harnery 0.35.0 → 0.37.0

package/dist/core/agents/live-authority-v3.js

@@ -1,12 +1,15 @@
 import { randomUUID } from "node:crypto";
-import { canonicalJsonV3, sha256V3 } from "../events/v3/canonical.js";
+import { canonicalJsonV3, normalizeNativeIdV3, sha256V3 } from "../events/v3/canonical.js";
+import { readEventV3ControlState } from "../events/v3/control.js";
 import { readCoordinationViewV3, requireAuthoritySafeCoordinationViewV3, } from "../events/v3/coordination-view.js";
+import { fingerprintContextV3 } from "../events/v3/fingerprint-keys.js";
 import { LIVE_HOOK_V3_PRODUCER_ID, liveInstanceIdV3, livePlatformV3, resolveLiveEventLedgerRouteV3, } from "../events/v3/live-routing.js";
 import { recordCoordinationAuthorityV3, } from "../events/v3/producers/coordination-recorder.js";
-import { readTerminalHookProducerStateV3, recordHookSignalV3, } from "../events/v3/producers/recorder.js";
+import { listHookProducerStateRecordsV3, readHookProducerStateV3, readTerminalHookProducerStateV3, recordHookSignalV3, } from "../events/v3/producers/recorder.js";
 import { canonicalClaimPath } from "./claim-path.js";
 import { acquireClaim, readHeartbeat, releaseClaim, setIdentityCache, setLifecycleCache, setTask, } from "./state/heartbeat-writer.js";
-import { ensureLiveCoordinationHeartbeat, liveCoordinationAdapterV3, } from "./state/live-coordination-view.js";
+import { liveCoordinationAdapterV3, readLiveCoordinationRow, } from "./state/live-coordination-view.js";
+import { ensureLiveCoordinationHeartbeat } from "./state/live-coordination-writer.js";
 import { recordNameAssumption } from "./state/names.js";
 export const LIVE_COORDINATION_V3_PRODUCER_ID = "prd_agent-coord";
 export class LiveCoordinationAuthorityV3Error extends Error {
@@ -17,6 +20,237 @@ export class LiveCoordinationAuthorityV3Error extends Error {
         this.name = "LiveCoordinationAuthorityV3Error";
     }
 }
+/**
+ * Establish the missing generation authority for one adapter-native session,
+ * then reconstruct its disposable heartbeat cache.
+ *
+ * This is intentionally narrower than mid-flight hook onboarding. The caller
+ * must supply an already validated native session, adapter, and current
+ * instance identity. Existing authority is reused only when all three bind to
+ * the same non-terminal producer generation. A terminal generation, an
+ * adapter/session collision, or any disagreement between private producer
+ * control and the public projection fails closed. No turn is synthesized.
+ */
+export function bootstrapLiveCoordinationAuthorityV3(input) {
+    if (!/^[a-zA-Z0-9._-]{1,128}$/.test(input.owner)) {
+        throw new LiveCoordinationAuthorityV3Error("invalid_instance_identity");
+    }
+    if (input.nativeSessionId.length === 0 ||
+        input.nativeSessionId.length > 512 ||
+        input.nativeSessionId.includes("\0")) {
+        throw new LiveCoordinationAuthorityV3Error("invalid_native_session_identity");
+    }
+    const route = resolveLiveEventLedgerRouteV3(input.coordRoot);
+    if (route.state === "blocked")
+        throw new LiveCoordinationAuthorityV3Error(route.reason);
+    const control = readEventV3ControlState(input.coordRoot);
+    if (control.state !== route.mode) {
+        throw new LiveCoordinationAuthorityV3Error("control_state_mismatch");
+    }
+    const instanceId = liveInstanceIdV3(input.owner);
+    const rootId = control.genesis.event.scope.root_id;
+    const context = fingerprintContextV3(input.coordRoot, rootId, undefined, control.genesis.profile.privacy_key_epoch);
+    const sessionId = `sid_${normalizeNativeIdV3(context, `${input.adapter}.session`, input.nativeSessionId).slice(4)}`;
+    const view = readAuthoritySafeViewForBootstrap(input.coordRoot);
+    const existing = view.instances[instanceId];
+    const sessionStates = readSessionProducerStatesForBootstrap(input.coordRoot, input.nativeSessionId);
+    const instanceStates = readInstanceProducerStatesForBootstrap(input.coordRoot, instanceId);
+    const crossAdapter = sessionStates.find((state) => state.adapter !== input.adapter);
+    if (crossAdapter) {
+        throw new LiveCoordinationAuthorityV3Error("cross_adapter_identity");
+    }
+    const crossInstance = sessionStates.find((state) => state.instance_id !== instanceId);
+    if (crossInstance) {
+        throw new LiveCoordinationAuthorityV3Error("cross_instance_identity");
+    }
+    const direct = sessionStates.find((state) => state.adapter === input.adapter);
+    if (direct?.terminal ||
+        (!existing && terminalGenerationForSession(view, instanceId, sessionId))) {
+        throw new LiveCoordinationAuthorityV3Error("terminal_generation_forbidden");
+    }
+    const liveInstanceStates = instanceStates.filter((state) => !state.terminal);
