opensquid 0.5.395

package/dist/runtime/chat/live_session_lease.d.ts

@@ -0,0 +1,66 @@
+/**
+ * Live-session lease (Track T-DEL, DEL.1) — the cross-session arbitration
+ * primitive. While `opensquid chat watch` runs for a session, it writes +
+ * heartbeats a lease file; the always-on agent-bridge daemon reads it (DEL.2)
+ * and stays silent while a FRESH lease exists (a live interactive session is
+ * handling the work), so the two delivery paths never double-respond.
+ *
+ * Freshness — not mere existence — is the signal: a crashed `chat watch` leaves
+ * a stale lease, and the daemon must resume once it goes stale. So `removeLease`
+ * is best-effort cleanup; `isLeaseFresh` is the authority.
+ *
+ * KEY-AGNOSTIC (T-CHAT-AS-TERMINAL CAT.1c): the lease functions take the
+ * lease-file PATH directly, not a project_uuid. This decouples the lease
+ * envelope/freshness logic from how the key resolves to a path, so the chat
+ * surfaces can lease per-UMBRELLA (`umbrellaLiveSessionLease(id)`) while the
+ * agent-bridge daemon keeps leasing per-project (`liveSessionLease(uuid)`).
+ * The caller resolves the path; this module owns only the envelope + I/O.
+ *
+ * Imports from: node:fs/promises.
+ * Imported by: src/runtime/chat/watch_cli.ts (writer/heartbeat, umbrella path),
+ *   src/runtime/chat/session_routing.ts (reader, umbrella path),
+ *   src/runtime/agent_bridge/dispatcher.ts (reader, project path, DEL.2).
+ */
+/** A lease older than this is stale → the daemon may respond. */
+export declare const STALE_MS = 90000;
+/** Heartbeat cadence — comfortably under STALE_MS so a live lease never lapses. */
+export declare const HEARTBEAT_MS = 30000;
+export interface LiveSessionLease {
+    session_id: string;
+    pid: number;
+    refreshed_at: string;
+}
+/** Resolve a stable session id for the lease (informational; freshness rules). */
+export declare function resolveSessionId(env?: NodeJS.ProcessEnv): string;
+export declare function writeLease(leasePath: string, sessionId: string, now?: Date): Promise<void>;
+/** Refresh just the timestamp (keeps session_id/pid). */
+export declare function refreshLease(leasePath: string, now?: Date): Promise<void>;
+export declare function readLease(leasePath: string): Promise<LiveSessionLease | null>;
+/** True iff a lease exists AND was refreshed within STALE_MS (clock-forward). */
+export declare function isLeaseFresh(lease: LiveSessionLease | null, now?: Date): boolean;
+/**
+ * Ownership-aware freshness (T-CHAT-AS-TERMINAL CAT.5). True iff the lease is
+ * fresh AND owned by `expectedSessionId`. This is the double-holder guard: a
+ * headless daemon answers an inbound ONLY when it both holds a fresh lease and
+ * that lease carries ITS OWN session id — never while a human (or any other)
+ * session holds a fresh lease, which would double-answer (409 / mingling).
+ *
+ * `isLeaseFresh` alone answers "is SOMEONE live?"; this answers "are WE live?".
+ */
+export declare function isLeaseFreshAndOwnedBy(lease: LiveSessionLease | null, expectedSessionId: string, now?: Date): boolean;
+/**
+ * Acquire the lease for `sessionId` IFF it is free for us — there is no FRESH
+ * lease owned by a DIFFERENT session. Returns true ⇒ we now hold it (it was
+ * absent / stale / already-ours and we (re)wrote it); false ⇒ a different
+ * session holds a fresh lease, so the caller stands down LOCAL-ONLY
+ * (invariant #6: a second same-umbrella session gets no chat connection).
+ *
+ * This is the ONE arbitration primitive shared by the live interactive session
+ * (claims the umbrella lease with its Claude Code session id — so its Stop-hook
+ * drive owns the turn and the headless stands down) and the headless daemon
+ * (claims with `headless-<umbrella>`). Fail-quiet: a write error ⇒ false.
+ */
+export declare function acquireLeaseIfFree(leasePath: string, sessionId: string, now?: Date): Promise<boolean>;
+/** Best-effort removal on `chat watch` exit. Never throws. */
+export declare function removeLease(leasePath: string): Promise<void>;
+//# sourceMappingURL=live_session_lease.d.ts.map

package/dist/runtime/chat/live_session_lease.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"live_session_lease.d.ts","sourceRoot":"","sources":["../../../src/runtime/chat/live_session_lease.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAKH,iEAAiE;AACjE,eAAO,MAAM,QAAQ,QAAS,CAAC;AAC/B,mFAAmF;AACnF,eAAO,MAAM,YAAY,QAAS,CAAC;AAEnC,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,kFAAkF;AAClF,wBAAgB,gBAAgB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAE7E;AAED,wBAAsB,UAAU,CAC9B,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,GAAG,GAAE,IAAiB,GACrB,OAAO,CAAC,IAAI,CAAC,CAQf;AAED,yDAAyD;AACzD,wBAAsB,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,GAAE,IAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAG3F;AAED,wBAAsB,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CASnF;AAED,iFAAiF;AACjF,wBAAgB,YAAY,CAAC,KAAK,EAAE,gBAAgB,GAAG,IAAI,EAAE,GAAG,GAAE,IAAiB,GAAG,OAAO,CAI5F;AAED;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,gBAAgB,GAAG,IAAI,EAC9B,iBAAiB,EAAE,MAAM,EACzB,GAAG,GAAE,IAAiB,GACrB,OAAO,CAGT;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,kBAAkB,CACtC,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,GAAG,GAAE,IAAiB,GACrB,OAAO,CAAC,OAAO,CAAC,CAWlB;AAED,8DAA8D;AAC9D,wBAAsB,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAElE"}

