@scotthuang/agent-knock-knock 0.13.2 → 0.13.4

package/CHANGELOG.md

@@ -1,5 +1,41 @@
 # Changelog
 
+## 0.13.4 - 2026-09-15
+
+### Changed
+
+- Make typed model control use one shared source of truth for native profile support, terminal subject normalization, input-owning surface classification, action availability, private authority, and transaction phase. List and execution now make the same fail-closed decision for ordinary, residual-continuation, and repair flows.
+- Run managed Monitor and Terminal Watch questionnaire responses through the same reservation, live-revalidation, dispatch, settlement, and `response_uncertain` transaction semantics while preserving their distinct ownership and task-completion models.
+- Keep OpenClaw, Pi, and DeepSeek Harness integrations aligned through one Host-neutral 22-tool semantic catalog, one canonical bundled Skill, a versioned capability handshake, and shared connector package verification.
+- Restructure terminal discovery into immutable facts, centralized action policy, and compact public projection. Split terminal Send, approval, retry, native inspection, model control, Watch storage, callback routing, and Herdr transport into focused modules behind compatibility facades.
+- Add typed model-control UI goldens, an in-process List-to-catalog-to-set-model contract, architecture-health ratchets, focused contract suites, and separate current-architecture and historical design records.
+
+### Security
+
+- Preserve exact pane, process-birth, cwd, agent, version, mutation-lock, and durable pre-input reservation checks across the new module boundaries. Private authority remains isolated, historical Store formats remain readable, and any possible input with an unproven postcondition remains non-retryable.
+
+## 0.13.3 - 2026-09-14
+
+### Added
+
+- Add typed, catalog-bound model control for supported idle Codex and Claude Code panes. Callers can inspect native model/reasoning choices, select only an advertised semantic tuple, and receive separate effective-current-session and future-session-default postconditions without exposing raw slash commands, keys, menu indexes, or private authority.
+- Add a narrowly scoped Codex model-control repair action for an exactly recognized stale `/model` completion surface, bare Composer command, or native picker. The cleanup action never selects a model or submits work and must prove the main Composer empty before returning success.
+
+### Changed
+
+- Replace the structured List response's repeated action contract and verbose diagnostics with a compact terminal-first projection shared by OpenClaw, Pi, and DeepSeek Harness. It retains live resource identities, current state, action names, and dynamic semantic inputs; static action meanings and safety rules live in the bundled `agent-knock-knock` skill.
+- Bundle that same canonical skill with the OpenClaw plugin and export one Host-neutral List projection contract so native controller connectors do not maintain separate field-pruning logic.
+
+### Fixed
+
+- Let exact, idle Codex `0.154.0` zero-rollout panes discover and change native model settings without first fabricating a Session identity, while preserving exact pane/process/cwd, empty-Composer, interaction, active-Turn, and postcondition checks.
+- Recognize the standard and narrow Codex `Select Model and Effort` picker, including the nested `More reasoning…` flow, as a model-control surface instead of generic busy activity. List no longer advertises ordinary idle mutations while that picker owns input.
+- Normalize terminal/process incarnation authority across List and typed model-control execution, preserve a safe continuation action for exact residual `/model` state, and keep uncertain input outcomes non-retryable.
+
+### Security
+
+- Revalidate the exact terminal, process birth, screen generation, native catalog, Composer/input-owning surface, and current action offer under one mutation lock. Approval, questionnaire, editor, viewer, active Turn, unknown content, and identity drift remain zero-input failures; any post-input uncertainty remains `do_not_retry`.
+
 ## 0.13.2 - 2026-09-12
 
 ### Added

package/README.md

@@ -52,18 +52,19 @@ pi install npm:@scotthuang/agent-knock-knock-pi@next
 pi
 ```
 
-Pi should show `AKK ready`. With Codex or Claude Code already running in tmux or Herdr, enter `/akk list`. The connector provides `/akk`, 16 structured tools, callbacks to the initiating Pi session, and native approval dialogs. See the [Pi connector guide](connectors/pi/README.md).
+Pi should show `AKK ready`. With Codex or Claude Code already running in tmux or Herdr, enter `/akk list`. The connector provides `/akk`, the complete capability-handshake-verified semantic tool catalog, the bundled `agent-knock-knock` skill, callbacks to the initiating Pi session, and native approval dialogs. See the [Pi connector guide](connectors/pi/README.md).
 
 ## Install for DeepSeek Harness
 
-The connector supports DeepSeek Harness Web `0.1.1-rc.2` and `0.1.2-alpha.1`:
+The connector supports DeepSeek Harness Web `0.1.1-rc.2`, `0.1.2-alpha.1`, and
+`0.1.5-rc.2`:
 
 ```bash
 dsh plugin --profile web add @scotthuang/agent-knock-knock-deepseek-harness@next
 dsh web
 ```
 
-Open a Web conversation and enter `/akk list`. The connector gives every conversation `/akk`, the same 16 structured tools, and callbacks to the exact Harness Agent that initiated the work. See the [DeepSeek Harness connector guide](connectors/deepseek-harness/README.md).
+Open a Web conversation and enter `/akk list`. The connector gives every conversation `/akk`, the same capability-handshake-verified semantic tool catalog, the bundled `agent-knock-knock` skill, and callbacks to the exact Harness Agent that initiated the work. See the [DeepSeek Harness connector guide](connectors/deepseek-harness/README.md).
 
 ## See It in Action
 
@@ -78,6 +79,8 @@ Suppose several Codex or Claude Code jobs are already running in tmux or Herdr:
 - **Watch without babysitting.** `/akk watch <terminal>` observes work already in progress and sends a callback when it finishes, needs approval, or becomes blocked. You can leave the terminal and continue from your phone or another chat client.
 - **Send without typing in a tiny remote console.** `/akk <selector>: <message>` sends your natural-language instruction to the selected live coding-agent terminal. An explicit user Send has priority over stale AKK management state.
 - **Identify an ambiguous Codex foreground explicitly.** When several rollout files or a recent `/clear` prevent durable attribution, an advertised foreground-identification action can inspect one exact idle pane without guessing which rollout is current.
+- **Switch models through the native catalog.** `/akk models <exact-terminal-id>` lists the choices currently offered by one exact physical Codex or Claude Code pane; a Codex rollout/native-thread attribution is not required, so this also works before the first rollout materializes. `/akk set-model ...` consumes one exact advertised model/reasoning-effort tuple without accepting raw slash commands, keys, or menu indexes. Codex synchronizes the model and ordinary efforts through `max` to the current and future-session defaults; its `ultra` effort is current-session-only, and the native UI does not expose the exact non-Ultra effort chosen for future sessions, so AKK omits that unobservable field. Claude Code changes only the current session.
+- **Continue or clear only a proven model-control residue.** If a failed Codex 0.154 model-control attempt leaves an exact `/model` completion surface or bare `/model` Composer, a fresh List may advertise both `/akk models <exact-terminal-id>` and `/akk repair-model-control <exact-terminal-id>`. Models uses a separate residual-bound authority to continue that exact native slash command into read-only catalog discovery without retyping it. If the exact native picker is already open, List marks the pane non-idle and advertises repair only. Repair remains the cleanup-only escape hatch, never presses Enter, and must prove an empty Composer.
 - **Inspect and recover.** `/akk status <turn-or-watch>` shows current state when a callback is delayed. Durable callback records and Watches provide a recovery path after transient Host failures.
 - **Approve deliberately.** AKK can surface Codex or Claude Code permission requests and submit an explicit human decision. It preserves the coding agent's existing permission mode.
 - **Hand control back and forth.** Attach to the same tmux or Herdr pane whenever you want. AKK does not create a parallel hidden conversation.
@@ -87,11 +90,22 @@ The common workflow is:
 ```text
 /akk list
 /akk watch <exact-terminal-id>
+/akk models <exact-terminal-id>
+/akk set-model <exact-terminal-id> <advertised-model-id> <advertised-reasoning-effort>
 /akk codex: run the tests and explain any failures
 /akk status <turn-id-or-watch-id>
 ```
 
-Use identifiers and actions from a fresh `/akk list`; do not guess or cache terminal IDs.
