@allocator-one/rcl 4.4.19

package/dist/converge/ordinary-pending-export.js

@@ -0,0 +1,175 @@
+import { randomUUID } from 'node:crypto';
+import { link, lstat, mkdir, realpath, unlink } from 'node:fs/promises';
+import { dirname, join, relative, resolve, sep } from 'node:path';
+import { convergeAttemptStatePath, loadConvergeAttemptState } from './attempt-budget.js';
+import { convergeRunStatePath, loadConvergeRunState } from './run-state.js';
+import { launchSchema } from './launch-record.js';
+import { validateOrdinaryPendingPackage } from './ordinary-pending-package.js';
+import { snapshotAsyncResults } from '../dispatch/async-lane.js';
+import { guardedInputSha256, sha256Hex } from '../report/run-header.js';
+import { MAX_REPORT_BYTES, readStable } from '../telemetry/recovery/files.js';
+import { serializeRecoveryDocument, writeExclusive } from '../evidence/original-run/journal.js';
+import { syncNativeDirectory, writeNativeStateExclusive } from './native-lock.js';
+// Leave room for the recovery package's retained-async descriptors beneath
+// the shared recovery reader ceiling (25 MiB). Apply this before any claim.
+const MAX_RETAINED_INPUT_BYTES = 20 * 1024 * 1024;
+function retainedInputsPath(options) {
+    const namespace = sha256Hex(JSON.stringify([options.target, options.cycleId ?? null]));
+    return join(options.gitCommonDir, 'rcl-ordinary-inputs', `${namespace}-attempt-${options.attempt}-${options.packetSha256}.json`);
+}
+function retainedInputs(options) {
+    return { version: 1, target: options.target, headSha: options.headSha, baseSha: options.baseSha,
+        attempt: options.attempt, round: options.round, ...(options.cycleId ? { cycleId: options.cycleId } : {}),
+        inputSha256: guardedInputSha256(options.guardedInput), guardedInput: options.guardedInput };
+}
+/** Called under native target ownership before spending the claim or dispatching. */
+export async function retainOrdinaryLaunchInputs(options) {
+    const common = await realpath(options.gitCommonDir);
+    const packet = retainedInputs(options);
+    const bytes = serializeRecoveryDocument(packet, MAX_RETAINED_INPUT_BYTES);
+    const descriptors = options.asyncDescriptors ?? [];
+    // Recovery repeats the async reviewer identifiers alongside the guarded
+    // roster. Bound that actual envelope before claim, including its future
+    // fixed-length hashes and the largest permitted PID representation.
+    const projectedRecovery = {
+        target: options.target, headSha: options.headSha, baseSha: options.baseSha ?? 'f'.repeat(40),
+        attempt: options.attempt, round: options.round, pid: Number.MAX_SAFE_INTEGER,
+        retainedAsyncSha256: descriptors.map(() => 'f'.repeat(64)),
+        retainedAsync: descriptors.map(descriptor => ({ model: descriptor.model, role: descriptor.role,
+            provider: descriptor.provider, lane: 'async', sha256: 'f'.repeat(64) })),
+        guardedInput: options.guardedInput,
+    };
+    serializeRecoveryDocument(projectedRecovery, MAX_REPORT_BYTES);
+    const packetSha256 = sha256Hex(bytes);
+    // A preclaim crash leaves the ordinal unspent. Include the full packet so
+    // a changed base (which the guarded-input digest omits) gets its own file.
+    const path = retainedInputsPath({ ...options, gitCommonDir: common, packetSha256 });
+    const directory = dirname(path);
+    await mkdir(directory, { mode: 0o700 }).catch(error => {
+        if (error.code !== 'EEXIST')
+            throw error;
+    });
+    const info = await lstat(directory);
+    const uid = process.geteuid?.();
+    if (!info.isDirectory() || info.isSymbolicLink() || await realpath(directory) !== directory ||
+        (process.platform !== 'win32' && (uid === undefined || info.uid !== uid || (info.mode & 0o077) !== 0))) {
+        throw new Error('ordinary_retained_input_directory_unsafe');
+    }
+    // Only complete, fsynced bytes become a final capture. Interrupted staging
+    // files remain private evidence and do not reserve the immutable final name.