package/dist/runtime/chat/live_session_lease.js

@@ -0,0 +1,110 @@
+/**
+ * Live-session lease (Track T-DEL, DEL.1) — the cross-session arbitration
+ * primitive. While `opensquid chat watch` runs for a session, it writes +
+ * heartbeats a lease file; the always-on agent-bridge daemon reads it (DEL.2)
+ * and stays silent while a FRESH lease exists (a live interactive session is
+ * handling the work), so the two delivery paths never double-respond.
+ *
+ * Freshness — not mere existence — is the signal: a crashed `chat watch` leaves
+ * a stale lease, and the daemon must resume once it goes stale. So `removeLease`
+ * is best-effort cleanup; `isLeaseFresh` is the authority.
+ *
+ * KEY-AGNOSTIC (T-CHAT-AS-TERMINAL CAT.1c): the lease functions take the
+ * lease-file PATH directly, not a project_uuid. This decouples the lease
+ * envelope/freshness logic from how the key resolves to a path, so the chat
+ * surfaces can lease per-UMBRELLA (`umbrellaLiveSessionLease(id)`) while the
+ * agent-bridge daemon keeps leasing per-project (`liveSessionLease(uuid)`).
+ * The caller resolves the path; this module owns only the envelope + I/O.
+ *
+ * Imports from: node:fs/promises.
+ * Imported by: src/runtime/chat/watch_cli.ts (writer/heartbeat, umbrella path),
+ *   src/runtime/chat/session_routing.ts (reader, umbrella path),
+ *   src/runtime/agent_bridge/dispatcher.ts (reader, project path, DEL.2).
+ */
+import { mkdir, readFile, rm, writeFile } from 'node:fs/promises';
+import { dirname } from 'node:path';
+/** A lease older than this is stale → the daemon may respond. */
+export const STALE_MS = 90_000;
+/** Heartbeat cadence — comfortably under STALE_MS so a live lease never lapses. */
+export const HEARTBEAT_MS = 30_000;
+/** Resolve a stable session id for the lease (informational; freshness rules). */
+export function resolveSessionId(env = process.env) {
+    return env.CLAUDE_SESSION_ID ?? env.OPENSQUID_SESSION_ID ?? `pid-${process.pid}`;
+}
+export async function writeLease(leasePath, sessionId, now = new Date()) {
+    const lease = {
+        session_id: sessionId,
+        pid: process.pid,
+        refreshed_at: now.toISOString(),
+    };
+    await mkdir(dirname(leasePath), { recursive: true }).catch(() => undefined);
+    await writeFile(leasePath, JSON.stringify(lease), 'utf8');
+}
+/** Refresh just the timestamp (keeps session_id/pid). */
+export async function refreshLease(leasePath, now = new Date()) {
+    const existing = await readLease(leasePath);
+    await writeLease(leasePath, existing?.session_id ?? resolveSessionId(), now);
+}
+export async function readLease(leasePath) {
+    try {
+        const raw = await readFile(leasePath, 'utf8');
+        const parsed = JSON.parse(raw);
+        if (typeof parsed.refreshed_at !== 'string')
+            return null;
+        return parsed;
+    }
+    catch {
+        return null; // absent or malformed ⇒ no live session
+    }
+}
+/** True iff a lease exists AND was refreshed within STALE_MS (clock-forward). */
+export function isLeaseFresh(lease, now = new Date()) {
+    if (lease === null)
+        return false;
+    const age = now.getTime() - new Date(lease.refreshed_at).getTime();
+    return Number.isFinite(age) && age >= 0 && age < STALE_MS;
+}
+/**
+ * Ownership-aware freshness (T-CHAT-AS-TERMINAL CAT.5). True iff the lease is
+ * fresh AND owned by `expectedSessionId`. This is the double-holder guard: a
+ * headless daemon answers an inbound ONLY when it both holds a fresh lease and
+ * that lease carries ITS OWN session id — never while a human (or any other)
+ * session holds a fresh lease, which would double-answer (409 / mingling).
+ *
+ * `isLeaseFresh` alone answers "is SOMEONE live?"; this answers "are WE live?".
+ */
+export function isLeaseFreshAndOwnedBy(lease, expectedSessionId, now = new Date()) {
+    if (!isLeaseFresh(lease, now))
+        return false;
+    return lease !== null && lease.session_id === expectedSessionId;
+}
+/**
+ * Acquire the lease for `sessionId` IFF it is free for us — there is no FRESH
+ * lease owned by a DIFFERENT session. Returns true ⇒ we now hold it (it was
+ * absent / stale / already-ours and we (re)wrote it); false ⇒ a different
+ * session holds a fresh lease, so the caller stands down LOCAL-ONLY
+ * (invariant #6: a second same-umbrella session gets no chat connection).
+ *
+ * This is the ONE arbitration primitive shared by the live interactive session
+ * (claims the umbrella lease with its Claude Code session id — so its Stop-hook
+ * drive owns the turn and the headless stands down) and the headless daemon
+ * (claims with `headless-<umbrella>`). Fail-quiet: a write error ⇒ false.
+ */
+export async function acquireLeaseIfFree(leasePath, sessionId, now = new Date()) {
+    const lease = await readLease(leasePath);
+    if (lease !== null && isLeaseFresh(lease, now) && lease.session_id !== sessionId) {
+        return false; // a different live session holds it → stand down (local-only)
+    }
+    try {
+        await writeLease(leasePath, sessionId, now);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/** Best-effort removal on `chat watch` exit. Never throws. */
+export async function removeLease(leasePath) {
+    await rm(leasePath, { force: true }).catch(() => undefined);
+}
+//# sourceMappingURL=live_session_lease.js.map