+If List advertises `repair-model-control`, it is an alternative cleanup flow:
+
+```text
+/akk repair-model-control <exact-terminal-id>
+/akk list
+/akk models <exact-terminal-id>
+/akk set-model <exact-terminal-id> <advertised-model-id> <advertised-reasoning-effort>
+```
+
+Use identifiers and actions from a fresh `/akk list`; do not guess or cache terminal IDs. Model switching is fail-closed: the same exact physical pane/process must still be free of an active Turn or any input-owning approval, questionnaire/editor, or read-only viewer, and must show either an exact idle empty Composer or one stable profiled Codex 0.154 `/model` residual. A Codex 0.154 zero-rollout pane does not require `identify_foreground` or a resolved native rollout identity; Claude Code still requires its exact current native Session. When List advertises both actions for a Composer residual, `model_options` may continue it into the catalog while `repair_model_control` only clears it. An open exact picker is non-idle and exposes repair only. If continuation, repair, or model switching reports `uncertain`, inspect the pane instead of retrying automatically.
 
 ## How It Works
 
@@ -109,6 +123,13 @@ OpenClaw / Pi / DeepSeek Harness
 
 For a managed Send, AKK verifies the selected terminal and coding-agent process, writes one user request, monitors that exact Turn, and returns completion or attention callbacks to the initiating Host session. If stale AKK bookkeeping blocks an explicit Codex Send before terminal input, AKK can fall back to a verified one-time physical Send and attach a read-only Watch for callback and Status recovery.
 
+Native Pi and DeepSeek Harness connectors accept the shared catalog through a
+versioned, secretless Host Adapter capability handshake. Startup verifies the
+ordered semantic tool registration and the bundled Skill against catalog and
+Skill SHA-256 digests; an older, missing, or drifted handshake fails closed
+instead of mounting a partial tool surface. Connector package versions remain
+independent of one another.
+
 In the current OpenClaw plugin and core Host Adapter, an idle Codex pane with ambiguous foreground rollout identity may advertise `identify_foreground`. That action issues one closed `/status` command to the exact pane. It does not mutate the AKK Store, but it does type into the visible terminal. Its 30-second result is diagnostic only and grants no later authority. The separate `identify_and_send` action keeps one terminal lock across the probe and one requested task, then relies on exact request acceptance—not the status card—for durable Session and Turn identity. Ordinary Send, List, and Status never run this probe.
 
 AKK is local-first: there is no hosted control plane or telemetry. It stores only the local state needed for routing, lifecycle recovery, callback delivery, and idempotency.
@@ -121,7 +142,7 @@ AKK is local-first: there is no hosted control plane or telemetry. It stores onl
 | Coding agents | Codex and Claude Code; unknown complete versions are allowed with a compatibility warning and fail naturally if behavior changed |
 | OpenClaw | `2026.6.5`+; plugin API and Gateway `2026.5.12`+ |
 | Pi connector | Pi `0.84.4` |
-| DeepSeek Harness connector | `0.1.1-rc.2` and `0.1.2-alpha.1` |
+| DeepSeek Harness connector | `0.1.1-rc.2`, `0.1.2-alpha.1`, and `0.1.5-rc.2` |
 | Runtime | Node.js `22.19.0`+ on macOS or Linux |
 
 The adjacent OpenClaw boundary `2026.5.10-beta.2` is intentionally unsupported. Herdr support is exact-version because its local control protocol is not yet a stable public API. See each connector guide for its tested release status and limitations.
@@ -134,7 +155,7 @@ Choose the guide that matches what you are trying to do:
 | --- | --- |
 | [tmux quick start](docs/quickstart-tmux.md) | First OpenClaw task, multiple panes, and selectors |
 | [Herdr quick start](docs/quickstart-herdr.md) | Local Herdr discovery and exact-version checks |
-| [Pi connector](connectors/pi/README.md) | Pi installation, 16 tools, native approval, callbacks, upgrade, and uninstall |
+| [Pi connector](connectors/pi/README.md) | Pi installation, semantic tool catalog, bundled skill, native approval, callbacks, upgrade, and uninstall |
 | [DeepSeek Harness connector](connectors/deepseek-harness/README.md) | Harness installation, approval contract, callbacks, upgrade, and troubleshooting |
 | [Operator guide](docs/operator-guide.md) | Complete command reference, reliable Send, Watch, Status, approval, recovery, Sessions, and native threads |
 | [OpenClaw operations](docs/openclaw-operations.md) | npm alternative, configuration, auto-approval policy, supervisor behavior, and troubleshooting |

package/dist/src/callback-outbox-policy.js

@@ -1,6 +1,7 @@
 import { nonBlankString as stringValue, recordValue } from "./value-guards.js";
 import { turnIdForConversation } from "./protocol.js";
 import { parseCallbackAttemptOutcome } from "./callback-transport.js";
+import { decideDurableNotificationRetry } from "./durable-notification-kernel.js";
 /**
  * Fence an advisory outbox when its underlying Turn moves on. Accepted
  * transport evidence is retained for settlement; only unaccepted work is
@@ -219,13 +220,17 @@ export function beginCallbackRetryPolicy(callbackDelivery, limits) {
             reason: "callback outbox has invalid attempt metadata"
         });
     }
-    if (attemptValue > limits.retryDelayCount) {
+    if (decideDurableNotificationRetry({
+        phase: "ready",
+        attempt,
+        maxAttempts: limits.retryDelayCount
+    }).state === "exhausted") {
         return decided({ state: "exhausted", attempt });
     }
     if (delivery.status === "failed") {
         return transportStartedWithoutOutcome
             ? uncertainTransportStart(attempt)
-            : decided({ state: "retryable", attempt });
+            : decided(retryableCallbackDisposition(attempt));
     }
     const attemptPidValue = Number(delivery.attempt_pid);
     const attemptPid = Number.isSafeInteger(attemptPidValue) && attemptPidValue > 0
@@ -234,7 +239,7 @@ export function beginCallbackRetryPolicy(callbackDelivery, limits) {
     if (attemptPid === undefined) {
