Queue/notification UI, Core: integrate P872, P883 and P904 read operations

.github/workflows/nra-gate-cache.yml

@@ -9,6 +9,18 @@ on:
 
 permissions:
   contents: read
+  pull-requests: read
+
+# GitHub's actor supplies only Git object attribution, never merge permission.
+# Process-scoped configuration reaches merge/commit-tree without changing any checkout.
+env:
+  GIT_AUTHOR_NAME: ${{ github.actor }}
+  GIT_AUTHOR_EMAIL: ${{ github.actor_id }}+${{ github.actor }}@users.noreply.github.com
+  GIT_COMMITTER_NAME: ${{ github.actor }}
+  GIT_COMMITTER_EMAIL: ${{ github.actor_id }}+${{ github.actor }}@users.noreply.github.com
+  GIT_CONFIG_COUNT: "1"
+  GIT_CONFIG_KEY_0: commit.gpgsign
+  GIT_CONFIG_VALUE_0: "false"
 
 concurrency:
   group: nra-gate-cache
@@ -32,12 +44,20 @@ jobs:
         with:
           python-version-file: pyproject.toml
 
-      - name: Install agent-comms
+      - name: Bootstrap only Core and locked checker dependencies
         run: |
           python -m pip install packaging
           python -m pip install "$(python -I src/agent_comms/installer/declared_uv.py pyproject.toml)"
-          uv sync --locked --all-extras
-          echo "$GITHUB_WORKSPACE/.venv/bin" >> "$GITHUB_PATH"
+          UV_PROJECT_ENVIRONMENT="$RUNNER_TEMP/checker-venv" uv sync --locked --all-extras
+          echo "$RUNNER_TEMP/checker-venv/bin" >> "$GITHUB_PATH"
+
+      - name: Resolve main's actual merged source tuple once
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: PYTHONPATH=src python -m agent_comms.integration --resolve-ci-inputs "$RUNNER_TEMP/paired-sources"
+
+      - name: Build the one common checker environment
+        run: PYTHONPATH=src:tools python tools/checker_stack.py --ci-inputs "$RUNNER_TEMP/paired-sources"
 
       - uses: actions/cache/restore@v4
         with:
@@ -49,8 +69,14 @@ jobs:
       - name: Measure main against its parent
         run: |
           PYTHONPATH=src:tools python tools/nra_gate.py \
+            --ci-inputs "$RUNNER_TEMP/paired-sources" \
             --root ${{ matrix.kind }} --base HEAD^1 --head HEAD || true
 
+      - name: The same sources are still current before saving cache
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: PYTHONPATH=src python -m agent_comms.integration --revalidate-ci-inputs "$RUNNER_TEMP/paired-sources"
+
       - uses: actions/cache/save@v4
         with:
           path: ~/.cache/agent-comms

.github/workflows/nra-gate.yml

@@ -10,6 +10,17 @@ on:
 permissions:
   contents: read
 
+# Materialization merges and tree proofs create Git objects; every child inherits this
+# process-only identity/signing policy. No global or shared repository config is written.
+env:
+  GIT_AUTHOR_NAME: ${{ github.actor }}
+  GIT_AUTHOR_EMAIL: ${{ github.actor_id }}+${{ github.actor }}@users.noreply.github.com
+  GIT_COMMITTER_NAME: ${{ github.actor }}
+  GIT_COMMITTER_EMAIL: ${{ github.actor_id }}+${{ github.actor }}@users.noreply.github.com
+  GIT_CONFIG_COUNT: "1"
+  GIT_CONFIG_KEY_0: commit.gpgsign
+  GIT_CONFIG_VALUE_0: "false"
+
 # A superseded push to a pull request stops its old run; queue groups never share a group.
 # The draft state is part of the key: a draft run skips every job but the NRA gate, so one that
 # starts in the same second as ready_for_review must not cancel the ready run (#3164 and #3154 lost
@@ -34,27 +45,36 @@ jobs:
       - run: true
         shell: bash
 
