@allocator-one/rcl 4.4.19

package/dist/converge/retained-report.js

@@ -0,0 +1,218 @@
+import { z } from 'zod';
+import { CheckpointJournal, checkpointPath, exportCheckpointProof, requireReviewerLaneBinding } from '../dispatch/checkpoint.js';
+import { decodeOriginalReport } from '../evidence/original-run/decode.js';
+import { loadReviewerLineage } from '../evidence/reviewer-lineage.js';
+import { inspectReviewerArtifact } from '../report/reviewer-artifact.js';
+import { sha256Hex, stableStringify } from '../report/run-header.js';
+import { MAX_ARTIFACT_BYTES } from '../telemetry/envelope-validation.js';
+import { originalRunReportSchema } from '../telemetry/recovery/source.js';
+import { loadConvergeAttemptState } from './attempt-budget.js';
+import { loadConvergeRunState, processRoundReport } from './run-state.js';
+import { ownedNativeTargetCommonDir, withNativeTarget, withOwnedNativeOperation } from './target-ownership.js';
+async function assertRetainedVerification(journal, inspected) {
+    const phase = await journal.readVerification();
+    if ((phase !== undefined) !== (inspected.verificationProof !== undefined))
+        throw new Error('retained_report_verification_mismatch');
+    if (phase !== undefined) {
+        const proof = await journal.exportVerificationProof();
+        if (proof.bytes !== inspected.verificationProof.bytes || proof.digest !== inspected.verificationProof.digest) {
+            throw new Error('retained_report_verification_mismatch');
+        }
+    }
+}
+/** Retained-mode guard binding; legacy launch input hashing is unchanged. */
+export function retainedLaunchInputSha256(capturedInputsSha256, run) {
+    if (!/^[a-f0-9]{64}$/.test(capturedInputsSha256))
+        throw new Error('retained_report_invalid_capture_digest');
+    return sha256Hex(stableStringify({ version: 1, kind: 'retained-review-launch', capturedInputsSha256,
+        target: run.target, roster: run.roster, ...(run.spec === undefined ? {} : { spec: run.spec }) }));
+}
+/** Route proof-bearing intake from the owned journal, never a caller's health or kind claim. */
+export async function processReviewerRoundReport(input) {
+    const options = { ...input, target: input.target.trim() };
+    if (!options.target || !Number.isSafeInteger(options.round) || options.round < 1 ||
+        !/^[a-f0-9]{40}$/.test(options.currentHeadSha) || typeof options.reportBytes !== 'string' ||
+        Buffer.byteLength(options.reportBytes, 'utf8') > MAX_ARTIFACT_BYTES)
+        throw new Error('retained_report_invalid_input');
+    const decoded = decodeOriginalReport(options.reportBytes);
+    if (decoded.transformations.length)
+        throw new Error('retained_report_unsupported_representation');
+    const runId = z.object({ run: z.object({ id: z.uuid() }) }).parse(decoded.value).run.id;
+    const processOwned = async (ownership) => {
+        const commonDir = await ownedNativeTargetCommonDir(ownership, options.gitCommonDir, options.target);
+        const journal = await CheckpointJournal.inspectRead(checkpointPath(commonDir, options.target, runId));
+        const bindings = await journal.readBindings();
+        const process = bindings.source !== undefined || bindings.operation !== undefined
+            ? processSupplementedRoundReport : processRetainedRoundReport;
+        return process({ ...options, gitCommonDir: commonDir, ownership });
+    };
+    return options.ownership
+        ? withOwnedNativeOperation(options.ownership, options.gitCommonDir, options.target, processOwned)
+        : withNativeTarget(options.gitCommonDir, options.target, processOwned);
+}
+/**
+ * Admit only the completed original guarded launch, under the same native
+ * ownership used for validation. Serialized health/counters are comparison
+ * claims; the sealed local proof and spent native claim supply their evidence.
+ * Successor admission and verifier authority remain unsupported here.
+ */
+export async function processRetainedRoundReport(input) {
+    const options = { ...input, target: input.target.trim() };
+    if (!options.target || !Number.isSafeInteger(options.round) || options.round < 1 ||
+        !/^[a-f0-9]{40}$/.test(options.currentHeadSha) || typeof options.reportBytes !== 'string' ||
+        Buffer.byteLength(options.reportBytes, 'utf8') > MAX_ARTIFACT_BYTES)
+        throw new Error('retained_report_invalid_input');
+    const decoded = decodeOriginalReport(options.reportBytes);
+    if (decoded.transformations.length)
+        throw new Error('retained_report_unsupported_representation');
+    const runId = z.object({ run: z.object({ id: z.uuid() }) }).parse(decoded.value).run.id;
+    const processOwned = async (ownership) => {
+        const commonDir = await ownedNativeTargetCommonDir(ownership, options.gitCommonDir, options.target);
+        const journal = await CheckpointJournal.inspectRead(checkpointPath(commonDir, options.target, runId));
+        const plan = journal.getPlan(), bindings = await journal.readBindings();
+        requireReviewerLaneBinding(plan);
+        if (bindings.source !== undefined || bindings.operation !== undefined) {
