commonswarm 0.1.31 → 0.1.33

package/cswarm.cjs

@@ -28271,8 +28271,8 @@ function relativeMagnitude(milliseconds) {
   const amount = magnitude < 6e4 ? "under 1m" : magnitude < 36e5 ? `${Math.ceil(magnitude / 6e4)}m` : magnitude < 864e5 ? `${Math.ceil(magnitude / 36e5)}h` : `${Math.ceil(magnitude / 864e5)}d`;
   return amount;
 }
-function relativeAge(timestamp2, now = Date.now()) {
-  return `${relativeMagnitude(Math.max(0, now - Date.parse(timestamp2)))} ago`;
+function relativeAge(timestamp3, now = Date.now()) {
+  return `${relativeMagnitude(Math.max(0, now - Date.parse(timestamp3)))} ago`;
 }
 function relativeExpiry(expiry, now = Date.now()) {
   const remaining = Date.parse(expiry) - now;
@@ -29571,6 +29571,327 @@ async function runInboxFollow(options) {
   }
 }
 
+// src/cloud/delivery-receipts.ts
+var UUID_RE8 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+var DeliveryReceiptReadError = class extends Error {
+  constructor(code, message, status = null) {
+    super(message);
+    this.code = code;
+    this.status = status;
+    this.name = "DeliveryReceiptReadError";
+  }
+  code;
+  status;
+};
+var ACK_OUTCOMES = /* @__PURE__ */ new Set([
+  "replied",
+  "observed",
+  "queued",
+  "expired",
+  "failed_terminal"
+]);
+function uuid3(value, field) {
+  if (typeof value !== "string" || !UUID_RE8.test(value)) {
+    throw new DeliveryReceiptReadError(
+      "protocol",
+      `delivery receipt returned a malformed ${field}`
+    );
+  }
+  return value.toLowerCase();
+}
+function timestamp2(value, field) {
+  if (typeof value !== "string" || !Number.isFinite(Date.parse(value))) {
+    throw new DeliveryReceiptReadError(
+      "protocol",
+      `delivery receipt returned a malformed ${field}`
+    );
+  }
+  return value;
+}
+function nullableTimestamp(value, field) {
+  return value === null ? null : timestamp2(value, field);
+}
+function nonNegativeInteger(value, field) {
+  if (typeof value !== "number" || !Number.isSafeInteger(value) || value < 0) {
+    throw new DeliveryReceiptReadError(
+      "protocol",
+      `delivery receipt returned a malformed ${field}`
+    );
+  }
+  return value;
+}
+function parseDeliveryReceipt(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) {
+    throw new DeliveryReceiptReadError(
+      "protocol",
+      "delivery receipt returned a malformed row"
+    );
+  }
+  const row = value;
+  const ackedAt = nullableTimestamp(row.acked_at, "acked_at");
+  const ackOutcome = row.ack_outcome === null ? null : typeof row.ack_outcome === "string" && ACK_OUTCOMES.has(row.ack_outcome) ? row.ack_outcome : (() => {
+    throw new DeliveryReceiptReadError(
+      "protocol",
+      "delivery receipt returned a malformed ack_outcome"
+    );
+  })();
+  if (ackedAt === null !== (ackOutcome === null)) {
+    throw new DeliveryReceiptReadError(
+      "protocol",
+      "delivery receipt returned an inconsistent acknowledgement"
+    );
+  }
+  return {
+    recipient_agent_principal_id: uuid3(
+      row.recipient_agent_principal_id,
+      "recipient_agent_principal_id"
+    ),
+    enqueued_at: timestamp2(row.enqueued_at, "enqueued_at"),
+    delivered_at: nullableTimestamp(row.delivered_at, "delivered_at"),
+    leased_until: nullableTimestamp(row.leased_until, "leased_until"),
+    acked_at: ackedAt,
+    ack_outcome: ackOutcome,
+    attempt_count: nonNegativeInteger(row.attempt_count, "attempt_count"),
+    lease_expiry_count: nonNegativeInteger(
+      row.lease_expiry_count,
+      "lease_expiry_count"
+    ),
+    last_error_code: row.last_error_code === null ? null : typeof row.last_error_code === "string" && /^[a-z][a-z0-9_]{0,63}$/.test(row.last_error_code) ? row.last_error_code : (() => {
+      throw new DeliveryReceiptReadError(
+        "protocol",
+        "delivery receipt returned a malformed last_error_code"
+      );
+    })()
+  };
+}
+function parseDeliveryReceiptResult(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) {
+    throw new DeliveryReceiptReadError(
+      "protocol",
+      "delivery receipt read returned malformed JSON"
+    );
+  }
+  const body = value;
+  if (!(body.addressed === null || typeof body.addressed === "boolean") || !Array.isArray(body.receipts)) {
+    throw new DeliveryReceiptReadError(
+      "protocol",
+      "delivery receipt read returned malformed JSON"
+    );
+  }
+  const receipts = body.receipts.map(parseDeliveryReceipt);
+  if (body.addressed === false && receipts.length !== 0) {
+    throw new DeliveryReceiptReadError(
+      "protocol",
+      "delivery receipt read returned recipients for a broadcast"
+    );
+  }
+  if (body.addressed === true && receipts.length === 0) {
+    throw new DeliveryReceiptReadError(
+      "protocol",
+      "delivery receipt read returned no recipient for an addressed signal"
+    );
+  }
+  const recipientIds = new Set(
+    receipts.map((row) => row.recipient_agent_principal_id)
+  );
+  if (recipientIds.size !== receipts.length) {
+    throw new DeliveryReceiptReadError(
+      "protocol",
+      "delivery receipt read returned duplicate recipients"
+    );
+  }
+  return { addressed: body.addressed, receipts };
+}
+function deliveryReceiptState(receipt, nowMs = Date.now()) {
+  if (receipt.ack_outcome !== null) return receipt.ack_outcome;
+  if (receipt.leased_until !== null && Date.parse(receipt.leased_until) > nowMs) {
+    return "leased";
+  }
+  if (receipt.delivered_at !== null) return "delivered";
+  return "enqueued";
+}
+async function readAgentDeliveryReceipts(target2, token, workspaceId2, signalId, options = {}) {
+  const readOptions = typeof options === "function" ? { fetcher: options } : options;
+  const now = readOptions.now ?? Date.now;
+  const timeoutMs = readOptions.deadlineMs === void 0 ? SIGNAL_READ_TIMEOUT_MS : Math.min(SIGNAL_READ_TIMEOUT_MS, readOptions.deadlineMs - now());
+  if (timeoutMs <= 0) {
+    throw new SignalReadTimeoutError("receipt read timed out");
+  }
+  const deadlineController = new AbortController();
+  const signal = readOptions.signal === void 0 ? deadlineController.signal : AbortSignal.any([readOptions.signal, deadlineController.signal]);
+  let onAbort = () => {
+  };
+  const aborted = new Promise((_resolve, reject) => {
+    onAbort = () => reject(new SignalReadTimeoutError("receipt read timed out"));
+    if (signal.aborted) onAbort();
+    else signal.addEventListener("abort", onAbort, { once: true });
+  });
+  const timer2 = setTimeout(() => deadlineController.abort(), timeoutMs);
+  try {
+    let response;
+    try {
+      response = await Promise.race([
+        (readOptions.fetcher ?? fetch)(readEndpoint(target2), {
+          method: "POST",
+          headers: {
+            authorization: `Bearer ${token}`,
+            apikey: target2.anonKey,
+            "content-type": "application/json"
+          },
+          body: JSON.stringify({
+            resource: "delivery_receipts",
+            workspace_id: uuid3(workspaceId2, "workspace_id"),
+            signal_id: uuid3(signalId, "signal_id")
+          }),
+          signal
+        }),
+        aborted
+      ]);
+    } catch (error) {
+      if (error instanceof SignalReadTimeoutError || signal.aborted || error?.name === "AbortError") {
+        throw new SignalReadTimeoutError("receipt read timed out");
+      }
+      if (error instanceof DeliveryReceiptReadError) throw error;
+      throw new DeliveryReceiptReadError(
+        "transport",
+        "delivery receipt read could not reach the cloud service"
+      );
+    }
+    let body;
+    try {
+      body = await Promise.race([response.json(), aborted]);
+    } catch (error) {
+      if (error instanceof SignalReadTimeoutError || signal.aborted) {
+        throw new SignalReadTimeoutError("receipt read timed out");
+      }
+      throw new DeliveryReceiptReadError(
+        "protocol",
+        "delivery receipt read returned malformed JSON"
+      );
+    }
+    if (!response.ok) {
+      throw new DeliveryReceiptReadError(
+        "http",
+        `delivery receipt read failed (HTTP ${response.status})`,
+        response.status
+      );
+    }
+    const result = parseDeliveryReceiptResult(body);
