@songsid/agend 2.3.1 → 2.3.2-beta.10

package/dist/dashboard-permissions.d.ts

@@ -6,17 +6,23 @@
  *
  * - `appearance`: its own look on the dashboard — theme, pictures, widgets, ambient, effects, mods it proposes;
  * - `task_board`: the task board (`task`, and `agend task …`);
- * - `web_settings`: Settings → Web appearance for the person (`get_web_settings`, `set_web_settings`).
+ * - `web_settings`: Settings → Web appearance for the person (`get_web_settings`, `set_web_settings`);
+ * - `office` (#2578), stored separately as `office_access`: its own character in Fleet → Org chart → Office — walking, a speech bubble, a pose
+ *   (`office_view`, `office_set`).
  *
  * Unset is allowed: a fleet that switches nothing off works as before, and the profile still decides what an agent
- * has. `false` takes the feature's tools away whatever the profile carries: refused at the fleet's checks
+ * has — except for a feature in OFF_UNLESS_ON (`office`), which is off until a person sets it true. `false` takes the feature's tools away whatever the profile carries: refused at the fleet's checks
  * (tool-permissions.ts's sinks, read at each call — no restart) and left out of the agent's tool menu from its next
  * start (AGEND_DASHBOARD_OFF, read by mcp-server). Like a profile, policy protection for the resolved identity, not
  * isolation between same-uid agents with a shell.
  */
-export declare const DASHBOARD_FEATURES: readonly ["appearance", "task_board", "web_settings"];
+export declare const DASHBOARD_FEATURES: readonly ["appearance", "task_board", "web_settings", "office"];
 export type DashboardFeature = typeof DASHBOARD_FEATURES[number];
-/** As written in fleet.yaml: each feature true (allowed), false (switched off) or absent (allowed). */
+/** The features a person switches on (#2578): absent (or null) is off for these, never allowed. */
+export declare const OFF_UNLESS_ON: ReadonlySet<DashboardFeature>;
+/** What a feature is when nothing (not the instance, not the defaults) says: allowed, or off for OFF_UNLESS_ON. */
+export declare const dashboardFeatureDefault: (feature: string) => boolean;
+/** As written in fleet.yaml: each feature true (allowed), false (switched off) or absent (allowed; off for OFF_UNLESS_ON). */
 export type DashboardAccess = Partial<Record<DashboardFeature, boolean>>;
 /**
  * What a NEW fleet.yaml says about the features (the user's decision, 2026-10-22): the task board is off until the
@@ -29,7 +35,7 @@ export declare const NEW_FLEET_DASHBOARD: Readonly<DashboardAccess>;
 export declare const DASHBOARD_FEATURE_TOOLS: Readonly<Record<DashboardFeature, readonly string[]>>;
 /** The feature a tool belongs to, or null for a tool no switch governs. */
 export declare function dashboardFeatureOf(tool: string): DashboardFeature | null;
-/** The features switched off (`false`) in an instance's `dashboard` as resolved; anything else allows. */
+/** The features switched off in an instance's `dashboard` as resolved: `false`, and an OFF_UNLESS_ON one not `true`. */
 export declare function dashboardFeaturesOff(access: unknown): DashboardFeature[];
 /** The refusal for `tool` when its feature is switched off in this resolved `dashboard` mapping, else null. */
 export declare function dashboardRefusal(access: unknown, tool: string): string | null;
@@ -52,9 +58,17 @@ export declare function dashboardAccessProblem(value: unknown): string | null;
  * the default — the same as absent (#2391 review: a literal `task_board: null` must not hide the default's `false`).
  */
 export declare function dashboardSwitches(value: unknown): DashboardAccess;
+/** Office lives beside dashboard so published rollback validators never see a new feature in that closed map. */
+export declare function officeAccessValue(config: any): unknown;
+export declare function dashboardAccessOf(config: any): DashboardAccess;
+/** Transitional dashboard.office input is accepted, but never written by a managed save. Canonical values win. */
+export declare function normalizeOfficeStorage(fleet: any): void;
+/** Accept an older Settings client, but project/save its Office edit using the canonical field. */
+export declare function officeInputPatch(value: Record<string, any>): Record<string, any>;
+export declare function hasLegacyOffice(fleet: any): boolean;
 /**
  * The features switched off in a fleet config for `name`: each feature's own switch where the instance has one, else
- * the default's, else allowed. `name` with no own `instances` entry (a ClassicBot identity) gets the defaults'.
+ * the default's, else allowed (off for OFF_UNLESS_ON). `name` with no own `instances` entry (a ClassicBot identity) gets the defaults'.
  */
 export declare function dashboardFeaturesOffIn(fleet: unknown, name: string): DashboardFeature[];
 /**

package/dist/dashboard-permissions.js

@@ -6,15 +6,21 @@
  *
  * - `appearance`: its own look on the dashboard — theme, pictures, widgets, ambient, effects, mods it proposes;
  * - `task_board`: the task board (`task`, and `agend task …`);
- * - `web_settings`: Settings → Web appearance for the person (`get_web_settings`, `set_web_settings`).
