botmux 3.9.0 → 3.9.2

package/dist/services/issue-report.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"issue-report.d.ts","sourceRoot":"","sources":["../../src/services/issue-report.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,EAAiC,KAAK,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAC1F,OAAO,EAAiB,KAAK,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAEhF,gEAAgE;AAChE,MAAM,MAAM,UAAU,GAAG,gBAAgB,CAAC;AAE1C,MAAM,MAAM,iBAAiB,GACzB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,YAAY,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,OAAO,CAAA;CAAE,GAC9E;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,YAAY,CAAA;CAAE,GACnC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,YAAY,CAAC;IAAC,OAAO,EAAE,YAAY,CAAA;CAAE;AAC5D;+CAC+C;GAC7C;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,UAAU,CAAC;IAAC,OAAO,EAAE,YAAY,CAAA;CAAE;AAC1D,8DAA8D;GAC5D;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,YAAY,CAAC;IAAC,SAAS,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC;AAElG;;;;;GAKG;AACH,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,MAAM,EACf,OAAO,EAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAA;CAAE,GACnD,YAAY,GAAG,IAAI,CAYrB;AAED;;;;;GAKG;AACH,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAgCxG"}

package/dist/services/issue-report.js

@@ -0,0 +1,84 @@
+/**
+ * issue 交付：agent 在领取群里跑完后执行 `botmux report`，把平台 issue 推到 `in_review`（待验收）。
+ *
+ * 这是 kickoff 正文里那句「完成后执行 botmux report 交付」的落地实现——见
+ * [[issue-command-deps]] 的 buildKickoffPrompt。平台生命周期：
+ *   claimed → in_progress → **in_review** → done
+ * （`/status` 允许正向追赶，所以 claimed 也可直接到 in_review。）
+ *
+ * ## 为什么不复用 dispatch 的 report 路径
+ *
+ * `botmux report` 原本只服务「多话题协作」：把回报发回主编排会话。领取群是 chat-scope
+ * 会话，没有 creatorOpenId / dispatch 注册表，那条路会硬失败。issue 交付的「验收人」
+ * 在平台看板，不在飞书主编排话题，所以这里走 binding → outbox → `/status`，与
+ * [[issue-release]] 同一套发件箱。
+ *
+ * ## 平台先行，本地 lastSynced 后写
+ *
+ * 与 release 相同：先让平台确认 `in_review`，再 settle outbox。中间崩溃最多多发一次
+ * （sourceSeq 幂等），不会出现「本机以为已交付、平台还停在 claimed」。
+ *
+ * 与 release 的差异：交付**不**改 bindState——claim 仍归本机，等人在平台上 accept/reject。
+ */
+import { getBinding, isActiveBindState } from './issue-board-store.js';
+import { projectStatus } from './issue-status-writer.js';
+/**
+ * 从会话候选锚点里找活跃 issue binding。
+ *
+ * 拉群领取的 binding 主键是 chatId；话题领取（若将来支持）主键是 rootMessageId。
+ * 两个候选都查一遍，先命中活跃 binding 的为准。
+ */
+export function findActiveBindingForSession(dataDir, session) {
+    const candidates = [];
+    if (session.rootMessageId)
+        candidates.push(session.rootMessageId);
+    if (session.chatId && session.chatId !== session.rootMessageId)
+        candidates.push(session.chatId);
+    const seen = new Set();
+    for (const anchorId of candidates) {
+        if (seen.has(anchorId))
+            continue;
+        seen.add(anchorId);
+        const binding = getBinding(dataDir, anchorId);
+        if (binding && isActiveBindState(binding.bindState))
+            return binding;
+    }
+    return null;
+}
+/**
+ * 把 `anchorId` 上绑定的 issue 推到平台 `in_review`。
+ *
+ * 走 outbox：`enqueueDesiredStatus` 是 sourceSeq 唯一分配入口。发送失败时行留在
+ * pending，可重试同一 `botmux report`。
+ */
+export async function reportIssueInReview(deps, anchorId) {
+    const binding = getBinding(deps.dataDir, anchorId);
+    if (!binding)
+        return { ok: false, reason: 'no_binding' };
+    if (!isActiveBindState(binding.bindState))
+        return { ok: false, reason: 'not_active', binding };
+    const r = await projectStatus(deps, anchorId, 'in_review');
+    // 409 对账后发现 claim 已易主：交付**没有**落地。这和 release 相反——释放时"claim 已不在
+    // 本机"正好就是想要的结果，交付时它意味着这次汇报根本没写上去，报成功就是骗人。
+    if (r.ok && !r.applied)
+        return { ok: false, reason: 'detached', binding };
+    // `idle` = 没有待发行且已同步到位 —— 重复交付（同一次 report 跑了两遍），不是失败。
+    const alreadyInReview = !r.ok && r.reason === 'idle';
+    if (!r.ok && !alreadyInReview) {
+        const detail = r.reason === 'busy'
+            ? '上一条回写还在发送中，稍后重试同一条 botmux report'
+            : r.reason === 'platform'
+                ? r.detail
+                : r.reason;
+        const permanent = !r.ok && r.reason === 'platform' && r.permanent === true;
+        return { ok: false, reason: 'platform', detail, binding, ...(permanent ? { permanent } : {}) };
+    }
+    // 交付**不**改 bindState：claim 仍归本机，等人在平台上 accept/reject。
+    return {
+        ok: true,
+        binding: getBinding(deps.dataDir, anchorId) ?? binding,
+        issueId: binding.issueId,
+        alreadyInReview,
+    };
+}
+//# sourceMappingURL=issue-report.js.map