+    if (result.addressed === null) {
+      throw new DeliveryReceiptReadError(
+        "not_author",
+        "delivery receipt read did not establish that this caller authored the signal"
+      );
+    }
+    return { addressed: result.addressed, receipts: result.receipts };
+  } finally {
+    clearTimeout(timer2);
+    signal.removeEventListener("abort", onAbort);
+  }
+}
+
+// src/cloud/receipts.ts
+function signalReceiptCliState(receipt, nowMs) {
+  const state = deliveryReceiptState(receipt, nowMs);
+  if (state === "enqueued") return "not_delivered";
+  if (state === "leased") return "working";
+  if (state === "delivered") return "delivered";
+  if (state === "queued") return "queued";
+  return "finished";
+}
+function receiptCheckCommand(report) {
+  return `cswarm receipt ${report.signalId} --workspace-id ${report.workspaceId}`;
+}
+function listenerStatusCommand(report, receipt) {
+  return `cswarm listen status --workspace-id ${report.workspaceId} --principal-id ${receipt.recipient_agent_principal_id}`;
+}
+function newAskCommand(report, receipt) {
+  return `cswarm ask "<question>" --to ${receipt.recipient_agent_principal_id} --workspace-id ${report.workspaceId}`;
+}
+function renderSignalReceiptReport(report, nowMs = Date.now()) {
+  if (!report.addressed) {
+    return [
+      "This was a broadcast; no agent was addressed and none was woken.",
+      `To wake an agent, send a new ask with: cswarm ask "<text>" --to <agent> --workspace-id ${report.workspaceId}`
+    ].join("\n");
+  }
+  const sections = report.receipts.map((receipt) => {
+    const state = deliveryReceiptState(receipt, nowMs);
+    if (state === "enqueued") {
+      return [
+        `Not yet delivered to agent ${receipt.recipient_agent_principal_id}. CommonSwarm accepted it ${relativeAge(receipt.enqueued_at, nowMs)}.`,
+        `Ask the agent's operator to check its listener with: ${listenerStatusCommand(report, receipt)}`,
+        `Then check again with: ${receiptCheckCommand(report)}`
+      ].join("\n");
+    }
+    if (state === "delivered") {
+      return [
+        `Delivered to agent ${receipt.recipient_agent_principal_id} ${relativeAge(receipt.delivered_at, nowMs)}, and the agent has not acted on it.`,
+        `Check again with: ${receiptCheckCommand(report)}`
+      ].join("\n");
+    }
+    if (state === "leased") {
+      return [
+        `Agent ${receipt.recipient_agent_principal_id} is working on it right now; its current lease ${relativeExpiry(receipt.leased_until, nowMs)}.`,
+        `Check for the outcome with: ${receiptCheckCommand(report)}`
+      ].join("\n");
+    }
+    if (state === "queued") {
+      return [
+        `Queued for agent ${receipt.recipient_agent_principal_id}'s interactive session ${relativeAge(receipt.acked_at, nowMs)}. The agent has not seen it yet.`,
+        "It will appear at the agent's next prompt.",
+        `Check again with: ${receiptCheckCommand(report)}`
+      ].join("\n");
+    }
+    const finished = `Agent ${receipt.recipient_agent_principal_id} finished with outcome ${state} ${relativeAge(receipt.acked_at, nowMs)}.`;
+    if (state === "replied") {
+      return [
+        finished,
+        `Read the reply with: cswarm inbox --workspace-id ${report.workspaceId} --include-stale`
+      ].join("\n");
+    }
+    if (state === "observed") {
+      return [
+        finished,
+        "The agent saw the signal without sending a reply.",
+        `If you need an answer, send a new ask with: ${newAskCommand(report, receipt)}`
+      ].join("\n");
+    }
+    if (state === "expired") {
+      return [
+        finished,
+        "The signal expired before the agent completed it.",
+        `Send a new ask with: ${newAskCommand(report, receipt)}`
+      ].join("\n");
+    }
+    return [
+      finished,
+      `Delivery will not retry${receipt.last_error_code === null ? "." : `; the last error code was ${receipt.last_error_code}.`}`,
+      `Ask the agent's operator to check its listener with: ${listenerStatusCommand(report, receipt)}`
+    ].join("\n");
+  });
+  return sections.join("\n\n");
+}
+function signalReceiptJsonPayload(report, nowMs = Date.now()) {
+  return {
+    workspace_id: report.workspaceId,
+    signal_id: report.signalId,
+    broadcast: !report.addressed,
+    receipts: report.receipts.map((receipt) => ({
+      recipient_agent_principal_id: receipt.recipient_agent_principal_id,
+      state: signalReceiptCliState(receipt, nowMs),
+      outcome: receipt.ack_outcome,
+      enqueued_at: receipt.enqueued_at,
+      delivered_at: receipt.delivered_at,
+      leased_until: receipt.leased_until,
+      acked_at: receipt.acked_at,
+      attempt_count: receipt.attempt_count,
+      lease_expiry_count: receipt.lease_expiry_count,
+      last_error_code: receipt.last_error_code
+    }))
+  };
+}
+
 // src/host/opencode.ts
 var import_node_child_process3 = require("node:child_process");
 var import_node_crypto12 = require("node:crypto");
@@ -32160,7 +32481,7 @@ async function resolveBudgetAndPrompt(session, prompt, budget) {
 }
 
 // src/listener/engine.ts
-var UUID_RE8 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+var UUID_RE9 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
 var TERMINAL_STATES = /* @__PURE__ */ new Set(["done", "expired", "failed"]);
 var REPLY_MAX_CODE_UNITS = 2e3;
 var TRUNCATION_SUFFIX = "\n[Reply truncated by CommonSwarm]";
@@ -32168,7 +32489,7 @@ var UNSAFE_CONTROLS_RE = /[\u0000-\u0008\u000b\u000c\u000e-\u001f\u007f-\u009f\u
 var LISTENER_MAX_PROMPT_ATTEMPTS = 3;
 var LISTENER_MAX_POST_ATTEMPTS = 5;
 function listenerReplyCommandId(signalId, effectOrdinal = 0) {
-  if (!UUID_RE8.test(signalId)) {
+  if (!UUID_RE9.test(signalId)) {
     throw new Error("listener signal id must be a UUID");
   }
   if (!Number.isSafeInteger(effectOrdinal) || effectOrdinal < 0) {
@@ -32632,7 +32953,7 @@ var import_node_crypto13 = require("node:crypto");
 var import_node_os5 = require("node:os");
 var import_node_path8 = require("node:path");
 var import_node_util = require("node:util");
-var UUID_RE9 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+var UUID_RE10 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
 var COMMAND_ID_RE2 = /^[A-Za-z0-9_-]{8,72}$/;
 var MAX_EFFECT_BYTES = 1024 * 1024;
 var STATES = /* @__PURE__ */ new Set([
@@ -32670,7 +32991,7 @@ function defaultListenerStateDirectory() {
   return process.env.XDG_STATE_HOME ? (0, import_node_path8.join)(process.env.XDG_STATE_HOME, "cswarm", "listeners") : (0, import_node_path8.join)((0, import_node_os5.homedir)(), ".cswarm", "listeners");
 }
 function listenerInstanceKey(input) {
-  if (!UUID_RE9.test(input.workspaceId) || !UUID_RE9.test(input.principalId)) {
+  if (!UUID_RE10.test(input.workspaceId) || !UUID_RE10.test(input.principalId)) {
     throw new Error("listener workspace and principal ids must be UUIDs");
   }
   if (!input.profileId || input.profileId.includes("\0")) {
@@ -32702,7 +33023,7 @@ function parseListenerEffectRecord(raw, expectedId) {
     throw new Error("stored listener effect is malformed");
   }
   const row = value;
-  if (typeof row.version !== "number" || row.version !== 1 && row.version !== 2 || typeof row.signalId !== "string" || row.signalId.toLowerCase() !== expectedId || !UUID_RE9.test(row.signalId)) {
+  if (typeof row.version !== "number" || row.version !== 1 && row.version !== 2 || typeof row.signalId !== "string" || row.signalId.toLowerCase() !== expectedId || !UUID_RE10.test(row.signalId)) {
     throw new Error("stored listener effect is malformed");
   }
   if (row.version === 1) {
@@ -32719,7 +33040,7 @@ function upcastV1Ask(row) {
   if (row.effectOrdinal !== 0 || typeof row.commandId !== "string" || !COMMAND_ID_RE2.test(row.commandId) || typeof row.askBody !== "string" || row.askBody.length < 1 || typeof row.askUntil !== "string" || !Number.isFinite(Date.parse(row.askUntil)) || typeof row.senderOwnerRelation !== "string" || !RELATIONS.has(row.senderOwnerRelation) || typeof row.state !== "string" || !STATES.has(row.state) || !integer(row.promptAttempts) || !integer(row.postAttempts) || !nullableString(row.replyBody, 2e3) || typeof row.replyTruncated !== "boolean" || !nullableString(row.replySignalId, 64) || !nullableString(row.failureCode, 96) || typeof row.updatedAt !== "string" || !Number.isFinite(Date.parse(row.updatedAt))) {
