opensquid 0.5.395

package/dist/runtime/chat/inbox.js

@@ -0,0 +1,167 @@
+/**
+ * Inbox row + ack row schemas for the L3 communication loop (T-L3-LOOP LL.1).
+ *
+ * The chat-daemon writes one inbound message per line to
+ * `~/.opensquid/umbrellas/<umbrellaId>/inbox/<platform>.jsonl` (the on-disk
+ * contract documented at `src/runtime/paths.ts`, `umbrellaInboxFile`). Until
+ * LL.1 this shape was implicit — declared inline in
+ * `src/mcp/chat-bridge-server.ts` as `interface InboxMessage`. LL.1 lifts it
+ * to a single Zod source-of-truth so the MCP tool, the chokidar tail watcher
+ * (LL.3), and the UPS hook (LL.4) all bind to the same parser. CAT.1c re-keyed
+ * the readers from per-cwd `project_uuid` to UMBRELLA (the row shape is
+ * byte-identical; only the key + path change).
+ *
+ * `AckRow` is the LL.4-locked ack ledger row: append-only to
+ * `~/.opensquid/umbrellas/<umbrellaId>/inbox/acked.jsonl`. The (platform,
+ * message_id, injected_at_sessionId) triple is the dedup key per L2 of the
+ * T-L3-LOOP locked decisions.
+ *
+ * `v: z.literal(1)` is a forward-compat envelope marker — when the daemon
+ * eventually bumps the format, both readers + writer migrate atomically.
+ * AckRow.safeParse on a v:2 row returns failure → row treated as "not acked"
+ * → duplicate injection. LL.4 documents the mitigation in its dedup loop.
+ *
+ * `readInbox` + `readAcked` are best-effort: malformed lines are silently
+ * skipped (the daemon writes valid JSON per row but a partial write at the
+ * tail is possible during rotation). LL.5 documents the silent-skip behavior.
+ *
+ * Imports from: zod, node:fs/promises, ../paths.
+ * Imported by: src/mcp/chat-bridge-server.ts (read tool); LL.3 inbound_watch.ts
+ *   (chokidar tail); LL.4 user-prompt-submit.ts (inject + ack); tests.
+ */
+import { readFile } from 'node:fs/promises';
+import { z } from 'zod';
+import { umbrellaInboxAckedPath, umbrellaInboxFile } from '../paths.js';
+// ---------------------------------------------------------------------------
+// Platform enum — opensquid currently bridges Telegram + Slack + Discord
+// per chat-bridge-server's existing channel typing. Extending requires
+// updating the chat-daemon writer + every consumer; keep the closed list.
+// ---------------------------------------------------------------------------
+export const Platform = z.enum(['telegram', 'discord', 'slack']);
+// ---------------------------------------------------------------------------
+// InboxRow — the chat-daemon's on-disk inbound message envelope.
+//
+// Field set MUST stay byte-for-byte compatible with the inline shape at
+// `src/mcp/chat-bridge-server.ts:InboxMessage` (refactor target) so existing
+// daemon writes parse unchanged. Note `id` (not `message_id`) — matches the
+// daemon writer; AckRow uses `message_id` (clearer in ack context per L13;
+// the asymmetry is intentional).
+// ---------------------------------------------------------------------------
+// CAT.4 — inbound media attachment (downloaded-to-file). ADDITIVE: rows
+// written before CAT.4 carry no `media` key and still parse (optional). The
+// agent Reads `path` to view the file (Read handles images). `.strict()`
+// inside so an unknown media key is rejected, consistent with the row schema.
+export const InboxMedia = z
+    .object({
+    kind: z.enum(['photo', 'document']),
+    path: z.string().min(1),
+    caption: z.string().optional(),
+    mime: z.string().optional(),
+})
+    .strict();
+export const InboxRow = z
+    .object({
+    v: z.literal(1),
+    id: z.string().min(1),
+    thread_id: z.string().optional(),
+    platform: Platform,
+    channel: z.string(),
+    sender: z.string(),
+    sender_id: z.string(),
+    text: z.string(),
+    received_at: z.string(),
+    enqueued_at: z.string(),
+    mentions_bot: z.boolean(),
+    media: z.array(InboxMedia).optional(),
+})
+    .strict();
+// ---------------------------------------------------------------------------
+// AckRow — LL.4 ack ledger row. Append-only; never edited or deleted.
+// Dedup key = `${platform}::${message_id}::${sessionId}`.
+//
+// `message_id` (not `id`) — intentional asymmetry from InboxRow; ack context
+// is clearer when the field reads as a foreign key.
+// ---------------------------------------------------------------------------
+export const AckRow = z
+    .object({
+    v: z.literal(1),
+    message_id: z.string().min(1),
+    platform: Platform,
+    injected_at_sessionId: z.string().min(1),
+    injected_at_timestamp: z.string(),
+})
+    .strict();
+/**
+ * Read every InboxRow from an umbrella's per-platform inbox file. Malformed
+ * lines are silently skipped — the daemon writes valid JSON per row but a
+ * partial write at the tail is possible during rotation. ENOENT → empty.
+ */
+export async function readInbox(umbrellaId, platform) {
+    let raw;
+    try {
+        raw = await readFile(umbrellaInboxFile(umbrellaId, platform), 'utf8');
+    }
+    catch {
+        return [];
+    }
+    const out = [];
+    for (const line of raw.split('\n')) {
+        if (line.length === 0)
+            continue;
+        let parsed;
+        try {
+            parsed = JSON.parse(line);
+        }
+        catch {
+            continue;
+        }
+        const safe = InboxRow.safeParse(parsed);
+        if (safe.success)
+            out.push(safe.data);
+    }
+    return out;
+}
+/**
+ * Read every AckRow for an umbrella. Used by LL.4 UPS hook to build the
+ * dedup set before deciding which inbox rows to inject. Same silent-skip
+ * semantics as `readInbox`.
+ */
+export async function readAcked(umbrellaId) {
+    let raw;
+    try {
+        raw = await readFile(umbrellaInboxAckedPath(umbrellaId), 'utf8');
+    }
+    catch {
+        return [];
+    }
+    const out = [];
+    for (const line of raw.split('\n')) {
+        if (line.length === 0)
+            continue;
+        let parsed;
+        try {
+            parsed = JSON.parse(line);
+        }
+        catch {
+            continue;
+        }
+        const safe = AckRow.safeParse(parsed);
+        if (safe.success)
+            out.push(safe.data);
+    }
+    return out;
+}
+/**
+ * Build the canonical dedup-key string used by the inject/ack loop.
+ *
+ * LL4FIX.1 (2026-05-31): drops `sessionId` from the key. Previously the
+ * key was `${platform}::${messageId}::${sessionId}`, making acks per-session
+ * — every new Claude Code session re-injected the entire backlog because
+ * no prior-session ack matched. The fix derives dedup keys from
+ * (platform, message_id) only; AckRow.injected_at_sessionId is still
+ * RECORDED as audit metadata + drives 7-day purge eligibility.
+ */
+export function ackKey(platform, messageId) {
+    return `${platform}::${messageId}`;
+}
+//# sourceMappingURL=inbox.js.map