+    const temporary = `${path}.${randomUUID()}.pending`;
+    await writeNativeStateExclusive(temporary, packet);
+    try {
+        await link(temporary, path);
+    }
+    catch (error) {
+        if (error.code !== 'EEXIST')
+            throw error;
+        if ((await readStable(path, MAX_RETAINED_INPUT_BYTES, { allowMissingSafeFlagsOnWindows: true })).text !== bytes) {
+            throw new Error('ordinary_retained_input_mismatch');
+        }
+        await readStable(path, MAX_RETAINED_INPUT_BYTES, { sync: true, allowMissingSafeFlagsOnWindows: true });
+    }
+    await syncNativeDirectory(directory);
+    await unlink(temporary);
+    await syncNativeDirectory(directory);
+    await syncNativeDirectory(common);
+    return { path, sha256: packetSha256, baseSha: options.baseSha };
+}
+function refuse(reason) { throw new Error(`pending_export_${reason}`); }
+function ownerAlive(pid) {
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch (error) {
+        return error.code !== 'ESRCH';
+    }
+}
+/**
+ * Authenticate reconstructed ordinary inputs without locks, claims or native writes.
+ * Historical launch digests did not include base: the receipt explicitly limits
+ * that assertion to the caller's expected and currently resolved review target.
+ * Async bytes are supplemental history, never durable blocking-call receipts.
+ */
+export async function exportOrdinaryPendingPackage(options) {
+    if (!/^[a-f0-9]{40}$/.test(options.baseSha) || options.baseSha !== options.expectedBaseSha)
+        refuse('base_mismatch');
+    const common = await realpath(options.gitCommonDir);
+    const outputPath = resolve(options.path);
+    const outputParent = await realpath(dirname(outputPath));
+    const fromCommon = relative(common, outputParent);
+    if (fromCommon === '' || (fromCommon !== '..' && !fromCommon.startsWith(`..${sep}`)))
+        refuse('native_output_path');
+    const nativePath = convergeRunStatePath(common, options.target);
+    const attemptPath = convergeAttemptStatePath(common, options.target);
+    const [nativeBefore, attemptsBefore] = await Promise.all([readStable(nativePath), readStable(attemptPath)]);
+    const [state, attempts] = await Promise.all([
+        loadConvergeRunState(common, options.target), loadConvergeAttemptState(common, options.target),
+    ]);
+    if (!state?.lastLaunch || !attempts || state.cycle || attempts.cycle)
+        refuse('ordinary_launch_required');
+    const launch = launchSchema.parse(state.lastLaunch);
+    const record = attempts.attempts.find(item => item.attempt === launch.attempt);
+    if (launch.status !== 'pending' || launch.pendingResume || launch.retainedOriginal || launch.recovery ||
+        launch.pendingRecovery || !record || record.pid !== launch.pid || record.retrySource ||
+        record.boundFixRecoverySource || record.pendingRecoverySource ||
+        launch.attempt !== attempts.attemptsUsed || launch.headSha !== options.headSha ||
+        (options.expectedRound !== undefined && launch.round !== options.expectedRound) ||
+        launch.inputSha256 !== guardedInputSha256(options.guardedInput))
+        refuse('input_mismatch');
+    if (ownerAlive(launch.pid))
+        refuse('owner_alive');
+    // Only a native marker proves which full packet preceded this claim.
+    // Unmarked historical launches retain their explicit current-base limitation,
+    // even if abandoned preclaim packets happen to exist in the capture directory.
