opensquid 0.5.395

package/dist/runtime/chat/claim_lease.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Live-session umbrella lease claim (T-CHAT-AS-TERMINAL — interactive responder).
+ *
+ * THE fix for the interactive path: when `responder` is `session` (the default —
+ * chat MIRRORS the live MCP session), the Claude Code session claims its
+ * umbrella's chat lease with its OWN session id, from its own hooks
+ * (SessionStart / UserPromptSubmit / Stop). The CAT.2 Stop-hook drive answers a
+ * chat message only when `resolveLiveSessionId(umbrella) === thisSessionId` —
+ * which now holds precisely because THIS session wrote the lease (previously the
+ * lease carried `chat watch`'s id, which never matched the session, so the drive
+ * silently no-op'd). It also makes the headless agent-bridge stand down: it sees
+ * a fresh human-owned lease (CAT.5 ownership guard).
+ *
+ * acquire-if-free (invariant #6): a DIFFERENT live session already holding a
+ * fresh lease is NOT stolen — this session is local-only (no chat) until that
+ * lease lapses.
+ *
+ * In `headless` mode this is a no-op — the session yields the lease to the
+ * dedicated headless responder. Fail-quiet: any error / no umbrella / unknown
+ * session id ⇒ no claim, never blocks a hook.
+ *
+ * Imports from: ../../channels/routing, ./live_session_lease, ../paths.
+ * Imported by: src/runtime/hooks/{session-start,user-prompt-submit,stop}.ts + tests.
+ */
+/**
+ * Claim/refresh the session's umbrella chat lease (acquire-if-free). Returns
+ * true iff this session now holds it. No-op (false) when: the session id is
+ * empty/unknown, no channels.json, the cwd resolves to no umbrella, the
+ * configured `responder` is not `session`, or a different live session holds a
+ * fresh lease.
+ */
+export declare function claimUmbrellaLeaseForSession(sessionId: string, cwd?: string, opts?: {
+    forceTakeover?: boolean;
+}): Promise<boolean>;
+//# sourceMappingURL=claim_lease.d.ts.map

package/dist/runtime/chat/claim_lease.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claim_lease.d.ts","sourceRoot":"","sources":["../../../src/runtime/chat/claim_lease.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAOH;;;;;;GAMG;AACH,wBAAsB,4BAA4B,CAChD,SAAS,EAAE,MAAM,EACjB,GAAG,GAAE,MAAsB,EAC3B,IAAI,CAAC,EAAE;IAAE,aAAa,CAAC,EAAE,OAAO,CAAA;CAAE,GACjC,OAAO,CAAC,OAAO,CAAC,CAwBlB"}

package/dist/runtime/chat/claim_lease.js

@@ -0,0 +1,65 @@
+/**
+ * Live-session umbrella lease claim (T-CHAT-AS-TERMINAL — interactive responder).
+ *
+ * THE fix for the interactive path: when `responder` is `session` (the default —
+ * chat MIRRORS the live MCP session), the Claude Code session claims its
+ * umbrella's chat lease with its OWN session id, from its own hooks
+ * (SessionStart / UserPromptSubmit / Stop). The CAT.2 Stop-hook drive answers a
+ * chat message only when `resolveLiveSessionId(umbrella) === thisSessionId` —
+ * which now holds precisely because THIS session wrote the lease (previously the
+ * lease carried `chat watch`'s id, which never matched the session, so the drive
+ * silently no-op'd). It also makes the headless agent-bridge stand down: it sees
+ * a fresh human-owned lease (CAT.5 ownership guard).
+ *
+ * acquire-if-free (invariant #6): a DIFFERENT live session already holding a
+ * fresh lease is NOT stolen — this session is local-only (no chat) until that
+ * lease lapses.
+ *
+ * In `headless` mode this is a no-op — the session yields the lease to the
+ * dedicated headless responder. Fail-quiet: any error / no umbrella / unknown
+ * session id ⇒ no claim, never blocks a hook.
+ *
+ * Imports from: ../../channels/routing, ./live_session_lease, ../paths.
+ * Imported by: src/runtime/hooks/{session-start,user-prompt-submit,stop}.ts + tests.