package/dist/services/issue-report.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"issue-report.js","sourceRoot":"","sources":["../../src/services/issue-report.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAqB,MAAM,wBAAwB,CAAC;AAC1F,OAAO,EAAE,aAAa,EAAyB,MAAM,0BAA0B,CAAC;AAehF;;;;;GAKG;AACH,MAAM,UAAU,2BAA2B,CACzC,OAAe,EACf,OAAoD;IAEpD,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,IAAI,OAAO,CAAC,aAAa;QAAE,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAClE,IAAI,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,aAAa;QAAE,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAChG,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,QAAQ,IAAI,UAAU,EAAE,CAAC;QAClC,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,SAAS;QACjC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACnB,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC9C,IAAI,OAAO,IAAI,iBAAiB,CAAC,OAAO,CAAC,SAAS,CAAC;YAAE,OAAO,OAAO,CAAC;IACtE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAAgB,EAAE,QAAgB;IAC1E,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACnD,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IACzD,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,SAAS,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC;IAE/F,MAAM,CAAC,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;IAE3D,8DAA8D;IAC9D,0CAA0C;IAC1C,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;IAE1E,sDAAsD;IACtD,MAAM,eAAe,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC;IAErD,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,eAAe,EAAE,CAAC;QAC9B,MAAM,MAAM,GACV,CAAC,CAAC,MAAM,KAAK,MAAM;YACjB,CAAC,CAAC,kCAAkC;YACpC,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,UAAU;gBACvB,CAAC,CAAC,CAAC,CAAC,MAAM;gBACV,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QACjB,MAAM,SAAS,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,MAAM,KAAK,UAAU,IAAI,CAAC,CAAC,SAAS,KAAK,IAAI,CAAC;QAC3E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACjG,CAAC;IAED,sDAAsD;IACtD,OAAO;QACL,EAAE,EAAE,IAAI;QACR,OAAO,EAAE,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,OAAO;QACtD,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,eAAe;KAChB,CAAC;AACJ,CAAC"}

package/dist/services/issue-status-view.d.ts

@@ -0,0 +1,52 @@
+/**
+ * `/issue status`：把「这个群到底绑着哪条任务、现在什么状态」摊开给人看。
+ *
+ * 纯只读——不排队、不回写、不改 binding。之所以单独一个服务而不是让命令层直接读 store：
+ * 它要同时看**本机**和**平台**两边，而这两边不一致恰恰是最需要被看见的东西：
+ *
+ *  - 本机 `lastSyncedStatus` 与平台 `status` 不同 → 有回写没发出去（发件箱里躺着）
+ *  - 平台 `claim` 已经不是本机的 → 领取被回收/被别人领走了，这个群里干的活白干
+ *  - 平台 `needs_attention` → 任务掉进了那扇单向门，得去平台处理
+ *
+ * 这三种状况在出问题时都是静默的，命令的价值就是把它们变成一眼可见。
+ */
+import { type IssueBinding } from './issue-board-store.js';
+import type { PlatformIssue } from '../platform/issue-client.js';
+export interface IssueStatusDeps {
+    dataDir: string;
+    /** 拉平台当前状态。返回 null 表示**拉不到**（网络/已归档），不是"任务不存在"。 */
+    fetchIssue: (teamId: string, issueId: string) => Promise<PlatformIssue | null>;
+}
+export interface IssueStatusView {
+    binding: IssueBinding;
+    /** 平台侧当前的 issue；null = 没拉到（下游必须说"拉不到"，不能说"没有这条任务"）。 */
+    issue: PlatformIssue | null;
+    /** 发件箱里还没发出去的回写条数。>0 说明本机与平台之间存在滞后。 */
+    pendingWrites: number;
+    /**
+     * 已被判死、不再重投的回写条数（平台 401/403/400/404，见 `isPermanentFailure`）。
+     *
+     * 必须单独报出来：这些行不在 `pendingWrites` 里，界面上一声不吭就等于"已经同步好了"，
+     * 而实际上那次状态变更**永远不会**到平台。给了 fatal 就得给能看见它的地方。
+     */
+    failedWrites: number;
+    /** 最后一条判死行的错误，直接给人看，省得去翻日志。 */
+    lastFailure?: string;
+    /** 平台上这条 claim 是否还归本机。issue 拉不到时为 undefined（无法判定，别猜）。 */
+    claimMine?: boolean;
+}
+export type IssueStatusResult = {
+    ok: true;
+    view: IssueStatusView;
+} | {
+    ok: false;
+    reason: 'no_binding';
+};
+/**
+ * 查 `anchorId` 上绑定的 issue 现状。
+ *
+ * 与 release/report 不同，**终态 binding 也照查**：`/issue status` 的用处正是在"这个群是不是
+ * 已经结束了"存疑的时候回答它，此时把它当成"没有绑定"是把唯一的答案藏起来。
+ */
+export declare function describeIssue(deps: IssueStatusDeps, anchorId: string): Promise<IssueStatusResult>;
+//# sourceMappingURL=issue-status-view.d.ts.map

package/dist/services/issue-status-view.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"issue-status-view.d.ts","sourceRoot":"","sources":["../../src/services/issue-status-view.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAA0B,KAAK,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACnF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAEjE,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,mDAAmD;IACnD,UAAU,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;CAChF;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,YAAY,CAAC;IACtB,uDAAuD;IACvD,KAAK,EAAE,aAAa,GAAG,IAAI,CAAC;IAC5B,uCAAuC;IACvC,aAAa,EAAE,MAAM,CAAC;IACtB;;;;;OAKG;IACH,YAAY,EAAE,MAAM,CAAC;IACrB,+BAA+B;IAC/B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,yDAAyD;IACzD,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,MAAM,iBAAiB,GACzB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,eAAe,CAAA;CAAE,GACnC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,YAAY,CAAA;CAAE,CAAC;AAExC;;;;;GAKG;AACH,wBAAsB,aAAa,CAAC,IAAI,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAsBvG"}

