harnery 0.43.0 → 0.45.0

package/dist/commands/turn-rollback.d.ts

@@ -0,0 +1,5 @@
+import type { Command } from "commander";
+import type { EmitContext, HarneryProgramContext } from "../commander.js";
+/** Explicit turn boundaries; hooks cannot infer provider ownership or path scope. */
+export declare function registerTurnRollbackCommand(program: Command, emit: EmitContext, context?: HarneryProgramContext): void;
+//# sourceMappingURL=turn-rollback.d.ts.map

package/dist/commands/turn-rollback.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"turn-rollback.d.ts","sourceRoot":"","sources":["../../src/commands/turn-rollback.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EAAE,WAAW,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAa1E,qFAAqF;AACrF,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,OAAO,EAChB,IAAI,EAAE,WAAW,EACjB,OAAO,CAAC,EAAE,qBAAqB,GAC9B,IAAI,CA2FN"}

package/dist/commands/turn-rollback.js

@@ -0,0 +1,76 @@
+import { monorepoRoot } from "../core/agents/index.js";
+import { applyTurnRollback, beginTurnRollback, inspectTurnRollback, prepareTurnRollback, sealTurnRollback, } from "../core/turn-rollback/index.js";
+import { readJsonRecord } from "../core/workflow/durable-record.js";
+import { readWorkspaceBinding } from "../core/workflow/workspaces/state.js";
+/** Explicit turn boundaries; hooks cannot infer provider ownership or path scope. */
+export function registerTurnRollbackCommand(program, emit, context) {
+    const command = program
+        .command("turn-rollback")
+        .description("Capture and review exact-path content rollback in an owned workspace");
+    const run = (operation) => async (options) => {
+        try {
+            const coordRoot = context?.resolveCoordRoot?.() ?? context?.repoRoot ?? monorepoRoot();
+            if (!coordRoot)
+                throw new Error("project coordination root is unavailable");
+            emit.config({ format: "json" });
+            const result = await operation(coordRoot, options);
+            emit.data(result);
+            if (result &&
+                typeof result === "object" &&
+                "status" in result &&
+                result.status === "unknown")
+                emit.setExitCode(1);
+        }
+        catch (error) {
+            emit.error({ code: "turn_rollback_refused", message: String(error) });
+            emit.setExitCode(1);
+        }
+    };
+    const binding = (root, options) => {
+        const value = readWorkspaceBinding(root, "local-git-worktree", options.binding);
+        if (!value)
+            throw new Error("immutable workspace binding was not found");
+        return value;
+    };
+    command
+        .command("begin")
+        .description("Capture exact literal paths before a turn")
+        .requiredOption("--binding <id>", "Owned workspace binding ID")
+        .requiredOption("--turn <id>", "Caller turn identity")
+        .requiredOption("--generation <number>", "Increasing turn generation")
+        .requiredOption("--path <file...>", "Exact relative file paths, including planned new files")
+        .action(run((root, options) => beginTurnRollback(root, {
+        binding: binding(root, options),
+        turn: { turn_id: options.turn, generation: Number(options.generation) },
+        paths: options.path,
+    })));
+    for (const operation of ["seal", "prepare", "show"]) {
+        command
+            .command(`${operation} <capture-id>`)
+            .description(`${operation} an exact turn capture`)
+            .requiredOption("--binding <id>", "Owned workspace binding ID")
+            .action((id, options) => run((root, opts) => {
+            const input = { binding: binding(root, opts), capture_id: id };
+            return operation === "seal"
+                ? sealTurnRollback(root, input)
+                : operation === "prepare"
+                    ? prepareTurnRollback(root, input)
+                    : inspectTurnRollback(root, input);
+        })(options));
+    }
+    command
+        .command("apply")
+        .description("Preview a saved proposal, or apply it after exact confirmation")
+        .requiredOption("--binding <id>", "Owned workspace binding ID")
+        .requiredOption("--plan <file>", "Saved JSON proposal returned by prepare")
+        .option("--yes", "Apply this exact proposal; preview is the default")
+        .option("--actor <name>", "Who authorized the restore")
+        .option("--reason <text>", "Why this turn is being restored")
+        .action(run((root, options) => applyTurnRollback(root, {
+        binding: binding(root, options),
+        plan: readJsonRecord(options.plan, "rollback proposal"),
+        yes: options.yes,
+        actor: options.actor,
+        reason: options.reason,
+    })));
+}

package/dist/commands/workflow.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"workflow.d.ts","sourceRoot":"","sources":["../../src/commands/workflow.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AA0EnD,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,GAAG,IAAI,CAmvBjF"}
+{"version":3,"file":"workflow.d.ts","sourceRoot":"","sources":["../../src/commands/workflow.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAmFnD,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,GAAG,IAAI,CAqyBjF"}