     throw new Error("stored listener effect is malformed");
   }
-  if (row.replySignalId !== null && !UUID_RE9.test(row.replySignalId)) {
+  if (row.replySignalId !== null && !UUID_RE10.test(row.replySignalId)) {
     throw new Error("stored listener effect is malformed");
   }
   return {
@@ -32758,7 +33079,7 @@ function parseV2Record(row) {
     if (typeof row.commandId !== "string" || !COMMAND_ID_RE2.test(row.commandId) || row.state === "observed") {
       throw new Error("stored listener effect is malformed");
     }
-    if (row.replySignalId !== null && !UUID_RE9.test(row.replySignalId)) {
+    if (row.replySignalId !== null && !UUID_RE10.test(row.replySignalId)) {
       throw new Error("stored listener effect is malformed");
     }
   }
@@ -32782,7 +33103,7 @@ function parseV2Record(row) {
   };
 }
 function newObservedNoteRecord(input) {
-  if (!UUID_RE9.test(input.signalId)) {
+  if (!UUID_RE10.test(input.signalId)) {
     throw new Error("listener note signal id must be a UUID");
   }
   if (input.body.length < 1) {
@@ -32916,7 +33237,7 @@ var FileListenerEffectStore = class {
     );
   }
   checkedId(signalId) {
-    if (!UUID_RE9.test(signalId)) {
+    if (!UUID_RE10.test(signalId)) {
       throw new Error("listener signal id must be a UUID");
     }
     return signalId.toLowerCase();
@@ -34007,7 +34328,7 @@ var CodexListenerModel = class {
 var import_node_crypto17 = require("node:crypto");
 
 // src/cloud/delivery.ts
-var UUID_RE10 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+var UUID_RE11 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
 var RFC3339_TIMESTAMP_RE = /^(\d{4})-(\d{2})-(\d{2})T(\d{2}):(\d{2}):(\d{2})(?:\.\d+)?(?:Z|([+-]\d{2}):(\d{2}))$/i;
 var DELIVERY_KINDS = /* @__PURE__ */ new Set(["ask", "note"]);
 var SENDER_OWNER_RELATIONS2 = /* @__PURE__ */ new Set([
@@ -34018,6 +34339,7 @@ var SENDER_OWNER_RELATIONS2 = /* @__PURE__ */ new Set([
 var DELIVERY_ACK_OUTCOMES = /* @__PURE__ */ new Set([
   "replied",
   "observed",
+  "queued",
   "expired",
   "failed_terminal"
 ]);
@@ -34064,6 +34386,10 @@ var DELIVERY_SERVER_ERROR_CODES = Object.freeze([
   "internal_error"
 ]);
 var DELIVERY_UNKNOWN_ERROR_CODE = "unknown_error";
+function observationCommandId(signalId) {
+  checkedUuidRequest(signalId, "signalId");
+  return `observe_${signalId.toLowerCase().replaceAll("-", "")}`;
+}
 var DeliveryTransportError = class extends Error {
   constructor(message) {
     super(message);
@@ -34089,7 +34415,7 @@ var DeliveryProtocolError = class extends Error {
   }
 };
 function checkedUuid3(value, field) {
-  if (typeof value !== "string" || !UUID_RE10.test(value)) {
+  if (typeof value !== "string" || !UUID_RE11.test(value)) {
     throw new DeliveryProtocolError(
       `delivery response returned a malformed ${field}`
     );
@@ -34200,7 +34526,7 @@ function checkedClaimCapabilities(value) {
 }
 function checkedOptionalUuidArray(value, field) {
   if (value === void 0) return;
-  if (!Array.isArray(value) || value.some((item) => typeof item !== "string" || !UUID_RE10.test(item))) {
+  if (!Array.isArray(value) || value.some((item) => typeof item !== "string" || !UUID_RE11.test(item))) {
     throw new DeliveryProtocolError(
       `delivery response returned a malformed ${field}`
     );
@@ -34347,7 +34673,7 @@ function checkedCommandId(value) {
   return value;
 }
 function checkedUuidRequest(value, field) {
-  if (!UUID_RE10.test(value)) {
+  if (!UUID_RE11.test(value)) {
     throw new Error(`${field} must be a UUID for an agent delivery command`);
   }
 }
@@ -34360,7 +34686,7 @@ function assertAckRequest(request) {
   checkedUuidRequest(request.listenerInstanceId, "listenerInstanceId");
   if (!DELIVERY_ACK_OUTCOMES.has(request.outcome)) {
     throw new Error(
-      "a delivery outcome must be replied, observed, expired, or failed_terminal"
+      "a delivery outcome must be replied, observed, queued, expired, or failed_terminal"
     );
   }
   if (request.outcome === "failed_terminal") {
@@ -34552,11 +34878,39 @@ var DeliveryCommandClient = class {
       outcome: request.outcome
     };
   }
+  /** Mark a queued delivery observed only after the interactive hook surfaced it. */
+  async observeQueuedAgentDelivery(request) {
+    checkedCommandId(request.commandId);
+    assertAgentToken(request.credential);
+    checkedUuidRequest(request.workspaceId, "workspaceId");
+    checkedUuidRequest(request.signalId, "signalId");
+    const { response, text } = await this.post(request, {
+      kind: "ack_agent_delivery",
+      signal_id: request.signalId.toLowerCase(),
+      lease_id: null,
+      listener_instance_id: null,
+      outcome: "observed",
+      last_error_code: null
+    }, "delivery observation");
+    if (!response.ok) throw refusal(response, text);
+    parseAckSuccess(
+      successBody(response, text, "delivery observation"),
+      {
+        signalId: request.signalId.toLowerCase(),
+        outcome: "observed"
+      }
+    );
+    return {
+      httpStatus: response.status,
+      signalId: request.signalId.toLowerCase(),
+      outcome: "observed"
+    };
+  }
 };
 
 // src/listener/main-routing.ts
 var import_node_path14 = require("node:path");
-var UUID_RE11 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+var UUID_RE12 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
 var MAX_QUEUE_BYTES = 1024 * 1024;
 var QUEUE_FILE = "pending-for-main.json";
 var QUEUE_LOCK = "pending-for-main";
@@ -34605,12 +34959,13 @@ function parseEntry(value) {
     "senderName",
     "body",
     "createdAt",
-    "queuedAt"
+    "queuedAt",
+    "observationPending"
   ]);
   if (Object.keys(row).some((key2) => !allowed.has(key2))) {
     throw new Error("stored pending-for-main entry is malformed");
   }
-  if (typeof row.signalId !== "string" || !UUID_RE11.test(row.signalId) || typeof row.workspaceId !== "string" || !UUID_RE11.test(row.workspaceId) || typeof row.principalId !== "string" || !UUID_RE11.test(row.principalId) || typeof row.fromId !== "string" || !UUID_RE11.test(row.fromId) || row.fromKind !== "user" && row.fromKind !== "agent" || !(row.kind === void 0 || row.kind === "ask" || row.kind === "note") || !(row.senderName === null || typeof row.senderName === "string" && row.senderName.length <= 200) || typeof row.body !== "string" || row.body.length < 1 || !checkedTimestamp2(row.createdAt) || !checkedTimestamp2(row.queuedAt)) {
+  if (typeof row.signalId !== "string" || !UUID_RE12.test(row.signalId) || typeof row.workspaceId !== "string" || !UUID_RE12.test(row.workspaceId) || typeof row.principalId !== "string" || !UUID_RE12.test(row.principalId) || typeof row.fromId !== "string" || !UUID_RE12.test(row.fromId) || row.fromKind !== "user" && row.fromKind !== "agent" || !(row.kind === void 0 || row.kind === "ask" || row.kind === "note") || !(row.senderName === null || typeof row.senderName === "string" && row.senderName.length <= 200) || typeof row.body !== "string" || row.body.length < 1 || !checkedTimestamp2(row.createdAt) || !checkedTimestamp2(row.queuedAt) || !(row.observationPending === void 0 || row.observationPending === true)) {
     throw new Error("stored pending-for-main entry is malformed");
   }
   return {
@@ -34623,7 +34978,8 @@ function parseEntry(value) {
     senderName: row.senderName,
     body: row.body,
     createdAt: row.createdAt,
-    queuedAt: row.queuedAt
+    queuedAt: row.queuedAt,
+    ...row.observationPending === true ? { observationPending: true } : {}
   };
 }
 function parseFile(raw) {
@@ -34719,7 +35075,7 @@ var FilePendingMainQueue = class {
     }, lockTimeoutMs === void 0 ? {} : { timeoutMs: lockTimeoutMs });
   }
 };
-function pendingMainEntry(signal, principalId, provenance, now) {
+function pendingMainEntry(signal, principalId, provenance, now, options = {}) {
   if (signal.kind !== "ask") {
     throw new Error("only directed asks can enter the pending-for-main queue");
   }
@@ -34732,7 +35088,8 @@ function pendingMainEntry(signal, principalId, provenance, now) {
