[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10,"_11":12},"actionData","errors","root",{"_228":-5,"_231":232,"_233":234},"routes/shell",{"_40":41,"_227":-5,"_228":-5,"_229":230},"routes/repo",{"_33":-7,"_34":35,"_36":37,"_38":39,"_40":41,"_42":31,"_43":31,"_44":31,"_45":31,"_46":31,"_47":31,"_48":49,"_50":49,"_51":31,"_52":-7,"_53":-7,"_54":55,"_56":57,"_58":59,"_60":-5,"_61":62,"_63":64,"_65":66,"_67":68},"routes/repo.blob",{"_13":14,"_15":16,"_17":18,"_19":20,"_21":14,"_22":23,"_24":-5,"_25":26,"_27":28,"_28":29,"_30":31,"_32":14},"ref","ccb8f55aae1a593db4df320d89ca825bc1afeb5a","path","apps/server/src/plan/service.ts","oid","a6a448a7adace46b98a092d83ced9395a15466b6","size",48437,"commit","mounts",[],"source","plain",{"_13":14,"_15":16},"kind","text","/**\n * The plan, as a room offers it.\n *\n * Sits between sockets and the authoritative document: batches incoming\n * updates, decides whether they may be applied, acknowledges the sender and\n * relays to everyone else, and keeps the disk snapshot current.\n *\n * Acknowledgement is the contract worth being careful about. A client is told\n * its update was accepted only once the document has taken it and still\n * validates, because an ack is what lets the client stop holding the bytes.\n */\n\nimport * as Y from \"yjs\";\nimport { createHash } from \"node:crypto\";\n\nimport { MENTION } from \"@chopin/protocol/address\";\n\nimport * as presence from \"./presence\";\nimport * as edit from \"./edit\";\nimport * as room from \"./room\";\nimport * as Chat from \"../chat/service\";\nimport { restoreReferences } from \"../chat/references\";\nimport * as Comments from \"../comments/service\";\nimport * as Questions from \"../questions/service\";\nimport { claim, restore as restoreGraph, restoreRun } from \"../tasks/graphs\";\nimport { claimEligibility, restoreLifecycle, transition } from \"../tasks/lifecycle\";\nimport { broadcast, fail, relay, reply, tell } from \"../wire\";\n\nimport type { Server } from \"bun\";\nimport type { Plan as Wire, Request } from \"@chopin/protocol\";\nimport type { Socket, SocketData } from \"../wire\";\nimport type { Presence } from \"./presence\";\nimport type { Document } from \"./room\";\nimport type { Block } from \"./edit\";\nimport type { Brief, CreationOrigin } from \"../mcp\";\nimport type { InitialChannel, JsonValue, Lease, StoredChannel } from \"../storage/model\";\nimport type { StorageAdapter } from \"../storage/port\";\nimport type { ClaimInput, ClaimResult, Graph, Run } from \"../tasks/graphs\";\nimport type { Lifecycle, LifecycleInput, LifecycleResult } from \"../tasks/lifecycle\";\n\n/** Updates are grouped for this long before being applied together. */\nconst GROUP_MS = 5;\n\n/** Per-connection ceiling, generous enough that typing never reaches it. */\nconst RATE_LIMIT = 200;\nconst RATE_WINDOW_MS = 1_000;\n\n/** Invalid batches tolerated from one connection before it is disconnected. */\nconst INVALID_LIMIT = 3;\nconst INVALID_WINDOW_MS = 10 * 60 * 1_000;\n\n/** Close code for a client that keeps sending updates the document rejects. */\nconst ABUSIVE = 4003;\n\ntype Queued = {\n\tws: Socket;\n\trid: string;\n\tid: string;\n\tupdate: Uint8Array;\n};\n\ntype Meter = {\n\t/** Timestamps of recent updates, for the rate limit. */\n\trecent: number[];\n\t/** Timestamps of recent rejections, for the strike count. */\n\tinvalid: number[];\n};\n\nexport type Backend = {\n\tstorage: StorageAdapter;\n\tlease: () => Lease;\n\tfatal: (error: unknown) => void;\n\tonDocumentPersisted?: (target: DocumentTarget) => void;\n};\n\nexport type DocumentTarget = {\n\tchannelId: string;\n\trevision: number;\n\tsource: string;\n\tsourceHash: string;\n};\n\n/** Durable MCP context for a document created through the hosted surface. */\nexport type CreationMetadata = {\n\tbrief: Brief;\n\torigin: CreationOrigin;\n};\n\n/** Durable result of one accepted MCP document rewrite. */\nexport type McpUpdateRecord = {\n\tidempotencyKey: string;\n\tfingerprint: string;\n\tfromRevision: number;\n\tclient: { name: string; version: string };\n\tdocument: {\n\t\tsource: string;\n\t\trevision: number;\n\t\ttitle: string;\n\t\turl: string;\n\t\tdescription?: string;\n\t};\n};\n\ntype Persistence = Backend & {\n\tchannelId: string;\n\trevision: number;\n\tsequence: number;\n\tlastSidecar: string;\n\tcheckpointTimer: ReturnType | undefined;\n\tcommittedEpoch: string;\n\tcommittedSource: string;\n\tcommittedDocument: Uint8Array;\n\tcommittedSidecar: JsonValue;\n\tclosing: boolean;\n};\n\ntype Captured = {\n\trevision: number;\n\tepoch: string;\n\tsource: string;\n\tsourceHash: string;\n\tdocument: Uint8Array;\n\tsidecar: JsonValue;\n\tsidecarText: string;\n};\n\nexport type Plan = {\n\tid: string;\n\t/** Context retained for plans created through MCP. */\n\tcreation?: CreationMetadata;\n\t/** Idempotent MCP rewrites retained so later edits do not change a replay. */\n\tmcpUpdates: McpUpdateRecord[];\n\tserver: Server;\n\tdocument: Document;\n\tpresence: Presence;\n\t/** Open questionnaires and their shared answer drafts. */\n\tquestions: Questions.Questions;\n\t/** Resolutions in flight and who is typing. Nothing durable. */\n\tcomments: Comments.Threads;\n\t/** The conversation driving the agent. */\n\tchat: Chat.Chat;\n\t/**\n\t * Every questionnaire this plan has ever held, answered or not.\n\t *\n\t * Kept beside the document rather than in it: the plan shows a decision,\n\t * this owns it. An agent rewriting the prose cannot change what was decided.\n\t */\n\trecords: Map;\n\t/**\n\t * Every comment thread this plan has ever held.\n\t *\n\t * Beside the document for the same reason a questionnaire record is: a\n\t * comment must not be undoable with the plan, and the agent must not be\n\t * able to rewrite what somebody said about its work.\n\t */\n\tthreads: Map;\n\t/** Bumped on every committed change; the agent's concurrency token. */\n\trevision: number;\n\t/** Implementation work, stored beside rather than inside the plan. */\n\tgraph?: Graph;\n\t/** The external implementation run that freezes this plan. */\n\texecution?: Run;\n\t/** Mutable task progress and prior runs, separate from claim identity. */\n\tlifecycle: Lifecycle;\n\t/** A claim has closed mutation ingress while accepted work drains. */\n\tclaiming: boolean;\n\t/**\n\t * Block outlines by revision.\n\t *\n\t * Kept so a batch aimed at a revision that has moved can be told which\n\t * blocks moved, rather than only that it is too late.\n\t */\n\toutlines: Map;\n\tqueue: Queued[];\n\ttimer: ReturnType | undefined;\n\t/** Repeats the agent's cursor while it has one, so peers do not drop it. */\n\tattention: ReturnType | undefined;\n\t/** Serialises commits so two batches cannot interleave. */\n\tflushing: Promise;\n\tmeters: WeakMap;\n\tpersistence: Persistence;\n};\n\nfunction decode(value: string): Uint8Array {\n\treturn new Uint8Array(Buffer.from(value, \"base64\"));\n}\n\nfunction encode(value: Uint8Array): string {\n\treturn Buffer.from(value).toString(\"base64\");\n}\n\nfunction recent(stamps: number[], window: number): number[] {\n\tlet cutoff = Date.now() - window;\n\treturn stamps.filter(at => at > cutoff);\n}\n\ntype Sidecar = {\n\tversion: 1;\n\trevision: number;\n\tdocumentSeq: number;\n\tcreation?: CreationMetadata;\n\tgraph?: Graph;\n\texecution?: Run;\n\tlifecycle?: Lifecycle;\n\tmcpUpdates?: McpUpdateRecord[];\n\tquestions: Questions.Record[];\n\topenQuestions: Questions.StoredOpen[];\n\tthreads: Comments.Record[];\n\ttranscript: Chat.Chat[\"entries\"];\n};\n\nfunction state(plan: Plan): Sidecar {\n\treturn {\n\t\tversion: 1,\n\t\trevision: plan.revision,\n\t\tdocumentSeq: plan.document.seq,\n\t\t...