openryoko 2026.10.8 → 2026.10.13

package/dist/src/sessions/callbacks.js

@@ -1,4 +1,6 @@
-import { getSession } from "./registry.js";
+import { turnFailureOf } from "./origin-delivery.js";
+import { getSession, insertMessage } from "./registry.js";
+import { failedByUnrequestedStop } from "./unrequested-stop.js";
 import { loadConfig } from "../shared/config.js";
 import { logger } from "../shared/logger.js";
 import { readGatewayAuthToken } from "../gateway/auth.js";
@@ -18,7 +20,7 @@ export function notifyParentSession(childSession, result, options) {
         return;
     }
     // Run asynchronously — do not await in the caller
-    _sendNotification(childSession, result).catch((err) => {
+    _sendNotification(childSession, result, { completion: true }).catch((err) => {
         logger.warn(`[callbacks] Failed to notify parent session ${childSession.parentSessionId}: ${err instanceof Error ? err.message : String(err)}`);
     });
 }
@@ -48,16 +50,44 @@ export function notifyRateLimitResumed(childSession) {
         logger.warn(`[callbacks] Failed to send resume notification: ${err instanceof Error ? err.message : String(err)}`);
     });
 }
-async function _sendNotification(childSession, result) {
+/**
+ * Whether a notification should start a turn in this parent.
+ *
+ * A parent in error is not woken: one stopped by a usage limit or a lost login
+ * would fail again, once for every child that finishes. The exception is a
+ * parent whose engine stopped without being asked to — its process died. It
+ * can run again at once, and it is usually waiting on exactly these
+ * notifications: left out, the conversation it answers in just stops.
+ *
+ * What counts is what the parent's turn failed with. That is not always what
+ * lastError reads: when the message saying so could not be delivered either,
+ * lastError holds the record of that, and the turn's failure is kept beside it.
+ */
+function wakesForNotifications(parent) {
+    return parent.status !== "error" || failedByUnrequestedStop({ status: parent.status, lastError: turnFailureOf(parent) });
+}
+const NOT_ACTED_ON = "ℹ️ Not acted on: this session was in an error state when this arrived, so no turn was started for it.";
+/**
+ * Keep a notification for a parent that is not woken: write it into the
+ * parent's transcript, where the parent finds it when it runs again and the
+ * operator sees it in the meantime. It used to be dropped, and the parent had
+ * no trace that the child had finished at all.
+ *
+ * Written straight to the registry rather than through the gateway route: the
+ * route's job is to start a turn, and this must not depend on it.
+ */
+function recordWithoutWaking(parent, childId, message) {
+    insertMessage(parent.id, "notification", `${message}\n\n${NOT_ACTED_ON}`);
+    logger.info(`[callbacks] Parent ${parent.id} is in error — recorded the notification for child ${childId} in its transcript without waking it.`);
+}
+async function _sendNotification(childSession, result, 
+/** `completion`: this reports the child's turn ending (not a status notice). */
+opts = {}) {
     const parent = getSession(childSession.parentSessionId);
     if (!parent) {
         logger.info(`[callbacks] Parent ${childSession.parentSessionId} not found for child ${childSession.id} — no notification sent.`);
         return; // Parent gone or expired
     }
-    if (parent.status === "error") {
-        logger.info(`[callbacks] Parent ${parent.id} is in error — skipping notification for child ${childSession.id}. The child's result will not reach it.`);
-        return; // Parent already in error — skip
-    }
     const employeeName = childSession.employee || "Unknown";
     const childId = childSession.id;
     let message;
@@ -69,7 +99,14 @@ async function _sendNotification(childSession, result) {
         const preview = raw.length > 200 ? raw.substring(0, 200) + "..." : raw;
         message = `📩 Employee "${employeeName}" replied in session ${childId}.\nRead the latest messages: GET /api/sessions/${childId}?last=N\n\nPreview: ${preview}`;
     }
-    await _sendRaw(childSession.parentSessionId, message);
+    if (!wakesForNotifications(parent)) {
+        recordWithoutWaking(parent, childId, message);
+        return;
+    }
+    // A successful completion names its child so the gateway can fold the ones
+    // that pile up behind a busy parent into one turn (completion-batching.ts).
+    // A failure is left unmarked: it keeps a turn of its own.
+    await _sendRaw(childSession.parentSessionId, message, opts.completion && !result.error ? childId : undefined);
 }
 /**
  * Send a hardcoded notification to the configured Discord channel.
@@ -100,7 +137,7 @@ async function _sendDiscordNotification(message) {
     }
     await _postToGateway(port, `/api/connectors/${connector}/send`, { channel, text: message }, `sending a ${connector} notification`);
 }
-async function _sendRaw(parentSessionId, message) {
+async function _sendRaw(parentSessionId, message, completionOf) {
     let port = 7777;
     try {
         const config = loadConfig();
@@ -109,7 +146,15 @@ async function _sendRaw(parentSessionId, message) {
     catch {
         // Use default port if config is unavailable
     }
-    await _postToGateway(port, `/api/sessions/${parentSessionId}/message`, { message, role: "notification" }, `notifying parent ${parentSessionId}`);
+    await _postToGateway(port, `/api/sessions/${parentSessionId}/message`, { message, role: "notification", ...(completionOf ? { completionOf } : {}) }, `notifying parent ${parentSessionId}`);
+}
+/**
+ * Wake a session on this instance's own gateway with a notification turn: the
+ * message is persisted, queued and run, and a connector-origin session answers
+ * in the conversation it came from. Rejects when the gateway does not accept it.
+ */
+export function postSessionNotification(port, sessionId, body) {
+    return _postToGateway(port, `/api/sessions/${sessionId}/message`, { ...body, role: "notification" }, `waking session ${sessionId}`);
 }
 /**
  * POST to this instance's own gateway API.