     senderName: provenance.senderName,
     body: signal.body,
     createdAt: signal.created_at,
-    queuedAt: new Date(now).toISOString()
+    queuedAt: new Date(now).toISOString(),
+    ...options.observationPending ? { observationPending: true } : {}
   });
 }
 
@@ -34746,7 +35103,7 @@ var LISTENER_REPLY_ONLY_MINIMUM_MS = SIGNAL_REQUEST_TIMEOUT_MS + LISTENER_ACK_ON
 var LISTENER_PROMPT_START_MINIMUM_MS = SIGNAL_READ_TIMEOUT_MS + ACP_DEFAULT_REQUEST_TIMEOUT_MS + LISTENER_REPLY_ONLY_MINIMUM_MS;
 var LISTENER_DELIVERY_RETRY_INITIAL_MS = 500;
 var LISTENER_DELIVERY_RETRY_MAX_MS = 3e4;
-var UUID_RE12 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+var UUID_RE13 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
 var ListenerCapabilityError = class extends Error {
   code;
   constructor(code, message) {
@@ -34826,7 +35183,7 @@ function ackForTerminalEffect(record, now) {
     return { outcome: "observed", lastErrorCode: null };
   }
   if (record.state === "routed_main" && record.signalKind === "ask") {
-    return { outcome: "observed", lastErrorCode: null };
+    return { outcome: "queued", lastErrorCode: null };
   }
   if (record.state === "expired" && record.signalKind === "ask" && Date.parse(record.askUntil) <= now()) {
     return { outcome: "expired", lastErrorCode: null };
@@ -35021,7 +35378,7 @@ async function runListenerRuntime(options) {
       new Error("listener instance id and delivery journal must be configured together")
     );
   }
-  if (hasInstanceId && !UUID_RE12.test(options.listenerInstanceId)) {
+  if (hasInstanceId && !UUID_RE13.test(options.listenerInstanceId)) {
     return await closeBeforeStart(
       options.model,
       new Error("listener instance id must be a UUID")
@@ -35109,7 +35466,9 @@ async function runListenerRuntime(options) {
       }
     }
     const queued = await options.pendingMainQueue.enqueue(
-      pendingMainEntry(signal, options.principalId, provenance, now())
+      pendingMainEntry(signal, options.principalId, provenance, now(), {
+        observationPending: deliveryMode === "durable_claim"
+      })
     );
     options.onEvent?.({
       type: "main_queue",
@@ -35844,7 +36203,7 @@ async function runListenerRuntime(options) {
 var import_node_net = require("node:net");
 var import_promises9 = require("node:fs/promises");
 var import_node_path15 = require("node:path");
-var UUID_RE13 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+var UUID_RE14 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
 var SEMVER_RE2 = /^(?:0|[1-9]\d*)\.(?:0|[1-9]\d*)\.(?:0|[1-9]\d*)(?:-(?:0|[1-9]\d*|[A-Za-z-][0-9A-Za-z-]*)(?:\.(?:0|[1-9]\d*|[A-Za-z-][0-9A-Za-z-]*))*)?(?:\+[0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*)?$/;
 var MAX_STATUS_BYTES = 16 * 1024;
 var MAX_CONTROL_BYTES = 8 * 1024;
@@ -35950,10 +36309,10 @@ function parseStatus(raw) {
       throw new Error("stored listener status is malformed");
     }
   }
-  const nullableUuid2 = (candidate) => candidate === null || typeof candidate === "string" && UUID_RE13.test(candidate);
+  const nullableUuid2 = (candidate) => candidate === null || typeof candidate === "string" && UUID_RE14.test(candidate);
   const nullableCount = (candidate) => candidate === null || typeof candidate === "number" && Number.isSafeInteger(candidate) && candidate >= 0;
-  const nullableTimestamp = (candidate) => candidate === null || typeof candidate === "string" && Number.isFinite(Date.parse(candidate));
-  if (row.version !== 1 || typeof row.instanceId !== "string" || !UUID_RE13.test(row.instanceId) || row.provider !== "grok" && row.provider !== "opencode" && row.provider !== "claude" && row.provider !== "codex" || typeof row.profileId !== "string" || typeof row.workspaceId !== "string" || !UUID_RE13.test(row.workspaceId) || typeof row.principalId !== "string" || !UUID_RE13.test(row.principalId) || !Number.isSafeInteger(row.pid) || row.pid < 1 || typeof row.state !== "string" || !["starting", "ready", "stopping", "stopped", "failed"].includes(row.state) || typeof row.startedAt !== "string" || !Number.isFinite(Date.parse(row.startedAt)) || !(row.readyAt === null || typeof row.readyAt === "string" && Number.isFinite(Date.parse(row.readyAt))) || typeof row.updatedAt !== "string" || !Number.isFinite(Date.parse(row.updatedAt)) || !(row.stoppedAt === null || typeof row.stoppedAt === "string" && Number.isFinite(Date.parse(row.stoppedAt))) || !nullableUuid2(row.lastSignalId) || !(row.lastErrorCode === null || typeof row.lastErrorCode === "string" && /^[a-z0-9_-]{1,96}$/.test(row.lastErrorCode)) || !(row.providerVersion === void 0 || row.providerVersion === null || typeof row.providerVersion === "string" && SEMVER_RE2.test(row.providerVersion)) || !(row.providerLastMeasuredVersion === void 0 || row.providerLastMeasuredVersion === null || typeof row.providerLastMeasuredVersion === "string" && SEMVER_RE2.test(row.providerLastMeasuredVersion)) || (row.providerVersion === null || row.providerVersion === void 0) !== (row.providerLastMeasuredVersion === null || row.providerLastMeasuredVersion === void 0) || !(row.lastWorkerStderrTail === void 0 || row.lastWorkerStderrTail === null || typeof row.lastWorkerStderrTail === "string" && row.lastWorkerStderrTail.length > 0 && row.lastWorkerStderrTail.length <= 2048 && !/swm_(?:agt|inv|cap)_/i.test(row.lastWorkerStderrTail)) || typeof row.logPath !== "string" || !(0, import_node_path15.isAbsolute)(row.logPath) || !(row.deliveryMode === void 0 || row.deliveryMode === null || typeof row.deliveryMode === "string" && STATUS_DELIVERY_MODES.has(row.deliveryMode)) || !(row.pendingDeliveryCount === void 0 || nullableCount(row.pendingDeliveryCount)) || !(row.lastTerminalDeliveryFailureCount === void 0 || nullableCount(row.lastTerminalDeliveryFailureCount)) || !(row.lastTerminalDeliveryFailureAt === void 0 || nullableTimestamp(row.lastTerminalDeliveryFailureAt)) || !(row.lastClaimAt === void 0 || nullableTimestamp(row.lastClaimAt)) || !(row.lastAckAt === void 0 || nullableTimestamp(row.lastAckAt)) || !(row.routeMode === void 0 || row.routeMode === "worker" || row.routeMode === "main" || row.routeMode === "split") || !(row.deferOverChars === void 0 || row.deferOverChars === null || typeof row.deferOverChars === "number" && Number.isSafeInteger(row.deferOverChars) && row.deferOverChars >= 1 && row.deferOverChars <= 1e4) || !(row.pendingForMainCount === void 0 || typeof row.pendingForMainCount === "number" && Number.isSafeInteger(row.pendingForMainCount) && row.pendingForMainCount >= 0) || !(row.droppedForMainCount === void 0 || typeof row.droppedForMainCount === "number" && Number.isSafeInteger(row.droppedForMainCount) && row.droppedForMainCount >= 0)) {
+  const nullableTimestamp2 = (candidate) => candidate === null || typeof candidate === "string" && Number.isFinite(Date.parse(candidate));
+  if (row.version !== 1 || typeof row.instanceId !== "string" || !UUID_RE14.test(row.instanceId) || row.provider !== "grok" && row.provider !== "opencode" && row.provider !== "claude" && row.provider !== "codex" || typeof row.profileId !== "string" || typeof row.workspaceId !== "string" || !UUID_RE14.test(row.workspaceId) || typeof row.principalId !== "string" || !UUID_RE14.test(row.principalId) || !Number.isSafeInteger(row.pid) || row.pid < 1 || typeof row.state !== "string" || !["starting", "ready", "stopping", "stopped", "failed"].includes(row.state) || typeof row.startedAt !== "string" || !Number.isFinite(Date.parse(row.startedAt)) || !(row.readyAt === null || typeof row.readyAt === "string" && Number.isFinite(Date.parse(row.readyAt))) || typeof row.updatedAt !== "string" || !Number.isFinite(Date.parse(row.updatedAt)) || !(row.stoppedAt === null || typeof row.stoppedAt === "string" && Number.isFinite(Date.parse(row.stoppedAt))) || !nullableUuid2(row.lastSignalId) || !(row.lastErrorCode === null || typeof row.lastErrorCode === "string" && /^[a-z0-9_-]{1,96}$/.test(row.lastErrorCode)) || !(row.providerVersion === void 0 || row.providerVersion === null || typeof row.providerVersion === "string" && SEMVER_RE2.test(row.providerVersion)) || !