(plan.creation ? { creation: plan.creation } : {}),\n\t\t...(plan.graph ? { graph: plan.graph } : {}),\n\t\t...(plan.execution ? { execution: plan.execution } : {}),\n\t\t...(plan.lifecycle.events?.length || plan.lifecycle.history.length > 0\n\t\t\t? { lifecycle: plan.lifecycle }\n\t\t\t: {}),\n\t\t...(plan.mcpUpdates.length > 0 ? { mcpUpdates: plan.mcpUpdates } : {}),\n\t\tquestions: [...plan.records.values()],\n\t\topenQuestions: Questions.dump(plan.questions),\n\t\tthreads: [...plan.threads.values()],\n\t\ttranscript: plan.chat.entries,\n\t};\n}\n\nfunction jsonState(plan: Plan): { value: JsonValue; text: string } {\n\tlet text = JSON.stringify(state(plan));\n\treturn { value: JSON.parse(text) as JsonValue, text };\n}\n\nfunction capture(plan: Plan): Captured {\n\tlet sidecar = jsonState(plan);\n\tlet source = room.project(plan.document);\n\treturn {\n\t\trevision: plan.revision,\n\t\tepoch: plan.document.epoch,\n\t\tsource,\n\t\tsourceHash: sourceHash(source),\n\t\tdocument: Y.encodeStateAsUpdate(plan.document.doc),\n\t\tsidecar: sidecar.value,\n\t\tsidecarText: sidecar.text,\n\t};\n}\n\nfunction objects(value: JsonValue[], label: string): Array> {\n\tlet seen = new Set();\n\treturn value.map(entry => {\n\t\tif (!entry || typeof entry !== \"object\" || Array.isArray(entry)) {\n\t\t\tthrow new Error(`hosted channel has an invalid ${label}`);\n\t\t}\n\t\tlet item = entry as Record;\n\t\tif (typeof item.id !== \"string\" || !item.id || seen.has(item.id)) {\n\t\t\tthrow new Error(`hosted channel has an invalid or duplicate ${label} id`);\n\t\t}\n\t\tseen.add(item.id);\n\t\treturn item;\n\t});\n}\n\nfunction strings(value: JsonValue | undefined): string[] | undefined {\n\treturn Array.isArray(value) && value.every(item => typeof item === \"string\")\n\t\t? value\n\t\t: undefined;\n}\n\nfunction creation(value: JsonValue | undefined): CreationMetadata | undefined {\n\tif (value === undefined) return undefined;\n\tif (\n\t\t!value\n\t\t|| typeof value !== \"object\"\n\t\t|| Array.isArray(value)\n\t) throw new Error(\"hosted channel has invalid creation metadata\");\n\tlet metadata = value as Record;\n\tif (\n\t\tObject.keys(metadata).length !== 2\n\t\t|| !Object.hasOwn(metadata, \"brief\")\n\t\t|| !Object.hasOwn(metadata, \"origin\")\n\t\t|| !metadata.brief\n\t\t|| typeof metadata.brief !== \"object\"\n\t\t|| Array.isArray(metadata.brief)\n\t\t|| !metadata.origin\n\t\t|| typeof metadata.origin !== \"object\"\n\t\t|| Array.isArray(metadata.origin)\n\t) throw new Error(\"hosted channel has invalid creation metadata\");\n\tlet brief = metadata.brief as Record;\n\tlet origin = metadata.origin as Record;\n\tlet briefKeys = [\n\t\t\"constraints\",\n\t\t\"goal\",\n\t\t\"openQuestions\",\n\t\t\"repositoryFindings\",\n\t\t\"settledDecisions\",\n\t];\n\tlet originKeys = [\n\t\t\"baseBranch\",\n\t\t\"baseCommit\",\n\t\t\"fingerprint\",\n\t\t\"idempotencyKey\",\n\t\t\"repository\",\n\t\t\"title\",\n\t];\n\tlet constraints = strings(brief.constraints);\n\tlet settledDecisions = strings(brief.settledDecisions);\n\tlet openQuestions = strings(brief.openQuestions);\n\tlet repositoryFindings = strings(brief.repositoryFindings);\n\tif (\n\t\tObject.keys(brief).sort().some((key, index) => key !== briefKeys[index])\n\t\t|| Object.keys(brief).length !== briefKeys.length\n\t\t|| typeof brief.goal !== \"string\"\n\t\t|| !brief.goal.trim()\n\t\t|| !constraints\n\t\t|| !settledDecisions\n\t\t|| !openQuestions\n\t\t|| !repositoryFindings\n\t\t|| Object.keys(origin).sort().some((key, index) => key !== originKeys[index])\n\t\t|| Object.keys(origin).length !== originKeys.length\n\t\t|| originKeys.some(key => typeof origin[key] !== \"string\" || !origin[key].trim())\n\t) throw new Error(\"hosted channel has invalid creation metadata\");\n\treturn {\n\t\tbrief: {\n\t\t\tgoal: brief.goal,\n\t\t\tconstraints,\n\t\t\tsettledDecisions,\n\t\t\topenQuestions,\n\t\t\trepositoryFindings,\n\t\t},\n\t\torigin: origin as CreationOrigin,\n\t};\n}\n\nfunction legacyCreation(\n\tbrief: JsonValue | undefined,\n\torigin: JsonValue | undefined,\n): CreationMetadata | undefined {\n\tif (brief === undefined && origin === undefined) return undefined;\n\tif (brief === undefined || origin === undefined) {\n\t\tthrow new Error(\"hosted channel has invalid creation metadata\");\n\t}\n\treturn creation({ brief, origin });\n}\n\nfunction restoredState(\n\tvalue: JsonValue,\n\tpristine: boolean,\n\tscope?: { channelId: string; repositoryId: string },\n): Sidecar {\n\tif (value === null && pristine) {\n\t\treturn {\n\t\t\tversion: 1,\n\t\t\trevision: 0,\n\t\t\tdocumentSeq: 0,\n\t\t\tquestions: [],\n\t\t\topenQuestions: [],\n\t\t\tthreads: [],\n\t\t\ttranscript: [],\n\t\t};\n\t}\n\tif (!value || typeof value !== \"object\" || Array.isArray(value)) {\n\t\tthrow new Error(\"hosted channel has an invalid sidecar\");\n\t}\n\tlet item = value as Record;\n\tlet keys = Object.keys(item).sort();\n\tlet legacy = item.creation === undefined\n\t\t&& (item.brief !== undefined || item.origin !== undefined);\n\tlet created = item.creation === undefined\n\t\t? legacyCreation(item.brief, item.origin)\n\t\t: creation(item.creation);\n\tlet graph = restoreGraph(item.graph);\n\tlet expected = [\n\t\t\"documentSeq\",\n\t\t\"openQuestions\",\n\t\t\"questions\",\n\t\t\"revision\",\n\t\t\"threads\",\n\t\t\"transcript\",\n\t\t\"version\",\n\t];\n\tif (created) expected.push(...(legacy ? [\"brief\", \"origin\"] : [\"creation\"]));\n\tif (Object.hasOwn(item, \"graph\")) expected.push(\"graph\");\n\tif (Object.hasOwn(item, \"execution\")) expected.push(\"execution\");\n\tif (Object.hasOwn(item, \"lifecycle\")) expected.push(\"lifecycle\");\n\tif (Object.hasOwn(item, \"mcpUpdates\")) expected.push(\"mcpUpdates\");\n\texpected.sort();\n\tif (\n\t\tkeys.length !== expected.length\n\t\t|| keys.some((key, index) => key !== expected[index])\n\t\t|| item.version !== 1\n\t\t|| typeof item.revision !== \"number\"\n\t\t|| !Number.isSafeInteger(item.revision)\n\t\t|| item.revision < 0\n\t\t|| typeof item.documentSeq !== \"number\"\n\t\t|| !Number.isSafeInteger(item.documentSeq)\n\t\t|| item.documentSeq < 0\n\t\t|| !Array.isArray(item.questions)\n\t\t|| !Array.isArray(item.openQuestions)\n\t\t|| !Array.isArray(item.threads)\n\t\t|| !Array.isArray(item.transcript)\n\t) throw new Error(\"hosted channel has an invalid sidecar\");\n\tlet execution = Object.hasOwn(item, \"execution\")\n\t\t? restoreRun(item.execution, graph, item.revision)\n\t\t: undefined;\n\tif (Object.hasOwn(item, \"execution\") && !execution) {\n\t\tthrow new Error(\"hosted channel has an invalid implementation run\");\n\t}\n\tlet hasLifecycle = Object.hasOwn(item, \"lifecycle\");\n\tlet restoredLifecycle = graph\n\t\t? restoreLifecycle(hasLifecycle ? item.lifecycle : { history: [] }, graph, execution)\n\t\t: undefined;\n\tif (graph && !restoredLifecycle || hasLifecycle && !graph) {\n\t\tthrow new Error(\"hosted channel has an invalid implementation lifecycle\");\n\t}\n\tlet lifecycle = hasLifecycle ? restoredLifecycle : undefined;\n\tlet questions = objects(item.questions, \"question record\");\n\tfor (let question of questions) {\n\t\tif (\n\t\t\t(question.status !