package/dist/src/sessions/callbacks.js.map

@@ -1 +1 @@
-{"version":3,"file":"callbacks.js","sourceRoot":"","sources":["../../../src/sessions/callbacks.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC7C,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAG/C;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CACjC,YAAqB,EACrB,MAA6F,EAC7F,OAAoC;IAEpC,IAAI,CAAC,YAAY,CAAC,eAAe;QAAE,OAAO;IAC1C,IAAI,OAAO,EAAE,YAAY,KAAK,KAAK,EAAE,CAAC;QACpC,wFAAwF;QACxF,0FAA0F;QAC1F,MAAM,CAAC,IAAI,CAAC,wDAAwD,YAAY,CAAC,EAAE,iCAAiC,YAAY,CAAC,eAAe,qBAAqB,CAAC,CAAC;QACvK,OAAO;IACT,CAAC;IAED,kDAAkD;IAClD,iBAAiB,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QACpD,MAAM,CAAC,IAAI,CAAC,+CAA+C,YAAY,CAAC,eAAe,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAC/B,YAAqB,EACrB,mBAA4B;IAE5B,IAAI,CAAC,YAAY,CAAC,eAAe;QAAE,OAAO;IAE1C,iBAAiB,CAAC,YAAY,EAAE;QAC9B,KAAK,EAAE,IAAI;QACX,MAAM,EAAE,iDAAiD,mBAAmB,CAAC,CAAC,CAAC,WAAW,mBAAmB,EAAE,CAAC,CAAC,CAAC,wBAAwB,qBAAqB;KAChK,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QACf,MAAM,CAAC,IAAI,CAAC,uDAAuD,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACzH,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CACpC,YAAqB;IAErB,IAAI,CAAC,YAAY,CAAC,eAAe;QAAE,OAAO;IAE1C,MAAM,YAAY,GAAG,YAAY,CAAC,QAAQ,IAAI,SAAS,CAAC;IACxD,QAAQ,CAAC,YAAY,CAAC,eAAe,EAAE,gBAAgB,YAAY,cAAc,YAAY,CAAC,EAAE,yCAAyC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QACvJ,MAAM,CAAC,IAAI,CAAC,mDAAmD,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACrH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,YAAqB,EACrB,MAA6F;IAE7F,MAAM,MAAM,GAAG,UAAU,CAAC,YAAY,CAAC,eAAgB,CAAC,CAAC;IACzD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,CAAC,IAAI,CAAC,sBAAsB,YAAY,CAAC,eAAe,wBAAwB,YAAY,CAAC,EAAE,0BAA0B,CAAC,CAAC;QACjI,OAAO,CAAC,yBAAyB;IACnC,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,sBAAsB,MAAM,CAAC,EAAE,kDAAkD,YAAY,CAAC,EAAE,yCAAyC,CAAC,CAAC;QACvJ,OAAO,CAAC,iCAAiC;IAC3C,CAAC;IAED,MAAM,YAAY,GAAG,YAAY,CAAC,QAAQ,IAAI,SAAS,CAAC;IACxD,MAAM,OAAO,GAAG,YAAY,CAAC,EAAE,CAAC;IAEhC,IAAI,OAAe,CAAC;IACpB,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,OAAO,GAAG,gBAAgB,YAAY,cAAc,OAAO,2BAA2B,MAAM,CAAC,KAAK,EAAE,CAAC;IACvG,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,IAAI,aAAa,CAAC;QAC3C,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC;QACvE,OAAO,GAAG,gBAAgB,YAAY,wBAAwB,OAAO,kDAAkD,OAAO,uBAAuB,OAAO,EAAE,CAAC;IACjK,CAAC;IAED,MAAM,QAAQ,CAAC,YAAY,CAAC,eAAgB,EAAE,OAAO,CAAC,CAAC;AACzD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAe;IAClD,wBAAwB,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QAC9C,MAAM,CAAC,IAAI,CAAC,oDAAoD,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACtH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,wBAAwB,CAAC,OAAe;IACrD,IAAI,IAAI,GAAG,IAAI,CAAC;IAChB,IAAI,SAAS,GAAG,SAAS,CAAC;IAC1B,IAAI,OAA2B,CAAC;IAEhC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,IAAI,IAAI,IAAI,CAAC;QACpC,SAAS,GAAG,MAAM,CAAC,aAAa,EAAE,SAAS,IAAI,SAAS,CAAC;QACzD,OAAO,GAAG,MAAM,CAAC,aAAa,EAAE,OAAO,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,wCAAwC;IAC1C,CAAC;IAED,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,CAAC,KAAK,CAAC,iFAAiF,CAAC,CAAC;QAChG,OAAO;IACT,CAAC;IAED,MAAM,cAAc,CAAC,IAAI,EAAE,mBAAmB,SAAS,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,aAAa,SAAS,eAAe,CAAC,CAAC;AACrI,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,eAAuB,EAAE,OAAe;IAC9D,IAAI,IAAI,GAAG,IAAI,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,IAAI,IAAI,IAAI,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,4CAA4C;IAC9C,CAAC;IAED,MAAM,cAAc,CAAC,IAAI,EAAE,iBAAiB,eAAe,UAAU,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,oBAAoB,eAAe,EAAE,CAAC,CAAC;AACnJ,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,cAAc,CAAC,IAAY,EAAE,IAAY,EAAE,IAAa,EAAE,IAAY;IACnF,MAAM,KAAK,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;IAC9C,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,oBAAoB,IAAI,GAAG,IAAI,EAAE,EAAE;QACzD,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvD;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC3B,CAAC,CAAC;IAEH,+FAA+F;IAC/F,qEAAqE;IACrE,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAEhD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,qBAAqB,GAAG,CAAC,MAAM,SAAS,IAAI,EAAE,CAAC,CAAC;IAClE,CAAC;AACH,CAAC"}
+{"version":3,"file":"callbacks.js","sourceRoot":"","sources":["../../../src/sessions/callbacks.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC1D,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC7C,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAG/C;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CACjC,YAAqB,EACrB,MAA6F,EAC7F,OAAoC;IAEpC,IAAI,CAAC,YAAY,CAAC,eAAe;QAAE,OAAO;IAC1C,IAAI,OAAO,EAAE,YAAY,KAAK,KAAK,EAAE,CAAC;QACpC,wFAAwF;QACxF,0FAA0F;QAC1F,MAAM,CAAC,IAAI,CAAC,wDAAwD,YAAY,CAAC,EAAE,iCAAiC,YAAY,CAAC,eAAe,qBAAqB,CAAC,CAAC;QACvK,OAAO;IACT,CAAC;IAED,kDAAkD;IAClD,iBAAiB,CAAC,YAAY,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QAC1E,MAAM,CAAC,IAAI,CAAC,+CAA+C,YAAY,CAAC,eAAe,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAC/B,YAAqB,EACrB,mBAA4B;IAE5B,IAAI,CAAC,YAAY,CAAC,eAAe;QAAE,OAAO;IAE1C,iBAAiB,CAAC,YAAY,EAAE;QAC9B,KAAK,EAAE,IAAI;QACX,MAAM,EAAE,iDAAiD,mBAAmB,CAAC,CAAC,CAAC,WAAW,mBAAmB,EAAE,CAAC,CAAC,CAAC,wBAAwB,qBAAqB;KAChK,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QACf,MAAM,CAAC,IAAI,CAAC,uDAAuD,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACzH,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CACpC,YAAqB;IAErB,IAAI,CAAC,YAAY,CAAC,eAAe;QAAE,OAAO;IAE1C,MAAM,YAAY,GAAG,YAAY,CAAC,QAAQ,IAAI,SAAS,CAAC;IACxD,QAAQ,CAAC,YAAY,CAAC,eAAe,EAAE,gBAAgB,YAAY,cAAc,YAAY,CAAC,EAAE,yCAAyC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QACvJ,MAAM,CAAC,IAAI,CAAC,mDAAmD,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACrH,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAS,qBAAqB,CAAC,MAAe;IAC5C,OAAO,MAAM,CAAC,MAAM,KAAK,OAAO,IAAI,uBAAuB,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAC3H,CAAC;AAED,MAAM,YAAY,GAAG,uGAAuG,CAAC;AAE7H;;;;;;;;GAQG;AACH,SAAS,mBAAmB,CAAC,MAAe,EAAE,OAAe,EAAE,OAAe;IAC5E,aAAa,CAAC,MAAM,CAAC,EAAE,EAAE,cAAc,EAAE,GAAG,OAAO,OAAO,YAAY,EAAE,CAAC,CAAC;IAC1E,MAAM,CAAC,IAAI,CAAC,sBAAsB,MAAM,CAAC,EAAE,sDAAsD,OAAO,uCAAuC,CAAC,CAAC;AACnJ,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,YAAqB,EACrB,MAA6F;AAC7F,gFAAgF;AAChF,OAAiC,EAAE;IAEnC,MAAM,MAAM,GAAG,UAAU,CAAC,YAAY,CAAC,eAAgB,CAAC,CAAC;IACzD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,CAAC,IAAI,CAAC,sBAAsB,YAAY,CAAC,eAAe,wBAAwB,YAAY,CAAC,EAAE,0BAA0B,CAAC,CAAC;QACjI,OAAO,CAAC,yBAAyB;IACnC,CAAC;IAED,MAAM,YAAY,GAAG,YAAY,CAAC,QAAQ,IAAI,SAAS,CAAC;IACxD,MAAM,OAAO,GAAG,YAAY,CAAC,EAAE,CAAC;IAEhC,IAAI,OAAe,CAAC;IACpB,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,OAAO,GAAG,gBAAgB,YAAY,cAAc,OAAO,2BAA2B,MAAM,CAAC,KAAK,EAAE,CAAC;IACvG,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,IAAI,aAAa,CAAC;QAC3C,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC;QACvE,OAAO,GAAG,gBAAgB,YAAY,wBAAwB,OAAO,kDAAkD,OAAO,uBAAuB,OAAO,EAAE,CAAC;IACjK,CAAC;IAED,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,CAAC;QACnC,mBAAmB,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QAC9C,OAAO;IACT,CAAC;IAED,2EAA2E;IAC3E,4EAA4E;IAC5E,0DAA0D;IAC1D,MAAM,QAAQ,CAAC,YAAY,CAAC,eAAgB,EAAE,OAAO,EAAE,IAAI,CAAC,UAAU,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;AACjH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAe;IAClD,wBAAwB,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QAC9C,MAAM,CAAC,IAAI,CAAC,oDAAoD,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACtH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,wBAAwB,CAAC,OAAe;IACrD,IAAI,IAAI,GAAG,IAAI,CAAC;IAChB,IAAI,SAAS,GAAG,SAAS,CAAC;IAC1B,IAAI,OAA2B,CAAC;IAEhC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,IAAI,IAAI,IAAI,CAAC;QACpC,SAAS,GAAG,MAAM,CAAC,aAAa,EAAE,SAAS,IAAI,SAAS,CAAC;QACzD,OAAO,GAAG,MAAM,CAAC,aAAa,EAAE,OAAO,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,wCAAwC;IAC1C,CAAC;IAED,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,CAAC,KAAK,CAAC,iFAAiF,CAAC,CAAC;QAChG,OAAO;IACT,CAAC;IAED,MAAM,cAAc,CAAC,IAAI,EAAE,mBAAmB,SAAS,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,aAAa,SAAS,eAAe,CAAC,CAAC;AACrI,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,eAAuB,EAAE,OAAe,EAAE,YAAqB;IACrF,IAAI,IAAI,GAAG,IAAI,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,IAAI,IAAI,IAAI,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,4CAA4C;IAC9C,CAAC;IAED,MAAM,cAAc,CAClB,IAAI,EACJ,iBAAiB,eAAe,UAAU,EAC1C,EAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAC5E,oBAAoB,eAAe,EAAE,CACtC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CACrC,IAAY,EACZ,SAAiB,EACjB,IAA6C;IAE7C,OAAO,cAAc,CAAC,IAAI,EAAE,iBAAiB,SAAS,UAAU,EAAE,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,kBAAkB,SAAS,EAAE,CAAC,CAAC;AACtI,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,cAAc,CAAC,IAAY,EAAE,IAAY,EAAE,IAAa,EAAE,IAAY;IACnF,MAAM,KAAK,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;IAC9C,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,oBAAoB,IAAI,GAAG,IAAI,EAAE,EAAE;QACzD,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvD;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC3B,CAAC,CAAC;IAEH,+FAA+F;IAC/F,qEAAqE;IACrE,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAEhD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,qBAAqB,GAAG,CAAC,MAAM,SAAS,IAAI,EAAE,CAAC,CAAC;IAClE,CAAC;AACH,CAAC"}