+ */
+import { loadChannelsConfig, resolveUmbrellaForCwd } from '../../channels/routing.js';
+import { umbrellaLiveSessionLease } from '../paths.js';
+import { acquireLeaseIfFree, writeLease } from './live_session_lease.js';
+/**
+ * Claim/refresh the session's umbrella chat lease (acquire-if-free). Returns
+ * true iff this session now holds it. No-op (false) when: the session id is
+ * empty/unknown, no channels.json, the cwd resolves to no umbrella, the
+ * configured `responder` is not `session`, or a different live session holds a
+ * fresh lease.
+ */
+export async function claimUmbrellaLeaseForSession(sessionId, cwd = process.cwd(), opts) {
+    try {
+        if (sessionId === '' || sessionId === 'unknown')
+            return false;
+        const cfg = await loadChannelsConfig().catch(() => null);
+        if (cfg === null)
+            return false;
+        if ((cfg.responder ?? 'session') !== 'session')
+            return false; // headless mode → yield
+        const umbrellaId = resolveUmbrellaForCwd(cfg, cwd);
+        if (umbrellaId === null || umbrellaId === '')
+            return false;
+        const leasePath = umbrellaLiveSessionLease(umbrellaId);
+        // The PROJECT (umbrella) is stable but the SESSION changes — every fresh start /
+        // resume is a different live session. A NEW session start is the user's deliberate
+        // signal "route chat HERE now", so it TAKES OVER the lease (newest-session-wins),
+        // even from a still-fresh prior holder — otherwise a just-ended session's lease (or a
+        // leftover heartbeat) leaves chat pinned to a session that's gone (the observed
+        // stale-lease-to-dead-session bug). The MID-session heartbeat (UPS/Stop) stays
+        // acquire-if-free so it never steals from a genuinely concurrent live session.
+        if (opts?.forceTakeover === true) {
+            await writeLease(leasePath, sessionId);
+            return true;
+        }
+        return await acquireLeaseIfFree(leasePath, sessionId);
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=claim_lease.js.map

package/dist/runtime/chat/claim_lease.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claim_lease.js","sourceRoot":"","sources":["../../../src/runtime/chat/claim_lease.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AACtF,OAAO,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AAEvD,OAAO,EAAE,kBAAkB,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAEzE;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,SAAiB,EACjB,MAAc,OAAO,CAAC,GAAG,EAAE,EAC3B,IAAkC;IAElC,IAAI,CAAC;QACH,IAAI,SAAS,KAAK,EAAE,IAAI,SAAS,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QAC9D,MAAM,GAAG,GAAG,MAAM,kBAAkB,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACzD,IAAI,GAAG,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QAC/B,IAAI,CAAC,GAAG,CAAC,SAAS,IAAI,SAAS,CAAC,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC,CAAC,wBAAwB;QACtF,MAAM,UAAU,GAAG,qBAAqB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACnD,IAAI,UAAU,KAAK,IAAI,IAAI,UAAU,KAAK,EAAE;YAAE,OAAO,KAAK,CAAC;QAC3D,MAAM,SAAS,GAAG,wBAAwB,CAAC,UAAU,CAAC,CAAC;QACvD,iFAAiF;QACjF,mFAAmF;QACnF,kFAAkF;QAClF,sFAAsF;QACtF,gFAAgF;QAChF,+EAA+E;QAC/E,+EAA+E;QAC/E,IAAI,IAAI,EAAE,aAAa,KAAK,IAAI,EAAE,CAAC;YACjC,MAAM,UAAU,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YACvC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,MAAM,kBAAkB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/runtime/chat/inbound_watch.d.ts

@@ -0,0 +1,58 @@
+/**
+ * Inbound watcher (T-L3-LOOP LL.3; re-keyed project_uuid → UMBRELLA in
+ * T-CHAT-AS-TERMINAL CAT.1c) — chokidar-backed tail of every live umbrella's
+ * `~/.opensquid/umbrellas/<id>/inbox/<platform>.jsonl`. On each new row, parses
+ * to `InboxRow`, resolves the target session via LL.2, constructs an
+ * `InboundChannelEvent`, and calls `dispatchEvent` so any loaded pack with
+ * `triggers: [{kind: 'inbound_channel', ...}]` fires.