package/dist/runtime/chat/inbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inbox.js","sourceRoot":"","sources":["../../../src/runtime/chat/inbox.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE5C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAExE,8EAA8E;AAC9E,yEAAyE;AACzE,uEAAuE;AACvE,0EAA0E;AAC1E,8EAA8E;AAE9E,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;AAGjE,8EAA8E;AAC9E,iEAAiE;AACjE,EAAE;AACF,wEAAwE;AACxE,6EAA6E;AAC7E,4EAA4E;AAC5E,2EAA2E;AAC3E,iCAAiC;AACjC,8EAA8E;AAE9E,wEAAwE;AACxE,4EAA4E;AAC5E,yEAAyE;AACzE,8EAA8E;AAC9E,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC;KACxB,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IACnC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC5B,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC;KACtB,MAAM,CAAC;IACN,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACf,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,QAAQ,EAAE,QAAQ;IAClB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE;IACzB,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,QAAQ,EAAE;CACtC,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,8EAA8E;AAC9E,sEAAsE;AACtE,0DAA0D;AAC1D,EAAE;AACF,6EAA6E;AAC7E,oDAAoD;AACpD,8EAA8E;AAE9E,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC;KACpB,MAAM,CAAC;IACN,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACf,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,QAAQ,EAAE,QAAQ;IAClB,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxC,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE;CAClC,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,UAAkB,EAAE,QAAkB;IACpE,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,QAAQ,CAAC,iBAAiB,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC;IACxE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,GAAG,GAAe,EAAE,CAAC;IAC3B,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAChC,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,IAAI,CAAC,OAAO;YAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,UAAkB;IAChD,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,QAAQ,CAAC,sBAAsB,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAChC,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACtC,IAAI,IAAI,CAAC,OAAO;YAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,MAAM,CAAC,QAAkB,EAAE,SAAiB;IAC1D,OAAO,GAAG,QAAQ,KAAK,SAAS,EAAE,CAAC;AACrC,CAAC"}