package/dist/runtime/chat/live_session_lease.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"live_session_lease.js","sourceRoot":"","sources":["../../../src/runtime/chat/live_session_lease.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,iEAAiE;AACjE,MAAM,CAAC,MAAM,QAAQ,GAAG,MAAM,CAAC;AAC/B,mFAAmF;AACnF,MAAM,CAAC,MAAM,YAAY,GAAG,MAAM,CAAC;AAQnC,kFAAkF;AAClF,MAAM,UAAU,gBAAgB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACnE,OAAO,GAAG,CAAC,iBAAiB,IAAI,GAAG,CAAC,oBAAoB,IAAI,OAAO,OAAO,CAAC,GAAG,EAAE,CAAC;AACnF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,SAAiB,EACjB,SAAiB,EACjB,MAAY,IAAI,IAAI,EAAE;IAEtB,MAAM,KAAK,GAAqB;QAC9B,UAAU,EAAE,SAAS;QACrB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,YAAY,EAAE,GAAG,CAAC,WAAW,EAAE;KAChC,CAAC;IACF,MAAM,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC5E,MAAM,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC;AAC5D,CAAC;AAED,yDAAyD;AACzD,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,SAAiB,EAAE,MAAY,IAAI,IAAI,EAAE;IAC1E,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC,CAAC;IAC5C,MAAM,UAAU,CAAC,SAAS,EAAE,QAAQ,EAAE,UAAU,IAAI,gBAAgB,EAAE,EAAE,GAAG,CAAC,CAAC;AAC/E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,SAAiB;IAC/C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAqB,CAAC;QACnD,IAAI,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACzD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,CAAC,wCAAwC;IACvD,CAAC;AACH,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,YAAY,CAAC,KAA8B,EAAE,MAAY,IAAI,IAAI,EAAE;IACjF,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACjC,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC;IACnE,OAAO,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,GAAG,QAAQ,CAAC;AAC5D,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,sBAAsB,CACpC,KAA8B,EAC9B,iBAAyB,EACzB,MAAY,IAAI,IAAI,EAAE;IAEtB,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5C,OAAO,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,iBAAiB,CAAC;AAClE,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,SAAiB,EACjB,SAAiB,EACjB,MAAY,IAAI,IAAI,EAAE;IAEtB,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC,CAAC;IACzC,IAAI,KAAK,KAAK,IAAI,IAAI,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACjF,OAAO,KAAK,CAAC,CAAC,8DAA8D;IAC9E,CAAC;IACD,IAAI,CAAC;QACH,MAAM,UAAU,CAAC,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;QAC5C,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,8DAA8D;AAC9D,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,SAAiB;IACjD,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;AAC9D,CAAC"}

package/dist/runtime/chat/session_routing.d.ts

@@ -0,0 +1,64 @@
+/**
+ * Session-routing resolver — maps an `umbrellaId` to its currently-live
+ * Claude Code session id by reading the `live-session.lease` heartbeat file
+ * (T-L3-LOOP LL.2; re-keyed project_uuid → UMBRELLA in T-CHAT-AS-TERMINAL
+ * CAT.1c).
+ *
+ * The lease file (`src/runtime/chat/live_session_lease.ts`) is written by
+ * `opensquid chat watch` every HEARTBEAT_MS (30s) and considered stale after
+ * STALE_MS (90s). LL.2 wraps the existing primitive into an umbrella-keyed
+ * lookup so the inbound watcher (LL.3) and the UPS hook (LL.4) can answer
+ * "which session should receive this umbrella's inbox?" without re-implementing
+ * freshness logic.
+ *
+ * Semantics:
+ *   - Fresh lease (refreshed_at within last 90s) → returns lease.session_id
+ *   - Stale lease (older than 90s) → returns null (per L3, L7 — silent drop;
+ *     LL.3 logs the violation at the action context)
+ *   - Missing lease (file ENOENT) → returns null
+ *   - Corrupt lease (malformed JSON or missing required fields) → returns null
+ *
+ * `resolveAllLiveUmbrellas` is the multi-umbrella enumeration used by the LL.3
+ * chokidar watcher to know which umbrella roots to attach to at boot
+ * (and re-scan on a stale-detected event).
+ *
+ * **No logging from this module.** The resolver is a pure lookup; callers
+ * (LL.3 / LL.4) log with action context so the failure message includes
+ * what was being attempted ("dropping message X" vs just "lease stale").
+ *
+ * At-most-once-delayed-by-one-message semantic: the lease file CAN be
+ * written mid-read. `readLease` does `JSON.parse` after `readFile`; an
+ * interleaved write produces a parse error which `readLease` swallows +
+ * returns null. The next resolver call (next message) succeeds. Documented
+ * here so callers don't add defensive retry loops.
+ *
+ * Imports from: node:fs/promises, ../paths, ./live_session_lease.
+ * Imported by: src/runtime/chat/inbound_watch.ts (LL.3); LL.4 UPS hook;
+ *   tests.
+ */
+import { type LiveSessionLease } from './live_session_lease.js';
+/**
+ * Return the fresh sessionId for an umbrella, or null if no live session.
+ * Pure function over the lease file (one fs.readFile + a comparison).
+ *
+ * `now` is injected for test determinism; defaults to `new Date()`.
+ */
+export declare function resolveLiveSessionId(umbrellaId: string, now?: Date): Promise<string | null>;
+export interface LiveUmbrellaBinding {
+    umbrellaId: string;
+    sessionId: string;
+    refreshedAt: string;
+}
+/**
+ * Enumerate every umbrella with a fresh lease. Used by LL.3 watcher at boot
+ * to know which umbrellas to chokidar-tail. Sorted by `refreshedAt` ascending
+ * (oldest-first) so log output stays stable across reruns.
+ *
+ * ENOENT on `~/.opensquid/umbrellas/` returns `[]` (watcher boot before any
+ * umbrella exists). Non-directory entries are silently skipped (their
+ * `readLease` returns null).
+ */
+export declare function resolveAllLiveUmbrellas(now?: Date): Promise<LiveUmbrellaBinding[]>;
+/** Type-export to keep call sites stable when the lease shape evolves. */
+export type { LiveSessionLease };
+//# sourceMappingURL=session_routing.d.ts.map