+ *
+ * "Lazy push" semantics per L7: rows with no fresh session are appended
+ * to `~/.opensquid/umbrellas/<id>/inbox/unrouted.jsonl` + LEFT in the
+ * inbox (no ack). The LL.4 UPS hook drains the backlog on demand at the
+ * next session prompt-submit.
+ *
+ * The watcher itself is dispatch-only — it does NOT inject into the
+ * `additionalContext` envelope (that's LL.4's job at UPS fire time).
+ * Splitting the two keeps dispatcher semantics (per-event) cleanly
+ * distinct from the additionalContext semantics (per-turn aggregation).
+ *
+ * Performance: chokidar with `awaitWriteFinish: { stabilityThreshold: 100,
+ * pollInterval: 50 }` (matches the precedent in
+ * `src/runtime/agent_bridge/transport_bridge.ts`). Byte-offset tracking
+ * via `stat.size`; re-read only the appended slice on each `change`.
+ *
+ * Durability: byte-offset state is in-memory only. Watcher restart loses
+ * offsets → re-reads from start → multi-fires every existing row. The
+ * LL.4 ack-set is the durability boundary — duplicate dispatches are
+ * harmless because LL.4 dedups via `acked.jsonl`. Documented intent.
+ *
+ * Imports from: chokidar, node:fs/promises, node:path, ./inbox,
+ *   ./session_routing, ../paths, ../bootstrap, ../hooks/dispatch.
+ * Imported by: src/runtime/chat/watch_cli.ts (lifecycle start/stop).
+ */
+import { InboxRow, type Platform } from './inbox.js';
+/**
+ * Build a stable channelUri per L9: `<platform>://<channel>[/<thread_id>]`.
+ * Lossless round-trip with `platformFromChannelUri`.
+ */
+export declare function buildChannelUri(row: InboxRow): string;
+/**
+ * Parse the scheme prefix from a channelUri. Used by the dispatcher filter
+ * to compare against `Trigger.channel` (which is a bare literal like
+ * `'telegram'`). Returns null for unrecognized schemes.
+ */
+export declare function platformFromChannelUri(uri: string): Platform | null;
+/**
+ * Process one newly-appended inbox row: resolve target session, fire
+ * event, or record unrouted. Pure-ish (one lease read + one dispatch).
+ */
+export declare function processRow(umbrellaId: string, row: InboxRow): Promise<void>;
+/** Extract `<id>` from `~/.opensquid/umbrellas/<id>/inbox/<platform>.jsonl`. */
+export declare function extractUmbrellaId(path: string): string | null;
+/**
+ * Start watching every live umbrella's inbox files. Returns a cleanup
+ * function the CLI calls on exit. Re-scans every 60s to pick up umbrellas
+ * that come online after the watcher started.
+ */
+export declare function startInboundWatcher(): Promise<() => Promise<void>>;
+//# sourceMappingURL=inbound_watch.d.ts.map

package/dist/runtime/chat/inbound_watch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inbound_watch.d.ts","sourceRoot":"","sources":["../../../src/runtime/chat/inbound_watch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAYH,OAAO,EAAE,QAAQ,EAAE,KAAK,QAAQ,EAAE,MAAM,YAAY,CAAC;AAWrD;;;GAGG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,QAAQ,GAAG,MAAM,CAGrD;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,QAAQ,GAAG,IAAI,CAInE;AAwBD;;;GAGG;AACH,wBAAsB,UAAU,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAmBjF;AA4CD,gFAAgF;AAChF,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAG7D;AAED;;;;GAIG;AACH,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,CAoCxE"}

package/dist/runtime/chat/inbound_watch.js

@@ -0,0 +1,194 @@
+/**
+ * Inbound watcher (T-L3-LOOP LL.3; re-keyed project_uuid → UMBRELLA in
+ * T-CHAT-AS-TERMINAL CAT.1c) — chokidar-backed tail of every live umbrella's
+ * `~/.opensquid/umbrellas/<id>/inbox/<platform>.jsonl`. On each new row, parses
+ * to `InboxRow`, resolves the target session via LL.2, constructs an
+ * `InboundChannelEvent`, and calls `dispatchEvent` so any loaded pack with
+ * `triggers: [{kind: 'inbound_channel', ...}]` fires.