package/dist/src/sessions/completion-batching.d.ts

@@ -0,0 +1,82 @@
+/**
+ * Completion batching — one parent turn for the child completions that pile up
+ * while the parent is busy. (Ported in spirit from upstream jinn 5c0292d7 +
+ * 65c01e72; upstream batches its durable callback outbox, this fork batches
+ * the queue_items row itself.)
+ *
+ * Every child completion used to become its own queue row and its own engine
+ * turn, so a parent that delegated to N children ran N turns when they
+ * finished, and a Slack-origin parent posted into its thread N times. A
+ * completion that arrives while a completion row is still waiting now joins
+ * that row instead of opening another.
+ *
+ * What is shared is only the engine dispatch. Each notification is still
+ * persisted in the transcript as its own message; the row's prompt is rebuilt
+ * from all of them, and the dispatcher reads the prompt from the row when the
+ * turn starts.
+ *
+ * Only the pending TAIL row is ever joined, and only if it is a completion
+ * batch: reaching past an operator message, a detached-job wake-up, a restart
+ * nudge or a failed child's notification would reorder work. A failure is
+ * never batched — callbacks.ts does not mark it — so it keeps a turn of its own.
+ */
+import type { Session } from "../shared/types.js";
+import type { SessionQueue } from "./queue.js";
+/** Upstream's limits: a batch is one prompt, and a prompt has to stay readable. */
+export declare const COMPLETION_BATCH_MAX_ITEMS = 32;
+export declare const COMPLETION_BATCH_MAX_CHARS = 128000;
+export interface AcceptedCompletion {
+    /** The queue row this completion will run under. */
+    queueItemId: string;
+    /** That row's prompt as of now. */
+    prompt: string;
+    /** True when it joined a row that was already waiting. */
+    joined: boolean;
+    /** Completions in the row, this one included. */
+    size: number;
+}
+/** One engine-facing prompt for the completions sharing a row. */
+export declare function completionBatchPrompt(messages: readonly string[]): string;
+/**
+ * Queue a child's completion notification for its parent: join the pending
+ * tail row when that is a completion batch with room, otherwise open a row.
+ * The lookup and the write share one transaction, and a row that has started
+ * is no longer pending, so a turn never runs a half-written prompt.
+ *
+ * `canJoin` lets the caller veto a row the database still shows as pending but
+ * that will never run (see {@link queueChildCompletion}).
+ */
+export declare function acceptChildCompletion(sessionId: string, sessionKey: string, message: string, canJoin?: (queueItemId: string) => boolean): AcceptedCompletion;
+/** The prompt a queue row holds now. A dispatcher captures the prompt when it
+ *  is scheduled, but a completion batch grows while its row waits, so the turn
+ *  runs what the row says. Falls back to the captured prompt for a run with no
+ *  row (or a row that is gone). */
+export declare function queuedPrompt(queueItemId: string | undefined, captured: string): string;
+/** True for a row opened by {@link acceptChildCompletion} — a notification
+ *  wake-up whatever its prompt has grown into. */
+export declare function isCompletionBatchItem(queueItemId: string): boolean;
+/**
+ * The child whose successful completion a notification reports — when the
+ * caller says so (callbacks.ts marks them) and that session really is this
+ * session's child. Anything else is an ordinary notification.
+ */
+export declare function completionChildOf(parent: Session, body: unknown): string | null;
+export interface QueuedCompletion extends AcceptedCompletion {
+    /** False when the row it joined already has a dispatcher that will run it. */
+    needsDispatch: boolean;
+}
+/**
+ * What the notification route calls: queue `message` as a child completion if
+ * `body` marks it as one, and return null for anything else — so the caller
+ * queues it the ordinary way. Batching only saves turns; it must never cost a
+ * notification, so a failure here (logged) also falls back to the ordinary
+ * path instead of failing the request the child's callback is waiting on.
+ *
+ * The live queue decides two things the database cannot. A row whose only
+ * dispatcher a stop has cancelled is still "pending" until that dispatcher
+ * drains, but it will be closed without running — joining it would lose the
+ * completion, so a new row is opened instead. And a row with no dispatcher at
+ * all (a restart left it behind) needs one even though it was joined.
+ */
+export declare function queueChildCompletion(parent: Session, sessionKey: string, body: unknown, message: string, queue: Pick<SessionQueue, "dispatchState">): QueuedCompletion | null;
+//# sourceMappingURL=completion-batching.d.ts.map