package/dist/services/issue-status-view.js

@@ -0,0 +1,42 @@
+/**
+ * `/issue status`：把「这个群到底绑着哪条任务、现在什么状态」摊开给人看。
+ *
+ * 纯只读——不排队、不回写、不改 binding。之所以单独一个服务而不是让命令层直接读 store：
+ * 它要同时看**本机**和**平台**两边，而这两边不一致恰恰是最需要被看见的东西：
+ *
+ *  - 本机 `lastSyncedStatus` 与平台 `status` 不同 → 有回写没发出去（发件箱里躺着）
+ *  - 平台 `claim` 已经不是本机的 → 领取被回收/被别人领走了，这个群里干的活白干
+ *  - 平台 `needs_attention` → 任务掉进了那扇单向门，得去平台处理
+ *
+ * 这三种状况在出问题时都是静默的，命令的价值就是把它们变成一眼可见。
+ */
+import { getBinding, listOutbox } from './issue-board-store.js';
+/**
+ * 查 `anchorId` 上绑定的 issue 现状。
+ *
+ * 与 release/report 不同，**终态 binding 也照查**：`/issue status` 的用处正是在"这个群是不是
+ * 已经结束了"存疑的时候回答它，此时把它当成"没有绑定"是把唯一的答案藏起来。
+ */
+export async function describeIssue(deps, anchorId) {
+    const binding = getBinding(deps.dataDir, anchorId);
+    if (!binding)
+        return { ok: false, reason: 'no_binding' };
+    const issue = await deps.fetchIssue(binding.teamId, binding.issueId);
+    const rows = listOutbox(deps.dataDir, anchorId);
+    const pendingWrites = rows.filter((r) => r.state === 'pending' || r.state === 'inflight').length;
+    const failed = rows.filter((r) => r.state === 'failed');
+    const lastFailure = failed[failed.length - 1]?.lastError;
+    return {
+        ok: true,
+        view: {
+            binding,
+            issue,
+            pendingWrites,
+            failedWrites: failed.length,
+            ...(lastFailure ? { lastFailure } : {}),
+            // claim 字段被平台清掉（done/open/reopened）时也是"不归本机"，与被别人领走同样处理。
+            ...(issue ? { claimMine: issue.claim?.claimId === binding.claimId } : {}),
+        },
+    };
+}
+//# sourceMappingURL=issue-status-view.js.map

package/dist/services/issue-status-view.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"issue-status-view.js","sourceRoot":"","sources":["../../src/services/issue-status-view.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,UAAU,EAAE,UAAU,EAAqB,MAAM,wBAAwB,CAAC;AAgCnF;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAqB,EAAE,QAAgB;IACzE,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACnD,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IAEzD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IACrE,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAChD,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,MAAM,CAAC;IACjG,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC;IACxD,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,SAAS,CAAC;IAEzD,OAAO;QACL,EAAE,EAAE,IAAI;QACR,IAAI,EAAE;YACJ,OAAO;YACP,KAAK;YACL,aAAa;YACb,YAAY,EAAE,MAAM,CAAC,MAAM;YAC3B,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvC,yDAAyD;YACzD,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1E;KACF,CAAC;AACJ,CAAC"}