+ *
+ * "Lazy push" semantics per L7: rows with no fresh session are appended
+ * to `~/.opensquid/umbrellas/<id>/inbox/unrouted.jsonl` + LEFT in the
+ * inbox (no ack). The LL.4 UPS hook drains the backlog on demand at the
+ * next session prompt-submit.
+ *
+ * The watcher itself is dispatch-only — it does NOT inject into the
+ * `additionalContext` envelope (that's LL.4's job at UPS fire time).
+ * Splitting the two keeps dispatcher semantics (per-event) cleanly
+ * distinct from the additionalContext semantics (per-turn aggregation).
+ *
+ * Performance: chokidar with `awaitWriteFinish: { stabilityThreshold: 100,
+ * pollInterval: 50 }` (matches the precedent in
+ * `src/runtime/agent_bridge/transport_bridge.ts`). Byte-offset tracking
+ * via `stat.size`; re-read only the appended slice on each `change`.
+ *
+ * Durability: byte-offset state is in-memory only. Watcher restart loses
+ * offsets → re-reads from start → multi-fires every existing row. The
+ * LL.4 ack-set is the durability boundary — duplicate dispatches are
+ * harmless because LL.4 dedups via `acked.jsonl`. Documented intent.
+ *
+ * Imports from: chokidar, node:fs/promises, node:path, ./inbox,
+ *   ./session_routing, ../paths, ../bootstrap, ../hooks/dispatch.
+ * Imported by: src/runtime/chat/watch_cli.ts (lifecycle start/stop).
+ */
+import { appendFile, mkdir, open, stat } from 'node:fs/promises';
+import { dirname, join } from 'node:path';
+import chokidar from 'chokidar';
+import { buildRegistry, loadActivePacks } from '../bootstrap.js';
+import { dispatchEvent } from '../hooks/dispatch.js';
+import { umbrellaInboxDir, umbrellaInboxFile } from '../paths.js';
+import { InboxRow } from './inbox.js';
+import { resolveAllLiveUmbrellas, resolveLiveSessionId } from './session_routing.js';
+const PLATFORMS = ['telegram', 'slack', 'discord'];
+const RESCAN_MS = 60_000;
+/**
+ * Build a stable channelUri per L9: `<platform>://<channel>[/<thread_id>]`.
+ * Lossless round-trip with `platformFromChannelUri`.
+ */
+export function buildChannelUri(row) {
+    const base = `${row.platform}://${row.channel}`;
+    return row.thread_id !== undefined ? `${base}/${row.thread_id}` : base;
+}
+/**
+ * Parse the scheme prefix from a channelUri. Used by the dispatcher filter
+ * to compare against `Trigger.channel` (which is a bare literal like
+ * `'telegram'`). Returns null for unrecognized schemes.
+ */
+export function platformFromChannelUri(uri) {
+    const m = /^(telegram|slack|discord):\/\//.exec(uri);
+    if (m === null)
+        return null;
+    return m[1];
+}
+/**
+ * Append a row to the umbrella's `inbox/unrouted.jsonl`. Best-effort: never
+ * throws (parent dir created on demand; append errors swallowed).
+ */
+async function appendUnrouted(umbrellaId, row, reason) {
+    const path = join(umbrellaInboxDir(umbrellaId), 'unrouted.jsonl');
+    const entry = {
+        v: 1,
+        occurred_at: new Date().toISOString(),
+        umbrella_id: umbrellaId,
+        message_id: row.id,
+        platform: row.platform,
+        reason,
+    };
+    try {
+        await mkdir(dirname(path), { recursive: true });
+        await appendFile(path, JSON.stringify(entry) + '\n', 'utf8');
+    }
+    catch {
+        // swallow — unrouted log is best-effort
+    }
+}
+/**
+ * Process one newly-appended inbox row: resolve target session, fire
+ * event, or record unrouted. Pure-ish (one lease read + one dispatch).