+    const binding = launch.ordinaryInputs;
+    if (binding && binding.baseSha !== options.baseSha)
+        refuse('retained_base_mismatch');
+    const retainedPath = binding ? retainedInputsPath({ gitCommonDir: common, target: options.target,
+        attempt: launch.attempt, packetSha256: binding.packetSha256 }) : undefined;
+    const retainedBefore = retainedPath ? await readStable(retainedPath, MAX_RETAINED_INPUT_BYTES) : undefined;
+    if (binding && (!retainedBefore || retainedBefore.sha256 !== binding.packetSha256 ||
+        retainedBefore.text !== serializeRecoveryDocument(retainedInputs({
+            gitCommonDir: common, target: options.target, headSha: launch.headSha, baseSha: options.baseSha,
+            attempt: launch.attempt, round: launch.round, guardedInput: options.guardedInput,
+        }), MAX_RETAINED_INPUT_BYTES)))
+        refuse('retained_input_mismatch');
+    const snapshot = await snapshotAsyncResults(options.asyncStoreDir, options.asyncTargetKey);
+    const identity = (item) => JSON.stringify([item.model, item.role, item.provider]);
+    const expected = options.asyncDescriptors.map(identity).sort();
+    const actual = snapshot.reviews.map(identity).sort();
+    if (expected.length !== actual.length || expected.some((item, index) => item !== actual[index]))
+        refuse('async_identity_mismatch');
+    const retainedAsync = snapshot.reviews.map((review, index) => ({
+        sha256: snapshot.artifacts[index].sha256, model: review.model, role: review.role,
+        provider: review.provider, lane: 'async',
+    }));
+    const retainedAsyncSha256 = retainedAsync.map(item => item.sha256).sort();
+    const candidate = { target: options.target, headSha: launch.headSha,
+        baseSha: options.baseSha, attempt: launch.attempt, round: launch.round, pid: launch.pid,
+        retainedAsyncSha256, retainedAsync, guardedInput: options.guardedInput };
+    // Canonical JSON drops undefined optional properties exactly as the original
+    // guarded-input hash did; it never adds an artificial null spec binding.
+    const packet = validateOrdinaryPendingPackage(JSON.parse(JSON.stringify(candidate)), { ...candidate, inputSha256: launch.inputSha256 });
+    const [nativeAfter, attemptsAfter, asyncAfter] = await Promise.all([
+        readStable(nativePath), readStable(attemptPath),
+        snapshotAsyncResults(options.asyncStoreDir, options.asyncTargetKey, [], retainedAsyncSha256),
+    ]);
+    if (nativeAfter.sha256 !== nativeBefore.sha256 || attemptsAfter.sha256 !== attemptsBefore.sha256 ||
+        asyncAfter.artifacts.some((item, index) => item.path !== snapshot.artifacts[index]?.path) || ownerAlive(launch.pid))
+        refuse('state_changed');
+    if (retainedBefore && (await readStable(retainedPath, MAX_RETAINED_INPUT_BYTES)).sha256 !== retainedBefore.sha256)
+        refuse('state_changed');
+    const bytes = serializeRecoveryDocument(packet, MAX_REPORT_BYTES);
+    if (!options.preview)
+        await writeExclusive(outputPath, packet, MAX_REPORT_BYTES);
+    return { mode: options.preview ? 'pending-package-preview' : 'pending-package-export', path: outputPath,
+        packageSha256: sha256Hex(bytes), target: options.target, headSha: launch.headSha, baseSha: options.baseSha,
+        baseBinding: retainedBefore ? 'retained-launch-inputs' : 'current-review-target', blockingOutcome: 'unknown',
+        asyncBinding: 'retained-bytes-and-reviewer-identity', inputSha256: launch.inputSha256,
+        attempt: launch.attempt, round: launch.round, pid: launch.pid, attemptsUsed: attempts.attemptsUsed,
+        cap: attempts.cap, nativeStateSha256: nativeBefore.sha256, attemptStateSha256: attemptsBefore.sha256,
+        retainedAsyncSha256 };
+}
+//# sourceMappingURL=ordinary-pending-export.js.map