package/dist/services/issue-status-writer.d.ts

@@ -0,0 +1,98 @@
+/**
+ * 状态回写：把「本会话应该处于什么状态」推到平台。
+ *
+ * 这是 [[issue-board-store]] 那个发件箱的**唯一**发送端。所有想改 issue 状态的调用方
+ * （开工、交付、验收、释放）都走 `projectStatus`，谁都不许直接调 `writeIssueStatus`——
+ * sourceSeq 的分配、串行、退避、409 对账全都只在这里实现一次。
+ *
+ * ## 为什么必须有它（不是架构洁癖）
+ *
+ * 平台在 bind 之后给一个 **5 分钟的 activation 租约**：到期时 issue 还停在 `claimed`，
+ * sweeper 就把它翻成 `needs_attention/claim_activate_timeout`（platform `src/store/issues.ts`
+ * 的 sweepExpiredLeases，每 60s 扫一次）。证明「我真的在跑」的唯一方式就是回写
+ * `in_progress`。
+ *
+ * 在这一刀之前 botmux 一个状态都不写，于是那条本该罕见的保护路径变成了**必经之路**：
+ * 每个领取的任务 5 分钟后必然掉进需要关注，而且**回不来**——平台只放行
+ * `task_blocked` 的 needs_attention 恢复成 in_progress，`claim_activate_timeout` 只能
+ * open/reopened（都清 claim），那个群的工作就废了。所以「开工即写 in_progress」不是
+ * 锦上添花，是拆引信。
+ *
+ * ## 409 的两种含义
+ *
+ * 与 [[issue-release]] 同一套判据：撞 409 先问「平台还认不认我这个 claim」——
+ *  - **stateRev 过期** → claim 还是我的，拿新基线重发**同一条行**（它上次没被应用，
+ *    复用 sourceSeq 是安全的：平台只在 `<= lastSourceSeq` 时才当重复丢弃）
+ *  - **claim 已不归本机** → 平台侧这条早就结束了（force-detach/租约过期/被别人领走），
+ *    再打多少次都一样，直接判定"已结算"让调用方收尾
+ */
+import { type AttentionReason, type IssueStatus } from './issue-board-store.js';
+import type { IssueClientResult, PlatformIssue } from '../platform/issue-client.js';
+export interface StatusWriterDeps {
+    dataDir: string;
+    writeStatus: (issueId: string, args: {
+        claimId: string;
+        claimEpoch: number;
+        sourceSeq: number;
+        status: IssueStatus;
+        attentionReason?: AttentionReason;
+        expectedStateRev: number;
+    }) => Promise<IssueClientResult<{
+        issue: PlatformIssue;
+    }>>;
+    /** 撞 409 时用来判断「平台还认不认这个 claim」。拿不到就当无法判定，不猜。 */
+    fetchIssue: (teamId: string, issueId: string) => Promise<PlatformIssue | null>;
+    now?: () => number;
+}
+export type FlushOutcome = 
+/** 平台接受了这次回写。 */
+{
+    ok: true;
+    applied: true;
+    issue: PlatformIssue;
+}
+/** 平台侧这条 claim 已经不归本机了 —— 无需再发，调用方按"已结算"收尾。 */
+ | {
+    ok: true;
+    applied: false;
+    detached: true;
+}
+/** 没有待发行（已经同步到位，或压根没排队）。 */
+ | {
+    ok: false;
+    reason: 'idle';
+}
+/** 同一 binding 已有 inflight —— 串行约束，稍后再来。 */
+ | {
+    ok: false;
+    reason: 'busy';
+}
+/** binding 不存在或已是终态。 */
+ | {
+    ok: false;
+    reason: 'no_binding';
+}
+/** `permanent` = 平台明确拒绝且重试无意义，行已标 fatal 不再重投（见 isPermanentFailure）。 */
+ | {
+    ok: false;
+    reason: 'platform';
+    detail: string;
+    permanent?: boolean;
+};
+/**
+ * 把发件箱里该 binding 的下一条待发行发出去。
+ *
+ * 不排队、只发送——用于后台 pump 重投那些失败退避过的行。
+ */
+export declare function flushNextStatus(deps: StatusWriterDeps, anchorId: string): Promise<FlushOutcome>;
+/**
+ * 投影一个目标状态并立刻尝试发送。
+ *
+ * 排队交给 `enqueueDesiredStatus`（sourceSeq 的唯一分配入口 + 去重合并），发送交给
+ * `flushNextStatus`。发失败时行留在发件箱里退避，后台 pump 会接着重投——所以调用方
+ * 拿到 `platform` 失败也不代表这次投影丢了。
+ */
+export declare function projectStatus(deps: StatusWriterDeps, anchorId: string, desired: IssueStatus, opts?: {
+    attentionReason?: AttentionReason;
+}): Promise<FlushOutcome>;
+//# sourceMappingURL=issue-status-writer.d.ts.map

package/dist/services/issue-status-writer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"issue-status-writer.d.ts","sourceRoot":"","sources":["../../src/services/issue-status-writer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,OAAO,EAQL,KAAK,eAAe,EACpB,KAAK,WAAW,EACjB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,KAAK,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAEpF,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,CACX,OAAO,EAAE,MAAM,EACf,IAAI,EAAE;QACJ,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,WAAW,CAAC;QACpB,eAAe,CAAC,EAAE,eAAe,CAAC;QAClC,gBAAgB,EAAE,MAAM,CAAC;KAC1B,KACE,OAAO,CAAC,iBAAiB,CAAC;QAAE,KAAK,EAAE,aAAa,CAAA;KAAE,CAAC,CAAC,CAAC;IAC1D,gDAAgD;IAChD,UAAU,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;IAC/E,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,YAAY;AACtB,iBAAiB;AACf;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,aAAa,CAAA;CAAE;AACnD,+CAA+C;GAC7C;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,KAAK,CAAC;IAAC,QAAQ,EAAE,IAAI,CAAA;CAAE;AAC9C,4BAA4B;GAC1B;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE;AAC/B,2CAA2C;GACzC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE;AAC/B,wBAAwB;GACtB;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,YAAY,CAAA;CAAE;AACrC,uEAAuE;GACrE;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC;AAE3E;;;;GAIG;AACH,wBAAsB,eAAe,CAAC,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAqErG;AAED;;;;;;GAMG;AACH,wBAAsB,aAAa,CACjC,IAAI,EAAE,gBAAgB,EACtB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,WAAW,EACpB,IAAI,GAAE;IAAE,eAAe,CAAC,EAAE,eAAe,CAAA;CAAO,GAC/C,OAAO,CAAC,YAAY,CAAC,CAgBvB"}