-  # The base every job measures from, drafts included. A pull request checks out its merge into
-  # current main, so the base is that merge's first parent; pull_request.base.sha is main when the
-  # PR was opened, and measuring from it charges the PR with everything main merged since.
+  # The native event/source reader owns both the comparison base and combined-job selection.
+  # Ordinary sources still get diagnostics; naming a branch batch/ grants nothing.
   base:
     runs-on: ubuntu-latest
-    timeout-minutes: 1
+    timeout-minutes: 5
+    permissions:
+      contents: read
+      pull-requests: read
     outputs:
-      base: ${{ steps.base.outputs.base }}
+      base: ${{ steps.sources.outputs.base }}
+      combined: ${{ steps.sources.outputs.combined }}
     steps:
       - uses: actions/checkout@v4
         with:
-          fetch-depth: 2
-      - id: base
-        shell: bash
+          submodules: recursive
+          fetch-depth: 0
+      - uses: actions/setup-python@v5
+        with:
+          python-version-file: pyproject.toml
+      - name: Install the native source-input reader
+        run: python -m pip install -e .
+      - name: Derive job selection from the actual tested sources
+        id: sources
         env:
-          QUEUE_BASE: ${{ github.event.merge_group.base_sha }}
-        run: echo "base=${QUEUE_BASE:-$(git rev-parse HEAD^1)}" >> "$GITHUB_OUTPUT"
+          GH_TOKEN: ${{ github.token }}
+        run: PYTHONPATH=src python -m agent_comms.integration --resolve-ci-inputs "$RUNNER_TEMP/job-sources" --workflow-output "$GITHUB_OUTPUT"
 
   smoke:
     needs: [ready, base]
-    if: github.event_name == 'merge_group' || startsWith(github.head_ref, 'batch/')
+    if: needs.base.outputs.combined == 'true'
     runs-on: ubuntu-latest
     timeout-minutes: 10
     steps:
@@ -64,8 +84,18 @@ jobs:
       - uses: actions/setup-python@v5
         with:
           python-version-file: pyproject.toml
-      - name: Install agent-comms and test dependencies
-        run: python -m pip install -e '.[dev]'
+      - name: Bootstrap only Core and locked checker dependencies
+        run: |
+          python -m pip install packaging
+          python -m pip install "$(python -I src/agent_comms/installer/declared_uv.py pyproject.toml)"
+          UV_PROJECT_ENVIRONMENT="$RUNNER_TEMP/checker-venv" uv sync --locked --all-extras
+          echo "$RUNNER_TEMP/checker-venv/bin" >> "$GITHUB_PATH"
+      - name: Resolve the actual tested source tuple once
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: PYTHONPATH=src python -m agent_comms.integration --resolve-ci-inputs "$RUNNER_TEMP/paired-sources"
+      - name: Build the one common checker environment
+        run: PYTHONPATH=src:tools python tools/checker_stack.py --ci-inputs "$RUNNER_TEMP/paired-sources"
       - name: Compile production and tools
         run: python -m compileall -q src tools
       - name: Import every Core and hook module
@@ -89,7 +119,11 @@ jobs:
       - name: Stack clients import only names Core has; the outgoing wire matches the base
         env:
           BASE: ${{ needs.base.outputs.base }}
-        run: python tools/module_layers.py --check --base "$BASE" --report "$GITHUB_STEP_SUMMARY"
+        run: PYTHONPATH=src:tools python tools/module_layers.py --check --base "$BASE" --ci-inputs "$RUNNER_TEMP/paired-sources" --report "$GITHUB_STEP_SUMMARY"
+      - name: The same sources are still current before success
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: PYTHONPATH=src python -m agent_comms.integration --revalidate-ci-inputs "$RUNNER_TEMP/paired-sources"
 