+            throw new Error('retained_report_supplemented_authority_unsupported');
+        }
+        if (!(await journal.read()).finalized)
+            throw new Error('retained_report_unsealed_checkpoint');
+        const terminal = await journal.readTerminalReport();
+        if (!terminal)
+            throw new Error('retained_report_missing_terminal');
+        if (terminal.reportBytes !== options.reportBytes || terminal.reportSha256 !== sha256Hex(options.reportBytes)) {
+            throw new Error('retained_report_terminal_mismatch');
+        }
+        const inspected = inspectReviewerArtifact(terminal.reviewerArtifactBytes, {
+            expectedReportBytes: options.reportBytes, expectedRunId: runId, expectedTarget: options.target, expectedPlan: plan,
+        });
+        await assertRetainedVerification(journal, inspected);
+        const proof = await exportCheckpointProof(journal);
+        if (proof.digest !== inspected.proof.digest || proof.bytes !== inspected.proof.bytes ||
+            inspected.assembly.projection.proofs.length !== 1)
+            throw new Error('retained_report_checkpoint_mismatch');
+        if (inspected.descriptor.kind !== 'original' || !inspected.launch)
+            throw new Error('retained_report_original_launch_required');
+        if (options.currentHeadSha !== plan.headSha)
+            throw new Error('retained_report_head_mismatch');
+        const health = inspected.artifact.health;
+        if (!health.conclusive)
+            throw new Error('retained_report_inconclusive_health');
+        const [native, attempts] = await Promise.all([
+            loadConvergeRunState(commonDir, options.target), loadConvergeAttemptState(commonDir, options.target),
+        ]);
+        const launch = native?.lastLaunch, claim = inspected.launch.originalNativeClaim;
+        const spent = attempts?.attempts.find(item => item.attempt === claim.attempt);
+        const expectedHealth = { version: 1, policy: health.policy, successfulSeats: health.successfulSeats.length };
+        if (!launch || launch.retainedOriginal?.runId !== inspected.launch.runId ||
+            launch.retainedOriginal.planDigest !== plan.digest || launch.retainedOriginal.capturedInputsSha256 !== inspected.captured.digest ||
+            launch.status !== 'completed' || launch.runId !== runId || launch.headSha !== plan.headSha ||
+            launch.round !== options.round || launch.round !== claim.round || launch.attempt !== claim.attempt ||
+            launch.inputSha256 !== retainedLaunchInputSha256(inspected.captured.digest, inspected.assembly.run) ||
+            launch.reportJsonSha256 !== terminal.reportSha256 || launch.successfulReviews !== health.successfulSeats.length ||
+            launch.totalReviews !== health.policy.seatCount || stableStringify(launch.reviewerHealth) !== stableStringify(expectedHealth) ||
+            attempts?.attemptsUsed !== claim.attempt || !spent || spent.pid !== launch.pid) {
+            throw new Error('retained_report_native_launch_mismatch');
+        }
+        // Minority provider errors and pending server delivery do not change the
+        // derived complete-seat quorum. This operation admits locally only.
+        if (inspected.artifact.validation.gate.validation !== 'deterministic') {
+            throw new Error('retained_report_verifier_evidence_required');
+        }
+        // Shape validation does not replace the exact object or discard gating and
+        // modern report identities. The artifact already proved its entire body.
+        const report = originalRunReportSchema.parse(decoded.value);
+        const findings = decoded.value.findings;
+        return processRoundReport({ gitCommonDir: commonDir, target: options.target, round: options.round,
+            findings, runId, cycleId: report.run.cycle_id, reportSha256: terminal.reportSha256, maxRounds: options.maxRounds, ownership });
+    };
+    return options.ownership
+        ? withOwnedNativeOperation(options.ownership, options.gitCommonDir, options.target, processOwned)
+        : withNativeTarget(options.gitCommonDir, options.target, processOwned);
+}
+/**
+ * Admit a distinct successor from its complete sealed local ancestry. Reusing
+ * results does not waive a spent claim, admit an inconclusive round, validate a
+ * provider's refutation, or confer server/attested authority.
+ */
+export async function processSupplementedRoundReport(input) {
+    const options = { ...input, target: input.target.trim() };
+    if (!options.target || !Number.isSafeInteger(options.round) || options.round < 1 ||
+        !/^[a-f0-9]{40}$/.test(options.currentHeadSha) || typeof options.reportBytes !== 'string' ||
+        Buffer.byteLength(options.reportBytes, 'utf8') > MAX_ARTIFACT_BYTES)
+        throw new Error('supplemented_report_invalid_input');
+    const decoded = decodeOriginalReport(options.reportBytes);
+    if (decoded.transformations.length)
+        throw new Error('supplemented_report_unsupported_representation');