package/dist/converge/ordinary-pending-export.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ordinary-pending-export.js","sourceRoot":"","sources":["../../src/converge/ordinary-pending-export.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACxE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAClE,OAAO,EAAE,wBAAwB,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AACzF,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAC5E,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,8BAA8B,EAA+B,MAAM,+BAA+B,CAAC;AAC5G,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACxE,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AAC9E,OAAO,EAAE,yBAAyB,EAAE,cAAc,EAAE,MAAM,qCAAqC,CAAC;AAChG,OAAO,EAAE,mBAAmB,EAAE,yBAAyB,EAAE,MAAM,kBAAkB,CAAC;AAElF,2EAA2E;AAC3E,4EAA4E;AAC5E,MAAM,wBAAwB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAclD,SAAS,kBAAkB,CAAC,OAAiH;IAC3I,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;IACvF,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,qBAAqB,EAAE,GAAG,SAAS,YAAY,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,YAAY,OAAO,CAAC,CAAC;AACnI,CAAC;AAED,SAAS,cAAc,CAAC,OAA6B;IACnD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO;QAC7F,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxG,WAAW,EAAE,kBAAkB,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC;AAChG,CAAC;AAQD,qFAAqF;AACrF,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,OAA6B;IAC5E,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,yBAAyB,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC;IAC1E,MAAM,WAAW,GAAG,OAAO,CAAC,gBAAgB,IAAI,EAAE,CAAC;IACnD,wEAAwE;IACxE,wEAAwE;IACxE,oEAAoE;IACpE,MAAM,iBAAiB,GAA2B;QAChD,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5F,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,gBAAgB;QAC5E,mBAAmB,EAAE,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC1D,aAAa,EAAE,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI;YAC5F,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAC1E,YAAY,EAAE,OAAO,CAAC,YAAY;KACnC,CAAC;IACF,yBAAyB,CAAC,iBAAiB,EAAE,gBAAgB,CAAC,CAAC;IAE/D,MAAM,YAAY,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IACtC,0EAA0E;IAC1E,2EAA2E;IAC3E,MAAM,IAAI,GAAG,kBAAkB,CAAC,EAAE,GAAG,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;IACpF,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;QACpD,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;IACtE,CAAC,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;IAChC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,MAAM,QAAQ,CAAC,SAAS,CAAC,KAAK,SAAS;QACvF,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,GAAG,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3G,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,2EAA2E;IAC3E,6EAA6E;IAC7E,MAAM,SAAS,GAAG,GAAG,IAAI,IAAI,UAAU,EAAE,UAAU,CAAC;IACpD,MAAM,yBAAyB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACnD,IAAI,CAAC;QAAC,MAAM,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAAC,CAAC;IACpC,OAAO,KAAK,EAAE,CAAC;QACb,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;QACpE,IAAI,CAAC,MAAM,UAAU,CAAC,IAAI,EAAE,wBAAwB,EAAE,EAAE,8BAA8B,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YAChH,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACtD,CAAC;QACD,MAAM,UAAU,CAAC,IAAI,EAAE,wBAAwB,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,8BAA8B,EAAE,IAAI,EAAE,CAAC,CAAC;IACzG,CAAC;IACD,MAAM,mBAAmB,CAAC,SAAS,CAAC,CAAC;IACrC,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;IACxB,MAAM,mBAAmB,CAAC,SAAS,CAAC,CAAC;IACrC,MAAM,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAClC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;AAClE,CAAC;AAiBD,SAAS,MAAM,CAAC,MAAc,IAAW,MAAM,IAAI,KAAK,CAAC,kBAAkB,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;AACvF,SAAS,UAAU,CAAC,GAAW;IAC7B,IAAI,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IAC1C,OAAO,KAAK,EAAE,CAAC;QAAC,OAAQ,KAA+B,CAAC,IAAI,KAAK,OAAO,CAAC;IAAC,CAAC;AAC7E,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,OAAqC;IACtF,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,OAAO,KAAK,OAAO,CAAC,eAAe;QAAE,MAAM,CAAC,eAAe,CAAC,CAAC;IACpH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACpD,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;IACzD,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IAClD,IAAI,UAAU,KAAK,EAAE,IAAI,CAAC,UAAU,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC;QAAE,MAAM,CAAC,oBAAoB,CAAC,CAAC;IACnH,MAAM,UAAU,GAAG,oBAAoB,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAChE,MAAM,WAAW,GAAG,wBAAwB,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACrE,MAAM,CAAC,YAAY,EAAE,cAAc,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAC5G,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC1C,oBAAoB,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,wBAAwB,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC;KAC/F,CAAC,CAAC;IACH,IAAI,CAAC,KAAK,EAAE,UAAU,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC,KAAK,IAAI,QAAQ,CAAC,KAAK;QAAE,MAAM,CAAC,0BAA0B,CAAC,CAAC;IACzG,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,CAAC,CAAC;IAC/E,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,aAAa,IAAI,MAAM,CAAC,gBAAgB,IAAI,MAAM,CAAC,QAAQ;QACjG,MAAM,CAAC,eAAe,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,WAAW;QACpF,MAAM,CAAC,sBAAsB,IAAI,MAAM,CAAC,qBAAqB;QAC7D,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,YAAY,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO;QAC9E,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,KAAK,OAAO,CAAC,aAAa,CAAC;QAC/E,MAAM,CAAC,WAAW,KAAK,kBAAkB,CAAC,OAAO,CAAC,YAAY,CAAC;QAAE,MAAM,CAAC,gBAAgB,CAAC,CAAC;IAC9F,IAAI,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC;QAAE,MAAM,CAAC,aAAa,CAAC,CAAC;IAClD,qEAAqE;IACrE,8EAA8E;IAC9E,+EAA+E;IAC/E,MAAM,OAAO,GAAG,MAAM,CAAC,cAAc,CAAC;IACtC,IAAI,OAAO,IAAI,OAAO,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO;QAAE,MAAM,CAAC,wBAAwB,CAAC,CAAC;IACrF,MAAM,YAAY,GAAG,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM;QAC9F,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7E,MAAM,cAAc,GAAG,YAAY,CAAC,CAAC,CAAC,MAAM,UAAU,CAAC,YAAY,EAAE,wBAAwB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3G,IAAI,OAAO,IAAI,CAAC,CAAC,cAAc,IAAI,cAAc,CAAC,MAAM,KAAK,OAAO,CAAC,YAAY;QAC7E,cAAc,CAAC,IAAI,KAAK,yBAAyB,CAAC,cAAc,CAAC;YAC/D,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO;YAC/F,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY;SACjF,CAAC,EAAE,wBAAwB,CAAC,CAAC;QAAE,MAAM,CAAC,yBAAyB,CAAC,CAAC;IAEtE,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,OAAO,CAAC,aAAa,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IAC3F,MAAM,QAAQ,GAAG,CAAC,IAAwD,EAAE,EAAE,CAC5E,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IACzD,MAAM,QAAQ,GAAG,OAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/D,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;IACrD,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,KAAK,MAAM,CAAC,KAAK,CAAC,CAAC;QAAE,MAAM,CAAC,yBAAyB,CAAC,CAAC;IACnI,MAAM,aAAa,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QAC7D,MAAM,EAAE,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAE,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI;QACjF,QAAQ,EAAE,MAAM,CAAC,QAAS,EAAE,IAAI,EAAE,OAAgB;KACnD,CAAC,CAAC,CAAC;IACJ,MAAM,mBAAmB,GAAG,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1E,MAAM,SAAS,GAA2B,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO;QACzF,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG;QACvF,mBAAmB,EAAE,aAAa,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC;IAC3E,6EAA6E;IAC7E,yEAAyE;IACzE,MAAM,MAAM,GAAG,8BAA8B,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAA2B,EAC3G,EAAE,GAAG,SAAS,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;IACrD,MAAM,CAAC,WAAW,EAAE,aAAa,EAAE,UAAU,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACjE,UAAU,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC,WAAW,CAAC;QAC/C,oBAAoB,CAAC,OAAO,CAAC,aAAa,EAAE,OAAO,CAAC,cAAc,EAAE,EAAE,EAAE,mBAAmB,CAAC;KAC7F,CAAC,CAAC;IACH,IAAI,WAAW,CAAC,MAAM,KAAK,YAAY,CAAC,MAAM,IAAI,aAAa,CAAC,MAAM,KAAK,cAAc,CAAC,MAAM;QAC5F,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC;QAAE,MAAM,CAAC,eAAe,CAAC,CAAC;IACjJ,IAAI,cAAc,IAAI,CAAC,MAAM,UAAU,CAAC,YAAa,EAAE,wBAAwB,CAAC,CAAC,CAAC,MAAM,KAAK,cAAc,CAAC,MAAM;QAAE,MAAM,CAAC,eAAe,CAAC,CAAC;IAC5I,MAAM,KAAK,GAAG,yBAAyB,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAClE,IAAI,CAAC,OAAO,CAAC,OAAO;QAAE,MAAM,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC;IACjF,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,wBAAwB,EAAE,IAAI,EAAE,UAAU;QACrG,aAAa,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO;QAC1G,WAAW,EAAE,cAAc,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,uBAAuB,EAAE,eAAe,EAAE,SAAS;QAC5G,YAAY,EAAE,sCAAsC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW;QACrF,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY;QAClG,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,iBAAiB,EAAE,YAAY,CAAC,MAAM,EAAE,kBAAkB,EAAE,cAAc,CAAC,MAAM;QACpG,mBAAmB,EAAE,CAAC;AAC1B,CAAC"}