package/dist/runtime/chat/session_routing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session_routing.d.ts","sourceRoot":"","sources":["../../../src/runtime/chat/session_routing.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAOH,OAAO,EAA2B,KAAK,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAEzF;;;;;GAKG;AACH,wBAAsB,oBAAoB,CACxC,UAAU,EAAE,MAAM,EAClB,GAAG,GAAE,IAAiB,GACrB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAMxB;AAED,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;;GAQG;AACH,wBAAsB,uBAAuB,CAC3C,GAAG,GAAE,IAAiB,GACrB,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAsBhC;AAED,0EAA0E;AAC1E,YAAY,EAAE,gBAAgB,EAAE,CAAC"}

package/dist/runtime/chat/session_routing.js

@@ -0,0 +1,95 @@
+/**
+ * Session-routing resolver — maps an `umbrellaId` to its currently-live
+ * Claude Code session id by reading the `live-session.lease` heartbeat file
+ * (T-L3-LOOP LL.2; re-keyed project_uuid → UMBRELLA in T-CHAT-AS-TERMINAL
+ * CAT.1c).
+ *
+ * The lease file (`src/runtime/chat/live_session_lease.ts`) is written by
+ * `opensquid chat watch` every HEARTBEAT_MS (30s) and considered stale after
+ * STALE_MS (90s). LL.2 wraps the existing primitive into an umbrella-keyed
+ * lookup so the inbound watcher (LL.3) and the UPS hook (LL.4) can answer
+ * "which session should receive this umbrella's inbox?" without re-implementing
+ * freshness logic.
+ *
+ * Semantics:
+ *   - Fresh lease (refreshed_at within last 90s) → returns lease.session_id
+ *   - Stale lease (older than 90s) → returns null (per L3, L7 — silent drop;
+ *     LL.3 logs the violation at the action context)
+ *   - Missing lease (file ENOENT) → returns null
+ *   - Corrupt lease (malformed JSON or missing required fields) → returns null
+ *
+ * `resolveAllLiveUmbrellas` is the multi-umbrella enumeration used by the LL.3
+ * chokidar watcher to know which umbrella roots to attach to at boot
+ * (and re-scan on a stale-detected event).
+ *
+ * **No logging from this module.** The resolver is a pure lookup; callers
+ * (LL.3 / LL.4) log with action context so the failure message includes
+ * what was being attempted ("dropping message X" vs just "lease stale").
+ *
+ * At-most-once-delayed-by-one-message semantic: the lease file CAN be
+ * written mid-read. `readLease` does `JSON.parse` after `readFile`; an
+ * interleaved write produces a parse error which `readLease` swallows +
+ * returns null. The next resolver call (next message) succeeds. Documented
+ * here so callers don't add defensive retry loops.
+ *
+ * Imports from: node:fs/promises, ../paths, ./live_session_lease.
+ * Imported by: src/runtime/chat/inbound_watch.ts (LL.3); LL.4 UPS hook;
+ *   tests.
+ */
+import { readdir } from 'node:fs/promises';
+import { join } from 'node:path';
+import { OPENSQUID_HOME, umbrellaLiveSessionLease } from '../paths.js';
+import { isLeaseFresh, readLease } from './live_session_lease.js';
+/**
+ * Return the fresh sessionId for an umbrella, or null if no live session.
+ * Pure function over the lease file (one fs.readFile + a comparison).
+ *
+ * `now` is injected for test determinism; defaults to `new Date()`.
+ */
+export async function resolveLiveSessionId(umbrellaId, now = new Date()) {
+    const lease = await readLease(umbrellaLiveSessionLease(umbrellaId));
+    if (lease === null)
+        return null;
+    if (!isLeaseFresh(lease, now))
+        return null;
+    if (typeof lease.session_id !== 'string' || lease.session_id.length === 0)
+        return null;
+    return lease.session_id;
+}
+/**
+ * Enumerate every umbrella with a fresh lease. Used by LL.3 watcher at boot
+ * to know which umbrellas to chokidar-tail. Sorted by `refreshedAt` ascending
+ * (oldest-first) so log output stays stable across reruns.
+ *
+ * ENOENT on `~/.opensquid/umbrellas/` returns `[]` (watcher boot before any
+ * umbrella exists). Non-directory entries are silently skipped (their
+ * `readLease` returns null).
+ */
+export async function resolveAllLiveUmbrellas(now = new Date()) {
+    const umbrellasRoot = join(OPENSQUID_HOME(), 'umbrellas');
+    let entries;
+    try {
+        entries = await readdir(umbrellasRoot);
+    }
+    catch {
+        return [];
+    }
+    const out = [];
+    for (const umbrellaId of entries) {
+        const lease = await readLease(umbrellaLiveSessionLease(umbrellaId));
+        if (lease === null)
+            continue;
+        if (!isLeaseFresh(lease, now))
+            continue;
+        if (typeof lease.session_id !== 'string' || lease.session_id.length === 0)
+            continue;
+        out.push({
+            umbrellaId,
+            sessionId: lease.session_id,
+            refreshedAt: lease.refreshed_at,
+        });
+    }
+    out.sort((a, b) => a.refreshedAt.localeCompare(b.refreshedAt));
+    return out;
+}
+//# sourceMappingURL=session_routing.js.map

