bus, cli, webui: every message to the human, read state, Messages page (#1588)

Row 94, round 2. Rocko built it, Dewey approved it (comment 28104) on
manifest 53b01ea9 (16 paths, base e918a915). The bus keeps a messages
view with read state, where delivered but not read stays read:false. The
CLI gains messages and follow, and inbox leaves out messages already
read while inbox --json stays byte-compatible. The Console gets a
Messages page and an unread count in the nav. Mos gave the go under
decision 123 (public/ files). Sage gate on 645489e4 plus the patch,
12:52:14Z to 12:55:44Z: bus 115, cli 129, webui 104, all fail 0. Every
scripts/test-*.sh exited 0 (auth 15, conductor 17, config 24, discord
66, extension-package 18, foundation 44, queue 27, release 14, task 98).
Manifest 16/16 before and after.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

packages/cli/tests/cli.test.mjs

@@ -40,7 +40,7 @@ test("inbox lists only decisions routed to the human, with what approving author
   assert.match(text, new RegExp(`decide: mosaic decide ${gated.id.slice(0, 8)} <option>`));
   const json = await s.run(["inbox", "--business", "demo", "--json"]);
   assert.equal(JSON.parse(json.io.out.text)[0].id, gated.id);
-  assert.deepEqual(s.calls.map((c) => c.verb), ["inbox", "inbox"]);
+  assert.deepEqual(s.calls.map((c) => c.verb), ["inbox", "messages", "inbox"]);
 });
 
 test("decide resolves by id prefix with --yes, and the trail shows it in broker order with the task to follow", async (t) => {
@@ -139,7 +139,7 @@ test("without --business a command uses the live host's business, and a stale ho
   assert.equal(s.calls.length, 0);
   write(startTimeOf(process.pid));
   assert.equal((await s.run(["inbox"])).code, 0);
-  assert.deepEqual(s.calls.map((c) => c.business), ["demo"]);
+  assert.deepEqual(s.calls.map((c) => c.business), ["demo", "demo"]);
 });
 
 test("every human command refuses inside an agent run before it touches the bus", async (t) => {