wicked-crew 0.4.0 → 0.6.0

package/dist/interactive/edit-events.js

@@ -0,0 +1,530 @@
+/**
+ * Opt-in governed answering of wicked-interactive's STRUCTURAL edits (task #86, Phase 7c
+ * final leg — the draft leg's sibling, see draft-events.ts).
+ *
+ * wicked-interactive's service is model-free: a feedback batch's deterministic items
+ * (content/style/remove) are applied instantly by the service and NEVER reach this seam —
+ * only `structural-change` items climb. The service lands the deterministic partial as
+ * `_v{N}.html`, then emits `wicked.interactive.feedback.processed` with `awaiting_structural > 0`
+ * and the structural items INLINE (selector + instruction + the element's CURRENT fragment),
+ * expecting *something with intelligence* to answer with `wicked.interactive.edit.completed`
+ * carrying the edited fragments. Today that answerer is an ad-hoc `assist` agent session
+ * (assist skill Step 3); this module makes a crew-governed run the answerer instead.
+ *
+ * Same shape as the draft leg, with the structural deltas:
+ *
+ *  - VERSIONED TARGETING: the dedupe unit is the HANDOFF — `<doc>:v<version>` — not the doc
+ *    (one doc produces many structural handoffs over its life). The durable ledger keys on the
+ *    handoff, and the closing emit's idempotency key carries doc+version.
+ *  - INV-2 AT SCALE: unlike a first draft (no pre-existing anchors), an edited fragment MUST
+ *    retain every pre-existing `data-wid` BYTE-EXACT — the service silently rejects violations
+ *    (regenerate.js Inv2Error → the user's edit dies with no version landed). So this seam runs
+ *    a deterministic PRE-EMIT SELF-CHECK mirroring the assist skill's Step 2/Step 3c discipline:
+ *    parse the handed-off fragment's data-wids, verify the worker's fragment retains all of
+ *    them, and fail HONEST (error status, no emit) on any violation — a loud crew-side rejection
+ *    instead of a silent service-side one.
+ *  - HANDOFF BY FILE: fragments can be arbitrarily large and the PTY seat runner's prompt is
+ *    single-line, so the seam writes the items to a handoff JSON on disk and names its path in
+ *    the problem; the worker writes each edited fragment to a per-item output file (never JSON
+ *    with hand-escaped HTML — the exact failure the assist skill's Step 3c warns about).
+ *  - PROJECT ATTRIBUTION (the 7b surface): a project-bound doc's events carry `project_id`
+ *    (interactive's DES-PROJECT-001 enrichment); the governed run is launched with
+ *    `LaunchOptions.projectId` so the edit shows up in the project's activity feed.
+ */
+import { mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { homedir } from 'node:os';
+import { randomUUID } from 'node:crypto';
+import { DOC_NAME, INTERACTIVE_DOMAIN, INTERACTIVE_PRODUCER, STATUS_POSTED, oneLine, } from './draft-events.js';
+import { InteractiveHandoffLedger } from './ledger.js';
+// ── Vocabulary constants (interactive's, verbatim — src/service/events.js is the truth) ──────
+export const FEEDBACK_PROCESSED = 'wicked.interactive.feedback.processed';
+export const EDIT_COMPLETED = 'wicked.interactive.edit.completed';
+/** Exact-type filter with a domain guard — no wildcard, one event type is the whole trigger. */
+export const INTERACTIVE_EDIT_BUS_FILTER = `${FEEDBACK_PROCESSED}@${INTERACTIVE_DOMAIN}`;
+/** Dedicated durable-cursor identity — NOT the draft seam's, so the two interactive seams
+ *  advance independent cursors and stopping one never strands the other. */
+export const INTERACTIVE_EDIT_BUS_PLUGIN = 'wicked-crew-interactive-edit';
+// ── The workflow (workflows-as-data) ─────────────────────────────────────────────────────────
+export const INTERACTIVE_EDIT_WORKFLOW = 'interactive-edit';
+/**
+ * The governed workflow that fulfils a structural handoff. ONE agent phase — `edit` (build,
+ * creator role): the target fragments are already extracted and the instructions already
+ * written, so unlike the draft leg there is nothing left to plan; a recon phase would only
+ * burn a council turn re-reading a handoff the edit phase reads anyway.
+ *
+ * The phase `instructions` adapt the fragment-edit contract from interactive's assist skill
+ * (Step 2 + Step 3): rewrite each handed-off fragment per its instruction, preserve every
+ * pre-existing `data-wid` byte-for-byte, never mint new anchors, keep the markup well-formed,
+ * and never fabricate facts. SINGLE-LINE by contract (PTY seat runner, wicked-core FINDING-011).
+ *
+ * The gate is `auto` with `validator_pin: null` — no human gate, no deterministic floor —
+ * because this seam runs its own deterministic pre-emit self-check (INV-2) and interactive's
+ * apply path re-checks the same invariant; a wrong-but-anchor-safe edit is the user's to judge
+ * on the canvas, exactly as with the assist session it replaces.
+ */
+export const INTERACTIVE_EDIT_WORKFLOW_DEF = {
+    id: INTERACTIVE_EDIT_WORKFLOW,
+    is_system: true,
+    phases: [
+        {
+            id: 'edit',
+            kind: 'build',
+            instructions: 'Read the handoff JSON file named in the task; for EACH entry of its items array: rewrite that item\'s "fragment" (the current outerHTML of one document element) to fulfil the item\'s "instruction", and SAVE the complete edited fragment — the element\'s full outerHTML only, no document wrapper, no markdown fences — to the item\'s exact absolute "output_path" (create parent directories if needed, overwrite if present). NON-NEGOTIABLE (INV-2): every data-wid attribute in the input fragment MUST survive in your edited fragment byte-for-byte — never remove, rename, or re-value a data-wid, and keep the root element\'s own data-wid on the root; elements you ADD must carry no data-wid at all (the wicked-interactive service instruments its own anchors). Keep the markup well-formed (balanced tags), change only what the instruction asks, and never fabricate facts or figures. Write every output file before you finish and end your reply with the absolute paths you wrote.',
+            gate_type: 'execution',
+            gate: 'auto',
+            executes_code: false,
+            verified_evidence: false,
+            required_deliverables: [],
+            depends_on: [],
+            role: 'creator',
+            skill_ref: null,
+            allowed_skills: [],
+            validator_pin: null,
+        },
+    ],
+};
+/**
+ * Parse a bus frame into a {@link StructuralHandoff}, or `null` when it is not an actionable
+ * structural handoff: wrong type, malformed payload, slug-invalid document_id, non-integer
+ * version, or NO usable structural items. Deterministic-only batches (`awaiting_structural: 0`)
+ * return `null` by construction — those edits already landed inside the service (edit-routing
+ * rung 1) and must never climb to a crew. Items whose `fragment` is missing/null (the service
+ * could not extract the element) are dropped: there is no current markup to edit.