package/dist/services/issue-status-writer.js

@@ -0,0 +1,123 @@
+/**
+ * 状态回写：把「本会话应该处于什么状态」推到平台。
+ *
+ * 这是 [[issue-board-store]] 那个发件箱的**唯一**发送端。所有想改 issue 状态的调用方
+ * （开工、交付、验收、释放）都走 `projectStatus`，谁都不许直接调 `writeIssueStatus`——
+ * sourceSeq 的分配、串行、退避、409 对账全都只在这里实现一次。
+ *
+ * ## 为什么必须有它（不是架构洁癖）
+ *
+ * 平台在 bind 之后给一个 **5 分钟的 activation 租约**：到期时 issue 还停在 `claimed`，
+ * sweeper 就把它翻成 `needs_attention/claim_activate_timeout`（platform `src/store/issues.ts`
+ * 的 sweepExpiredLeases，每 60s 扫一次）。证明「我真的在跑」的唯一方式就是回写
+ * `in_progress`。
+ *
+ * 在这一刀之前 botmux 一个状态都不写，于是那条本该罕见的保护路径变成了**必经之路**：
+ * 每个领取的任务 5 分钟后必然掉进需要关注，而且**回不来**——平台只放行
+ * `task_blocked` 的 needs_attention 恢复成 in_progress，`claim_activate_timeout` 只能
+ * open/reopened（都清 claim），那个群的工作就废了。所以「开工即写 in_progress」不是
+ * 锦上添花，是拆引信。
+ *
+ * ## 409 的两种含义
+ *
+ * 与 [[issue-release]] 同一套判据：撞 409 先问「平台还认不认我这个 claim」——
+ *  - **stateRev 过期** → claim 还是我的，拿新基线重发**同一条行**（它上次没被应用，
+ *    复用 sourceSeq 是安全的：平台只在 `<= lastSourceSeq` 时才当重复丢弃）
+ *  - **claim 已不归本机** → 平台侧这条早就结束了（force-detach/租约过期/被别人领走），
+ *    再打多少次都一样，直接判定"已结算"让调用方收尾
+ */
+import { claimNextOutboxRow, listOutbox, enqueueDesiredStatus, failOutboxRow, getBinding, isActiveBindState, settleOutboxRow, } from './issue-board-store.js';
+import { isPermanentFailure } from '../platform/issue-client.js';
+/**
+ * 把发件箱里该 binding 的下一条待发行发出去。
+ *
+ * 不排队、只发送——用于后台 pump 重投那些失败退避过的行。
+ */
+export async function flushNextStatus(deps, anchorId) {
+    const now = deps.now ?? Date.now;
+    const binding = getBinding(deps.dataDir, anchorId);
+    if (!binding)
+        return { ok: false, reason: 'no_binding' };
+    const row = claimNextOutboxRow(deps.dataDir, anchorId, now());
+    if (!row) {
+        // claimNextOutboxRow 返回 null 有两种截然不同的原因，不能都当 idle：**有 inflight 挡着**
+        // （串行约束，稍后能发）vs **确实没有待发行**（已同步到位）。调用方要据此区分"发不出去"
+        // 和"已经是这个状态了"——释放就靠这个判断是补完本地还是报错让人重试。
+        const mine = listOutbox(deps.dataDir, anchorId);
+        return mine.some((r) => r.state === 'inflight')
+            ? { ok: false, reason: 'busy' }
+            : { ok: false, reason: 'idle' };
+    }
+    let expectedStateRev = row.expectedStateRev ?? binding.platformStateRev ?? 0;
+    let res = await deps.writeStatus(binding.issueId, {
+        claimId: row.claimId,
+        claimEpoch: row.claimEpoch,
+        sourceSeq: row.sourceSeq,
+        status: row.targetStatus,
+        ...(row.attentionReason ? { attentionReason: row.attentionReason } : {}),
+        expectedStateRev,
+    });
+    if (!res.ok && res.reason === 'conflict') {
+        const fresh = await deps.fetchIssue(binding.teamId, binding.issueId);
+        if (fresh && fresh.claim?.claimId !== binding.claimId) {
+            // `applied: false` 是关键：这条状态平台**没有**采纳。记成已同步的话，下一次投影同一
+            // 状态会走幂等分支直接回成功，而平台那边纹丝不动——一次静默的谎报。
+            settleOutboxRow(deps.dataDir, row.writeId, { platformStateRev: fresh.stateRev, applied: false }, now());
+            return { ok: true, applied: false, detached: true };
+        }
+        if (fresh) {
+            expectedStateRev = fresh.stateRev;
+            res = await deps.writeStatus(binding.issueId, {
+                claimId: row.claimId,
+                claimEpoch: row.claimEpoch,
+                sourceSeq: row.sourceSeq,
+                status: row.targetStatus,
+                ...(row.attentionReason ? { attentionReason: row.attentionReason } : {}),
+                expectedStateRev,
+            });
+        }
+    }
+    if (!res.ok) {
+        const detail = 'error' in res ? `${res.reason}: ${res.error}` : res.reason;
+        // 分清「等会儿再试」和「再试也没用」。401/403（凭证失效、machine_mismatch、claim 被
+        // revoke）与 400/404（参数错、issue 被删或归档）是后者：不标 fatal 的话这条行会每 ≤5
+        // 分钟朝一个永远不会变的死端点打一发，而且 `/issue status` 上那句「N 条回写没发出去」
+        // 永不清零，验收的人会一直以为"过会儿就好"。判据见 [[issue-client]] 的
+        // isPermanentFailure——它刻意不等于 !isRetriable（409 与 unbound 都不该判死）。
+        const fatal = isPermanentFailure(res);
+        failOutboxRow(deps.dataDir, row.writeId, detail, fatal ? { fatal: true } : {}, now());
+        return { ok: false, reason: 'platform', detail, ...(fatal ? { permanent: true } : {}) };
+    }
+    settleOutboxRow(deps.dataDir, row.writeId, {
+        platformStateRev: res.value.issue.stateRev,
+        ...(res.value.issue.claim ? { platformLastSourceSeq: res.value.issue.claim.lastSourceSeq } : {}),
+    }, now());
+    return { ok: true, applied: true, issue: res.value.issue };
+}
+/**
+ * 投影一个目标状态并立刻尝试发送。
+ *
+ * 排队交给 `enqueueDesiredStatus`（sourceSeq 的唯一分配入口 + 去重合并），发送交给
+ * `flushNextStatus`。发失败时行留在发件箱里退避，后台 pump 会接着重投——所以调用方
+ * 拿到 `platform` 失败也不代表这次投影丢了。
+ */
+export async function projectStatus(deps, anchorId, desired, opts = {}) {
+    const now = deps.now ?? Date.now;
+    const binding = getBinding(deps.dataDir, anchorId);
+    if (!binding)
+        return { ok: false, reason: 'no_binding' };
+    const queued = enqueueDesiredStatus(deps.dataDir, anchorId, desired, opts, now());
+    if (!queued) {
+        // enqueue 返回 null 有三种情况，要分开：终态 binding（no_binding 语义）、已经同步
+        // 到位（idle）、有 inflight 挡着（busy）。混成一个"失败"会让调用方分不清
+        // "已经是这个状态了" 和 "发不出去"。
+        if (!isActiveBindState(binding.bindState))
+            return { ok: false, reason: 'no_binding' };
+        if (binding.lastSyncedStatus === desired)
+            return { ok: false, reason: 'idle' };
+        // 已经在追同一个目标：那条行还没发出去，直接发它，不要另起一条。
+        return flushNextStatus(deps, anchorId);
+    }
+    return flushNextStatus(deps, anchorId);
+}
+//# sourceMappingURL=issue-status-writer.js.map

