refactor: move destinations from JSON file into inbound.db

The per-session destination map was being written as a sidecar JSON file
(/workspace/.nanoclaw-destinations.json) — inconsistent with the rest of
v2, where all host↔container IO goes through inbound.db / outbound.db.

Move it into a `destinations` table in INBOUND_SCHEMA. The host writes
it before every container wake AND on demand (e.g. after create_agent)
so the creator sees the new child destination mid-session without a
restart. The container queries the table live on every lookup — no
cache, no staleness window.

- src/db/schema.ts: add `destinations` table to INBOUND_SCHEMA.
- src/session-manager.ts: writeDestinationsFile → writeDestinations,
  writes via DELETE + INSERT inside a transaction.
- src/delivery.ts: create_agent handler calls writeDestinations on the
  creator's session after inserting the new destination rows.
- container/agent-runner/src/destinations.ts: queries inbound.db
  directly in every findByName/getAllDestinations/findByRouting call.
  No more cache. No setDestinationsForTest (obsolete). No fs import.
- container/agent-runner/src/index.ts and mcp-tools/index.ts: remove
  loadDestinations() calls — no longer needed.
- Test helper initTestSessionDb creates the destinations table.
  Integration test inserts a row directly instead of mocking the cache.

No backwards compatibility: sessions predating the schema update must
be recreated. This is fine on the v2 branch.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

container/agent-runner/src/db/connection.ts

@@ -95,6 +95,14 @@ export function initTestSessionDb(): { inbound: Database.Database; outbound: Dat
       status              TEXT NOT NULL DEFAULT 'delivered',
       delivered_at        TEXT NOT NULL
     );
+    CREATE TABLE destinations (
+      name            TEXT PRIMARY KEY,
+      display_name    TEXT,
+      type            TEXT NOT NULL,
+      channel_type    TEXT,
+      platform_id     TEXT,
+      agent_group_id  TEXT
+    );
   `);
 
   _outbound = new Database(':memory:');

container/agent-runner/src/destinations.ts

@@ -1,11 +1,16 @@
 /**
- * Destination map loaded at container startup from
- * /workspace/.nanoclaw-destinations.json (written by the host on wake).
+ * Destination map — lives in inbound.db's `destinations` table.
  *
- * The map is BOTH the routing table and the ACL — if a name/target
- * isn't in here, the agent can't reach it.
+ * The host writes this table before every container wake AND on demand
+ * (e.g. when a new child agent is created mid-session). The container
+ * queries the table live on every lookup, so admin changes take effect
+ * immediately — no restart required.
+ *
+ * This table is BOTH the routing map and the container-visible ACL.
+ * The host re-validates on the delivery side against the central DB,
+ * so even if this table is stale the host's enforcement is authoritative.
  */
-import fs from 'fs';
+import { getInboundDb } from './db/connection.js';
 
 export interface DestinationEntry {
   name: string;
@@ -16,36 +21,34 @@ export interface DestinationEntry {
   agentGroupId?: string;
 }
 
-const DEST_FILE = '/workspace/.nanoclaw-destinations.json';
+interface DestRow {
+  name: string;
+  display_name: string | null;
+  type: 'channel' | 'agent';
+  channel_type: string | null;
+  platform_id: string | null;
+  agent_group_id: string | null;
+}
 
-let cache: DestinationEntry[] = [];
-
-export function loadDestinations(): void {
-  try {
-    if (!fs.existsSync(DEST_FILE)) {
-      cache = [];
-      return;
-    }
-    const raw = fs.readFileSync(DEST_FILE, 'utf-8');
-    const parsed = JSON.parse(raw) as { destinations?: DestinationEntry[] };
-    cache = Array.isArray(parsed.destinations) ? parsed.destinations : [];
-  } catch (err) {
-    console.error(`[destinations] Failed to load: ${err instanceof Error ? err.message : String(err)}`);
-    cache = [];
-  }
+function rowToEntry(row: DestRow): DestinationEntry {
+  return {
+    name: row.name,
+    displayName: row.display_name ?? row.name,
+    type: row.type,
+    channelType: row.channel_type ?? undefined,
+    platformId: row.platform_id ?? undefined,
+    agentGroupId: row.agent_group_id ?? undefined,
+  };
 }
 
 export function getAllDestinations(): DestinationEntry[] {
-  return cache;
-}
-
-/** Test-only: inject destinations without touching the filesystem. */
-export function setDestinationsForTest(destinations: DestinationEntry[]): void {
-  cache = destinations;
+  const rows = getInboundDb().prepare('SELECT * FROM destinations ORDER BY name').all() as DestRow[];
+  return rows.map(rowToEntry);
 }
 
 export function findByName(name: string): DestinationEntry | undefined {
-  return cache.find((d) => d.name === name);
+  const row = getInboundDb().prepare('SELECT * FROM destinations WHERE name = ?').get(name) as DestRow | undefined;
+  return row ? rowToEntry(row) : undefined;
 }
 