+ */
+export function parseStructuralFeedback(eventType, payload) {
+    if (eventType !== FEEDBACK_PROCESSED)
+        return null;
+    if (typeof payload !== 'object' || payload === null)
+        return null;
+    const p = payload;
+    // The declared handoff size is the explicit gate: a frame carrying structural_items while
+    // announcing `awaiting_structural: 0` (or omitting it) is producer drift, not a handoff —
+    // never launch a governed run off an inconsistent frame.
+    const awaiting = p['awaiting_structural'];
+    if (typeof awaiting !== 'number' || !Number.isInteger(awaiting) || awaiting <= 0)
+        return null;
+    const documentId = typeof p['document_id'] === 'string' ? p['document_id'] : '';
+    if (!DOC_NAME.test(documentId))
+        return null;
+    const version = p['version'];
+    if (typeof version !== 'number' || !Number.isInteger(version) || version < 0)
+        return null;
+    const rawItems = Array.isArray(p['structural_items']) ? p['structural_items'] : [];
+    const items = [];
+    for (const raw of rawItems) {
+        if (typeof raw !== 'object' || raw === null)
+            continue;
+        const r = raw;
+        const selector = typeof r['selector'] === 'string' ? r['selector'] : '';
+        const fragment = typeof r['fragment'] === 'string' ? r['fragment'] : '';
+        if (selector.length === 0 || fragment.length === 0)
+            continue;
+        items.push({
+            selector,
+            instruction: typeof r['instruction'] === 'string' ? r['instruction'] : '',
+            fragment,
+        });
+    }
+    if (items.length === 0)
+        return null;
+    const projectId = typeof p['project_id'] === 'string' && p['project_id'].length > 0 ? p['project_id'] : undefined;
+    return { documentId, version, items, ...(projectId !== undefined ? { projectId } : {}) };
+}
+/** The one dedupe unit of this seam: a handoff is doc+version, NOT doc-lifetime. */
+export function handoffKey(documentId, version) {
+    return `${documentId}:v${version}`;
+}
+/** Deterministic bus idempotency key for the one edit this seam may land per handoff. */
+export function editIdempotencyKey(documentId, version) {
+    return `crew:interactive.edit:${documentId}:v${version}`;
+}
+/** Per-item output paths are INDEX-named (`fragment-1.html`, …), never selector-named — a
+ *  selector is bus-supplied data and must not name a filesystem path. */
+export function handoffFileItems(handoff, outDir) {
+    return handoff.items.map((item, i) => ({
+        ...item,
+        output_path: join(outDir, `fragment-${i + 1}.html`),
+    }));
+}
+/**
+ * The run's problem statement. Single-line (PTY contract); the bulky fragments ride in the
+ * handoff FILE, so only identity, the capped instruction gist, and the file path ride here.
+ */
+export function editProblem(handoff, handoffPath) {
+    const gist = oneLine(handoff.items.map((i) => i.instruction).filter((s) => s.length > 0).join('; '), 600);
+    return (`Fulfil ${handoff.items.length} structural edit(s) on the wicked-interactive document ` +
+        `"${handoff.documentId}" (editing version ${handoff.version}). Read the handoff file at ` +
+        `${handoffPath} — a JSON file whose items array carries, per edit: the user's instruction, ` +
+        `the element's current HTML fragment, and the exact absolute output_path where the edited ` +
+        `fragment must be saved. The user asked: ${gist.length > 0 ? gist : '(no instruction text)'}`);
+}
+// ── The pre-emit INV-2 self-check (deterministic; mirrors assist skill Step 3c) ──────────────
+/** Every `data-wid` value in a fragment, in document order (duplicates preserved). */
+export function fragmentWids(fragment) {
+    return [...fragment.matchAll(/data-wid="([^"]*)"/g)].map((m) => m[1]);
+}
+/** The data-wids of `before` missing from `after`, byte-exact. Non-empty = INV-2 violation.
+ *  Deliberately conservative: a wid that survives with different quoting/escaping counts as
+ *  dropped — the service compares exact attribute values, and fail-closed here beats a silent
+ *  Inv2Error rejection there. */
+export function droppedWids(before, after) {
+    const kept = new Set(fragmentWids(after));
+    return [...new Set(fragmentWids(before))].filter((w) => !kept.has(w));
+}
+/**
+ * Read the worker's per-item output files and verify each against the handed-off fragment:
+ * the file must exist non-empty, and every pre-existing `data-wid` must survive byte-exact.
+ * ANY violation fails the whole handoff (all-or-nothing): a partial apply would land a version
+ * the user believes complete, and the violating item would die silently service-side.
+ */
+export function collectEditResults(items) {
+    const results = [];
+    const violations = [];
+    for (const item of items) {
+        let fragment = '';
+        try {
+            fragment = readFileSync(item.output_path, 'utf8').trim();
+        }
+        catch {
+            /* missing file → the empty-fragment violation below */
+        }
+        if (fragment.length === 0) {
+            violations.push({ selector: item.selector, reason: `no edited fragment at ${item.output_path}` });
+            continue;
+        }
+        const dropped = droppedWids(item.fragment, fragment);
+        if (dropped.length > 0) {
+            violations.push({
+                selector: item.selector,
+                reason: `INV-2 violation — data-wid(s) dropped: ${dropped.join(', ')}`,
+            });
+            continue;
+        }
+        results.push({ selector: item.selector, fragment });
+    }
+    return { results, violations };
+}
+function defaultStateDir() {
+    return join(homedir(), '.wicked-crew');
+}
+/** The production council roster, resolved lazily through the adapter's own class so this module
+ *  never imports the native addon at runtime (unit tests pass `clisJson` and a fake adapter). */
+function rosterOf(adapter) {
+    return adapter.constructor.roster();
+}
+/**
+ * Arm the seam: register the `interactive-edit` workflow, open a durable
+ * `wicked.interactive.feedback.processed` subscription, and answer each handoff carrying
+ * structural items with a governed run that ends in `wicked.interactive.edit.completed`.