+ * - `web_settings`: Settings → Web appearance for the person (`get_web_settings`, `set_web_settings`);
+ * - `office` (#2578), stored separately as `office_access`: its own character in Fleet → Org chart → Office — walking, a speech bubble, a pose
+ *   (`office_view`, `office_set`).
  *
  * Unset is allowed: a fleet that switches nothing off works as before, and the profile still decides what an agent
- * has. `false` takes the feature's tools away whatever the profile carries: refused at the fleet's checks
+ * has — except for a feature in OFF_UNLESS_ON (`office`), which is off until a person sets it true. `false` takes the feature's tools away whatever the profile carries: refused at the fleet's checks
  * (tool-permissions.ts's sinks, read at each call — no restart) and left out of the agent's tool menu from its next
  * start (AGEND_DASHBOARD_OFF, read by mcp-server). Like a profile, policy protection for the resolved identity, not
  * isolation between same-uid agents with a shell.
  */
-export const DASHBOARD_FEATURES = ["appearance", "task_board", "web_settings"];
+export const DASHBOARD_FEATURES = ["appearance", "task_board", "web_settings", "office"];
+/** The features a person switches on (#2578): absent (or null) is off for these, never allowed. */
+export const OFF_UNLESS_ON = new Set(["office"]);
+/** What a feature is when nothing (not the instance, not the defaults) says: allowed, or off for OFF_UNLESS_ON. */
+export const dashboardFeatureDefault = (feature) => !OFF_UNLESS_ON.has(feature);
 /**
  * What a NEW fleet.yaml says about the features (the user's decision, 2026-10-22): the task board is off until the
  * person switches it on (Settings → defaults, or per agent). Written, visibly, by every path that creates the file —
@@ -34,6 +40,7 @@ export const DASHBOARD_FEATURE_TOOLS = {
     ],
     task_board: ["task"],
     web_settings: ["get_web_settings", "set_web_settings"],
+    office: ["office_view", "office_set"],
 };
 const FEATURE_OF = new Map(DASHBOARD_FEATURES.flatMap((f) => DASHBOARD_FEATURE_TOOLS[f].map((tool) => [tool, f])));
 /** The feature a tool belongs to, or null for a tool no switch governs. */
@@ -41,17 +48,20 @@ export function dashboardFeatureOf(tool) {
     return FEATURE_OF.get(tool) ?? null;
 }
 const isFeature = (k) => DASHBOARD_FEATURES.includes(k);
-/** The features switched off (`false`) in an instance's `dashboard` as resolved; anything else allows. */
+/** The features switched off in an instance's `dashboard` as resolved: `false`, and an OFF_UNLESS_ON one not `true`. */
 export function dashboardFeaturesOff(access) {
-    if (!access || typeof access !== "object" || Array.isArray(access))
-        return [];
-    return DASHBOARD_FEATURES.filter((f) => access[f] === false);
+    const a = access && typeof access === "object" && !Array.isArray(access) ? access : {};
+    return DASHBOARD_FEATURES.filter((f) => (OFF_UNLESS_ON.has(f) ? a[f] !== true : a[f] === false));
 }
 /** The refusal for `tool` when its feature is in `off`, else null. */
 function refusalFor(off, tool) {
     const feature = dashboardFeatureOf(tool);
     if (!feature || !off.includes(feature))
         return null;
+    if (OFF_UNLESS_ON.has(feature)) {
+        return `${tool} is not available to this instance: its dashboard feature "${feature}" is off until the person switches it on (${feature === "office" ? "office_access" : `dashboard.${feature}`}: true). `
+            + "Do not retry it; tell the person if you need it.";
+    }
     return `${tool} is not available to this instance: the person switched its dashboard feature "${feature}" off (dashboard.${feature}: false). `
         + "Do not retry it; tell the person if you need it.";
 }
@@ -106,15 +116,54 @@ export function dashboardSwitches(value) {
     }
     return out;
 }
+/** Office lives beside dashboard so published rollback validators never see a new feature in that closed map. */
+export function officeAccessValue(config) {
+    return config && Object.hasOwn(config, "office_access") ? config.office_access : config?.dashboard?.office;
+}
+export function dashboardAccessOf(config) {
+    const access = dashboardSwitches(config?.dashboard), office = officeAccessValue(config);
+    delete access.office;
+    if (typeof office === "boolean")
+        access.office = office;
+    return access;
+}
+/** Transitional dashboard.office input is accepted, but never written by a managed save. Canonical values win. */
+export function normalizeOfficeStorage(fleet) {
+    for (const config of [fleet?.defaults, ...Object.values(fleet?.instances ?? {})]) {
+        if (!config || typeof config !== "object" || Array.isArray(config))
+            continue;
+        const item = config;
+        if (!item.dashboard || typeof item.dashboard !== "object" || !Object.hasOwn(item.dashboard, "office"))
+            continue;
+        if (!Object.hasOwn(item, "office_access") && typeof item.dashboard.office === "boolean")
+            item.office_access = item.dashboard.office;
+        const { office: _office, ...dashboard } = item.dashboard;
+        item.dashboard = dashboard;
+    }
+}
+/** Accept an older Settings client, but project/save its Office edit using the canonical field. */
+export function officeInputPatch(value) {
+    const result = { ...value };
+    if (value.dashboard && typeof value.dashboard === "object" && !Array.isArray(value.dashboard) && Object.hasOwn(value.dashboard, "office")) {
+        const { office, ...dashboard } = value.dashboard;
+        result.dashboard = dashboard;
+        if (!Object.hasOwn(value, "office_access"))
+            result.office_access = office;
+    }
+    return result;
+}
+export function hasLegacyOffice(fleet) {
+    return [fleet?.defaults, ...Object.values(fleet?.instances ?? {})].some((item) => item?.dashboard && Object.hasOwn(item.dashboard, "office"));
+}
 /**
  * The features switched off in a fleet config for `name`: each feature's own switch where the instance has one, else
- * the default's, else allowed. `name` with no own `instances` entry (a ClassicBot identity) gets the defaults'.