package/dist/converge/ordinary-pending-package.d.ts

@@ -0,0 +1,28 @@
+export interface OrdinaryPendingPackage {
+    target: string;
+    headSha: string;
+    baseSha: string;
+    attempt: number;
+    round: number;
+    pid: number;
+    retainedAsyncSha256: string[];
+    retainedAsync: {
+        sha256: string;
+        model: string;
+        role: string;
+        provider: string;
+        lane: 'async';
+    }[];
+    guardedInput: Record<string, unknown>;
+}
+export interface PendingLaunchIdentity {
+    target: string;
+    headSha: string;
+    inputSha256: string;
+    baseSha: string;
+    attempt: number;
+    round: number;
+    pid: number;
+    retainedAsyncSha256: readonly string[];
+}
+export declare function validateOrdinaryPendingPackage(value: OrdinaryPendingPackage, expected: PendingLaunchIdentity): OrdinaryPendingPackage;

package/dist/converge/ordinary-pending-package.js

@@ -0,0 +1,36 @@
+import { guardedInputSha256, stableStringify } from '../report/run-header.js';
+export function validateOrdinaryPendingPackage(value, expected) {
+    const input = value?.guardedInput;
+    const specPresent = !!input && Object.hasOwn(input, 'spec');
+    const keys = ['asyncRoles', 'config', 'diff', 'head', 'kind', 'pr', 'prompts', 'repo', 'roster',
+        ...(specPresent ? ['spec'] : [])];
+    const digest = (candidate) => typeof candidate === 'string' && /^[a-f0-9]{64}$/.test(candidate);
+    const structuredInput = input && (input.kind === 'patch' || input.kind === 'pr') && typeof input.repo === 'string' && /^[^/\s]+\/[^/\s]+$/.test(input.repo) &&
+        Number.isSafeInteger(input.pr) && input.pr > 0 && digest(input.diff) && digest(input.config) &&
+        Array.isArray(input.roster) && Array.isArray(input.prompts) && Array.isArray(input.asyncRoles) &&
+        input.roster.every(item => item && typeof item === 'object') &&
+        input.prompts.every(item => item && typeof item === 'object') &&
+        input.asyncRoles.every(item => {
+            const role = item;
+            return item && typeof item === 'object' && typeof role.name === 'string' && role.name.length > 0;
+        }) &&
+        (!specPresent || (input.spec && typeof input.spec === 'object'));
+    if (!value || value.target !== expected.target || value.headSha !== expected.headSha || value.baseSha !== expected.baseSha || value.attempt !== expected.attempt || value.round !== expected.round || value.pid !== expected.pid || !/^[a-f0-9]{40}$/.test(value.baseSha) ||
+        !Number.isSafeInteger(value.attempt) || value.attempt < 1 || !Number.isSafeInteger(value.round) || value.round < 1 ||
+        !Number.isSafeInteger(value.pid) || value.pid < 1 || !input || Object.keys(input).sort().join(',') !== keys.join(',') ||
+        !Array.isArray(value.retainedAsyncSha256) || [...value.retainedAsyncSha256].sort().join(',') !== [...expected.retainedAsyncSha256].sort().join(',') || input.head !== value.headSha || guardedInputSha256(input) !== expected.inputSha256)
+        throw new Error('ordinary_pending_package_mismatch');
+    if (!structuredInput || !/^[a-f0-9]{40}$/.test(value.headSha) || !new Set(value.retainedAsyncSha256).size ||
+        new Set(value.retainedAsyncSha256).size !== value.retainedAsyncSha256.length ||
+        value.retainedAsyncSha256.some(hash => !digest(hash)) || !Array.isArray(value.retainedAsync) ||
+        value.retainedAsync.length !== value.retainedAsyncSha256.length ||
+        new Set(value.retainedAsync.map(item => item?.sha256)).size !== value.retainedAsync.length ||
+        value.retainedAsync.some(item => !item || !digest(item.sha256) || !value.retainedAsyncSha256.includes(item.sha256) ||
+            typeof item.model !== 'string' || !item.model || typeof item.role !== 'string' || !item.role ||
+            typeof item.provider !== 'string' || !item.provider || item.lane !== 'async' ||
+            !input.roster.some(seat => seat?.model === item.model &&