package/dist/runtime/chat/session_routing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session_routing.js","sourceRoot":"","sources":["../../../src/runtime/chat/session_routing.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,cAAc,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AAEvE,OAAO,EAAE,YAAY,EAAE,SAAS,EAAyB,MAAM,yBAAyB,CAAC;AAEzF;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,UAAkB,EAClB,MAAY,IAAI,IAAI,EAAE;IAEtB,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,wBAAwB,CAAC,UAAU,CAAC,CAAC,CAAC;IACpE,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChC,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3C,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACvF,OAAO,KAAK,CAAC,UAAU,CAAC;AAC1B,CAAC;AAQD;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,MAAY,IAAI,IAAI,EAAE;IAEtB,MAAM,aAAa,GAAG,IAAI,CAAC,cAAc,EAAE,EAAE,WAAW,CAAC,CAAC;IAC1D,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,GAAG,GAA0B,EAAE,CAAC;IACtC,KAAK,MAAM,UAAU,IAAI,OAAO,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,wBAAwB,CAAC,UAAU,CAAC,CAAC,CAAC;QACpE,IAAI,KAAK,KAAK,IAAI;YAAE,SAAS;QAC7B,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC;YAAE,SAAS;QACxC,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACpF,GAAG,CAAC,IAAI,CAAC;YACP,UAAU;YACV,SAAS,EAAE,KAAK,CAAC,UAAU;YAC3B,WAAW,EAAE,KAAK,CAAC,YAAY;SAChC,CAAC,CAAC;IACL,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;IAC/D,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/runtime/chat/watch.d.ts

@@ -0,0 +1,72 @@
+/**
+ * `chat watch` core — tail an append-only chat inbox JSONL, emitting only
+ * NEW rows (Track T-TR, TR.1). The agent wraps `opensquid chat watch` in the
+ * harness `Monitor` tool so each appended message becomes an in-chat event the
+ * instant it lands — event-driven push, no cron/interval polling.
+ *
+ * Design (per docs/tasks/T-telegram-realtime.md):
+ *   - NEW-ONLY (L2): start the cursor at the file's current EOF so the backlog
+ *     is skipped (still reachable via `chat_poll_inbox`). The file may not exist
+ *     yet (created on the first message) — chokidar fires `add` on creation.
+ *   - The inbox is read via its ON-DISK CONTRACT, not a shared TS type — the
+ *     same WAB.1 design that has `agent_bridge/transport_bridge.ts` re-inline
+ *     the row shape rather than import a shared TS type. So
+ *     `chat watch` is an independent consumer of the file format, by design.
+ *   - READS ARE SERIALIZED: chokidar can fire `change` twice for one write
+ *     burst; without serialization two concurrent reads would advance the
+ *     cursor over the same bytes and double-emit. We chain reads so exactly one
+ *     runs at a time (mirrors transport_bridge.ts's `readChains`).
+ *   - awaitWriteFinish coalesces partial-write events; constants match
+ *     transport_bridge.ts so both inbox consumers behave identically.
+ *
+ * Never throws on bad input: a malformed JSONL line is skipped (routed to
+ * `onWarn`), the watcher stays up.
+ *
+ * Imports from: chokidar, node:fs/promises.
+ * Imported by: src/runtime/chat/watch_cli.ts.
+ */
+/**
+ * One inbound row as the chat-daemon appends it (mirrors `LegacyInboxRow` in
+ * `transport_bridge.ts` — the on-disk contract). `thread_id` is OPTIONAL: DMs
+ * have no topic thread, so the formatter must not print `undefined`.
+ */
+export interface InboxRow {
+    id: string;
+    thread_id?: string;
+    platform: string;
+    channel: string;
+    sender: string;
+    sender_id: string;
+    text: string;
+    received_at: string;
+    enqueued_at: string;
+    mentions_bot: boolean;
+}
+export interface WatchInboxOpts {
+    /** Absolute path to the inbox JSONL (see `paths.inboxFile`). */
+    inboxFile: string;
+    /** Only emit rows whose `mentions_bot` is true (L4 default: false = all). */
+    mentionsOnly: boolean;
+    /** Line formatter — default `formatRow`, or `JSON.stringify` for `--raw`. */
+    format: (row: InboxRow) => string;
+    /** Sink for each formatted line. Production: `(l) => process.stdout.write(l + '\n')`. */
+    out: (line: string) => void;
+    /** Malformed-row + watcher-error sink. Default: swallow. */
+    onWarn?: (message: string) => void;
+    /** Test seam — force chokidar's polling backend. */
+    usePolling?: boolean;
+    /** Resolves `watchInbox` + closes the watcher (tests/teardown). */
+    signal?: AbortSignal;
+}
+/**
+ * Default human-readable line. DMs have no `thread_id` → fall back to the
+ * channel so we never print `[tg undefined]`.
+ */
+export declare function formatRow(row: InboxRow): string;
+/**
+ * Tail an append-only JSONL inbox, emitting only rows appended after start.
+ * Resolves when `opts.signal` aborts (tests); in production the `Monitor`
+ * process lifetime owns the watcher and this never resolves.
+ */
+export declare function watchInbox(opts: WatchInboxOpts): Promise<void>;
+//# sourceMappingURL=watch.d.ts.map