package/dist/commands/workflow.js

@@ -472,10 +472,13 @@ export function registerWorkflowCommand(program, emit) {
     });
     workflow
         .command("reclaim <run-id>")
-        .description("Resolve a workspace preserved because it was dirty: salvage the work to its branch, then release.")
+        .description("Preview reclaim of an inactive owned workspace, or confirm salvage or discard and release.")
         .option("--yes", "Confirm that this commits or discards uncommitted work, then releases")
         .option("--discard", "Throw the uncommitted work away instead of salvaging it")
-        .option("--json", "Emit the reclaim preparation and cleanup result as JSON")
+        .option("--unknown-liveness <sha256>", "Recover unknown evidence pinned by the preview digest; active evidence still refuses")
+        .option("--actor <id>", "Actor responsible for an audited recovery")
+        .option("--reason <text>", "Reason for an audited recovery")
+        .option("--json", "Emit the reclaim preview or confirmed result as JSON")
         .action(async (runId, opts) => {
         const coordRoot = resolveCoordRoot();
         if (!coordRoot) {
@@ -485,50 +488,85 @@ export function registerWorkflowCommand(program, emit) {
             });
             process.exit(1);
         }
-        if (!opts.yes) {
-            emit.error({
-                code: "reclaim_confirmation_required",
-                message: opts.discard
-                    ? "reclaim --discard permanently destroys uncommitted work; pass --yes to confirm"
-                    : "workspace reclaim commits uncommitted work to its branch and then releases the worktree; pass --yes to confirm",
-            });
-            process.exit(1);
-        }
         try {
-            const { inspectWorkflowWorkspace, prepareReclaim, cleanupWorkspace } = await import("../core/workflow/index.js");
-            const inspection = inspectWorkflowWorkspace(coordRoot, runId);
-            if (!inspection.ok) {
-                emit.error({ code: "workflow_reclaim_failed", message: inspection.error });
-                process.exit(1);
-            }
-            const allocation = inspection.value.allocation;
-            if (!allocation) {
+            const { createLocalGitWorktreeProvider, readWorkflowRunManifest } = await import("../core/workflow/index.js");
+            const binding = readWorkflowRunManifest(coordRoot, runId).execution.workspace_binding;
+            if (binding?.provider.id !== "local-git-worktree") {
                 emit.error({
                     code: "workflow_reclaim_unavailable",
                     message: `run ${runId} has no provider-owned Git workspace to reclaim`,
                 });
                 process.exit(1);
             }
-            const preparation = prepareReclaim({
-                worktreePath: allocation.active_root,
+            const provider = createLocalGitWorktreeProvider({ coordRoot });
+            const result = await provider.reclaim(binding, {
                 mode: opts.discard ? "discard" : "salvage",
-                runId,
+                yes: opts.yes,
+                unknownLiveness: opts.unknownLiveness
+                    ? {
+                        evidenceSha256: opts.unknownLiveness,
+                        actor: opts.actor,
+                        reason: opts.reason,
+                    }
+                    : undefined,
             });
-            // Cleanup still owns removal. Reclaim only changes whether the tree it
-            // finds is dirty, so there is one audited release path, not two.
-            const provider = await builtInProviderForRun(coordRoot, runId);
-            const cleanup = await cleanupWorkspace({ coordRoot, runId, provider });
             if (opts.json) {
                 emit.config({ format: "json" });
-                emit.data({ preparation, cleanup });
+                emit.data(result);
+                return;
+            }
+            if (result.action === "preview") {
+                const holders = result.lease_holder.map((holder) => `${holder.scope}: ${holder.owner_id ?? "unknown"}${holder.pid ? ` (pid ${holder.pid})` : ""}${holder.detail ? `; ${holder.detail}` : ""}`);
+                emit.text(`reclaim preview: ${result.run_id}\n` +
+                    `mode: ${result.mode}\nliveness: ${result.liveness}\nownership: ${result.ownership}\n` +
+                    `evidence sha256: ${result.evidence_sha256}\n` +
+                    `lease holder: ${holders.length > 0 ? holders.join(", ") : "none observed"}\n` +
+                    `dirty paths: ${result.dirty_paths === null ? "unknown" : result.dirty_paths.length > 0 ? result.dirty_paths.join(", ") : "none"}\n` +
+                    (result.ownership_detail ? `ownership detail: ${result.ownership_detail}\n` : "") +
+                    `Pass --yes to confirm ${result.mode} and release after all checks pass.\n`);
+                return;
+            }
+            emit.text(`reclaim ${result.preparation.action}: ${result.preparation.detail}\n` +
+                `workspace cleanup ${result.cleanup.status}: ${result.cleanup.binding_id}\n`);
+        }
+        catch (error) {
+            emit.error({
+                code: error instanceof Error && "code" in error && typeof error.code === "string"
+                    ? error.code
+                    : "workflow_reclaim_failed",
+                message: error instanceof Error ? error.message : String(error),
+            });
+            process.exit(1);
+        }
+    });
+    workflow
+        .command("unlock <run-id>")
+        .description("Preview or explicitly retire one exact resume lock whose local owner is proven dead.")
+        .option("--lock-sha256 <sha256>", "Exact lock identity digest returned by the preview")
+        .option("--actor <id>", "Actor responsible for the recovery")
+        .option("--reason <text>", "Reason for the recovery")
+        .option("--yes", "Confirm removal after dead-owner and exact-lock checks")
+        .option("--json", "Emit the recovery preview or result as JSON")
+        .action(async (runId, opts) => {
+        try {
+            const coordRoot = resolveCoordRoot();
+            if (!coordRoot)
+                throw new Error("no .harnery/ coordination root found");
+            const { recoverWorkflowResumeLease } = await import("../core/workflow/index.js");
+            const result = recoverWorkflowResumeLease(coordRoot, runId, opts);
+            if (opts.json) {
+                emit.config({ format: "json" });
+                emit.data(result);
                 return;
             }
-            emit.text(`reclaim ${preparation.action}: ${preparation.detail}\n` +
-                `workspace cleanup ${cleanup.status}: ${cleanup.binding_id}\n`);
+            emit.text(`resume lock ${result.action}: ${runId}\nowner: ${result.owner_state}\nlock sha256: ${result.lock_sha256 ?? "absent"}\n` +
+                (result.action === "preview"
+                    ? "Pass --lock-sha256, --actor, --reason and --yes to confirm exact dead-owner recovery.\n"
+                    : `recovery: ${result.recovery_id}\n`));
         }
         catch (error) {
             emit.error({
-                code: "workflow_reclaim_failed",
+                code: "workflow_resume_unlock_failed",
                 message: error instanceof Error ? error.message : String(error),
             });
             process.exit(1);