package/dist/src/sessions/completion-batching.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"completion-batching.d.ts","sourceRoot":"","sources":["../../../src/sessions/completion-batching.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAElD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAG/C,mFAAmF;AACnF,eAAO,MAAM,0BAA0B,KAAK,CAAC;AAC7C,eAAO,MAAM,0BAA0B,SAAU,CAAC;AAIlD,MAAM,WAAW,kBAAkB;IACjC,oDAAoD;IACpD,WAAW,EAAE,MAAM,CAAC;IACpB,mCAAmC;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,0DAA0D;IAC1D,MAAM,EAAE,OAAO,CAAC;IAChB,iDAAiD;IACjD,IAAI,EAAE,MAAM,CAAC;CACd;AAED,kEAAkE;AAClE,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAOzE;AAeD;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CACnC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAoB,GACrD,kBAAkB,CAuBpB;AAED;;;mCAGmC;AACnC,wBAAgB,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAQtF;AAED;kDACkD;AAClD,wBAAgB,qBAAqB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAOlE;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAI/E;AAED,MAAM,WAAW,gBAAiB,SAAQ,kBAAkB;IAC1D,8EAA8E;IAC9E,aAAa,EAAE,OAAO,CAAC;CACxB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,OAAO,EACf,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,OAAO,EACb,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,IAAI,CAAC,YAAY,EAAE,eAAe,CAAC,GACzC,gBAAgB,GAAG,IAAI,CASzB"}

package/dist/src/sessions/completion-batching.js

@@ -0,0 +1,126 @@
+import { logger } from "../shared/logger.js";
+import { enqueueQueueItem, getSession, initDb } from "./registry.js";
+/** Upstream's limits: a batch is one prompt, and a prompt has to stay readable. */
+export const COMPLETION_BATCH_MAX_ITEMS = 32;
+export const COMPLETION_BATCH_MAX_CHARS = 128_000;
+const BATCH_KIND = "child-completion";
+/** One engine-facing prompt for the completions sharing a row. */
+export function completionBatchPrompt(messages) {
+    if (messages.length === 1)
+        return messages[0];
+    return [
+        `📬 ${messages.length} child-session updates arrived while this session was busy. ` +
+            "Read all of them before you act, then answer once.",
+        ...messages.map((message, index) => `--- Update ${index + 1} of ${messages.length} ---\n${message}`),
+    ].join("\n\n");
+}
+function batchMessages(raw) {
+    if (typeof raw !== "string" || !raw)
+        return null;
+    try {
+        const parsed = JSON.parse(raw);
+        if (parsed?.kind !== BATCH_KIND || !Array.isArray(parsed.items))
+            return null;
+        return parsed.items.every((item) => typeof item === "string") ? parsed.items : null;
+    }
+    catch {
+        return null;
+    }
+}
+const storedBatch = (messages) => JSON.stringify({ kind: BATCH_KIND, items: messages });
+/**
+ * Queue a child's completion notification for its parent: join the pending
+ * tail row when that is a completion batch with room, otherwise open a row.
+ * The lookup and the write share one transaction, and a row that has started
+ * is no longer pending, so a turn never runs a half-written prompt.
+ *
+ * `canJoin` lets the caller veto a row the database still shows as pending but
+ * that will never run (see {@link queueChildCompletion}).
+ */
+export function acceptChildCompletion(sessionId, sessionKey, message, canJoin = () => true) {
+    const database = initDb();
+    return database.transaction(() => {
+        const tail = database.prepare(`
+      SELECT id, batch FROM queue_items
+      WHERE session_id = ? AND session_key = ? AND status = 'pending'
+      ORDER BY position DESC, created_at DESC, rowid DESC
+      LIMIT 1
+    `).get(sessionId, sessionKey);
+        const waiting = tail ? batchMessages(tail.batch) : null;
+        if (tail && waiting && waiting.length < COMPLETION_BATCH_MAX_ITEMS && canJoin(tail.id)) {
+            const messages = [...waiting, message];
+            const prompt = completionBatchPrompt(messages);
+            if (prompt.length <= COMPLETION_BATCH_MAX_CHARS) {
+                database.prepare("UPDATE queue_items SET prompt = ?, batch = ? WHERE id = ? AND status = 'pending'")
+                    .run(prompt, storedBatch(messages), tail.id);
+                return { queueItemId: tail.id, prompt, joined: true, size: messages.length };
+            }
+        }
+        const queueItemId = enqueueQueueItem(sessionId, sessionKey, message);
+        database.prepare("UPDATE queue_items SET batch = ? WHERE id = ?").run(storedBatch([message]), queueItemId);
+        return { queueItemId, prompt: message, joined: false, size: 1 };
+    }).immediate();
+}
+/** The prompt a queue row holds now. A dispatcher captures the prompt when it
+ *  is scheduled, but a completion batch grows while its row waits, so the turn
+ *  runs what the row says. Falls back to the captured prompt for a run with no
+ *  row (or a row that is gone). */
+export function queuedPrompt(queueItemId, captured) {
+    if (!queueItemId)
+        return captured;
+    try {
+        const row = initDb().prepare("SELECT prompt FROM queue_items WHERE id = ?").get(queueItemId);
+        return row?.prompt ?? captured;
+    }
+    catch {
+        return captured; // the turn still runs — with what its dispatcher was given
+    }
+}
+/** True for a row opened by {@link acceptChildCompletion} — a notification
+ *  wake-up whatever its prompt has grown into. */
+export function isCompletionBatchItem(queueItemId) {
+    try {
+        const row = initDb().prepare("SELECT batch FROM queue_items WHERE id = ?").get(queueItemId);
+        return batchMessages(row?.batch) !== null;
+    }
+    catch {
+        return false; // asked during the boot replay, which must not stop on it
+    }
+}
+/**
+ * The child whose successful completion a notification reports — when the
+ * caller says so (callbacks.ts marks them) and that session really is this
+ * session's child. Anything else is an ordinary notification.
+ */
+export function completionChildOf(parent, body) {
+    const childId = body?.completionOf;
+    if (typeof childId !== "string" || !childId)
+        return null;
+    return getSession(childId)?.parentSessionId === parent.id ? childId : null;
+}
+/**
+ * What the notification route calls: queue `message` as a child completion if
+ * `body` marks it as one, and return null for anything else — so the caller
+ * queues it the ordinary way. Batching only saves turns; it must never cost a
+ * notification, so a failure here (logged) also falls back to the ordinary
+ * path instead of failing the request the child's callback is waiting on.
+ *
+ * The live queue decides two things the database cannot. A row whose only
+ * dispatcher a stop has cancelled is still "pending" until that dispatcher
+ * drains, but it will be closed without running — joining it would lose the
+ * completion, so a new row is opened instead. And a row with no dispatcher at
+ * all (a restart left it behind) needs one even though it was joined.
+ */
+export function queueChildCompletion(parent, sessionKey, body, message, queue) {
+    try {
+        if (!completionChildOf(parent, body))
+            return null;
+        const accepted = acceptChildCompletion(parent.id, sessionKey, message, (id) => queue.dispatchState(id) !== "cancelled");
+        return { ...accepted, needsDispatch: !accepted.joined || queue.dispatchState(accepted.queueItemId) === "none" };
+    }
+    catch (err) {
+        logger.warn(`[completion-batching] Could not batch a completion for session ${parent.id}; queueing it on its own: ${err instanceof Error ? err.message : String(err)}`);
+        return null;
+    }
+}
+//# sourceMappingURL=completion-batching.js.map