+    if (liveInstanceStates.length > 1 || sessionStates.length > 1) {
+        throw new LiveCoordinationAuthorityV3Error("generation_ambiguous");
+    }
+    if (existing) {
+        const observedAdapter = existing.runtime_attestation.adapter;
+        if (observedAdapter.state !== "observed" || observedAdapter.value.id !== input.adapter) {
+            throw new LiveCoordinationAuthorityV3Error("cross_adapter_identity");
+        }
+        if (existing.session_id !== sessionId) {
+            throw new LiveCoordinationAuthorityV3Error("cross_session_identity");
+        }
+        if (!direct ||
+            direct.terminal ||
+            direct.generation_id !== existing.generation_id ||
+            liveInstanceStates.length !== 1 ||
+            liveInstanceStates[0]?.generation_id !== existing.generation_id) {
+            throw new LiveCoordinationAuthorityV3Error("generation_control_mismatch");
+        }
+        return materializeBootstrappedAuthority(input, existing.generation_id, "reused");
+    }
+    if (direct || liveInstanceStates.length > 0) {
+        throw new LiveCoordinationAuthorityV3Error("generation_control_mismatch");
+    }
+    const started = recordHookSignalV3({
+        coordRoot: input.coordRoot,
+        mode: route.mode,
+        signal: "session-start",
+        payload: { raw: {}, session_id: input.nativeSessionId },
+        adapter: input.adapter,
+        instance_id: instanceId,
+        producer_id: LIVE_HOOK_V3_PRODUCER_ID,
+        build_id: route.build_id,
+        platform: livePlatformV3(),
+        session_start_derivation: "validated_current_session_heal",
+    });
+    if (started.state !== "recorded" && started.state !== "already_started") {
+        const reason = "reason" in started ? `:${started.reason}` : "";
+        throw new LiveCoordinationAuthorityV3Error(`generation_bootstrap_failed:${started.state}${reason}`);
+    }
+    const after = readAuthoritySafeViewForBootstrap(input.coordRoot).instances[instanceId];
+    const producer = readSessionProducerStatesForBootstrap(input.coordRoot, input.nativeSessionId).filter((state) => state.adapter === input.adapter && state.instance_id === instanceId);
+    if (!after ||
+        after.session_id !== sessionId ||
+        producer.length !== 1 ||
+        producer[0]?.terminal ||
+        producer[0]?.generation_id !== after.generation_id) {
+        throw new LiveCoordinationAuthorityV3Error("generation_control_mismatch");
+    }
+    return materializeBootstrappedAuthority(input, after.generation_id, started.state === "recorded" ? "created" : "reused");
+}
+function readAuthoritySafeViewForBootstrap(coordRoot) {
+    try {
+        return requireAuthoritySafeCoordinationViewV3(readCoordinationViewV3(coordRoot));
+    }
+    catch (error) {
+        if (error instanceof LiveCoordinationAuthorityV3Error)
+            throw error;
+        throw new LiveCoordinationAuthorityV3Error("coordination_view_unsafe");
+    }
+}
+function readSessionProducerStatesForBootstrap(coordRoot, nativeSessionId) {
+    try {
+        return ["claude-code", "codex", "cursor"]
+            .map((adapter) => readHookProducerStateV3(coordRoot, adapter, nativeSessionId))
+            .filter((state) => state !== undefined);
+    }
+    catch {
+        throw new LiveCoordinationAuthorityV3Error("producer_state_unsafe");
+    }
+}
+function readInstanceProducerStatesForBootstrap(coordRoot, instanceId) {
+    try {
+        return listHookProducerStateRecordsV3(coordRoot, { includeTerminal: true })
+            .map((record) => record.state)
+            .filter((state) => state.instance_id === instanceId);
+    }
+    catch {
+        throw new LiveCoordinationAuthorityV3Error("producer_state_unsafe");
+    }
+}
+function terminalGenerationForSession(view, instanceId, sessionId) {
+    return Object.values(view.terminal_generations).some((generation) => generation.instance_id === instanceId && generation.session_id === sessionId);
+}
+function materializeBootstrappedAuthority(input, generationId, state) {
+    const heartbeat = ensureLiveCoordinationHeartbeat(input.coordRoot, input.owner, input.nativeSessionId, input.adapter);
+    if (!heartbeat || heartbeat.v3_generation_id !== generationId) {
+        throw new LiveCoordinationAuthorityV3Error("generation_materialization_failed");
+    }
+    return {
+        state,
+        adapter: input.adapter,
+        generation_id: generationId,
+        heartbeat,
+    };
+}
+/**
+ * Reapply private, generation-bound coordination state after a runtime epoch
+ * replaces the canonical ledger. The old heartbeat is only accepted for the
+ * same native session and a different V3 generation. Its task prose and
+ * lifecycle reason remain in the disposable cache; canonical events retain
+ * only the privacy-safe authority signals.
