@allocator-one/rcl 4.4.19

package/dist/evidence/recover-run.js

@@ -0,0 +1,180 @@
+import { randomUUID } from 'node:crypto';
+import { lstat, realpath } from 'node:fs/promises';
+import { dirname, join } from 'node:path';
+import { isDeepStrictEqual } from 'node:util';
+import { z } from 'zod';
+import { resolveDataDir } from '../config/data-dir.js';
+import { readStable, platformPath, sha256 } from '../telemetry/recovery/files.js';
+import { openSink } from './status.js';
+import { prepareOriginalRun, hashSchema, selectionSchema, uuidSchema, OriginalSelectionError } from './original-run/source.js';
+import { destination, readOriginalRun, readOriginalArtifacts } from './original-run/remote.js';
+import { writeExclusive, withRecoveryLock, openJournal, serializeRecoveryDocument, MAX_RECOVERY_DOCUMENT_BYTES } from './original-run/journal.js';
+import { decodeOriginalReport } from './original-run/decode.js';
+export const MAX_ORIGINAL_RUN_MANIFEST_BYTES = MAX_RECOVERY_DOCUMENT_BYTES;
+const manifestSchema = z.object({
+    kind: z.literal('rcl-original-run-recovery'), version: z.literal(1), operation_id: uuidSchema,
+    created_at: z.string(), rcl_version: z.string(),
+    destination: z.object({ base_url: z.string(), org_id: uuidSchema }).strict(),
+    prepared: z.object({ selection: selectionSchema }).passthrough(),
+    preview: z.object({ run_exists: z.boolean(), artifacts: z.record(z.string(), z.enum(['missing', 'verified'])) }).strict(),
+}).strict();
+function failure(error) {
+    const code = error?.code;
+    if (typeof code === 'string' && /^[A-Z0-9_]+$/.test(code))
+        return code;
+    if (error instanceof Error && /^[a-z][a-z0-9_]+$/.test(error.message))
+        return error.message;
+    return 'invalid_or_unsupported_recovery_input';
+}
+function outcomeAudit(outcome) {
+    const httpStatus = outcome.httpStatus;
+    const error = outcome.error;
+    return {
+        kind: outcome.kind,
+        ...(Number.isInteger(httpStatus) && httpStatus >= 100 && httpStatus <= 599 ? { http_status: httpStatus } : {}),
+        ...(typeof error === 'string' && /^[a-z][a-z0-9_]{0,63}$/.test(error) ? { error } : {}),
+    };
+}
+/** Mode A only: no provider, event, native accounting, outbox or fresh report generation. */
+export async function runOriginalRecovery(options, deps) {
+    let stage = 'input';
+    const emit = (value) => deps.stdout(JSON.stringify(value));
+    try {
+        if ([options.preview, options.apply, options.resume].filter(Boolean).length !== 1)
+            throw new Error('choose_exactly_one_recovery_mode');
+        const path = platformPath(options.manifest);
+        let manifest;
+        let boundSha;
+        let prepared;
+        let artifacts;
+        if (options.preview) {
+            if (options.manifestSha256 !== undefined)
+                throw new Error('preview_does_not_accept_manifest_digest');
+            ({ prepared, artifacts } = await prepareOriginalRun({ run: options.run, forPr: options.forPr, head: options.head, reportJson: options.reportJson, reportSha256: options.reportSha256, reportMd: options.reportMd, markdownSha256: options.markdownSha256, originalMode: options.originalMode, originalProse: options.originalProse }));
+            // Reject oversized prepared evidence before any destination read. The complete
+            // manifest is checked again after destination and observation metadata exist.