package/dist/services/issue-status-writer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"issue-status-writer.js","sourceRoot":"","sources":["../../src/services/issue-status-writer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,OAAO,EACL,kBAAkB,EAClB,UAAU,EACV,oBAAoB,EACpB,aAAa,EACb,UAAU,EACV,iBAAiB,EACjB,eAAe,GAGhB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAmCjE;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAsB,EAAE,QAAgB;IAC5E,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACjC,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACnD,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IAEzD,MAAM,GAAG,GAAG,kBAAkB,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;IAC9D,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,oEAAoE;QACpE,kDAAkD;QAClD,sCAAsC;QACtC,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,UAAU,CAAC;YAC7C,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE;YAC/B,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACpC,CAAC;IAED,IAAI,gBAAgB,GAAG,GAAG,CAAC,gBAAgB,IAAI,OAAO,CAAC,gBAAgB,IAAI,CAAC,CAAC;IAC7E,IAAI,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE;QAChD,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,MAAM,EAAE,GAAG,CAAC,YAAY;QACxB,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,GAAG,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxE,gBAAgB;KACjB,CAAC,CAAC;IAEH,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QACrE,IAAI,KAAK,IAAI,KAAK,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC;YACtD,sDAAsD;YACtD,oCAAoC;YACpC,eAAe,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,gBAAgB,EAAE,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;YACxG,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QACtD,CAAC;QACD,IAAI,KAAK,EAAE,CAAC;YACV,gBAAgB,GAAG,KAAK,CAAC,QAAQ,CAAC;YAClC,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE;gBAC5C,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,MAAM,EAAE,GAAG,CAAC,YAAY;gBACxB,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,GAAG,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxE,gBAAgB;aACjB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,MAAM,GAAG,OAAO,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;QAC3E,0DAA0D;QAC1D,2DAA2D;QAC3D,sDAAsD;QACtD,+CAA+C;QAC/C,gEAAgE;QAChE,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;QACtC,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QACtF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACnG,CAAC;IAED,eAAe,CACb,IAAI,CAAC,OAAO,EACZ,GAAG,CAAC,OAAO,EACX;QACE,gBAAgB,EAAE,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ;QAC1C,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,qBAAqB,EAAE,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACjG,EACD,GAAG,EAAE,CACN,CAAC;IACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;AAC7D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAAsB,EACtB,QAAgB,EAChB,OAAoB,EACpB,OAA8C,EAAE;IAEhD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACjC,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACnD,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IAEzD,MAAM,MAAM,GAAG,oBAAoB,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;IAClF,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,2DAA2D;QAC3D,gDAAgD;QAChD,uBAAuB;QACvB,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,SAAS,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;QACtF,IAAI,OAAO,CAAC,gBAAgB,KAAK,OAAO;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAC/E,kCAAkC;QAClC,OAAO,eAAe,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,eAAe,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AACzC,CAAC"}

package/dist/services/traex-paths.d.ts

@@ -4,9 +4,21 @@
  *  still resolve correctly. */
 export declare function traeHome(): string;
 /** SQLite database holding the `threads` table (one row per interactive
- *  session). Used as the submit-verification source of truth because traex
- *  (unlike codex) does not write a flat history.jsonl. */
+ *  session). Used to reverse-map a botmux session id to a TRAE-native session
+ *  UUID (buildArgs/buildResumeCommand) and as the session/path index for
+ *  rollout-based transcript bridging. */
 export declare function traeStateDbPath(): string;
+/** Global submit log — TRAE appends one JSON line (`{session_id, ts, text}`,
+ *  byte-identical to Codex's format) here on every successful user submit
+ *  across all sessions, AT SUBMIT TIME. This is the authoritative submit-
+ *  confirmation source: unlike the per-session rollout JSONL, a message parked
+ *  by TRAE's type-ahead queue while a turn is running is written here
+ *  immediately, whereas the rollout only records it once the running turn
+ *  dequeues it (which can exceed the worker's submit-confirmation deadline and
+ *  fire a false "submission couldn't be confirmed" warning). Shared by every
+ *  TRAE pane under one TRAE_HOME, so a match needs a pid-ownership filter to
+ *  avoid attributing a sibling pane's identical text — mirrors codexHistoryPath. */
+export declare function traeHistoryPath(): string;
 /** Per-session rollout JSONL files live under dates here, e.g.
  *  sessions/2026/06/04/rollout-<timestamp>-<uuid>.jsonl. The threads table
  *  stores the absolute path per session. */