package/dist/runtime/chat/watch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"watch.d.ts","sourceRoot":"","sources":["../../../src/runtime/chat/watch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAgBH;;;;GAIG;AACH,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,cAAc;IAC7B,gEAAgE;IAChE,SAAS,EAAE,MAAM,CAAC;IAClB,6EAA6E;IAC7E,YAAY,EAAE,OAAO,CAAC;IACtB,6EAA6E;IAC7E,MAAM,EAAE,CAAC,GAAG,EAAE,QAAQ,KAAK,MAAM,CAAC;IAClC,yFAAyF;IACzF,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5B,4DAA4D;IAC5D,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACnC,oDAAoD;IACpD,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,mEAAmE;IACnE,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED;;;GAGG;AACH,wBAAgB,SAAS,CAAC,GAAG,EAAE,QAAQ,GAAG,MAAM,CAI/C;AAED;;;;GAIG;AACH,wBAAsB,UAAU,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAyFpE"}

package/dist/runtime/chat/watch.js

@@ -0,0 +1,143 @@
+/**
+ * `chat watch` core — tail an append-only chat inbox JSONL, emitting only
+ * NEW rows (Track T-TR, TR.1). The agent wraps `opensquid chat watch` in the
+ * harness `Monitor` tool so each appended message becomes an in-chat event the
+ * instant it lands — event-driven push, no cron/interval polling.
+ *
+ * Design (per docs/tasks/T-telegram-realtime.md):
+ *   - NEW-ONLY (L2): start the cursor at the file's current EOF so the backlog
+ *     is skipped (still reachable via `chat_poll_inbox`). The file may not exist
+ *     yet (created on the first message) — chokidar fires `add` on creation.
+ *   - The inbox is read via its ON-DISK CONTRACT, not a shared TS type — the
+ *     same WAB.1 design that has `agent_bridge/transport_bridge.ts` re-inline
+ *     the row shape rather than import a shared TS type. So
+ *     `chat watch` is an independent consumer of the file format, by design.
+ *   - READS ARE SERIALIZED: chokidar can fire `change` twice for one write
+ *     burst; without serialization two concurrent reads would advance the
+ *     cursor over the same bytes and double-emit. We chain reads so exactly one
+ *     runs at a time (mirrors transport_bridge.ts's `readChains`).
+ *   - awaitWriteFinish coalesces partial-write events; constants match
+ *     transport_bridge.ts so both inbox consumers behave identically.
+ *
+ * Never throws on bad input: a malformed JSONL line is skipped (routed to
+ * `onWarn`), the watcher stays up.
+ *
+ * Imports from: chokidar, node:fs/promises.
+ * Imported by: src/runtime/chat/watch_cli.ts.
+ */
+import { mkdir, open, stat } from 'node:fs/promises';
+import { basename, dirname, join } from 'node:path';
+import { watch as chokidarWatch } from 'chokidar';
+// Match transport_bridge.ts so the two inbox consumers coalesce writes
+// identically. Stability = quiet period before a write is "finished".
+const AWAIT_WRITE_FINISH_STABILITY_MS = 50;
+const AWAIT_WRITE_FINISH_POLL_MS = 25;
+const noopWarn = () => {
+    /* default: swallow */
+};
+/**
+ * Default human-readable line. DMs have no `thread_id` → fall back to the
+ * channel so we never print `[tg undefined]`.
+ */
+export function formatRow(row) {
+    const platform = row.platform === 'telegram' ? 'tg' : row.platform;
+    const where = row.thread_id ?? row.channel ?? 'dm';
+    return `[${platform} ${where}] ${row.sender}: ${row.text}`;
+}
+/**
+ * Tail an append-only JSONL inbox, emitting only rows appended after start.
+ * Resolves when `opts.signal` aborts (tests); in production the `Monitor`
+ * process lifetime owns the watcher and this never resolves.
+ */
+export async function watchInbox(opts) {
+    const warn = opts.onWarn ?? noopWarn;
+    // Ensure the inbox dir exists so chokidar reliably catches the file's `add`
+    // on first message — watching a path deep in a not-yet-created tree can miss
+    // the creation event. The daemon writes here too; mkdir -p is idempotent.
+    await mkdir(dirname(opts.inboxFile), { recursive: true }).catch(noopWarn);
+    // L2: skip backlog — begin at current EOF (0 if the file doesn't exist yet).
+    let cursor = await stat(opts.inboxFile)
+        .then((s) => s.size)
+        .catch(() => 0);
+    let leftover = '';
+    // Serialize reads: one drain at a time so a double `change` can't re-read
+    // the same bytes. Each event extends the chain.
+    let chain = Promise.resolve();
+    const drain = async () => {
+        const size = await stat(opts.inboxFile)
+            .then((s) => s.size)
+            .catch(() => -1);
+        if (size < 0)
+            return; // gone mid-flight
+        if (size < cursor) {
+            cursor = 0; // truncation / rotation
+            leftover = '';
+        }
+        if (size === cursor)
+            return; // nothing new (or a coalesced double-fire)
+        const fh = await open(opts.inboxFile, 'r');
+        try {
+            const buf = Buffer.alloc(size - cursor);
+            await fh.read(buf, 0, buf.length, cursor);
+            cursor = size;
+            leftover += buf.toString('utf8');
+            const parts = leftover.split('\n');
+            leftover = parts.pop() ?? ''; // carry a partial trailing line
+            for (const part of parts) {
+                if (part.trim() === '')
+                    continue;
+                let row;
+                try {
+                    row = JSON.parse(part);
+                }
+                catch {
+                    warn(`chat watch: skipped malformed inbox line: ${part.slice(0, 120)}`);
+                    continue;
+                }
+                if (opts.mentionsOnly && !row.mentions_bot)
+                    continue;
+                opts.out(opts.format(row));
+            }
+        }
+        finally {
+            await fh.close();
+        }
+    };
+    const schedule = () => {
+        chain = chain.then(drain).catch((e) => {
+            warn(`chat watch: read failed: ${e instanceof Error ? e.message : String(e)}`);
+        });
+    };
+    // Watch the inbox DIRECTORY (glob), not the bare file: native backends
+    // (macOS FSEvents) reliably detect a file's creation + appends when watching
+    // its parent dir, but can miss events on a single not-yet-existent file path.
+    // This mirrors transport_bridge.ts (`join(inboxDir, '*.jsonl')`); we filter
+    // events down to our target platform file. (Smoke-test-verified.)
+    const targetName = basename(opts.inboxFile);
+    const watcher = chokidarWatch(join(dirname(opts.inboxFile), '*.jsonl'), {
+        ignoreInitial: true, // L2: the `tail -n 0` equivalent — skip what's already there
+        awaitWriteFinish: {
+            stabilityThreshold: AWAIT_WRITE_FINISH_STABILITY_MS,
+            pollInterval: AWAIT_WRITE_FINISH_POLL_MS,
+        },
+        usePolling: opts.usePolling ?? false,
+    });
+    const onEvent = (changed) => {
+        if (basename(changed) === targetName)
+            schedule();
+    };
+    watcher.on('add', onEvent); // file created after start
+    watcher.on('change', onEvent); // appended
+    watcher.on('error', (e) => warn(`chat watch: watcher error: ${e instanceof Error ? e.message : String(e)}`));
+    await new Promise((resolve) => {
+        const stop = () => {
+            void watcher.close().then(() => resolve());
+        };
+        if (opts.signal?.aborted) {
+            stop();
+            return;
+        }
+        opts.signal?.addEventListener('abort', stop, { once: true });
+    });
+}
+//# sourceMappingURL=watch.js.map