+ */
+export function restoreLiveCoordinationStateAfterEpochV3(input) {
+    const unchanged = {
+        state: "unchanged",
+        task: false,
+        claims: 0,
+        lifecycle: false,
+    };
+    const prior = input.prior;
+    if (!prior || prior.instance_id !== input.owner)
+        return unchanged;
+    if (prior.session_id !== input.nativeSessionId &&
+        prior.native_session_id !== input.nativeSessionId) {
+        return unchanged;
+    }
+    // The recorder just committed this hook under the named generation. When
+    // it is the cache's generation, no epoch replacement occurred and the
+    // expensive complete coordination projection cannot change the answer.
+    if (input.currentGenerationId && prior.v3_generation_id === input.currentGenerationId) {
+        return unchanged;
+    }
+    const view = requireAuthoritySafeCoordinationViewV3(readCoordinationViewV3(input.coordRoot));
+    const priorGenerationStillCurrent = [
+        ...Object.values(view.instances),
+        ...Object.values(view.terminal_generations),
+    ].some((generation) => generation.generation_id === prior.v3_generation_id);
+    if (priorGenerationStillCurrent)
+        return unchanged;
+    const current = readLiveCoordinationRow(input.coordRoot, input.owner);
+    if (!current || !prior.v3_generation_id || current.v3_generation_id === prior.v3_generation_id) {
+        return unchanged;
+    }
+    let task = false;
+    let claims = 0;
+    let lifecycle = false;
+    if (typeof prior.task === "string" && prior.task.length > 0 && current.task !== prior.task) {
+        recordLiveTaskChangeV3({
+            coordRoot: input.coordRoot,
+            owner: input.owner,
+            nativeSessionId: input.nativeSessionId,
+            adapter: input.adapter,
+            task: prior.task,
+        });
+        task = true;
+    }
+    const currentClaims = new Set((current.files_touched ?? []).map((path) => canonicalClaimPath(input.coordRoot, path)));
+    for (const path of [...new Set(prior.files_touched ?? [])].sort()) {
+        const canonical = canonicalClaimPath(input.coordRoot, path);
+        if (currentClaims.has(canonical))
+            continue;
+        recordLiveClaimChangeV3({
+            coordRoot: input.coordRoot,
+            owner: input.owner,
+            nativeSessionId: input.nativeSessionId,
+            adapter: input.adapter,
+            operation: "acquired",
+            path: canonical,
+        });
+        currentClaims.add(canonical);
+        claims += 1;
+    }
+    const priorLifecycle = prior.task_state ?? "active";
+    if (priorLifecycle !== "active" &&
+        (current.task_state !== priorLifecycle || current.task_state_reason !== prior.task_state_reason)) {
+        recordLiveLifecycleChangeV3({
+            coordRoot: input.coordRoot,
+            owner: input.owner,
+            nativeSessionId: input.nativeSessionId,
+            adapter: input.adapter,
+            state: priorLifecycle,
+            ...(prior.task_state_reason ? { reason: prior.task_state_reason } : {}),
+            ...(prior.suggested_session_name
+                ? { suggestedSessionName: prior.suggested_session_name }
+                : {}),
+        });
+        lifecycle = true;
+    }
+    return task || claims > 0 || lifecycle
+        ? { state: "restored", task, claims, lifecycle }
+        : unchanged;
+}
 /**
  * Open a fresh derived generation for a human-facing session that is executing
  * again after an authoritative terminal. The terminal generation is never
@@ -102,7 +336,7 @@ export function recordLiveLifecycleChangeV3(input) {
         task_state_reason: input.state === "active" ? undefined : input.reason,