+ * the default's, else allowed (off for OFF_UNLESS_ON). `name` with no own `instances` entry (a ClassicBot identity) gets the defaults'.
  */
 export function dashboardFeaturesOffIn(fleet, name) {
     const f = fleet && typeof fleet === "object" ? fleet : {};
     const instances = f.instances && typeof f.instances === "object" ? f.instances : {};
     const inst = Object.hasOwn(instances, name) ? instances[name] : undefined; // a name is a key of its own, never an inherited one
-    return dashboardFeaturesOff({ ...dashboardSwitches(f.defaults?.dashboard), ...dashboardSwitches(inst?.dashboard) });
+    return dashboardFeaturesOff({ ...dashboardAccessOf(f.defaults), ...dashboardAccessOf(inst) });
 }
 /**
  * (a) An agent without the task board is not told to use it: the built-in workflow's task board section ("## Progress

package/dist/dashboard-permissions.js.map

@@ -1 +1 @@
-{"version":3,"file":"dashboard-permissions.js","sourceRoot":"","sources":["../src/dashboard-permissions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,YAAY,EAAE,YAAY,EAAE,cAAc,CAAU,CAAC;AAKxF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,MAAM,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;AAEnG,yHAAyH;AACzH,MAAM,CAAC,MAAM,uBAAuB,GAA0D;IAC5F,UAAU,EAAE;QACV,eAAe,EAAE,eAAe,EAAE,qBAAqB,EAAE,iBAAiB;QAC1E,oBAAoB,EAAE,wBAAwB;QAC9C,gBAAgB,EAAE,mBAAmB;QACrC,iBAAiB,EAAE,mBAAmB;QACtC,gBAAgB,EAAE,iBAAiB;QACnC,mBAAmB,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,mBAAmB;KAClJ;IACD,UAAU,EAAE,CAAC,MAAM,CAAC;IACpB,YAAY,EAAE,CAAC,kBAAkB,EAAE,kBAAkB,CAAC;CACvD,CAAC;AAEF,MAAM,UAAU,GAA0C,IAAI,GAAG,CAC/D,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAU,CAAC,CAAC,CAChG,CAAC;AAEF,2EAA2E;AAC3E,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,OAAO,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;AACtC,CAAC;AAED,MAAM,SAAS,GAAG,CAAC,CAAS,EAAyB,EAAE,CAAE,kBAAwC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AAE9G,0GAA0G;AAC1G,MAAM,UAAU,oBAAoB,CAAC,MAAe;IAClD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,CAAC;IAC9E,OAAO,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAE,MAAkC,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC;AAC5F,CAAC;AAED,sEAAsE;AACtE,SAAS,UAAU,CAAC,GAAgC,EAAE,IAAY;IAChE,MAAM,OAAO,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IACpD,OAAO,GAAG,IAAI,kFAAkF,OAAO,oBAAoB,OAAO,YAAY;UAC1I,kDAAkD,CAAC;AACzD,CAAC;AACD,+GAA+G;AAC/G,MAAM,UAAU,gBAAgB,CAAC,MAAe,EAAE,IAAY;IAC5D,OAAO,UAAU,CAAC,oBAAoB,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;AACxD,CAAC;AACD;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAc,EAAE,IAAY,EAAE,IAAY;IAC3E,OAAO,UAAU,CAAC,sBAAsB,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;AAC/D,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,eAAe,CAA6B,KAAmB,EAAE,GAAgC;IAC/G,IAAI,CAAC,GAAG,CAAC,MAAM;QAAE,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;IACnC,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,MAAM,CAAC,GAAG,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACvG,CAAC;AAED,wGAAwG;AACxG,MAAM,UAAU,kBAAkB,CAAC,KAAyB;IAC1D,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;AACvF,CAAC;AAED,qHAAqH;AACrH,MAAM,UAAU,sBAAsB,CAAC,KAAc;IACnD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACvD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,wBAAwB,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC;IACvI,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;QACtE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;YAAE,OAAO,oBAAoB,CAAC,aAAa,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;QAC7F,IAAI,OAAO,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,GAAG,CAAC,wBAAwB,CAAC;IAChF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC3E,MAAM,GAAG,GAAoB,EAAE,CAAC;IAChC,KAAK,MAAM,CAAC,IAAI,kBAAkB,EAAE,CAAC;QAAC,MAAM,CAAC,GAAI,KAAiC,CAAC,CAAC,CAAC,CAAC;QAAC,IAAI,OAAO,CAAC,KAAK,SAAS;YAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAAC,CAAC;IAChI,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAAc,EAAE,IAAY;IACjE,MAAM,CAAC,GAAG,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAgH,CAAC,CAAC,CAAC,EAAE,CAAC;IACrK,MAAM,SAAS,GAAG,CAAC,CAAC,SAAS,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;IACpF,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAY,qDAAqD;IAC3I,OAAO,oBAAoB,CAAC,EAAE,GAAG,iBAAiB,CAAC,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,GAAG,iBAAiB,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC;AACtH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CAAC,QAAgB;IACvD,OAAO,QAAQ,CAAC,OAAO,CAAC,qDAAqD,EAAE,EAAE,CAAC,CAAC;AACrF,CAAC;AACD,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC7C,OAAO,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC3F,CAAC;AAED,mHAAmH;AACnH,MAAM,CAAC,MAAM,oBAAoB,GAAG,wGAAwG;MACxI,oIAAoI;MACpI,yLAAyL;MACzL,oFAAoF,CAAC;AAEzF,yGAAyG;AACzG,MAAM,UAAU,mBAAmB,CAAC,MAAe,EAAE,KAAc;IACjE,OAAO,oBAAoB,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;AACpH,CAAC"}