== \"open\" && question.status !== \"answered\"\n\t\t\t\t&& question.status !== \"cancelled\")\n\t\t\t|| !question.definition\n\t\t\t|| typeof question.definition !== \"object\"\n\t\t\t|| Array.isArray(question.definition)\n\t\t) throw new Error(\"hosted channel has an invalid question record\");\n\t}\n\tlet openQuestions = objects(item.openQuestions, \"open questionnaire\");\n\tlet openIds = new Set(openQuestions.map(entry => entry.id as string));\n\tif (questions.some(record => (record.status === \"open\") !== openIds.has(record.id as string))) {\n\t\tthrow new Error(\"hosted channel question records disagree with their drafts\");\n\t}\n\tlet threads = objects(item.threads, \"comment thread\");\n\tfor (let thread of threads) {\n\t\tif (\n\t\t\t(thread.status !== \"open\" && thread.status !== \"accepted\" && thread.status !== \"dismissed\")\n\t\t\t|| !thread.passage\n\t\t\t|| typeof thread.passage !== \"object\"\n\t\t\t|| Array.isArray(thread.passage)\n\t\t\t|| !Array.isArray(thread.notes)\n\t\t) throw new Error(\"hosted channel has an invalid comment thread\");\n\t}\n\tlet transcript = objects(item.transcript, \"transcript entry\");\n\tlet referenceIds = new Set();\n\tfor (let entry of transcript) {\n\t\tif (\n\t\t\ttypeof entry.text !== \"string\"\n\t\t\t|| typeof entry.ts !== \"number\"\n\t\t\t|| !entry.author\n\t\t\t|| typeof entry.author !== \"object\"\n\t\t\t|| Array.isArray(entry.author)\n\t\t) throw new Error(\"hosted channel has an invalid transcript entry\");\n\t\tif (Object.hasOwn(entry, \"references\")) {\n\t\t\tlet author = entry.author as Record;\n\t\t\tif (author.kind !== \"member\") {\n\t\t\t\tthrow new Error(\"hosted channel has a non-member transcript reference\");\n\t\t\t}\n\t\t\ttry {\n\t\t\t\tentry.references = restoreReferences(\n\t\t\t\t\tentry.references,\n\t\t\t\t\tentry.text,\n\t\t\t\t\treferenceIds,\n\t\t\t\t\tscope,\n\t\t\t\t) as never;\n\t\t\t} catch (err) {\n\t\t\t\tthrow new Error(\"hosted channel has an invalid transcript reference\", { cause: err });\n\t\t\t}\n\t\t}\n\t\ttry {\n\t\t\tChat.validateDelivery(entry as unknown as Chat.Chat[\"entries\"][number]);\n\t\t} catch (err) {\n\t\t\tthrow new Error(\"hosted channel has invalid chat delivery metadata\", { cause: err });\n\t\t}\n\t}\n\tlet mcpUpdates = restoreMcpUpdates(item.mcpUpdates);\n\treturn {\n\t\tversion: 1,\n\t\trevision: item.revision,\n\t\tdocumentSeq: item.documentSeq,\n\t\t...(created ? { creation: created } : {}),\n\t\t...(graph ? { graph } : {}),\n\t\t...(execution ? { execution } : {}),\n\t\t...(lifecycle ? { lifecycle } : {}),\n\t\t...(mcpUpdates.length > 0 ? { mcpUpdates } : {}),\n\t\tquestions: questions as never[],\n\t\topenQuestions: openQuestions as unknown as Questions.StoredOpen[],\n\t\tthreads: threads as never[],\n\t\ttranscript: transcript as unknown as Chat.Chat[\"entries\"],\n\t};\n}\n\nfunction restoreMcpUpdates(value: JsonValue | undefined): McpUpdateRecord[] {\n\tif (value === undefined) return [];\n\tif (!Array.isArray(value)) throw new Error(\"hosted channel has invalid MCP updates\");\n\tlet seen = new Set();\n\treturn value.map(entry => {\n\t\tif (!entry || typeof entry !== \"object\" || Array.isArray(entry)) {\n\t\t\tthrow new Error(\"hosted channel has invalid MCP updates\");\n\t\t}\n\t\tlet item = entry as Record;\n\t\tlet document = item.document;\n\t\tif (\n\t\t\t!document\n\t\t\t|| typeof document !== \"object\"\n\t\t\t|| Array.isArray(document)\n\t\t\t|| typeof item.idempotencyKey !== \"string\"\n\t\t\t|| !item.idempotencyKey.trim()\n\t\t\t|| seen.has(item.idempotencyKey)\n\t\t\t|| typeof item.fingerprint !== \"string\"\n\t\t\t|| !item.fingerprint.trim()\n\t\t\t|| typeof item.fromRevision !== \"number\"\n\t\t\t|| !Number.isSafeInteger(item.fromRevision)\n\t\t\t|| item.fromRevision < 0\n\t\t\t|| !item.client\n\t\t\t|| typeof item.client !== \"object\"\n\t\t\t|| Array.isArray(item.client)\n\t\t) throw new Error(\"hosted channel has invalid MCP updates\");\n\t\tseen.add(item.idempotencyKey);\n\t\tlet client = item.client as Record;\n\t\tlet recorded = document as Record;\n\t\tif (\n\t\t\ttypeof client.name !== \"string\"\n\t\t\t|| !client.name.trim()\n\t\t\t|| typeof client.version !== \"string\"\n\t\t\t|| !client.version.trim()\n\t\t\t|| typeof recorded.source !== \"string\"\n\t\t\t|| typeof recorded.revision !== \"number\"\n\t\t\t|| !Number.isSafeInteger(recorded.revision)\n\t\t\t|| recorded.revision < 0\n\t\t\t|| typeof recorded.title !== \"string\"\n\t\t\t|| typeof recorded.url !== \"string\"\n\t\t\t|| (recorded.description !== undefined && typeof recorded.description !== \"string\")\n\t\t) throw new Error(\"hosted channel has invalid MCP updates\");\n\t\treturn {\n\t\t\tidempotencyKey: item.idempotencyKey,\n\t\t\tfingerprint: item.fingerprint,\n\t\t\tfromRevision: item.fromRevision,\n\t\t\tclient: { name: client.name, version: client.version },\n\t\t\tdocument: {\n\t\t\t\tsource: recorded.source,\n\t\t\t\trevision: recorded.revision,\n\t\t\t\ttitle: recorded.title,\n\t\t\t\turl: recorded.url,\n\t\t\t\t...(recorded.description ? { description: recorded.description } : {}),\n\t\t\t},\n\t\t};\n\t});\n}\n\nexport function sourceHash(source: string): string {\n\treturn `sha256:${createHash(\"sha256\").update(source).digest(\"hex\")}`;\n}\n\n/** Build the complete revision-zero state published with a newly created channel. */\nexport async function initial(\n\tsource: string,\n\tcreation?: CreationMetadata,\n): Promise {\n\tlet document = await room.create(source);\n\ttry {\n\t\tlet canonical = room.project(document);\n\t\tlet sidecar: Sidecar = {\n\t\t\tversion: 1,\n\t\t\trevision: 0,\n\t\t\tdocumentSeq: document.seq,\n\t\t\t...(creation ? { creation } : {}),\n\t\t\tquestions: [],\n\t\t\topenQuestions: [],\n\t\t\tthreads: [],\n\t\t\ttranscript: [],\n\t\t};\n\t\treturn {\n\t\t\tgeneration: crypto.randomUUID(),\n\t\t\tepoch: document.epoch,\n\t\t\tsource: canonical,\n\t\t\tsourceHash: sourceHash(canonical),\n\t\t\tdocument: Y.encodeStateAsUpdate(document.doc),\n\t\t\tsidecar: JSON.parse(JSON.stringify(sidecar)) as JsonValue,\n\t\t};\n\t} finally {\n\t\tdocument.doc.destroy();\n\t}\n}\n\nfunction scheduleCheckpoint(plan: Plan): void {\n\tlet durable = plan.persistence;\n\tif (durable.closing || durable.checkpointTimer) return;\n\tdurable.checkpointTimer = setTimeout(() => {\n\t\tdurable.checkpointTimer = undefined;\n\t\tlet checkpoint = () => checkpointHosted(plan);\n\t\tplan.flushing = plan.flushing.then(checkpoint, checkpoint);\n\t}, 500);\n}\n\nasync function commitHosted(\n\tplan: Plan,\n\tupdate: Uint8Array | undefined,\n\toperationId: string,\n\tcaptured: Captured,\n\tallowArchived = false,\n): Promise {\n\tlet durable = plan.persistence;\n\tif (!update && captured.sidecarText === durable.lastSidecar) {\n\t\tscheduleCheckpoint(plan);\n\t\treturn;\n\t}\n\ttry {\n\t\tlet sourceChanged = captured.source !