+            serializeRecoveryDocument({ prepared }, MAX_ORIGINAL_RUN_MANIFEST_BYTES);
+            if (await realpath(dirname(path)) !== dirname(path))
+                throw new Error('symlink_directory');
+            try {
+                await lstat(path);
+                throw new Error('manifest_already_exists');
+            }
+            catch (e) {
+                if (e.code !== 'ENOENT')
+                    throw e;
+            }
+        }
+        else {
+            if ([options.run, options.forPr, options.head, options.reportJson, options.reportSha256, options.reportMd, options.markdownSha256, options.originalMode, options.originalProse].some(v => v !== undefined))
+                throw new Error('resume_uses_only_pinned_manifest');
+            boundSha = hashSchema.parse(options.manifestSha256);
+            const retained = await readStable(path, MAX_ORIGINAL_RUN_MANIFEST_BYTES);
+            if (retained.sha256 !== boundSha)
+                throw new Error('manifest_digest_mismatch');
+            manifest = manifestSchema.parse(decodeOriginalReport(retained.text).value);
+            ({ prepared, artifacts } = await prepareOriginalRun(manifest.prepared.selection));
+            if (!isDeepStrictEqual(prepared, manifest.prepared))
+                throw new Error('original_source_or_preparation_changed');
+        }
+        stage = 'remote';
+        const sink = await openSink(deps);
+        if (!sink)
+            return 3;
+        const target = await destination(sink, prepared.selection.originalProse);
+        if (manifest && !isDeepStrictEqual(manifest.destination, target))
+            throw new Error('destination_or_organization_conflict');
+        const inspect = async () => {
+            const run = await readOriginalRun(sink, target, prepared);
+            const states = run.exists ? await readOriginalArtifacts(sink, prepared) : Object.fromEntries(prepared.envelope.artifacts_declared.map(a => [a.kind, 'missing']));
+            return { run, states };
+        };
+        const verifySources = async () => {
+            stage = 'input';
+            const current = await prepareOriginalRun(prepared.selection);
+            if (!isDeepStrictEqual(current.prepared, prepared))
+                throw new Error('original_source_or_preparation_changed');
+        };
+        if (options.preview) {
+            const observed = await inspect();
+            await verifySources();
+            const value = { kind: 'rcl-original-run-recovery', version: 1, operation_id: randomUUID(), created_at: new Date().toISOString(), rcl_version: deps.rclVersion, destination: target, prepared, preview: { run_exists: observed.run.exists, artifacts: observed.states } };
+            manifestSchema.parse(value);
+            const serialized = serializeRecoveryDocument(value, MAX_ORIGINAL_RUN_MANIFEST_BYTES);
+            stage = 'journal';
+            await writeExclusive(path, value, MAX_ORIGINAL_RUN_MANIFEST_BYTES);
+            emit({ status: 'prepared', manifest: path, manifest_sha256: sha256(serialized), operation_id: value.operation_id, run_id: prepared.selection.run, observation: value.preview, accounting: 'unchanged; no native admission or verdict', original_mode: prepared.original_mode, retained_content_limitations: prepared.retained_content_limitations });
+            return 0;
+        }
+        const selected = manifest;
+        const pinned = boundSha;
+        stage = 'journal';
+        const completion = await withRecoveryLock(join(resolveDataDir(deps.env), 'original-run-recovery-locks'), JSON.stringify([target.base_url, target.org_id, prepared.selection.run]), async () => {
+            const journal = await openJournal(`${path}.journal`, pinned, selected.operation_id, options.apply ? 'apply' : 'resume', deps.beforeCheckpoint);
+            const append = async (phase, data) => { stage = 'journal'; await journal.append(phase, data); };
+            const read = async () => { stage = 'remote'; if (!isDeepStrictEqual(await destination(sink, prepared.selection.originalProse), target))
