE,CAAC;QACjB,CAAC;IACH,CAAC,CAAC,CAAC;IACH,OAAO,mBAAmB,CAAC,QAAS,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,qBAAqB;IAC5B,MAAM,OAAO,GAAG,eAAe,EAAE,CAAC;IAClC,OAAO,2BAA2B,CAAC;QACjC,KAAK,EAAE;YACL,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS;YAChC,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,UAAU;YACpC,MAAM,EAAE,WAAW;YACnB,aAAa,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,WAAW,CAC9C,OAAO,EAAE,YAAY,CAAC,OAAO,CAAC,CAAC;YACjC,sBAAsB,EAAE,2BAA2B;YACnD,eAAe,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,EAAE;gBACxC,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC,GAAG,SAAS,OAAO,CAAC,CAAC;gBACxE,IAAI,CAAC;oBAAC,OAAO,SAAS,EAAE,CAAC;gBAAC,CAAC;wBAAS,CAAC;oBAAC,YAAY,EAAE,CAAC;gBAAC,CAAC;YACzD,CAAC;YACD,oBAAoB,EAAE,gBAAgB,EAAE,mBAAmB;SAC5D;QACD,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,OAAO,EAAE;YACP,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,aAAa;YAC7D,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,WAAW;YACxC,SAAS,EAAE,YAAY;YACvB,eAAe,EAAE,GAAG,EAAE;gBACpB,IAAI,MAAM,EAAE,CAAC,0CAA0C,KAAK,GAAG,EAAE,CAAC;oBAChE,OAAO,CAAC,EAAE,CAAC,CAAC;gBACd,CAAC;YACH,CAAC;SACF;QACD,QAAQ,EAAE,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAC7B,yBAAyB,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC;YACpD,cAAc,EAAE,sBAAsB,EAAE;KACzC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,qBAAqB,CAAC,OAAmC;IAChE,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,4BAA4B,CAAC,CAAC;IAC5D,OAAO,qBAAqB,EAAE,CAAC,OAAO,CAAC;QACrC,OAAO,EAAE,OAAO,EAAE,UAAU,CAC1B,OAAO,CAAC,GAAG,IAAI,mBAAmB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;KACzD,CAAC,CAAC;AACL,CAAC;AAED,SAAS,0BAA0B,CAAC,MAA+B;IACjE,YAAY,CAAC;QACX,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO;QAC1D,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC,YAAY,CAAC;QACzC,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS;QACxD,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;KACxE,CAAC,CAAC;AACL,CAAC;AAED,SAAS,mBAAmB,CAC1B,QAA0B,EAC1B,EAAE,IAAI,GAAG,IAAI,EAAE,GAAuB,EAAE;IAExC,MAAM,MAAM,GAAG,qBAAqB,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;IAC7D,IAAI,IAAI;QAAE,0BAA0B,CAAC,MAAM,CAAC,CAAC;IAC7C,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,6BAA6B,CACpC,WAA+C;IAE/C,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,GACrE,WAAW,CAAC;IACd,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,IAAI,EAAE,CAAC;IACxC,WAAW,CAAC,OAAO,EAAE;QACnB,EAAE,EAAE,MAAM,EAAE,CAAC,WAAW,EAAE,EAAE,eAAe,EAAE,YAAY,CAAC,eAAe;QACzE,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,GAAG,MAAM;QAC1E,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC9D,MAAM,EAAE,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC;KACtC,CAAC,CAAC;IACH,aAAa,CAAC,MAAM,EAAE,YAAY,EAAE;QAClC,eAAe,EAAE,YAAY,CAAC,eAAe,EAAE,GAAG,MAAM;QACxD,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,YAAY,EAAE,eAAe,EAAE,CAAC,OAAO,CAAC,sBAAsB,CAAC,QAAQ,CAAC;QACxE,MAAM,EAAE,eAAe,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC9D,MAAM,EAAE,eAAe,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC;KAC/D,CAAC,CAAC;AACL,CAAC;AAED,SAAS,yBAAyB;IAChC,OAAO,+BAA+B,CAAC;QACrC,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,kBAAkB,EAAE,eAAe;QACrE,6BAA6B;KAC9B,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,YAAqC;IAErC,MAAM,IAAI,GAAG,CAAS,SAAuB,EAAU,EAAE,CACvD,kBAAkB,CAAC,GAAG,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IAClD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,WAAW,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAC1D,gBAAgB,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACpE,gBAAgB,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CACxC,qBAAqB,EAAE,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QACrD,iBAAiB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CACtC,qBAAqB,EAAE,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACnD,eAAe,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CACpC,qBAAqB,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QACjD,2BAA2B,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAChD,qBAAqB,EAAE,CAAC,2BAA2B,CAAC,KAAK,CAAC,CAAC;QAC7D,yBAAyB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAC9C,qBAAqB,EAAE,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC;QAC3D,WAAW,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAC5C,mBAAmB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACzC,kBAAkB,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC;QAC9E,oBAAoB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CACzC,yBAAyB,EAAE,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC;QAC1D,eAAe,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CACpC,yBAAyB,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;KACtD,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"callback-cli-adapter.js","sourceRoot":"","sources":["../../src/callback-cli-adapter.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EACL,2BAA2B,EAM5B,MAAM,8BAA8B,CAAC;AAMtC,OAAO,EACL,2BAA2B,EAK5B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,YAAY,EAAqB,MAAM,eAAe,CAAC;AAChE,OAAO,EACL,WAAW,EAAE,2BAA2B,EAAE,SAAS,EAAE,mBAAmB,EACxE,YAAY,EAAE,uBAAuB,EAAE,SAAS,EACjD,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChE,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MACjC,0BAA0B,CAAC;AAC7B,OAAO,EACL,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,EACxD,YAAY,EACb,MAAM,0BAA0B,CAAC;AAkDlC,MAAM,kBAAkB,GAAG,IAAI,iBAAiB,EAA2B,CAAC;AAC5E,SAAS,eAAe;IACtB,MAAM,OAAO,GAAG,kBAAkB,CAAC,QAAQ,EAAE,CAAC;IAC9C,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAC5E,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,QAAQ,CAAQ,KAAY,EAAE,OAAe;IACpD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;IAClE,OAAO,KAAuC,CAAC;AACjD,CAAC;AAED,SAAS,gBAAgB,CAAC,SAAiB;IACzC,OAAO,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;AACnE,CAAC;AAED,SAAS,WAAW,CAAC,OAA2B;IAC9C,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAC7E,sBAAsB,CAAC,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,gBAAgB,CAAC,OAA2B;IACnD,MAAM,OAAO,GAAG,eAAe,EAAE,CAAC;IAClC,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACrF,MAAM,QAAQ,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAC7C,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,EAAE,GAAG,EAAE;QACtC,MAAM,KAAK,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;QACnC,OAAO,CAAC,SAAS,CAAC,wBAAwB,CAAC;YACzC,QAAQ;YACR,YAAY,EAAE,KAAK;YACnB,MAAM,EAAE,oBAAoB;SAC7B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,qBAAqB,EAAE,CAAC,KAAK,CAAC;QAC5C,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,EAAE,YAAY,EAAE,SAAS,EAAE,OAAO;KACrE,CAAC,CAAC;IACH,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW;QAAE,0BAA0B,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,sBAAsB,CAAC,OAAmC;IAEjE,IAAI,QAA0B,CAAC;IAC/B,eAAe,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,gBAAgB,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE;QAC3E,MAAM,YAAY,GAAG,eAAe,EAAE,CAAC,KAAK,CAAC,eAAe,CAC1D,GAAG,OAAO,CAAC,SAAS,OAAO,CAAC,CAAC;QAC/B,IAAI,CAAC;YACH,QAAQ,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;QAC5C,CAAC;gBAAS,CAAC;YACT,YAAY,EAAE,CAAC;QACjB,CAAC;IACH,CAAC,CAAC,CAAC;IACH,OAAO,mBAAmB,CAAC,QAAS,