package/dist/src/sessions/completion-batching.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"completion-batching.js","sourceRoot":"","sources":["../../../src/sessions/completion-batching.ts"],"names":[],"mappings":"AAuBA,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAE7C,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAErE,mFAAmF;AACnF,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,CAAC;AAC7C,MAAM,CAAC,MAAM,0BAA0B,GAAG,OAAO,CAAC;AAElD,MAAM,UAAU,GAAG,kBAAkB,CAAC;AAatC,kEAAkE;AAClE,MAAM,UAAU,qBAAqB,CAAC,QAA2B;IAC/D,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC9C,OAAO;QACL,MAAM,QAAQ,CAAC,MAAM,8DAA8D;YACjF,oDAAoD;QACtD,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,cAAc,KAAK,GAAG,CAAC,OAAO,QAAQ,CAAC,MAAM,SAAS,OAAO,EAAE,CAAC;KACrG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AACjB,CAAC;AAED,SAAS,aAAa,CAAC,GAAY;IACjC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACjD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAwC,CAAC;QACtE,IAAI,MAAM,EAAE,IAAI,KAAK,UAAU,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC7E,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IACtG,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,WAAW,GAAG,CAAC,QAA2B,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;AAE3G;;;;;;;;GAQG;AACH,MAAM,UAAU,qBAAqB,CACnC,SAAiB,EACjB,UAAkB,EAClB,OAAe,EACf,UAA4C,GAAG,EAAE,CAAC,IAAI;IAEtD,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC;IAC1B,OAAO,QAAQ,CAAC,WAAW,CAAC,GAAuB,EAAE;QACnD,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC;;;;;KAK7B,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,UAAU,CAAqD,CAAC;QAClF,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACxD,IAAI,IAAI,IAAI,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,0BAA0B,IAAI,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YACvF,MAAM,QAAQ,GAAG,CAAC,GAAG,OAAO,EAAE,OAAO,CAAC,CAAC;YACvC,MAAM,MAAM,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;YAC/C,IAAI,MAAM,CAAC,MAAM,IAAI,0BAA0B,EAAE,CAAC;gBAChD,QAAQ,CAAC,OAAO,CAAC,kFAAkF,CAAC;qBACjG,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;gBAC/C,OAAO,EAAE,WAAW,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;YAC/E,CAAC;QACH,CAAC;QACD,MAAM,WAAW,GAAG,gBAAgB,CAAC,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;QACrE,QAAQ,CAAC,OAAO,CAAC,+CAA+C,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;QAC3G,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IAClE,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;AACjB,CAAC;AAED;;;mCAGmC;AACnC,MAAM,UAAU,YAAY,CAAC,WAA+B,EAAE,QAAgB;IAC5E,IAAI,CAAC,WAAW;QAAE,OAAO,QAAQ,CAAC;IAClC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,6CAA6C,CAAC,CAAC,GAAG,CAAC,WAAW,CAAmC,CAAC;QAC/H,OAAO,GAAG,EAAE,MAAM,IAAI,QAAQ,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,QAAQ,CAAC,CAAC,2DAA2D;IAC9E,CAAC;AACH,CAAC;AAED;kDACkD;AAClD,MAAM,UAAU,qBAAqB,CAAC,WAAmB;IACvD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,4CAA4C,CAAC,CAAC,GAAG,CAAC,WAAW,CAAyC,CAAC;QACpI,OAAO,aAAa,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,IAAI,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC,CAAC,0DAA0D;IAC1E,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAe,EAAE,IAAa;IAC9D,MAAM,OAAO,GAAI,IAA0C,EAAE,YAAY,CAAC;IAC1E,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IACzD,OAAO,UAAU,CAAC,OAAO,CAAC,EAAE,eAAe,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7E,CAAC;AAOD;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,oBAAoB,CAClC,MAAe,EACf,UAAkB,EAClB,IAAa,EACb,OAAe,EACf,KAA0C;IAE1C,IAAI,CAAC;QACH,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAClD,MAAM,QAAQ,GAAG,qBAAqB,CAAC,MAAM,CAAC,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC,KAAK,WAAW,CAAC,CAAC;QACxH,OAAO,EAAE,GAAG,QAAQ,EAAE,aAAa,EAAE,CAAC,QAAQ,CAAC,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,MAAM,EAAE,CAAC;IAClH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,kEAAkE,MAAM,CAAC,EAAE,6BAA6B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACxK,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/src/sessions/connector-command-guard.d.ts