== durable.committedSource;\n\t\tlet result = await durable.storage.collaboration.commit({\n\t\t\tchannelId: durable.channelId,\n\t\t\tlease: durable.lease(),\n\t\t\texpectedRevision: durable.revision,\n\t\t\toperationId,\n\t\t\tepoch: captured.epoch,\n\t\t\t...(update ? { update } : {}),\n\t\t\tsidecar: captured.sidecar,\n\t\t\tevents: [],\n\t\t\tnow: new Date(),\n\t\t\t...(allowArchived ? { allowArchived: true } : {}),\n\t\t});\n\t\tif (!result.repeated) {\n\t\t\tdurable.revision = result.revision;\n\t\t\tdurable.sequence = result.sequence;\n\t\t}\n\t\tif (result.repeated && captured.sidecarText !== durable.lastSidecar) {\n\t\t\tlet stateResult = await durable.storage.collaboration.commit({\n\t\t\t\tchannelId: durable.channelId,\n\t\t\t\tlease: durable.lease(),\n\t\t\t\texpectedRevision: durable.revision,\n\t\t\t\toperationId: `state:${crypto.randomUUID()}`,\n\t\t\t\tepoch: captured.epoch,\n\t\t\t\tsidecar: captured.sidecar,\n\t\t\t\tevents: [],\n\t\t\t\tnow: new Date(),\n\t\t\t\t...(allowArchived ? { allowArchived: true } : {}),\n\t\t\t});\n\t\t\tdurable.revision = stateResult.revision;\n\t\t\tdurable.sequence = stateResult.sequence;\n\t\t}\n\t\tdurable.lastSidecar = captured.sidecarText;\n\t\tdurable.committedEpoch = captured.epoch;\n\t\tdurable.committedSource = captured.source;\n\t\tdurable.committedDocument = captured.document;\n\t\tdurable.committedSidecar = captured.sidecar;\n\t\tif (plan.document.epoch === captured.epoch) {\n\t\t\tplan.document.checkpoint = new Uint8Array(captured.document);\n\t\t}\n\t\tif (update && sourceChanged && durable.onDocumentPersisted) {\n\t\t\ttry {\n\t\t\t\tdurable.onDocumentPersisted({\n\t\t\t\t\tchannelId: durable.channelId,\n\t\t\t\t\trevision: captured.revision,\n\t\t\t\t\tsource: captured.source,\n\t\t\t\t\tsourceHash: captured.sourceHash,\n\t\t\t\t});\n\t\t\t} catch (err) {\n\t\t\t\tconsole.warn(`[plan] could not schedule derived work for ${durable.channelId}:`, err);\n\t\t\t}\n\t\t}\n\t\tscheduleCheckpoint(plan);\n\t} catch (err) {\n\t\tdurable.fatal(err);\n\t\tthrow err;\n\t}\n}\n\nasync function checkpointHosted(plan: Plan): Promise {\n\tlet durable = plan.persistence;\n\ttry {\n\t\tawait durable.storage.collaboration.checkpoint({\n\t\t\tchannelId: durable.channelId,\n\t\t\tlease: durable.lease(),\n\t\t\texpectedRevision: durable.revision,\n\t\t\tgeneration: crypto.randomUUID(),\n\t\t\trevision: durable.revision,\n\t\t\tthroughSequence: durable.sequence,\n\t\t\tepoch: durable.committedEpoch,\n\t\t\tsource: durable.committedSource,\n\t\t\tsourceHash: sourceHash(durable.committedSource),\n\t\t\tdocument: durable.committedDocument,\n\t\t\tsidecar: durable.committedSidecar,\n\t\t\tcreatedAt: new Date(),\n\t\t});\n\t\tplan.document.checkpoint = new Uint8Array(durable.committedDocument);\n\t} catch (err) {\n\t\tdurable.fatal(err);\n\t\tthrow err;\n\t}\n}\n\nasync function replaceHosted(plan: Plan, operationId: string, captured: Captured): Promise {\n\tlet durable = plan.persistence;\n\ttry {\n\t\tlet result = await durable.storage.collaboration.replace({\n\t\t\tchannelId: durable.channelId,\n\t\t\tlease: durable.lease(),\n\t\t\texpectedRevision: durable.revision,\n\t\t\toperationId,\n\t\t\tgeneration: crypto.randomUUID(),\n\t\t\tepoch: captured.epoch,\n\t\t\tsource: captured.source,\n\t\t\tsourceHash: sourceHash(captured.source),\n\t\t\tdocument: captured.document,\n\t\t\tsidecar: captured.sidecar,\n\t\t\tnow: new Date(),\n\t\t});\n\t\tif (!result.repeated) {\n\t\t\tdurable.revision = result.revision;\n\t\t\tdurable.sequence = result.sequence;\n\t\t}\n\t\tdurable.lastSidecar = captured.sidecarText;\n\t\tdurable.committedEpoch = captured.epoch;\n\t\tdurable.committedSource = captured.source;\n\t\tdurable.committedDocument = captured.document;\n\t\tdurable.committedSidecar = captured.sidecar;\n\t\tplan.document.checkpoint = new Uint8Array(captured.document);\n\t\tif (durable.checkpointTimer) clearTimeout(durable.checkpointTimer);\n\t\tdurable.checkpointTimer = undefined;\n\t} catch (err) {\n\t\tdurable.fatal(err);\n\t\tthrow err;\n\t}\n}\n\n/** Persist a sidecar-only state transition. */\nexport function persist(plan: Plan): Promise {\n\tlet commit = () => commitHosted(plan, undefined, `state:${crypto.randomUUID()}`, capture(plan));\n\tlet pending = plan.flushing.then(commit, commit);\n\tplan.flushing = pending;\n\treturn pending;\n}\n\n/** Reserve the same queue used by client batches for one complete server operation. */\nexport function exclusive(plan: Plan, action: () => Promise): Promise {\n\tlet operation = plan.flushing.then(action, action);\n\tplan.flushing = operation.then(() => {}, () => {});\n\treturn operation;\n}\n\n/** Read one canonical document target in the same queue as live mutations. */\nexport function readCurrentDocument(plan: Plan): Promise {\n\treturn exclusive(plan, async () => {\n\t\tlet source = room.project(plan.document);\n\t\treturn {\n\t\t\tchannelId: plan.id,\n\t\t\trevision: plan.revision,\n\t\t\tsource,\n\t\t\tsourceHash: sourceHash(source),\n\t\t};\n\t});\n}\n\n/** Drain mutations already admitted before a claim closes the plan to new work. */\nexport async function drain(plan: Plan): Promise {\n\tif (plan.timer) clearTimeout(plan.timer);\n\tplan.timer = undefined;\n\tlet pending = () => commit(plan);\n\tplan.flushing = plan.flushing.then(pending, pending);\n\tawait plan.flushing;\n}\n\n/** One gate for every path that can mutate a plan during implementation. */\nexport function implementationActive(plan: Plan): boolean {\n\treturn plan.claiming || !!plan.execution;\n}\n\n/** Sidecar-only commit for a caller already holding `exclusive`. */\nexport function persistExclusive(plan: Plan, allowArchived = false): Promise {\n\treturn commitHosted(\n\t\tplan,\n\t\tundefined,\n\t\t`state:${crypto.randomUUID()}`,\n\t\tcapture(plan),\n\t\tallowArchived,\n\t);\n}\n\ntype RestoredHosted = {\n\tdocument: Document;\n\tneedsInitialCheckpoint: boolean;\n\tsidecar: Sidecar;\n};\n\n/** Prepare the sidecar half of one atomic claim for a plan that is not live. */\nexport function claimStored(\n\tloaded: StoredChannel,\n\tinput: ClaimInput,\n): { result: ClaimResult; sidecar?: JsonValue } {\n\tlet pristine = loaded.channel.revision === 0 && loaded.latestSequence === 0 && !loaded.snapshot;\n\tlet sidecar = restoredState(\n\t\tloaded.sidecar === null && loaded.snapshot && loaded.channel.revision === 0\n\t\t\t? loaded.snapshot.sidecar\n\t\t\t: loaded.sidecar,\n\t\tpristine,\n\t\t{ channelId: loaded.channel.id, repositoryId: loaded.channel.repositoryId },\n\t);\n\tlet version = sidecar.graph?.versions.at(-1);\n\tlet eligibility = version\n\t\t&& claimEligibility(sidecar.lifecycle ?? { history: [] }, version, input.run.id);\n\tif (eligibility && !eligibility.ok) {\n\t\treturn { result: { kind: \"refused\", reason: eligibility.reason } };\n\t}\n\tlet result = claim({\n\t\tgraph: sidecar.graph,\n\t\trevision: sidecar.revision,\n\t\texecution: sidecar.execution,\n\t}, input);\n\tif (result.kind !