+ */
+export async function processRow(umbrellaId, row) {
+    const sessionId = await resolveLiveSessionId(umbrellaId);
+    if (sessionId === null) {
+        await appendUnrouted(umbrellaId, row, 'no_fresh_live_session_lease');
+        return;
+    }
+    const event = {
+        kind: 'inbound_channel',
+        channelUri: buildChannelUri(row),
+        sender: row.sender,
+        text: row.text,
+        receivedAt: row.received_at,
+        ...(row.thread_id !== undefined ? { threadKey: row.thread_id } : {}),
+    };
+    const packs = await loadActivePacks(sessionId);
+    const registry = await buildRegistry();
+    await dispatchEvent(event, packs, registry, sessionId);
+}
+/**
+ * Read appended bytes from `filePath` since `lastOffset`, parse each line,
+ * dispatch each valid InboxRow. Updates the offset map. Handles truncation
+ * (size < lastOffset) by resetting to 0 and re-reading from start.
+ */
+async function drainAppended(umbrellaId, filePath, state) {
+    const s = await stat(filePath).catch(() => null);
+    if (s === null)
+        return;
+    const lastOffset = state.offsets.get(filePath) ?? 0;
+    if (s.size === lastOffset)
+        return;
+    if (s.size < lastOffset)
+        state.offsets.set(filePath, 0);
+    const start = state.offsets.get(filePath) ?? 0;
+    const handle = await open(filePath, 'r');
+    try {
+        const { buffer, bytesRead } = await handle.read({
+            buffer: Buffer.alloc(s.size - start),
+            position: start,
+        });
+        state.offsets.set(filePath, start + bytesRead);
+        const text = buffer.subarray(0, bytesRead).toString('utf8');
+        for (const line of text.split('\n')) {
+            if (line.length === 0)
+                continue;
+            let parsed;
+            try {
+                parsed = JSON.parse(line);
+            }
+            catch {
+                continue;
+            }
+            const safe = InboxRow.safeParse(parsed);
+            if (!safe.success)
+                continue;
+            await processRow(umbrellaId, safe.data);
+        }
+    }
+    finally {
+        await handle.close();
+    }
+}
+/** Extract `<id>` from `~/.opensquid/umbrellas/<id>/inbox/<platform>.jsonl`. */
+export function extractUmbrellaId(path) {
+    const m = /umbrellas\/([^/]+)\/inbox\//.exec(path);
+    return m === null ? null : (m[1] ?? null);
+}
+/**
+ * Start watching every live umbrella's inbox files. Returns a cleanup
+ * function the CLI calls on exit. Re-scans every 60s to pick up umbrellas
+ * that come online after the watcher started.
+ */
+export async function startInboundWatcher() {
+    const state = {
+        watcher: chokidar.watch([], {
+            ignoreInitial: true,
+            awaitWriteFinish: { stabilityThreshold: 100, pollInterval: 50 },
+        }),
+        offsets: new Map(),
+    };
+    async function attachLiveUmbrellas() {
+        const bindings = await resolveAllLiveUmbrellas();
+        for (const { umbrellaId } of bindings) {
+            for (const platform of PLATFORMS) {
+                state.watcher.add(umbrellaInboxFile(umbrellaId, platform));
+            }
+        }
+    }
+    await attachLiveUmbrellas();
+    const rescan = setInterval(() => {
+        void attachLiveUmbrellas();
+    }, RESCAN_MS);
+    state.watcher.on('add', (filePath) => {
+        const id = extractUmbrellaId(filePath);
+        if (id !== null)
+            void drainAppended(id, filePath, state);
+    });
+    state.watcher.on('change', (filePath) => {
+        const id = extractUmbrellaId(filePath);
+        if (id !== null)
+            void drainAppended(id, filePath, state);
+    });
+    return async () => {
+        clearInterval(rescan);
+        await state.watcher.close();
+    };
+}
+//# sourceMappingURL=inbound_watch.js.map