   native-scripts:
     name: native-scripts
@@ -116,7 +150,7 @@ jobs:
   install-rehearsal:
     name: install-rehearsal
     needs: [ready, base]
-    if: github.event_name == 'merge_group' || startsWith(github.head_ref, 'batch/')
+    if: needs.base.outputs.combined == 'true'
     runs-on: ubuntu-latest
     timeout-minutes: 15
     env:
@@ -158,26 +192,28 @@ jobs:
     name: review-verdict
     needs: ready
     runs-on: ubuntu-latest
-    timeout-minutes: 2
+    timeout-minutes: 5
     permissions:
-      statuses: read
+      contents: read
+      statuses: write
       pull-requests: read
     env:
       GH_TOKEN: ${{ github.token }}
-      QUEUE_REF: ${{ github.event.merge_group.head_ref }}
     steps:
-      # A pull request is pushed before its verdict exists; the queue's group
-      # is where the commander's verdict on the head must already be success.
-      - name: The commander's verdict on the queued head is success
-        if: github.event_name == 'merge_group'
-        shell: bash
-        run: |
-          [[ $QUEUE_REF =~ /pr-([0-9]+)- ]]
-          head=$(gh api "repos/$GITHUB_REPOSITORY/pulls/${BASH_REMATCH[1]}" --jq .head.sha)
-          verdict=$(gh api "repos/$GITHUB_REPOSITORY/commits/$head/status" \
-            --jq '[.statuses[] | select(.context == "agent-comms/review")][0].state // "none"')
-          echo "PR #${BASH_REMATCH[1]} head $head: agent-comms/review=$verdict"
-          [[ $verdict == success ]]
+      - uses: actions/checkout@v4
+        with:
+          submodules: recursive
+          fetch-depth: 0
+      - uses: actions/setup-python@v5
+        with:
+          python-version-file: pyproject.toml
+      - name: Install the native source-input reader
+        run: python -m pip install -e .
+      # The PR check proves a separate combined carrier and exact reviewed members.
+      # The queue additionally requires the root's explicit promotion at this head.
+      # A hand gh auto-merge request cannot turn source acceptance into that permission.
+      - name: Only the captured combined carrier may merge
+        run: PYTHONPATH=src python -m agent_comms.integration --check-merge-inputs "$RUNNER_TEMP/merge-inputs"
 
   nra-gate:
     name: debt-${{ matrix.kind }}
@@ -200,14 +236,20 @@ jobs:
         with:
           python-version-file: pyproject.toml
 
-      - name: Install agent-comms
+      - name: Bootstrap only Core and locked checker dependencies
         run: |
           python -m pip install packaging
           python -m pip install "$(python -I src/agent_comms/installer/declared_uv.py pyproject.toml)"
-          uv lock --project stack --upgrade
-          UV_PROJECT_ENVIRONMENT="$GITHUB_WORKSPACE/.venv" uv sync --project stack --locked
-          uv pip install --python "$GITHUB_WORKSPACE/.venv/bin/python" -e '.[dev]'
-          echo "$GITHUB_WORKSPACE/.venv/bin" >> "$GITHUB_PATH"
+          UV_PROJECT_ENVIRONMENT="$RUNNER_TEMP/checker-venv" uv sync --locked --all-extras
+          echo "$RUNNER_TEMP/checker-venv/bin" >> "$GITHUB_PATH"
+
+      - name: Resolve the actual tested source tuple once
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: PYTHONPATH=src python -m agent_comms.integration --resolve-ci-inputs "$RUNNER_TEMP/paired-sources"
+
+      - name: Build the one common checker environment
+        run: PYTHONPATH=src:tools python tools/checker_stack.py --ci-inputs "$RUNNER_TEMP/paired-sources"
 
       # Saved by nra-gate-cache.yml on main; entries are keyed by content, so any
       # older main's cache only misses where the code differs.
@@ -224,10 +266,16 @@ jobs:
           set -o pipefail
           gate_status=0
           PYTHONPATH=src:tools python tools/nra_gate.py \
+            --ci-inputs "$RUNNER_TEMP/paired-sources" \
             --root ${{ matrix.kind }} --base "$BASE" --head HEAD 2>gate-findings.txt | tee gate.txt || gate_status=$?
           cat gate-findings.txt >&2
           exit "$gate_status"
 
+      - name: The same sources are still current before success
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: PYTHONPATH=src python -m agent_comms.integration --revalidate-ci-inputs "$RUNNER_TEMP/paired-sources"
+
       # Hosted annotations stop at ten per step, so a unit never saw a long list (88 findings
       # on the bus batch, 2026-10-21). The whole list goes on the pull request, one comment per
       # kind, replaced on every run.

pyproject.toml

@@ -44,6 +44,7 @@ dev = [
     "ruff==0.16.0",
     "mypy==2.3.0",
     "uv==0.13.1",
+    "tomli-w==1.2.0",
 ]
 
 [project.urls]

src/agent_comms/acp_extension.py

@@ -1,3 +1,3 @@
 """Declared Comms facts carried by the external ACP metadata envelope.
 