package/dist/core/agents/coord-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"coord-client.d.ts","sourceRoot":"","sources":["../../../src/core/agents/coord-client.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAeH;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAWhE;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,MAAM,CAI5E;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAOhF;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,IAAI,MAAM,GAAG,IAAI,CAE5C;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,GAAE,MAAsB,GAAG,MAAM,GAAG,IAAI,CA+B7E;AAED,iEAAiE;AACjE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAE7D;AAeD;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAGtD;AAiED,qEAAqE;AACrE,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAIvD;AAED,+EAA+E;AAC/E,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAG1D;AAED,mFAAmF;AACnF,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAExE;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CA2CxD;AAgCD;;;;;;;;;;;;GAYG;AACH,wBAAgB,YAAY,IAAI,MAAM,GAAG,IAAI,CAE5C;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,IAAI;IACxC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,MAAM,EAAE,KAAK,GAAG,QAAQ,GAAG,iBAAiB,GAAG,aAAa,GAAG,kBAAkB,GAAG,MAAM,CAAC;CAC5F,CAsEA;AAED;;;;;;;;;GASG;AACH,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,MAAM,GACX;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAsB5C;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG;IAClD,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,MAAM,EAAE,QAAQ,GAAG,iBAAiB,GAAG,MAAM,CAAC;CAC/C,CAyBA;AAyBD,sFAAsF;AACtF;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,IAAI,MAAM,GAAG,IAAI,CAEtD;AAuCD;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAEpE;AAED;;;;;;GAMG;AACH,wBAAgB,gCAAgC,CAC9C,IAAI,EAAE,MAAM,GACX;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;CAAE,GAAG,IAAI,CAmB9C;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAOpE"}
+{"version":3,"file":"coord-client.d.ts","sourceRoot":"","sources":["../../../src/core/agents/coord-client.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAeH;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAWhE;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,MAAM,CAI5E;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAOhF;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,IAAI,MAAM,GAAG,IAAI,CAE5C;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,GAAE,MAAsB,GAAG,MAAM,GAAG,IAAI,CA+B7E;AAED,iEAAiE;AACjE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAE7D;AAeD;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAGtD;AAiED,qEAAqE;AACrE,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAIvD;AAED,+EAA+E;AAC/E,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAG1D;AAED,mFAAmF;AACnF,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAExE;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CA+DxD;AAgCD;;;;;;;;;;;;GAYG;AACH,wBAAgB,YAAY,IAAI,MAAM,GAAG,IAAI,CAE5C;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,IAAI;IACxC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,MAAM,EAAE,KAAK,GAAG,QAAQ,GAAG,iBAAiB,GAAG,aAAa,GAAG,kBAAkB,GAAG,MAAM,CAAC;CAC5F,CAsEA;AAED;;;;;;;;;GASG;AACH,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,MAAM,GACX;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAsB5C;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG;IAClD,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,MAAM,EAAE,QAAQ,GAAG,iBAAiB,GAAG,MAAM,CAAC;CAC/C,CAyBA;AAyBD,sFAAsF;AACtF;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,IAAI,MAAM,GAAG,IAAI,CAEtD;AAuCD;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAEpE;AAED;;;;;;GAMG;AACH,wBAAgB,gCAAgC,CAC9C,IAAI,EAAE,MAAM,GACX;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;CAAE,GAAG,IAAI,CAmB9C;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAOpE"}

package/dist/core/agents/coord-client.js

@@ -251,7 +251,25 @@ export function parsePidmapRowStartToken(row) {
  * a test can hold this one against `processStartToken` and fail on drift.
  */
 export function pidStartToken(pid) {
+    if (!Number.isInteger(pid) || pid <= 0)
+        return null;
     const forced = process.env.HARNERY_PID_PROBE;
+    if (process.platform === "win32" && forced !== "procfs" && forced !== "ps") {
+        try {
+            const out = spawnSync("powershell.exe", [
+                "-NoLogo",
+                "-NoProfile",
+                "-NonInteractive",
+                "-Command",
+                `$process = [Diagnostics.Process]::GetProcessById(${pid}); try { 'w' + $process.StartTime.ToFileTimeUtc().ToString([Globalization.CultureInfo]::InvariantCulture) } finally { $process.Dispose() }`,
+            ], { encoding: "utf8", timeout: 10_000, windowsHide: true });
+            const token = String(out.stdout ?? "").trim();
+            return out.status === 0 && /^w\d+$/.test(token) ? token : null;
+        }
+        catch {
+            return null;
+        }
+    }
     const useProcfs = forced === "procfs" || (forced !== "ps" && existsSync("/proc/self/stat"));
     // One machine, one probe. Falling back to the other on a read failure would
     // answer in the wrong dialect and read as a recycled pid.

package/dist/core/agents/live-authority-v3.d.ts

@@ -38,6 +38,7 @@ interface LiveAuthorityBaseV3 {
     nativeSessionId: string;
     adapter: Adapter;
     observationId?: string;
+    expectedGenerationId?: `gen_${string}`;
 }
 /**
  * Establish the missing generation authority for one adapter-native session,