+                seat.role === item.role && seat.provider === item.provider && seat.lane === 'async')))
+        throw new Error('ordinary_pending_package_mismatch');
+    return Object.freeze(JSON.parse(stableStringify(value)));
+}
+//# sourceMappingURL=ordinary-pending-package.js.map

package/dist/converge/ordinary-pending-package.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ordinary-pending-package.js","sourceRoot":"","sources":["../../src/converge/ordinary-pending-package.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAK9E,MAAM,UAAU,8BAA8B,CAAC,KAA6B,EAAE,QAA+B;IAC3G,MAAM,KAAK,GAAG,KAAK,EAAE,YAAY,CAAC;IAClC,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC5D,MAAM,IAAI,GAAG,CAAC,YAAY,EAAC,QAAQ,EAAC,MAAM,EAAC,MAAM,EAAC,MAAM,EAAC,IAAI,EAAC,SAAS,EAAC,MAAM,EAAC,QAAQ;QACrF,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,CAAC,SAAkB,EAAuB,EAAE,CAAC,OAAO,SAAS,KAAK,QAAQ,IAAI,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC9H,MAAM,eAAe,GAAG,KAAK,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;QACzJ,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,IAAK,KAAK,CAAC,EAAa,GAAG,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;QACxG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC;QAC9F,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC;QAC5D,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC;QAC7D,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE;YAC5B,MAAM,IAAI,GAAG,IAA+B,CAAC;YAC7C,OAAO,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;QACnG,CAAC,CAAC;QACF,CAAC,CAAC,WAAW,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC;IACnE,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,IAAI,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC,KAAK,IAAI,KAAK,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;QACvQ,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,GAAG,CAAC;QAClH,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;QACrH,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,mBAAmB,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,mBAAmB,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,QAAQ,CAAC,mBAAmB,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,IAAI,kBAAkB,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IAClS,IAAI,CAAC,eAAe,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,IAAI;QACrG,IAAI,GAAG,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,mBAAmB,CAAC,MAAM;QAC5E,KAAK,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC;QAC5F,KAAK,CAAC,aAAa,CAAC,MAAM,KAAK,KAAK,CAAC,mBAAmB,CAAC,MAAM;QAC/D,IAAI,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,aAAa,CAAC,MAAM;QAC1F,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC9B,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC;YACjF,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI;YAC5F,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO;YAC5E,CAAE,KAAK,CAAC,MAAoC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,KAAK,IAAI,CAAC,KAAK;gBAClF,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACpJ,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,KAAK,CAAC,CAA2B,CAAC,CAAC;AACrF,CAAC"}

package/dist/converge/pending-legacy-resume.d.ts

@@ -0,0 +1,119 @@
+import { z } from 'zod';
+import { type LegacyRetrySelection } from './legacy-launch-health.js';
+import { type GuardedLaunchCompletion } from './launch-record.js';
+import { writeState } from './run-state.js';
+import { type ConvergeAttemptClaim } from './attempt-budget.js';
+import { type NativeTargetOwnership } from './target-ownership.js';
+import { type OriginalLaunch } from '../dispatch/original-launch.js';
+import type { CapturedPreparedCouncil } from '../dispatch/capture-council.js';
+import type { CheckpointJournal } from '../dispatch/checkpoint.js';
+import type { AsyncResultReference } from '../dispatch/async-lane.js';
+import { type PendingRecoverySource } from './pending-recovery-source.js';
+import { type OrdinaryPendingPackage } from './ordinary-pending-package.js';
+export interface PendingLegacyResumeExecution {
+    context: {
+        target: string;
+        attempt: number;
+        round: number;
+    };
+    claim: ConvergeAttemptClaim;