== \"started\") return { result };\n\treturn {\n\t\tresult,\n\t\tsidecar: JSON.parse(JSON.stringify({\n\t\t\t...sidecar,\n\t\t\tgraph: result.graph,\n\t\t\texecution: result.run,\n\t\t})) as JsonValue,\n\t};\n}\n\n/** Prepare one atomic lifecycle sidecar change for a plan that is not live. */\nexport function lifecycleStored(\n\tloaded: StoredChannel,\n\tinput: LifecycleInput,\n): { result: LifecycleResult; sidecar?: JsonValue } {\n\tlet pristine = loaded.channel.revision === 0 && loaded.latestSequence === 0 && !loaded.snapshot;\n\tlet sidecar = restoredState(\n\t\tloaded.sidecar === null && loaded.snapshot && loaded.channel.revision === 0\n\t\t\t? loaded.snapshot.sidecar\n\t\t\t: loaded.sidecar,\n\t\tpristine,\n\t\t{ channelId: loaded.channel.id, repositoryId: loaded.channel.repositoryId },\n\t);\n\tif (!sidecar.graph) return { result: { kind: \"refused\", reason: \"inactive\" } };\n\tlet result = transition({\n\t\tgraph: sidecar.graph,\n\t\texecution: sidecar.execution,\n\t\tlifecycle: sidecar.lifecycle ?? { history: [] },\n\t}, input);\n\tif (result.kind !== \"accepted\") return { result };\n\tlet { graph: _graph, execution: _execution, lifecycle: _lifecycle, ...rest } = sidecar;\n\treturn {\n\t\tresult,\n\t\tsidecar: JSON.parse(JSON.stringify({\n\t\t\t...rest,\n\t\t\tgraph: result.state.graph,\n\t\t\t...(result.state.execution ? { execution: result.state.execution } : {}),\n\t\t\tlifecycle: result.state.lifecycle,\n\t\t})) as JsonValue,\n\t};\n}\n\nasync function restoreHosted(id: string, loaded: StoredChannel): Promise {\n\tlet document: Document;\n\tlet needsInitialCheckpoint = false;\n\tlet pristine = loaded.channel.revision === 0\n\t\t&& loaded.latestSequence === 0\n\t\t&& !loaded.snapshot;\n\tlet sidecar = restoredState(\n\t\tloaded.sidecar === null && loaded.snapshot && loaded.channel.revision === 0\n\t\t\t? loaded.snapshot.sidecar\n\t\t\t: loaded.sidecar,\n\t\tpristine,\n\t\t{ channelId: loaded.channel.id, repositoryId: loaded.channel.repositoryId },\n\t);\n\tif (loaded.snapshot) {\n\t\tif (\n\t\t\tloaded.snapshot.revision > loaded.channel.revision\n\t\t\t|| loaded.snapshot.throughSequence > loaded.latestSequence\n\t\t) throw new Error(`channel ${id} has an invalid checkpoint position`);\n\t\tlet previous = loaded.snapshot.throughSequence;\n\t\tfor (let update of loaded.updates) {\n\t\t\tif (\n\t\t\t\tupdate.sequence <= previous\n\t\t\t\t|| update.sequence > loaded.latestSequence\n\t\t\t\t|| update.revision > loaded.channel.revision\n\t\t\t\t|| update.epoch !== loaded.snapshot.epoch\n\t\t\t) throw new Error(`channel ${id} has an invalid update journal`);\n\t\t\tprevious = update.sequence;\n\t\t}\n\t\tif (sourceHash(loaded.snapshot.source) !== loaded.snapshot.sourceHash) {\n\t\t\tthrow new Error(`channel ${id} has a corrupt source hash`);\n\t\t}\n\t\tdocument = await room.restore(\n\t\t\tloaded.snapshot.epoch,\n\t\t\tloaded.snapshot.document,\n\t\t\tloaded.snapshot.source,\n\t\t\tloaded.updates.map(update => ({ epoch: update.epoch, update: update.update })),\n\t\t);\n\t} else {\n\t\tif (loaded.updates.length > 0) {\n\t\t\tthrow new Error(`channel ${id} has updates without a checkpoint`);\n\t\t}\n\t\tdocument = await room.create();\n\t\tneedsInitialCheckpoint = true;\n\t}\n\tdocument.seq = sidecar.documentSeq;\n\treturn { document, needsInitialCheckpoint, sidecar };\n}\n\n/** Project a closed channel without attaching it to the live room registry. */\nexport async function readStored(\n\tloaded: StoredChannel,\n): Promise<{\n\tsource: string;\n\trevision: number;\n\tcreation?: CreationMetadata;\n\tgraph?: Graph;\n\texecution?: Run;\n\tlifecycle?: Lifecycle;\n}> {\n\tlet restored = await restoreHosted(loaded.channel.id, loaded);\n\ttry {\n\t\tQuestions.shutdown(Questions.restore(restored.sidecar.openQuestions));\n\t\treturn {\n\t\t\tsource: room.project(restored.document),\n\t\t\trevision: restored.sidecar.revision,\n\t\t\t...(restored.sidecar.creation ? { creation: restored.sidecar.creation } : {}),\n\t\t\t...(restored.sidecar.graph ? { graph: restored.sidecar.graph } : {}),\n\t\t\t...(restored.sidecar.execution ? { execution: restored.sidecar.execution } : {}),\n\t\t\t...(restored.sidecar.lifecycle ? { lifecycle: restored.sidecar.lifecycle } : {}),\n\t\t};\n\t} finally {\n\t\trestored.document.doc.destroy();\n\t}\n}\n\n/** Restore one durable channel into its authoritative in-memory document. */\nexport async function open(\n\tid: string,\n\tbackend: Backend,\n\tserver: Server,\n): Promise {\n\tlet loaded = await backend.storage.collaboration.load(id, new Date());\n\tif (!loaded) throw new Error(`channel ${id} does not exist`);\n\tlet { document, needsInitialCheckpoint, sidecar } = await restoreHosted(id, loaded);\n\n\tlet plan: Plan = {\n\t\tid,\n\t\t...(sidecar.creation ? { creation: sidecar.creation } : {}),\n\t\tmcpUpdates: sidecar.mcpUpdates ?? [],\n\t\tserver,\n\t\tdocument,\n\t\tpresence: presence.create(),\n\t\tquestions: Questions.restore(sidecar.openQuestions),\n\t\tcomments: Comments.create(),\n\t\tchat: Chat.restore(sidecar.transcript),\n\t\toutlines: new Map(),\n\t\trecords: new Map(sidecar.questions.map(record => [record.id, record])),\n\t\tthreads: new Map(sidecar.threads.map(record => [record.id, record])),\n\t\trevision: sidecar.revision,\n\t\tgraph: sidecar.graph,\n\t\texecution: sidecar.execution,\n\t\tlifecycle: sidecar.lifecycle ?? { history: [] },\n\t\tclaiming: false,\n\t\tqueue: [],\n\t\ttimer: undefined,\n\t\tattention: undefined,\n\t\tflushing: Promise.resolve(),\n\t\tmeters: new WeakMap(),\n\t\tpersistence: undefined as unknown as Persistence,\n\t};\n\n\tlet committed = capture(plan);\n\tplan.persistence = {\n\t\t...backend,\n\t\tchannelId: id,\n\t\trevision: loaded.channel.revision,\n\t\tsequence: loaded.latestSequence,\n\t\tlastSidecar: committed.sidecarText,\n\t\tcheckpointTimer: undefined,\n\t\tcommittedEpoch: committed.epoch,\n\t\tcommittedSource: committed.source,\n\t\tcommittedDocument: committed.document,\n\t\tcommittedSidecar: committed.sidecar,\n\t\tclosing: false,\n\t};\n\tif (needsInitialCheckpoint) await checkpointHosted(plan);\n\n\t// Guarded because this is the last thing between a channel and being open. A\n\t// plan whose highlights are stale is worth having; one that refuses to open\n\t// because a decision could not be placed is not.\n\ttry {\n\t\tQuestions.rebase(plan);\n\t\tComments.rebase(plan);\n\t} catch (err) {\n\t\tconsole.error(`[plan] could not carry anchors into ${id}:`, err);\n\t}\n\n\treturn plan;\n}\n\n/** Cheap identity of the whole relationship snapshot, for spotting a change. */\nfunction signature(plan: Plan): string {\n\treturn JSON.stringify([Questions.anchors(plan), Comments.anchors(plan)]);\n}\n\n/** Everything a joining client needs to start from. */\nexport function greet(plan: Plan, ws: Socket, msg: Request): void {\n\tlet resume = msg.epoch === plan.document.epoch && msg.vector ? decode(msg.vector) : undefined;\n\tlet hello = presence.snapshot(plan.presence);\n\n\treply(ws, msg.rid, {\n\t\tkind: \"plan:open\",\n\t\tts: 0,\n\t\tepoch: plan.document.epoch,\n\t\tseq: plan.document.seq,\n\t\tupdate: encode(room.sync(plan.document, resume)),\n\t\trevision: plan.revision,\n\t\tanchors: Questions.anchors(plan),\n\t\tthreads: Comments.anchors(plan),\n\t\tlimits: room.LIMITS,\n\t\t...