package/dist/core/agents/live-authority-v3.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"live-authority-v3.d.ts","sourceRoot":"","sources":["../../../src/core/agents/live-authority-v3.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAI7C,OAAO,EAAE,KAAK,gBAAgB,EAA2B,MAAM,yBAAyB,CAAC;AAgBzF,OAAO,EACL,KAAK,mCAAmC,EAEzC,MAAM,iDAAiD,CAAC;AASzD,OAAO,EAEL,KAAK,SAAS,EAMf,MAAM,6BAA6B,CAAC;AAQrC,eAAO,MAAM,gCAAgC,EAAG,iBAA0B,CAAC;AAE3E,qBAAa,gCAAiC,SAAQ,KAAK;aAC7B,MAAM,EAAE,MAAM;gBAAd,MAAM,EAAE,MAAM;CAI3C;AAED,MAAM,MAAM,iCAAiC,GACzC;IAAE,KAAK,EAAE,WAAW,CAAA;CAAE,GACtB;IAAE,KAAK,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,mCAAmC,CAAA;CAAE,CAAC;AAEvE,MAAM,WAAW,oCAAoC;IACnD,KAAK,EAAE,UAAU,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;IACjB,mBAAmB,EAAE,OAAO,MAAM,EAAE,CAAC;IACrC,aAAa,EAAE,OAAO,MAAM,EAAE,CAAC;CAChC;AAED,MAAM,WAAW,uCAAuC;IACtD,KAAK,EAAE,SAAS,GAAG,QAAQ,CAAC;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,aAAa,EAAE,OAAO,MAAM,EAAE,CAAC;IAC/B,SAAS,EAAE,SAAS,CAAC;CACtB;AAED,MAAM,WAAW,+BAA+B;IAC9C,KAAK,EAAE,WAAW,GAAG,UAAU,CAAC;IAChC,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,UAAU,mBAAmB;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;IACxB,OAAO,EAAE,OAAO,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,oCAAoC,CAAC,KAAK,EAAE;IAC1D,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,eAAe,EAAE,MAAM,CAAC;IACxB,OAAO,EAAE,OAAO,CAAC;CAClB,GAAG,uCAAuC,CA6H1C;AAqED;;;;;;GAMG;AACH,wBAAgB,wCAAwC,CAAC,KAAK,EAAE;IAC9D,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,eAAe,EAAE,MAAM,CAAC;IACxB,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,SAAS,GAAG,IAAI,CAAC;IACxB,mBAAmB,CAAC,EAAE,OAAO,MAAM,EAAE,CAAC;CACvC,GAAG,+BAA+B,CAmFlC;AAED;;;;GAIG;AACH,wBAAgB,kCAAkC,CAAC,KAAK,EAAE;IACxD,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,eAAe,EAAE,MAAM,CAAC;CACzB,GAAG,oCAAoC,CAqDvC;AAED,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,mBAAmB,GAAG;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAC5C,iCAAiC,CAiCnC;AAED,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,mBAAmB,GAAG;IAC3B,KAAK,EAAE,QAAQ,GAAG,SAAS,GAAG,MAAM,CAAC;IACrC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GACA,iCAAiC,CAoCnC;AAED,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,mBAAmB,GAAG;IAC3B,SAAS,EAAE,UAAU,GAAG,UAAU,CAAC;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CAC3B,GACA,iCAAiC,CAwCnC;AAED,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,mBAAmB,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAChE,iCAAiC,CAwBnC;AAuDD,wBAAgB,2BAA2B,CAAC,SAAS,EAAE,MAAM,GAAG,gBAAgB,CAI/E;AAaD,wBAAgB,kCAAkC,CAAC,SAAS,EAAE,SAAS,GAAG,UAAU,MAAM,EAAE,CAa3F"}
+{"version":3,"file":"live-authority-v3.d.ts","sourceRoot":"","sources":["../../../src/core/agents/live-authority-v3.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAI7C,OAAO,EAAE,KAAK,gBAAgB,EAA2B,MAAM,yBAAyB,CAAC;AAgBzF,OAAO,EACL,KAAK,mCAAmC,EAEzC,MAAM,iDAAiD,CAAC;AASzD,OAAO,EAEL,KAAK,SAAS,EAMf,MAAM,6BAA6B,CAAC;AAQrC,eAAO,MAAM,gCAAgC,EAAG,iBAA0B,CAAC;AAE3E,qBAAa,gCAAiC,SAAQ,KAAK;aAC7B,MAAM,EAAE,MAAM;gBAAd,MAAM,EAAE,MAAM;CAI3C;AAED,MAAM,MAAM,iCAAiC,GACzC;IAAE,KAAK,EAAE,WAAW,CAAA;CAAE,GACtB;IAAE,KAAK,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,mCAAmC,CAAA;CAAE,CAAC;AAEvE,MAAM,WAAW,oCAAoC;IACnD,KAAK,EAAE,UAAU,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;IACjB,mBAAmB,EAAE,OAAO,MAAM,EAAE,CAAC;IACrC,aAAa,EAAE,OAAO,MAAM,EAAE,CAAC;CAChC;AAED,MAAM,WAAW,uCAAuC;IACtD,KAAK,EAAE,SAAS,GAAG,QAAQ,CAAC;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,aAAa,EAAE,OAAO,MAAM,EAAE,CAAC;IAC/B,SAAS,EAAE,SAAS,CAAC;CACtB;AAED,MAAM,WAAW,+BAA+B;IAC9C,KAAK,EAAE,WAAW,GAAG,UAAU,CAAC;IAChC,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,UAAU,mBAAmB;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;IACxB,OAAO,EAAE,OAAO,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,oBAAoB,CAAC,EAAE,OAAO,MAAM,EAAE,CAAC;CACxC;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,oCAAoC,CAAC,KAAK,EAAE;IAC1D,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,eAAe,EAAE,MAAM,CAAC;IACxB,OAAO,EAAE,OAAO,CAAC;CAClB,GAAG,uCAAuC,CA6H1C;AAqED;;;;;;GAMG;AACH,wBAAgB,wCAAwC,CAAC,KAAK,EAAE;IAC9D,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,eAAe,EAAE,MAAM,CAAC;IACxB,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,SAAS,GAAG,IAAI,CAAC;IACxB,mBAAmB,CAAC,EAAE,OAAO,MAAM,EAAE,CAAC;CACvC,GAAG,+BAA+B,CAmFlC;AAED;;;;GAIG;AACH,wBAAgB,kCAAkC,CAAC,KAAK,EAAE;IACxD,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,eAAe,EAAE,MAAM,CAAC;CACzB,GAAG,oCAAoC,CAqDvC;AAED,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,mBAAmB,GAAG;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAC5C,iCAAiC,CAiCnC;AAED,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,mBAAmB,GAAG;IAC3B,KAAK,EAAE,QAAQ,GAAG,SAAS,GAAG,MAAM,CAAC;IACrC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GACA,iCAAiC,CAoCnC;AAED,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,mBAAmB,GAAG;IAC3B,SAAS,EAAE,UAAU,GAAG,UAAU,CAAC;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CAC3B,GACA,iCAAiC,CAwCnC;AAED,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,mBAAmB,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAChE,iCAAiC,CAwBnC;AA8DD,wBAAgB,2BAA2B,CAAC,SAAS,EAAE,MAAM,GAAG,gBAAgB,CAI/E;AAsBD,wBAAgB,kCAAkC,CAAC,SAAS,EAAE,SAAS,GAAG,UAAU,MAAM,EAAE,CAa3F"}