 /**
@@ -57,15 +60,23 @@ export function findByRouting(
   platformId: string | null | undefined,
 ): DestinationEntry | undefined {
   if (!channelType || !platformId) return undefined;
-  if (channelType === 'agent') {
-    return cache.find((d) => d.type === 'agent' && d.agentGroupId === platformId);
-  }
-  return cache.find((d) => d.type === 'channel' && d.channelType === channelType && d.platformId === platformId);
+  const db = getInboundDb();
+  const row =
+    channelType === 'agent'
+      ? (db
+          .prepare("SELECT * FROM destinations WHERE type = 'agent' AND agent_group_id = ?")
+          .get(platformId) as DestRow | undefined)
+      : (db
+          .prepare("SELECT * FROM destinations WHERE type = 'channel' AND channel_type = ? AND platform_id = ?")
+          .get(channelType, platformId) as DestRow | undefined);
+  return row ? rowToEntry(row) : undefined;
 }
 
 /** Generate the system-prompt addendum describing destinations and syntax. */
 export function buildSystemPromptAddendum(): string {
-  if (cache.length === 0) {
+  const all = getAllDestinations();
+
+  if (all.length === 0) {
     return [
       '## Sending messages',
       '',
@@ -74,9 +85,8 @@ export function buildSystemPromptAddendum(): string {
   }
 
   // Single-destination shortcut: the agent just writes its response normally.
-  // No wrapping needed. This preserves the simple case (one user, one channel).
-  if (cache.length === 1) {
-    const d = cache[0];
+  if (all.length === 1) {
+    const d = all[0];
     const label = d.displayName && d.displayName !== d.name ? ` (${d.displayName})` : '';
     return [
       '## Sending messages',
@@ -90,7 +100,7 @@ export function buildSystemPromptAddendum(): string {
   }
 
   const lines = ['## Sending messages', '', 'You can send messages to the following destinations:', ''];
-  for (const d of cache) {
+  for (const d of all) {
     const label = d.displayName && d.displayName !== d.name ? ` (${d.displayName})` : '';
     lines.push(`- \`${d.name}\`${label}`);
   }

container/agent-runner/src/index.ts

@@ -26,7 +26,7 @@ import fs from 'fs';
 import path from 'path';
 import { fileURLToPath } from 'url';
 
-import { buildSystemPromptAddendum, loadDestinations } from './destinations.js';
+import { buildSystemPromptAddendum } from './destinations.js';
 import { createProvider, type ProviderName } from './providers/factory.js';
 import { runPollLoop } from './poll-loop.js';
 
@@ -45,9 +45,6 @@ async function main(): Promise<void> {
 
   const provider = createProvider(providerName, { assistantName });
 
-  // Load destination map (written by host on every wake)
-  loadDestinations();
-
   // Load global CLAUDE.md as additional system context, then append destinations addendum
   let systemPrompt: string | undefined;
   if (fs.existsSync(GLOBAL_CLAUDE_MD)) {

container/agent-runner/src/integration.test.ts

@@ -1,7 +1,6 @@
 import { describe, it, expect, beforeEach, afterEach } from 'vitest';
 
 import { initTestSessionDb, closeSessionDb, getInboundDb, getOutboundDb } from './db/connection.js';
-import { setDestinationsForTest } from './destinations.js';
 import { getUndeliveredMessages } from './db/messages-out.js';
 import { getPendingMessages } from './db/messages-in.js';
 import { MockProvider } from './providers/mock.js';
@@ -9,21 +8,17 @@ import { runPollLoop } from './poll-loop.js';
 
 beforeEach(() => {
   initTestSessionDb();
-  // Provide a test destination map so output parsing can resolve "discord-test" → routing
-  setDestinationsForTest([
-    {
-      name: 'discord-test',
-      displayName: 'Discord Test',
-      type: 'channel',
-      channelType: 'discord',
-      platformId: 'chan-1',
-    },
-  ]);
+  // Seed a destination so output parsing can resolve "discord-test" → routing
+  getInboundDb()
+    .prepare(
+      `INSERT INTO destinations (name, display_name, type, channel_type, platform_id, agent_group_id)
+       VALUES ('discord-test', 'Discord Test', 'channel', 'discord', 'chan-1', NULL)`,
+    )
+    .run();
 });
 
 afterEach(() => {
   closeSessionDb();
-  setDestinationsForTest([]);
 });
 
 function insertMessage(id: string, content: object, opts?: { platformId?: string; channelType?: string; threadId?: string }) {

container/agent-runner/src/mcp-tools/index.ts

@@ -9,7 +9,6 @@ import { Server } from '@modelcontextprotocol/sdk/server/index.js';
 import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
 import { CallToolRequestSchema, ListToolsRequestSchema } from '@modelcontextprotocol/sdk/types.js';
 
-import { loadDestinations } from '../destinations.js';
 import type { McpToolDefinition } from './types.js';
 import { coreTools } from './core.js';
 import { schedulingTools } from './scheduling.js';
@@ -21,10 +20,6 @@ function log(msg: string): void {
   console.error(`[mcp-tools] ${msg}`);
 }
 
-// Load the destination map — this process is spawned fresh for each container
-// wake, so the map file is always fresh (written by the host before spawn).
-loadDestinations();
-
 // Only admin agents get the create_agent tool. Non-admins never see it in the
 // listTools response; the host also re-checks permission on receive as defense
 // in depth (see delivery.ts create_agent handler).