         return transportStartedWithoutOutcome
             ? uncertainTransportStart(attempt)
-            : decided({ state: "retryable", attempt });
+            : decided(retryableCallbackDisposition(attempt));
     }
     const persistedLeaseExpiresAt = stringValue(delivery.attempt_lease_expires_at);
     const leaseExpiresAtMs = validTimestampMs(persistedLeaseExpiresAt);
@@ -270,7 +275,7 @@ export function reduceCallbackRetryPolicy(state, observation) {
         if (!observation.alive || state.effective_lease_expires_at_ms === undefined) {
             return state.transport_started_without_outcome
                 ? uncertainTransportStart(state.attempt)
-                : decided({ state: "retryable", attempt: state.attempt });
+                : decided(retryableCallbackDisposition(state.attempt));
         }
         return {
             phase: "observe_clock",
@@ -287,7 +292,13 @@ export function reduceCallbackRetryPolicy(state, observation) {
     if (observation.kind !== "clock") {
         throw new Error("callback retry policy requires a clock observation");
     }
-    if (state.effective_lease_expires_at_ms > observation.now_ms) {
+    const leaseDecision = decideDurableNotificationRetry({
+        phase: "leased",
+        attempt: state.attempt,
+        nowMs: observation.now_ms,
+        leaseExpiresAt: new Date(state.effective_lease_expires_at_ms).toISOString()
+    });
+    if (leaseDecision.state === "in_flight") {
         return decided({
             state: "in_flight",
             attempt: state.attempt,
@@ -299,7 +310,17 @@ export function reduceCallbackRetryPolicy(state, observation) {
     }
     return state.transport_started_without_outcome
         ? uncertainTransportStart(state.attempt)
-        : decided({ state: "retryable", attempt: state.attempt });
+        : decided(retryableCallbackDisposition(state.attempt));
+}
+function retryableCallbackDisposition(attempt) {
+    const decision = decideDurableNotificationRetry({
+        phase: "ready",
+        attempt
+    });
+    if (decision.state !== "retryable") {
+        throw new Error("durable notification retry policy rejected a ready attempt");
+    }
+    return decision;
 }
 function uncertainTransportStart(attempt) {
     return decided({

package/dist/src/callback-outbox-policy.js.map

@@ -1 +1 @@
-{"version":3,"file":"callback-outbox-policy.js","sourceRoot":"","sources":["../../src/callback-outbox-policy.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,IAAI,WAAW,EAC7B,WAAW,EACZ,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,qBAAqB,EAGtB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,2BAA2B,EAK5B,MAAM,yBAAyB,CAAC;AAwBjC;;;;GAIG;AACH,MAAM,UAAU,qCAAqC,CACnD,YAA0B,EAC1B,KAAqC;IAErC,MAAM,QAAQ,GAAG,WAAW,CAAC,YAAY,CAAC,8BAA8B,CAAC,CAAC;IAC1E,IACE,CAAC,QAAQ;QACT,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QAC9D,oCAAoC,CAAC,QAAQ,CAAC,EAC9C,CAAC;QACD,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,OAAO;QACL,GAAG,YAAY;QACf,8BAA8B,EAAE;YAC9B,GAAG,QAAQ;YACX,MAAM,EAAE,YAAY;YACpB,aAAa,EAAE,KAAK,CAAC,EAAE;YACvB,iBAAiB,EAAE,KAAK,CAAC,MAAM;YAC/B,WAAW,EAAE,SAAS;YACtB,wBAAwB,EAAE,SAAS;YACnC,iBAAiB,EAAE,SAAS;YAC5B,eAAe,EAAE,SAAS;YAC1B,UAAU,EAAE,KAAK,CAAC,EAAE;SACrB;KACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qCAAqC,CACnD,YAA0B,EAC1B,KAAqC;IAErC,IAAI,IAAI,GAAG,YAAY,CAAC;IACxB,KAAK,MAAM,KAAK,IAAI;QAClB,mBAAmB;QACnB,gCAAgC;KACxB,EAAE,CAAC;QACX,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAC1C,IACE,CAAC,QAAQ;YACT,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;YAC9D,oCAAoC,CAAC,QAAQ,CAAC,EAC9C,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,GAAG;YACL,GAAG,IAAI;YACP,CAAC,KAAK,CAAC,EAAE;gBACP,GAAG,QAAQ;gBACX,MAAM,EAAE,YAAY;gBACpB,aAAa,EAAE,KAAK,CAAC,EAAE;gBACvB,iBAAiB,EAAE,KAAK,CAAC,MAAM;gBAC/B,WAAW,EAAE,SAAS;gBACtB,wBAAwB,EAAE,SAAS;gBACnC,iBAAiB,EAAE,SAAS;gBAC5B,eAAe,EAAE,SAAS;gBAC1B,UAAU,EAAE,KAAK,CAAC,EAAE;aACrB;SACF,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,4CAA4C,CAC1D,YAA0B,EAC1B,KAIC;IAED,MAAM,QAAQ,GAAG,WAAW,CAAC,YAAY,CAAC,uBAAuB,CAAC,CAAC;IACnE,MAAM,YAAY,GAAG,WAAW,CAC9B,QAAQ,EAAE,wCAAwC,CACnD,CAAC;IACF,MAAM,QAAQ,GAAG,WAAW,CAAC,YAAY,CAAC,iBAAiB,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAG,WAAW,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,WAAW,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAChD,MAAM,gBAAgB,GAAG,WAAW,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC;IAClE,MAAM,iBAAiB,GAAG,WAAW,CAAC,YAAY,EAAE,mBAAmB,CAAC,CAAC;IACzE,MAAM,iBAAiB,GAAG,WAAW,CAAC,QAAQ,EAAE,0BAA0B,CAAC,CAAC;IAC5E,IACE,CAAC,YAAY;QACb,CAAC,QAAQ;QACT,CAAC,OAAO;QACR,CAAC,QAAQ;QACT,CAAC,gBAAgB;QACjB,QAAQ,CAAC,IAAI,KAAK,0BAA0B;QAC5C,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QAC9D,CAAC,iBAAiB;QAClB,OAAO,CAAC,EAAE,KAAK,iBAAiB;QAChC,CAAC,iBAAiB;QAClB,YAAY,CAAC,0BAA0B,KAAK,iBAAiB;QAC7D,YAAY,CAAC,cAAc,KAAK,KAAK,CAAC,aAAa;QACnD,YAAY,CAAC,kBAAkB,KAAK,KAAK,CAAC,WAAW;QACrD,QAAQ,CAAC,MAAM,KAAK,iBAAiB;QACrC,QAAQ,CAAC,MAAM,KAAK,sBAAsB;QAC1C,gBAAgB,CAAC,cAAc,KAAK,KAAK,CAAC,aAAa;QACvD,gBAAgB,CAAC,OAAO,KAAK,qBAAqB,CAAC,YAAY,CAAC;QAChE,oCAAoC,CAAC,QAAQ,CAAC,EAC9C,CAAC;QACD,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,OAAO;QACL,GAAG,YAAY;QACf,iBAAiB,EAAE;YACjB,GAAG,QAAQ;YACX,MAAM,EAAE,YAAY;YACpB,aAAa,EAAE,KAAK,CAAC,EAAE;YACvB,iBAAiB,EAAE,oCAAoC;YACvD,WAAW,EAAE,SAAS;YACtB,wBAAwB,EAAE,SAAS;YACnC,iBAAiB,EAAE,SAAS;YAC5B,eAAe,EAAE,SAAS;YAC1B,UAAU,EAAE,KAAK,CAAC,EAAE;SACrB;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,MAAyC;IAEzC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAG;QACf,MAAM,CAAC,KAAK,EAAE,OAAO;QACrB,MAAM,CAAC,MAAM;QACb,MAAM,CAAC,MAAM;KACd,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IAC3C,IAAI,CAAC,QAAQ,IAAI,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,+BAA+B,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9C,OAAO,kCAAkC,CAAC;IAC5C,CAAC;IACD,IACE,QAAQ,CAAC,QAAQ,CAAC,uBAAuB,CAAC;QAC1C,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EACnC,CAAC;QACD,OAAO,0BAA0B,CAAC;IACpC,CAAC;IACD,IACE,QAAQ,CAAC,QAAQ,CAAC,mBAAmB,CAAC;QACtC,QAAQ,CAAC,QAAQ,CAAC,yBAAyB,CAAC,EAC5C,CAAC;QACD,OAAO,mBAAmB,CAAC;IAC7B,CAAC;IACD,IACE,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC;QAC5B,