+                throw new Error('destination_or_organization_conflict'); return inspect(); };
+            await append('prepared', { source_sha256: prepared.sources, envelope_sha256: prepared.envelope_sha256, destination: target, retained_content_limitations: prepared.retained_content_limitations });
+            let observed = await read();
+            if (!observed.run.exists) {
+                if (selected.preview.run_exists)
+                    throw new Error('previously_recorded_run_disappeared_conflict');
+                await append('post_intent', { envelope_sha256: prepared.envelope_sha256 });
+                await verifySources();
+                stage = 'remote';
+                const posted = await sink.postRun(prepared.envelope);
+                await append('post_outcome', outcomeAudit(posted));
+                observed = await read();
+                if (!observed.run.exists) {
+                    if (posted.kind === 'rejected')
+                        throw new Error(`run_delivery_rejected_${outcomeAudit(posted).error ?? 'unspecified'}`);
+                    throw new Error('run_delivery_not_verified');
+                }
+            }
+            await append('run_verified', { projection_sha256: observed.run.exists ? observed.run.projection_sha256 : null });
+            for (const a of prepared.envelope.artifacts_declared) {
+                if (observed.states[a.kind] === 'verified')
+                    continue;
+                await append('put_intent', { kind: a.kind, sha256: a.sha256, bytes: a.bytes });
+                await verifySources();
+                stage = 'remote';
+                const uploaded = await sink.putArtifact(prepared.selection.run, a.kind, artifacts[a.kind]);
+                await append('put_outcome', { artifact: a.kind, ...outcomeAudit(uploaded) });
+                observed = await read();
+                if (!observed.run.exists || observed.states[a.kind] !== 'verified') {
+                    if (uploaded.kind === 'rejected')
+                        throw new Error(`artifact_delivery_rejected_${outcomeAudit(uploaded).error ?? 'unspecified'}`);
+                    throw new Error('artifact_delivery_not_verified');
+                }
+                await append('artifact_verified', a);
+            }
+            observed = await read();
+            if (!observed.run.exists || Object.values(observed.states).some(v => v !== 'verified') ||
+                observed.run.raw.artifacts.some(a => !a.stored))
+                throw new Error('completion_not_verified');
+            await verifySources();
+            await append('complete', { projection_sha256: observed.run.projection_sha256, artifacts: prepared.envelope.artifacts_declared });
+            return { status: 'complete', operation_id: selected.operation_id, run_id: prepared.selection.run, manifest_sha256: pinned, journal: `${path}.journal`, destination: target, artifacts: prepared.envelope.artifacts_declared, accounting: 'unchanged; delivery is not a native admission, verdict or gate approval' };
+        });
+        emit(completion);
+        return 0;
+    }
+    catch (error) {
+        const reason = failure(error);
+        const definitiveRejection = reason.startsWith('run_delivery_rejected_') || reason.startsWith('artifact_delivery_rejected_');
+        const exit = stage === 'input' ? 2 : definitiveRejection || reason.includes('conflict') ? 4 : stage === 'journal' ? 5 : 3;
+        const nextStep = options.preview
+            ? 'Correct the explicit input; no delivery was attempted.'
+            : definitiveRejection
+                ? 'Correct the reported remote refusal; do not resume this manifest unchanged.'
+                : 'Preserve the manifest and journal. Resume this same pinned operation after resolving the reported failure; completion requires fresh readback.';
+        const instruction = error instanceof OriginalSelectionError ? `${error.instruction} ${nextStep}` : nextStep;
+        const result = { status: 'incomplete', error: reason, stage, exit_code: exit, instruction };