package/dist/runtime/chat/inbox_drain.d.ts

@@ -0,0 +1,43 @@
+/**
+ * Shared umbrella-inbox drain (T-CHAT-AS-TERMINAL CAT.2).
+ *
+ * One drain, two callers:
+ *   - UserPromptSubmit hook — emits the envelope as `additionalContext`
+ *     (delivery ON the user's keystroke); and
+ *   - Stop hook — emits the envelope as a `{decision:'block', reason}` so the
+ *     inbound message DRIVES a turn at the turn boundary (no keystroke).
+ *
+ * Both call this one function, so the ACK ledger is shared: a message drained
+ * by either path is acked-before-return and never delivered twice (UPS won't
+ * re-inject what Stop drove, and vice versa). This is the durable loop-guard
+ * for the Stop-drive — only genuinely-new inbound produces a fresh envelope.
+ *
+ * Umbrella resolution + the read/compute/build/ack/purge flow live here (lifted
+ * verbatim from the former UPS `drainInboxEnvelope`). Fail-open: any error, or a
+ * cwd that resolves to no umbrella, returns '' (the caller proceeds).
+ *
+ * Imports from: ./inbox, ./inbox_inject, ./inbox_writer, ../../channels/routing.
+ * Imported by: src/runtime/hooks/{user-prompt-submit,stop}.ts + tests.
+ */
+/**
+ * Drain the unacked inbox rows for the session's umbrella into one envelope
+ * string, ACK-BEFORE-RETURN. Returns '' when there is nothing to deliver, when
+ * cwd resolves to no umbrella, or on any error (fail-open).
+ *
+ * `cwd` defaults to `process.cwd()`; the Stop hook passes the cwd from its
+ * payload so the umbrella resolves against the session's launch dir.
+ */
+export declare function drainUmbrellaInbox(sessionId: string, cwd?: string): Promise<string>;
+/**
+ * READ-ONLY twin of {@link drainUmbrellaInbox} (T-CHAT-INBOUND-SURFACE-MIDRUN SF.1).
+ * Returns the same unacked-inbound envelope, but does NOT ack and does NOT purge — so the
+ * message is SURFACED without being consumed and still DRIVES a proper response turn at the
+ * next clean stop (via `maybeDriveInbound`). Used by the Stop hook's drift branch to make a
+ * mid-run user message visible without breaking the no-pause discipline (the run continues).
+ *
+ * Deliberately a SEPARATE function rather than an `{ack:false}` flag on the drain: the
+ * drain's "ACK-BEFORE-RETURN exactly-once" contract is its durability invariant and stays
+ * pristine. Fail-open '' on any error / unresolved umbrella (mirrors the drain).
+ */
+export declare function peekUmbrellaInbox(sessionId: string, cwd?: string): Promise<string>;
+//# sourceMappingURL=inbox_drain.d.ts.map

package/dist/runtime/chat/inbox_drain.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inbox_drain.d.ts","sourceRoot":"","sources":["../../../src/runtime/chat/inbox_drain.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAeH;;;;;;;GAOG;AACH,wBAAsB,kBAAkB,CACtC,SAAS,EAAE,MAAM,EACjB,GAAG,GAAE,MAAsB,GAC1B,OAAO,CAAC,MAAM,CAAC,CAiCjB;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,iBAAiB,CACrC,SAAS,EAAE,MAAM,EACjB,GAAG,GAAE,MAAsB,GAC1B,OAAO,CAAC,MAAM,CAAC,CAgBjB"}