+    const runId = z.object({ run: z.object({ id: z.uuid() }) }).parse(decoded.value).run.id;
+    const processOwned = async (ownership) => {
+        const commonDir = await ownedNativeTargetCommonDir(ownership, options.gitCommonDir, options.target);
+        const lineage = await loadReviewerLineage({ commonDir, target: options.target, runId });
+        const { latest, plan, runs } = lineage;
+        requireReviewerLaneBinding(plan);
+        const inspected = latest.inspected, operation = inspected.operation;
+        await assertRetainedVerification(latest.journal, inspected);
+        if (runs.length < 2 || latest.kind !== 'successor' || !operation?.successorNativeClaim) {
+            throw new Error('supplemented_report_successor_required');
+        }
+        if (latest.terminal.reportBytes !== options.reportBytes || latest.terminal.reportSha256 !== sha256Hex(options.reportBytes)) {
+            throw new Error('supplemented_report_terminal_mismatch');
+        }
+        if (options.currentHeadSha !== plan.headSha)
+            throw new Error('supplemented_report_head_mismatch');
+        const health = inspected.artifact.health;
+        if (!health.conclusive)
+            throw new Error('supplemented_report_inconclusive_health');
+        if (inspected.artifact.validation.gate.validation !== 'deterministic') {
+            throw new Error('supplemented_report_verifier_evidence_required');
+        }
+        const [native, attempts] = await Promise.all([
+            loadConvergeRunState(commonDir, options.target), loadConvergeAttemptState(commonDir, options.target),
+        ]);
+        const launch = native?.lastLaunch, claim = operation.successorNativeClaim;
+        const rootClaim = runs[0].inspected.launch.originalNativeClaim;
+        const source = runs.at(-2), sourceClaim = source.inspected.nativeClaim;
+        const spent = attempts?.attempts.find(item => item.attempt === claim.attempt);
+        const expectedHealth = { version: 1, policy: health.policy, successfulSeats: health.successfulSeats.length };
+        let previousAttempt = rootClaim.attempt - 1;
+        for (const entry of runs) {
+            const ancestorClaim = entry.inspected.nativeClaim;
+            if (!ancestorClaim || ancestorClaim.round !== options.round ||
+                ancestorClaim.attempt !== previousAttempt + 1 ||
+                !attempts?.attempts.some(item => item.attempt === ancestorClaim.attempt)) {
+                throw new Error('supplemented_report_native_ancestry_mismatch');
+            }
+            previousAttempt = ancestorClaim.attempt;
+        }
+        if (!native || !launch || launch.status !== 'completed' || launch.runId !== runId ||
+            launch.headSha !== plan.headSha || launch.round !== options.round || launch.round !== claim.round ||
+            launch.attempt !== claim.attempt || attempts?.attemptsUsed !== claim.attempt || !spent || spent.pid !== launch.pid ||
+            launch.inputSha256 !== retainedLaunchInputSha256(inspected.captured.digest, inspected.assembly.run) ||
+            launch.reportJsonSha256 !== latest.terminal.reportSha256 ||
+            launch.successfulReviews !== health.successfulSeats.length || launch.totalReviews !== health.policy.seatCount ||
+            stableStringify(launch.reviewerHealth) !== stableStringify(expectedHealth) ||
+            launch.recovery?.operationId !== operation.operationId ||
+            launch.recovery?.sourceRunId !== source.runId ||
+            stableStringify(launch.recovery.originalNativeClaim) !== stableStringify(rootClaim) ||
+            stableStringify(launch.recovery.sourceNativeClaim) !== stableStringify({ attempt: sourceClaim.attempt, round: sourceClaim.round })) {
+            throw new Error('supplemented_report_native_launch_mismatch');
+        }
+        const existing = native.rounds.find(item => item.round === options.round);
+        if (existing && existing.runId !== runId)
+            throw new Error('supplemented_report_round_already_bound');
+        if (native.rounds.some(item => !Number.isSafeInteger(item.round) || item.round < 1)) {
+            throw new Error('supplemented_report_invalid_round_state');
+        }
+        const maxRecorded = native.rounds.reduce((last, item) => Math.max(last, item.round), 0);
+        if (existing ? maxRecorded !== options.round : maxRecorded + 1 !== options.round) {
+            throw new Error('supplemented_report_round_out_of_order');
+        }
+        const report = originalRunReportSchema.parse(decoded.value);
+        const findings = decoded.value.findings;
+        return processRoundReport({ gitCommonDir: commonDir, target: options.target, round: options.round,
+            findings, runId, cycleId: report.run.cycle_id, reportSha256: latest.terminal.reportSha256, maxRounds: options.maxRounds, ownership });
+    };
+    return options.ownership
+        ? withOwnedNativeOperation(options.ownership, options.gitCommonDir, options.target, processOwned)
+        : withNativeTarget(options.gitCommonDir, options.target, processOwned);
+}
+//# sourceMappingURL=retained-report.js.map

