[httpsphl]

First slice of M3 (spec 17): durable owner messages delivered to bots through the Claude Code inbox. Bot-to-bot messages, MCP tools and tasks come in the next PR.

What changes

• Inbox format verified with real Claude Code (2.1.283) before the courier depends on it (spec 9.2 and 19). The message line {"type":"user","message":{"role":"user","content":...}} is delivered and opens a turn. A missing or wrong auth line closes the connection. Claude Code never replies, and closing right after the write is safe. Three connections in a row were all delivered. The same run confirmed --continue resuming a real conversation.
• core: Message, Delivery, Task and their enums, the messages.* / deliveries.* params, and the envelope the bot reads (English, with a relative deadline). All exported to protocol.gen.ts.
• store: migration 0002_messages.sql (messages, deliveries, tasks). A message is saved with its delivery in one transaction. Each delivery transition is a single conditional UPDATE. due_deliveries returns only each bot's oldest pending delivery, and only while none of that bot's deliveries is being sent.
• platform: named pipe client with a busy retry of up to 2 s. Only plain \\.\pipe\ names are accepted, since the address comes from a bot's hook.
• courier:
  • It waits without counting attempts while the bot is not idle/busy/needs_approval or has no inbox.
  • It retries with backoff until max_attempts, then marks the delivery dead.
  • It recovers expired leases.
  • It drops the queue of archived bots.
  • A failed send does not count when the bot restarted during it.
• clock: times come from an injectable clock. Tests drive retries with a manual clock.
• RPC:
  • New methods: messages.send, messages.list, deliveries.list and deliveries.retry.
  • New notifications: message.created and delivery.changed.
  • system.status.deliveries now reports the backlog.
• Also fixes the test daemon's botloftd path, which had backspace characters in it (left over from M2).

Tests

• Store: order per bot, one delivery at a time, backoff, dead state, retry, deferral that does not count as an attempt, lease recovery, atomic insert.
• Pipe writer against a local named pipe server, including the busy pipe case and rejected addresses.
• tests/courier.rs, over RPC with FakeRuntime and FakeInbox:
  • waiting for the bot, then delivery;
  • order of three messages;
  • backoff, dead and deliveries.retry;
  • a restart during a failing send;
  • archiving a bot with a queued message;
  • validation errors.
• Every commit builds and passes clippy on its own. Full suite: 126 tests, plus pnpm check.

Manual test with real Claude Code (done, 2.1.283)

1. Run the dev daemon (BOTLOFT_HOME=.dev\home) with an existing bot whose folder is already trusted.
2. Once the bot is idle, call messages.send {botId, body: "... reply only with: COURIER-OK"}.
3. Expected result: deliveries.list shows sent with attempts: 0 a few ms later, and the bot's terminal shows [botloft] from the owner · crew ... and the reply COURIER-OK.

Result: as expected. The debug log shows the inbox token as <redacted>, and no message body appears in the log.

Still pending with real Claude Code (next PR)

• ${BOTLOFT_BOT_TOKEN} expansion in the mcp.json headers (needs /mcp).
• Two bots exchanging a task and its result without help (the M3 acceptance test).