package/dist/runtime/chat/inbox_drain.js

@@ -0,0 +1,97 @@
+/**
+ * Shared umbrella-inbox drain (T-CHAT-AS-TERMINAL CAT.2).
+ *
+ * One drain, two callers:
+ *   - UserPromptSubmit hook — emits the envelope as `additionalContext`
+ *     (delivery ON the user's keystroke); and
+ *   - Stop hook — emits the envelope as a `{decision:'block', reason}` so the
+ *     inbound message DRIVES a turn at the turn boundary (no keystroke).
+ *
+ * Both call this one function, so the ACK ledger is shared: a message drained
+ * by either path is acked-before-return and never delivered twice (UPS won't
+ * re-inject what Stop drove, and vice versa). This is the durable loop-guard
+ * for the Stop-drive — only genuinely-new inbound produces a fresh envelope.
+ *
+ * Umbrella resolution + the read/compute/build/ack/purge flow live here (lifted
+ * verbatim from the former UPS `drainInboxEnvelope`). Fail-open: any error, or a
+ * cwd that resolves to no umbrella, returns '' (the caller proceeds).
+ *
+ * Imports from: ./inbox, ./inbox_inject, ./inbox_writer, ../../channels/routing.
+ * Imported by: src/runtime/hooks/{user-prompt-submit,stop}.ts + tests.
+ */
+import { loadChannelsConfig, resolveUmbrellaForCwd } from '../../channels/routing.js';
+import { readAcked, readInbox } from './inbox.js';
+import { buildAckRowsForInjected, buildInjectionEnvelope, computeUnackedRows, purgeOldAcks, } from './inbox_inject.js';
+import { appendAckRows, rewriteAckedAfterPurge } from './inbox_writer.js';
+const INBOX_PLATFORMS = ['telegram', 'slack', 'discord'];
+/**
+ * Drain the unacked inbox rows for the session's umbrella into one envelope
+ * string, ACK-BEFORE-RETURN. Returns '' when there is nothing to deliver, when
+ * cwd resolves to no umbrella, or on any error (fail-open).
+ *
+ * `cwd` defaults to `process.cwd()`; the Stop hook passes the cwd from its
+ * payload so the umbrella resolves against the session's launch dir.
+ */
+export async function drainUmbrellaInbox(sessionId, cwd = process.cwd()) {
+    try {
+        // The inbox is umbrella-keyed (CAT.1c). Absent channels.json / unresolved
+        // umbrella ⇒ no inbox; drain nothing.
+        const cfg = await loadChannelsConfig().catch(() => null);
+        const umbrellaId = cfg === null ? null : resolveUmbrellaForCwd(cfg, cwd);
+        if (umbrellaId === null || umbrellaId === '')
+            return '';
+        const platformReads = await Promise.all(INBOX_PLATFORMS.map((p) => readInbox(umbrellaId, p)));
+        const allRows = platformReads.flat();
+        const acked = await readAcked(umbrellaId);
+        const unacked = computeUnackedRows(allRows, acked, sessionId);
+        let envelope = '';
+        if (unacked.length > 0) {
+            const built = buildInjectionEnvelope(unacked);
+            if (built.injectedRows.length > 0) {
+                envelope = built.envelope;
+                const ackRows = buildAckRowsForInjected(built.injectedRows, sessionId);
+                // ACK BEFORE RETURN — the durability + exactly-once gate.
+                await appendAckRows(umbrellaId, ackRows);
+            }
+        }
+        // 7-day auto-purge — skip the rewrite when nothing aged out.
+        const kept = purgeOldAcks(acked);
+        if (kept.length !== acked.length) {
+            await rewriteAckedAfterPurge(umbrellaId, kept);
+        }
+        return envelope;
+    }
+    catch {
+        return '';
+    }
+}
+/**
+ * READ-ONLY twin of {@link drainUmbrellaInbox} (T-CHAT-INBOUND-SURFACE-MIDRUN SF.1).
+ * Returns the same unacked-inbound envelope, but does NOT ack and does NOT purge — so the
+ * message is SURFACED without being consumed and still DRIVES a proper response turn at the
+ * next clean stop (via `maybeDriveInbound`). Used by the Stop hook's drift branch to make a
+ * mid-run user message visible without breaking the no-pause discipline (the run continues).
+ *
+ * Deliberately a SEPARATE function rather than an `{ack:false}` flag on the drain: the
+ * drain's "ACK-BEFORE-RETURN exactly-once" contract is its durability invariant and stays
+ * pristine. Fail-open '' on any error / unresolved umbrella (mirrors the drain).
+ */
+export async function peekUmbrellaInbox(sessionId, cwd = process.cwd()) {
+    try {
+        const cfg = await loadChannelsConfig().catch(() => null);
+        const umbrellaId = cfg === null ? null : resolveUmbrellaForCwd(cfg, cwd);
+        if (umbrellaId === null || umbrellaId === '')
+            return '';
+        const platformReads = await Promise.all(INBOX_PLATFORMS.map((p) => readInbox(umbrellaId, p)));
+        const acked = await readAcked(umbrellaId);
+        const unacked = computeUnackedRows(platformReads.flat(), acked, sessionId);
+        if (unacked.length === 0)
+            return '';
+        const built = buildInjectionEnvelope(unacked);
+        return built.injectedRows.length > 0 ? built.envelope : '';
+    }
+    catch {
+        return '';
+    }
+}
+//# sourceMappingURL=inbox_drain.js.map

package/dist/runtime/chat/inbox_drain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inbox_drain.js","sourceRoot":"","sources":["../../../src/runtime/chat/inbox_drain.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAEtF,OAAO,EAAiB,SAAS,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACjE,OAAO,EACL,uBAAuB,EACvB,sBAAsB,EACtB,kBAAkB,EAClB,YAAY,GACb,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,aAAa,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAE1E,MAAM,eAAe,GAAe,CAAC,UAAU,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;AAErE;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,SAAiB,EACjB,MAAc,OAAO,CAAC,GAAG,EAAE;IAE3B,IAAI,CAAC;QACH,0EAA0E;QAC1E,sCAAsC;QACtC,MAAM,GAAG,GAAG,MAAM,kBAAkB,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACzD,MAAM,UAAU,GAAG,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,qBAAqB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACzE,IAAI,UAAU,KAAK,IAAI,IAAI,UAAU,KAAK,EAAE;YAAE,OAAO,EAAE,CAAC;QAExD,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9F,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,UAAU,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,kBAAkB,CAAC,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;QAE9D,IAAI,QAAQ,GAAG,EAAE,CAAC;QAClB,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,KAAK,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;YAC9C,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAClC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;gBAC1B,MAAM,OAAO,GAAG,uBAAuB,CAAC,KAAK,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;gBACvE,0DAA0D;gBAC1D,MAAM,aAAa,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC;QAED,6DAA6D;QAC7D,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;YACjC,MAAM,sBAAsB,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QACjD,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,SAAiB,EACjB,MAAc,OAAO,CAAC,GAAG,EAAE;IAE3B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,kBAAkB,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACzD,MAAM,UAAU,GAAG,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,qBAAqB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACzE,IAAI,UAAU,KAAK,IAAI,IAAI,UAAU,KAAK,EAAE;YAAE,OAAO,EAAE,CAAC;QAExD,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9F,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,UAAU,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,kBAAkB,CAAC,aAAa,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;QAC3E,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAEpC,MAAM,KAAK,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;QAC9C,OAAO,KAAK,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/runtime/chat/inbox_inject.d.ts