@@ -0,0 +1,66 @@
+import type { IncomingMessage, JinnConfig } from "../shared/types.js";
+/**
+ * What a chat message is allowed to mean to the CLI that runs the turn.
+ *
+ * The engines hand a prompt to their CLI as it is, and Claude Code reads some
+ * prompts as something other than text (read from the 2.1.296 executable):
+ *
+ *   - after `trim()`, a leading "/" is one of its own commands — /logout,
+ *     /permissions, /remote-control and some ninety more;
+ *   - after `trim()`, the words exit, quit, :q, :q!, :wq and :wq! quit it;
+ *   - a leading "!" puts its input box in bash mode: the rest is a shell command;
+ *   - on a cold start the prompt is an argument, and one with a leading "-" is
+ *     an option (`--mcp-config=…` starts a program of the sender's choosing).
+ *
+ * A chat message is written by whoever can reach the assistant, so none of
+ * that may be decided by its first character. Every message a connector
+ * delivers passes through here, once, before its turn runs:
+ *
+ *   - Text the CLI would read as text anyway is passed on untouched.
+ *   - Text it would read as a command or an option is passed on *as text*:
+ *     a one-line note is put in front, so that it no longer starts with
+ *     anything the CLI acts on, and the model reads the words. A leading space
+ *     would not do — the CLI trims before it looks.
+ *   - The operator, identified by platform ID and by nothing else, keeps the
+ *     commands in OPERATOR_NATIVE_COMMANDS. The list names what is allowed:
+ *     a command the CLI gains tomorrow is not on it.
+ *
+ * Nobody is told "that command is not allowed" by the gateway: to the sender it
+ * is a message like any other, answered by the model.
+ *
+ * Not decided here: the web UI and the API (callers the gateway has already
+ * authenticated) and cron prompts (the operator's own text) reach the engine
+ * as before, and the gateway's own commands (/new, /status, /model, /doctor,
+ * /cron) are answered before a message gets this far.
+ */
+/**
+ * The native Claude commands the operator can run from chat, and whether each
+ * takes text after it. Both tidy the conversation and finish with nothing to
+ * read; neither touches the login, permissions, settings or anything outside
+ * the session. Both are commands the interactive engine knows how to wait for
+ * (isNativeClaudeCommand) — one it does not would hang the turn.
+ *
+ * Deliberately not here: /usage and /cost. They open an interactive panel
+ * whose output never comes back to chat, and the panel can stay up in the PTY
+ * and swallow the next turn — useless from chat, and a way to wedge a session.
+ */
+export declare const OPERATOR_NATIVE_COMMANDS: ReadonlyMap<string, {
+    args: boolean;
+}>;
+/**
+ * Only the configured platform ID of the platform the message arrived on
+ * counts. A display name never does, and where no operator ID is configured
+ * (or the platform has none: Telegram, WhatsApp) nobody is the operator.
+ */
+export declare function isVerifiedOperator(msg: IncomingMessage, config: JinnConfig): boolean;
+/**
+ * May this sender run a gateway command that changes the session's engine or
+ * fires a cron job? Yes for the gateway's own sources (a cron turn), yes for
+ * everyone when no operator ID is configured (nothing can verify anyone — the
+ * instance's existing behaviour is not taken away), and otherwise only the
+ * verified operator. Read-only commands do not ask this.
+ */
+export declare function senderMayManageSession(msg: IncomingMessage, config: JinnConfig): boolean;
+/** The message as the turn may see it. Returns `msg` itself when nothing had to change. */
+export declare function guardConnectorMessage(msg: IncomingMessage, config: JinnConfig): IncomingMessage;
+//# sourceMappingURL=connector-command-guard.d.ts.map

package/dist/src/sessions/connector-command-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connector-command-guard.d.ts","sourceRoot":"","sources":["../../../src/sessions/connector-command-guard.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAItE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH;;;;;;;;;;GAUG;AACH,eAAO,MAAM,wBAAwB,EAAE,WAAW,CAAC,MAAM,EAAE;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,CAG1E,CAAC;AA+CH;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,eAAe,EAAE,MAAM,EAAE,UAAU,GAAG,OAAO,CAUpF;AAQD;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,eAAe,EAAE,MAAM,EAAE,UAAU,GAAG,OAAO,CAIxF;AAED,2FAA2F;AAC3F,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,eAAe,EAAE,MAAM,EAAE,UAAU,GAAG,eAAe,CAa/F"}