package/dist/runtime/chat/watch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"watch.js","sourceRoot":"","sources":["../../../src/runtime/chat/watch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEpD,OAAO,EAAE,KAAK,IAAI,aAAa,EAAkB,MAAM,UAAU,CAAC;AAElE,uEAAuE;AACvE,sEAAsE;AACtE,MAAM,+BAA+B,GAAG,EAAE,CAAC;AAC3C,MAAM,0BAA0B,GAAG,EAAE,CAAC;AAEtC,MAAM,QAAQ,GAAG,GAAS,EAAE;IAC1B,sBAAsB;AACxB,CAAC,CAAC;AAqCF;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,GAAa;IACrC,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;IACnE,MAAM,KAAK,GAAG,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,OAAO,IAAI,IAAI,CAAC;IACnD,OAAO,IAAI,QAAQ,IAAI,KAAK,KAAK,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,IAAI,EAAE,CAAC;AAC7D,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAoB;IACnD,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,IAAI,QAAQ,CAAC;IACrC,4EAA4E;IAC5E,6EAA6E;IAC7E,0EAA0E;IAC1E,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC1E,6EAA6E;IAC7E,IAAI,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;SACpC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;SACnB,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;IAClB,IAAI,QAAQ,GAAG,EAAE,CAAC;IAClB,0EAA0E;IAC1E,gDAAgD;IAChD,IAAI,KAAK,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;IAE7C,MAAM,KAAK,GAAG,KAAK,IAAmB,EAAE;QACtC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;aACpC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;aACnB,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACnB,IAAI,IAAI,GAAG,CAAC;YAAE,OAAO,CAAC,kBAAkB;QACxC,IAAI,IAAI,GAAG,MAAM,EAAE,CAAC;YAClB,MAAM,GAAG,CAAC,CAAC,CAAC,wBAAwB;YACpC,QAAQ,GAAG,EAAE,CAAC;QAChB,CAAC;QACD,IAAI,IAAI,KAAK,MAAM;YAAE,OAAO,CAAC,2CAA2C;QACxE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QAC3C,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,MAAM,CAAC,CAAC;YACxC,MAAM,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAC1C,MAAM,GAAG,IAAI,CAAC;YACd,QAAQ,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACjC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACnC,QAAQ,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,gCAAgC;YAC9D,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;oBAAE,SAAS;gBACjC,IAAI,GAAa,CAAC;gBAClB,IAAI,CAAC;oBACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAa,CAAC;gBACrC,CAAC;gBAAC,MAAM,CAAC;oBACP,IAAI,CAAC,6CAA6C,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;oBACxE,SAAS;gBACX,CAAC;gBACD,IAAI,IAAI,CAAC,YAAY,IAAI,CAAC,GAAG,CAAC,YAAY;oBAAE,SAAS;gBACrD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;QACnB,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAG,GAAS,EAAE;QAC1B,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;YACpC,IAAI,CAAC,4BAA4B,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACjF,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,uEAAuE;IACvE,6EAA6E;IAC7E,8EAA8E;IAC9E,4EAA4E;IAC5E,kEAAkE;IAClE,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAc,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,EAAE;QACjF,aAAa,EAAE,IAAI,EAAE,6DAA6D;QAClF,gBAAgB,EAAE;YAChB,kBAAkB,EAAE,+BAA+B;YACnD,YAAY,EAAE,0BAA0B;SACzC;QACD,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,KAAK;KACrC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,CAAC,OAAe,EAAQ,EAAE;QACxC,IAAI,QAAQ,CAAC,OAAO,CAAC,KAAK,UAAU;YAAE,QAAQ,EAAE,CAAC;IACnD,CAAC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,2BAA2B;IACvD,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,WAAW;IAC1C,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAU,EAAE,EAAE,CACjC,IAAI,CAAC,8BAA8B,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CACjF,CAAC;IAEF,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAClC,MAAM,IAAI,GAAG,GAAS,EAAE;YACtB,KAAK,OAAO,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QAC7C,CAAC,CAAC;QACF,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;YACzB,IAAI,EAAE,CAAC;YACP,OAAO;QACT,CAAC;QACD,IAAI,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/runtime/chat/watch_cli.d.ts

