Add native delivery for Codex and Claude

Cargo.toml

@@ -36,6 +36,7 @@ sha2 = "0.10"
 st2-wire = { path = "crates/st2-wire" }
 tempfile = "3"
 toml = "0.9"
+tungstenite = "0.30"
 
 [dev-dependencies]
 libc = "0.2"

INVARIANTS.md

@@ -18,8 +18,8 @@ materialization, messaging, DING, or presence must preserve them.
 | **Mutation-only filesystem wakeups** | Supervisor and DING filesystem watchers ignore read/open access events and wake early only for create, modify, rename, or remove events. Their own catalog and inbox reads therefore cannot bypass the bounded timer cadence or form a Linux inotify CPU loop. | `src/watch.rs::only_mutations_wake_watch_loops`; `src/watch.rs::linux_reads_are_silent_but_real_mutations_wake`; `src/ding/mod.rs::idle_ding_does_not_spin_on_its_own_inbox_reads`; `src/run.rs::idle_supervisor_does_not_spin_on_its_own_catalog_reads` |
 | **Bounded DING PTY probe churn** | An unsafe or active composer retains its FIFO notice but deferred delivery retries use a bounded backoff, so each inbox poll cannot spawn another short-lived PTY probe. | `src/ding/mod.rs::deferred_delivery_backoff_bounds_short_lived_pty_attempts` |
 | **Agent-declared presence discipline** | The shipped bus contract requires agents to declare `busy` before executing work, use `available` only while yielding or ready, and reserve `dnd` for an explicit hold. Both native harnesses materialize that contract. Busy remains observable but does not suppress DING; fresh `dnd` is the only delivery gate. | `tests/native_only.rs::clean_path_executes_the_maintained_native_authoring_guide`; `src/ding/mod.rs::pending_delivery_ignores_busy_but_respects_fresh_dnd_archive_and_retry` |
-| **Stable roster JSON** | `st2 agents --json [--enrich]` preserves field names, order, null handling, presence, typed desired state and rationale, the retirement compatibility projection, opaque declared Resource descriptors, activity, and inbox counts. Presence remains independent from desired lifecycle. | `src/agents.rs::agents_json_has_stable_wire_shape`; `src/agents.rs::agents_json_preserves_opaque_declared_resource_descriptors`; `tests/status_agents.rs::roster_json_and_human_output_distinguish_retirement_from_presence`; `tests/status_agents.rs::roster_keeps_presence_separate_from_suspended_desired_state` |
-| **Agent-declared presence** | Refresh preserves non-DND declared status and only advances liveness; a missing status starts as `available`, while `dnd` is never refreshed and an unrefreshed declaration ages to `unknown`. | `src/status.rs::refresh_preserves_value_and_bumps_mtime`; `src/status.rs::refresh_leaves_dnd_to_age_out`; `src/status.rs::refresh_missing_writes_available_default`; `src/status.rs::stale_mtime_reads_as_unknown_regardless_of_contents` |
+| **Stable roster JSON** | `st2 agents --json [--enrich]` preserves field names, order, null handling, presence, typed desired state and rationale, the retirement compatibility projection, opaque declared Resource descriptors, origin-timed activity, and inbox counts. Presence remains independent from desired lifecycle. | `src/agents.rs::agents_json_has_stable_wire_shape`; `src/agents.rs::agents_json_preserves_opaque_declared_resource_descriptors`; `tests/status_agents.rs::roster_json_and_human_output_distinguish_retirement_from_presence`; `tests/status_agents.rs::roster_keeps_presence_separate_from_suspended_desired_state`; `tests/status_agents.rs::roster_uses_version_1_origin_time_for_last_activity` |
+| **Agent-declared presence** | Refresh preserves non-DND declared status and advances the version 1 heartbeat. A missing status starts as `available`. Legacy DND migrates without renewing its hold. Version 1 DND is not refreshed. Stale, malformed, or implausibly future heartbeats read as `unknown`. The outer Codex and Claude session wrappers own a five-minute heartbeat while their provider remains alive. | `src/status.rs::refresh_preserves_value_and_changes_heartbeat_bytes`; `src/status.rs::refresh_upgrades_legacy_dnd_without_renewing_the_hold`; `src/status.rs::refresh_missing_writes_available_default`; `src/status.rs::version_1_staleness_and_future_skew_are_bounded`; `src/status.rs::malformed_versioned_record_is_unknown_without_mtime_fallback`; `src/claude_session.rs::idle_provider_refreshes_presence_without_mcp_input`; `src/codex_app_server.rs::inbox_fallback_does_not_write_a_fifteen_second_presence_heartbeat` |
 | **Retirement health** | A retired declaration is healthy only after every declared task ID is absent. Any live or dead declared task record reports incomplete retirement; retired declarations do not require presence. Live declarations retain their existing task and presence checks. | `tests/doctor.rs::retired_declaration_is_healthy_when_tasks_and_presence_are_absent`; `tests/doctor.rs::retired_declaration_is_unhealthy_while_a_declared_task_is_alive`; `tests/doctor.rs::retired_declaration_is_unhealthy_while_a_dead_task_record_remains` |
 | **Suspension health** | A suspended declaration is healthy when no declared task is live and every retained dead record is explicitly keep-pinned. It requires no presence, but this weaker result never proves retirement. Resume preserves ordinary keep and adopt-only policy. | `tests/doctor.rs::suspended_declaration_is_healthy_when_tasks_are_absent_without_presence`; `tests/doctor.rs::suspended_declaration_distinguishes_live_dead_keep_and_dead_nonkeep`; `tests/reconcile.rs::resuming_uses_ordinary_reconcile_and_does_not_override_keep` |
 | **Crash loops surface** | A task parked by a fail-mode restart policy notifies its supervisor once over the bus. | `tests/run.rs::surface_crash_loop_notifies_the_supervisor_over_the_bus` |