package/dist/src/sessions/connector-command-guard.js

@@ -0,0 +1,145 @@
+import { stripTerminalControlChars } from "../shared/terminal-safe-text.js";
+import { resolveOperatorIdentity } from "./context.js";
+/**
+ * What a chat message is allowed to mean to the CLI that runs the turn.
+ *
+ * The engines hand a prompt to their CLI as it is, and Claude Code reads some
+ * prompts as something other than text (read from the 2.1.296 executable):
+ *
+ *   - after `trim()`, a leading "/" is one of its own commands — /logout,
+ *     /permissions, /remote-control and some ninety more;
+ *   - after `trim()`, the words exit, quit, :q, :q!, :wq and :wq! quit it;
+ *   - a leading "!" puts its input box in bash mode: the rest is a shell command;
+ *   - on a cold start the prompt is an argument, and one with a leading "-" is
+ *     an option (`--mcp-config=…` starts a program of the sender's choosing).
+ *
+ * A chat message is written by whoever can reach the assistant, so none of
+ * that may be decided by its first character. Every message a connector
+ * delivers passes through here, once, before its turn runs:
+ *
+ *   - Text the CLI would read as text anyway is passed on untouched.
+ *   - Text it would read as a command or an option is passed on *as text*:
+ *     a one-line note is put in front, so that it no longer starts with
+ *     anything the CLI acts on, and the model reads the words. A leading space
+ *     would not do — the CLI trims before it looks.
+ *   - The operator, identified by platform ID and by nothing else, keeps the
+ *     commands in OPERATOR_NATIVE_COMMANDS. The list names what is allowed:
+ *     a command the CLI gains tomorrow is not on it.
+ *
+ * Nobody is told "that command is not allowed" by the gateway: to the sender it
+ * is a message like any other, answered by the model.
+ *
+ * Not decided here: the web UI and the API (callers the gateway has already
+ * authenticated) and cron prompts (the operator's own text) reach the engine
+ * as before, and the gateway's own commands (/new, /status, /model, /doctor,
+ * /cron) are answered before a message gets this far.
+ */
+/**
+ * The native Claude commands the operator can run from chat, and whether each
+ * takes text after it. Both tidy the conversation and finish with nothing to
+ * read; neither touches the login, permissions, settings or anything outside
+ * the session. Both are commands the interactive engine knows how to wait for
+ * (isNativeClaudeCommand) — one it does not would hang the turn.
+ *
+ * Deliberately not here: /usage and /cost. They open an interactive panel
+ * whose output never comes back to chat, and the panel can stay up in the PTY
+ * and swallow the next turn — useless from chat, and a way to wedge a session.
+ */
+export const OPERATOR_NATIVE_COMMANDS = new Map([
+    ["/compact", { args: true }], // optional instructions for the summary
+    ["/clear", { args: false }],
+]);
+/** Sources whose text the gateway wrote itself. A cron job's prompt is the operator's. */
+const GATEWAY_SOURCES = new Set(["cron"]);
+/**
+ * The gateway's own /goal (goal-execution.ts). For Claude it is handed to the
+ * CLI as the native command, and the gateway writes the same command itself
+ * when it finds a goal in ordinary words — so it is everybody's, as before.
+ */
+const GOAL_COMMAND = /^\/goal(?:\s|$)/i;
+/** `/command`, or `/command text` on one line: the only shape a native command is let through in. */
+const ONE_LINE_COMMAND = /^(\/\S+)(?:[ \t]+(.*))?$/;
+// Both patterns are anchored at the start and scan once: a long run of blanks
+// in a message costs its length, not its square.
+const INVISIBLE = String.raw `[\s\p{Cf}\p{Default_Ignorable_Code_Point}\u2800]`;
+const LEADING_INVISIBLE = new RegExp(`^${INVISIBLE}+`, "u");
+/** The whole message is one of the words the CLI quits on: exit, quit, :q, :q!, :wq, :wq!. */
+const EXIT_WORD = new RegExp(`^(?:exit|quit|:q!?|:wq!?)${INVISIBLE}*$`, "iu");
+const AS_TEXT = "[Chat message, delivered as plain text: nothing in it was run as a CLI command or option. Read it as an ordinary message.]";
+const AS_TEXT_SLASH = "[Chat message, delivered as plain text: it was not run as a CLI command. Read it as an ordinary message; if it names an installed skill, it is a request to use that skill.]";
+/**
+ * What a CLI could find itself looking at: full-width forms folded to the
+ * ASCII they stand for, nothing invisible in front. Stricter than the
+ * installed CLI, which does neither — a version that starts to must not find
+ * a command where this found none.
+ */
+function asSeen(text) {
+    return text.normalize("NFKC").replace(LEADING_INVISIBLE, "");
+}
+function readsAsCliInput(seen) {
+    return /^[/\-!]/.test(seen) || EXIT_WORD.test(seen);
+}
+/** Exactly as typed — a look-alike of an allowed command is not that command. */
+function isOperatorCommand(typed) {
+    const match = ONE_LINE_COMMAND.exec(typed);
+    if (!match)
+        return false;
+    const rule = OPERATOR_NATIVE_COMMANDS.get(match[1]);
+    return rule !== undefined && (rule.args || !match[2]?.trim());
+}
+/**
+ * Only the configured platform ID of the platform the message arrived on
+ * counts. A display name never does, and where no operator ID is configured
+ * (or the platform has none: Telegram, WhatsApp) nobody is the operator.
+ */
+export function isVerifiedOperator(msg, config) {
+    const meta = msg.transportMeta ?? {};
+    const id = (value) => (typeof value === "string" && value ? value : undefined);
+    return resolveOperatorIdentity({
+        speakerNames: [],
+        speakerSlackId: id(meta.speakerSlackId),
+        speakerDiscordId: id(meta.speakerDiscordId),
+        source: msg.source,
+        config,
+    }).operatorIdVerified;
+}
+/** True when the instance has a strict operator ID set (so verification is possible at all). */
+function strictOperatorConfigured(config) {
+    const portal = config?.portal;
+    return !!portal && (Object.hasOwn(portal, "operatorSlackId") || Object.hasOwn(portal, "operatorDiscordId"));
+}
+/**
+ * May this sender run a gateway command that changes the session's engine or
+ * fires a cron job? Yes for the gateway's own sources (a cron turn), yes for
+ * everyone when no operator ID is configured (nothing can verify anyone — the
+ * instance's existing behaviour is not taken away), and otherwise only the
+ * verified operator. Read-only commands do not ask this.
+ */
+export function senderMayManageSession(msg, config) {
+    if (GATEWAY_SOURCES.has(msg.source))
+        return true;
+    if (!strictOperatorConfigured(config))
+        return true;
+    return isVerifiedOperator(msg, config);
+}
+/** The message as the turn may see it. Returns `msg` itself when nothing had to change. */
+export function guardConnectorMessage(msg, config) {
+    if (GATEWAY_SOURCES.has(msg.source))
+        return msg;
+    const text = stripTerminalControlChars(msg.text);
+    // Nothing but control characters: a blank prompt is one the CLI never
+    // submits, and the turn would wait for an answer that cannot come.
+    if (!text.trim() && msg.text.trim())
+        return { ...msg, text: `${AS_TEXT}\n${text}` };
+    const passedOn = text === msg.text ? msg : { ...msg, text };
+    const seen = asSeen(text);
+    if (!readsAsCliInput(seen))
+        return passedOn;
+    const typed = text.trim();
+    if (GOAL_COMMAND.test(typed))
+        return passedOn;
+    if (isOperatorCommand(typed) && isVerifiedOperator(msg, config))
+        return passedOn;
+    return { ...msg, text: `${seen.startsWith("/") ? AS_TEXT_SLASH : AS_TEXT}\n${text}` };
+}
+//# sourceMappingURL=connector-command-guard.js.map

package/dist/src/sessions/connector-command-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connector-command-guard.js","sourceRoot":"","sources":["../../../src/sessions/connector-command-guard.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAC;AAC5E,OAAO,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AAEvD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAA2C,IAAI,GAAG,CAAC;IACtF,CAAC,UAAU,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,wCAAwC;IACtE,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;CAC5B,CAAC,CAAC;AAEH,0FAA0F;AAC1F,MAAM,eAAe,GAAwB,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;AAE/D;;;;GAIG;AACH,MAAM,YAAY,GAAG,kBAAkB,CAAC;AAExC,qGAAqG;AACrG,MAAM,gBAAgB,GAAG,0BAA0B,CAAC;AAEpD,8EAA8E;AAC9E,iDAAiD;AACjD,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAA,kDAAkD,CAAC;AAC/E,MAAM,iBAAiB,GAAG,IAAI,MAAM,CAAC,IAAI,SAAS,GAAG,EAAE,GAAG,CAAC,CAAC;AAC5D,8FAA8F;AAC9F,MAAM,SAAS,GAAG,IAAI,MAAM,CAAC,4BAA4B,SAAS,IAAI,EAAE,IAAI,CAAC,CAAC;AAE9E,MAAM,OAAO,GAAG,4HAA4H,CAAC;AAC7I,MAAM,aAAa,GAAG,8KAA8K,CAAC;AAErM;;;;;GAKG;AACH,SAAS,MAAM,CAAC,IAAY;IAC1B,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,eAAe,CAAC,IAAY;IACnC,OAAO,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACtD,CAAC;AAED,iFAAiF;AACjF,SAAS,iBAAiB,CAAC,KAAa;IACtC,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3C,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,MAAM,IAAI,GAAG,wBAAwB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,OAAO,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;AAChE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAoB,EAAE,MAAkB;IACzE,MAAM,IAAI,GAA4B,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC;IAC9D,MAAM,EAAE,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACxF,OAAO,uBAAuB,CAAC;QAC7B,YAAY,EAAE,EAAE;QAChB,cAAc,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC;QACvC,gBAAgB,EAAE,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC;QAC3C,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,MAAM;KACP,CAAC,CAAC,kBAAkB,CAAC;AACxB,CAAC;AAED,gGAAgG;AAChG,SAAS,wBAAwB,CAAC,MAAkB;IAClD,MAAM,MAAM,GAAG,MAAM,EAAE,MAAM,CAAC;IAC9B,OAAO,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC,CAAC;AAC9G,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CAAC,GAAoB,EAAE,MAAkB;IAC7E,IAAI,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IACjD,IAAI,CAAC,wBAAwB,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IACnD,OAAO,kBAAkB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACzC,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,qBAAqB,CAAC,GAAoB,EAAE,MAAkB;IAC5E,IAAI,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,OAAO,GAAG,CAAC;IAChD,MAAM,IAAI,GAAG,yBAAyB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACjD,sEAAsE;IACtE,mEAAmE;IACnE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,GAAG,GAAG,EAAE,IAAI,EAAE,GAAG,OAAO,KAAK,IAAI,EAAE,EAAE,CAAC;IACpF,MAAM,QAAQ,GAAG,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,IAAI,EAAE,CAAC;IAC5D,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAC1B,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC1B,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC9C,IAAI,iBAAiB,CAAC,KAAK,CAAC,IAAI,kBAAkB,CAAC,GAAG,EAAE,MAAM,CAAC;QAAE,OAAO,QAAQ,CAAC;IACjF,OAAO,EAAE,GAAG,GAAG,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI,EAAE,EAAE,CAAC;AACxF,CAAC"}