(hello ? { awareness: encode(hello) } : {}),\n\t});\n}\n\nfunction meter(plan: Plan, ws: Socket): Meter {\n\tlet existing = plan.meters.get(ws);\n\tif (existing) return existing;\n\tlet created: Meter = { recent: [], invalid: [] };\n\tplan.meters.set(ws, created);\n\treturn created;\n}\n\n/** Accept an update for the next batch, or say why not. */\nexport function submit(plan: Plan, ws: Socket, msg: Request): void {\n\tif (implementationActive(plan)) return fail(ws, msg.rid, \"implementation is active\");\n\tif (msg.epoch !== plan.document.epoch) {\n\t\t// Nothing to correct: the client is describing a history that no longer\n\t\t// exists and needs to re-open, which the reset already told it to do.\n\t\treturn;\n\t}\n\n\tlet update = decode(msg.update);\n\tif (update.byteLength > room.LIMITS.update) {\n\t\treturn tell(ws, {\n\t\t\tkind: \"plan:reset\",\n\t\t\tts: 0,\n\t\t\tepoch: plan.document.epoch,\n\t\t\treason: \"rebuilt\",\n\t\t});\n\t}\n\n\tlet gauge = meter(plan, ws);\n\tgauge.recent = recent(gauge.recent, RATE_WINDOW_MS);\n\tif (gauge.recent.length >= RATE_LIMIT) return;\n\tgauge.recent.push(Date.now());\n\n\tplan.queue.push({ ws, rid: msg.rid, id: msg.id, update });\n\tschedule(plan);\n}\n\nfunction schedule(plan: Plan): void {\n\tif (plan.timer) return;\n\tplan.timer = setTimeout(() => {\n\t\tplan.timer = undefined;\n\t\tplan.flushing = plan.flushing.then(() => commit(plan), () => commit(plan));\n\t}, GROUP_MS);\n}\n\n/**\n * Apply one batch.\n *\n * On rejection the document is rebuilt from its last known-good state and\n * everyone re-opens. Yjs cannot undo a transaction, so there is no narrower\n * remedy — which is why the senders in the batch are the ones charged for it.\n */\nasync function commit(plan: Plan): Promise {\n\tlet batch = plan.queue;\n\tif (batch.length === 0) return;\n\tplan.queue = [];\n\n\tlet outcome = await room.apply(plan.document, batch.map(item => item.update));\n\n\tif (!outcome.ok) {\n\t\tconsole.warn(\"[plan] rejected batch:\", outcome.issues.join(\", \"));\n\n\t\tlet now = Date.now();\n\t\tfor (let item of batch) {\n\t\t\tlet gauge = meter(plan, item.ws);\n\t\t\tgauge.invalid = [...recent(gauge.invalid, INVALID_WINDOW_MS), now];\n\t\t\tif (gauge.invalid.length >= INVALID_LIMIT) {\n\t\t\t\titem.ws.close(ABUSIVE, \"repeated invalid plan updates\");\n\t\t\t}\n\t\t}\n\n\t\tlet rebuilt = await room.rebuild(plan.document);\n\t\tplan.document = rebuilt;\n\t\t// Cursors describe positions in a history that no longer exists. The\n\t\t// agent's is in there too, and the interval repeating it would outlive\n\t\t// the presence it repeats.\n\t\tclearInterval(plan.attention);\n\t\tplan.attention = undefined;\n\t\tpresence.destroy(plan.presence);\n\t\tplan.presence = presence.create();\n\t\t// So do anchors and passages, and unlike a cursor nobody re-announces\n\t\t// them. Without this every highlight in the room stays dark until the\n\t\t// agent happens to edit.\n\t\t//\n\t\t// Guarded because the `plan:reset` below is what tells everyone to\n\t\t// re-open. A throw here would strand the whole room on an epoch that no\n\t\t// longer exists, to save some highlights that are already stale.\n\t\ttry {\n\t\t\tQuestions.rebase(plan);\n\t\t\tComments.rebase(plan);\n\t\t} catch (err) {\n\t\t\tconsole.error(\"[plan] could not carry anchors onto the rebuilt document:\", err);\n\t\t}\n\t\tawait replaceHosted(plan, `epoch:${rebuilt.epoch}`, capture(plan));\n\n\t\tbroadcast(plan.server, plan.id, {\n\t\t\tkind: \"plan:reset\",\n\t\t\tts: 0,\n\t\t\tepoch: rebuilt.epoch,\n\t\t\treason: \"rebuilt\",\n\t\t});\n\t\treturn;\n\t}\n\n\tlet relationshipsChanged = false;\n\tlet before = signature(plan);\n\ttry {\n\t\tQuestions.rebase(plan);\n\t\tComments.rebase(plan);\n\t\trelationshipsChanged = signature(plan) !== before;\n\t} catch (err) {\n\t\tconsole.error(\"[plan] could not carry anchors forward:\", err);\n\t}\n\tif (room.project(plan.document) !== plan.persistence.committedSource) plan.revision++;\n\tlet merged = Y.mergeUpdates(batch.map(item => item.update));\n\tlet operationId = `plan:${plan.document.epoch}:${\n\t\tcreateHash(\"sha256\").update(merged).digest(\"hex\")\n\t}`;\n\tawait commitHosted(plan, merged, operationId, capture(plan));\n\n\tfor (let item of batch) {\n\t\treply(item.ws, item.rid, {\n\t\t\tkind: \"plan:ack\",\n\t\t\tts: 0,\n\t\t\tepoch: plan.document.epoch,\n\t\t\tid: item.id,\n\t\t\tseq: outcome.seq,\n\t\t});\n\t\t// Peers need the bytes; the sender already applied them locally.\n\t\trelay(item.ws, {\n\t\t\tkind: \"plan:update\",\n\t\t\tts: 0,\n\t\t\tepoch: plan.document.epoch,\n\t\t\tupdate: encode(item.update),\n\t\t\tseq: outcome.seq,\n\t\t});\n\t}\n\n\tif (relationshipsChanged) anchors(plan, plan.server, plan.id);\n}\n\n/**\n * Relay a change the server made, as an ordinary update.\n *\n * Agent edits and answer projections reach clients the same way a keystroke\n * does: as a delta against the document they already hold. That is what keeps\n * an agent rewriting a paragraph from costing everybody else their cursor.\n */\nexport async function publish(\n\tplan: Plan,\n\tserver: Server,\n\troomId: string,\n\tmutation: { update: Uint8Array; source: string },\n): Promise {\n\tif (implementationActive(plan)) throw new Error(\"implementation is active\");\n\tplan.document.seq++;\n\tif (room.project(plan.document) !== plan.persistence.committedSource) plan.revision++;\n\tlet operationId = `server:${plan.document.epoch}:${\n\t\tcreateHash(\"sha256\").update(mutation.update).digest(\"hex\")\n\t}`;\n\tawait commitHosted(plan, mutation.update, operationId, capture(plan));\n\ttry {\n\t\tbroadcast(server, roomId, {\n\t\t\tkind: \"plan:update\",\n\t\t\tts: 0,\n\t\t\tepoch: plan.document.epoch,\n\t\t\tupdate: encode(mutation.update),\n\t\t\tseq: plan.document.seq,\n\t\t});\n\t} catch (err) {\n\t\tconsole.error(\"[plan] could not broadcast a persisted update:\", err);\n\t}\n}\n\nexport async function rewrite(\n\tplan: Plan,\n\tnextSource: string,\n\trecord: (source: string, revision: number) => McpUpdateRecord,\n): Promise {\n\tif (implementationActive(plan)) throw new Error(\"implementation is active\");\n\tlet before = room.project(plan.document);\n\tlet document = await room.restore(\n\t\tplan.document.epoch,\n\t\tY.encodeStateAsUpdate(plan.document.doc),\n\t\tbefore,\n\t\t[],\n\t);\n\tdocument.seq = plan.document.seq;\n\tlet candidate: Plan = {\n\t\t...plan,\n\t\tdocument,\n\t\trecords: new Map(plan.records),\n\t\tthreads: new Map(plan.threads),\n\t\toutlines: new Map(plan.outlines),\n\t\tmcpUpdates: [...plan.mcpUpdates],\n\t};\n\ttry {\n\t\tQuestions.rebase(candidate);\n\t\tComments.rebase(candidate);\n\t\tlet outcome = edit.replace(candidate, plan.revision, nextSource);\n\t\tif (!outcome.ok) return outcome;\n\t\tlet source = room.project(document);\n\t\tlet changed = source !== before;\n\t\tif (changed) {\n\t\t\tQuestions.rebase(candidate);\n\t\t\tQuestions.invalidate(candidate, \"plan_changed\");\n\t\t\tComments.rebase(candidate);\n\t\t\tComments.invalidate(candidate, \"plan_changed\");\n\t\t} else {\n\t\t\tcandidate.records = plan.records;\n\t\t\tcandidate.threads = plan.threads;\n\t\t}\n\t\tif (outcome.mutation) document.seq++;\n\t\tif (source !