+{"version":3,"file":"dashboard-permissions.js","sourceRoot":"","sources":["../src/dashboard-permissions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,YAAY,EAAE,YAAY,EAAE,cAAc,EAAE,QAAQ,CAAU,CAAC;AAElG,mGAAmG;AACnG,MAAM,CAAC,MAAM,aAAa,GAAkC,IAAI,GAAG,CAAmB,CAAC,QAAQ,CAAC,CAAC,CAAC;AAClG,mHAAmH;AACnH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,OAAe,EAAW,EAAE,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,OAA2B,CAAC,CAAC;AAIrH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,MAAM,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;AAEnG,yHAAyH;AACzH,MAAM,CAAC,MAAM,uBAAuB,GAA0D;IAC5F,UAAU,EAAE;QACV,eAAe,EAAE,eAAe,EAAE,qBAAqB,EAAE,iBAAiB;QAC1E,oBAAoB,EAAE,wBAAwB;QAC9C,gBAAgB,EAAE,mBAAmB;QACrC,iBAAiB,EAAE,mBAAmB;QACtC,gBAAgB,EAAE,iBAAiB;QACnC,mBAAmB,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,mBAAmB;KAClJ;IACD,UAAU,EAAE,CAAC,MAAM,CAAC;IACpB,YAAY,EAAE,CAAC,kBAAkB,EAAE,kBAAkB,CAAC;IACtD,MAAM,EAAE,CAAC,aAAa,EAAE,YAAY,CAAC;CACtC,CAAC;AAEF,MAAM,UAAU,GAA0C,IAAI,GAAG,CAC/D,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAU,CAAC,CAAC,CAChG,CAAC;AAEF,2EAA2E;AAC3E,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,OAAO,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;AACtC,CAAC;AAED,MAAM,SAAS,GAAG,CAAC,CAAS,EAAyB,EAAE,CAAE,kBAAwC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AAE9G,wHAAwH;AACxH,MAAM,UAAU,oBAAoB,CAAC,MAAe;IAClD,MAAM,CAAC,GAAG,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAiC,CAAC,CAAC,CAAC,EAAE,CAAC;IAClH,OAAO,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC;AACnG,CAAC;AAED,sEAAsE;AACtE,SAAS,UAAU,CAAC,GAAgC,EAAE,IAAY;IAChE,MAAM,OAAO,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IACpD,IAAI,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/B,OAAO,GAAG,IAAI,8DAA8D,OAAO,6CAA6C,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,aAAa,OAAO,EAAE,WAAW;cACtM,kDAAkD,CAAC;IACzD,CAAC;IACD,OAAO,GAAG,IAAI,kFAAkF,OAAO,oBAAoB,OAAO,YAAY;UAC1I,kDAAkD,CAAC;AACzD,CAAC;AACD,+GAA+G;AAC/G,MAAM,UAAU,gBAAgB,CAAC,MAAe,EAAE,IAAY;IAC5D,OAAO,UAAU,CAAC,oBAAoB,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;AACxD,CAAC;AACD;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAc,EAAE,IAAY,EAAE,IAAY;IAC3E,OAAO,UAAU,CAAC,sBAAsB,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;AAC/D,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,eAAe,CAA6B,KAAmB,EAAE,GAAgC;IAC/G,IAAI,CAAC,GAAG,CAAC,MAAM;QAAE,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;IACnC,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,MAAM,CAAC,GAAG,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACvG,CAAC;AAED,wGAAwG;AACxG,MAAM,UAAU,kBAAkB,CAAC,KAAyB;IAC1D,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;AACvF,CAAC;AAED,qHAAqH;AACrH,MAAM,UAAU,sBAAsB,CAAC,KAAc;IACnD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACvD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,wBAAwB,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC;IACvI,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;QACtE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;YAAE,OAAO,oBAAoB,CAAC,aAAa,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;QAC7F,IAAI,OAAO,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,GAAG,CAAC,wBAAwB,CAAC;IAChF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC3E,MAAM,GAAG,GAAoB,EAAE,CAAC;IAChC,KAAK,MAAM,CAAC,IAAI,kBAAkB,EAAE,CAAC;QAAC,MAAM,CAAC,GAAI,KAAiC,CAAC,CAAC,CAAC,CAAC;QAAC,IAAI,OAAO,CAAC,KAAK,SAAS;YAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAAC,CAAC;IAChI,OAAO,GAAG,CAAC;AACb,CAAC;AAED,iHAAiH;AACjH,MAAM,UAAU,iBAAiB,CAAC,MAAW;IAC3C,OAAO,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC;AAC7G,CAAC;AACD,MAAM,UAAU,iBAAiB,CAAC,MAAW;IAC3C,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACxF,OAAO,MAAM,CAAC,MAAM,CAAC;IACrB,IAAI,OAAO,MAAM,KAAK,SAAS;QAAE,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;IACxD,OAAO,MAAM,CAAC;AAChB,CAAC;AACD,kHAAkH;AAClH,MAAM,UAAU,sBAAsB,CAAC,KAAU;IAC/C,KAAK,MAAM,MAAM,