         ...(input.suggestedSessionName ? { suggested_session_name: input.suggestedSessionName } : {}),
     };
-    if (authorityStateDigest(before) === authorityStateDigest(desired))
+    if (coordinationAuthorityStateDigestV3(before) === coordinationAuthorityStateDigestV3(desired))
         return { state: "unchanged" };
     return recordLiveAuthority(input, "lifecycle-changed", {
         native_observation_id: input.observationId ?? `lifecycle-${randomUUID()}`,
@@ -128,7 +362,7 @@ export function recordLiveClaimChangeV3(input) {
         ].sort()
         : (before.files_touched ?? []).filter((path) => canonicalClaimPath(input.coordRoot, path) !== canonical);
     const desired = { ...before, files_touched: desiredFiles };
-    if (authorityStateDigest(before) === authorityStateDigest(desired))
+    if (coordinationAuthorityStateDigestV3(before) === coordinationAuthorityStateDigestV3(desired))
         return { state: "unchanged" };
     return recordLiveAuthority(input, "claim-changed", {
         native_observation_id: input.observationId ?? `claim-${randomUUID()}`,
@@ -148,7 +382,7 @@ export function recordLiveIdentityChangeV3(input) {
     const subject = input.subject ?? input.owner;
     const before = requireHeartbeat(input, subject);
     const desired = { ...before, name: input.name, agent_id: input.identityId };
-    if (authorityStateDigest(before) === authorityStateDigest(desired))
+    if (coordinationAuthorityStateDigestV3(before) === coordinationAuthorityStateDigestV3(desired))
         return { state: "unchanged" };
     return recordLiveAuthority(input, "identity-attested", {
         native_observation_id: input.observationId ?? `identity-${randomUUID()}`,
@@ -181,15 +415,15 @@ function recordLiveAuthority(input, signal, observation, expected, desired, appl
         producer_id: LIVE_COORDINATION_V3_PRODUCER_ID,
         build_id: route.build_id,
         platform: livePlatformV3(),
-        expected_prior_state_digest: authorityStateDigest(expected),
-        desired_state_digest: authorityStateDigest(desired),
+        expected_prior_state_digest: coordinationAuthorityStateDigestV3(expected),
+        desired_state_digest: coordinationAuthorityStateDigestV3(desired),
         reconciler: {
             readStateDigest: () => {
                 const heartbeat = readHeartbeat(input.coordRoot, subject);
                 if (!heartbeat || heartbeat.v3_generation_id !== expected.v3_generation_id) {
                     throw new LiveCoordinationAuthorityV3Error(`heartbeat_generation_mismatch:${subject}`);
                 }
-                return authorityStateDigest(heartbeat);
+                return coordinationAuthorityStateDigestV3(heartbeat);
             },
             apply: (_mutation) => apply(),
         },
@@ -217,7 +451,7 @@ function requireHeartbeat(input, owner) {
         throw new LiveCoordinationAuthorityV3Error(`heartbeat_missing:${owner}`);
     return heartbeat;
 }
-function authorityStateDigest(heartbeat) {
+export function coordinationAuthorityStateDigestV3(heartbeat) {
     return sha256V3(canonicalJsonV3({
         instance_id: heartbeat.v3_instance_id ?? heartbeat.instance_id,
         generation_id: heartbeat.v3_generation_id ?? null,

package/dist/core/agents/live-lifecycle-v3.js

@@ -73,7 +73,12 @@ function recordObservation(input, eventType, payload) {
         monotonic_ns: process.hrtime.bigint().toString(),
     };
     const event = buildEventV3(eventType, { ...common, payload });
-    writeEventV3(input.coordRoot, event);
+    const durability = writeEventV3(input.coordRoot, event, {
+        expectedGenesisId: control.genesis.event.payload.genesis_id,
+    });
+    if (durability.state === "epoch_replaced") {
+        throw new LiveCoordinationAuthorityV3Error("epoch_replaced");