== plan.persistence.committedSource) candidate.revision++;\n\t\tlet recorded = record(source, candidate.revision);\n\t\tcandidate.mcpUpdates.push(recorded);\n\t\tlet operationId = outcome.mutation\n\t\t\t? `server:${document.epoch}:${\n\t\t\t\tcreateHash(\"sha256\").update(outcome.mutation.update).digest(\"hex\")\n\t\t\t}`\n\t\t\t: `state:${crypto.randomUUID()}`;\n\t\tawait commitHosted(plan, outcome.mutation?.update, operationId, capture(candidate));\n\t\tif (outcome.mutation) {\n\t\t\tY.applyUpdate(plan.document.doc, outcome.mutation.update);\n\t\t\tawait room.settle();\n\t\t}\n\t\tplan.document.seq = document.seq;\n\t\tplan.revision = candidate.revision;\n\t\tplan.mcpUpdates.push(recorded);\n\t\tplan.outlines = candidate.outlines;\n\t\tif (changed) {\n\t\t\tQuestions.rebase(plan);\n\t\t\tQuestions.invalidate(plan, \"plan_changed\");\n\t\t\tComments.rebase(plan);\n\t\t\tComments.invalidate(plan, \"plan_changed\");\n\t\t}\n\t\tif (outcome.mutation) {\n\t\t\ttry {\n\t\t\t\tbroadcast(plan.server, plan.id, {\n\t\t\t\t\tkind: \"plan:update\",\n\t\t\t\t\tts: 0,\n\t\t\t\t\tepoch: plan.document.epoch,\n\t\t\t\t\tupdate: encode(outcome.mutation.update),\n\t\t\t\t\tseq: plan.document.seq,\n\t\t\t\t});\n\t\t\t} catch (err) {\n\t\t\t\tconsole.error(\"[plan] could not broadcast a persisted update:\", err);\n\t\t\t}\n\t\t}\n\t\treturn outcome;\n\t} finally {\n\t\tdocument.doc.destroy();\n\t}\n}\n\n/**\n * Relay what the agent just did, so a reader can be shown where.\n *\n * Indices become anchors here rather than in the edit engine: only the live\n * document can say where a block is in the collaborative history, and only\n * these survive somebody else editing between this frame being sent and the\n * browser painting it.\n *\n * Sent after the update that created the blocks it names, which is what makes\n * it resolvable at the other end. Guarded whole, and silent on failure: this\n * is decoration, and a room that dropped an edit over a mark nobody would\n * have noticed would be a poor trade.\n */\nexport function changes(\n\tplan: Plan,\n\tserver: Server,\n\troomId: string,\n\tfound: edit.Change[],\n\toptions?: { cursor?: boolean; attribution?: Wire.ChangeAttribution },\n): void {\n\tif (found.length === 0) return;\n\n\ttry {\n\t\tlet digests = room.digests(plan.document);\n\t\tlet anchor = (index: number): Wire.Anchor | undefined => {\n\t\t\tlet digest = digests[index];\n\t\t\treturn digest === undefined ? undefined : room.anchorAt(plan.document, index, digest);\n\t\t};\n\t\tlet gap = (spot: edit.Spot): Wire.Gap | undefined => {\n\t\t\tlet at = anchor(spot.index);\n\t\t\treturn at && { at, side: spot.side };\n\t\t};\n\n\t\tlet wired: Wire.Change[] = [];\n\t\t// The furthest down the plan this batch reached, of what could be\n\t\t// anchored — where the agent leaves its cursor.\n\t\tlet last: number | undefined;\n\n\t\tfor (let change of found) {\n\t\t\tif (change.kind === \"removed\") {\n\t\t\t\tlet at = gap(change.at);\n\t\t\t\tif (at) {\n\t\t\t\t\twired.push({ kind: \"removed\", at, blocks: change.blocks });\n\t\t\t\t\tlast = change.at.index;\n\t\t\t\t}\n\t\t\t\tcontinue;\n\t\t\t}\n\n\t\t\tlet at = anchor(change.index);\n\t\t\tif (!at) continue;\n\t\t\tif (change.kind === \"added\") {\n\t\t\t\twired.push({ kind: \"added\", at, type: change.type, preview: change.preview });\n\t\t\t\tlast = change.index;\n\t\t\t\tcontinue;\n\t\t\t}\n\n\t\t\t// Both ends or neither: a move shown only where it landed reads as\n\t\t\t// new prose, and shown only where it left reads as a deletion.\n\t\t\tlet from = gap(change.from);\n\t\t\tif (from) {\n\t\t\t\twired.push({ kind: \"moved\", at, from, type: change.type, preview: change.preview });\n\t\t\t\tlast = change.index;\n\t\t\t}\n\t\t}\n\n\t\tif (wired.length === 0) return;\n\t\tbroadcast(server, roomId, {\n\t\t\tkind: \"plan:changes\",\n\t\t\tts: 0,\n\t\t\tepoch: plan.document.epoch,\n\t\t\tchanges: options?.attribution\n\t\t\t\t? wired.map(change => ({ ...change, attribution: options.attribution }))\n\t\t\t\t: wired,\n\t\t});\n\n\t\t// Read off the same pass, deliberately. Working it out separately could\n\t\t// disagree, and then the cursor would point at one block while the\n\t\t// marks described another.\n\t\tif (last !== undefined && options?.cursor !== false) attend(plan, server, roomId, last);\n\t} catch (err) {\n\t\tconsole.error(\"[plan] could not say what the agent changed:\", err);\n\t}\n}\n\n/** Relay the current relationship snapshot to the whole room. */\nexport function anchors(\n\tplan: Plan,\n\tserver: Server,\n\troomId: string,\n): void {\n\tbroadcast(server, roomId, {\n\t\tkind: \"plan:anchors\",\n\t\tts: 0,\n\t\tepoch: plan.document.epoch,\n\t\twidgets: Questions.anchors(plan),\n\t\tthreads: Comments.anchors(plan),\n\t});\n}\n\n/**\n * How often to repeat the agent's cursor.\n *\n * Comfortably inside the thirty seconds after which a peer drops a state it\n * has not heard about. Ours rather than the awareness library's, because a\n * cursor that quietly disappears partway through a long turn is not a failure\n * anybody would think to attribute to a renewal cadence changing underneath.\n */\nconst RENEW_MS = 10_000;\n\n/**\n * The colour of the agent's cursor.\n *\n * A graphite, deliberately outside the palette `packages/editor/src/cursor.ts`\n * hands to people: the agent is not one of them, and a cursor that looked like\n * a colleague's would be read as one. Literal rather than a theme token\n * because Lexical validates it with `CSS.supports` and writes it inline, so a\n * `var()` would resolve against the wrong scope or not at all.\n *\n * Duplicated across the package boundary rather than shared for one string. If\n * the palette there ever grows a slate, this is what it must not collide with.\n */\nconst AGENT_COLOR = \"#475569\";\n\n/**\n * Put the agent's cursor where it just edited.\n *\n * Presence rather than a record: it says the agent is working here now, which\n * is why it is broadcast rather than held, and why it does not wait to be\n * seen the way the marks do. Somebody scrolled elsewhere is not shown it at\n * all — that is what the marks and the chips are for.\n */\nfunction attend(\n\tplan: Plan,\n\tserver: Server,\n\troomId: string,\n\tblock: number,\n): void {\n\t// The last turn may still be counting down to taking the cursor away. It is\n\t// about to be somewhere new, so that removal is no longer the truth.\n\tclearTimeout(plan.chat.lingering);\n\tplan.chat.lingering = undefined;\n\n\tlet position = room.endOf(plan.document, block);\n\tlet update = presence.attend(plan.presence, {\n\t\tname: MENTION.slice(1),\n\t\tcolor: AGENT_COLOR,\n\t\tfocusing: true,\n\t\tagent: true,\n\t\tanchorPos: position,\n\t\tfocusPos: position,\n\t\tawarenessData: {},\n\t});\n\n\tbroadcast(server, roomId, {\n\t\tkind: \"plan:awareness\",\n\t\tts: 0,\n\t\tepoch: plan.document.epoch,\n\t\tupdate: encode(update),\n\t});\n\n\t// Restarted, not stacked: an agent that edits twice in a turn should not\n\t// end up with two intervals repeating its cursor.