package/dist/converge/retained-report.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"retained-report.js","sourceRoot":"","sources":["../../src/converge/retained-report.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,qBAAqB,EAAE,0BAA0B,EAAE,MAAM,2BAA2B,CAAC;AACjI,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AACzE,OAAO,EAAE,SAAS,EAAE,eAAe,EAAuB,MAAM,yBAAyB,CAAC;AAC1F,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AACzE,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAC1E,OAAO,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAoB,MAAM,gBAAgB,CAAC;AAC5F,OAAO,EAAE,0BAA0B,EAAE,gBAAgB,EAAE,wBAAwB,EAA8B,MAAM,uBAAuB,CAAC;AAE3I,KAAK,UAAU,0BAA0B,CAAC,OAA0B,EAAE,SAA8D;IAClI,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAC/C,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,iBAAiB,KAAK,SAAS,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IACpI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,uBAAuB,EAAE,CAAC;QACtD,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,iBAAkB,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,iBAAkB,CAAC,MAAM,EAAE,CAAC;YAC/G,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;AACH,CAAC;AAYD,6EAA6E;AAC7E,MAAM,UAAU,yBAAyB,CAAC,oBAA4B,EACpE,GAAuD;IACvD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,oBAAoB,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5G,OAAO,SAAS,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,oBAAoB;QACjG,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;AACtG,CAAC;AAED,gGAAgG;AAChG,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,KAAkC;IACjF,MAAM,OAAO,GAAG,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;IAC1D,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,KAAK,GAAG,CAAC;QAC9E,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,OAAO,OAAO,CAAC,WAAW,KAAK,QAAQ;QACzF,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,GAAG,kBAAkB;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACxH,MAAM,OAAO,GAAG,oBAAoB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC1D,IAAI,OAAO,CAAC,eAAe,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAClG,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IACxF,MAAM,YAAY,GAAG,KAAK,EAAE,SAAgC,EAAwB,EAAE;QACpF,MAAM,SAAS,GAAG,MAAM,0BAA0B,CAAC,SAAS,EAAE,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QACpG,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,WAAW,CAAC,cAAc,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;QACtG,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,YAAY,EAAE,CAAC;QAC9C,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,KAAK,SAAS,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS;YAC/E,CAAC,CAAC,8BAA8B,CAAC,CAAC,CAAC,0BAA0B,CAAC;QAChE,OAAO,OAAO,CAAC,EAAE,GAAG,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;IACrE,CAAC,CAAC;IACF,OAAO,OAAO,CAAC,SAAS;QACtB,CAAC,CAAC,wBAAwB,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC;QACjG,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;AAC3E,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,KAAkC;IACjF,MAAM,OAAO,GAAG,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;IAC1D,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,KAAK,GAAG,CAAC;QAC9E,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,OAAO,OAAO,CAAC,WAAW,KAAK,QAAQ;QACzF,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,GAAG,kBAAkB;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACxH,MAAM,OAAO,GAAG,oBAAoB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC1D,IAAI,OAAO,CAAC,eAAe,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAClG,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IACxF,MAAM,YAAY,GAAG,KAAK,EAAE,SAAgC,EAAwB,EAAE;QACpF,MAAM,SAAS,GAAG,MAAM,0BAA0B,CAAC,SAAS,EAAE,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QACpG,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,WAAW,CAAC,cAAc,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;QACtG,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,EAAE,EAAE,QAAQ,GAAG,MAAM,OAAO,CAAC,YAAY,EAAE,CAAC;QACxE,0BAA0B,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACtE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxE,CAAC;QACD,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QAC9F,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,kBAAkB,EAAE,CAAC;QACpD,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACnE,IAAI,QAAQ,CAAC,WAAW,KAAK,OAAO,CAAC,WAAW,IAAI,QAAQ,CAAC,YAAY,KAAK,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;YAC7G,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACvD,CAAC;QACD,MAAM,SAAS,GAAG,uBAAuB,CAAC,QAAQ,CAAC,qBAAqB,EAAE;YACxE,mBAAmB,EAAE,OAAO,CAAC,WAAW,EAAE,aAAa,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI;SACnH,CAAC,CAAC;QACH,MAAM,0BAA0B,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QACrD,MAAM,KAAK,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,CAAC;QACnD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,KAAK,CAAC,KAAK;YAClF,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QAC5G,IAAI,SAAS,CAAC,UAAU,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,SAAS,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC/H,IAAI,OAAO,CAAC,cAAc,KAAK,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QAC9F,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC;QACzC,IAAI,CAAC,MAAM,CAAC,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QAC/E,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC3C,oBAAoB,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,wBAAwB,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC;SACrG,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,EAAE,UAAU,EAAE,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC,mBAAmB,CAAC;QAChF,MAAM,KAAK,GAAG,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,CAAC,CAAC;QAC9E,MAAM,cAAc,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,EAAE,MAAM,CAAC,eAAe,CAAC,MAAM,EAAE,CAAC;QAC7G,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,gBAAgB,EAAE,KAAK,KAAK,SAAS,CAAC,MAAM,CAAC,KAAK;YACtE,MAAM,CAAC,gBAAgB,CAAC,UAAU,KAAK,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,gBAAgB,CAAC,oBAAoB,KAAK,SAAS,CAAC,QAAQ,CAAC,MAAM;YAChI,MAAM,CAAC,MAAM,KAAK,WAAW,IAAI,MAAM,CAAC,KAAK,KAAK,KAAK,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO;YAC1F,MAAM,CAAC,KAAK,KAAK,OAAO,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;YAClG,MAAM,CAAC,WAAW,KAAK,yBAAyB,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC;YACnG,MAAM,CAAC,gBAAgB,KAAK,QAAQ,CAAC,YAAY,IAAI,MAAM,CAAC,iBAAiB,KAAK,MAAM,CAAC,eAAe,CAAC,MAAM;YAC/G,MAAM,CAAC,YAAY,KAAK,MAAM,CAAC,MAAM,CAAC,SAAS,IAAI,eAAe,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,eAAe,CAAC,cAAc,CAAC;YAC7H,QAAQ,EAAE,YAAY,KAAK,KAAK,CAAC,OAAO,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC;YACjF,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC5D,CAAC;QACD,yEAAyE;QACzE,oEAAoE;QACpE,IAAI,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,KAAK,eAAe,EAAE,CAAC;YACtE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAChE,CAAC;QACD,2EAA2E;QAC3E,yEAAyE;QACzE,MAAM,MAAM,GAAG,uBAAuB,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC5D,MAAM,QAAQ,GAAI,OAAO,CAAC,KAA0C,CAAC,QAAQ,CAAC;QAC9E,OAAO,kBAAkB,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK;YAC/F,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;IACnI,CAAC,CAAC;IACF,OAAO,OAAO,CAAC,SAAS;QACtB,CAAC,CAAC,wBAAwB,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC;QACjG,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;AAC3E,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAAC,KAAkC;IACrF,MAAM,OAAO,GAAG,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;IAC1D,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,KAAK,GAAG,CAAC;QAC9E,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,OAAO,OAAO,CAAC,WAAW,KAAK,QAAQ;QACzF,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,GAAG,kBAAkB;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IAC5H,MAAM,OAAO,GAAG,oBAAoB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC1D,IAAI,OAAO,CAAC,eAAe,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACtG,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IACxF,MAAM,YAAY,GAAG,KAAK,EAAE,SAAgC,EAAwB,EAAE;QACpF,MAAM,SAAS,GAAG,MAAM,0BAA0B,CAAC,SAAS,EAAE,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QACpG,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QACxF,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;QACvC,0BAA0B,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,EAAE,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC;QACpE,MAAM,0BAA0B,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC5D,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,SAAS,EAAE,oBAAoB,EAAE,CAAC;YACvF,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,MAAM,CAAC,QAAQ,CAAC,WAAW,KAAK,OAAO,CAAC,WAAW,IAAI,MAAM,CAAC,QAAQ,CAAC,YAAY,KAAK,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;YAC3H,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC3D,CAAC;QACD,IAAI,OAAO,CAAC,cAAc,KAAK,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QAClG,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC;QACzC,IAAI,CAAC,MAAM,CAAC,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QACnF,IAAI,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,KAAK,eAAe,EAAE,CAAC;YACtE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACpE,CAAC;QACD,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC3C,oBAAoB,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,wBAAwB,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC;SACrG,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,EAAE,UAAU,EAAE,KAAK,GAAG,SAAS,CAAC,oBAAoB,CAAC;QAC1E,MAAM,SAAS,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC,SAAS,CAAC,MAAO,CAAC,mBAAmB,CAAC;QACjE,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,EAAE,WAAW,GAAG,MAAM,CAAC,SAAS,CAAC,WAAY,CAAC;QACzE,MAAM,KAAK,GAAG,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,CAAC,CAAC;QAC9E,MAAM,cAAc,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,EAAE,MAAM,CAAC,eAAe,CAAC,MAAM,EAAE,CAAC;QAC7G,IAAI,eAAe,GAAG,SAAS,CAAC,OAAO,GAAG,CAAC,CAAC;QAC5C,KAAK,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;YACzB,MAAM,aAAa,GAAG,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC;YAClD,IAAI,CAAC,aAAa,IAAI,aAAa,CAAC,KAAK,KAAK,OAAO,CAAC,KAAK;gBACzD,aAAa,CAAC,OAAO,KAAK,eAAe,GAAG,CAAC;gBAC7C,CAAC,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,KAAK,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC3E,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;YAClE,CAAC;YACD,eAAe,GAAG,aAAa,CAAC,OAAO,CAAC;QAC1C,CAAC;QACD,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,IAAI,MAAM,CAAC,KAAK,KAAK,KAAK;YAC/E,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,KAAK,KAAK,OAAO,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK;YACjG,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,IAAI,QAAQ,EAAE,YAAY,KAAK,KAAK,CAAC,OAAO,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG;YAClH,MAAM,CAAC,WAAW,KAAK,yBAAyB,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC;YACnG,MAAM,CAAC,gBAAgB,KAAK,MAAM,CAAC,QAAQ,CAAC,YAAY;YACxD,MAAM,CAAC,iBAAiB,KAAK,MAAM,CAAC,eAAe,CAAC,MAAM,IAAI,MAAM,CAAC,YAAY,KAAK,MAAM,CAAC,MAAM,CAAC,SAAS;YAC7G,eAAe,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,eAAe,CAAC,cAAc,CAAC;YAC1E,MAAM,CAAC,QAAQ,EAAE,WAAW,KAAK,SAAS,CAAC,WAAW;YACtD,MAAM,CAAC,QAAQ,EAAE,WAAW,KAAK,MAAM,CAAC,KAAK;YAC7C,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,mBAAmB,CAAC,KAAK,eAAe,CAAC,SAAS,CAAC;YACnF,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC,KAAK,eAAe,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,OAAO,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC;YACrI,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAChE,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,OAAO,CAAC,KAAK,CAAC,CAAC;QAC1E,IAAI,QAAQ,IAAI,QAAQ,CAAC,KAAK,KAAK,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QACrG,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC;YACpF,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC7D,CAAC;QACD,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QACxF,IAAI,QAAQ,CAAC,CAAC,CAAC,WAAW,KAAK,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,GAAG,CAAC,KAAK,OAAO,CAAC,KAAK,EAAE,CAAC;YACjF,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC5D,CAAC;QACD,MAAM,MAAM,GAAG,uBAAuB,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC5D,MAAM,QAAQ,GAAI,OAAO,CAAC,KAA0C,CAAC,QAAQ,CAAC;QAC9E,OAAO,kBAAkB,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK;YAC/F,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE,MAAM,CAAC,QAAQ,CAAC,YAAY,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;IAC1I,CAAC,CAAC;IACF,OAAO,OAAO,CAAC,SAAS;QACtB,CAAC,CAAC,wBAAwB,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC;QACjG,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;AAC3E,CAAC"}