(row.providerLastMeasuredVersion === void 0 || row.providerLastMeasuredVersion === null || typeof row.providerLastMeasuredVersion === "string" && SEMVER_RE2.test(row.providerLastMeasuredVersion)) || (row.providerVersion === null || row.providerVersion === void 0) !== (row.providerLastMeasuredVersion === null || row.providerLastMeasuredVersion === void 0) || !(row.lastWorkerStderrTail === void 0 || row.lastWorkerStderrTail === null || typeof row.lastWorkerStderrTail === "string" && row.lastWorkerStderrTail.length > 0 && row.lastWorkerStderrTail.length <= 2048 && !/swm_(?:agt|inv|cap)_/i.test(row.lastWorkerStderrTail)) || typeof row.logPath !== "string" || !(0, import_node_path15.isAbsolute)(row.logPath) || !(row.deliveryMode === void 0 || row.deliveryMode === null || typeof row.deliveryMode === "string" && STATUS_DELIVERY_MODES.has(row.deliveryMode)) || !(row.pendingDeliveryCount === void 0 || nullableCount(row.pendingDeliveryCount)) || !(row.lastTerminalDeliveryFailureCount === void 0 || nullableCount(row.lastTerminalDeliveryFailureCount)) || !(row.lastTerminalDeliveryFailureAt === void 0 || nullableTimestamp2(row.lastTerminalDeliveryFailureAt)) || !(row.lastClaimAt === void 0 || nullableTimestamp2(row.lastClaimAt)) || !(row.lastAckAt === void 0 || nullableTimestamp2(row.lastAckAt)) || !(row.routeMode === void 0 || row.routeMode === "worker" || row.routeMode === "main" || row.routeMode === "split") || !(row.deferOverChars === void 0 || row.deferOverChars === null || typeof row.deferOverChars === "number" && Number.isSafeInteger(row.deferOverChars) && row.deferOverChars >= 1 && row.deferOverChars <= 1e4) || !(row.pendingForMainCount === void 0 || typeof row.pendingForMainCount === "number" && Number.isSafeInteger(row.pendingForMainCount) && row.pendingForMainCount >= 0) || !(row.droppedForMainCount === void 0 || typeof row.droppedForMainCount === "number" && Number.isSafeInteger(row.droppedForMainCount) && row.droppedForMainCount >= 0)) {
     throw new Error("stored listener status is malformed");
   }
   const routeMode = row.routeMode ?? "worker";
@@ -36029,6 +36388,7 @@ async function appendListenerEvent(paths, event) {
   const deliveryOutcomes = /* @__PURE__ */ new Set([
     "replied",
     "observed",
+    "queued",
     "expired",
     "failed_terminal"
   ]);
@@ -36302,7 +36662,7 @@ async function queryListenerControl(paths, command2, timeoutMs = CONTROL_TIMEOUT
 
 // src/listener/supervisor.ts
 var import_node_crypto18 = require("node:crypto");
-var UUID_RE14 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+var UUID_RE15 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
 var LISTENER_RESTART_MAX_ATTEMPTS = 5;
 var LISTENER_RESTART_INITIAL_MS = 1e3;
 var LISTENER_RESTART_MAX_MS = 6e4;
@@ -36431,7 +36791,7 @@ async function runListenerSupervisor(options) {
     // before the socket can answer, before any status/event persistence.
     initialize: prepare ? async () => {
       const selected = await prepare(proposedInstanceId);
-      if (!selected || typeof selected !== "object" || typeof selected.instanceId !== "string" || !UUID_RE14.test(selected.instanceId)) {
+      if (!selected || typeof selected !== "object" || typeof selected.instanceId !== "string" || !UUID_RE15.test(selected.instanceId)) {
         throw new Error("listener prepare returned an invalid instance id");
       }
       status = { ...status, instanceId: selected.instanceId };
@@ -36789,7 +37149,7 @@ async function waitForListenerReady(paths, options = {}) {
 // src/listener/delivery-journal.ts
 var import_node_path16 = require("node:path");
 var import_node_util2 = require("node:util");
-var UUID_RE15 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/;
+var UUID_RE16 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/;
 var COMMAND_ID_RE3 = /^[A-Za-z0-9_-]{8,72}$/;
 var SIGNAL_FINGERPRINT_RE = /^[0-9a-f]{64}$/;
 var MAX_JOURNAL_BYTES = 8192;
@@ -36873,6 +37233,7 @@ var ALLOWED_PHASES = /* @__PURE__ */ new Set(["claim_pending", "leased", "ack_pe
 var ALLOWED_OUTCOMES = /* @__PURE__ */ new Set([
   "replied",
   "observed",
+  "queued",
   "expired",
   "failed_terminal"
 ]);
@@ -36883,7 +37244,7 @@ var ALLOWED_ERROR_CODES = /* @__PURE__ */ new Set([
   "credential_unavailable"
 ]);
 function claimCommandId(listenerInstanceId, claimOrdinal) {
-  if (!UUID_RE15.test(listenerInstanceId)) {
+  if (!UUID_RE16.test(listenerInstanceId)) {
     throw new Error("stored delivery journal is malformed");
   }
   if (!Number.isSafeInteger(claimOrdinal) || claimOrdinal < 0) {
@@ -36898,7 +37259,7 @@ function claimCommandId(listenerInstanceId, claimOrdinal) {
   return id;
 }
 function ackCommandId(leaseId) {
-  if (!UUID_RE15.test(leaseId)) {
+  if (!UUID_RE16.test(leaseId)) {
     throw new Error("stored delivery journal is malformed");
   }
   const cleanLease = leaseId.toLowerCase().replace(/-/g, "");
@@ -36981,19 +37342,19 @@ function parseJournalRecord(raw, expectedWorkspaceId, expectedPrincipalId) {
   if (row.version !== 1) {
     throw new Error("stored delivery journal is malformed");
   }
-  if (typeof row.workspaceId !== "string" || !UUID_RE15.test(row.workspaceId) || row.workspaceId !== row.workspaceId.toLowerCase()) {
+  if (typeof row.workspaceId !== "string" || !UUID_RE16.test(row.workspaceId) || row.workspaceId !== row.workspaceId.toLowerCase()) {
     throw new Error("stored delivery journal is malformed");
   }
   if (expectedWorkspaceId && row.workspaceId !== expectedWorkspaceId.toLowerCase()) {
     throw new Error("stored delivery journal is malformed");
   }
-  if (typeof row.principalId !== "string" || !UUID_RE15.test(row.principalId) || row.principalId !== row.principalId.toLowerCase()) {
+  if (typeof row.principalId !== "string" || !UUID_RE16.test(row.principalId) || row.principalId !== row.principalId.toLowerCase()) {
     throw new Error("stored delivery journal is malformed");
   }
   if (expectedPrincipalId && row.principalId !== expectedPrincipalId.toLowerCase()) {
     throw new Error("stored delivery journal is malformed");
   }
-  if (typeof row.listenerInstanceId !== "string" || !UUID_RE15.test(row.listenerInstanceId) || row.listenerInstanceId !== row.listenerInstanceId.toLowerCase()) {
+  if (typeof row.listenerInstanceId !== "string" || !UUID_RE16.test(row.listenerInstanceId) || row.listenerInstanceId !== row.listenerInstanceId.toLowerCase()) {
     throw new Error("stored delivery journal is malformed");
   }
   if (!Number.isSafeInteger(row.nextClaimOrdinal) || row.nextClaimOrdinal < 0) {
@@ -37057,10 +37418,10 @@ function parseJournalRecord(raw, expectedWorkspaceId, expectedPrincipalId) {
     if (active.claimLastAttemptAt === null) {
       throw new Error("stored delivery journal is malformed");
     }
-    if (typeof active.signalId !== "string" || !UUID_RE15.test(active.signalId) || active.signalId !== active.signalId.toLowerCase()) {
+    if (typeof active.signalId !== "string" || !UUID_RE16.test(active.signalId) || active.signalId !== active.signalId.toLowerCase()) {
       throw new Error("stored delivery journal is malformed");
     }
-    if (typeof active.leaseId !== "string" || !UUID_RE15.test(active.leaseId) || active.leaseId !== active.leaseId.toLowerCase()) {
+    if (typeof active.leaseId !== "string" || !UUID_RE16.test(active.leaseId) || active.leaseId !== active.leaseId.toLowerCase()) {
       throw new Error("stored delivery journal is malformed");
     }
     if (!isValidIsoTimestamp(active.leasedUntil) || Date.parse(active.leasedUntil) <= Date.parse(active.claimCreatedAt)) {
@@ -37132,7 +37493,7 @@ var FileListenerDeliveryJournal = class {
       ["profileId", "workspaceId", "principalId"],
       "delivery journal configuration rejected"
     );
-    if (typeof options.profileId !== "string" || !options.profileId || options.profileId.includes("\0") || typeof options.workspaceId !== "string" || !UUID_RE15.test(options.workspaceId) || typeof options.principalId !== "string" || !UUID_RE15.test(options.principalId)) {
+    if (typeof options.profileId !== "string" || !options.profileId || options.profileId.includes("\0") || typeof options.workspaceId !== "string" || !UUID_RE16.test(options.workspaceId) || typeof options.principalId !== "string" || !UUID_RE16.test(options.principalId)) {