+ *
+ * Graceful degradation mirrors the draft seam: a missing wicked-bus package or an unopenable
+ * db LOGS and returns `null` — the daemon must still boot on a machine whose bus is broken;
+ * interactive's assist loop remains the (always-available) fallback answerer.
+ */
+export async function startInteractiveEditSubscriber(adapter, opts = {}) {
+    const log = opts.log ?? ((m) => console.error(m));
+    let bus;
+    try {
+        bus = await import('wicked-bus');
+    }
+    catch (err) {
+        log(`[interactive-edit] wicked-bus is not importable — governed structural edits disabled: ${err instanceof Error ? err.message : String(err)}`);
+        return null;
+    }
+    let db;
+    let config;
+    try {
+        config = bus.loadConfig(opts.dbPath !== undefined ? { db_path: opts.dbPath } : {});
+        db = bus.openDb(opts.dbPath !== undefined ? { db_path: opts.dbPath } : {});
+    }
+    catch (err) {
+        log(`[interactive-edit] could not open the bus db${opts.dbPath !== undefined ? ` at ${opts.dbPath}` : ''} — governed structural edits disabled: ${err instanceof Error ? err.message : String(err)}`);
+        return null;
+    }
+    // The workflow rides the normal registration path — core validates the def BEFORE it is
+    // persisted/hot-registered (FINDING-002 ordering), so a drifted def fails the arm loudly
+    // instead of failing the first launch obscurely.
+    try {
+        await adapter.registerWorkflow(INTERACTIVE_EDIT_WORKFLOW_DEF);
+    }
+    catch (err) {
+        log(`[interactive-edit] could not register the '${INTERACTIVE_EDIT_WORKFLOW}' workflow — ` +
+            `governed structural edits disabled: ${err instanceof Error ? err.message : String(err)}`);
+        return null;
+    }
+    const ledger = new InteractiveHandoffLedger(opts.ledgerPath ?? join(defaultStateDir(), 'interactive-edit-ledger.json'));
+    const editDir = opts.editDir ?? join(defaultStateDir(), 'interactive-edits');
+    const heartbeatMs = opts.heartbeatMs ?? 15_000;
+    const inFlight = new Map(); // runId → live state
+    /** Emit onto interactive's vocabulary as the `wi-crew` producer. Never throws into the
+     *  caller: narration/announce failures are logged — a lost status line must not kill the
+     *  subscription, and a duplicate edit emit (WB-002) is the idempotency key WORKING. */
+    function emitInteractive(type, payload, idempotencyKey) {
+        try {
+            bus.emit(db, config, {
+                event_type: type,
+                domain: INTERACTIVE_DOMAIN,
+                subdomain: type === EDIT_COMPLETED ? 'feedback' : 'status',
+                payload: { ts: new Date().toISOString(), ...payload },
+                producer_id: INTERACTIVE_PRODUCER,
+                ...(idempotencyKey !== undefined ? { idempotency_key: idempotencyKey } : {}),
+            });
+            return true;
+        }
+        catch (err) {
+            const code = err.error;
+            if (code === 'WB-002') {
+                // Duplicate idempotency key — the emit already happened (redelivery race). Success.
+                return true;
+            }
+            log(`[interactive-edit] emit ${type} failed: ${err instanceof Error ? err.message : String(err)}`);
+            return false;
+        }
+    }
+    function narrate(flight, message) {
+        flight.narration = message;
+        emitInteractive(STATUS_POSTED, {
+            document_id: flight.documentId,
+            version: flight.version,
+            state: 'working',
+            message,
+        });
+    }
+    function endFlight(runId) {
+        const flight = inFlight.get(runId);
+        if (flight) {
+            clearInterval(flight.heartbeat);
+            inFlight.delete(runId);
+        }
+        return flight;
+    }
+    /** Terminal-event fold: turn the governed run's own events into interactive narration, and
+     *  close the loop with `edit.completed` when the run lands AND the self-check passes. */
+    const offCoreEvents = adapter.onEvent((event) => {
+        const runId = typeof event.session === 'string' ? event.session : undefined;
+        if (runId === undefined)
+            return;
+        const flight = inFlight.get(runId);
+        if (flight === undefined)
+            return;
+        // Narration ladder — same rationale as the draft fold: the heartbeat repeats the LATEST
+        // line and the transcript dedups repeats, so advancing the line = visible progress.
+        const blocks = flight.items.length === 1 ? 'the targeted block' : `${flight.items.length} targeted blocks`;
+        if (event.type === 'councilConvened') {
+            const seats = Array.isArray(event.clis) ? event.clis.length : 0;
+            // "0-seat council" reads like a bug — generic phrasing whenever clis is missing or empty
+            // (Copilot, #269).