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;QACjF,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,SAAS;QAC7E,MAAM,IAAI,GAAG,MAA6B,CAAC;QAC3C,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC;YAAE,SAAS;QAChH,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,eAAe,CAAC,IAAI,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,SAAS;YAAE,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;QACpI,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,SAAS,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC;QACzD,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;AACH,CAAC;AACD,mGAAmG;AACnG,MAAM,UAAU,gBAAgB,CAAC,KAA0B;IACzD,MAAM,MAAM,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;IAC5B,IAAI,KAAK,CAAC,SAAS,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,CAAC;QAC1I,MAAM,EAAE,MAAM,EAAE,GAAG,SAAS,EAAE,GAAG,KAAK,CAAC,SAAS,CAAC;QACjD,MAAM,CAAC,SAAS,GAAG,SAAS,CAAC;QAC7B,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,eAAe,CAAC;YAAE,MAAM,CAAC,aAAa,GAAG,MAAM,CAAC;IAC5E,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AACD,MAAM,UAAU,eAAe,CAAC,KAAU;IACxC,OAAO,CAAC,KAAK,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAS,EAAE,EAAE,CAAC,IAAI,EAAE,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;AACrJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAAc,EAAE,IAAY;IACjE,MAAM,CAAC,GAAG,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAgH,CAAC,CAAC,CAAC,EAAE,CAAC;IACrK,MAAM,SAAS,GAAG,CAAC,CAAC,SAAS,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;IACpF,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAY,qDAAqD;IAC3I,OAAO,oBAAoB,CAAC,EAAE,GAAG,iBAAiB,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,GAAG,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAChG,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CAAC,QAAgB;IACvD,OAAO,QAAQ,CAAC,OAAO,CAAC,qDAAqD,EAAE,EAAE,CAAC,CAAC;AACrF,CAAC;AACD,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC7C,OAAO,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC3F,CAAC;AAED,mHAAmH;AACnH,MAAM,CAAC,MAAM,oBAAoB,GAAG,wGAAwG;MACxI,oIAAoI;MACpI,yLAAyL;MACzL,oFAAoF,CAAC;AAEzF,yGAAyG;AACzG,MAAM,UAAU,mBAAmB,CAAC,MAAe,EAAE,KAAc;IACjE,OAAO,oBAAoB,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;AACpH,CAAC"}

package/dist/delivery-outbox.d.ts

@@ -1,3 +1,5 @@
+import { WorkingRecoveryStore, type RecoveryEpisode } from "./working-recovery.js";
+import { type SeenPerson } from "./guest-seen-people.js";
 import { EventEmitter } from "node:events";
 import type { QueueResumePolicy } from "./delivery-queue-evidence.js";
 import { type WorkingStateSnapshot, type WorkingStateReference } from "./working-state-journal.js";
@@ -275,6 +277,9 @@ export interface ClaimedOutboxDelivery extends OutboxDelivery {
 export declare class DeliveryOutbox extends EventEmitter {
     private readonly db;
     private workingStateJournal?;
+    private recoveryStore?;
+    get workingRecovery(): WorkingRecoveryStore;
+    admitWorkingRecovery(episode: RecoveryEpisode, content: string, advisory?: boolean): boolean;
     readonly managerBootId: string;
     /** Observational extension: its failure never participates in delivery admission. */
     observeWorkingState(instance: string, snapshot: Omit<WorkingStateSnapshot, "managerBootId">): import("./working-state-journal.js").WorkingStateEntry | null;
@@ -284,6 +289,8 @@ export declare class DeliveryOutbox extends EventEmitter {
         references: WorkingStateReference[];
         total: number;
     };
+    hasOtherPendingWork(target: string, deliveryId: string): boolean;
+    withdrawWorkingRecovery(deliveryId: string, reason: string): void;
     private noteWorkingReferences;
     constructor(dbPath: string, managerBootId?: string);
     private initialize;
@@ -343,6 +350,7 @@ export declare class DeliveryOutbox extends EventEmitter {
         threadId?: string;
         adapterId?: string;
     }): boolean;
+    private insertInternalNotice;
     /** The owner's open obligations, oldest first (#926). */
     openReplyObligations(ownerInstance: string): ReplyObligation[];
     getReplyObligation(correlationId: string, requesterInstance: string, ownerInstance: string): ReplyObligation | undefined;
@@ -362,6 +370,9 @@ export declare class DeliveryOutbox extends EventEmitter {
         inputKind: string;
         managerBootId: string;
     }): HumanReceiptRow;
+    /** #2348: the people seen in chat, for Settings → Guests (admin only), and whether one was. */