       throw new Error("delivery journal configuration rejected");
     }
     if (options.stateDirectory !== void 0) {
@@ -37253,7 +37614,7 @@ var FileListenerDeliveryJournal = class {
       ["signalId", "leaseId", "leasedUntil"],
       "delivery journal mutation rejected"
     );
-    if (typeof input.signalId !== "string" || !UUID_RE15.test(input.signalId) || typeof input.leaseId !== "string" || !UUID_RE15.test(input.leaseId) || !isValidIsoTimestamp(input.leasedUntil) || input.signalFingerprint !== void 0 && (typeof input.signalFingerprint !== "string" || !SIGNAL_FINGERPRINT_RE.test(input.signalFingerprint))) {
+    if (typeof input.signalId !== "string" || !UUID_RE16.test(input.signalId) || typeof input.leaseId !== "string" || !UUID_RE16.test(input.leaseId) || !isValidIsoTimestamp(input.leasedUntil) || input.signalFingerprint !== void 0 && (typeof input.signalFingerprint !== "string" || !SIGNAL_FINGERPRINT_RE.test(input.signalFingerprint))) {
       throw new Error("delivery journal mutation rejected");
     }
     const canonicalSignalId = input.signalId.toLowerCase();
@@ -37385,7 +37746,7 @@ async function openListenerDeliveryJournal(options) {
     ["profileId", "workspaceId", "principalId", "proposedListenerInstanceId"],
     "delivery journal configuration rejected"
   );
-  if (typeof options.profileId !== "string" || !options.profileId || options.profileId.includes("\0") || typeof options.workspaceId !== "string" || !UUID_RE15.test(options.workspaceId) || typeof options.principalId !== "string" || !UUID_RE15.test(options.principalId) || typeof options.proposedListenerInstanceId !== "string" || !UUID_RE15.test(options.proposedListenerInstanceId)) {
+  if (typeof options.profileId !== "string" || !options.profileId || options.profileId.includes("\0") || typeof options.workspaceId !== "string" || !UUID_RE16.test(options.workspaceId) || typeof options.principalId !== "string" || !UUID_RE16.test(options.principalId) || typeof options.proposedListenerInstanceId !== "string" || !UUID_RE16.test(options.proposedListenerInstanceId)) {
     throw new Error("delivery journal configuration rejected");
   }
   if (options.stateDirectory !== void 0) {
@@ -37600,7 +37961,7 @@ async function spawnDetachedListener(options) {
 // src/listener/hook.ts
 var import_promises10 = require("node:fs/promises");
 var import_node_path18 = require("node:path");
-var UUID_RE16 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+var UUID_RE17 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
 var TOKEN_RE = /^swm_agt_[A-Za-z0-9_-]{43}$/;
 var INSTANCE_KEY_RE = /^[0-9a-f]{64}$/;
 var MAX_HOOK_CREDENTIAL_BYTES = 8 * 1024;
@@ -37641,7 +38002,7 @@ function parseListenerCredential(raw) {
     "principalId",
     "credential",
     "updatedAt"
-  ]) || row.version !== 1 || typeof row.profileId !== "string" || !/^[0-9a-f]{24}$/.test(row.profileId) || typeof row.targetUrl !== "string" || typeof row.anonKey !== "string" || row.anonKey.length < 1 || row.anonKey.length > 4096 || typeof row.workspaceId !== "string" || !UUID_RE16.test(row.workspaceId) || typeof row.principalId !== "string" || !UUID_RE16.test(row.principalId) || typeof row.credential !== "string" || !TOKEN_RE.test(row.credential) || typeof row.updatedAt !== "string" || !Number.isFinite(Date.parse(row.updatedAt))) {
+  ]) || row.version !== 1 || typeof row.profileId !== "string" || !/^[0-9a-f]{24}$/.test(row.profileId) || typeof row.targetUrl !== "string" || typeof row.anonKey !== "string" || row.anonKey.length < 1 || row.anonKey.length > 4096 || typeof row.workspaceId !== "string" || !UUID_RE17.test(row.workspaceId) || typeof row.principalId !== "string" || !UUID_RE17.test(row.principalId) || typeof row.credential !== "string" || !TOKEN_RE.test(row.credential) || typeof row.updatedAt !== "string" || !Number.isFinite(Date.parse(row.updatedAt))) {
     throw new Error("stored listener hook credential is malformed");
   }
   const target2 = cloudTarget(row.targetUrl, row.anonKey);
@@ -37701,7 +38062,7 @@ function parseSurface(raw) {
   const row = value;
   if (Object.keys(row).some(
     (key2) => key2 !== "version" && key2 !== "surfacedSignalIds" && key2 !== "reportedDroppedCount" && key2 !== "credentialFailureReported"
-  ) || row.version !== 1 || !Array.isArray(row.surfacedSignalIds) || row.surfacedSignalIds.length > HOOK_SURFACED_IDS_MAX || row.surfacedSignalIds.some((id) => typeof id !== "string" || !UUID_RE16.test(id)) || !(row.reportedDroppedCount === void 0 || typeof row.reportedDroppedCount === "number" && Number.isSafeInteger(row.reportedDroppedCount) && row.reportedDroppedCount >= 0) || !(row.credentialFailureReported === void 0 || typeof row.credentialFailureReported === "boolean")) {
+  ) || row.version !== 1 || !Array.isArray(row.surfacedSignalIds) || row.surfacedSignalIds.length > HOOK_SURFACED_IDS_MAX || row.surfacedSignalIds.some((id) => typeof id !== "string" || !UUID_RE17.test(id)) || !(row.reportedDroppedCount === void 0 || typeof row.reportedDroppedCount === "number" && Number.isSafeInteger(row.reportedDroppedCount) && row.reportedDroppedCount >= 0) || !(row.credentialFailureReported === void 0 || typeof row.credentialFailureReported === "boolean")) {
     throw new Error("stored listener hook surface state is malformed");
   }
   const ids = row.surfacedSignalIds.map((id) => String(id).toLowerCase());
@@ -37738,7 +38099,7 @@ var FileHookSurfaceStore = class {
       const unseen = [];
       for (const item of items) {
         const signalId = item.signalId.toLowerCase();
-        if (!UUID_RE16.test(signalId) || seen.has(signalId)) continue;
+        if (!UUID_RE17.test(signalId) || seen.has(signalId)) continue;
         seen.add(signalId);
         unseen.push(item);
       }
@@ -37761,7 +38122,7 @@ var FileHookSurfaceStore = class {
       const seen = new Set(state.surfacedSignalIds);
       for (const signalId of options.signalIds ?? []) {
         const checked = signalId.toLowerCase();
-        if (UUID_RE16.test(checked)) seen.add(checked);
+        if (UUID_RE17.test(checked)) seen.add(checked);
       }
       await writeSecureJsonFile(
         this.path,
@@ -37998,6 +38359,32 @@ function renderDroppedAsks(count2) {
 }
 var CREDENTIAL_READ_WARNING = "CommonSwarm could not read the configured listener credential safely. The hook is not checking routed asks. Restart the listener with a fresh credential; any credential state file must be mode 0600. Then run cswarm listen status.";
 var CREDENTIAL_401_WARNING = "CommonSwarm could not authenticate a listener credential (HTTP 401). The hook is not checking routed asks. Restart the listener with a fresh credential, then run cswarm listen status.";
+async function recordQueuedObservations(check, signalIds, options, now) {
+  const stored = check.context.credential;
+  const remainingMs = options.deadlineMs - now();
+  if (signalIds.length === 0 || stored === null || options.signal.aborted || remainingMs <= 0) {
+    return /* @__PURE__ */ new Set();
+  }
+  const client = new DeliveryCommandClient(
+    cloudTarget(stored.targetUrl, stored.anonKey),
+    options.fetcher ?? fetch,
+    { deadlineMs: remainingMs, now }
+  );
+  const results = await Promise.all(signalIds.map(async (signalId) => {
+    try {
+      await client.observeQueuedAgentDelivery({
+        workspaceId: stored.workspaceId,
+        credential: stored.credential,
+        commandId: observationCommandId(signalId),
+        signalId
+      });
+      return signalId;
+    } catch {
+      return null;
+    }
+  }));
+  return new Set(results.filter((signalId) => signalId !== null));
+}
 async function checkListenerHooks(options) {
   try {
     const stateDirectory2 = options.stateDirectory ?? defaultListenerStateDirectory();
@@ -38076,10 +38463,8 @@ async function checkListenerHooks(options) {
         check,
         store: store2,
         signalIds: staged.unseen.map((item) => item.signalId),
-        // Every staged queue entry is either written by this run or was committed
-        // after an earlier successful write. Removing both keeps the queue bounded
-        // without re-printing entries below the exactly-once high-water.