QAAQ,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EACtC,CAAC;QACD,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IACD,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACnE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;AACnD,CAAC;AAED,SAAS,+BAA+B,CAAC,IAAa;IACpD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC/C,OAAO,KAAK,CAAC,QAAQ,CAAC,mCAAmC,CAAC;QACxD,KAAK,CAAC,QAAQ,CAAC,qBAAqB,CAAC;QACrC,KAAK,CAAC,QAAQ,CAAC,0BAA0B,CAAC,CAAC;AAC/C,CAAC;AAkFD;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CACtC,gBAAyB,EACzB,MAAiC;IAEjC,MAAM,QAAQ,GAAG,WAAW,CAAC,gBAAgB,CAAC,CAAC;IAC/C,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,EAAE,QAAQ,IAAI,CAAC,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,MAAM,CAAC,aAAa,CAAC,YAAY,CAAC,IAAI,YAAY,IAAI,CAAC;QACrE,CAAC,CAAC,YAAY;QACd,CAAC,CAAC,CAAC,CAAC;IACN,IACE,CAAC,QAAQ;QACT,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC;QAC9B,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,EAC9D,CAAC;QACD,OAAO,OAAO,CAAC;YACb,KAAK,EAAE,aAAa;YACpB,OAAO;YACP,MAAM,EAAE,mDAAmD;SAC5D,CAAC,CAAC;IACL,CAAC;IACD,MAAM,cAAc,GAAG,8BAA8B,CAAC,QAAQ,CAAC,CAAC;IAChE,IAAI,cAAc,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACtC,OAAO,OAAO,CAAC;YACb,KAAK,EAAE,aAAa;YACpB,OAAO;YACP,MAAM,EAAE,cAAc,CAAC,MAAM;SAC9B,CAAC,CAAC;IACL,CAAC;IACD,IAAI,cAAc,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACtC,IAAI,cAAc,CAAC,OAAO,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;YACtD,OAAO,OAAO,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;QACjD,CAAC;QACD,IAAI,cAAc,CAAC,OAAO,CAAC,WAAW,KAAK,mBAAmB,EAAE,CAAC;YAC/D,OAAO,OAAO,CAAC;gBACb,KAAK,EAAE,mBAAmB;gBAC1B,OAAO;gBACP,MAAM,EAAE,cAAc,CAAC,OAAO,CAAC,UAAU;aAC1C,CAAC,CAAC;QACL,CAAC;QACD,IAAI,cAAc,CAAC,OAAO,CAAC,WAAW,KAAK,WAAW,EAAE,CAAC;YACvD,OAAO,OAAO,CAAC;gBACb,KAAK,EAAE,WAAW;gBAClB,OAAO;gBACP,MAAM,EAAE,cAAc,CAAC,OAAO,CAAC,UAAU;aAC1C,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,IAAI,oCAAoC,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnD,OAAO,OAAO,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;IACjD,CAAC;IACD,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,CACrC,QAAQ,EACR,sBAAsB,CACvB,CAAC;IACF,MAAM,kBAAkB,GAAG,WAAW,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC;IACtE,IACE,iBAAiB;QACjB,CAAC,CAAC,kBAAkB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,EACzE,CAAC;QACD,OAAO,OAAO,CAAC;YACb,KAAK,EAAE,aAAa;YACpB,OAAO;YACP,MAAM,EAAE,sDAAsD;SAC/D,CAAC,CAAC;IACL,CAAC;IACD,MAAM,8BAA8B,GAAG,OAAO,CAC5C,kBAAkB;QAClB,CAAC,CACC,cAAc,CAAC,IAAI,KAAK,SAAS;YACjC,cAAc,CAAC,OAAO,CAAC,WAAW,KAAK,mBAAmB,CAC3D,CACF,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,YAAY,CAAC,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;QAC5D,OAAO,OAAO,CAAC;YACb,KAAK,EAAE,aAAa;YACpB,OAAO;YACP,MAAM,EAAE,8CAA8C;SACvD,CAAC,CAAC;IACL,CAAC;IACD,IAAI,YAAY,GAAG,MAAM,CAAC,eAAe,EAAE,CAAC;QAC1C,OAAO,OAAO,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACjC,OAAO,8BAA8B;YACnC,CAAC,CAAC,uBAAuB,CAAC,OAAO,CAAC;YAClC,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;IAC/C,CAAC;IAED,MAAM,eAAe,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACrD,MAAM,UAAU,GAAG,MAAM,CAAC,aAAa,CAAC,eAAe,CAAC,IAAI,eAAe,GAAG,CAAC;QAC7E,CAAC,CAAC,eAAe;QACjB,CAAC,CAAC,SAAS,CAAC;IACd,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,8BAA8B;YACnC,CAAC,CAAC,uBAAuB,CAAC,OAAO,CAAC;YAClC,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;IAC/C,CAAC;IAED,MAAM,uBAAuB,GAAG,WAAW,CACzC,QAAQ,CAAC,wBAAwB,CAClC,CAAC;IACF,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,uBAAuB,CAAC,CAAC;IACnE,MAAM,qBAAqB,GAAG,gBAAgB,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;IACzE,OAAO;QACL,KAAK,EAAE,iBAAiB;QACxB,OAAO;QACP,WAAW,EAAE,UAAU;QACvB,6BAA6B,EAAE,gBAAgB;YAC7C,CAAC,qBAAqB,KAAK,SAAS;gBAClC,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,qBAAqB,GAAG,MAAM,CAAC,cAAc,CAAC;QACpD,0BAA0B,EAAE,uBAAuB;QACnD,eAAe,EAAE,WAAW,CAAC,QAAQ,CAAC,eAAe,CAAC;QACtD,GAAG,CAAC,8BAA8B;YAChC,CAAC,CAAC,EAAE,iCAAiC,EAAE,IAAa,EAAE;YACtD,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CACvC,KAA+B,EAC/B,WAAqC;IAErC,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,KAAK,CAAC,KAAK,KAAK,iBAAiB,EAAE,CAAC;QACtC,IAAI,WAAW,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YACzC,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC1E,CAAC;QACD,IAAI,CAAC,WAAW,CAAC,KAAK,IAAI,KAAK,CAAC,6BAA6B,KAAK,SAAS,EAAE,CAAC;YAC5E,OAAO,KAAK,CAAC,iCAAiC;gBAC5C,CAAC,CAAC,uBAAuB,CAAC,KAAK,CAAC,OAAO,CAAC;gBACxC,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC9D,CAAC;QACD,OAAO;YACL,KAAK,EAAE,eAAe;YACtB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,6BAA6B,EAAE,KAAK,CAAC,6BAA6B;YAClE,0BAA0B,EAAE,KAAK,CAAC,0BAA0B;YAC5D,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,GAAG,CAAC,KAAK,CAAC,iCAAiC;gBACzC,CAAC,CAAC,EAAE,iCAAiC,EAAE,IAAa,EAAE;gBACtD,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;IACJ,CAAC;IACD,IAAI,WAAW,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,KAAK,CAAC,6BAA6B,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC;QAC7D,OAAO,OAAO,CAAC;YACb,KAAK,EAAE,WAAW;YAClB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,gBAAgB,EAAE,KAAK,CAAC,0BAA0B;gBAChD,IAAI,IAAI,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC,WAAW,EAAE;YAC7D,eAAe,EAAE,KAAK,CAAC,eAAe;SACvC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC,iCAAiC;QAC5C,CAAC,CAAC,uBAAuB,CAAC,KAAK,CAAC,OAAO,CAAC;QACxC,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,uBAAuB,CAAC,OAAe;IAC9C,OAAO,OAAO,CAAC;QACb,KAAK,EAAE,WAAW;QAClB,OAAO;QACP,MAAM,EAAE,4DAA4D;KACrE,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,oCAAoC,CAClD,gBAAyB;IAEzB,MAAM,QAAQ,GAAG,WAAW,CAAC,gBAAgB,CAAC,CAAC;IAC/C,MAAM,cAAc,GAAG,8BAA8B,CAAC,QAAQ,CAAC,CAAC;IAChE,IAAI,cAAc,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACtC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IACE,cAAc,CAAC,IAAI,KAAK,SAAS;QACjC,cAAc,CAAC,OAAO,CAAC,WAAW,KAAK,UAAU,EACjD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,SAAS,GAAG,WAAW,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACnD,MAAM,IAAI,GAAG,WAAW,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACzC,OAAO,SAAS,EAAE,MAAM,KAAK,UAAU,IAAI,IAAI,EAAE,MAAM,KAAK,UAAU,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