package/dist/runtime/chat/inbound_watch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inbound_watch.js","sourceRoot":"","sources":["../../../src/runtime/chat/inbound_watch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,QAAQ,MAAM,UAAU,CAAC;AAEhC,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAEjE,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAElE,OAAO,EAAE,QAAQ,EAAiB,MAAM,YAAY,CAAC;AACrD,OAAO,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAErF,MAAM,SAAS,GAAG,CAAC,UAAU,EAAE,OAAO,EAAE,SAAS,CAAU,CAAC;AAC5D,MAAM,SAAS,GAAG,MAAM,CAAC;AAOzB;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,GAAa;IAC3C,MAAM,IAAI,GAAG,GAAG,GAAG,CAAC,QAAQ,MAAM,GAAG,CAAC,OAAO,EAAE,CAAC;IAChD,OAAO,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACzE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,GAAW;IAChD,MAAM,CAAC,GAAG,gCAAgC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrD,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC5B,OAAO,CAAC,CAAC,CAAC,CAAa,CAAC;AAC1B,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,cAAc,CAAC,UAAkB,EAAE,GAAa,EAAE,MAAc;IAC7E,MAAM,IAAI,GAAG,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,EAAE,gBAAgB,CAAC,CAAC;IAClE,MAAM,KAAK,GAAG;QACZ,CAAC,EAAE,CAAC;QACJ,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,WAAW,EAAE,UAAU;QACvB,UAAU,EAAE,GAAG,CAAC,EAAE;QAClB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,MAAM;KACP,CAAC;IACF,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,MAAM,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,wCAAwC;IAC1C,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,UAAkB,EAAE,GAAa;IAChE,MAAM,SAAS,GAAG,MAAM,oBAAoB,CAAC,UAAU,CAAC,CAAC;IACzD,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACvB,MAAM,cAAc,CAAC,UAAU,EAAE,GAAG,EAAE,6BAA6B,CAAC,CAAC;QACrE,OAAO;IACT,CAAC;IAED,MAAM,KAAK,GAAwB;QACjC,IAAI,EAAE,iBAAiB;QACvB,UAAU,EAAE,eAAe,CAAC,GAAG,CAAC;QAChC,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,UAAU,EAAE,GAAG,CAAC,WAAW;QAC3B,GAAG,CAAC,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrE,CAAC;IAEF,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,SAAS,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,MAAM,aAAa,EAAE,CAAC;IACvC,MAAM,aAAa,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;AACzD,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,aAAa,CAC1B,UAAkB,EAClB,QAAgB,EAChB,KAAmB;IAEnB,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IACjD,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO;IACvB,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACpD,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU;QAAE,OAAO;IAClC,IAAI,CAAC,CAAC,IAAI,GAAG,UAAU;QAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;IAExD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IACzC,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC;YAC9C,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC;YACpC,QAAQ,EAAE,KAAK;SAChB,CAAC,CAAC;QACH,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,GAAG,SAAS,CAAC,CAAC;QAC/C,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC5D,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACpC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YAChC,IAAI,MAAe,CAAC;YACpB,IAAI,CAAC;gBACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;YACD,MAAM,IAAI,GAAG,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YACxC,IAAI,CAAC,IAAI,CAAC,OAAO;gBAAE,SAAS;YAC5B,MAAM,UAAU,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,MAAM,CAAC,GAAG,6BAA6B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnD,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;AAC5C,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB;IACvC,MAAM,KAAK,GAAiB;QAC1B,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,EAAE;YAC1B,aAAa,EAAE,IAAI;YACnB,gBAAgB,EAAE,EAAE,kBAAkB,EAAE,GAAG,EAAE,YAAY,EAAE,EAAE,EAAE;SAChE,CAAC;QACF,OAAO,EAAE,IAAI,GAAG,EAAE;KACnB,CAAC;IAEF,KAAK,UAAU,mBAAmB;QAChC,MAAM,QAAQ,GAAG,MAAM,uBAAuB,EAAE,CAAC;QACjD,KAAK,MAAM,EAAE,UAAU,EAAE,IAAI,QAAQ,EAAE,CAAC;YACtC,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;gBACjC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,mBAAmB,EAAE,CAAC;IAC5B,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,EAAE;QAC9B,KAAK,mBAAmB,EAAE,CAAC;IAC7B,CAAC,EAAE,SAAS,CAAC,CAAC;IAEd,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,QAAgB,EAAE,EAAE;QAC3C,MAAM,EAAE,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QACvC,IAAI,EAAE,KAAK,IAAI;YAAE,KAAK,aAAa,CAAC,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IACH,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAgB,EAAE,EAAE;QAC9C,MAAM,EAAE,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QACvC,IAAI,EAAE,KAAK,IAAI;YAAE,KAAK,aAAa,CAAC,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,OAAO,KAAK,IAAI,EAAE;QAChB,aAAa,CAAC,MAAM,CAAC,CAAC;QACtB,MAAM,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IAC9B,CAAC,CAAC;AACJ,CAAC"}

package/dist/runtime/chat/inbox.d.ts

@@ -0,0 +1,161 @@
+/**
+ * Inbox row + ack row schemas for the L3 communication loop (T-L3-LOOP LL.1).