@@ -0,0 +1,64 @@
+/**
+ * Pure helpers for the UPS hook's inbox-drain step (T-L3-LOOP LL.4).
+ *
+ * Split off from `user-prompt-submit.ts` so the inject logic is unit-testable
+ * without spawning the hook binary. The hook calls these helpers in sequence:
+ *   1. readInbox + readAcked (LL.1)
+ *   2. computeUnackedRows (this module)
+ *   3. buildInjectionEnvelope (this module) → appended to additionalContext
+ *   4. appendAckRows (inbox_writer.ts, durable)
+ *   5. purgeOldAcks + rewriteAckedAfterPurge (inbox_writer.ts, conditional)
+ *
+ * Per L6 of T-L3-LOOP locked decisions: multi-message aggregation happens
+ * IN-HOOK (one envelope per UPS fire; one AckRow per included message).
+ * Per L7 ("lazy push"): the LL.3 watcher already fired the inbound_channel
+ * dispatch event; THIS module is the additionalContext injection — the
+ * agent-facing surface that survives orphaned-watcher gaps.
+ *
+ * ACK-BEFORE-EMIT ordering (per L5): the hook MUST append AckRows BEFORE
+ * printing the envelope to stdout. If the hook crashes between emit + ack,
+ * the next fire re-injects (duplicate-in-conversation). If we acked first
+ * then crashed before emit, the user would never see the message (silent
+ * loss). Duplicate-on-rare-crash beats silent loss.
+ */
+import { type AckRow, type InboxRow } from './inbox.js';
+/**
+ * Filter inbox rows to those NOT yet acked. Dedup key is
+ * `(platform, message_id)` per LL4FIX.1 (2026-05-31). Was previously
+ * keyed with sessionId — that re-flooded every new session with the
+ * entire backlog because no prior-session ack matched. The fix drops
+ * sessionId from the SET-key derivation; the arg stays on this fn
+ * signature because `buildAckRowsForInjected` still records
+ * `injected_at_sessionId` as audit metadata + drives 7-day purge.
+ */
+export declare function computeUnackedRows(rows: readonly InboxRow[], acked: readonly AckRow[], sessionId: string): InboxRow[];
+/**
+ * Build the additionalContext envelope per L6. Format is human-scannable +
+ * future-parser-friendly: a 📨 header line + per-row `<sender> (<platform>):
+ * <text>` lines.
+ *
+ * Returns an empty envelope + zero injectedRows if `rows` is empty.
+ * Overflow handling: if cumulative text would exceed
+ * ENVELOPE_BUDGET_BYTES (8KB), the loop stops at the row that wouldn't
+ * fit; remaining rows are NOT injected this turn and stay unacked
+ * (drain on next UPS fire — preserves "lazy push" semantics).
+ *
+ * `injectedRows` is what the hook should pass to `buildAckRowsForInjected`
+ * — only acked rows that actually made it into the envelope.
+ */
+export declare function buildInjectionEnvelope(rows: readonly InboxRow[]): {
+    envelope: string;
+    injectedRows: InboxRow[];
+};
+/**
+ * Filter AckRows to those younger than 7 days. Used by the periodic purge
+ * step to keep acked.jsonl from growing unbounded. Malformed timestamps
+ * are dropped (defensive — schema validation upstream is best-effort).
+ */
+export declare function purgeOldAcks(acked: readonly AckRow[], now?: Date): AckRow[];
+/**
+ * Build AckRows from injected InboxRows, stamped with the current sessionId
+ * + now. Hook passes the result to `appendAckRows` (inbox_writer.ts).
+ */
+export declare function buildAckRowsForInjected(injected: readonly InboxRow[], sessionId: string, now?: Date): AckRow[];
+//# sourceMappingURL=inbox_inject.d.ts.map

package/dist/runtime/chat/inbox_inject.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inbox_inject.d.ts","sourceRoot":"","sources":["../../../src/runtime/chat/inbox_inject.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,EAAU,KAAK,MAAM,EAAE,KAAK,QAAQ,EAAE,MAAM,YAAY,CAAC;AAKhE;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,SAAS,QAAQ,EAAE,EACzB,KAAK,EAAE,SAAS,MAAM,EAAE,EACxB,SAAS,EAAE,MAAM,GAChB,QAAQ,EAAE,CAgBZ;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,SAAS,QAAQ,EAAE,GAAG;IACjE,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,QAAQ,EAAE,CAAC;CAC1B,CA0BA;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,EAAE,GAAG,GAAE,IAAiB,GAAG,MAAM,EAAE,CAMvF;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,SAAS,QAAQ,EAAE,EAC7B,SAAS,EAAE,MAAM,EACjB,GAAG,GAAE,IAAiB,GACrB,MAAM,EAAE,CASV"}

package/dist/runtime/chat/inbox_inject.js

@@ -0,0 +1,120 @@
+/**
+ * Pure helpers for the UPS hook's inbox-drain step (T-L3-LOOP LL.4).
+ *
+ * Split off from `user-prompt-submit.ts` so the inject logic is unit-testable
+ * without spawning the hook binary. The hook calls these helpers in sequence:
+ *   1. readInbox + readAcked (LL.1)
+ *   2. computeUnackedRows (this module)
+ *   3. buildInjectionEnvelope (this module) → appended to additionalContext
+ *   4. appendAckRows (inbox_writer.ts, durable)
+ *   5. purgeOldAcks + rewriteAckedAfterPurge (inbox_writer.ts, conditional)
+ *
+ * Per L6 of T-L3-LOOP locked decisions: multi-message aggregation happens
+ * IN-HOOK (one envelope per UPS fire; one AckRow per included message).
+ * Per L7 ("lazy push"): the LL.3 watcher already fired the inbound_channel
+ * dispatch event; THIS module is the additionalContext injection — the
+ * agent-facing surface that survives orphaned-watcher gaps.
+ *
+ * ACK-BEFORE-EMIT ordering (per L5): the hook MUST append AckRows BEFORE
+ * printing the envelope to stdout. If the hook crashes between emit + ack,
+ * the next fire re-injects (duplicate-in-conversation). If we acked first
+ * then crashed before emit, the user would never see the message (silent
+ * loss). Duplicate-on-rare-crash beats silent loss.
+ */
+import { ackKey } from './inbox.js';
+const SEVEN_DAYS_MS = 7 * 24 * 60 * 60 * 1000;
+const ENVELOPE_BUDGET_BYTES = 8 * 1024;
+/**
+ * Filter inbox rows to those NOT yet acked. Dedup key is
+ * `(platform, message_id)` per LL4FIX.1 (2026-05-31). Was previously
+ * keyed with sessionId — that re-flooded every new session with the
+ * entire backlog because no prior-session ack matched. The fix drops
+ * sessionId from the SET-key derivation; the arg stays on this fn
+ * signature because `buildAckRowsForInjected` still records
+ * `injected_at_sessionId` as audit metadata + drives 7-day purge.
+ */
+export function computeUnackedRows(rows, acked, sessionId) {
+    const ackedKeys = new Set();
+    for (const a of acked) {
+        ackedKeys.add(ackKey(a.platform, a.message_id));
+    }
+    const unacked = [];
+    for (const row of rows) {
+        const key = ackKey(row.platform, row.id);
+        if (ackedKeys.has(key))
+            continue;
+        unacked.push(row);
+    }
+    // sessionId is intentionally unused inside the dedup loop — see fn-level
+    // JSDoc. Linters might flag it; suppress at the call site if needed.
+    void sessionId;
+    unacked.sort((a, b) => a.received_at.localeCompare(b.received_at));
+    return unacked;
+}
+/**
+ * Build the additionalContext envelope per L6. Format is human-scannable +
+ * future-parser-friendly: a 📨 header line + per-row `<sender> (<platform>):
+ * <text>` lines.
+ *
+ * Returns an empty envelope + zero injectedRows if `rows` is empty.
+ * Overflow handling: if cumulative text would exceed
+ * ENVELOPE_BUDGET_BYTES (8KB), the loop stops at the row that wouldn't
+ * fit; remaining rows are NOT injected this turn and stay unacked
+ * (drain on next UPS fire — preserves "lazy push" semantics).
+ *
+ * `injectedRows` is what the hook should pass to `buildAckRowsForInjected`
+ * — only acked rows that actually made it into the envelope.
+ */
+export function buildInjectionEnvelope(rows) {
+    if (rows.length === 0)
+        return { envelope: '', injectedRows: [] };
+    const lines = [];
+    const injected = [];
+    let bytes = 0;
+    for (const row of rows) {
+        // CAT.4 — a row may carry downloaded media. Inject the text line plus one
+        // Read-pointer line per attachment: hooks inject TEXT only (no image
+        // content blocks), so the agent Reads the path to view the file. Media
+        // pointers are cheap text; they count against the same byte budget.
+        const line = `${row.sender} (${row.platform}): ${row.text}`;
+        const mediaLines = (row.media ?? []).map((m) => `📎 ${m.kind}: ${m.path} — Read this file to view`);
+        const block = [line, ...mediaLines].join('\n');
+        const projected = bytes + block.length + 1;
+        if (projected > ENVELOPE_BUDGET_BYTES && injected.length > 0) {
+            break;
+        }
+        lines.push(block);
+        injected.push(row);
+        bytes = projected;
+    }
+    const header = `📨 Inbound messages (${String(injected.length)})`;
+    const envelope = `${header}\n${lines.join('\n')}`;
+    return { envelope, injectedRows: injected };
+}
+/**
+ * Filter AckRows to those younger than 7 days. Used by the periodic purge
+ * step to keep acked.jsonl from growing unbounded. Malformed timestamps
+ * are dropped (defensive — schema validation upstream is best-effort).
+ */
+export function purgeOldAcks(acked, now = new Date()) {
+    const cutoff = now.getTime() - SEVEN_DAYS_MS;
+    return acked.filter((a) => {
+        const t = Date.parse(a.injected_at_timestamp);
+        return Number.isFinite(t) && t >= cutoff;
+    });
+}
+/**
+ * Build AckRows from injected InboxRows, stamped with the current sessionId
+ * + now. Hook passes the result to `appendAckRows` (inbox_writer.ts).
+ */
+export function buildAckRowsForInjected(injected, sessionId, now = new Date()) {
+    const ts = now.toISOString();
+    return injected.map((row) => ({
+        v: 1,
+        message_id: row.id,
+        platform: row.platform,
+        injected_at_sessionId: sessionId,
+        injected_at_timestamp: ts,
+    }));
+}
+//# sourceMappingURL=inbox_inject.js.map