+            const council = seats > 0 ? `a ${seats}-seat council` : 'a council';
+            narrate(flight, `Convening ${council} to pick who reworks ${blocks}…`);
+            return;
+        }
+        if (event.type === 'unitDistributed') {
+            const who = typeof event.cli === 'string' ? event.cli : 'a worker';
+            const pct = typeof event.agreement_pct === 'number' ? ` (${event.agreement_pct}% agreement)` : '';
+            narrate(flight, `Council picked ${who} to rework ${blocks}${pct}…`);
+            return;
+        }
+        if (event.type === 'unitDispatched') {
+            narrate(flight, `Crew is reworking ${blocks}…`);
+            return;
+        }
+        if (event.type === 'toolInvoked') {
+            const tools = Array.isArray(event.tools) ? [...new Set(event.tools)].join(', ') : '';
+            if (tools)
+                narrate(flight, `Worker is using ${tools} on ${blocks}…`);
+            return;
+        }
+        if (event.type === 'unitOutputCaptured') {
+            narrate(flight, `Rework finished — the governance gate is reviewing it…`);
+            return;
+        }
+        if (event.type === 'gateDecided' && event.allow === true) {
+            narrate(flight, 'Gate approved the edit — landing the new version now…');
+            return;
+        }
+        if (event.type === 'acpFallback') {
+            const who = typeof event.cliKey === 'string' ? event.cliKey : 'the worker';
+            narrate(flight, `${who}'s live session dropped — continuing in single-shot mode…`);
+            return;
+        }
+        if (event.type === 'sessionCompleted') {
+            endFlight(runId);
+            finalize(flight, runId);
+            return;
+        }
+        if (event.type === 'sessionFailed' || event.type === 'runCancelled') {
+            endFlight(runId);
+            ledger.recordFailure(flight.key);
+            emitInteractive(STATUS_POSTED, {
+                document_id: flight.documentId,
+                version: flight.version,
+                state: 'error',
+                message: `The crew run answering this edit ${event.type === 'runCancelled' ? 'was cancelled' : 'failed'} ` +
+                    `(run ${runId}). Inspect it via the crew API (GET /api/v1/runs/${runId}); the assist loop can still take over.`,
+            });
+            log(`[interactive-edit] run ${runId} for handoff ${flight.key} ended: ${event.type}`);
+        }
+    });
+    function finalize(flight, runId) {
+        const { documentId, version, key, items } = flight;
+        // The deterministic pre-emit self-check (INV-2 at scale): a violating fragment would be
+        // rejected SILENTLY by the service (regenerate.js Inv2Error) — the user's edit would just
+        // die. Fail honest here instead: error status, failure row, no emit.
+        const { results, violations } = collectEditResults(items);
+        if (violations.length > 0) {
+            ledger.recordFailure(key);
+            const detail = violations.map((v) => `${v.selector}: ${v.reason}`).join('; ');
+            emitInteractive(STATUS_POSTED, {
+                document_id: documentId,
+                version,
+                state: 'error',
+                message: `The crew's edit failed its pre-emit self-check and was NOT applied — ${detail} ` +
+                    `(run ${runId}). The document is unchanged; resubmit the edit or let the assist loop take over.`,
+            });
+            log(`[interactive-edit] run ${runId} rejected by self-check for ${key}: ${detail}`);
+            return;
+        }
+        // Announce with the handoff's version (the parent the service forks from) and the
+        // deterministic doc+version key — a re-announce is a WB-002 no-op.
+        const emitted = emitInteractive(EDIT_COMPLETED, { document_id: documentId, version, results }, editIdempotencyKey(documentId, version));
+        if (!emitted) {
+            // The bus refused the announce (non-WB-002): the edit exists on disk but never reached
+            // the service. Fail HONEST — leaving the ledger row launched-but-never-closed would
+            // silently eat every replay of this handoff (the launch gate is `ledger.has`).
+            ledger.recordFailure(key);
+            emitInteractive(STATUS_POSTED, {
+                document_id: documentId,
+                version,
+                state: 'error',
+                message: `Crew finished the edit but could not announce it on the bus (run ${runId}); ` +
+                    `the document is unchanged. Inspect the crew daemon log, then resubmit the edit.`,
+            });
+            log(`[interactive-edit] edit.completed emit FAILED for ${key} (run ${runId}) — recorded as failure`);
+            return;
+        }
+        ledger.recordEmitted(key);
+        emitInteractive(STATUS_POSTED, {
+            document_id: documentId,
+            version,
+            state: 'complete',
+            message: 'Edit is in — landing the new version on the canvas now.',
+        });
+        log(`[interactive-edit] edit.completed emitted for ${key} (run ${runId}, ${results.length} fragment(s))`);
+    }
+    async function handleFeedbackProcessed(event) {
+        const handoff = parseStructuralFeedback(event.event_type, event.payload);
+        if (handoff === null)
+            return;
+        const key = handoffKey(handoff.documentId, handoff.version);
+        // Replay-dedup: the ledger is the durable gate (redelivery after crash/restart), the
+        // in-flight scan the live one (redelivery inside a single process lifetime). Keyed by
+        // HANDOFF — a later feedback batch on the same doc is a new key and launches normally.
+        if (ledger.has(key)) {
+            log(`[interactive-edit] handoff ${key} already answered (run ${ledger.get(key)?.runId}) — replay ignored`);
+            return;
+        }
+        for (const f of inFlight.values()) {
+            if (f.key === key)
+                return;
+        }
+        const outDir = join(editDir, key.replace(':', '-'));
+        mkdirSync(outDir, { recursive: true });
+        const items = handoffFileItems(handoff, outDir);
+        const handoffPath = join(editDir, `${key.replace(':', '-')}-handoff.json`);
+        writeFileSync(handoffPath, JSON.stringify({ document_id: handoff.documentId, version: handoff.version, items }, null, 2), 'utf8');
+        const runId = randomUUID();
+        emitInteractive(STATUS_POSTED, {
+            document_id: handoff.documentId,
+            version: handoff.version,
+            state: 'processing',
+            message: `A governed crew picked up your edit — reworking ${items.length === 1 ? 'the block' : `${items.length} blocks`}…`,
+        });
+        try {
+            const input = {
+                problem: editProblem(handoff, handoffPath),
+                sessionId: runId,
+                clisJson: opts.clisJson ?? JSON.stringify(rosterOf(adapter)),
+                workflow: INTERACTIVE_EDIT_WORKFLOW,
+                // The 7b surface: a project-bound doc's governed edits are FILED — the run lands in
+                // the project's activity feed instead of floating unattributed.
+                ...(handoff.projectId !== undefined ? { projectId: handoff.projectId } : {}),
+                // The task names the handoff JSON + per-block output files under `editDir`, which sits
+                // OUTSIDE the unit's sandbox — the wrapped-CLI boundary would deny both the reads and
+                // the deliverable writes (crew#263, same shape as the draft path). One declared root
+                // covers both: write roots are readable (wicked-core#259).