package/dist/src/sessions/context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../../src/sessions/context.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AA6C/D;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,uEAAuE;IACvE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,8CAA8C;IAC9C,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,yCAAyC;IACzC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,2CAA2C;IAC3C,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,uDAAuD;IACvD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,4CAA4C;IAC5C,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,+EAA+E;IAC/E,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,kEAAkE;IAClE,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,+CAA+C;IAC/C,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,8BAA8B;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;OAKG;IACH,eAAe,CAAC,EAAE,UAAU,GAAG,YAAY,CAAC;IAC5C,SAAS,CAAC,EAAE,OAAO,oBAAoB,EAAE,YAAY,CAAC;CACvD,GAAG,MAAM,CAqOT;AAiRD;;;;GAIG;AACH,wBAAgB,0BAA0B,CACxC,IAAI,EAAE,UAAU,CAAC,OAAO,gBAAgB,CAAC,CAAC,CAAC,CAAC,GAAG;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,QAAQ,CAAA;CAAE,GACzF,MAAM,GAAG,IAAI,CA+Cf;AAgND;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CA8B5F;AAuHD;;;;;;;;;2EAS2E;AAC3E,wBAAgB,uBAAuB,CAAC,IAAI,EAAE;IAC5C,YAAY,EAAE,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACxC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;kBAGc;IACd,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,UAAU,CAAC;CACrB,GAAG;IAAE,iBAAiB,EAAE,OAAO,CAAC;IAAC,kBAAkB,EAAE,OAAO,CAAA;CAAE,CAkC9D;AAED;;;;;;;;;;;;uEAYuE;AACvE,wBAAgB,gBAAgB,CAAC,IAAI,EAAE;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,gFAAgF;IAChF,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,wCAAwC;IACxC,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,MAAM,CAAC,EAAE,UAAU,CAAC;CACrB,GAAG,OAAO,CAWV;AAOD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,MAAM,CAAC,EAAE,UAAU,CAAC;CACrB,GAAG,MAAM,GAAG,IAAI,CAyBhB;AAED,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,UAAU,GAAG,MAAM,CAyErF"}
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../../src/sessions/context.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AA6C/D;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,uEAAuE;IACvE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,8CAA8C;IAC9C,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,yCAAyC;IACzC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,2CAA2C;IAC3C,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,uDAAuD;IACvD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,4CAA4C;IAC5C,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,+EAA+E;IAC/E,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,kEAAkE;IAClE,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,+CAA+C;IAC/C,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,8BAA8B;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;OAKG;IACH,eAAe,CAAC,EAAE,UAAU,GAAG,YAAY,CAAC;IAC5C,SAAS,CAAC,EAAE,OAAO,oBAAoB,EAAE,YAAY,CAAC;CACvD,GAAG,MAAM,CAqOT;AAgRD;;;;GAIG;AACH,wBAAgB,0BAA0B,CACxC,IAAI,EAAE,UAAU,CAAC,OAAO,gBAAgB,CAAC,CAAC,CAAC,CAAC,GAAG;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,QAAQ,CAAA;CAAE,GACzF,MAAM,GAAG,IAAI,CA+Cf;AAgND;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CA8B5F;AAuHD;;;;;;;;;2EAS2E;AAC3E,wBAAgB,uBAAuB,CAAC,IAAI,EAAE;IAC5C,YAAY,EAAE,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACxC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;kBAGc;IACd,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,UAAU,CAAC;CACrB,GAAG;IAAE,iBAAiB,EAAE,OAAO,CAAC;IAAC,kBAAkB,EAAE,OAAO,CAAA;CAAE,CAkC9D;AAED;;;;;;;;;;;;uEAYuE;AACvE,wBAAgB,gBAAgB,CAAC,IAAI,EAAE;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,gFAAgF;IAChF,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,wCAAwC;IACxC,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,MAAM,CAAC,EAAE,UAAU,CAAC;CACrB,GAAG,OAAO,CAWV;AAOD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,MAAM,CAAC,EAAE,UAAU,CAAC;CACrB,GAAG,MAAM,GAAG,IAAI,CAyBhB;AAED,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,UAAU,GAAG,MAAM,CAyErF"}

package/dist/src/sessions/context.js

@@ -380,8 +380,7 @@ Your working directory is \`~/.ryoko\` (${JINN_HOME}). This contains:
 - \`cron/\` — scheduled job definitions and run history
 - \`sessions/\` — session database
 - \`logs/\` — gateway logs
-- \`CLAUDE.md\` — user-defined instructions (always follow these)
-- \`AGENTS.md\` — agent/employee documentation
+- \`AGENTS.md\` / \`CLAUDE.md\` — your operating instructions (always follow these). On newer instances CLAUDE.md is only an entry point that imports AGENTS.md
 
 You can read, write, and modify any of these files to configure yourself, create new employees, add skills, etc.`;
 }
@@ -1061,10 +1060,10 @@ ryoko api POST /api/sessions/<child-id>/message \\
 
 6. **Respond immediately**: tell the user you have delegated and will follow up when the child reports back, then end your turn. **Do NOT poll or sleep-loop inside your turn** waiting for the child — a turn has a hard time limit, and a blocked turn cannot answer anyone.
 
-7. **onComplete notification** (the primary wake-up — attempted, not guaranteed): when the child finishes, the gateway posts a notification into your session and you are woken with a preview and the child's session id. The notification is skipped silently when any of these hold:
+7. **onComplete notification** (the primary wake-up — attempted, not guaranteed): when the child finishes, the gateway posts a notification into your session and you are woken with a preview and the child's session id. Completions that arrive while you are busy reach you together as one turn (up to 32 at a time): read every child it names. The notification is skipped silently when either of these holds:
    - the child was spawned without your \`parentSessionId\` (an unlinked child never notifies anyone)
    - the employee sets \`alwaysNotify: false\`
-   - your session is already in \`error\`
+   If your session is in \`error\` when a child finishes (your own last turn failed, for example on a usage limit or a lost login), you are not woken: the notification is written into your transcript, marked "Not acted on". When you run again, read your recent messages (\`ryoko api GET /api/sessions/<your-session-id>?last=20\`) for children that finished in the meantime. A turn that failed because the engine process died does not count: you are woken as usual.
    If the POST itself fails (gateway restart, auth), a warning goes to the gateway log — not to you.
 
 8. **Safety net**: if the user asks about progress, or a reply is overdue, read the child yourself: