mailbox

type Message struct {
	Seq     int64     `json:"seq"`
	Island  string    `json:"island"`
	From    string    `json:"from"`            // sender agent id (literal)
	To      string    `json:"to,omitempty"`    // recipient agent id; empty = broadcast to the island
	Topic   string    `json:"topic,omitempty"` // optional channel within the island
	Payload string    `json:"payload"`
	Time    time.Time `json:"time"`
	// Origin is daemon-stamped provenance, set ONLY for messages delivered from
	// another island over a brokered link (Lane 5). nil for ordinary intra-island
	// messages. Agents cannot set it — see DeliverExternal vs Send.
	Origin *Origin `json:"origin,omitempty"`
	// Action, when non-nil, marks this as a cross-island ACTION delegation (Lane 5
	// Phase 3) rather than free-form info: a NAMED, typed operation the recipient
	// island exposed, authorized by the daemon's action gate. Set only by
	// DeliverAction. The recipient runs its handler for Action.Type — it must not
	// interpret Payload as a free-form prompt.
	Action *MessageAction `json:"action,omitempty"`
}

type MessageAction struct {
	Type   string `json:"type"`
	Params string `json:"params,omitempty"`
}

type Origin struct {
	SourceIsland string `json:"source_island"`
	CrossIsland  bool   `json:"cross_island"`
	// FromLabel is the sender agent's display label, stamped by the daemon at
	// send time from the SOURCE island's roster. A receiving island can't resolve
	// another island's roster (containment), so this is the only way it can show
	// a sender name instead of a bare id. Display-only + omitempty: absent when
	// the sender has no label, and consumers fall back to From (the id). Like the
	// rest of Origin it's unforgeable — only the cross-island delivery path sets it.
	FromLabel string `json:"from_label,omitempty"`
}

type Store struct {
	// contains filtered or unexported fields
}