package/dist/runtime/chat/inbox_inject.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inbox_inject.js","sourceRoot":"","sources":["../../../src/runtime/chat/inbox_inject.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,EAAE,MAAM,EAA8B,MAAM,YAAY,CAAC;AAEhE,MAAM,aAAa,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAC9C,MAAM,qBAAqB,GAAG,CAAC,GAAG,IAAI,CAAC;AAEvC;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAChC,IAAyB,EACzB,KAAwB,EACxB,SAAiB;IAEjB,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;IAClD,CAAC;IACD,MAAM,OAAO,GAAe,EAAE,CAAC;IAC/B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QACzC,IAAI,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QACjC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpB,CAAC;IACD,yEAAyE;IACzE,qEAAqE;IACrE,KAAK,SAAS,CAAC;IACf,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;IACnE,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAyB;IAI9D,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;IACjE,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,QAAQ,GAAe,EAAE,CAAC;IAChC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,0EAA0E;QAC1E,qEAAqE;QACrE,uEAAuE;QACvE,oEAAoE;QACpE,MAAM,IAAI,GAAG,GAAG,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,QAAQ,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC5D,MAAM,UAAU,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CACtC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,2BAA2B,CAC1D,CAAC;QACF,MAAM,KAAK,GAAG,CAAC,IAAI,EAAE,GAAG,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/C,MAAM,SAAS,GAAG,KAAK,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;QAC3C,IAAI,SAAS,GAAG,qBAAqB,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7D,MAAM;QACR,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClB,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnB,KAAK,GAAG,SAAS,CAAC;IACpB,CAAC;IACD,MAAM,MAAM,GAAG,wBAAwB,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC;IAClE,MAAM,QAAQ,GAAG,GAAG,MAAM,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IAClD,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC;AAC9C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,KAAwB,EAAE,MAAY,IAAI,IAAI,EAAE;IAC3E,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,EAAE,GAAG,aAAa,CAAC;IAC7C,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QACxB,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC;QAC9C,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC;IAC3C,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CACrC,QAA6B,EAC7B,SAAiB,EACjB,MAAY,IAAI,IAAI,EAAE;IAEtB,MAAM,EAAE,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IAC7B,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAC5B,CAAC,EAAE,CAAU;QACb,UAAU,EAAE,GAAG,CAAC,EAAE;QAClB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,qBAAqB,EAAE,SAAS;QAChC,qBAAqB,EAAE,EAAE;KAC1B,CAAC,CAAC,CAAC;AACN,CAAC"}

package/dist/runtime/chat/inbox_writer.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Durable writers for `acked.jsonl` (T-L3-LOOP LL.4). Append-only writes
+ * + mutex-guarded rewrite-and-replace for the periodic 7-day purge.
+ *
+ * Mutex via `proper-lockfile` (already an opensquid dep — used by
+ * `src/runtime/daemon.ts` for PID locking). Lock file lives next to
+ * acked.jsonl as `acked.jsonl.lock`; contention is rare (single UPS fire
+ * per session) but possible if a stale background process retains a
+ * writer.
+ *
+ * proper-lockfile requires the target file to EXIST before acquiring the
+ * lock; we touch via empty `appendFile('')` on the first call before the
+ * lock acquisition.
+ *
+ * Keyed by UMBRELLA (T-CHAT-AS-TERMINAL CAT.1c) — was per-cwd project_uuid;
+ * the ack ledger now lives under `umbrellas/<id>/inbox/acked.jsonl`.
+ *
+ * Imports from: node:fs/promises, node:path, proper-lockfile, ../paths.
+ * Imported by: src/runtime/hooks/user-prompt-submit.ts (LL.4 drain block).
+ */
+import type { AckRow } from './inbox.js';
+/**
+ * Append a batch of AckRows to the umbrella's acked.jsonl under a
+ * proper-lockfile mutex. No-op for empty input. Creates parent dir +
+ * touches the target file on first call (proper-lockfile requires
+ * existence).
+ */
+export declare function appendAckRows(umbrellaId: string, rows: readonly AckRow[]): Promise<void>;
+/**
+ * Atomic rewrite of acked.jsonl after a 7-day purge dropped some rows.
+ * Mutex-guarded. Writes to `.tmp` then renames so a reader never observes
+ * a half-written file. Empty `kept` produces an empty file (cleared).
+ */
+export declare function rewriteAckedAfterPurge(umbrellaId: string, kept: readonly AckRow[]): Promise<void>;
+//# sourceMappingURL=inbox_writer.d.ts.map