+    }
     return { state: "recorded", event };
 }
 function withAttestedAdapter(input) {

package/dist/core/agents/live-observation-v3.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"live-observation-v3.d.ts","sourceRoot":"","sources":["../../../src/core/agents/live-observation-v3.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAQ7C,OAAO,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAC;AAIrE,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,kCAAkC,CAAC;AAWtF,YAAY,EAAE,6BAA6B,EAAE,MAAM,kCAAkC,CAAC;AAEtF,MAAM,WAAW,wCAAwC;IACvD,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,eAAe,EAAE,MAAM,CAAC;IACxB,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,EAAE,6BAA6B,CAAC;IAC3C,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,yCAAyC;IACxD,KAAK,EAAE,UAAU,CAAC;IAClB,KAAK,EAAE,OAAO,CAAC;CAChB;AAED;;;;GAIG;AACH,wBAAgB,mCAAmC,CACjD,KAAK,EAAE,wCAAwC,GAC9C,yCAAyC,CAuJ3C;AAkBD,MAAM,MAAM,sCAAsC,GAAG,OAAO,CAC1D,WAAW,EACX,6BAA6B,CAAC,YAAY,CAAC,CAC5C,CAAC"}
+{"version":3,"file":"live-observation-v3.d.ts","sourceRoot":"","sources":["../../../src/core/agents/live-observation-v3.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAQ7C,OAAO,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAC;AAIrE,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,kCAAkC,CAAC;AAWtF,YAAY,EAAE,6BAA6B,EAAE,MAAM,kCAAkC,CAAC;AAEtF,MAAM,WAAW,wCAAwC;IACvD,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,eAAe,EAAE,MAAM,CAAC;IACxB,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,EAAE,6BAA6B,CAAC;IAC3C,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,yCAAyC;IACxD,KAAK,EAAE,UAAU,CAAC;IAClB,KAAK,EAAE,OAAO,CAAC;CAChB;AAED;;;;GAIG;AACH,wBAAgB,mCAAmC,CACjD,KAAK,EAAE,wCAAwC,GAC9C,yCAAyC,CA4J3C;AAkBD,MAAM,MAAM,sCAAsC,GAAG,OAAO,CAC1D,WAAW,EACX,6BAA6B,CAAC,YAAY,CAAC,CAC5C,CAAC"}

package/dist/core/agents/live-observation-v3.js

@@ -138,7 +138,12 @@ export function recordLiveCoordinationObservationV3(input) {
             break;
         }
     }
-    writeEventV3(input.coordRoot, event);
+    const durability = writeEventV3(input.coordRoot, event, {
+        expectedGenesisId: control.genesis.event.payload.genesis_id,
+    });
+    if (durability.state === "epoch_replaced") {
+        throw new LiveCoordinationAuthorityV3Error("epoch_replaced");
+    }
     return { state: "recorded", event };
 }
 function safeToken(value) {

package/dist/core/agents/mailbox.d.ts

@@ -0,0 +1,92 @@
+/**
+ * Name-addressed durable mailbox.
+ *
+ * Peer messaging used to require a live recipient: the sender resolved a name
+ * to a running instance and wrote into that instance's journal. Two failures
+ * followed from that. A message to a name whose session had ended was refused
+ * outright, so the sender spent a long sequence of discovery calls looking for
+ * somewhere else to put it. A message to a live peer was accepted but never
+ * shown to them, because nothing surfaces another session's journal.
+ *
+ * This module addresses the durable persona name instead of the instance, so a
+ * message can be queued before its recipient exists. Delivery happens on the
+ * recipient's side: their next SessionStart or prompt drains the queue, shows
+ * the messages, and records them in their journal.
+ *
+ * Storage: `.harnery/mailbox/<slug>.jsonl`, one JSON record per line, appended
+ * by senders and removed by an atomic claim on the recipient's side. Delivered
+ * records are appended to `.harnery/mailbox/delivered/<slug>.jsonl` for audit.
+ *
+ * Related but distinct: `core/inbox` is an instance-keyed transport with a
+ * storage-framework service behind it. This mailbox is name-keyed, file-only,
+ * and follows the same shape as council manifests and journals.