 These records are shared with the paired Toad client. They describe observations;
@@ -12,7 +12,7 @@
 
 from abc import abstractmethod
 from dataclasses import dataclass, field, replace
-from typing import TYPE_CHECKING, Annotated, Callable, ClassVar
+from typing import TYPE_CHECKING, Annotated, Callable, ClassVar, Self
 
 
 from .acp_failure import (
@@ -52,8 +52,10 @@
 from .reported_turn import ReportedTurn, ReportedTurnState
 from .routing import MessageRoute, NoMessageRoute
 from .thread_identity import ClaimScoped, ThreadIncarnation
-from .tool_result import DeclaredReply
-from .transcripts import NativeCommittedPrefix, TranscriptCursor, TranscriptPage, TranscriptReadIdentity
+from .tool_result import ToolResult
+from .transcripts import (
+    LivePageSource, NativeCommittedPrefix, PageSource, TranscriptCursor, TranscriptPage, TranscriptRead, TranscriptReadIdentity,
+)
 from .turn_context import ContextManifest
 from .turn_lease import TurnState
 from .working_memory_labels import ModelLabel
@@ -107,7 +109,7 @@
 
 @dataclass(frozen=True)
 class TranscriptChangedUpdate(AgentCommsUpdate):
-    cursor: TranscriptCursor | None
+    cursor: TranscriptCursor
 
 
 class ClaimBlockedFailure(BackendDeliveryFailure):
@@ -138,7 +140,7 @@
 
 
 @dataclass(frozen=True)
-class GoalSnapshotReply(DeclaredReply, GoalSnapshot):
+class GoalSnapshotReply(ToolResult, GoalSnapshot):
     """A goal request's reply: the owner's goal snapshot and its turn state."""
 
     execution: Annotated[GoalExecution, WireName("goalExecution")]
@@ -698,20 +700,20 @@
 
 
 @dataclass(frozen=True)
-class TranscriptSnapshotUpdate(AgentCommsUpdate):
+class TranscriptSnapshotUpdate(AgentCommsUpdate, ToolResult):
     page: TranscriptPage
     identity: TranscriptReadIdentity
     draft: DraftRow | None = None
 
     @classmethod
-    def from_read(cls, read):
+    def from_read(cls, read: TranscriptRead) -> Self:
         page, draft = read.read_snapshot()
         return cls(page, read.identity, draft.external_row())
 
     @classmethod
-    def capture(cls, transcripts, name, *, historical_source=None):
+    def capture(cls, transcripts, name, *, page_source: PageSource = LivePageSource()):
         """Publish the page together with the source witness that read it."""
-        read = transcripts.capture_page_read(name, historical_source=historical_source)
+        read = transcripts.capture_page_read(name, page_source=page_source)
         return cls.from_read(read)
 
 

src/agent_comms/agent_activity.py

@@ -1,3 +1,3 @@
 """Activity, runtime metadata and local turn lease ownership."""
 
 from __future__ import annotations
@@ -32,7 +32,7 @@
     NoDrainDiagnostic,
     ObservedActivity,
 )
-from .audience_manifest import FrozenRecipient
+from .participant_identity import FrozenRecipientIdentity
 from .coordinator import Coordination
 from .declared_family import DeclaredFamily
 from .errors import RelationViolationError
@@ -169,7 +169,7 @@
         return ActivityCapture(observed, events.expires_at)
 
     def observe_recipients(
-        self, recipients: Iterable[tuple[Delivered, FrozenRecipient]], *,
+        self, recipients: Iterable[tuple[Delivered, FrozenRecipientIdentity]], *,
         snapshot: RegistrySnapshot,
     ) -> Mapping[ThreadLookup, RecipientActivity]:
         """Acquire one bounded window's recipients from the original sends."""

src/agent_comms/agent_backend.py

@@ -1,3 +1,3 @@
 """Agent runtimes behind one interface: the AgentBackend family and its records.
 
 A thread names its backend (``Thread.backend``). Core asks that backend for
@@ -29,6 +29,7 @@
 from .declared_family import DeclaredFamily
 from .field_codec import InputId
 from .image_input import ImageInput
+from .native_input_proof import NativeContextProof
 from .pi_counts import PiCount
 from .pi_vocabulary import CompactionReason, ThinkingLevelField
 from .session_revision import NoSessionObservation, SessionObservation
@@ -316,6 +317,15 @@
     def following(self, public_id: InputId, native_id: InputId, text: str) -> bool: ...
 
 
+    async def original_context_committed(self, sent_text: str, context: NativeContextProof) -> None:
+        """An unowned input has no durable ordinary disposition to acknowledge."""
+
+    async def following_context_committed(
+        self, public_id: InputId, sent_text: str, context: NativeContextProof,
+    ) -> None:
+        """An unowned following input has no durable ordinary disposition."""
+
+
 class NoInputStartListener(InputStartListener):
     started_events = ()