+ *
+ * The chat-daemon writes one inbound message per line to
+ * `~/.opensquid/umbrellas/<umbrellaId>/inbox/<platform>.jsonl` (the on-disk
+ * contract documented at `src/runtime/paths.ts`, `umbrellaInboxFile`). Until
+ * LL.1 this shape was implicit — declared inline in
+ * `src/mcp/chat-bridge-server.ts` as `interface InboxMessage`. LL.1 lifts it
+ * to a single Zod source-of-truth so the MCP tool, the chokidar tail watcher
+ * (LL.3), and the UPS hook (LL.4) all bind to the same parser. CAT.1c re-keyed
+ * the readers from per-cwd `project_uuid` to UMBRELLA (the row shape is
+ * byte-identical; only the key + path change).
+ *
+ * `AckRow` is the LL.4-locked ack ledger row: append-only to
+ * `~/.opensquid/umbrellas/<umbrellaId>/inbox/acked.jsonl`. The (platform,
+ * message_id, injected_at_sessionId) triple is the dedup key per L2 of the
+ * T-L3-LOOP locked decisions.
+ *
+ * `v: z.literal(1)` is a forward-compat envelope marker — when the daemon
+ * eventually bumps the format, both readers + writer migrate atomically.
+ * AckRow.safeParse on a v:2 row returns failure → row treated as "not acked"
+ * → duplicate injection. LL.4 documents the mitigation in its dedup loop.
+ *
+ * `readInbox` + `readAcked` are best-effort: malformed lines are silently
+ * skipped (the daemon writes valid JSON per row but a partial write at the
+ * tail is possible during rotation). LL.5 documents the silent-skip behavior.
+ *
+ * Imports from: zod, node:fs/promises, ../paths.
+ * Imported by: src/mcp/chat-bridge-server.ts (read tool); LL.3 inbound_watch.ts
+ *   (chokidar tail); LL.4 user-prompt-submit.ts (inject + ack); tests.
+ */
+import { z } from 'zod';
+export declare const Platform: z.ZodEnum<["telegram", "discord", "slack"]>;
+export type Platform = z.infer<typeof Platform>;
+export declare const InboxMedia: z.ZodObject<{
+    kind: z.ZodEnum<["photo", "document"]>;
+    path: z.ZodString;
+    caption: z.ZodOptional<z.ZodString>;
+    mime: z.ZodOptional<z.ZodString>;
+}, "strict", z.ZodTypeAny, {
+    path: string;
+    kind: "photo" | "document";
+    caption?: string | undefined;
+    mime?: string | undefined;
+}, {
+    path: string;
+    kind: "photo" | "document";
+    caption?: string | undefined;
+    mime?: string | undefined;
+}>;
+export type InboxMedia = z.infer<typeof InboxMedia>;
+export declare const InboxRow: z.ZodObject<{
+    v: z.ZodLiteral<1>;
+    id: z.ZodString;
+    thread_id: z.ZodOptional<z.ZodString>;
+    platform: z.ZodEnum<["telegram", "discord", "slack"]>;
+    channel: z.ZodString;
+    sender: z.ZodString;
+    sender_id: z.ZodString;
+    text: z.ZodString;
+    received_at: z.ZodString;
+    enqueued_at: z.ZodString;
+    mentions_bot: z.ZodBoolean;
+    media: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        kind: z.ZodEnum<["photo", "document"]>;
+        path: z.ZodString;
+        caption: z.ZodOptional<z.ZodString>;
+        mime: z.ZodOptional<z.ZodString>;
+    }, "strict", z.ZodTypeAny, {
+        path: string;
+        kind: "photo" | "document";
+        caption?: string | undefined;
+        mime?: string | undefined;
+    }, {
+        path: string;
+        kind: "photo" | "document";
+        caption?: string | undefined;
+        mime?: string | undefined;
+    }>, "many">>;
+}, "strict", z.ZodTypeAny, {
+    id: string;
+    sender: string;
+    text: string;
+    channel: string;
+    platform: "telegram" | "discord" | "slack";
+    v: 1;
+    sender_id: string;
+    received_at: string;
+    enqueued_at: string;
+    mentions_bot: boolean;
+    media?: {
+        path: string;