+ */
+export declare const MAILBOX_MESSAGE_SCHEMA: "harnery.mailbox-message/v1";
+/** Per-message body ceiling. Larger payloads belong in a managed artifact, with
+ * the path sent as the message. */
+export declare const MAX_BODY_BYTES = 4000;
+/** Pending messages held for one name before senders are refused. */
+export declare const MAX_PENDING = 25;
+export interface MailboxMessageV1 {
+    schema: typeof MAILBOX_MESSAGE_SCHEMA;
+    message_id: string;
+    /** Bare display name the sender addressed (registry casing when known). */
+    to_name: string;
+    from_name: string;
+    from_instance_id: string;
+    created_at: string;
+    body: string;
+    /** True when the sender already appended this to a live recipient's journal,
+     * so the drain surfaces it without writing a duplicate entry. */
+    journaled: boolean;
+}
+export type MailboxCapacityReason = "body_limit" | "pending_limit";
+export declare class MailboxCapacityError extends Error {
+    readonly reason_code: MailboxCapacityReason;
+    readonly current: number;
+    readonly limit: number;
+    constructor(reason_code: MailboxCapacityReason, current: number, limit: number);
+}
+/** Strip an `agent-` prefix and normalize to the registry's bare form. */
+export declare function bareAgentName(raw: string): string;
+export declare function mailboxDir(coordRoot: string): string;
+export declare function mailboxPath(coordRoot: string, name: string): string;
+/** Every name a message may be addressed to: live sessions, the durable
+ * identity registry, and the built-in name pool. A name outside all three is a
+ * typo, and queueing it would silently swallow the message. */
+export declare function isAddressableName(coordRoot: string, name: string): boolean;
+/** Names close enough to a miss to be worth suggesting (prefix or one edit). */
+export declare function suggestNames(coordRoot: string, name: string, limit?: number): string[];
+export interface QueueInput {
+    coordRoot: string;
+    toName: string;
+    fromName: string;
+    fromInstanceId: string;
+    body: string;
+    journaled?: boolean;
+}
+export interface QueueResult {
+    message: MailboxMessageV1;
+    path: string;
+    pending: number;
+}
+/**
+ * Append one message to a name's mailbox. Throws `MailboxCapacityError` when
+ * the body or the pending queue is over its ceiling; the caller turns that into
+ * an actionable CLI error.
+ */
+export declare function queueMailboxMessage(input: QueueInput): QueueResult;
+/** Pending messages for a name, without claiming them. */
+export declare function peekMailbox(coordRoot: string, name: string): MailboxMessageV1[];
+/**
+ * Claim and return every pending message for a name.
+ *
+ * The claim is an atomic rename, so two sessions sharing a name cannot deliver
+ * the same message twice: whichever rename wins owns the batch. Claimed records
+ * are appended to the delivered archive before the claim file is removed, so a
+ * crash between the two leaves an auditable copy rather than a silent loss.
+ */
+export declare function drainMailbox(coordRoot: string, name: string): MailboxMessageV1[];
+/** Render a drained batch as the context block a recipient reads. */
+export declare function formatMailboxDelivery(coordRoot: string, messages: readonly MailboxMessageV1[]): string;
+//# sourceMappingURL=mailbox.d.ts.map

package/dist/core/agents/mailbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mailbox.d.ts","sourceRoot":"","sources":["../../../src/core/agents/mailbox.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAqBH,eAAO,MAAM,sBAAsB,EAAG,4BAAqC,CAAC;AAE5E;mCACmC;AACnC,eAAO,MAAM,cAAc,OAAO,CAAC;AACnC,qEAAqE;AACrE,eAAO,MAAM,WAAW,KAAK,CAAC;AAI9B,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,OAAO,sBAAsB,CAAC;IACtC,UAAU,EAAE,MAAM,CAAC;IACnB,2EAA2E;IAC3E,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,MAAM,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb;qEACiE;IACjE,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,MAAM,qBAAqB,GAAG,YAAY,GAAG,eAAe,CAAC;AAEnE,qBAAa,oBAAqB,SAAQ,KAAK;IAE3C,QAAQ,CAAC,WAAW,EAAE,qBAAqB;IAC3C,QAAQ,CAAC,OAAO,EAAE,MAAM;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM;gBAFb,WAAW,EAAE,qBAAqB,EAClC,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM;CAOzB;AAED,0EAA0E;AAC1E,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAGjD;AAYD,wBAAgB,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAEpD;AAED,wBAAgB,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAEnE;AAqBD;;+DAE+D;AAC/D,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAU1E;AAED,gFAAgF;AAChF,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,SAAI,GAAG,MAAM,EAAE,CAiBjF;AAiBD,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,gBAAgB,CAAC;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,UAAU,GAAG,WAAW,CA6BlE;AAED,0DAA0D;AAC1D,wBAAgB,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,gBAAgB,EAAE,CAa/E;AAED;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,gBAAgB,EAAE,CAmDhF;AA8CD,qEAAqE;AACrE,wBAAgB,qBAAqB,CACnC,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,SAAS,gBAAgB,EAAE,GACpC,MAAM,CAcR"}