package/dist/core/agents/live-authority-v3.js

@@ -419,6 +419,10 @@ function recordLiveAuthority(input, signal, observation, expected, desired, appl
         platform: livePlatformV3(),
         expected_prior_state_digest: coordinationAuthorityStateDigestV3(expected),
         desired_state_digest: coordinationAuthorityStateDigestV3(desired),
+        expected_generation_id: input.expectedGenerationId ??
+            (subject === input.owner
+                ? expected.v3_generation_id
+                : readLiveCoordinationRow(input.coordRoot, input.owner)?.v3_generation_id),
         reconciler: {
             readStateDigest: () => {
                 const heartbeat = readHeartbeat(input.coordRoot, subject);
@@ -448,9 +452,16 @@ export function liveCoordinationWriteModeV3(coordRoot) {
     return route.mode;
 }
 function requireHeartbeat(input, owner) {
+    if (input.expectedGenerationId &&
+        readLiveCoordinationRow(input.coordRoot, owner)?.v3_generation_id !== input.expectedGenerationId) {
+        throw new LiveCoordinationAuthorityV3Error("expected_generation_changed");
+    }
     const heartbeat = ensureLiveCoordinationHeartbeat(input.coordRoot, owner, owner === input.owner ? input.nativeSessionId : owner, input.adapter);
     if (!heartbeat)
         throw new LiveCoordinationAuthorityV3Error(`heartbeat_missing:${owner}`);
+    if (input.expectedGenerationId && heartbeat.v3_generation_id !== input.expectedGenerationId) {
+        throw new LiveCoordinationAuthorityV3Error("expected_generation_changed");
+    }
     return heartbeat;
 }
 export function coordinationAuthorityStateDigestV3(heartbeat) {

package/dist/core/agents/live-lifecycle-v3.d.ts

@@ -11,10 +11,12 @@ interface LiveLifecycleObservationBaseV3 {
     adapter: EventAdapterIdV3;
     observedAt?: string;
 }
-export declare function recordLiveSweepObservationV3(input: LiveLifecycleObservationBaseV3 & {
+interface LiveSweepObservationV3Input extends LiveLifecycleObservationBaseV3 {
+    expectedGenerationId: `gen_${string}` | null;
     observation: "stale_heartbeat" | "killed" | "unparseable_heartbeat" | "missing_timestamp";
     ageMs: number;
-}): LiveLifecycleObservationV3Result;
+}
+export declare function recordLiveSweepObservationV3(input: LiveSweepObservationV3Input): LiveLifecycleObservationV3Result;
 export declare function recordLiveResumeObservationV3(input: LiveLifecycleObservationBaseV3): LiveLifecycleObservationV3Result;
 export {};
 //# sourceMappingURL=live-lifecycle-v3.d.ts.map

package/dist/core/agents/live-lifecycle-v3.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"live-lifecycle-v3.d.ts","sourceRoot":"","sources":["../../../src/core/agents/live-lifecycle-v3.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAGnE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAC;AAaxD,MAAM,MAAM,gCAAgC,GAAG;IAAE,KAAK,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,CAAC;AAErF,UAAU,8BAA8B;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,eAAe,EAAE,MAAM,CAAC;IACxB,OAAO,EAAE,gBAAgB,CAAC;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,8BAA8B,GAAG;IACtC,WAAW,EAAE,iBAAiB,GAAG,QAAQ,GAAG,uBAAuB,GAAG,mBAAmB,CAAC;IAC1F,KAAK,EAAE,MAAM,CAAC;CACf,GACA,gCAAgC,CAOlC;AAED,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,8BAA8B,GACpC,gCAAgC,CAQlC"}
+{"version":3,"file":"live-lifecycle-v3.d.ts","sourceRoot":"","sources":["../../../src/core/agents/live-lifecycle-v3.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAGnE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAC;AAcxD,MAAM,MAAM,gCAAgC,GAAG;IAAE,KAAK,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,CAAC;AAErF,UAAU,8BAA8B;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,eAAe,EAAE,MAAM,CAAC;IACxB,OAAO,EAAE,gBAAgB,CAAC;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,UAAU,2BAA4B,SAAQ,8BAA8B;IAC1E,oBAAoB,EAAE,OAAO,MAAM,EAAE,GAAG,IAAI,CAAC;IAC7C,WAAW,EAAE,iBAAiB,GAAG,QAAQ,GAAG,uBAAuB,GAAG,mBAAmB,CAAC;IAC1F,KAAK,EAAE,MAAM,CAAC;CACf;AAED,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,2BAA2B,GACjC,gCAAgC,CAqBlC;AAED,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,8BAA8B,GACpC,gCAAgC,CAalC"}