+                extraWriteRoots: [editDir],
+            };
+            await adapter.launchRun(input);
+        }
+        catch (err) {
+            // The 'processing' status is already on the thread — close it out honestly so the
+            // canvas never sits in an in-between state on a launch that went nowhere.
+            const reason = err instanceof Error ? err.message : String(err);
+            emitInteractive(STATUS_POSTED, {
+                document_id: handoff.documentId,
+                version: handoff.version,
+                state: 'error',
+                message: `Crew could not start a run for this edit: ${reason}. The assist loop can still take over.`,
+            });
+            // DELIBERATELY no ledger write: only an answered handoff earns a row, so an operator can
+            // replay the dead-lettered feedback.processed after fixing the daemon and get a real
+            // retry. Re-throw so the bus (maxRetries 0) dead-letters the frame — visible, replayable,
+            // and incapable of hot-looping.
+            throw err;
+        }
+        // Record AFTER the launch resolved: a failed launch leaves no ledger row, so a replayed
+        // delivery retries. The crash window between launch and this write is the reason the
+        // edit emit ALSO carries a deterministic idempotency key.
+        ledger.recordLaunch(key, runId);
+        if (handoff.projectId !== undefined)
+            opts.onRunFiled?.(runId, handoff.projectId);
+        const flight = {
+            key,
+            documentId: handoff.documentId,
+            version: handoff.version,
+            items,
+            narration: 'Crew run launched — working on your edit…',
+            heartbeat: setInterval(() => {
+                // Repeat the last real narration so the ~20s status.requested window is always fed,
+                // even mid-phase when the engine is quiet.
+                emitInteractive(STATUS_POSTED, {
+                    document_id: flight.documentId,
+                    version: flight.version,
+                    state: 'working',
+                    message: flight.narration,
+                });
+            }, heartbeatMs),
+            // Do not keep the daemon alive for narration alone.
+        };
+        flight.heartbeat.unref?.();
+        inFlight.set(runId, flight);
+        log(`[interactive-edit] handoff ${key} → governed run ${runId} (${items.length} item(s), handoff ${handoffPath})`);
+    }
+    const sub = bus.subscribe({
+        db,
+        plugin: INTERACTIVE_EDIT_BUS_PLUGIN,
+        filter: INTERACTIVE_EDIT_BUS_FILTER,
+        // Live triggers only: replaying a bus backlog would answer handoffs whose edits the assist
+        // loop long since produced. History reconciliation belongs to the state plane, not here.
+        cursor_init: 'latest',
+        pollIntervalMs: opts.pollIntervalMs ?? 2000,
+        // Our own ledger + idempotency key are the dedupe; a bus-level retry of a failed launch
+        // would double-launch precisely because the ledger row is only written on success.
+        maxRetries: 0,
+        handler: (event) => handleFeedbackProcessed(event),
+        onError: (err, event) => {
+            log(`[interactive-edit] handler error on event ${String(event?.event_id ?? '?')}: ${err.message}`);
+        },
+    });
+    return {
+        ledger,
+        stop: async () => {
+            offCoreEvents();
+            for (const runId of [...inFlight.keys()])
+                endFlight(runId);
+            await sub.stop();
+        },
+    };
+}
+//# sourceMappingURL=edit-events.js.map

package/dist/interactive/edit-events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"edit-events.js","sourceRoot":"","sources":["../../src/interactive/edit-events.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACjE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EACL,QAAQ,EACR,kBAAkB,EAClB,oBAAoB,EACpB,aAAa,EACb,OAAO,GACR,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AAIvD,gGAAgG;AAEhG,MAAM,CAAC,MAAM,kBAAkB,GAAG,uCAAuC,CAAC;AAC1E,MAAM,CAAC,MAAM,cAAc,GAAG,mCAAmC,CAAC;AAElE,gGAAgG;AAChG,MAAM,CAAC,MAAM,2BAA2B,GAAG,GAAG,kBAAkB,IAAI,kBAAkB,EAAE,CAAC;AAEzF;4EAC4E;AAC5E,MAAM,CAAC,MAAM,2BAA2B,GAAG,8BAA8B,CAAC;AAE1E,gGAAgG;AAEhG,MAAM,CAAC,MAAM,yBAAyB,GAAG,kBAAkB,CAAC;AAE5D;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAgB;IACxD,EAAE,EAAE,yBAAyB;IAC7B,SAAS,EAAE,IAAI;IACf,MAAM,EAAE;QACN;YACE,EAAE,EAAE,MAAM;YACV,IAAI,EAAE,OAAO;YACb,YAAY,EACV,88BAA88B;YACh9B,SAAS,EAAE,WAAW;YACtB,IAAI,EAAE,MAAM;YACZ,aAAa,EAAE,KAAK;YACpB,iBAAiB,EAAE,KAAK;YACxB,qBAAqB,EAAE,EAAE;YACzB,UAAU,EAAE,EAAE;YACd,IAAI,EAAE,SAAS;YACf,SAAS,EAAE,IAAI;YACf,cAAc,EAAE,EAAE;YAClB,aAAa,EAAE,IAAI;SACpB;KACF;CACF,CAAC;AAqBF;;;;;;;GAOG;AACH,MAAM,UAAU,uBAAuB,CAAC,SAAiB,EAAE,OAAgB;IACzE,IAAI,SAAS,KAAK,kBAAkB;QAAE,OAAO,IAAI,CAAC;IAClD,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACjE,MAAM,CAAC,GAAG,OAAkC,CAAC;IAC7C,0FAA0F;IAC1F,0FAA0F;IAC1F,yDAAyD;IACzD,MAAM,QAAQ,GAAG,CAAC,CAAC,qBAAqB,CAAC,CAAC;IAC1C,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,QAAQ,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9F,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,aAAa,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAChF,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5C,MAAM,OAAO,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC;IAC7B,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