@@ -0,0 +1,49 @@
+/**
+ * `opensquid chat watch` — the inbox stream-source for the harness `Monitor`
+ * tool (Track T-TR, TR.1). Resolves the active project's inbox JSONL and
+ * streams NEW inbound messages to stdout, one formatted line per message.
+ *
+ * This is a NEW top-level `chat` verb group, distinct from `opensquid setup
+ * chat` (the chat-agent wizard). The agent wraps it:
+ *   Monitor({ command: "node dist/cli.js chat watch", persistent: true })
+ * so each appended message → one in-chat event (no cron — see
+ * docs/tasks/T-telegram-realtime.md L3 on why auto-start is an agent
+ * convention, not a CLI side-effect).
+ *
+ * Umbrella resolution (T-CHAT-AS-TERMINAL CAT.1c): chat is keyed by UMBRELLA,
+ * not per-cwd project_uuid. The cwd is resolved to its umbrella via
+ * `loadChannelsConfig()` + `resolveUmbrellaForCwd` (longest-prefix over
+ * `members`). `channels.json` is synthesized at the CAT.1d cutover, so an
+ * absent config / unresolved umbrella exits with a clear message (graceful,
+ * never throws). The `--umbrella` flag overrides resolution for tests + ops.
+ *
+ * Imports from: commander, ../../channels/routing.js, ../paths.js, ./watch.js.
+ * Imported by: src/cli.ts (registers the `chat` parent verb).
+ */
+import type { Command } from 'commander';
+import { type WatchInboxOpts } from './watch.js';
+/** Injection seam — tests stub `watch` so the action returns instead of
+ *  blocking on the real (forever-running) watcher. Mirrors AgentBridgeCliDeps.
+ *  LL.3: `startInbound` is also injectable so lifecycle tests don't spin up
+ *  a real chokidar tail. */
+export interface ChatWatchDeps {
+    watch?: (opts: WatchInboxOpts) => Promise<void>;
+    startInbound?: () => Promise<() => Promise<void>>;
+    /** Injection seam — tests stub the migration so the verb wiring can be
+     *  smoke-tested without touching the legacy keyspace. */
+    migrate?: (opts: {
+        force?: boolean;
+    }) => Promise<{
+        config: {
+            umbrellas: {
+                id: string;
+                members: string[];
+            }[];
+        };
+        configWritten: boolean;
+        configPath: string;
+        copied: Record<string, number>;
+    }>;
+}
+export declare function registerChatWatch(program: Command, deps?: ChatWatchDeps): Command;
+//# sourceMappingURL=watch_cli.d.ts.map

package/dist/runtime/chat/watch_cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"watch_cli.d.ts","sourceRoot":"","sources":["../../../src/runtime/chat/watch_cli.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAczC,OAAO,EAAwC,KAAK,cAAc,EAAE,MAAM,YAAY,CAAC;AASvF;;;4BAG4B;AAC5B,MAAM,WAAW,aAAa;IAC5B,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,cAAc,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAChD,YAAY,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAClD;6DACyD;IACzD,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,KAAK,OAAO,CAAC;QAC/C,MAAM,EAAE;YAAE,SAAS,EAAE;gBAAE,EAAE,EAAE,MAAM,CAAC;gBAAC,OAAO,EAAE,MAAM,EAAE,CAAA;aAAE,EAAE,CAAA;SAAE,CAAC;QAC3D,aAAa,EAAE,OAAO,CAAC;QACvB,UAAU,EAAE,MAAM,CAAC;QACnB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;KAChC,CAAC,CAAC;CACJ;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,GAAE,aAAkB,GAAG,OAAO,CAsGrF"}