package/dist/core/agents/live-lifecycle-v3.js

@@ -3,17 +3,27 @@ import { buildEventV3 } from "../events/v3/builder.js";
 import { normalizeNativeIdV3 } from "../events/v3/canonical.js";
 import { readEventV3ControlState } from "../events/v3/control.js";
 import { fingerprintContextV3 } from "../events/v3/fingerprint-keys.js";
+import { withGenerationCustodyV3 } from "../events/v3/generation-custody.js";
 import { liveInstanceIdV3, livePlatformV3, resolveLiveEventLedgerRouteV3, } from "../events/v3/live-routing.js";
 import { readJoinableHookProducerStateV3 } from "../events/v3/producers/recorder.js";
 import { writeEventV3 } from "../events/v3/writer.js";
 import { LiveCoordinationAuthorityV3Error } from "./live-authority-v3.js";
 import { liveCoordinationAdapterV3 } from "./state/live-coordination-view.js";
 export function recordLiveSweepObservationV3(input) {
-    return recordObservation(input, "lifecycle.sweep_observed", {
-        subject_instance_id: liveInstanceIdV3(input.owner),
-        observation: input.observation,
-        provisional: true,
-        age_ms: Math.max(0, Math.floor(input.ageMs)),
+    input = { ...input };
+    // Reject stale observations before preparing durable custody state. The
+    // in-custody checks cover replacement while acquiring custody and reentry.
+    requireSweepHookState(input);
+    return withGenerationCustodyV3(input.coordRoot, [liveInstanceIdV3(input.owner)], () => {
+        requireSweepHookState(input);
+        return recordObservation(input, "lifecycle.sweep_observed", {
+            subject_instance_id: liveInstanceIdV3(input.owner),
+            observation: input.observation,
+            provisional: true,
+            age_ms: Math.max(0, Math.floor(input.ageMs)),
+        }, () => {
+            requireSweepHookState(input);
+        });
     });
 }
 export function recordLiveResumeObservationV3(input) {
@@ -23,9 +33,9 @@ export function recordLiveResumeObservationV3(input) {
         prior_generation_id: hook.generation_id,
         continuity: "native",
         evidence_reference: "heartbeat_recreated",
-    });
+    }, () => { });
 }
-function recordObservation(input, eventType, payload) {
+function recordObservation(input, eventType, payload, beforeWrite) {
     const route = resolveLiveEventLedgerRouteV3(input.coordRoot);
     if (route.state === "blocked")
         throw new LiveCoordinationAuthorityV3Error(route.reason);
@@ -73,6 +83,7 @@ function recordObservation(input, eventType, payload) {
         monotonic_ns: process.hrtime.bigint().toString(),
     };
     const event = buildEventV3(eventType, { ...common, payload });
+    beforeWrite();
     const durability = writeEventV3(input.coordRoot, event, {
         expectedGenesisId: control.genesis.event.payload.genesis_id,
     });
@@ -81,6 +92,16 @@ function recordObservation(input, eventType, payload) {
     }
     return { state: "recorded", event };
 }
+function requireSweepHookState(input) {
+    if (typeof input.expectedGenerationId !== "string" ||
+        !/^gen_[a-zA-Z0-9._-]+$/.test(input.expectedGenerationId)) {
+        throw new LiveCoordinationAuthorityV3Error("hook_generation_not_joinable");
+    }
+    const hook = requireHookState(withAttestedAdapter(input));
+    if (hook.generation_id !== input.expectedGenerationId) {
+        throw new LiveCoordinationAuthorityV3Error("expected_generation_changed");
+    }
+}
 function withAttestedAdapter(input) {
     const adapter = liveCoordinationAdapterV3(input.coordRoot, input.owner);
     if (!adapter)

package/dist/core/agents/mailbox.d.ts

@@ -9,13 +9,14 @@
  * shown to them, because nothing surfaces another session's journal.
  *
  * This module addresses the durable persona name instead of the instance, so a
- * message can be queued before its recipient exists. Delivery happens on the
- * recipient's side: their next SessionStart or prompt drains the queue, shows
- * the messages, and records them in their journal.
+ * message can be queued before its recipient exists. The recipient's next
+ * SessionStart or prompt can drain the queue for injection. A drain does not
+ * confirm that the adapter emitted the context or that anyone read it.
  *
  * Storage: `.harnery/mailbox/<slug>.jsonl`, one JSON record per line, appended
- * by senders and removed by an atomic claim on the recipient's side. Delivered
- * records are appended to `.harnery/mailbox/delivered/<slug>.jsonl` for audit.
+ * by senders and removed by an atomic claim on the recipient's side. Drained
+ * records are appended to `.harnery/mailbox/delivered/<slug>.jsonl` for audit,
+ * with injection explicitly unconfirmed.
  *
  * Related but distinct: `core/inbox` is an instance-keyed transport with a
  * storage-framework service behind it. This mailbox is name-keyed, file-only,
@@ -81,10 +82,10 @@ export declare function peekMailbox(coordRoot: string, name: string): MailboxMes
 /**
  * Claim and return every pending message for a name.
  *
- * The claim is an atomic rename, so two sessions sharing a name cannot deliver
+ * The claim is an atomic rename, so two sessions sharing a name cannot claim
  * the same message twice: whichever rename wins owns the batch. Claimed records
- * are appended to the delivered archive before the claim file is removed, so a
- * crash between the two leaves an auditable copy rather than a silent loss.
+ * are archived before the claim file is removed. The archive records only the
+ * drain; output, recipient read, and turn completion remain unconfirmed.
  */
 export declare function drainMailbox(coordRoot: string, name: string): MailboxMessageV1[];
 /** Render a drained batch as the context block a recipient reads. */