+        if (options.json)
+            emit(result);
+        else
+            deps.stderr(`Original-run recovery incomplete: ${reason}. ${result.instruction}`);
+        return exit;
+    }
+}
+//# sourceMappingURL=recover-run.js.map

package/dist/evidence/recover-run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recover-run.js","sourceRoot":"","sources":["../../src/evidence/recover-run.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,gCAAgC,CAAC;AAElF,OAAO,EAAE,QAAQ,EAAqB,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,kBAAkB,EAAE,UAAU,EAAE,eAAe,EAAE,UAAU,EAAE,sBAAsB,EAAyB,MAAM,0BAA0B,CAAC;AACtJ,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,qBAAqB,EAAoB,MAAM,0BAA0B,CAAC;AACjH,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,WAAW,EAAE,yBAAyB,EAAE,2BAA2B,EAAE,MAAM,2BAA2B,CAAC;AAClJ,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAShE,MAAM,CAAC,MAAM,+BAA+B,GAAG,2BAA2B,CAAC;AAC3E,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,2BAA2B,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,UAAU;IAC7F,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IAC/C,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IAC5E,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,eAAe,EAAE,CAAC,CAAC,WAAW,EAAE;IAChE,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;CACzH,CAAC,CAAC,MAAM,EAAE,CAAC;AACZ,SAAS,OAAO,CAAC,KAAc;IAC7B,MAAM,IAAI,GAAI,KAA+B,EAAE,IAAI,CAAC;IACpD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACvE,IAAI,KAAK,YAAY,KAAK,IAAI,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC,OAAO,CAAC;IAC5F,OAAO,uCAAuC,CAAC;AACjD,CAAC;AACD,SAAS,YAAY,CAAC,OAA8D;IAClF,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;IACtC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IAC5B,OAAO;QACL,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,UAAW,IAAI,GAAG,IAAI,UAAW,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChH,GAAG,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxF,CAAC;AACJ,CAAC;AACD,6FAA6F;AAC7F,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,OAA2B,EAAE,IAAqB;IAC1F,IAAI,KAAK,GAAmC,OAAO,CAAC;IACpD,MAAM,IAAI,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IACpE,IAAI,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACvI,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC5C,IAAI,QAAoD,CAAC;QACzD,IAAI,QAA4B,CAAC;QACjC,IAAI,QAA0B,CAAC;QAC/B,IAAI,SAAsE,CAAC;QAC3E,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACpB,IAAI,OAAO,CAAC,cAAc,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;YACrG,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,MAAM,kBAAkB,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;YACvU,+EAA+E;YAC/E,8EAA8E;YAC9E,yBAAyB,CAAC,EAAE,QAAQ,EAAE,EAAE,+BAA+B,CAAC,CAAC;YACzE,IAAI,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;YAC1F,IAAI,CAAC;gBAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;gBAAC,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;YAAC,CAAC;YACtE,OAAO,CAAC,EAAE,CAAC;gBAAC,IAAK,CAA2B,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM,CAAC,CAAC;YAAC,CAAC;QAC5E,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,OAAO,CAAC,GAAG,EAAC,OAAO,CAAC,KAAK,EAAC,OAAO,CAAC,IAAI,EAAC,OAAO,CAAC,UAAU,EAAC,OAAO,CAAC,YAAY,EAAC,OAAO,CAAC,QAAQ,EAAC,OAAO,CAAC,cAAc,EAAC,OAAO,CAAC,YAAY,EAAC,OAAO,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;YACxP,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;YACpD,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,+BAA+B,CAAC,CAAC;YACzE,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;YAC9E,QAAQ,GAAG,cAAc,CAAC,KAAK,CAAC,oBAAoB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC;YAC3E,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,MAAM,kBAAkB,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;YAClF,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QACjH,CAAC;QACD,KAAK,GAAG,QAAQ,CAAC;QACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;QAAC,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;QACzE,IAAI,QAAQ,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC1H,MAAM,OAAO,GAAG,KAAK,IAAI,EAAE;YACzB,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;YAC1D,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,qBAAqB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,SAAkB,CAAC,CAAC,CAAC,CAAC;YAC1K,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;QACzB,CAAC,CAAC;QACF,MAAM,aAAa,GAAG,KAAK,IAAI,EAAE;YAC/B,KAAK,GAAG,OAAO,CAAC;YAChB,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YAC7D,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAChH,CAAC,CAAC;QACF,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,QAAQ,GAAG,MAAM,OAAO,EAAE,CAAC;YACjC,MAAM,aAAa,EAAE,CAAC;YACtB,MAAM,KAAK,GAAG,EAAE,IAAI,EAAE,2BAAoC,EAAE,OAAO,EAAE,CAAU,EAAE,YAAY,EAAE,UAAU,EAAE,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YAC3R,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC5B,MAAM,UAAU,GAAG,yBAAyB,CAAC,KAAK,EAAE,+BAA+B,CAAC,CAAC;YACrF,KAAK,GAAG,SAAS,CAAC;YAAC,MAAM,cAAc,CAAC,IAAI,EAAE,KAAK,EAAE,+BAA+B,CAAC,CAAC;YACtF,IAAI,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,CAAC,UAAU,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,MAAM,EAAE,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,WAAW,EAAE,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,2CAA2C,EAAE,aAAa,EAAE,QAAQ,CAAC,aAAa,EAAE,4BAA4B,EAAE,QAAQ,CAAC,4BAA4B,EAAE,CAAC,CAAC;YACrV,OAAO,CAAC,CAAC;QACX,CAAC;QACD,MAAM,QAAQ,GAAG,QAAS,CAAC;QAAC,MAAM,MAAM,GAAG,QAAS,CAAC;QACrD,KAAK,GAAG,SAAS,CAAC;QAClB,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,6BAA6B,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAC,MAAM,CAAC,MAAM,EAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,IAAI,EAAE;YAC1L,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,GAAG,IAAI,UAAU,EAAE,MAAM,EAAE,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;YAC/I,MAAM,MAAM,GAAG,KAAK,EAAE,KAAa,EAAE,IAAc,EAAE,EAAE,GAAG,KAAK,GAAG,SAAS,CAAC,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAClH,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE,GAAG,KAAK,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,MAAM,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,SAAS,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC,CAAC,OAAO,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;YACrN,MAAM,MAAM,CAAC,UAAU,EAAE,EAAE,aAAa,EAAE,QAAQ,CAAC,OAAO,EAAE,eAAe,EAAE,QAAQ,CAAC,eAAe,EAAE,WAAW,EAAE,MAAM,EAAE,4BAA4B,EAAE,QAAQ,CAAC,4BAA4B,EAAE,CAAC,CAAC;YACnM,IAAI,QAAQ,GAAG,MAAM,IAAI,EAAE,CAAC;YAC5B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;gBACzB,IAAI,QAAQ,CAAC,OAAO,CAAC,UAAU;oBAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;gBACjG,MAAM,MAAM,CAAC,aAAa,EAAE,EAAE,eAAe,EAAE,QAAQ,CAAC,eAAe,EAAE,CAAC,CAAC;gBAC3E,MAAM,aAAa,EAAE,CAAC;gBACtB,KAAK,GAAG,QAAQ,CAAC;gBAAC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBACvE,MAAM,MAAM,CAAC,cAAc,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;gBACnD,QAAQ,GAAG,MAAM,IAAI,EAAE,CAAC;gBACxB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;oBACzB,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU;wBAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,YAAY,CAAC,MAAM,CAAC,CAAC,KAAK,IAAI,aAAa,EAAE,CAAC,CAAC;oBACxH,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;gBAC/C,CAAC;YACH,CAAC;YACD,MAAM,MAAM,CAAC,cAAc,EAAE,EAAE,iBAAiB,EAAE,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YACjH,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,kBAAkB,EAAE,CAAC;gBACrD,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,UAAU;oBAAE,SAAS;gBACrD,MAAM,MAAM,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;gBAC/E,MAAM,aAAa,EAAE,CAAC;gBACtB,KAAK,GAAG,QAAQ,CAAC;gBAAC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,IAAoB,CAAE,CAAC,CAAC;gBAC9H,MAAM,MAAM,CAAC,aAAa,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;gBAC7E,QAAQ,GAAG,MAAM,IAAI,EAAE,CAAC;gBACxB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,UAAU,EAAE,CAAC;oBACnE,IAAI,QAAQ,CAAC,IAAI,KAAK,UAAU;wBAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,YAAY,CAAC,QAAQ,CAAC,CAAC,KAAK,IAAI,aAAa,EAAE,CAAC,CAAC;oBACjI,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;gBACpD,CAAC;gBACD,MAAM,MAAM,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC;YACvC,CAAC;YACD,QAAQ,GAAG,MAAM,IAAI,EAAE,CAAC;YACxB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,UAAU,CAAC;gBACnF,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,SAAwC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;YAC9H,MAAM,aAAa,EAAE,CAAC;YACtB,MAAM,MAAM,CAAC,UAAU,EAAE,EAAE,iBAAiB,EAAE,QAAQ,CAAC,GAAG,CAAC,iBAAiB,EAAE,SAAS,EAAE,QAAQ,CAAC,QAAQ,CAAC,kBAAkB,EAAE,CAAC,CAAC;YACjI,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY,EAAE,MAAM,EAAE,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,eAAe,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC,QAAQ,CAAC,kBAAkB,EAAE,UAAU,EAAE,yEAAyE,EAAE,CAAC;QACvT,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,CAAC;QACjB,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;QAC9B,MAAM,mBAAmB,GAAG,MAAM,CAAC,UAAU,CAAC,wBAAwB,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,6BAA6B,CAAC,CAAC;QAC5H,MAAM,IAAI,GAAG,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,mBAAmB,IAAI,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1H,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO;YAC9B,CAAC,CAAC,wDAAwD;YAC1D,CAAC,CAAC,mBAAmB;gBACnB,CAAC,CAAC,6EAA6E;gBAC/E,CAAC,CAAC,gJAAgJ,CAAC;QACvJ,MAAM,WAAW,GAAG,KAAK,YAAY,sBAAsB,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,WAAW,IAAI,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC5G,MAAM,MAAM,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;QAC5F,IAAI,OAAO,CAAC,IAAI;YAAE,IAAI,CAAC,MAAM,CAAC,CAAC;;YAAM,IAAI,CAAC,MAAM,CAAC,qCAAqC,MAAM,KAAK,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;QACvH,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/evidence/retained-time-budget.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Reserve bounded terminal work inside the immutable operation lifetime. This
+ * is execution tightening, not an extension or a delivery guarantee. Reopening
+ * the same saved bounds derives the same cutoff without consulting a clock.
+ */
+export declare function retainedPaidCutoff(bounds: {
+    startedAtMs: number;
+    expiresAtMs: number;
+}): number;

package/dist/evidence/retained-time-budget.js

@@ -0,0 +1,14 @@
+/**
+ * Reserve bounded terminal work inside the immutable operation lifetime. This
+ * is execution tightening, not an extension or a delivery guarantee. Reopening
+ * the same saved bounds derives the same cutoff without consulting a clock.
+ */
+export function retainedPaidCutoff(bounds) {
+    const { startedAtMs, expiresAtMs } = bounds;
+    if (!Number.isSafeInteger(startedAtMs) || startedAtMs < 0 || !Number.isSafeInteger(expiresAtMs) ||
+        expiresAtMs - startedAtMs < 4 || expiresAtMs - startedAtMs > 2_147_483_647) {
+        throw new Error('retained_execution_budget');
+    }
+    return expiresAtMs - Math.min(120_000, Math.floor((expiresAtMs - startedAtMs) / 4));
+}
+//# sourceMappingURL=retained-time-budget.js.map

package/dist/evidence/retained-time-budget.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"retained-time-budget.js","sourceRoot":"","sources":["../../src/evidence/retained-time-budget.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAoD;IACrF,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,GAAG,MAAM,CAAC;IAC5C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,WAAW,CAAC,IAAI,WAAW,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,WAAW,CAAC;QAC7F,WAAW,GAAG,WAAW,GAAG,CAAC,IAAI,WAAW,GAAG,WAAW,GAAG,aAAa,EAAE,CAAC;QAC7E,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AACtF,CAAC"}

package/dist/evidence/retriage-finding.d.ts

@@ -0,0 +1,12 @@
+import { type EvidenceDeps } from './status.js';
+export interface FindingRetriageOptions {
+    target: string;
+    run: string;
+    reportSha256: string;
+    findingRef: string;
+    forPr: string;
+    reasonFile: string;
+    submit?: boolean;
+}
+/** Preview or send one fresh verdict; no native writes, review, outbox or historical replay. */
+export declare function runFindingRetriage(options: FindingRetriageOptions, deps: EvidenceDeps): Promise<number>;

package/dist/evidence/retriage-finding.js

@@ -0,0 +1,67 @@