1F,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACnF,MAAM,KAAK,GAAqB,EAAE,CAAC;IACnC,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;YAAE,SAAS;QACtD,MAAM,CAAC,GAAG,GAA8B,CAAC;QACzC,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,UAAU,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACxE,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,UAAU,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACxE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAC7D,KAAK,CAAC,IAAI,CAAC;YACT,QAAQ;YACR,WAAW,EAAE,OAAO,CAAC,CAAC,aAAa,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE;YACzE,QAAQ;SACT,CAAC,CAAC;IACL,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,SAAS,GACb,OAAO,CAAC,CAAC,YAAY,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAClG,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AAC3F,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,UAAU,CAAC,UAAkB,EAAE,OAAe;IAC5D,OAAO,GAAG,UAAU,KAAK,OAAO,EAAE,CAAC;AACrC,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,kBAAkB,CAAC,UAAkB,EAAE,OAAe;IACpE,OAAO,yBAAyB,UAAU,KAAK,OAAO,EAAE,CAAC;AAC3D,CAAC;AAQD;yEACyE;AACzE,MAAM,UAAU,gBAAgB,CAAC,OAA0B,EAAE,MAAc;IACzE,OAAO,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QACrC,GAAG,IAAI;QACP,WAAW,EAAE,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC;KACpD,CAAC,CAAC,CAAC;AACN,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,OAA0B,EAAE,WAAmB;IACzE,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;IAC1G,OAAO,CACL,UAAU,OAAO,CAAC,KAAK,CAAC,MAAM,yDAAyD;QACvF,IAAI,OAAO,CAAC,UAAU,sBAAsB,OAAO,CAAC,OAAO,8BAA8B;QACzF,GAAG,WAAW,8EAA8E;QAC5F,2FAA2F;QAC3F,2CAA2C,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,uBAAuB,EAAE,CAC9F,CAAC;AACJ,CAAC;AAED,gGAAgG;AAEhG,sFAAsF;AACtF,MAAM,UAAU,YAAY,CAAC,QAAgB;IAC3C,OAAO,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAW,CAAC,CAAC;AAClF,CAAC;AAED;;;iCAGiC;AACjC,MAAM,UAAU,WAAW,CAAC,MAAc,EAAE,KAAa;IACvD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;IAC1C,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AACxE,CAAC;AAcD;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAwB;IACzD,MAAM,OAAO,GAAkD,EAAE,CAAC;IAClE,MAAM,UAAU,GAAoB,EAAE,CAAC;IACvC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,QAAQ,GAAG,EAAE,CAAC;QAClB,IAAI,CAAC;YACH,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3D,CAAC;QAAC,MAAM,CAAC;YACP,uDAAuD;QACzD,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,UAAU,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,yBAAyB,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YAClG,SAAS;QACX,CAAC;QACD,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACrD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,UAAU,CAAC,IAAI,CAAC;gBACd,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,MAAM,EAAE,0CAA0C,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;aACvE,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;AACjC,CAAC;AAgDD,SAAS,eAAe;IACtB,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,cAAc,CAAC,CAAC;AACzC,CAAC;AAED;iGACiG;AACjG,SAAS,QAAQ,CAAC,OAAoB;IACpC,OAAQ,OAAO,CAAC,WAAkD,CAAC,MAAM,EAAE,CAAC;AAC9E,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,OAAoB,EACpB,OAA+B,EAAE;IAEjC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAE1D,IAAI,GAAgC,CAAC;IACrC,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CACD,yFACE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,EAAE,CACH,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,EAA8B,CAAC;IACnC,IAAI,MAA+B,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACnF,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC7E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CACD,+CACE,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EACrD,0CAA0C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC7F,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,wFAAwF;IACxF,yFAAyF;IACzF,iDAAiD;IACjD,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,gBAAgB,CAAC,6BAA6B,CAAC,CAAC;IAChE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CACD,8CAA8C,yBAAyB,eAAe;YACpF,uCAAuC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC5F,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,wBAAwB,CACzC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,eAAe,EAAE,EAAE,8BAA8B,CAAC,CAC3E,CAAC;IACF,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,eAAe,EAAE,EAAE,mBAAmB,CAAC,CAAC;IAC7E,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,MAAM,CAAC;IAC/C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAoB,CAAC,CAAC,qBAAqB;IAEnE;;2FAEuF;IACvF,SAAS,eAAe,CACtB,IAAY,EACZ,OAAgC,EAChC,cAAuB;QAEvB,IAAI,CAAC;YACH,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE;gBACnB,UAAU,EAAE,IAAI;gBAChB,MAAM,EAAE,kBAAkB;gBAC1B,SAAS,EAAE,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ;gBAC1D,OAAO,EAAE,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,GAAG,OAAO,EAAE;gBACrD,WAAW,EAAE,oBAAoB;gBACjC,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC7E,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,GAAI,GAA0B,CAAC,KAAK,CAAC;YAC/C,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtB,oFAAoF;gBACpF,OAAO,IAAI,CAAC;YACd,CAAC;YACD,GAAG,CACD,2BAA2B,IAAI,YAAY,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC9F,CAAC;YACF,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,SAAS,OAAO,CAAC,MAAgB,EAAE,OAAe;QAChD,MAAM,CAAC,SAAS,GAAG,OAAO,CAAC;QAC3B,eAAe,CAAC,aAAa,EAAE;YAC7B,WAAW,EAAE,MAAM,CAAC,UAAU;YAC9B,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,KAAK,EAAE,SAAS;YAChB,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IAED,SAAS,SAAS,CAAC,KAAa;QAC9B,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,MAAM,EAAE,CAAC;YACX,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAChC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;6FACyF;IACzF,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,KAAgB,EAAE,EAAE;QACzD,MAAM,KAAK,GAAG,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QAC5E,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO;QAChC,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO;QAEjC,wFAAwF;QACxF,oFAAoF;QACpF,MAAM,MAAM,GACV,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,kBAAkB,CAAC;QAE9F,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;YACrC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YAChE,yFAAyF;YACzF,mBAAmB;YACnB,MAAM,OAAO,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,eAAe,CAAC,CAAC,CAAC,WAAW,CAAC;YACpE,OAAO,CAAC,MAAM,EAAE,aAAa,OAAO,wBAAwB,MAAM,GAAG,CAAC,CAAC;YACvE,OAAO;QACT,CAAC;QAED,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;YACrC,MAAM,GAAG,GAAG,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC;YACnE,MAAM,GAAG,GAAG,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,aAAa,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;YAClG,OAAO,CAAC,MAAM,EAAE,kBAAkB,GAAG,cAAc,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC;YACpE,OAAO;QACT,CAAC;QAED,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;YACpC,OAAO,CAAC,MAAM,EAAE,qBAAqB,MAAM,GAAG,CAAC,CAAC;YAChD,OAAO;QACT,CAAC;QAED,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YACjC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACrF,IAAI,KAAK;gBAAE,OAAO,CAAC,MAAM,EAAE,mBAAmB,KAAK,OAAO,MAAM,GAAG,CAAC,CAAC;YACrE,OAAO;QACT,CAAC;QAED,IAAI,KAAK,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;YACxC,OAAO,CAAC,MAAM,EAAE,wDAAwD,CAAC,CAAC;YAC1E,OAAO;QACT,CAAC;QAED,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,IAAI,KAAK,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;YACzD,OAAO,CAAC,MAAM,EAAE,uDAAuD,CAAC,CAAC;YACzE,OAAO;QACT,CAAC;QAED,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YACjC,MAAM,GAAG,GAAG,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC;YAC3E,OAAO,CAAC,MAAM,EAAE,GAAG,GAAG,2DAA2D,CAAC,CAAC;YACnF,OAAO;QACT,CAAC;QAED,IAAI,KAAK,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;YACtC,SAAS,CAAC,KAAK,CAAC,CAAC;YACjB,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YACxB,OAAO;QACT,CAAC;QAED,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;YACpE,SAAS,CAAC,KAAK,CAAC,CAAC;YACjB,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjC,eAAe,CAAC,aAAa,EAAE;gBAC7B,WAAW,EAAE,MAAM,CAAC,UAAU;gBAC9B,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,KAAK,EAAE,OAAO;gBACd,OAAO,EACL,oCAAoC,KAAK,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,QAAQ,GAAG;oBACjG,QAAQ,KAAK,oDAAoD,KAAK,yCAAyC;aAClH,CAAC,CAAC;YACH,GAAG,CAAC,0BAA0B,KAAK,gBAAgB,MAAM,CAAC,GAAG,WAAW,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QACxF,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,SAAS,QAAQ,CAAC,MAAgB,EAAE,KAAa;QAC/C,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC;QACnD,wFAAwF;QACxF,0FAA0F;QAC1F,qEAAqE;QACrE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAC1D,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;YAC1B,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9E,eAAe,CAAC,aAAa,EAAE;gBAC7B,WAAW,EAAE,UAAU;gBACvB,OAAO;gBACP,KAAK,EAAE,OAAO;gBACd,OAAO,EACL,wEAAwE,MAAM,GAAG;oBACjF,QAAQ,KAAK,mFAAmF;aACnG,CAAC,CAAC;YACH,GAAG,CAAC,0BAA0B,KAAK,+BAA+B,GAAG,KAAK,MAAM,EAAE,CAAC,CAAC;YACpF,OAAO;QACT,CAAC;QACD,kFAAkF;QAClF,mEAAmE;QACnE,MAAM,OAAO,GAAG,eAAe,CAC7B,cAAc,EACd,EAAE,WAAW,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,EAC7C,kBAAkB,CAAC,UAAU,EAAE,OAAO,CAAC,CACxC,CAAC;QACF,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,uFAAuF;YACvF,oFAAoF;YACpF,+EAA+E;YAC/E,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;YAC1B,eAAe,CAAC,aAAa,EAAE;gBAC7B,WAAW,EAAE,UAAU;gBACvB,OAAO;gBACP,KAAK,EAAE,OAAO;gBACd,OAAO,EACL,oEAAoE,KAAK,KAAK;oBAC9E,iFAAiF;aACpF,CAAC,CAAC;YACH,GAAG,CAAC,qDAAqD,GAAG,SAAS,KAAK,yBAAyB,CAAC,CAAC;YACrG,OAAO;QACT,CAAC;QACD,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QAC1B,eAAe,CAAC,aAAa,EAAE;YAC7B,WAAW,EAAE,UAAU;YACvB,OAAO;YACP,KAAK,EAAE,UAAU;YACjB,OAAO,EAAE,yDAAyD;SACnE,CAAC,CAAC;QACH,GAAG,CAAC,iDAAiD,GAAG,SAAS,KAAK,KAAK,OAAO,CAAC,MAAM,eAAe,CAAC,CAAC;IAC5G,CAAC;IAED,KAAK,UAAU,uBAAuB,CAAC,KAAe;QACpD,MAAM,OAAO,GAAG,uBAAuB,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACzE,IAAI,OAAO,KAAK,IAAI;YAAE,OAAO;QAC7B,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QAE5D,qFAAqF;QACrF,sFAAsF;QACtF,uFAAuF;QACvF,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACpB,GAAG,CACD,8BAA8B,GAAG,0BAA0B,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,KAAK,oBAAoB,CACtG,CAAC;YACF,OAAO;QACT,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YAClC,IAAI,CAAC,CAAC,GAAG,KAAK,GAAG;gBAAE,OAAO;QAC5B,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;QACpD,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,MAAM,KAAK,GAAG,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAChD,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,eAAe,CAAC,CAAC;QAC3E,aAAa,CACX,WAAW,EACX,IAAI,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EAC7F,MAAM,CACP,CAAC;QACF,MAAM,KAAK,GAAG,UAAU,EAAE,CAAC;QAE3B,eAAe,CAAC,aAAa,EAAE;YAC7B,WAAW,EAAE,OAAO,CAAC,UAAU;YAC/B,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,KAAK,EAAE,