package/dist/core/agents/mailbox.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mailbox.d.ts","sourceRoot":"","sources":["../../../src/core/agents/mailbox.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAqBH,eAAO,MAAM,sBAAsB,EAAG,4BAAqC,CAAC;AAE5E;mCACmC;AACnC,eAAO,MAAM,cAAc,OAAO,CAAC;AACnC,qEAAqE;AACrE,eAAO,MAAM,WAAW,KAAK,CAAC;AAI9B,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,OAAO,sBAAsB,CAAC;IACtC,UAAU,EAAE,MAAM,CAAC;IACnB,2EAA2E;IAC3E,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,MAAM,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb;qEACiE;IACjE,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,MAAM,qBAAqB,GAAG,YAAY,GAAG,eAAe,CAAC;AAEnE,qBAAa,oBAAqB,SAAQ,KAAK;IAE3C,QAAQ,CAAC,WAAW,EAAE,qBAAqB;IAC3C,QAAQ,CAAC,OAAO,EAAE,MAAM;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM;gBAFb,WAAW,EAAE,qBAAqB,EAClC,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM;CAOzB;AAED,0EAA0E;AAC1E,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAGjD;AAYD,wBAAgB,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAEpD;AAED,wBAAgB,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAEnE;AAqBD;;+DAE+D;AAC/D,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAU1E;AAED,gFAAgF;AAChF,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,SAAI,GAAG,MAAM,EAAE,CAiBjF;AAiBD,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,gBAAgB,CAAC;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,UAAU,GAAG,WAAW,CA6BlE;AAED,0DAA0D;AAC1D,wBAAgB,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,gBAAgB,EAAE,CAa/E;AAED;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,gBAAgB,EAAE,CAmDhF;AA8CD,qEAAqE;AACrE,wBAAgB,qBAAqB,CACnC,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,SAAS,gBAAgB,EAAE,GACpC,MAAM,CAcR"}
+{"version":3,"file":"mailbox.d.ts","sourceRoot":"","sources":["../../../src/core/agents/mailbox.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAqBH,eAAO,MAAM,sBAAsB,EAAG,4BAAqC,CAAC;AAE5E;mCACmC;AACnC,eAAO,MAAM,cAAc,OAAO,CAAC;AACnC,qEAAqE;AACrE,eAAO,MAAM,WAAW,KAAK,CAAC;AAI9B,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,OAAO,sBAAsB,CAAC;IACtC,UAAU,EAAE,MAAM,CAAC;IACnB,2EAA2E;IAC3E,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,MAAM,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb;qEACiE;IACjE,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,MAAM,qBAAqB,GAAG,YAAY,GAAG,eAAe,CAAC;AAEnE,qBAAa,oBAAqB,SAAQ,KAAK;IAE3C,QAAQ,CAAC,WAAW,EAAE,qBAAqB;IAC3C,QAAQ,CAAC,OAAO,EAAE,MAAM;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM;gBAFb,WAAW,EAAE,qBAAqB,EAClC,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM;CAOzB;AAED,0EAA0E;AAC1E,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAGjD;AAYD,wBAAgB,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAEpD;AAED,wBAAgB,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAEnE;AAqBD;;+DAE+D;AAC/D,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAU1E;AAED,gFAAgF;AAChF,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,SAAI,GAAG,MAAM,EAAE,CAiBjF;AAiBD,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,gBAAgB,CAAC;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,UAAU,GAAG,WAAW,CA6BlE;AAED,0DAA0D;AAC1D,wBAAgB,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,gBAAgB,EAAE,CAa/E;AAED;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,gBAAgB,EAAE,CA2DhF;AA8CD,qEAAqE;AACrE,wBAAgB,qBAAqB,CACnC,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,SAAS,gBAAgB,EAAE,GACpC,MAAM,CAcR"}

package/dist/core/agents/mailbox.js

@@ -9,13 +9,14 @@
  * shown to them, because nothing surfaces another session's journal.
  *
  * This module addresses the durable persona name instead of the instance, so a
- * message can be queued before its recipient exists. Delivery happens on the
- * recipient's side: their next SessionStart or prompt drains the queue, shows
- * the messages, and records them in their journal.
+ * message can be queued before its recipient exists. The recipient's next
+ * SessionStart or prompt can drain the queue for injection. A drain does not
+ * confirm that the adapter emitted the context or that anyone read it.
  *
  * Storage: `.harnery/mailbox/<slug>.jsonl`, one JSON record per line, appended
- * by senders and removed by an atomic claim on the recipient's side. Delivered
- * records are appended to `.harnery/mailbox/delivered/<slug>.jsonl` for audit.
+ * by senders and removed by an atomic claim on the recipient's side. Drained
+ * records are appended to `.harnery/mailbox/delivered/<slug>.jsonl` for audit,
+ * with injection explicitly unconfirmed.
  *
  * Related but distinct: `core/inbox` is an instance-keyed transport with a
  * storage-framework service behind it. This mailbox is name-keyed, file-only,
@@ -34,8 +35,8 @@ export const MAILBOX_MESSAGE_SCHEMA = "harnery.mailbox-message/v1";
 export const MAX_BODY_BYTES = 4000;
 /** Pending messages held for one name before senders are refused. */
 export const MAX_PENDING = 25;
-/** Delivered-archive ceiling; the file is truncated from the head past this. */
-const MAX_DELIVERED_BYTES = 256 * 1024;
+/** Drain-archive ceiling; the file is truncated from the head past this. */
+const MAX_ARCHIVE_BYTES = 256 * 1024;
 export class MailboxCapacityError extends Error {
     reason_code;
     current;
@@ -68,7 +69,7 @@ export function mailboxDir(coordRoot) {
 export function mailboxPath(coordRoot, name) {
     return join(mailboxDir(coordRoot), `${slugFor(name)}.jsonl`);
 }
-function deliveredPath(coordRoot, name) {
+function archivePath(coordRoot, name) {
     return join(mailboxDir(coordRoot), "delivered", `${slugFor(name)}.jsonl`);
 }
 function parseLines(content) {
@@ -196,10 +197,10 @@ export function peekMailbox(coordRoot, name) {
 /**
  * Claim and return every pending message for a name.
  *
- * The claim is an atomic rename, so two sessions sharing a name cannot deliver
+ * The claim is an atomic rename, so two sessions sharing a name cannot claim
  * the same message twice: whichever rename wins owns the batch. Claimed records
- * are appended to the delivered archive before the claim file is removed, so a
- * crash between the two leaves an auditable copy rather than a silent loss.
+ * are archived before the claim file is removed. The archive records only the
+ * drain; output, recipient read, and turn completion remain unconfirmed.
  */
 export function drainMailbox(coordRoot, name) {
     let path;
@@ -233,10 +234,16 @@ export function drainMailbox(coordRoot, name) {
     }
     if (messages.length > 0) {
         try {
-            const archive = deliveredPath(coordRoot, name);
+            const archive = archivePath(coordRoot, name);
             mkdirSync(join(mailboxDir(coordRoot), "delivered"), { recursive: true });
-            const deliveredAt = new Date().toISOString();
-            appendFileSync(archive, `${messages.map((m) => JSON.stringify({ ...m, delivered_at: deliveredAt })).join("\n")}\n`, "utf8");
+            const drainedAt = new Date().toISOString();
+            appendFileSync(archive, `${messages
+                .map((m) => JSON.stringify({
+                ...m,
+                drained_at: drainedAt,
+                delivery_status: "injection-unconfirmed",
+            }))
+                .join("\n")}\n`, "utf8");
             trimArchive(archive);
         }
         catch {
@@ -291,7 +298,7 @@ function sweepStaleClaims(coordRoot) {
 }
 function trimArchive(path) {
     try {
-        if (statSync(path).size <= MAX_DELIVERED_BYTES)
+        if (statSync(path).size <= MAX_ARCHIVE_BYTES)
             return;
         const lines = readFileSync(path, "utf8").split("\n").filter(Boolean);
         const keep = lines.slice(Math.floor(lines.length / 2));
@@ -307,8 +314,8 @@ export function formatMailboxDelivery(coordRoot, messages) {
         return "";
     const bin = resolveBinName(coordRoot);
     const header = messages.length === 1
-        ? `Message from a peer agent (delivered now, recorded in your journal):`
-        : `${messages.length} messages from peer agents (delivered now, recorded in your journal):`;
+        ? `Message from a peer agent (prepared for injection, recorded in your journal):`
+        : `${messages.length} messages from peer agents (prepared for injection, recorded in your journal):`;
     const body = messages
         .map((m) => {
         const when = m.created_at.replace("T", " ").replace(/\.\d+Z$/, "Z");