+import { readFile } from 'node:fs/promises';
+import { resolve } from 'node:path';
+import { describeOutcome } from '../telemetry/sink.js';
+import { MAX_FREE_TEXT } from '../telemetry/scrub.js';
+import { prepareFindingRetriage } from './finding-retriage.js';
+import { safeJson, text } from './format.js';
+import { getRun } from './reads.js';
+import { EVIDENCE_EXIT, openSink } from './status.js';
+import { parsePullRequestArg } from './target.js';
+/** Preview or send one fresh verdict; no native writes, review, outbox or historical replay. */
+export async function runFindingRetriage(options, deps) {
+    let pr;
+    let reason;
+    try {
+        pr = parsePullRequestArg(options.forPr, null);
+        if (!/^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/i.test(options.run) ||
+            !/^[a-f0-9]{64}$/.test(options.reportSha256))
+            throw new Error('Retriage requires an explicit run UUID and lower-case report SHA-256.');
+        reason = new TextDecoder('utf-8', { fatal: true })
+            .decode(await readFile(resolve(deps.cwd ?? process.cwd(), options.reasonFile))).trim();
+        if (!reason || reason.length > MAX_FREE_TEXT)
+            throw new Error('Retriage requires an explicit reason of 1 to 2000 characters.');
+    }
+    catch (err) {
+        deps.stderr(text(err instanceof Error ? err.message : String(err), 400));
+        return EVIDENCE_EXIT.usage;
+    }
+    const sink = await openSink(deps);
+    if (!sink)
+        return EVIDENCE_EXIT.unanswered;
+    const run = await getRun(sink, options.run);
+    if (run.kind !== 'ok') {
+        deps.stderr(`Cannot read retriage run: ${describeOutcome(run)}`);
+        return EVIDENCE_EXIT.unanswered;
+    }
+    let event;
+    try {
+        event = prepareFindingRetriage({ run: run.value, target: options.target, runId: options.run,
+            reportSha256: options.reportSha256, findingRef: options.findingRef,
+            repository: `${pr.owner}/${pr.repo}`, prNumber: pr.number, reason });
+    }
+    catch (err) {
+        deps.stderr(text(err instanceof Error ? err.message : String(err), 400));
+        return EVIDENCE_EXIT.usage;
+    }
+    if (!options.submit) {
+        deps.stdout(`Preview for ${text(new URL(sink.baseUrl).host, 200)}: no verdict submitted. Use --submit to record this new judgment.`);
+        deps.stdout(safeJson(event));
+        if (run.value.converge == null) {
+            deps.stdout('Standalone attested run: event round 1 satisfies the Harness verdict wire protocol; it is not a native convergence round.');
+        }
+        deps.stdout('The digest matches stored report metadata; original report bytes were not retrieved or verified. Native history is unchanged.');
+        return EVIDENCE_EXIT.ok;
+    }
+    const result = await sink.postEvents([event]);
+    if (result.kind !== 'ok') {
+        deps.stderr(`Verdict not acknowledged: ${describeOutcome(result)}. No retry or outbox flush was performed. Inspect server evidence before retrying.`);
+        return EVIDENCE_EXIT.unanswered;
+    }
+    if (result.value.inserted !== 1 || result.value.duplicates !== 0) {
+        deps.stderr('A fresh verdict insertion was not acknowledged. Inspect server evidence before retrying.');
+        return EVIDENCE_EXIT.unanswered;
+    }
+    deps.stdout(`Verdict acknowledged: ${result.value.inserted} inserted, ${result.value.duplicates} duplicate. This is not a convergence verdict; check evidence status separately.`);
+    return EVIDENCE_EXIT.ok;
+}
+//# sourceMappingURL=retriage-finding.js.map