README.md

@@ -475,9 +475,15 @@ contract; renderer changes can defer delivery and remain an explicit design gap.
 
 Agents must declare `busy` before actively executing work and return to `available` only when
 yielding or ready for new work, but `busy` never suppresses DING. Fresh `dnd` is the only delivery
-hold. The sidecar does not refresh `dnd`, so an abandoned hold becomes stale after 15 minutes and
-delivery resumes. New arrivals remain FIFO, same-filename archive receipts shadow and clean restored
-inbox duplicates, and failed or uncertain PTY operations retain the notice for safe retry. Unsafe
+hold. Each status record keeps the state on its first line. Version 1 writers add `v1 <unix-ms>` on
+the second line. New readers use that origin timestamp and accept a legacy bare state. Old readers
+keep using the first line and file mtime. A live session owner refreshes non-DND presence every five
+minutes. This changes the replicated bytes and stays below the 15-minute stale limit. A legacy
+`dnd` upgrades once with its existing mtime, then remains unchanged. A malformed versioned record or
+a timestamp more than 60 seconds in the future reads as `unknown` without an mtime fallback. Version
+1 status contributes its origin timestamp to `lastActivity`. New arrivals remain FIFO.
+Same-filename archive receipts shadow and clean
+restored inbox duplicates. Failed or uncertain PTY operations retain the notice for safe retry. Unsafe
 delivery retries use a bounded backoff, so an active composer cannot make the sidecar spawn a fresh
 PTY probe on every inbox poll. On start
 or restart, the sidecar first adopts an exact staged recovery/backlog notice when present, then sends

crates/agent-spec/src/discovery.rs

@@ -76,6 +76,18 @@ pub fn discover_strict(root: &Path) -> Discovered {
     discover_impl(root, true)
 }
 
+/// Parse and lower one declaration file without walking its surrounding catalog.
+///
+/// `root` supplies the same path defaults as [`discover`]. The returned warnings describe only
+/// this file.
+pub fn discover_file(
+    root: &Path,
+    path: &Path,
+) -> anyhow::Result<(Vec<AgentSpec>, Vec<String>)> {
+    let raws = parse_raw_file(path)?;
+    load_specs(root, path, raws)
+}
+
 fn discover_impl(root: &Path, strict: bool) -> Discovered {
     DISCOVERY_WALK_COUNT.set(DISCOVERY_WALK_COUNT.get() + 1);
     let mut out = Discovered::default();