package/dist/services/traex-paths.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"traex-paths.d.ts","sourceRoot":"","sources":["../../src/services/traex-paths.ts"],"names":[],"mappings":"AAOA;;;+BAG+B;AAC/B,wBAAgB,QAAQ,IAAI,MAAM,CAGjC;AAED;;0DAE0D;AAC1D,wBAAgB,eAAe,IAAI,MAAM,CAExC;AAED;;4CAE4C;AAC5C,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC"}
+{"version":3,"file":"traex-paths.d.ts","sourceRoot":"","sources":["../../src/services/traex-paths.ts"],"names":[],"mappings":"AAOA;;;+BAG+B;AAC/B,wBAAgB,QAAQ,IAAI,MAAM,CAGjC;AAED;;;yCAGyC;AACzC,wBAAgB,eAAe,IAAI,MAAM,CAExC;AAED;;;;;;;;;oFASoF;AACpF,wBAAgB,eAAe,IAAI,MAAM,CAExC;AAED;;4CAE4C;AAC5C,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC"}

package/dist/services/traex-paths.js

@@ -12,11 +12,25 @@ export function traeHome() {
     return configured ? expandHome(configured) : join(homedir(), '.trae');
 }
 /** SQLite database holding the `threads` table (one row per interactive
- *  session). Used as the submit-verification source of truth because traex
- *  (unlike codex) does not write a flat history.jsonl. */
+ *  session). Used to reverse-map a botmux session id to a TRAE-native session
+ *  UUID (buildArgs/buildResumeCommand) and as the session/path index for
+ *  rollout-based transcript bridging. */
 export function traeStateDbPath() {
     return join(traeHome(), 'cli', 'state_5.sqlite');
 }
+/** Global submit log — TRAE appends one JSON line (`{session_id, ts, text}`,
+ *  byte-identical to Codex's format) here on every successful user submit
+ *  across all sessions, AT SUBMIT TIME. This is the authoritative submit-
+ *  confirmation source: unlike the per-session rollout JSONL, a message parked
+ *  by TRAE's type-ahead queue while a turn is running is written here
+ *  immediately, whereas the rollout only records it once the running turn
+ *  dequeues it (which can exceed the worker's submit-confirmation deadline and
+ *  fire a false "submission couldn't be confirmed" warning). Shared by every
+ *  TRAE pane under one TRAE_HOME, so a match needs a pid-ownership filter to
+ *  avoid attributing a sibling pane's identical text — mirrors codexHistoryPath. */
+export function traeHistoryPath() {
+    return join(traeHome(), 'cli', 'history.jsonl');
+}
 /** Per-session rollout JSONL files live under dates here, e.g.
  *  sessions/2026/06/04/rollout-<timestamp>-<uuid>.jsonl. The threads table
  *  stores the absolute path per session. */

package/dist/services/traex-paths.js.map

@@ -1 +1 @@
-{"version":3,"file":"traex-paths.js","sourceRoot":"","sources":["../../src/services/traex-paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACtE,CAAC;AAED;;;+BAG+B;AAC/B,MAAM,UAAU,QAAQ;IACtB,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC;IACjD,OAAO,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC;AACxE,CAAC;AAED;;0DAE0D;AAC1D,MAAM,UAAU,eAAe;IAC7B,OAAO,IAAI,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,gBAAgB,CAAC,CAAC;AACnD,CAAC;AAED;;4CAE4C;AAC5C,MAAM,UAAU,gBAAgB;IAC9B,OAAO,IAAI,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;AAC7C,CAAC"}
+{"version":3,"file":"traex-paths.js","sourceRoot":"","sources":["../../src/services/traex-paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACtE,CAAC;AAED;;;+BAG+B;AAC/B,MAAM,UAAU,QAAQ;IACtB,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC;IACjD,OAAO,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC;AACxE,CAAC;AAED;;;yCAGyC;AACzC,MAAM,UAAU,eAAe;IAC7B,OAAO,IAAI,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,gBAAgB,CAAC,CAAC;AACnD,CAAC;AAED;;;;;;;;;oFASoF;AACpF,MAAM,UAAU,eAAe;IAC7B,OAAO,IAAI,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,eAAe,CAAC,CAAC;AAClD,CAAC;AAED;;4CAE4C;AAC5C,MAAM,UAAU,gBAAgB;IAC9B,OAAO,IAAI,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;AAC7C,CAAC"}