package/dist/converge/retry-source.d.ts

@@ -0,0 +1,25 @@
+import { z } from 'zod';
+/** Source authorization on a new claim; the original aggregate event is retained. */
+export declare const retrySourceSchema: z.ZodObject<{
+    version: z.ZodLiteral<1>;
+    runId: z.ZodString;
+    reportJsonSha256: z.ZodString;
+    configSha256: z.ZodString;
+    nativeStateSha256: z.ZodString;
+    attemptStateSha256: z.ZodString;
+    headSha: z.ZodString;
+    inputSha256: z.ZodString;
+    attempt: z.ZodNumber;
+    round: z.ZodNumber;
+    reviewerHealth: z.ZodObject<{
+        version: z.ZodLiteral<1>;
+        policy: z.ZodObject<{
+            version: z.ZodLiteral<1>;
+            fraction: z.ZodNumber;
+            seatCount: z.ZodNumber;
+            minimumSuccessful: z.ZodNumber;
+        }, z.core.$strict>;
+        successfulSeats: z.ZodNumber;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export type RetrySource = z.infer<typeof retrySourceSchema>;

package/dist/converge/retry-source.js

@@ -0,0 +1,13 @@
+import { z } from 'zod';
+import { hasSuccessfulQuorum } from '../dispatch/quorum.js';
+import { reviewerHealthSchema } from './launch-record.js';
+const digest = z.string().regex(/^[a-f0-9]{64}$/);
+/** Source authorization on a new claim; the original aggregate event is retained. */
+export const retrySourceSchema = z.object({
+    version: z.literal(1), runId: z.string().uuid(), reportJsonSha256: digest,
+    configSha256: digest, nativeStateSha256: digest, attemptStateSha256: digest,
+    headSha: z.string().regex(/^[a-f0-9]{40}$/), inputSha256: digest,
+    attempt: z.number().int().positive().safe(), round: z.number().int().positive().safe(),
+    reviewerHealth: reviewerHealthSchema,
+}).strict().refine(source => !hasSuccessfulQuorum(source.reviewerHealth.policy, source.reviewerHealth.successfulSeats), 'A legacy retry source must be inconclusive');
+//# sourceMappingURL=retry-source.js.map

package/dist/converge/retry-source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"retry-source.js","sourceRoot":"","sources":["../../src/converge/retry-source.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAE1D,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;AAClD,qFAAqF;AACrF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,gBAAgB,EAAE,MAAM;IACzE,YAAY,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,kBAAkB,EAAE,MAAM;IAC3E,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,WAAW,EAAE,MAAM;IAChE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE;IACtF,cAAc,EAAE,oBAAoB;CACrC,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,mBAAmB,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,cAAc,CAAC,eAAe,CAAC,EACpH,4CAA4C,CAAC,CAAC"}

package/dist/converge/review-cycle.d.ts

@@ -0,0 +1,49 @@
+import { z } from 'zod';
+export declare const reviewCycleReceiptSchema: z.ZodObject<{
+    id: z.ZodString;
+    operation_id: z.ZodString;
+    previous_cycle_id: z.ZodNullable<z.ZodString>;
+    head_sha: z.ZodString;
+    inserted_at: z.ZodString;
+}, z.core.$strict>;
+export type ReviewCycleReceipt = z.infer<typeof reviewCycleReceiptSchema>;
+export interface ReviewCycleRequest {
+    operation_id: string;
+    previous_cycle_id: string | null;
+    head_sha: string;
+}
+/** The HTTP implementation must negotiate cycle_protocol before returning current membership. */
+export interface ReviewCycleRemote {
+    readonly repo: string;
+    readonly prNumber: number;
+    readonly url: string;
+    current(): Promise<ReviewCycleReceipt | null>;
+    start(request: ReviewCycleRequest): Promise<ReviewCycleReceipt>;
+}
+export declare const cycleHistorySchema: z.ZodObject<{
+    attempts: z.ZodNumber;
+    rounds: z.ZodNumber;
+    incomplete: z.ZodOptional<z.ZodLiteral<true>>;
+}, z.core.$strict>;
+export declare const nativeReviewCycleSchema: z.ZodObject<{
+    id: z.ZodString;
+    operationId: z.ZodString;
+    previousCycleId: z.ZodNullable<z.ZodString>;
+    repo: z.ZodString;
+    prNumber: z.ZodNumber;
+    url: z.ZodString;
+    archivePath: z.ZodString;
+    archiveSha256: z.ZodString;
+    history: z.ZodObject<{
+        attempts: z.ZodNumber;
+        rounds: z.ZodNumber;
+        incomplete: z.ZodOptional<z.ZodLiteral<true>>;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export type NativeReviewCycle = z.infer<typeof nativeReviewCycleSchema>;
+/** Version upgrades are explicit barriers: legacy state must never hide fresh-cycle fields. */
+export declare function validCycleVersion(value: {
+    version?: unknown;
+    cycle?: unknown;
+    startOverPending?: unknown;
+}, legacy: number): boolean;

package/dist/converge/review-cycle.js

@@ -0,0 +1,26 @@
+import { z } from 'zod';
+const uuid = z.string().uuid();
+const counter = z.number().int().nonnegative().safe();
+export const reviewCycleReceiptSchema = z.object({
+    id: uuid, operation_id: uuid, previous_cycle_id: uuid.nullable(),
+    head_sha: z.string().regex(/^[a-f0-9]{40}$/), inserted_at: z.string().datetime({ offset: true }),
+}).strict();
+export const cycleHistorySchema = z.object({
+    attempts: counter, rounds: counter,
+    /** Known lower bounds, never a claim that missing historical accounting was zero. */
+    incomplete: z.literal(true).optional(),
+}).strict();
+export const nativeReviewCycleSchema = z.object({
+    id: uuid, operationId: uuid, previousCycleId: uuid.nullable(),
+    repo: z.string().min(1), prNumber: z.number().int().positive().safe(), url: z.string().url(),
+    archivePath: z.string().min(1), archiveSha256: z.string().regex(/^[a-f0-9]{64}$/),
+    history: cycleHistorySchema,
+}).strict();
+/** Version upgrades are explicit barriers: legacy state must never hide fresh-cycle fields. */
+export function validCycleVersion(value, legacy) {
+    if (value.startOverPending !== undefined)
+        return false;
+    return value.version === legacy ? value.cycle === undefined
+        : value.version === legacy + 1 && nativeReviewCycleSchema.safeParse(value.cycle).success;
+}
+//# sourceMappingURL=review-cycle.js.map