,gBAAyB;IAEzB,MAAM,QAAQ,GAAG,WAAW,CAAC,gBAAgB,CAAC,CAAC;IAC/C,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,iBAAiB,CAAC,EAAE,CAAC;QAC7D,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,2BAA2B,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;AAC/D,CAAC;AAOD,SAAS,8BAA8B,CACrC,QAA6C;IAE7C,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,iBAAiB,CAAC,EAAE,CAAC;QAC7D,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC7B,CAAC;IACD,IAAI,CAAC;QACH,OAAO;YACL,IAAI,EAAE,SAAS;YACf,OAAO,EAAE,2BAA2B,CAAC,QAAQ,CAAC,eAAe,CAAC;SAC/D,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,+CAA+C;gBACrD,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;SAC3D,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CACd,WAAqC;IAErC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;AAC3C,CAAC;AAGD,SAAS,gBAAgB,CAAC,KAAc;IACtC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC;IAC/C,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACtD,CAAC"}
+{"version":3,"file":"callback-outbox-policy.js","sourceRoot":"","sources":["../../src/callback-outbox-policy.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,IAAI,WAAW,EAC7B,WAAW,EACZ,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,qBAAqB,EAGtB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,2BAA2B,EAK5B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,8BAA8B,EAAE,MACvC,kCAAkC,CAAC;AAwBrC;;;;GAIG;AACH,MAAM,UAAU,qCAAqC,CACnD,YAA0B,EAC1B,KAAqC;IAErC,MAAM,QAAQ,GAAG,WAAW,CAAC,YAAY,CAAC,8BAA8B,CAAC,CAAC;IAC1E,IACE,CAAC,QAAQ;QACT,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QAC9D,oCAAoC,CAAC,QAAQ,CAAC,EAC9C,CAAC;QACD,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,OAAO;QACL,GAAG,YAAY;QACf,8BAA8B,EAAE;YAC9B,GAAG,QAAQ;YACX,MAAM,EAAE,YAAY;YACpB,aAAa,EAAE,KAAK,CAAC,EAAE;YACvB,iBAAiB,EAAE,KAAK,CAAC,MAAM;YAC/B,WAAW,EAAE,SAAS;YACtB,wBAAwB,EAAE,SAAS;YACnC,iBAAiB,EAAE,SAAS;YAC5B,eAAe,EAAE,SAAS;YAC1B,UAAU,EAAE,KAAK,CAAC,EAAE;SACrB;KACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qCAAqC,CACnD,YAA0B,EAC1B,KAAqC;IAErC,IAAI,IAAI,GAAG,YAAY,CAAC;IACxB,KAAK,MAAM,KAAK,IAAI;QAClB,mBAAmB;QACnB,gCAAgC;KACxB,EAAE,CAAC;QACX,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAC1C,IACE,CAAC,QAAQ;YACT,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;YAC9D,oCAAoC,CAAC,QAAQ,CAAC,EAC9C,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,GAAG;YACL,GAAG,IAAI;YACP,CAAC,KAAK,CAAC,EAAE;gBACP,GAAG,QAAQ;gBACX,MAAM,EAAE,YAAY;gBACpB,aAAa,EAAE,KAAK,CAAC,EAAE;gBACvB,iBAAiB,EAAE,KAAK,CAAC,MAAM;gBAC/B,WAAW,EAAE,SAAS;gBACtB,wBAAwB,EAAE,SAAS;gBACnC,iBAAiB,EAAE,SAAS;gBAC5B,eAAe,EAAE,SAAS;gBAC1B,UAAU,EAAE,KAAK,CAAC,EAAE;aACrB;SACF,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,4CAA4C,CAC1D,YAA0B,EAC1B,KAIC;IAED,MAAM,QAAQ,GAAG,WAAW,CAAC,YAAY,CAAC,uBAAuB,CAAC,CAAC;IACnE,MAAM,YAAY,GAAG,WAAW,CAC9B,QAAQ,EAAE,wCAAwC,CACnD,CAAC;IACF,MAAM,QAAQ,GAAG,WAAW,CAAC,YAAY,CAAC,iBAAiB,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAG,WAAW,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,WAAW,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAChD,MAAM,gBAAgB,GAAG,WAAW,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC;IAClE,MAAM,iBAAiB,GAAG,WAAW,CAAC,YAAY,EAAE,mBAAmB,CAAC,CAAC;IACzE,MAAM,iBAAiB,GAAG,WAAW,CAAC,QAAQ,EAAE,0BAA0B,CAAC,CAAC;IAC5E,IACE,CAAC,YAAY;QACb,CAAC,QAAQ;QACT,CAAC,OAAO;QACR,CAAC,QAAQ;QACT,CAAC,gBAAgB;QACjB,QAAQ,CAAC,IAAI,KAAK,0BAA0B;QAC5C,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QAC9D,CAAC,iBAAiB;QAClB,OAAO,CAAC,EAAE,KAAK,iBAAiB;QAChC,CAAC,iBAAiB;QAClB,YAAY,CAAC,0BAA0B,KAAK,iBAAiB;QAC7D,YAAY,CAAC,cAAc,KAAK,KAAK,CAAC,aAAa;QACnD,YAAY,CAAC,kBAAkB,KAAK,KAAK,CAAC,WAAW;QACrD,QAAQ,CAAC,MAAM,KAAK,iBAAiB;QACrC,QAAQ,CAAC,MAAM,KAAK,sBAAsB;QAC1C,gBAAgB,CAAC,cAAc,KAAK,KAAK,CAAC,aAAa;QACvD,gBAAgB,CAAC,OAAO,KAAK,qBAAqB,CAAC,YAAY,CAAC;QAChE,oCAAoC,CAAC,QAAQ,CAAC,EAC9C,CAAC;QACD,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,OAAO;QACL,GAAG,YAAY;QACf,iBAAiB,EAAE;YACjB,GAAG,QAAQ;YACX,MAAM,EAAE,YAAY;YACpB,aAAa,EAAE,KAAK,CAAC,EAAE;YACvB,iBAAiB,EAAE,oCAAoC;YACvD,WAAW,EAAE,SAAS;YACtB,wBAAwB,EAAE,SAAS;YACnC,iBAAiB,EAAE,SAAS;YAC5B,eAAe,EAAE,SAAS;YAC1B,UAAU,EAAE,KAAK,CAAC,EAAE;SACrB;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,MAAyC;IAEzC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAG;QACf,MAAM,CAAC,KAAK,EAAE,OAAO;QACrB,MAAM,CAAC,MAAM;QACb,MAAM,CAAC,MAAM;KACd,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IAC3C,IAAI,CAAC,QAAQ,IAAI,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,+BAA+B,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9C,OAAO,kCAAkC,CAAC;IAC5C,CAAC;IACD,IACE,QAAQ,CAAC,QAAQ,CAAC,uBAAuB,CAAC;QAC1C,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EACnC,CAAC;QACD,OAAO,0BAA0B,CAAC;IACpC,CAAC;IACD,IACE,QAAQ,CAAC,QAAQ,CAAC,mBAAmB,CAAC;QACtC,QAAQ,CAAC,QAAQ,CAAC,yBAAyB,CAAC,EAC5C,CAAC;QACD,OAAO,mBAAmB,CAAC;IAC7B,CAAC;IACD,IACE,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC;QAC5B,QAAQ,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EACtC,CAAC;QACD,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IACD,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACnE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;AACnD,CAAC;AAED,SAAS,+BAA+B,CAAC,IAAa;IACpD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC/C,OAAO,KAAK,CAAC,QAAQ,CAAC,mCAAmC,CAAC;QACxD,KAAK,CAAC,QAAQ,CAAC,qBAAqB,CAAC;QACrC,KAAK,CAAC,QAAQ,CAAC,0BAA0B,CAAC,CAAC;AAC/C,CAAC;AAkFD;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CACtC,gBAAyB,EACzB,MAAiC;IAEjC,MAAM,QAAQ,GAAG,WAAW,CAAC,gBAAgB,CAAC,CAAC;IAC/C,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,EAAE,QAAQ,IAAI,CAAC,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,MAAM,CAAC,aAAa,CAAC,YAAY,CAAC,IAAI,YAAY,IAAI,CAAC;QACrE,CAAC,CAAC,YAAY;QACd,CAAC,CAAC,CAAC,CAAC;IACN,IACE,CAAC,QAAQ;QACT,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC;QAC9B,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,EAC9D,CAAC;QACD,OAAO,OAAO,CAAC;YACb,KAAK,EAAE,aAAa;YACpB,OAAO;YACP,MAAM,EAAE,mDAAmD;SAC5D,CAAC,CAAC;IACL,CAAC;IACD,MAAM,cAAc,GAAG,8BAA8B,CAAC,QAAQ,CAAC,CAAC;IAChE,IAAI,cAAc,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACtC,OAAO,OAAO,CAAC;YACb,KAAK,EAAE,aAAa;YACpB,OAAO;YACP,MAAM,EAAE,cAAc,CAAC,MAAM;SAC9B,CAAC,CAAC;IACL,CAAC;IACD,IAAI,cAAc,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACtC,IAAI,cAAc,CAAC,OAAO,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;YACtD,OAAO,OAAO,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;QACjD,CAAC;QACD,IAAI,cAAc,CAAC,OAAO,CAAC,WAAW,KAAK,mBAAmB,EAAE,CAAC;YAC/D,OAAO,OAAO,CAAC;gBACb,KAAK,EAAE,mBAAmB;gBAC1B,OAAO;gBACP,MAAM,EAAE,cAAc,CAAC,OAAO,CAAC,UAAU;aAC1C,CAAC,CAAC;QACL,CAAC;QACD,IAAI,cAAc,CAAC,OAAO,CAAC,WAAW,KAAK,WAAW,EAAE,CAAC;YACvD,OAAO,OAAO,CAAC;gBACb,KAAK,EAAE,WAAW;gBAClB,OAAO;gBACP,MAAM,EAAE,cAAc,CAAC,OAAO,CAAC,UAAU;aAC1C,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,IAAI,oCAAoC,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnD,OAAO,OAAO,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;IACjD,CAAC;IACD,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,CACrC,QAAQ,EACR,sBAAsB,CACvB,CAAC;IACF,MAAM,kBAAkB,GAAG,WAAW,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC;IACtE,IACE,iBAAiB;QACjB,CAAC,CAAC,kBAAkB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,EACzE,CAAC;QACD,OAAO,OAAO,CAAC;YACb,KAAK,EAAE,aAAa;YACpB,OAAO;YACP,MAAM,EAAE,sDAAsD;SAC/D,CAAC,CAAC;IACL,CAAC;IACD,MAAM,8BAA8B,GAAG,OAAO,CAC5C,kBAAkB;QAClB,CAAC,CACC,cAAc,CAAC,IAAI,KAAK,SAAS;YACjC,cAAc,CAAC,OAAO,CAAC,WAAW,KAAK,mBAAmB,CAC3D,CACF,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,YAAY,CAAC,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;QAC5D,OAAO,OAAO,CAAC;YACb,KAAK,EAAE,aAAa;YACpB,OAAO;YACP,MAAM,EAAE,8CAA8C;SACvD,CAAC,CAAC;IACL,CAAC;IACD,IAAI,8BAA8B,CAAC;QACjC,KAAK,EAAE,OAAO;QACd,OAAO;QACP,WAAW,EAAE,MAAM,CAAC,eAAe;KACpC,CAAC,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;QACzB,OAAO,OAAO,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACjC,OAAO,8BAA8B;YACnC,CAAC,CAAC,uBAAuB,CAAC,OAAO,CAAC;YAClC,CAAC,CAAC,OAAO,CAAC,4BAA4B,CAAC,OAAO,CAAC,CAAC,CAAC;IACrD,CAAC;IAED,MAAM,eAAe,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACrD,MAAM,UAAU,GAAG,MAAM,CAAC,aAAa,CAAC,eAAe,CAAC,IAAI,eAAe,GAAG,CAAC;QAC7E,CAAC,CAAC,eAAe;QACjB,CAAC,CAAC,SAAS,CAAC;IACd,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,8BAA8B;YACnC,CAAC,CAAC,uBAAuB,CAAC,OAAO,CAAC;YAClC,CAAC,CAAC,OAAO,CAAC,4BAA4B,CAAC,OAAO,CAAC,CAAC,CAAC;IACrD,CAAC;IAED,MAAM,uBAAuB,GAAG,WAAW,CACzC,QAAQ,CAAC,wBAAwB,CAClC,CAAC;IACF,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,uBAAuB,CAAC,CAAC;IACnE,MAAM,qBAAqB,GAAG,gBAAgB,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;IACzE,OAAO;QACL,KAAK,EAAE,iBAAiB;QACxB,OAAO;QACP,WAAW,EAAE,UAAU;QACvB,6BAA6B,EAAE,gBAAgB;YAC7C,CAAC,qBAAqB,KAAK,SAAS;gBAClC,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,qBAAqB,GAAG,MAAM,CAAC,cAAc,CAAC;QACpD,0BAA0B,EAAE,uBAAuB;QACnD,eAAe,EAAE,WAAW,CAAC,QAAQ,CAAC,eAAe,CAAC;QACtD,GAAG,CAAC,8BAA8B;YAChC,CAAC,CAAC,EAAE,iCAAiC,EAAE,IAAa,EAAE;YACtD,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CACvC,KAA+B,EAC/B,WAAqC;IAErC,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,KAAK,CAAC,KAAK,KAAK,iBAAiB,EAAE,CAAC;QACtC,IAAI,WAAW,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YACzC,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC1E,CAAC;QACD,IAAI,CAAC,WAAW,CAAC,KAAK,IAAI,KAAK,CAAC,6BAA6B,KAAK,SAAS,EAAE,CAAC;YAC5E,OAAO,KAAK,CAAC,iCAAiC;gBAC5C,CAAC,CAAC,uBAAuB,CAAC,KAAK,CAAC,OAAO,CAAC;gBACxC,CAAC,CAAC,OAAO,CAAC,4BAA4B,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAC3D,CAAC;QACD,OAAO;YACL,KAAK,EAAE,eAAe;YACtB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,6BAA6B,EAAE,KAAK,CAAC,6BAA6B;YAClE,0BAA0B,EAAE,KAAK,CAAC,0BAA0B;YAC5D,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,GAAG,CAAC,KAAK,CAAC,iCAAiC;gBACzC,CAAC,CAAC,EAAE,iCAAiC,EAAE,IAAa,EAAE;gBACtD,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;IACJ,CAAC;IACD,IAAI,WAAW,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,MAAM,aAAa,GAAG,8BAA8B,CAAC;QACnD,KAAK,EAAE,QAAQ;QACf,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,KAAK,EAAE,WAAW,CAAC,MAAM;QACzB,cAAc,EAAE,IAAI,IAAI,CACtB,KAAK,CAAC,6BAA6B,CACpC,CAAC,WAAW,EAAE;KAChB,CAAC,CAAC;IACH,IAAI,aAAa,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;QACxC,OAAO,OAAO,CAAC;YACb,KAAK,EAAE,WAAW;YAClB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,gBAAgB,EAAE,KAAK,CAAC,0BAA0B;gBAChD,IAAI,IAAI,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC,WAAW,EAAE;YAC7D,eAAe,EAAE,KAAK,CAAC,eAAe;SACvC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC,iCAAiC;QAC5C,CAAC,CAAC,uBAAuB,CAAC,KAAK,CAAC,OAAO,CAAC;QACxC,CAAC,CAAC,OAAO,CAAC,4BAA4B,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,4BAA4B,CACnC,OAAe;IAEf,MAAM,QAAQ,GAAG,8BAA8B,CAAC;QAC9C,KAAK,EAAE,OAAO;QACd,OAAO;KACR,CAAC,CAAC;IACH,IAAI,QAAQ,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,uBAAuB,CAAC,OAAe;IAC9C,OAAO,OAAO,CAAC;QACb,KAAK,EAAE,WAAW;QAClB,OAAO;QACP,MAAM,EAAE,4DAA4D;KACrE,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,oCAAoC,CAClD,gBAAyB;IAEzB,MAAM,QAAQ,GAAG,WAAW,CAAC,gBAAgB,CAAC,CAAC;IAC/C,MAAM,cAAc,GAAG,8BAA8B,CAAC,QAAQ,CAAC,CAAC;IAChE,IAAI,cAAc,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACtC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IACE,cAAc,CAAC,IAAI,KAAK,SAAS;QACjC,cAAc,CAAC,OAAO,CAAC,WAAW,KAAK,UAAU,EACjD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,SAAS,GAAG,WAAW,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACnD,MAAM,IAAI,GAAG,WAAW,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACzC,OAAO,SAAS,EAAE,MAAM,KAAK,UAAU,IAAI,IAAI,EAAE,MAAM,KAAK,UAAU,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,gBAAyB;IAEzB,MAAM,QAAQ,GAAG,WAAW,CAAC,gBAAgB,CAAC,CAAC;IAC/C,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,iBAAiB,CAAC,EAAE,CAAC;QAC7D,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,2BAA2B,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;AAC/D,CAAC;AAOD,SAAS,8BAA8B,CACrC,QAA6C;IAE7C,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,iBAAiB,CAAC,EAAE,CAAC;QAC7D,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC7B,CAAC;IACD,IAAI,CAAC;QACH,OAAO;YACL,IAAI,EAAE,SAAS;YACf,OAAO,EAAE,2BAA2B,CAAC,QAAQ,CAAC,eAAe,CAAC;SAC/D,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,+CAA+C;gBACrD,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;SAC3D,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CACd,WAAqC;IAErC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;AAC3C,CAAC;AAGD,SAAS,gBAAgB,CAAC,KAAc;IACtC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC;IAC/C,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACtD,CAAC"}

package/dist/src/callback-outbox-service.d.ts

@@ -1,26 +1,12 @@
 import { type AgentMessage, type Actor, type Conversation } from "./protocol.js";
 import type { TerminalCompletionEvidence, TerminalControlRef } from "./terminal-agent-adapter.js";
-import type { CallbackDeliveryOptions, CallbackDeliveryOutcome, CallbackRetryDisposition, DeliverCallbackInput } from "./callback-outbox-policy.js";
+import type { CallbackDeliveryOutcome, CallbackRetryDisposition, DeliverCallbackInput } from "./callback-outbox-policy.js";
+import { type CallbackPreparationOptions } from "./callback-route-service.js";
+export { resolveCallbackGatewayRoute } from "./callback-route-service.js";
+export type { CallbackGatewayRouteCandidate, CallbackPreparationOptions } from "./callback-route-service.js";
 import { type CallbackOutboxLane } from "./callback-outbox-settlement.js";
 import type { TranscriptEvent } from "./transcript.js";
 import { type CallbackEnvelopeV1, type CallbackRouteV1 } from "./callback-transport.js";
-export interface CallbackPreparationOptions extends CallbackDeliveryOptions {
-    statePath: string;
-    messageJson?: string;
-    log?: string;
-    conversationOverride?: unknown;
-    callbackDeliveryKind?: string;
-    allowTerminalCompletionRecoveryStatus?: boolean;
-    closeTerminalBridgeOnDone?: boolean;
-    disableCallbackRetry?: boolean;
-    preserveMessageId?: boolean;
-    recordOnly?: boolean;
-    recoverMissingOutbox?: boolean;
-    recoverTerminalCompletion?: boolean;
-    retryPending?: boolean;
-    /** Internal durable lane; ordinary callbacks use the lifecycle lane. */
-    callbackOutboxLane?: CallbackOutboxLane;
-}
 export interface PrepareCallbackOutboxInput {
     options: CallbackPreparationOptions;
     logPath: string;
@@ -170,17 +156,6 @@ export interface CallbackOutboxServicePorts {
         runTransaction(options: CallbackPreparationOptions): CallbackExecutionResult;
     };
 }
-export interface CallbackGatewayRouteCandidate {
-    gatewayUrl?: unknown;
-    token?: unknown;
-}
-export declare function resolveCallbackGatewayRoute(...candidates: CallbackGatewayRouteCandidate[]): {
-    gatewayUrl: string | undefined;
-    token: string;
-} | {
-    gatewayUrl: string | undefined;
-    token: undefined;
-};
 export declare function createCallbackOutboxService(ports: CallbackOutboxServicePorts): {
     prepare: ({ options, logPath }: PrepareCallbackOutboxInput) => PreparedCallback;
     runPrepared: (prepared: PreparedCallback) => CallbackExecutionResult;
@@ -292,4 +267,3 @@ export declare function terminalBridgeCompletionFingerprint(input: {
     completion: TerminalCompletionEvidence;
     terminalMessageId?: string;
 }): string;
-export {};

package/dist/src/callback-outbox-service.js

@@ -1,10 +1,12 @@
 import { createHash, randomUUID } from "node:crypto";
-import { applyMessageToConversation, createMessage, effectiveTurnStatus, executorForConversation, extractStructuredMessage, isTerminalBridgeCallbackSupersedeStatus, isTerminalDispatchOwnerReleasedStatus, isTurnPhaseStatus, isWaitingForAgentStatus, normalizeLegacyCallbackStatus, parseMessageJson, sessionIdForConversation, turnIdForConversation } from "./protocol.js";
+import { applyMessageToConversation, createMessage, effectiveTurnStatus, executorForConversation, extractStructuredMessage, isTerminalBridgeCallbackSupersedeStatus, isTerminalDispatchOwnerReleasedStatus, isTurnPhaseStatus, isWaitingForAgentStatus, normalizeLegacyCallbackStatus, parseMessageJson, turnIdForConversation } from "./protocol.js";
 import { beginCallbackRetryPolicy, reduceCallbackRetryPolicy, supersedeCallbackNotificationDelivery } from "./callback-outbox-policy.js";
+import { assertDispatchCallbackRouteAuthority, assertImmutableCallbackTransport, createManagedCallbackEnvelope, resolvedDeliveryOptions, resolveCallbackGatewayRoute, resolveManagedCallbackRoute } from "./callback-route-service.js";
+export { resolveCallbackGatewayRoute } from "./callback-route-service.js";
 import { callbackOutboxEvent, callbackOutboxField, createCallbackOutboxSettlement } from "./callback-outbox-settlement.js";
+import { createDurableNotificationLease } from "./durable-notification-kernel.js";
 import { canonicalJson } from "./canonical-json.js";
-import { callbackRouteFingerprint } from "./callback-route-authority.js";
-import { createCallbackEnvelope, parseCallbackAttemptOutcome, resolveCallbackRoute as resolveHostCallbackRoute } from "./callback-transport.js";
+import { parseCallbackAttemptOutcome } from "./callback-transport.js";
 import { isRecord, nonBlankString as stringValue } from "./value-guards.js";
 function supersedeNotificationForLifecycleMessage(conversation, message, now) {
     return message.type === "done" || message.type === "error"
@@ -14,152 +16,6 @@ function supersedeNotificationForLifecycleMessage(conversation, message, now) {
         })
         : conversation;
 }
-export function resolveCallbackGatewayRoute(...candidates) {
-    let gatewayUrl;
-    for (const candidate of candidates) {
-        gatewayUrl ??= stringValue(candidate.gatewayUrl);
-        const token = stringValue(candidate.token);
-        if (!token || token === "<token>") {
-            continue;
-        }
-        return {
-            gatewayUrl: stringValue(candidate.gatewayUrl) ?? gatewayUrl,
-            token
-        };
-    }
-    return {
-        gatewayUrl,
-        token: undefined
-    };
-}
-function resolveManagedCallbackRoute(input) {
-    if (input.inheritedDelivery) {
-        return resolveHostCallbackRoute(callbackRouteFieldCandidate(input.inheritedDelivery, "callback_route"), legacyCallbackRouteCandidate({
-            gatewayMethod: input.inheritedDelivery.gateway_method,
-            gatewaySession: input.inheritedDelivery.gateway_session ??
-                input.conversation.gateway_session ??
-                input.conversation.openclaw_session,
-            openclawBin: input.inheritedDelivery.openclaw_bin ??