-        settledPendingSignalIds: check.pending.map((item) => item.signalId),
+        plainPendingSignalIds: check.pending.filter((item) => item.observationPending !== true).map((item) => item.signalId),
+        observationPendingSignalIds: check.pending.filter((item) => item.observationPending === true).map((item) => item.signalId),
         reportDrops,
         reportCredentialFailure
       });
@@ -38092,8 +38477,17 @@ async function checkListenerHooks(options) {
         ...commit.reportDrops ? { droppedCount: commit.check.droppedCount } : {},
         ...commit.reportCredentialFailure ? { credentialFailureReported: true } : commit.check.credentialHealthy ? { credentialFailureReported: false } : {}
       });
+      const observedSignalIds = await recordQueuedObservations(
+        commit.check,
+        commit.observationPendingSignalIds,
+        options,
+        now
+      );
       const remainingCount = await commit.check.queue.remove(
-        new Set(commit.settledPendingSignalIds),
+        /* @__PURE__ */ new Set([
+          ...commit.plainPendingSignalIds,
+          ...observedSignalIds
+        ]),
         HOOK_LOCK_TIMEOUT_MS
       );
       if (commit.check.context.paths !== null && commit.check.context.status !== null) {
@@ -38218,7 +38612,7 @@ var BOOLEAN_FLAGS = /* @__PURE__ */ new Set([
   "reveal-anon-key",
   "write"
 ]);
-var UUID_RE17 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+var UUID_RE18 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
 var AGENT_CREDENTIAL_MESSAGE = "Agent credential minted. It is bound to this task and run so the agent's work stays scoped and attributable.";
 var AGENT_CREDENTIAL_MESSAGE_D088 = "Agent credential minted. It is bound to this run, so the agent's work is attributable to it.";
 var ACCEPTED_AGENT_CREDENTIAL_MESSAGES = [
@@ -38226,8 +38620,8 @@ var ACCEPTED_AGENT_CREDENTIAL_MESSAGES = [
   AGENT_CREDENTIAL_MESSAGE_D088
 ];
 function packageVersion() {
-  if ("0.1.31".length > 0) {
-    return "0.1.31";
+  if ("0.1.33".length > 0) {
+    return "0.1.33";
   }
   try {
     const value = JSON.parse(
@@ -38346,6 +38740,7 @@ Usage:
   cswarm note "<text>" [--url <url> --anon-key <key>] [--workspace-id <uuid>] [--to <member|agent>] [--about <ref>] [--until <dur>] [--json]  # text: 1..8000 characters
   cswarm ask "<text>" [--url <url> --anon-key <key>] [--workspace-id <uuid>] [--to <member|agent>] [--about <ref>] [--until <dur>] [--wait <seconds>] [--json]  # text: 1..8000 characters
   cswarm reply <signal-id> "<text>" [--url <url> --anon-key <key>] [--workspace-id <uuid>] [--until <dur>] [--json]
+  cswarm receipt <signal-id> --agent-token-stdin [--url <url> --anon-key <key>] --workspace-id <uuid> [--json]
   cswarm feed [--url <url> --anon-key <key>] [--workspace-id <uuid>] [--about <ref>] [--kind <kind>] [--since <timestamp>] [--limit <n>] [--include-stale] [--json]
   cswarm inbox [--url <url> --anon-key <key>] [--workspace-id <uuid>] [--kind <kind>] [--about <ref>] [--since <timestamp>] [--limit <n>] [--include-stale] [--wait <seconds>] [--json]
   cswarm inbox --follow --ndjson [--url <url> --anon-key <key>] [--workspace-id <uuid>] [--kind <kind>] [--about <ref>] [--since <timestamp>] [--limit <n>] [--include-stale]
@@ -38392,6 +38787,7 @@ Credential selection for command/dogfood:
                           One that persists or references the credential needs the complete
                           JSON artifact, because it needs a field a bare secret does not carry:
                             members       reads only          -- either form
+                            receipt       reads only          -- either form
                             file put, file ls, file get, file rm, file restore
                                           read and command, nothing persisted -- either form
                             feedback      command only, nothing persisted     -- either form
@@ -38561,7 +38957,7 @@ function parsedAgentCredential(value) {
   const withExpiry = [...requiredKeys, "expires_at"].sort();
   const actualKeys = Object.keys(artifact).sort();
   const shape = actualKeys.length === requiredKeys.length ? requiredKeys : withExpiry;
-  if (actualKeys.length !== shape.length || !actualKeys.every((key2, index) => key2 === shape[index]) || !ACCEPTED_AGENT_CREDENTIAL_MESSAGES.includes(artifact.message) || artifact.status !== "accepted" || typeof artifact.principal_id !== "string" || !UUID_RE17.test(artifact.principal_id) || typeof artifact.token_id !== "string" || !UUID_RE17.test(artifact.token_id) || typeof artifact.run_id !== "string" || !UUID_RE17.test(artifact.run_id) || typeof artifact.agent_token !== "string") {
+  if (actualKeys.length !== shape.length || !actualKeys.every((key2, index) => key2 === shape[index]) || !ACCEPTED_AGENT_CREDENTIAL_MESSAGES.includes(artifact.message) || artifact.status !== "accepted" || typeof artifact.principal_id !== "string" || !UUID_RE18.test(artifact.principal_id) || typeof artifact.token_id !== "string" || !UUID_RE18.test(artifact.token_id) || typeof artifact.run_id !== "string" || !UUID_RE18.test(artifact.run_id) || typeof artifact.agent_token !== "string") {
     throw new Error("agent credential JSON is malformed");
   }
   let expiresAt = null;
@@ -38678,7 +39074,7 @@ async function workspaceId(args, cloud, human, options = {}) {
     warn: options.warn ?? writeWorkspaceWarning
   });
 }
-function uuid3(value, field) {
+function uuid4(value, field) {
   if (value === void 0 || !/^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i.test(value)) {
     throw new Error(`server returned a malformed ${field}`);
   }
@@ -38783,7 +39179,7 @@ async function runNew(args) {
     throw error;
   }
   const response = acceptedConnect("workspace creation", result);
-  const created = uuid3(response.workspace_id, "workspace_id");
+  const created = uuid4(response.workspace_id, "workspace_id");
   if (created !== proposedId) {
     throw new Error(
       "the server confirmed a different workspace than this command created; run cswarm workspaces before doing anything else"
@@ -38799,7 +39195,7 @@ async function runNew(args) {
       project: {
         workspace_id: created,
         name,
-        stream_id: typeof response.stream_id === "string" && UUID_RE17.test(response.stream_id) ? response.stream_id : null
+        stream_id: typeof response.stream_id === "string" && UUID_RE18.test(response.stream_id) ? response.stream_id : null
       }
     });
     return;
@@ -39056,7 +39452,7 @@ async function runInvite(args) {
     );
   }
   assertInvitationToken(response.invitation_token);
-  const responseWorkspaceId = uuid3(response.workspace_id, "workspace_id");
+  const responseWorkspaceId = uuid4(response.workspace_id, "workspace_id");
   if (typeof response.workspace_name !== "string" || typeof response.inviter_display_name !== "string") {
     throw new Error(
       "the invitation was created without its fresh display labels; run invite again to issue a complete link"
@@ -39076,7 +39472,7 @@ async function runInvite(args) {
   printJson({
     message: "Invitation created. Share the one-time link below with its intended recipient. It can be accepted once before it expires; use a GitHub account with a distinct verified email for a second person.",
     status: response.status,
-    invitation_id: uuid3(response.invitation_id, "invitation_id"),
+    invitation_id: uuid4(response.invitation_id, "invitation_id"),
     invite_link: inviteLink
   });
 }
@@ -39188,7 +39584,7 @@ async function runLegacyAccept(args) {
       { kind: "accept_invitation", token: invitationToken }
     )
   );
-  const acceptedWorkspace = uuid3(response.workspace_id, "workspace_id");
+  const acceptedWorkspace = uuid4(response.workspace_id, "workspace_id");
   await writeWorkspaceDefault(human.store, human.userId, acceptedWorkspace);
   await writeCurrentTarget(cloud);
   printJson({
@@ -39334,7 +39730,7 @@ async function runPrincipal(args) {
         "Agent identity created. It makes this machine's agent auditable inside the shared workspace. Its name is visible to everyone in the workspace, so avoid naming it after anything private."