package/dist/converge/review-cycle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"review-cycle.js","sourceRoot":"","sources":["../../src/converge/review-cycle.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC;AAC/B,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;AACtD,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,CAAC,QAAQ,EAAE;IAChE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;CACjG,CAAC,CAAC,MAAM,EAAE,CAAC;AAgBZ,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO;IAClC,qFAAqF;IACrF,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAC,MAAM,EAAE,CAAC;AACZ,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,CAAC,QAAQ,EAAE;IAC7D,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC5F,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC;IACjF,OAAO,EAAE,kBAAkB;CAC5B,CAAC,CAAC,MAAM,EAAE,CAAC;AAGZ,+FAA+F;AAC/F,MAAM,UAAU,iBAAiB,CAAC,KAAyE,EAAE,MAAc;IACzH,IAAI,KAAK,CAAC,gBAAgB,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACvD,OAAO,KAAK,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS;QACzD,CAAC,CAAC,KAAK,CAAC,OAAO,KAAK,MAAM,GAAG,CAAC,IAAI,uBAAuB,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AAC7F,CAAC"}

package/dist/converge/round-gap-schema.d.ts

@@ -0,0 +1,66 @@
+import { z } from 'zod';
+import type { ConvergeRunState } from './run-state.js';
+export declare const gapAttemptSchema: z.ZodObject<{
+    attempt: z.ZodNumber;
+    claimedAt: z.ZodString;
+    pid: z.ZodNumber;
+    source: z.ZodLiteral<"claim">;
+}, z.core.$strict>;
+export declare const roundGapManifestSchema: z.ZodObject<{
+    kind: z.ZodLiteral<"rcl-round-gap-audit">;
+    version: z.ZodLiteral<1>;
+    operationId: z.ZodString;
+    createdAt: z.ZodString;
+    gitCommonDir: z.ZodString;
+    target: z.ZodString;
+    gapRound: z.ZodNumber;
+    admittingRound: z.ZodNumber;
+    attempt: z.ZodNumber;
+    runId: z.ZodString;
+    reportSha256: z.ZodString;
+    incompleteSha256: z.ZodString;
+    stateSha256: z.ZodString;
+    attemptSha256: z.ZodString;
+    gapAttempt: z.ZodObject<{
+        attempt: z.ZodNumber;
+        claimedAt: z.ZodString;
+        pid: z.ZodNumber;
+        source: z.ZodLiteral<"claim">;
+    }, z.core.$strict>;
+    admittingAttempt: z.ZodObject<{
+        attempt: z.ZodNumber;
+        claimedAt: z.ZodString;
+        pid: z.ZodNumber;
+        source: z.ZodLiteral<"claim">;
+    }, z.core.$strict>;
+    report: z.ZodObject<{
+        path: z.ZodString;
+        sha256: z.ZodString;
+        bytes: z.ZodNumber;
+    }, z.core.$strict>;
+    incomplete: z.ZodObject<{
+        path: z.ZodString;
+        sha256: z.ZodString;
+        bytes: z.ZodNumber;
+    }, z.core.$strict>;
+    evidence: z.ZodArray<z.ZodObject<{
+        path: z.ZodString;
+        sha256: z.ZodString;
+        bytes: z.ZodNumber;
+    }, z.core.$strict>>;
+    disposition: z.ZodObject<{
+        kind: z.ZodLiteral<"missing-terminal-report">;
+        controllerExit: z.ZodLiteral<"unknown">;
+        scope: z.ZodLiteral<"supplied-evidence-only">;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export type RoundGapManifest = z.infer<typeof roundGapManifestSchema>;
+export declare const roundGapEntrySchema: z.ZodObject<{
+    manifestSha256: z.ZodString;
+    manifestJson: z.ZodString;
+}, z.core.$strict>;
+export type RoundGapEntry = z.infer<typeof roundGapEntrySchema>;
+/** Parse only the supported complete receipt shape, without inventing a producer round. */
+export declare function gapManifest(entry: RoundGapEntry): RoundGapManifest;
+/** Older clients may preserve these unknown fields; candidates must validate them. */
+export declare function validateRoundGapAudit(state: ConvergeRunState): void;