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,2BAA2B,CAClC,KAA2B;IAE3B,MAAM,OAAO,GAAG,eAAe,EAAE,CAAC;IAClC,IAAI,QAA2C,CAAC;IAChD,IAAI,CAAC;QACH,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,uBAAuB,CAAC,SAAS,EAAE;YACxC,WAAW,EAAE,mBAAmB;YAChC,UAAU,EAAE,kCAAkC;SAC/C,CAAC,CAAC;IACL,CAAC;IACD,IAAI,kBAGS,CAAC;IACd,IAAI,iBAAiB,GAAG,KAAK,CAAC;IAC9B,MAAM,gBAAgB,GAAG,CAAC,KAA6B,EAAQ,EAAE;QAC/D,IAAI,OAA+B,CAAC;QACpC,IAAI,CAAC;YACH,OAAO,GAAG,2BAA2B,CAAC,KAAK,CAAC,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC;YACP,iBAAiB,GAAG,IAAI,CAAC;YACzB,OAAO;QACT,CAAC;QACD,MAAM,QAAQ,GAAG,uBAAuB,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAClE,IAAI,OAAO,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;YACvC,kBAAkB,GAAG,OAAO,CAAC;YAC7B,KAAK,CAAC,UAAU,EAAE,CAAC,QAAQ,CAAC,CAAC;QAC/B,CAAC;QACD,KAAK,CAAC,UAAU,EAAE,CAAC;YACjB,KAAK,EAAE,sBAAsB;YAC7B,GAAG,QAAQ;SACZ,CAAC,CAAC;IACL,CAAC,CAAC;IACF,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACH,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC;YACzC,GAAG,QAAQ;YACX,gBAAgB;SACjB,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,uBAAuB,CAC5B,QAAQ,CAAC,KAAK,EACd,kBAAkB,IAAI,kCAAkC,EAAE,CAC3D,CAAC;IACJ,CAAC;IACD,IAAI,OAA+B,CAAC;IACpC,IAAI,CAAC;QACH,OAAO,GAAG,2BAA2B,CAAC,KAAK,CAAC,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,kBAAkB,IAAI,kCAAkC,EAAE,CAAC;IACvE,CAAC;IACD,IAAI,kBAAkB,IAAI,OAAO,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;QAC7D,OAAO,GAAG,kBAAkB,CAAC;IAC/B,CAAC;SAAM,IAAI,iBAAiB,IAAI,OAAO,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;QACnE,OAAO,GAAG,kCAAkC,EAAE,CAAC;IACjD,CAAC;IACD,OAAO,uBAAuB,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,kCAAkC;IACzC,OAAO;QACL,WAAW,EAAE,WAAW;QACxB,UAAU,EAAE,uCAAuC;QACnD,WAAW,EAAE,MAAM,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAC9B,KAAkC,EAClC,OAA+B;IAE/B,MAAM,cAAc,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;IACvD,IAAI,cAAc,EAAE,CAAC;QACnB,OAAO,EAAE,GAAG,cAAc,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC;IACzD,CAAC;IACD,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAW,KAAK,UAAU,CAAC;IACpD,MAAM,SAAS,GAAG,OAAO,CAAC,WAAW,KAAK,WAAW,CAAC;IACtD,MAAM,SAAS,GAAG,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;IAC5D,MAAM,eAAe,GAAG,qBAAqB,CAC3C,OAAO,EACP,kBAAkB,CACnB,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IAClE,MAAM,UAAU,GAAG,qBAAqB,CAAC,OAAO,EAAE,aAAa,CAAC;QAC9D,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;IAChD,OAAO;QACL,IAAI,EAAE,qBAAqB,CAAC,OAAO,EAAE,eAAe,CAAC;YACnD,KAAK,EAAE,SAAS,IAAI,oBAAoB;QAC1C,SAAS,EAAE;YACT,MAAM,EAAE,eAAe;YACvB,GAAG,CAAC,QAAQ;gBACV,CAAC,CAAC;oBACE,WAAW,EAAE,OAAO,CAAC,WAAW;iBACjC;gBACH,CAAC,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;SAC/B;QACD,IAAI,EAAE;YACJ,MAAM,EAAE,UAAU;SACnB;QACD,eAAe,EAAE,OAAO;KACzB,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAC7B,OAA+B;IAE/B,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;IAC7D,MAAM,IAAI,GAAG,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACzC,MAAM,SAAS,GAAG,WAAW,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACtC,MAAM,cAAc,GAAG,WAAW,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;IAC3D,IAAI,CAAC,IAAI,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IACnD,OAAO;QACL,IAAI;QACJ,SAAS;QACT,IAAI;QACJ,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/D,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAC5B,OAA+B,EAC/B,KAAa;IAEb,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,CAAC;IACxC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACvE,CAAC;AAED,SAAS,qBAAqB;IAC5B,MAAM,OAAO,GAAG,eAAe,EAAE,CAAC;IAClC,OAAO,2BAA2B,CAAC;QACjC,KAAK,EAAE;YACL,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS;YAChC,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,UAAU;YACpC,MAAM,EAAE,WAAW;YACnB,aAAa,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,WAAW,CAC9C,OAAO,EAAE,YAAY,CAAC,OAAO,CAAC,CAAC;YACjC,sBAAsB,EAAE,2BAA2B;YACnD,eAAe,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,EAAE;gBACxC,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC,GAAG,SAAS,OAAO,CAAC,CAAC;gBACxE,IAAI,CAAC;oBAAC,OAAO,SAAS,EAAE,CAAC;gBAAC,CAAC;wBAAS,CAAC;oBAAC,YAAY,EAAE,CAAC;gBAAC,CAAC;YACzD,CAAC;YACD,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,UAAU;YACpC,oBAAoB,EAAE,gBAAgB,EAAE,mBAAmB;SAC5D;QACD,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,OAAO,EAAE;YACP,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,aAAa;YAC7D,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,WAAW;YACxC,SAAS,EAAE,YAAY;YACvB,eAAe,EAAE,GAAG,EAAE;gBACpB,IAAI,MAAM,EAAE,CAAC,0CAA0C,KAAK,GAAG,EAAE,CAAC;oBAChE,OAAO,CAAC,EAAE,CAAC,CAAC;gBACd,CAAC;YACH,CAAC;SACF;QACD,QAAQ,EAAE,EAAE,OAAO,EAAE,2BAA2B;YAChD,cAAc,EAAE,sBAAsB,EAAE;KACzC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,qBAAqB,CAAC,OAAmC;IAChE,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,4BAA4B,CAAC,CAAC;IAC5D,OAAO,qBAAqB,EAAE,CAAC,OAAO,CAAC;QACrC,OAAO,EAAE,OAAO,EAAE,UAAU,CAC1B,OAAO,CAAC,GAAG,IAAI,mBAAmB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;KACzD,CAAC,CAAC;AACL,CAAC;AAED,SAAS,0BAA0B,CAAC,MAA+B;IACjE,YAAY,CAAC;QACX,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO;QAC1D,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC,YAAY,CAAC;QACzC,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS;QACxD,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;KACxE,CAAC,CAAC;AACL,CAAC;AAED,SAAS,mBAAmB,CAC1B,QAA0B,EAC1B,EAAE,IAAI,GAAG,IAAI,EAAE,GAAuB,EAAE;IAExC,MAAM,MAAM,GAAG,qBAAqB,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;IAC7D,IAAI,IAAI;QAAE,0BAA0B,CAAC,MAAM,CAAC,CAAC;IAC7C,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,YAAqC;IAErC,MAAM,IAAI,GAAG,CAAS,SAAuB,EAAU,EAAE,CACvD,kBAAkB,CAAC,GAAG,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IAClD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,WAAW,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAC1D,gBAAgB,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACpE,gBAAgB,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CACxC,qBAAqB,EAAE,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QACrD,iBAAiB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CACtC,qBAAqB,EAAE,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACnD,eAAe,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CACpC,qBAAqB,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QACjD,2BAA2B,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAChD,qBAAqB,EAAE,CAAC,2BAA2B,CAAC,KAAK,CAAC,CAAC;QAC7D,wBAAwB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAC7C,qBAAqB,EAAE,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC;QAC1D,yBAAyB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAC9C,qBAAqB,EAAE,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC;QAC3D,WAAW,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAC5C,mBAAmB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACzC,kBAAkB,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC;KAC/E,CAAC,CAAC;AACL,CAAC"}

package/dist/src/callback-outbox-policy.d.ts

@@ -1,9 +1,13 @@
 import type { AgentMessage, Conversation } from "./protocol.js";
+import { type CallbackAttemptOutcome, type CallbackEnvelopeV1, type CallbackRouteV1, type CallbackTransportAttemptV1 } from "./callback-transport.js";