package/dist/runtime/chat/inbox_writer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inbox_writer.d.ts","sourceRoot":"","sources":["../../../src/runtime/chat/inbox_writer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AASH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAMzC;;;;;GAKG;AACH,wBAAsB,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAY9F;AAED;;;;GAIG;AACH,wBAAsB,sBAAsB,CAC1C,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,SAAS,MAAM,EAAE,GACtB,OAAO,CAAC,IAAI,CAAC,CAaf"}

package/dist/runtime/chat/inbox_writer.js

@@ -0,0 +1,69 @@
+/**
+ * Durable writers for `acked.jsonl` (T-L3-LOOP LL.4). Append-only writes
+ * + mutex-guarded rewrite-and-replace for the periodic 7-day purge.
+ *
+ * Mutex via `proper-lockfile` (already an opensquid dep — used by
+ * `src/runtime/daemon.ts` for PID locking). Lock file lives next to
+ * acked.jsonl as `acked.jsonl.lock`; contention is rare (single UPS fire
+ * per session) but possible if a stale background process retains a
+ * writer.
+ *
+ * proper-lockfile requires the target file to EXIST before acquiring the
+ * lock; we touch via empty `appendFile('')` on the first call before the
+ * lock acquisition.
+ *
+ * Keyed by UMBRELLA (T-CHAT-AS-TERMINAL CAT.1c) — was per-cwd project_uuid;
+ * the ack ledger now lives under `umbrellas/<id>/inbox/acked.jsonl`.
+ *
+ * Imports from: node:fs/promises, node:path, proper-lockfile, ../paths.
+ * Imported by: src/runtime/hooks/user-prompt-submit.ts (LL.4 drain block).
+ */
+import { appendFile, mkdir, rename, writeFile } from 'node:fs/promises';
+import { dirname } from 'node:path';
+import lockfile from 'proper-lockfile';
+import { umbrellaInboxAckedPath } from '../paths.js';
+const LOCK_OPTS = {
+    retries: { retries: 5, factor: 2, minTimeout: 50 },
+};
+/**
+ * Append a batch of AckRows to the umbrella's acked.jsonl under a
+ * proper-lockfile mutex. No-op for empty input. Creates parent dir +
+ * touches the target file on first call (proper-lockfile requires
+ * existence).
+ */
+export async function appendAckRows(umbrellaId, rows) {
+    if (rows.length === 0)
+        return;
+    const path = umbrellaInboxAckedPath(umbrellaId);
+    await mkdir(dirname(path), { recursive: true });
+    await appendFile(path, '');
+    const release = await lockfile.lock(path, LOCK_OPTS);
+    try {
+        const body = rows.map((r) => JSON.stringify(r)).join('\n') + '\n';
+        await appendFile(path, body, 'utf8');
+    }
+    finally {
+        await release();
+    }
+}
+/**
+ * Atomic rewrite of acked.jsonl after a 7-day purge dropped some rows.
+ * Mutex-guarded. Writes to `.tmp` then renames so a reader never observes
+ * a half-written file. Empty `kept` produces an empty file (cleared).
+ */
+export async function rewriteAckedAfterPurge(umbrellaId, kept) {
+    const path = umbrellaInboxAckedPath(umbrellaId);
+    await mkdir(dirname(path), { recursive: true });
+    await appendFile(path, '');
+    const release = await lockfile.lock(path, LOCK_OPTS);
+    try {
+        const tmp = `${path}.tmp`;
+        const body = kept.length === 0 ? '' : kept.map((r) => JSON.stringify(r)).join('\n') + '\n';
+        await writeFile(tmp, body, 'utf8');
+        await rename(tmp, path);
+    }
+    finally {
+        await release();
+    }
+}
+//# sourceMappingURL=inbox_writer.js.map

package/dist/runtime/chat/inbox_writer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inbox_writer.js","sourceRoot":"","sources":["../../../src/runtime/chat/inbox_writer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACxE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,QAAQ,MAAM,iBAAiB,CAAC;AAEvC,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAIrD,MAAM,SAAS,GAAG;IAChB,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE;CACnD,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,UAAkB,EAAE,IAAuB;IAC7E,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAC9B,MAAM,IAAI,GAAG,sBAAsB,CAAC,UAAU,CAAC,CAAC;IAChD,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,MAAM,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC3B,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACrD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;QAClE,MAAM,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,EAAE,CAAC;IAClB,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,UAAkB,EAClB,IAAuB;IAEvB,MAAM,IAAI,GAAG,sBAAsB,CAAC,UAAU,CAAC,CAAC;IAChD,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,MAAM,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC3B,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACrD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,GAAG,IAAI,MAAM,CAAC;QAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;QAC3F,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QACnC,MAAM,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC1B,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,EAAE,CAAC;IAClB,CAAC;AACH,CAAC"}