+    seenPeople(limit?: number): SeenPerson[];
+    isSeenPerson(adapterId: string, userId: string): boolean;
     /** #1939 §10: the highest epoch a stored receipt carries (authority-state.ts must not be behind it). */
     maxWebAuthorityEpoch(): number;
     /** #2122: delivered messages per instance and UTC hour in [from, to). */
@@ -403,7 +414,7 @@ export declare class DeliveryOutbox extends EventEmitter {
     countForTarget(target: string, states: readonly OutboxState[]): number;
     nextRetryAt(): string | null;
     /** Claim the earliest eligible target row; one caller owns each target lane. */
-    claimNext(managerBootId: string, targetBootIdFor: (target: string) => string | null, blockedTargets: ReadonlySet<string>): ClaimedOutboxDelivery | undefined;
+    claimNext(managerBootId: string, targetBootIdFor: (target: string) => string | null, blockedTargets: ReadonlySet<string>, eligible?: (delivery: OutboxDelivery) => boolean): ClaimedOutboxDelivery | undefined;
     private claimNextSync;
     /** Idempotent begin permit, committed immediately before the pane side effect. */
     begin(deliveryId: string, targetBootId: string, attemptNo: number, evidence?: DeliveryAttemptEvidence): "begun" | "duplicate" | "stale";

package/dist/delivery-outbox.js

@@ -1,3 +1,5 @@
+import { WorkingRecoveryStore, WORKING_RECOVERY_KIND } from "./working-recovery.js";
+import { initializeSeenPeople, isSeenPerson, listSeenPeople, noteSeenPerson, pruneSeenPeople, SEEN_PEOPLE_KEEP_DAYS } from "./guest-seen-people.js";
 import { measureSyncWork } from "./sync-work-attribution.js";
 import Database from "better-sqlite3";
 import { createHash, randomUUID } from "node:crypto";
@@ -302,6 +304,14 @@ function mapObligation(row) {
 export class DeliveryOutbox extends EventEmitter {
     db;
     workingStateJournal;
+    recoveryStore;
+    get workingRecovery() { return this.recoveryStore ??= new WorkingRecoveryStore(this.db); }
+    admitWorkingRecovery(episode, content, advisory = false) {
+        const inserted = this.workingRecovery.admit(episode, () => this.insertInternalNotice(episode.instance, `working-recovery:${episode.key}`, content, new Date(), undefined, WORKING_RECOVERY_KIND), advisory);
+        if (inserted)
+            this.emit("admitted");
+        return inserted;
+    }
     managerBootId;
     /** Observational extension: its failure never participates in delivery admission. */
     observeWorkingState(instance, snapshot) {
@@ -334,6 +344,16 @@ export class DeliveryOutbox extends EventEmitter {
         return { total: total.n, references: rows.map(r => ({ kind: r.kind, correlationId: r.correlation_id,
                 requester: r.requester_instance, owner: r.owner_instance, deliveryId: r.request_delivery_id })) };
     }
+    hasOtherPendingWork(target, deliveryId) {
+        return !!this.db.prepare("SELECT 1 FROM deliveries WHERE target_instance=? AND delivery_id<>? AND kind<>? AND state IN ('queued','retry_wait','delivering','submission_started','reconciliation_pending') LIMIT 1")
+            .get(target, deliveryId, WORKING_RECOVERY_KIND);
+    }
+    withdrawWorkingRecovery(deliveryId, reason) {
+        const changed = this.db.prepare("UPDATE deliveries SET state='cancelled',finished_at=?,updated_at=?,last_error=? WHERE delivery_id=? AND kind=? AND state IN ('queued','retry_wait','delivering')")
+            .run(new Date().toISOString(), new Date().toISOString(), reason, deliveryId, WORKING_RECOVERY_KIND).changes;
+        if (changed)
+            this.emit("state", { deliveryId, state: "cancelled" });
+    }
     noteWorkingReferences(instances) {
         // The transaction has committed. Telemetry must not change its result.
         try {
@@ -490,6 +510,7 @@ export class DeliveryOutbox extends EventEmitter {
     `);
         this.migrateReplyObligationExpiry();
         initializeHumanReceipts(this.db);
+        initializeSeenPeople(this.db); // #2348: Settings → Guests' people (after the receipts: its backfill reads them)
         // Additive migration: existing Phase 1 databases keep their row identities,
         // foreign keys, and WAL while gaining reconciliation evidence columns.
         this.ensureColumn("deliveries", "reconciliation_pending", "INTEGER NOT NULL DEFAULT 0");
@@ -769,10 +790,22 @@ export class DeliveryOutbox extends EventEmitter {
      * answer goes there too. Without it the notice belongs to no chat.