YAAY;YACnB,OAAO,EAAE,mDAAmD,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,SAAS,GAAG;SAC3H,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,MAAM,KAAK,GAAmB;gBAC5B,OAAO,EAAE,WAAW,CAAC,OAAO,EAAE,WAAW,CAAC;gBAC1C,SAAS,EAAE,KAAK;gBAChB,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;gBAC5D,QAAQ,EAAE,yBAAyB;gBACnC,oFAAoF;gBACpF,gEAAgE;gBAChE,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5E,uFAAuF;gBACvF,sFAAsF;gBACtF,qFAAqF;gBACrF,2DAA2D;gBAC3D,eAAe,EAAE,CAAC,OAAO,CAAC;aAC3B,CAAC;YACF,MAAM,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,kFAAkF;YAClF,0EAA0E;YAC1E,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAChE,eAAe,CAAC,aAAa,EAAE;gBAC7B,WAAW,EAAE,OAAO,CAAC,UAAU;gBAC/B,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,KAAK,EAAE,OAAO;gBACd,OAAO,EAAE,6CAA6C,MAAM,wCAAwC;aACrG,CAAC,CAAC;YACH,yFAAyF;YACzF,qFAAqF;YACrF,0FAA0F;YAC1F,gCAAgC;YAChC,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,wFAAwF;QACxF,qFAAqF;QACrF,0DAA0D;QAC1D,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAChC,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS;YAAE,IAAI,CAAC,UAAU,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QAEjF,MAAM,MAAM,GAAa;YACvB,GAAG;YACH,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,KAAK;YACL,SAAS,EAAE,2CAA2C;YACtD,SAAS,EAAE,WAAW,CAAC,GAAG,EAAE;gBAC1B,oFAAoF;gBACpF,2CAA2C;gBAC3C,eAAe,CAAC,aAAa,EAAE;oBAC7B,WAAW,EAAE,MAAM,CAAC,UAAU;oBAC9B,OAAO,EAAE,MAAM,CAAC,OAAO;oBACvB,KAAK,EAAE,SAAS;oBAChB,OAAO,EAAE,MAAM,CAAC,SAAS;iBAC1B,CAAC,CAAC;YACL,CAAC,EAAE,WAAW,CAAC;YACf,oDAAoD;SACrD,CAAC;QACF,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC;QAC3B,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC5B,GAAG,CAAC,8BAA8B,GAAG,mBAAmB,KAAK,KAAK,KAAK,CAAC,MAAM,qBAAqB,WAAW,GAAG,CAAC,CAAC;IACrH,CAAC;IAED,MAAM,GAAG,GAAG,GAAG,CAAC,SAAS,CAAC;QACxB,EAAE;QACF,MAAM,EAAE,2BAA2B;QACnC,MAAM,EAAE,2BAA2B;QACnC,2FAA2F;QAC3F,yFAAyF;QACzF,WAAW,EAAE,QAAQ;QACrB,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,IAAI;QAC3C,wFAAwF;QACxF,mFAAmF;QACnF,UAAU,EAAE,CAAC;QACb,OAAO,EAAE,CAAC,KAAe,EAAE,EAAE,CAAC,uBAAuB,CAAC,KAAK,CAAC;QAC5D,OAAO,EAAE,CAAC,GAAU,EAAE,KAAgB,EAAE,EAAE;YACxC,GAAG,CACD,6CAA6C,MAAM,CAAC,KAAK,EAAE,QAAQ,IAAI,GAAG,CAAC,KAAK,GAAG,CAAC,OAAO,EAAE,CAC9F,CAAC;QACJ,CAAC;KACF,CAAC,CAAC;IAEH,OAAO;QACL,MAAM;QACN,IAAI,EAAE,KAAK,IAAI,EAAE;YACf,aAAa,EAAE,CAAC;YAChB,KAAK,MAAM,KAAK,IAAI,CAAC,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;gBAAE,SAAS,CAAC,KAAK,CAAC,CAAC;YAC3D,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QACnB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/interactive/ledger.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Durable handoff ledger shared by crew's wicked-interactive seams (task #86, Phase 7c).
+ *
+ * Extracted from the draft leg (draft-events.ts, PR #241) when the structural-edit leg arrived,
+ * because both seams need the same replay-dedup discipline with DIFFERENT key grammars:
+ *
+ *  - the DRAFT leg keys by document id — one first draft per document lifetime;
+ *  - the EDIT leg keys by `<doc>:v<version>` — one governed edit per HANDOFF, because the same
+ *    document legitimately produces many structural handoffs over its life (versioned targeting).
+ *
+ * The ledger itself is key-agnostic: a durable map `key → HandoffLedgerEntry`, JSON on disk,
+ * written atomically (tmp + rename). The bus cursor alone cannot carry this: at-least-once
+ * delivery means the same trigger can arrive again after a crash between handling and cursor
+ * advance, and in-memory state dies with the process. The ledger is the system of record for
+ * "this handoff was answered"; each seam's in-flight map is just the live half.
+ */
+/** One ledger row — the lifecycle of a handoff a seam answered. */
+export interface HandoffLedgerEntry {
+    runId: string;
+    launchedAt: string;
+    /** Set once the closing event (draft.completed / edit.completed) was emitted. */
+    emittedAt?: string;
+    /** Set when the governed run ended without a usable result; kept so a redelivered trigger
+     *  does not silently relaunch a run an operator should look at first. */
+    failedAt?: string;
+}
+export declare class InteractiveHandoffLedger {
+    private readonly path;
+    private entries;
+    constructor(path: string);
+    has(key: string): boolean;
+    get(key: string): HandoffLedgerEntry | undefined;
+    recordLaunch(key: string, runId: string): void;
+    recordEmitted(key: string): void;
+    recordFailure(key: string): void;
+    size(): number;
+    private persist;
+}
+//# sourceMappingURL=ledger.d.ts.map

package/dist/interactive/ledger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ledger.d.ts","sourceRoot":"","sources":["../../src/interactive/ledger.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAKH,mEAAmE;AACnE,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,iFAAiF;IACjF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;6EACyE;IACzE,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAOD,qBAAa,wBAAwB;IACnC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;IAC9B,OAAO,CAAC,OAAO,CAAqC;gBAExC,IAAI,EAAE,MAAM;IAuCxB,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAIzB,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS;IAIhD,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IAK9C,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAQhC,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAQhC,IAAI,IAAI,MAAM;IAId,OAAO,CAAC,OAAO;CAMhB"}