package/dist/converge/round-gap-schema.js

@@ -0,0 +1,51 @@
+import { z } from 'zod';
+import { sha256 } from '../telemetry/recovery/files.js';
+import { decodeOriginalReport } from '../evidence/original-run/decode.js';
+const digest = z.string().regex(/^[a-f0-9]{64}$/);
+const uuid = z.string().uuid();
+const operationUuid = uuid.refine(value => value === value.toLowerCase());
+const ordinal = z.number().int().min(1).max(99);
+const timestamp = z.string().datetime();
+export const gapAttemptSchema = z.object({ attempt: z.number().int().positive().safe(), claimedAt: timestamp,
+    pid: z.number().int().positive().safe(), source: z.literal('claim') }).strict();
+const file = z.object({ path: z.string().min(1), sha256: digest, bytes: z.number().int().nonnegative().max(25 * 1024 * 1024) }).strict();
+export const roundGapManifestSchema = z.object({
+    kind: z.literal('rcl-round-gap-audit'), version: z.literal(1), operationId: operationUuid, createdAt: timestamp,
+    gitCommonDir: z.string().min(1), target: z.string().min(1).max(200).refine(s => s.trim() === s),
+    gapRound: ordinal, admittingRound: ordinal, attempt: z.number().int().positive().safe(), runId: uuid,
+    reportSha256: digest, incompleteSha256: digest, stateSha256: digest, attemptSha256: digest,
+    gapAttempt: gapAttemptSchema, admittingAttempt: gapAttemptSchema,
+    report: file, incomplete: file, evidence: z.array(file).max(20),
+    disposition: z.object({ kind: z.literal('missing-terminal-report'), controllerExit: z.literal('unknown'),
+        scope: z.literal('supplied-evidence-only') }).strict(),
+}).strict().refine(m => m.admittingRound === m.gapRound + 1 && m.attempt === m.gapAttempt.attempt &&
+    m.gapAttempt.attempt < m.admittingAttempt.attempt &&
+    m.reportSha256 === m.report.sha256 && m.incompleteSha256 === m.incomplete.sha256);
+export const roundGapEntrySchema = z.object({ manifestSha256: digest, manifestJson: z.string().max(1024 * 1024) }).strict();
+/** Parse only the supported complete receipt shape, without inventing a producer round. */
+export function gapManifest(entry) {
+    if (!roundGapEntrySchema.safeParse(entry).success || sha256(entry.manifestJson) !== entry.manifestSha256)
+        throw new Error('invalid_round_gap_audit');
+    const parsed = roundGapManifestSchema.safeParse(decodeOriginalReport(entry.manifestJson).value);
+    if (!parsed.success)
+        throw new Error('invalid_round_gap_audit');
+    return parsed.data;
+}
+/** Older clients may preserve these unknown fields; candidates must validate them. */
+export function validateRoundGapAudit(state) {
+    if (state.roundGapAudit === undefined)
+        return;
+    const audit = z.object({ version: z.literal(1), entries: z.array(roundGapEntrySchema).min(1).max(98) }).strict().safeParse(state.roundGapAudit);
+    if (!audit.success)
+        throw new Error('invalid_round_gap_audit');
+    const operations = new Set(), gaps = new Set();
+    for (const entry of audit.data.entries) {
+        const m = gapManifest(entry);
+        if (m.target !== state.target || operations.has(m.operationId) || gaps.has(m.gapRound) ||
+            state.rounds.some(r => r.round === m.gapRound))
+            throw new Error('invalid_round_gap_audit');
+        operations.add(m.operationId);
+        gaps.add(m.gapRound);
+    }
+}
+//# sourceMappingURL=round-gap-schema.js.map

package/dist/converge/round-gap-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"round-gap-schema.js","sourceRoot":"","sources":["../../src/converge/round-gap-schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,MAAM,EAAE,MAAM,gCAAgC,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAG1E,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;AAClD,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC;AAC/B,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,KAAK,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;AAC1E,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAChD,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC;AACxC,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,SAAS;IAC1G,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAClF,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AACzI,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,aAAa,EAAE,SAAS,EAAE,SAAS;IAC/G,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC/F,QAAQ,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI;IACpG,YAAY,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM;IAC1F,UAAU,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,gBAAgB;IAChE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IAC/D,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,yBAAyB,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;QACtG,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,wBAAwB,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;CACzD,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,KAAK,CAAC,CAAC,QAAQ,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,UAAU,CAAC,OAAO;IAC/F,CAAC,CAAC,UAAU,CAAC,OAAO,GAAG,CAAC,CAAC,gBAAgB,CAAC,OAAO;IACjD,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC,gBAAgB,KAAK,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;AAEpF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,cAAc,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAG5H,2FAA2F;AAC3F,MAAM,UAAU,WAAW,CAAC,KAAoB;IAC9C,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,KAAK,CAAC,cAAc;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IACrJ,MAAM,MAAM,GAAG,sBAAsB,CAAC,SAAS,CAAC,oBAAoB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,CAAC;IAChG,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAChE,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,qBAAqB,CAAC,KAAuB;IAC3D,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS;QAAE,OAAO;IAC9C,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAChJ,IAAI,CAAC,KAAK,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC/D,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,EAAE,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/D,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;QAC7B,IAAI,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC;YAClF,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,QAAQ,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAC/F,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;QAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IACtD,CAAC;AACH,CAAC"}

package/dist/converge/round-gap.d.ts

@@ -0,0 +1,38 @@
+import { z } from 'zod';
+import type { ReviewResult } from '../consensus/types.js';
+import { type RoundGapEntry, type RoundGapManifest } from './round-gap-schema.js';
+export type { RoundGapManifest } from './round-gap-schema.js';
+declare const previewSchema: z.ZodObject<{
+    target: z.ZodString;
+    gapRound: z.ZodNumber;
+    admittingRound: z.ZodNumber;
+    attempt: z.ZodNumber;
+    runId: z.ZodString;
+    reportPath: z.ZodString;
+    reportSha256: z.ZodString;
+    incompletePath: z.ZodString;
+    incompleteSha256: z.ZodString;
+    evidence: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        path: z.ZodString;
+        sha256: z.ZodString;
+    }, z.core.$strict>>>;
+    operationId: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export type RoundGapSelection = z.infer<typeof previewSchema>;
+/** Read-only preview: the only identities introduced belong to the audit operation. */
+export declare function previewRoundGap(input: RoundGapSelection, gitCommonDir: string): Promise<RoundGapManifest>;
+export declare function roundGapOperationPath(gitCommonDir: string, operationId: string): string;
+/** Verify retained original bytes and the exact committed result without mutating audit files. */
+export declare function verifyRoundGapReceipt(gitCommonDir: string, entry: RoundGapEntry): Promise<ReviewResult>;
+export interface ApplyRoundGapOptions {
+    manifest: string;
+    manifestSha256: string;
+    mode: 'apply' | 'resume';
+}
+export interface RoundGapHooks {
+    beforeCheckpoint?: (phase: string) => Promise<void>;
+    /** Test-only interruption seam after the native CAS is durable. */
+    afterNativeWrite?: () => Promise<void>;
+}
+/** Target-owned CAS with exact snapshots and append-only audit. No round or budget is created. */
+export declare function applyRoundGap(input: ApplyRoundGapOptions, gitCommonDir: string, hooks?: RoundGapHooks): Promise<'applied' | 'resumed'>;