      */
     admitSystemNotice(target, sourceKey, content, now = new Date(), place) {
+        const existed = this.db.prepare("SELECT 1 FROM deliveries WHERE source_key=?").get(sourceKey);
+        this.insertInternalNotice(target, sourceKey, content, now, place, SYSTEM_NOTICE_KIND);
+        // INSERT OR IGNORE returns its durable id even for a duplicate.
+        const inserted = !existed;
+        if (inserted)
+            this.emit("admitted");
+        return inserted;
+    }
+    insertInternalNotice(target, sourceKey, content, now, place, kind) {
+        const existing = this.db.prepare("SELECT delivery_id FROM deliveries WHERE source_key=?").get(sourceKey);
+        if (existing)
+            return existing.delivery_id;
         const noticeId = randomUUID();
         const nowIso = now.toISOString();
         const payload = {
-            type: "fleet_inbound",
+            type: kind === WORKING_RECOVERY_KIND ? WORKING_RECOVERY_KIND : "fleet_inbound",
             content,
             meta: {
                 user: "AgEnD", user_id: "agend-system", message_id: `system-notice-${noticeId}`,
@@ -780,17 +813,15 @@ export class DeliveryOutbox extends EventEmitter {
                 ...(place?.adapterId ? { adapter_id: place.adapterId } : {}),
             },
         };
-        const inserted = this.db.prepare(`
+        this.db.prepare(`
       INSERT OR IGNORE INTO deliveries (
         delivery_id,operation_id,source_key,source_instance,source_daemon_boot_id,
         target_instance,target_session,target_daemon_boot_id,kind,correlation_id,payload_json,message_id,content_sha256,state,
         attempt_no,created_seq,manager_boot_id,created_at,updated_at,accepted_at
       ) VALUES (?,?,?,'agend-system',?,?,NULL,NULL,?,?,?,?,?,'queued',0,
         (SELECT COALESCE(MAX(created_seq),0)+1 FROM deliveries),NULL,?,?,?)
-    `).run(noticeId, `notice:${sourceKey}`, sourceKey, this.managerBootId, target, SYSTEM_NOTICE_KIND, `notice:${sourceKey}`, JSON.stringify(payload), payload.meta.message_id, deliveryContentDigest(content), nowIso, nowIso, nowIso).changes === 1;
-        if (inserted)
-            this.emit("admitted");
-        return inserted;
+    `).run(noticeId, `notice:${sourceKey}`, sourceKey, this.managerBootId, target, kind, `notice:${sourceKey}`, JSON.stringify(payload), payload.meta.message_id, deliveryContentDigest(content), nowIso, nowIso, nowIso);
+        return noticeId;
     }
     /** The owner's open obligations, oldest first (#926). */
     openReplyObligations(ownerInstance) {
@@ -965,8 +996,20 @@ export class DeliveryOutbox extends EventEmitter {
         return row ? mapRow(row) : undefined;
     }
     createHumanReceipt(input) {
-        return createHumanReceipt(this.db, input);
+        const row = createHumanReceipt(this.db, input);
+        // #2348: a platform sender (never the web, never a bot: nativeHumanOrigin) is someone an admin may grant guest access.
+        const o = input.origin;
+        if ((o.platform === "discord" || o.platform === "telegram") && o.adapter_id && o.user_id) {
+            try {
+                noteSeenPerson(this.db, { adapterId: o.adapter_id, userId: o.user_id, username: o.username, instance: input.targetInstance, at: row.created_at });
+            }
+            catch { /* the receipt is the evidence; the picker's list may miss one sender */ }
+        }
+        return row;
     }
+    /** #2348: the people seen in chat, for Settings → Guests (admin only), and whether one was. */
+    seenPeople(limit) { return listSeenPeople(this.db, limit); }
+    isSeenPerson(adapterId, userId) { return isSeenPerson(this.db, adapterId, userId); }
     /** #1939 §10: the highest epoch a stored receipt carries (authority-state.ts must not be behind it). */
     maxWebAuthorityEpoch() { return maxWebAuthorityEpoch(this.db); }
     /** #2122: delivered messages per instance and UTC hour in [from, to). */
@@ -1063,10 +1106,10 @@ export class DeliveryOutbox extends EventEmitter {
         return row.next_attempt_at;
     }
     /** Claim the earliest eligible target row; one caller owns each target lane. */
-    claimNext(managerBootId, targetBootIdFor, blockedTargets) {
-        return measureSyncWork("outbox.claimNext", () => this.claimNextSync(managerBootId, targetBootIdFor, blockedTargets));
+    claimNext(managerBootId, targetBootIdFor, blockedTargets, eligible) {
+        return measureSyncWork("outbox.claimNext", () => this.claimNextSync(managerBootId, targetBootIdFor, blockedTargets, eligible));
     }
-    claimNextSync(managerBootId, targetBootIdFor, blockedTargets) {
+    claimNextSync(managerBootId, targetBootIdFor, blockedTargets, eligible) {
         const now = new Date().toISOString();
         const rows = this.db.prepare(`
       SELECT * FROM deliveries WHERE state IN ('queued','retry_wait')
@@ -1084,7 +1127,7 @@ export class DeliveryOutbox extends EventEmitter {
             if (visitedTargets.has(row.target_instance))
                 continue;
             visitedTargets.add(row.target_instance);
-            if (blockedTargets.has(row.target_instance))
+            if (blockedTargets.has(row.target_instance) || eligible && !eligible(mapRow(row)))
                 continue;
             // A recovered submission owns only its target lane while its evidence is
             // classified; independent targets can keep dispatching.