+    ownership: NativeTargetOwnership;
+    journal: CheckpointJournal;
+    launch: OriginalLaunch;
+    skipAsyncLaunch: true;
+}
+export interface PendingLegacyResumeOptions {
+    gitCommonDir: string;
+    target: string;
+    headSha: string;
+    baseSha?: string;
+    pendingInputSha256: string;
+    recoveryInputSha256: string;
+    retryReason: string;
+    legacyRetry?: LegacyRetrySelection;
+    captured: CapturedPreparedCouncil;
+    retainedAsyncSha256: readonly string[];
+    maxAttempts: number;
+    maxPhysicalCalls: number;
+    maxAttemptsPerCell: number;
+    maxDurationMs: number;
+    validate: () => Promise<void>;
+    run: (execution: PendingLegacyResumeExecution) => Promise<GuardedLaunchCompletion>;
+    nowMs?: () => number;
+    ownerAlive?: (pid: number) => boolean;
+    loadRetainedAsync: () => Promise<AsyncResultReference[]>;
+    /** Required for recovering an ordinary dead-owner launch without a legacy report. */
+    migrationPackage?: OrdinaryPendingPackage;
+    preview?: boolean;
+    previewMode?: 'combined' | 'finalize-only';
+}
+export interface PendingLegacyResumeResult {
+    claim: ConvergeAttemptClaim;
+    completion: GuardedLaunchCompletion;
+    reusedCompletion: boolean;
+}
+export interface OrdinaryPendingPreview {
+    source: PendingRecoverySource;
+    nativeStateSha256: string;
+    attemptStateSha256: string;
+    attemptsUsed: number;
+    cap: number;
+    nextAttempt: number;
+}
+export interface OrdinaryPendingFinalizeOptions {
+    gitCommonDir: string;
+    target: string;
+    headSha: string;
+    baseSha: string;
+    pendingInputSha256: string;
+    nativeStateSha256: string;
+    attemptStateSha256: string;
+    retainedAsyncSha256: readonly string[];
+    maxAttempts: number;
+    migrationPackage: OrdinaryPendingPackage;
+    ownerAlive?: (pid: number) => boolean;
+    loadRetainedAsync: () => Promise<AsyncResultReference[]>;
+    /** Fault-injection boundary for proving archive-complete/native-write recovery. */
+    writeFinalizedState?: typeof writeState;
+}
+declare const ordinaryPendingFinalizationReceiptSchema: z.ZodObject<{
+    version: z.ZodLiteral<1>;
+    operation: z.ZodLiteral<"ordinary-pending-finalize-only">;
+    target: z.ZodString;
+    headSha: z.ZodString;
+    baseSha: z.ZodString;
+    inputSha256: z.ZodString;
+    sourceDigest: z.ZodString;
+    migrationPackageSha256: z.ZodString;
+    finalizedAttempt: z.ZodNumber;
+    round: z.ZodNumber;
+    originalPid: z.ZodNumber;
+    attemptsUsed: z.ZodNumber;
+    cap: z.ZodNumber;
+    nextFreeAttempt: z.ZodNumber;
+    blockingOutcome: z.ZodLiteral<"unknown">;
+    retainedAsyncSha256: z.ZodArray<z.ZodString>;
+    sourceNativeStateSha256: z.ZodString;
+    sourceAttemptStateSha256: z.ZodString;
+    finalizedNativeStateSha256: z.ZodString;
+    receiptDigest: z.ZodString;
+}, z.core.$strict>;
+export type OrdinaryPendingFinalizationReceipt = z.infer<typeof ordinaryPendingFinalizationReceiptSchema>;
+export interface OrdinaryPendingFinalizeResult {
+    receipt: OrdinaryPendingFinalizationReceipt;
+    reusedReceipt: boolean;
+    snapshotBindingUpgraded: boolean;
+}
+/** Finalize one authenticated ordinary pending launch without claiming or dispatching its successor. */
+export declare function finalizeOrdinaryPendingLaunch(input: OrdinaryPendingFinalizeOptions): Promise<OrdinaryPendingFinalizeResult>;
+/** Authenticate an ordinary dead-owner recovery under its target lock without mutating native state. */
+export declare function previewOrdinaryPendingLaunch(input: PendingLegacyResumeOptions): Promise<OrdinaryPendingPreview>;
+/** Finalize unknown A34 evidence, then claim one fresh checkpointed A35. */
+export declare function resumePendingLegacyLaunch(input: PendingLegacyResumeOptions & {
+    preview: true;
+}): Promise<OrdinaryPendingPreview>;
+export declare function resumePendingLegacyLaunch(input: PendingLegacyResumeOptions & {
+    preview?: false;
+}): Promise<PendingLegacyResumeResult>;
+export declare function resumePendingLegacyLaunch(input: PendingLegacyResumeOptions): Promise<PendingLegacyResumeResult | OrdinaryPendingPreview>;
+export {};