+        kind: "photo" | "document";
+        caption?: string | undefined;
+        mime?: string | undefined;
+    }[] | undefined;
+    thread_id?: string | undefined;
+}, {
+    id: string;
+    sender: string;
+    text: string;
+    channel: string;
+    platform: "telegram" | "discord" | "slack";
+    v: 1;
+    sender_id: string;
+    received_at: string;
+    enqueued_at: string;
+    mentions_bot: boolean;
+    media?: {
+        path: string;
+        kind: "photo" | "document";
+        caption?: string | undefined;
+        mime?: string | undefined;
+    }[] | undefined;
+    thread_id?: string | undefined;
+}>;
+export type InboxRow = z.infer<typeof InboxRow>;
+export declare const AckRow: z.ZodObject<{
+    v: z.ZodLiteral<1>;
+    message_id: z.ZodString;
+    platform: z.ZodEnum<["telegram", "discord", "slack"]>;
+    injected_at_sessionId: z.ZodString;
+    injected_at_timestamp: z.ZodString;
+}, "strict", z.ZodTypeAny, {
+    platform: "telegram" | "discord" | "slack";
+    message_id: string;
+    v: 1;
+    injected_at_sessionId: string;
+    injected_at_timestamp: string;
+}, {
+    platform: "telegram" | "discord" | "slack";
+    message_id: string;
+    v: 1;
+    injected_at_sessionId: string;
+    injected_at_timestamp: string;
+}>;
+export type AckRow = z.infer<typeof AckRow>;
+/**
+ * Read every InboxRow from an umbrella's per-platform inbox file. Malformed
+ * lines are silently skipped — the daemon writes valid JSON per row but a
+ * partial write at the tail is possible during rotation. ENOENT → empty.
+ */
+export declare function readInbox(umbrellaId: string, platform: Platform): Promise<InboxRow[]>;
+/**
+ * Read every AckRow for an umbrella. Used by LL.4 UPS hook to build the
+ * dedup set before deciding which inbox rows to inject. Same silent-skip
+ * semantics as `readInbox`.
+ */
+export declare function readAcked(umbrellaId: string): Promise<AckRow[]>;
+/**
+ * Build the canonical dedup-key string used by the inject/ack loop.
+ *
+ * LL4FIX.1 (2026-05-31): drops `sessionId` from the key. Previously the
+ * key was `${platform}::${messageId}::${sessionId}`, making acks per-session
+ * — every new Claude Code session re-injected the entire backlog because
+ * no prior-session ack matched. The fix derives dedup keys from
+ * (platform, message_id) only; AckRow.injected_at_sessionId is still
+ * RECORDED as audit metadata + drives 7-day purge eligibility.
+ */
+export declare function ackKey(platform: Platform, messageId: string): string;
+//# sourceMappingURL=inbox.d.ts.map

package/dist/runtime/chat/inbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inbox.d.ts","sourceRoot":"","sources":["../../../src/runtime/chat/inbox.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAIH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAUxB,eAAO,MAAM,QAAQ,6CAA2C,CAAC;AACjE,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,QAAQ,CAAC,CAAC;AAgBhD,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;EAOZ,CAAC;AACZ,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC;AAEpD,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAeV,CAAC;AACZ,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,QAAQ,CAAC,CAAC;AAUhD,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;;;;EAQR,CAAC;AACZ,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,MAAM,CAAC,CAAC;AAE5C;;;;GAIG;AACH,wBAAsB,SAAS,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,CAoB3F;AAED;;;;GAIG;AACH,wBAAsB,SAAS,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAoBrE;AAED;;;;;;;;;GASG;AACH,wBAAgB,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAEpE"}