@@ -1327,7 +1370,9 @@ export class DeliveryOutbox extends EventEmitter {
             // Readiness and idle deferrals occur before begin and do not consume the
             // submission-attempt budget. The age limit remains the visible bound for
             // work that never reaches a pane-side-effect attempt.
-            const exhausted = ageMs >= maxAgeForKind(row.kind, DURABLE_DELIVERY_MAX_AGE_MS);
+            // A local continuation held before any input remains deferred across a crash
+            // loop or a persistent draft. Ordinary deliveries retain their existing TTL.
+            const exhausted = row.kind !== WORKING_RECOVERY_KIND && ageMs >= maxAgeForKind(row.kind, DURABLE_DELIVERY_MAX_AGE_MS);
             const outcome = exhausted ? "failed" : "retry_wait";
             const update = this.db.prepare(`
         UPDATE deliveries SET state=?,updated_at=?,finished_at=?,last_error=?,next_attempt_at=?
@@ -1382,6 +1427,8 @@ export class DeliveryOutbox extends EventEmitter {
             let changed = 0;
             let uncertain = 0;
             for (const row of stale) {
+                if (row.kind === WORKING_RECOVERY_KIND)
+                    continue;
                 // A kind with a longer life is only stale once that has passed too.
                 if (Date.parse(row.created_at) > nowMs - maxAgeForKind(row.kind, maxAgeMs))
                     continue;
@@ -1426,8 +1473,8 @@ export class DeliveryOutbox extends EventEmitter {
     nextExpiryAt() {
         const oldest = (systemNotices) => this.db.prepare(`
       SELECT MIN(created_at) AS created_at FROM deliveries
-      WHERE (state IN ('queued','retry_wait') AND (kind=?) = ?) OR (? = 0 AND state='submission_started' AND reconciliation_pending=1)
-    `).get(SYSTEM_NOTICE_KIND, systemNotices ? 1 : 0, systemNotices ? 1 : 0).created_at;
+      WHERE (state IN ('queued','retry_wait') AND kind<>? AND (kind=?) = ?) OR (? = 0 AND state='submission_started' AND reconciliation_pending=1)
+    `).get(WORKING_RECOVERY_KIND, SYSTEM_NOTICE_KIND, systemNotices ? 1 : 0, systemNotices ? 1 : 0).created_at;
         const expiries = [
             [oldest(false), DURABLE_DELIVERY_MAX_AGE_MS],
             [oldest(true), maxAgeForKind(SYSTEM_NOTICE_KIND, DURABLE_DELIVERY_MAX_AGE_MS)],
@@ -1697,6 +1744,11 @@ export class DeliveryOutbox extends EventEmitter {
         }
         // #2122: delivered-message counts are kept as long as the usage rollup (400 days), whatever `days` is.
         pruneMessageHours(this.db, Date.now() - 400 * 24 * 60 * 60_000);
+        // #2348: the people seen in chat, the same 400 days since last seen.
+        try {
+            pruneSeenPeople(this.db, new Date(Date.now() - SEEN_PEOPLE_KEEP_DAYS * 24 * 60 * 60_000).toISOString());
+        }
+        catch { /* next pass */ }
         // Human rows are evidence only: retention never schedules or retries them.
         for (;;) {
             if (!this.db.open)
@@ -1745,7 +1797,7 @@ export class DeliveryOutbox extends EventEmitter {
     /** Must be called inside the same SQLite transaction as the terminal transition. */
     insertFailureNotice(parent, outcome, reason, now) {
         if (parent.kind === "delivery_outcome_notice" || parent.kind === "post_restart_outcome_notice"
-            || parent.kind === REPLY_OBLIGATION_NOTICE_KIND || parent.kind === SYSTEM_NOTICE_KIND)
+            || parent.kind === REPLY_OBLIGATION_NOTICE_KIND || parent.kind === SYSTEM_NOTICE_KIND || parent.kind === WORKING_RECOVERY_KIND)
             return;
         // A self-scheduled silent heartbeat has no other sender to inform. Keep
         // its terminal state/evidence and fleet log without creating a new turn.