package/dist/core/agents/render/prompt-context.d.ts

@@ -55,6 +55,8 @@ export interface PromptContextOpts {
      * being bounced into a retry. Not hash-deduped, same rationale as the
      * status footer. */
     turnRitualNudge?: string;
+    /** The emitter acknowledges exactly these IDs only after output succeeds. */
+    onInboxPrepared?: (messageIds: readonly string[]) => void;
 }
 /**
  * Build the combined UserPromptSubmit additionalContext string. Returns "" when

package/dist/core/agents/render/prompt-context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"prompt-context.d.ts","sourceRoot":"","sources":["../../../../src/core/agents/render/prompt-context.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAiDH,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;8EAC0E;IAC1E,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B;kFAC8E;IAC9E,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;kFAC8E;IAC9E,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B;uEACmE;IACnE,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B;;;;wBAIoB;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,iBAAiB,GAAG,MAAM,CAkFnE;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CA6CtF"}
+{"version":3,"file":"prompt-context.d.ts","sourceRoot":"","sources":["../../../../src/core/agents/render/prompt-context.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAiDH,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;8EAC0E;IAC1E,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B;kFAC8E;IAC9E,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;kFAC8E;IAC9E,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B;uEACmE;IACnE,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B;;;;wBAIoB;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,6EAA6E;IAC7E,eAAe,CAAC,EAAE,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,KAAK,IAAI,CAAC;CAC3D;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,iBAAiB,GAAG,MAAM,CA8EnE;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CA6CtF"}

package/dist/core/agents/render/prompt-context.js

@@ -37,14 +37,14 @@ import { existsSync, mkdirSync, readdirSync, readFileSync, renameSync, rmSync, w
 import { join } from "node:path";
 import { coordEnv } from "../../../lib/env.js";
 import { endOfTurnStatusCommand, hostPromptReminder, resolveBinName } from "../../config.js";
+import { formatPeerInbox, peerInbox } from "../../inbox/peer-messages.js";
 import { readRemoteMachines } from "../../presence/index.js";
 import { readResourceStatus } from "../../resources/status.js";
-import { drainMailbox, formatMailboxDelivery } from "../mailbox.js";
 import { sessionNameDisplayBlock, sessionNameDisplayPending } from "../session-name-display.js";
 import { heartbeatPath } from "../state/heartbeat-reader.js";
 import { readLiveCoordinationRow, readLiveCoordinationRows, } from "../state/live-coordination-view.js";
 import { forkRelationLabels } from "../state/names.js";
-import { formatPendingCouncils, recordDeliveredMessages } from "./session-context.js";
+import { formatPendingCouncils } from "./session-context.js";
 /**
  * Build the combined UserPromptSubmit additionalContext string. Returns "" when
  * nothing has changed since the last call (so the caller can skip the JSON emit).
@@ -60,16 +60,12 @@ export function renderPromptContext(opts) {
     // Every name-addressed section below (messages, councils) is silently
     // skipped without it.
     const resolvedName = agentName ?? readLiveCoordinationRow(coordRoot, instanceId)?.name;
-    // 1. Peer messages. Drained first and never deduped: a message is delivered
-    // exactly once, and it is the one section here that carries new information
-    // from another agent rather than a reminder.
-    //
-    if (resolvedName) {
-        const delivered = drainMailbox(coordRoot, resolvedName);
-        if (delivered.length > 0) {
-            recordDeliveredMessages(instanceId, delivered);
-            sections.push(formatMailboxDelivery(coordRoot, delivered));
-        }
+    // 1. Instance-bound messages. Rendering is read-only; failed output leaves
+    // this same batch pending rather than losing it before a prompt sees it.
+    const delivered = peerInbox(coordRoot).prepareSurface(instanceId);
+    if (delivered.length > 0) {
+        opts.onInboxPrepared?.(delivered.map(({ message_id }) => message_id));
+        sections.push(formatPeerInbox(coordRoot, delivered));
     }
     // 2. Peer table with hash dedup.
     const peerTable = computePeerTableIfChanged(coordRoot, instanceId, sessionId);