+export type { CallbackAttemptOutcome, CallbackEnvelopeV1, CallbackRouteV1 } from "./callback-transport.js";
 export interface CallbackDeliveryOutcome {
     kind: string;
     injection: Record<string, unknown>;
     wake: Record<string, unknown>;
     run_observation?: Record<string, unknown>;
+    /** Generic evidence written alongside the legacy OpenClaw shape. */
+    attempt_outcome?: CallbackAttemptOutcome;
 }
 export interface CallbackProcessFailureObservation {
     status?: number | null;
@@ -13,8 +17,28 @@ export interface CallbackProcessFailureObservation {
         message?: string;
     };
 }
+/**
+ * Fence an advisory outbox when its underlying Turn moves on. Accepted
+ * transport evidence is retained for settlement; only unaccepted work is
+ * superseded so a late retry cannot notify the previous lifecycle phase.
+ */
+export declare function supersedeCallbackNotificationDelivery(conversation: Conversation, input: {
+    at: string;
+    reason: string;
+}): Conversation;
+/**
+ * Explicit Close releases AKK's management of the Turn. Fence both durable
+ * callback lanes unless the host has already accepted the transport. A
+ * transport-start marker is retained as audit evidence, but never authorizes a
+ * retry after Close.
+ */
+export declare function supersedeUnacceptedCallbackDeliveries(conversation: Conversation, input: {
+    at: string;
+    reason: string;
+}): Conversation;
 export declare function classifyCallbackProcessFailure(result: CallbackProcessFailureObservation): string | undefined;
 export interface CallbackDeliveryOptions {
+    callbackRoute?: CallbackRouteV1;
     gatewayMethod?: string;
     openclawBin?: string;
     gatewayUrl?: string;
@@ -28,6 +52,10 @@ export interface DeliverCallbackInput {
     logPath: string;
     conversation: Conversation;
     message: AgentMessage;
+    /** Immutable prepared outbox claim crossing the transport boundary. */
+    attempt: CallbackTransportAttemptV1;
+    route?: CallbackRouteV1;
+    envelope?: CallbackEnvelopeV1;
     onProgress?: (progress: Record<string, unknown>) => void;
     onAccepted?: (outcome: CallbackDeliveryOutcome) => void;
 }
@@ -43,6 +71,14 @@ export type CallbackRetryDisposition = {
 } | {
     state: "accepted";
     attempt: number;
+} | {
+    state: "permanent_failure";
+    attempt: number;
+    reason: string;
+} | {
+    state: "uncertain";
+    attempt: number;
+    reason: string;
 } | {
     state: "exhausted";
     attempt: number;
@@ -61,6 +97,7 @@ export type CallbackRetryPolicyState = {
     effective_lease_expires_at_ms?: number;
     persisted_lease_expires_at?: string;
     next_attempt_at?: string;
+    transport_started_without_outcome?: true;
 } | {
     phase: "observe_clock";
     attempt: number;
@@ -68,6 +105,7 @@ export type CallbackRetryPolicyState = {
     effective_lease_expires_at_ms: number;
     persisted_lease_expires_at?: string;
     next_attempt_at?: string;
+    transport_started_without_outcome?: true;
 };
 export type CallbackRetryObservation = {
     kind: "process_alive";
@@ -93,3 +131,4 @@ export declare function beginCallbackRetryPolicy(callbackDelivery: unknown, limi
  */
 export declare function reduceCallbackRetryPolicy(state: CallbackRetryPolicyState, observation: CallbackRetryObservation): CallbackRetryPolicyState;
 export declare function callbackDeliveryHasAcceptedTransport(callbackDelivery: unknown): boolean;
+export declare function callbackDeliveryAttemptOutcome(callbackDelivery: unknown): CallbackAttemptOutcome | undefined;