       ),
       status: response.status,
-      principal_id: uuid3(response.principal_id, "principal_id")
+      principal_id: uuid4(response.principal_id, "principal_id")
     });
     return;
   }
@@ -39442,8 +39838,8 @@ async function runToken(args) {
   );
   printJson(agentCredentialArtifact({
     principalId,
-    tokenId: uuid3(response.token_id, "token_id"),
-    runId: uuid3(response.run_id, "run_id"),
+    tokenId: uuid4(response.token_id, "token_id"),
+    runId: uuid4(response.run_id, "run_id"),
     token: response.agent_token,
     expiresAt
   }));
@@ -39573,7 +39969,7 @@ async function runLinkNew(args) {
     2
   );
   const taskId = args.required("task-id");
-  if (!UUID_RE17.test(taskId)) {
+  if (!UUID_RE18.test(taskId)) {
     throw new Error("--task-id must be the work item's UUID");
   }
   const site = capabilitySiteOrigin(
@@ -39603,11 +39999,11 @@ async function runLinkNew(args) {
   );
   if (response.capability_token === void 0) {
     throw new Error(
-      `this link was created on a prior attempt, and its credential is shown only in a fresh response \u2014 the server keeps just a hash, so it cannot be shown again; run cswarm link new to issue another, then run cswarm link revoke --capability-id ${uuid3(response.capability_id, "capability_id")} to withdraw the one you cannot see`
+      `this link was created on a prior attempt, and its credential is shown only in a fresh response \u2014 the server keeps just a hash, so it cannot be shown again; run cswarm link new to issue another, then run cswarm link revoke --capability-id ${uuid4(response.capability_id, "capability_id")} to withdraw the one you cannot see`
     );
   }
   assertCapabilityToken(response.capability_token);
-  const capabilityId = uuid3(response.capability_id, "capability_id");
+  const capabilityId = uuid4(response.capability_id, "capability_id");
   const expiresAt = capabilityTimestamp(response.expires_at, "expires_at");
   const url = capabilityUrl(site, response.capability_token);
   if (args.has("json")) {
@@ -39633,7 +40029,7 @@ async function runLinkRevoke(args) {
     2
   );
   const capabilityId = args.required("capability-id");
-  if (!UUID_RE17.test(capabilityId)) {
+  if (!UUID_RE18.test(capabilityId)) {
     throw new Error(
       "--capability-id must be the id printed when the link was created"
     );
@@ -39651,7 +40047,7 @@ async function runLinkRevoke(args) {
       { kind: "revoke_capability_url", capability_id: capabilityId }
     )
   );
-  const revoked = uuid3(response.capability_id, "capability_id");
+  const revoked = uuid4(response.capability_id, "capability_id");
   const revokedAt = capabilityTimestamp(response.revoked_at, "revoked_at");
   const message = renderCapabilityRevoke(revoked, revokedAt);
   if (args.has("json")) {
@@ -40212,7 +40608,7 @@ async function runReply(args) {
     "json"
   ], 3);
   const signalId = args.positionals[1];
-  if (signalId === void 0 || !UUID_RE17.test(signalId)) {
+  if (signalId === void 0 || !UUID_RE18.test(signalId)) {
     throw new Error("reply requires the signal UUID being answered");
   }
   const body = args.positionals[2];
@@ -40442,6 +40838,52 @@ async function runSignalRead(args, inbox) {
   })}
 `);
 }
+async function runReceipt(args) {
+  args.assertShape([
+    ...TARGET_FLAGS,
+    "workspace-id",
+    ...CREDENTIAL_FLAGS,
+    "json"
+  ], 2);
+  const signalId = args.positionals[1];
+  if (!UUID_RE18.test(signalId)) {
+    throw new Error("signal-id must be a UUID");
+  }
+  if (!args.has("agent-token-stdin")) {
+    throw new Error(
+      "receipt reads signals sent by an agent; provide --agent-token-stdin and --workspace-id"
+    );
+  }
+  const cloud = await target(args);
+  const selected = await commandWorkspaceAndCredential(args, cloud, {
+    validateHumanWorkspace: true
+  });
+  let result;
+  try {
+    result = await readAgentDeliveryReceipts(
+      cloud,
+      selected.bearer,
+      selected.selectedWorkspace,
+      signalId
+    );
+  } catch (error) {
+    const reason = error instanceof SignalReadTimeoutError ? `the read reached its ${SIGNAL_READ_TIMEOUT_MS / 1e3}-second deadline` : error instanceof DeliveryReceiptReadError && error.status !== null ? `the read service refused it with HTTP ${error.status}` : error instanceof DeliveryReceiptReadError && error.code === "not_author" ? "the service could not verify that this agent sent the signal" : error instanceof DeliveryReceiptReadError && error.code === "protocol" ? "the read service returned an invalid receipt response" : "the read service could not be reached";
+    throw new Error(
+      `Delivery receipt lookup failed because ${reason}. No delivery state was shown, so do not treat this signal as pending, delivered, or failed. Retry with: cswarm receipt ${signalId.toLowerCase()} --workspace-id ${selected.selectedWorkspace}`
+    );
+  }
+  const report = {
+    ...result,
+    workspaceId: selected.selectedWorkspace,
+    signalId: signalId.toLowerCase()
+  };
+  if (args.has("json")) {
+    printJson(signalReceiptJsonPayload(report));
+    return;
+  }
+  process.stdout.write(`${renderSignalReceiptReport(report)}
+`);
+}
 async function runInboxFollowCommand(args) {
   const cloud = await target(args);
   const selected = await commandWorkspaceAndCredential(args, cloud, {
@@ -40542,7 +40984,7 @@ async function runInboxFollowCommand(args) {
   }
 }
 function listenerUuid(value, flag) {
-  if (!value || !UUID_RE17.test(value)) {
+  if (!value || !UUID_RE18.test(value)) {
     throw new Error(`--${flag} must be a UUID`);
   }
   return value.toLowerCase();
@@ -41605,7 +42047,7 @@ async function fileRows(context) {
   );
 }
 async function resolveFileSelector(context, selector) {
-  if (UUID_RE17.test(selector)) return selector.toLowerCase();
+  if (UUID_RE18.test(selector)) return selector.toLowerCase();
   const rows3 = await fileRows(context);
   const match = rows3.find(
     (row) => row.name.toLowerCase() === selector.toLowerCase()
@@ -42117,6 +42559,10 @@ async function main() {
     await runReply(args);
     return;
   }
+  if (verb === "receipt") {
+    await runReceipt(args);
+    return;
+  }
   if (verb === "feed" || verb === "inbox") {
     await runSignalRead(args, verb === "inbox");
     return;
@@ -42193,7 +42639,7 @@ main().catch((error) => {
   if (error instanceof WorkspaceCliError) {
     const structured = error.structured();
     const verb = process.argv[2];
-    const json = process.argv.includes("--json") && (verb === "status" || verb === "workspaces" || verb === "use" || verb === "working-on" || verb === "note" || verb === "ask" || verb === "reply" || verb === "feed" || verb === "inbox");
+    const json = process.argv.includes("--json") && (verb === "status" || verb === "workspaces" || verb === "use" || verb === "working-on" || verb === "note" || verb === "ask" || verb === "reply" || verb === "receipt" || verb === "feed" || verb === "inbox");
     if (json) {
       process.stdout.write(`${JSON.stringify(structured, null, 2)}
 `);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "commonswarm",
-  "version": "0.1.31",
+  "version": "0.1.33",
   "description": "CommonSwarm CLI — coordination for teams where people and AI agents work side by side.",
   "bin": {
     "cswarm": "cswarm.cjs"