-                input.conversation.openclaw_bin,
-            gatewayUrl: input.inheritedDelivery.gateway_url ??
-                input.conversation.gateway_url
-        }));
-    }
-    return resolveHostCallbackRoute(callbackRouteFieldCandidate(input.options, "callbackRoute"), callbackRouteFieldCandidate(input.conversation, "callback_route"), legacyCallbackRouteCandidate({
-        gatewayMethod: input.options.gatewayMethod ??
-            input.conversation.gateway_method,
-        gatewaySession: input.options.gatewaySession ??
-            input.options.openclawSession ?? input.conversation.gateway_session ??
-            input.conversation.openclaw_session,
-        openclawBin: input.options.openclawBin ?? input.conversation.openclaw_bin,
-        gatewayUrl: input.options.gatewayUrl ?? input.conversation.gateway_url
-    }), legacyCallbackRouteCandidate({
-        gatewayMethod: input.conversation.gateway_method,
-        gatewaySession: input.conversation.gateway_session ??
-            input.conversation.openclaw_session,
-        openclawBin: input.conversation.openclaw_bin,
-        gatewayUrl: input.conversation.gateway_url
-    }));
-}
-function callbackRouteFieldCandidate(container, field) {
-    return Object.hasOwn(container, field)
-        ? { callbackRoute: container[field] }
-        : {};
-}
-function resolvedDeliveryOptions(input) {
-    if (!input.inheritedDelivery) {
-        return {
-            ...input.options,
-            ...(input.callbackRoute ? { callbackRoute: input.callbackRoute } : {}),
-            gatewayMethod: input.options.gatewayMethod ??
-                input.conversation.gateway_method,
-            gatewaySession: input.options.gatewaySession ??
-                input.options.openclawSession ?? input.conversation.gateway_session ??
-                input.conversation.openclaw_session,
-            openclawSession: input.options.openclawSession ??
-                input.conversation.openclaw_session,
-            openclawBin: input.options.openclawBin ?? input.conversation.openclaw_bin,
-            gatewayUrl: input.options.gatewayUrl ?? input.conversation.gateway_url
-        };
-    }
-    const { callbackRoute: _ignoredCurrentRoute, ...currentOptions } = input.options;
-    return {
-        ...currentOptions,
-        ...(input.callbackRoute ? { callbackRoute: input.callbackRoute } : {}),
-        gatewayMethod: stringValue(input.inheritedDelivery.gateway_method),
-        gatewaySession: stringValue(input.inheritedDelivery.gateway_session) ??
-            input.conversation.gateway_session ??
-            input.conversation.openclaw_session,
-        openclawSession: input.conversation.openclaw_session,
-        openclawBin: stringValue(input.inheritedDelivery.openclaw_bin) ??
-            input.conversation.openclaw_bin,
-        gatewayUrl: stringValue(input.inheritedDelivery.gateway_url) ??
-            input.conversation.gateway_url
-    };
-}
-function legacyCallbackRouteCandidate(input) {
-    return stringValue(input.gatewayMethod)
-        ? {
-            legacyOpenClaw: {
-                controllerSessionId: input.gatewaySession,
-                gatewayMethod: input.gatewayMethod,
-                openclawBin: input.openclawBin,
-                gatewayUrl: input.gatewayUrl
-            }
-        }
-        : {};
-}
-function createManagedCallbackEnvelope(route, conversation, message) {
-    return createCallbackEnvelope({
-        route,
-        source: {
-            kind: "managed_turn",
-            session_id: sessionIdForConversation(conversation),
-            turn_id: turnIdForConversation(conversation),
-            conversation_id: conversation.conversation_id
-        },
-        event: {
-            id: message.id,
-            type: message.type,
-            body: message.body,
-            requires_response: message.requires_response,
-            metadata: message.metadata
-        }
-    });
-}
-function assertImmutableCallbackTransport(inheritedDelivery, route, envelope, messageId) {
-    if (!inheritedDelivery)
-        return;
-    if (inheritedDelivery.callback_route !== undefined &&
-        canonicalJson(inheritedDelivery.callback_route) !== canonicalJson(route)) {
-        throw new Error(`callback message ${messageId} conflicts with its persisted immutable route`);
-    }
-    if (inheritedDelivery.callback_envelope !== undefined &&
-        canonicalJson(inheritedDelivery.callback_envelope) !== canonicalJson(envelope)) {
-        throw new Error(`callback message ${messageId} conflicts with its persisted immutable envelope`);
-    }
-}
-function assertDispatchCallbackRouteAuthority(conversation, route) {
-    const takeover = isRecord(conversation.native_session_takeover)
-        ? conversation.native_session_takeover
-        : undefined;
-    const submission = isRecord(takeover?.terminal_bridge_submission)
-        ? takeover.terminal_bridge_submission
-        : undefined;
-    if (!submission ||
-        !Object.hasOwn(submission, "callback_route_fingerprint")) {
-        // Records from before the route-fingerprint field remain readable.
-        return;
-    }
-    const authority = submission.callback_route_fingerprint;
-    const matches = authority === null
-        ? route === undefined
-        : stringValue(authority) !== undefined && route !== undefined &&
-            callbackRouteFingerprint(route) === authority;
-    if (!matches) {
-        throw new Error("callback route conflicts with immutable terminal dispatch authority");
-    }
-}
 export function createCallbackOutboxService(ports) {
     const settlement = createCallbackOutboxSettlement({
         state: {
@@ -298,8 +154,9 @@ export function createCallbackOutboxService(ports) {
             const closeTerminalBridgeOnDone = message.type === "done" &&
                 options.closeTerminalBridgeOnDone === true;
             const requiresDelivery = options.recordOnly !== true;
-            const deliveryAttempt = Number(inheritedDelivery?.attempts ?? 0) + 1;
             const deliveryAttemptId = randomUUID();
+            const previousDeliveryAttempts = Number(inheritedDelivery?.attempts ?? 0);
+            const deliveryAttempt = previousDeliveryAttempts + 1;
             let nextConversation = retryingPending
                 ? conversation
                 : callbackOutboxLane === "notification"
@@ -340,17 +197,18 @@ export function createCallbackOutboxService(ports) {
             }
             if (requiresDelivery) {
                 const now = ports.runtime.now().toISOString();
+                const claim = callbackDeliveryLease(ports, previousDeliveryAttempts, deliveryAttemptId, now);
                 nextConversation = {
                     ...nextConversation,
                     [callbackOutbox]: {
                         status: "pending",
                         message,
-                        attempts: deliveryAttempt,
-                        attempt_id: deliveryAttemptId,
+                        attempts: claim.attempt,
+                        attempt_id: claim.attemptId,
                         attempt_pid: ports.runtime.pid(),
-                        attempt_lease_expires_at: new Date(ports.runtime.nowMs() + ports.retry.attemptLeaseMs).toISOString(),
+                        attempt_lease_expires_at: claim.leaseExpiresAt,
                         created_at: stringValue(inheritedDelivery?.created_at) ?? now,
-                        last_attempt_at: now,
+                        last_attempt_at: claim.attemptedAt,
                         updated_at: now,
                         gateway_method: deliveryOptions.gatewayMethod,
                         gateway_session: deliveryOptions.gatewaySession ??
@@ -572,6 +430,15 @@ export function createCallbackOutboxService(ports) {
         prepareTerminalCompletion: (input) => prepareTerminalCompletion(ports, prepare, input)
     };
 }
+function callbackDeliveryLease(ports, previousAttempts, attemptId, attemptedAt) {
+    return createDurableNotificationLease({
+        previousAttempts,
+        attemptId,
+        attemptedAt,
+        leaseBaseMs: ports.runtime.nowMs(),
+        leaseMs: ports.retry.attemptLeaseMs
+    });
+}
 function beginPreparedCallbackTransport(ports, prepared) {
     const storeDir = ports.state.storeDirForStatePath(prepared.statePath);
     return ports.state.withWriter(storeDir, () => ports.state.withTransaction(prepared.statePath, () => {