\n\tclearInterval(plan.attention);\n\tplan.attention = setInterval(() => {\n\t\tlet renewed = presence.renew(plan.presence);\n\t\tif (!renewed) return;\n\t\tbroadcast(server, roomId, {\n\t\t\tkind: \"plan:awareness\",\n\t\t\tts: 0,\n\t\t\tepoch: plan.document.epoch,\n\t\t\tupdate: encode(renewed),\n\t\t});\n\t}, RENEW_MS);\n}\n\n/** Take the agent's cursor down, and stop repeating it. */\nexport function release(plan: Plan, server: Server, roomId: string): void {\n\tclearInterval(plan.attention);\n\tplan.attention = undefined;\n\n\tlet update = presence.release(plan.presence);\n\tif (!update) return;\n\n\tbroadcast(server, roomId, {\n\t\tkind: \"plan:awareness\",\n\t\tts: 0,\n\t\tepoch: plan.document.epoch,\n\t\tupdate: encode(update),\n\t});\n}\n\n/** Relay presence verbatim, and remember it for whoever joins next. */\nexport function awareness(plan: Plan, ws: Socket, msg: Wire.Awareness): void {\n\tif (msg.epoch !== plan.document.epoch) return;\n\tpresence.track(plan.presence, ws, decode(msg.update));\n\trelay(ws, { kind: \"plan:awareness\", ts: 0, epoch: plan.document.epoch, update: msg.update });\n}\n\n/** Clear a departed member's cursors rather than leaving peers to time them out. */\nexport function departed(plan: Plan, ws: Socket): void {\n\tlet update = presence.drop(plan.presence, ws);\n\tif (!update) return;\n\trelay(ws, {\n\t\tkind: \"plan:awareness\",\n\t\tts: 0,\n\t\tepoch: plan.document.epoch,\n\t\tupdate: encode(update),\n\t});\n}\n\n/** Write anything outstanding and let go. */\nexport async function close(plan: Plan): Promise {\n\tif (plan.timer) clearTimeout(plan.timer);\n\tclearInterval(plan.attention);\n\tlet persistence = plan.persistence;\n\tpersistence.closing = true;\n\tif (persistence.checkpointTimer) clearTimeout(persistence.checkpointTimer);\n\tpersistence.checkpointTimer = undefined;\n\tawait Chat.close(plan.chat);\n\tawait plan.flushing;\n\tawait commitHosted(plan, undefined, `state:${crypto.randomUUID()}`, capture(plan), true);\n\tawait checkpointHosted(plan);\n\tQuestions.shutdown(plan.questions);\n\tpresence.destroy(plan.presence);\n\tplan.document.doc.destroy();\n}\n\n/** Current canonical source. */\nexport function source(plan: Plan): string {\n\treturn room.project(plan.document);\n}\n\n/** Size of the Yjs history, for the idle compaction check. */\nexport function size(plan: Plan): number {\n\treturn Y.encodeStateAsUpdate(plan.document.doc).byteLength;\n}\n","editable",false,"branch","documentNavigation","repo","githubnext/chopin","repoId","7d1a8ac3-35b0-4dea-85d4-06a980f3bada","ownerId","org:89615882","site","nexthub","private","admin","settings","maintainer","triage","starred","stars",0,"watchers","watching","pinned","notify","views",[183,184,185,186,187,188,189,190,191,192,193,194,195],"navigation",{"_54":55,"_139":140,"_141":142,"_143":144,"_145":146,"_147":148,"_149":150},"sources",[],"viewer","meta",{"_131":132,"_133":134,"_135":136,"_42":31,"_137":126,"_138":31,"_48":49,"_50":49},"branches",[73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130],"tags",[69,70,71,72],"cloneUrl","https://git.nexthub.sh/githubnext/chopin.git","color-controls-slice-1","color-controls-slice-2","color-controls-slice-3","color-controls-slice-4","Krzysztof-Cieslak-patch-1","Krzysztof-Cieslak-patch-2","Maggie/app-preview-toolkit","Maggie/ci-playwright-install-timeout","Maggie/collaborative-visual-decision","Maggie/design-audit","Maggie/generic-visual-decision-runtime","Maggie/impeccable-chopin-metadata","Maggie/jev-chat-product","Maggie/jev-composed-assessment","Maggie/native-document-layouts","Maggie/openui-composition-product","Maggie/openui-composition-trial","Maggie/planner-visual-authoring","Maggie/planner-visual-requests","Maggie/visual-selection-eval","artifacts/pr-419-live-preview-20261009","automation/pr-maintenance-state","automation/use-effect/callout-disabled-picker-8cf9e49ba5c09471","automation/use-effect/collaboration-options-ref-4e3a5a08a879a5ae","automation/use-effect/room-workspace-effective-access-a57d40866c71bed0","chore/bun-1.4.2","color-controls","color-controls-plan","comments","design-pr-assets","design/archived-decisions-badge","design/channel-route-remount","design/chat-decision-entry","design/conversation-analysis-markers","design/decision-evidence","design/settled-line-icon","dev/integration","diagram-step-controls","feat/liveapp-frontend-pilot","feat/local-experiments","feat/local-launcher-tracer","fix/autolink-mdx-crash","github-pills/2-pills","github-pills/3-hover-card","maggie/app-preview-toolkit","maggie/ci-playwright-install-timeout","maggie/collaborative-visual-decision","maggie/design-audit","maggie/generic-visual-decision-runtime","maggie/impeccable-chopin-metadata","maggie/jev-composed-assessment","maggie/native-document-layouts","maggie/openui-composition-product","maggie/openui-composition-trial","maggie/planner-visual-authoring","maggie/planner-visual-requests","maggie/visual-selection-eval","main","plain-text-fence-chrome","tokens/09-copy","wireframes/2-renderer","wireframes/3-planner","description","Let's compose rich plans together","owner","githubnext","section","","head","empty","pins",[165,166,167],"documents",{"_160":161,"_162":163},"code",{"_156":157,"_158":159},"automations",{"_153":154,"_155":-5},"delivery",{"_151":49,"_152":-5},"tag","04zvKQ8QOrDUF8TO1Ovz0Zy8_TT","releases","applications","workflows",3,"deployments","commits",1000,"changes",13,"counts",{"_164":163},"total",11,"issue",{"_168":158,"_170":181,"_15":158,"_172":182,"_52":174,"_175":31,"_176":174,"_177":159},{"_168":178,"_170":179,"_15":178,"_172":180,"_52":174,"_175":31,"_176":174,"_177":49},{"_168":169,"_170":171,"_15":169,"_172":173,"_52":174,"_175":31,"_176":174,"_177":163},"id","issues","name","Issues","filters",{},true,"saved","pinnable","count","tasks","Tasks",{},"Changes",{},{"_168":158,"_170":181,"_15":158,"_172":226,"_52":174,"_175":31,"_176":174},{"_168":178,"_170":179,"_15":178,"_172":225,"_52":174,"_175":31,"_176":174},{"_168":169,"_170":171,"_15":169,"_172":224,"_52":174,"_175":31,"_176":174},{"_168":221,"_170":222,"_15":221,"_172":223,"_52":31,"_175":31,"_176":174},{"_168":218,"_170":219,"_15":218,"_172":220,"_52":31,"_175":31,"_176":174},{"_168":153,"_170":216,"_15":145,"_172":217,"_52":31,"_175":31,"_176":174},{"_168":155,"_170":213,"_15":214,"_172":215,"_52":31,"_175":31,"_176":174},{"_168":151,"_170":211,"_15":151,"_172":212,"_52":31,"_175":31,"_176":174},{"_168":207,"_170":208,"_15":209,"_172":210,"_52":31,"_175":31,"_176":174},{"_168":141,"_170":205,"_15":141,"_172":206,"_52":31,"_175":31,"_176":31},{"_168":202,"_170":203,"_15":202,"_172":204,"_52":31,"_175":31,"_176":31},{"_168":199,"_170":200,"_15":199,"_172":201,"_52":31,"_175":31,"_176":31},{"_168":196,"_170":197,"_15":196,"_172":198,"_52":31,"_175":31,"_176":31},"decisions","Decisions",{},"changelog","Changelog",{},"roadmap","Roadmap",{},"Documents",{},"activity","Activity","insights",{},"Releases",{},"Deployments","automations/deployments",{},"Workflows",{},"discussions","Discussions",{},"goals","Goals",{},{},{},{},"groups","user","agents",[],"now",1794515384692,"sidebar","expanded"]