package/dist/services/traex-transcript.d.ts

@@ -12,6 +12,23 @@ export declare function drainTraexRollout(path: string, fromOffset: number): Cod
 /** Authoritative submit confirmation used by the adapter. Only a complete
  * role=user rollout record appended after `fromOffset` can match. */
 export declare function traexRolloutHasUserInputSince(path: string, fromOffset: number, expectedText: string): boolean;
+export interface TraexHistoryMatch {
+    found: boolean;
+    cliSessionId?: string;
+}
+/** Optional ownership filter for a shared-history match: accept a same-text
+ *  line only when its session id is one the owning pid actually holds open.
+ *  Re-evaluated on every call so a lazily-opened owned rollout fd that appears
+ *  AFTER its history line can still be accepted on a later poll. */
+export type TraexHistorySidFilter = (cliSessionId: string | undefined) => boolean;
+/** Scan the byte delta appended to history.jsonl since `fromByte` for a line
+ *  whose decoded `text` exactly matches `expectedText` (newline-normalised).
+ *  Never parses a non-newline-terminated tail, so a half-written line can't
+ *  manufacture a false match — a later poll sees the completed entry. */
+export declare function traexHistoryMatchDelta(path: string, fromByte: number, expectedText: string, acceptSid?: TraexHistorySidFilter): TraexHistoryMatch;
+/** Current byte size of history.jsonl (0 when absent), captured before a paste
+ *  so the confirmation scan only considers lines this submit appends. */
+export declare function traexHistorySize(path: string): number;
 /** Find the rollout file an externally-running TRAE process has open.
  *  Same /proc/<pid>/fd strategy as findCodexRolloutByPid, but with a
  *  TRAE-specific path matcher so we never bind to a sibling Codex pane. */
@@ -19,6 +36,22 @@ export declare function findTraexRolloutByPid(pid: number): {
     path: string;
     cliSessionId: string;
 } | undefined;
+/** Lowercased set of TRAE session ids whose rollout the pid holds open. The
+ *  ownership gate for a shared-history.jsonl submit match: only a sid this pid
+ *  actually owns is safe to accept, so a concurrent sibling pane's identical
+ *  text can't hand back a foreign session id. Empty Set = pid holds no TRAE
+ *  rollout; undefined = fd enumeration unavailable (callers must treat undefined
+ *  as "cannot prove ownership" — fail closed, do not bind). Mirrors
+ *  findCodexRolloutSetByPid. */
+export declare function findTraexRolloutSetByPid(pid: number): Set<string> | undefined;
+/** Pure ownership decision: is `cliSessionId` one of the rollouts the observed
+ *  pid holds open? `ownedRollouts` is the lowercased sid set from
+ *  findTraexRolloutSetByPid (undefined when fd enumeration was unavailable).
+ *  FAIL CLOSED — a missing set or a non-member id returns false so the caller
+ *  never binds the bridge (or persists a resume id) it can't prove the pid owns.
+ *  Extracted so the exact predicate the worker's persist/attach gates use is
+ *  unit-testable without a live pid. Mirrors codexHistorySidIsOwned. */
+export declare function traexHistorySidIsOwned(cliSessionId: string, ownedRollouts: Set<string> | undefined): boolean;
 /** Locate the rollout file for a given TRAE session UUID. Filename shape is
  *  identical to Codex: `rollout-<ts>-<sid>.jsonl`, so a suffix match over the
  *  TRAE sessions tree is unambiguous. */

package/dist/services/traex-transcript.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"traex-transcript.d.ts","sourceRoot":"","sources":["../../src/services/traex-transcript.ts"],"names":[],"mappings":"AA6BA,OAAO,EACL,wBAAwB,EACxB,oBAAoB,EACpB,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EAEtB,MAAM,uBAAuB,CAAC;AAG/B,OAAO,EAAE,wBAAwB,IAAI,wBAAwB,EAAE,CAAC;AAChE,OAAO,EAAE,oBAAoB,IAAI,oBAAoB,EAAE,CAAC;AACxD,YAAY,EAAE,gBAAgB,IAAI,gBAAgB,EAAE,gBAAgB,IAAI,gBAAgB,EAAE,CAAC;AA8B3F;;;;;6EAK6E;AAC7E,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,gBAAgB,CAwEpF;AAMD;qEACqE;AACrE,wBAAgB,6BAA6B,CAC3C,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,MAAM,EAClB,YAAY,EAAE,MAAM,GACnB,OAAO,CAKT;AAiBD;;2EAE2E;AAC3E,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAgCrG;AAED;;yCAEyC;AACzC,wBAAgB,2BAA2B,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAqBpF"}
+{"version":3,"file":"traex-transcript.d.ts","sourceRoot":"","sources":["../../src/services/traex-transcript.ts"],"names":[],"mappings":"AA6BA,OAAO,EACL,wBAAwB,EACxB,oBAAoB,EACpB,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EAEtB,MAAM,uBAAuB,CAAC;AAG/B,OAAO,EAAE,wBAAwB,IAAI,wBAAwB,EAAE,CAAC;AAChE,OAAO,EAAE,oBAAoB,IAAI,oBAAoB,EAAE,CAAC;AACxD,YAAY,EAAE,gBAAgB,IAAI,gBAAgB,EAAE,gBAAgB,IAAI,gBAAgB,EAAE,CAAC;AA8B3F;;;;;6EAK6E;AAC7E,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,gBAAgB,CAwEpF;AAMD;qEACqE;AACrE,wBAAgB,6BAA6B,CAC3C,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,MAAM,EAClB,YAAY,EAAE,MAAM,GACnB,OAAO,CAKT;AAeD,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,OAAO,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;oEAGoE;AACpE,MAAM,MAAM,qBAAqB,GAAG,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,KAAK,OAAO,CAAC;AAQlF;;;yEAGyE;AACzE,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,EACpB,SAAS,CAAC,EAAE,qBAAqB,GAChC,iBAAiB,CA2BnB;AAED;yEACyE;AACzE,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAGrD;AA+CD;;2EAE2E;AAC3E,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAQrG;AAED;;;;;;gCAMgC;AAChC,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,SAAS,CAS7E;AAED;;;;;;wEAMwE;AACxE,wBAAgB,sBAAsB,CACpC,YAAY,EAAE,MAAM,EACpB,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,SAAS,GACrC,OAAO,CAGT;AAGD;;yCAEyC;AACzC,wBAAgB,2BAA2B,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAqBpF"}