package/dist/evidence/retriage-finding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"retriage-finding.js","sourceRoot":"","sources":["../../src/evidence/retriage-finding.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAqB,MAAM,aAAa,CAAC;AACzE,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAYlD,gGAAgG;AAChG,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAA+B,EAAE,IAAkB;IAC1F,IAAI,EAAE,CAAC;IACP,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,EAAE,GAAG,mBAAmB,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC9C,IAAI,CAAC,iEAAiE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;YACpF,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;QAC3I,MAAM,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;aAC/C,MAAM,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACzF,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,aAAa;YAAE,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IACjI,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QACzE,OAAO,aAAa,CAAC,KAAK,CAAC;IAC7B,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,CAAC,IAAI;QAAE,OAAO,aAAa,CAAC,UAAU,CAAC;IAC3C,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IAC5C,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QACtB,IAAI,CAAC,MAAM,CAAC,6BAA6B,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACjE,OAAO,aAAa,CAAC,UAAU,CAAC;IAClC,CAAC;IAED,IAAI,KAAK,CAAC;IACV,IAAI,CAAC;QACH,KAAK,GAAG,sBAAsB,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG;YACzF,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU;YAClE,UAAU,EAAE,GAAG,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IACzE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QACzE,OAAO,aAAa,CAAC,KAAK,CAAC;IAC7B,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QACpB,IAAI,CAAC,MAAM,CAAC,eAAe,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,mEAAmE,CAAC,CAAC;QACrI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;QAC7B,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,IAAI,IAAI,EAAE,CAAC;YAC/B,IAAI,CAAC,MAAM,CAAC,2HAA2H,CAAC,CAAC;QAC3I,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,+HAA+H,CAAC,CAAC;QAC7I,OAAO,aAAa,CAAC,EAAE,CAAC;IAC1B,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9C,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QACzB,IAAI,CAAC,MAAM,CAAC,6BAA6B,eAAe,CAAC,MAAM,CAAC,oFAAoF,CAAC,CAAC;QACtJ,OAAO,aAAa,CAAC,UAAU,CAAC;IAClC,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,CAAC,QAAQ,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,UAAU,KAAK,CAAC,EAAE,CAAC;QACjE,IAAI,CAAC,MAAM,CAAC,0FAA0F,CAAC,CAAC;QACxG,OAAO,aAAa,CAAC,UAAU,CAAC;IAClC,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,yBAAyB,MAAM,CAAC,KAAK,CAAC,QAAQ,cAAc,MAAM,CAAC,KAAK,CAAC,UAAU,kFAAkF,CAAC,CAAC;IACnL,OAAO,aAAa,CAAC,EAAE,CAAC;AAC1B,CAAC"}

package/dist/evidence/reviewer-lineage.d.ts

@@ -0,0 +1,35 @@
+import { CheckpointJournal, type CheckpointProof, type CheckpointState, type FrozenCheckpointPlan } from '../dispatch/checkpoint.js';
+import type { RecoveryAttempt } from '../dispatch/recovery-policy.js';
+import { type CapturedReviewerInputs } from '../dispatch/captured-inputs.js';
+import { type InspectedReviewerArtifact } from '../report/reviewer-artifact.js';
+export interface LoadReviewerLineageInput {
+    commonDir: string;
+    target: string;
+    runId: string;
+}
+export interface ReviewerLineageRun {
+    readonly runId: string;
+    readonly journal: CheckpointJournal;
+    readonly plan: FrozenCheckpointPlan;
+    readonly state: CheckpointState;
+    readonly proof: CheckpointProof;
+    readonly terminal: Awaited<ReturnType<CheckpointJournal['readTerminalReport']>> & {};
+    readonly inspected: InspectedReviewerArtifact;
+    readonly captured: CapturedReviewerInputs;
+    readonly kind: 'original' | 'successor';
+}
+export interface ReviewerLineage {
+    readonly target: string;
+    readonly plan: FrozenCheckpointPlan;
+    readonly runs: readonly ReviewerLineageRun[];
+    readonly attempts: readonly RecoveryAttempt[];
+    readonly latest: ReviewerLineageRun;
+}
+/**
+ * Compare current effective inputs only after complete source validation. The
+ * sole compatibility exception is the new verifier discriminator on a legacy
+ * aggregation blob. Historical bytes remain the execution/source authority.
+ */
+export declare function matchesReviewerRecoveryInputs(source: ReviewerLineage, freshBytes: string): boolean;
+/** Loads only a sealed, proof-bound lineage. It never grants native/server authority. */
+export declare function loadReviewerLineage(input: LoadReviewerLineageInput): Promise<ReviewerLineage>;