@allocator-one/rcl 4.5.13 → 4.5.15

package/dist/dispatch/journaled-council.js

@@ -0,0 +1,158 @@
+import { randomUUID } from 'node:crypto';
+import { normalizeGeneratedText } from '../telemetry/scrub.js';
+import { blockingCheckpointReviewSchema } from './checkpoint.js';
+import { hasSuccessfulQuorum, resolveQuorumPolicy } from './quorum.js';
+import { reviewCallIdentity, runReviews } from './runner.js';
+/**
+ * Ordinary guarded councils journal every call so an interrupted process can
+ * resume without repeating paid work (RCL-80). A call in flight when its
+ * process ended may already be billed: it is dispatched at most once more.
+ * Each dispatch keeps the runner's bounded in-call retries, so one intent
+ * covers one logical call, not one provider request.
+ */
+export const MAX_DISPATCHES_PER_CELL = 2;
+const INTERRUPTED = 'Previous process ended without a recorded outcome; the call remains possibly billed.';
+const EXHAUSTED = 'Interrupted twice without a recorded outcome; possibly billed and not dispatched again.';
+/**
+ * The report normalizes reviewer prose before hashing; the journal keeps that
+ * same normalized text, because its strict schema refuses raw control bytes.
+ * One journaled dispatch may include the runner's in-call retries, so the
+ * diagnostic adapter counter is not kept: the journal reserves it for the
+ * one-request-per-intent retained executor.
+ */
+function journalable(review) {
+    const { adapterAttempts: _diagnostic, ...rest } = review;
+    return { ...rest, findings: review.findings.map(finding => ({ ...finding, id: normalizeGeneratedText(finding.id),
+            title: normalizeGeneratedText(finding.title), description: normalizeGeneratedText(finding.description),
+            ...(finding.suggestedFix === undefined ? {} : { suggestedFix: normalizeGeneratedText(finding.suggestedFix) }) })) };
+}
+/** Pure selection over a validated journal; matrix order is kept as dispatch priority. */
+export function planJournaledCouncil(cells, state) {
+    const intents = new Map();
+    for (const record of state.records) {
+        if (record.type !== 'intent')
+            continue;
+        intents.set(record.cell, [...intents.get(record.cell) ?? [], record.paidAttempt]);
+    }
+    const outcomes = new Map(state.outcomes.map(outcome => [`${outcome.cell}\0${outcome.paidAttempt.id}`, outcome.result]));
+    const plan = { retained: new Map(), recorded: new Map(), exhausted: new Set(), eligible: [] };
+    cells.forEach((cell, index) => {
+        const attempts = intents.get(cell.id) ?? [];
+        const last = attempts.at(-1);
+        const outcome = last && outcomes.get(`${cell.id}\0${last.id}`);
+        if (outcome?.kind === 'success')
+            plan.retained.set(index, JSON.parse(outcome.reviewBytes));
+        else if (outcome)
+            plan.recorded.set(index, JSON.parse(outcome.reviewBytes));
+        else if (attempts.length >= MAX_DISPATCHES_PER_CELL)
+            plan.exhausted.add(index);
+        else
+            plan.eligible.push(index);
+    });
+    return plan;
+}
+/** Whether the ordinary runner would close this council at quorum; wait-for-all never closes early. */
+function closesAtQuorum(assignments, reviews, quorum) {
+    if (!quorum)
+        return false;
+    const expected = new Map(), succeeded = new Map();
+    assignments.forEach((assignment, index) => {
+        if (quorum.blocking && !quorum.blocking[index])
+            return;
+        const seat = JSON.stringify([assignment.provider, assignment.model, assignment.role.name]);
+        expected.set(seat, (expected.get(seat) ?? 0) + 1);
+        if (reviews[index]?.status === 'success')
+            succeeded.set(seat, (succeeded.get(seat) ?? 0) + 1);
+    });
+    const complete = [...expected].filter(([seat, count]) => succeeded.get(seat) === count).length;
+    const policy = resolveQuorumPolicy(expected.size, quorum.fraction);
+    return policy.fraction < 1 && hasSuccessfulQuorum(policy, complete);
+}
+/**
+ * Run the ordinary council over its journal: reuse recorded successes, keep
+ * recorded failures, give an interrupted call one more dispatch, and run the
+ * rest with the unchanged ordinary scheduling, provider caps and quorum.
+ * The caller holds target ownership and binds the journal to its launch.
+ */
+export async function runJournaledCouncil(input) {
+    const { journal, ownership, assignments, prompts } = input;
+    const cells = journal.getPlan().cells;
+    if (assignments.length !== cells.length || prompts.length !== cells.length)
+        throw new Error('journaled_council_matrix_mismatch');
+    assignments.forEach((assignment, index) => {
+        const cell = cells[index];
+        if (assignment.model !== cell.model || assignment.provider !== cell.route || assignment.role.name !== cell.role) {
+            throw new Error('journaled_council_matrix_mismatch');
+        }
+    });
+    let state = await journal.read();
+    if (!state.finalized) {
+        for (const pending of state.uncertain) {
+            if (!state.records.some(record => record.type === 'uncertain' && record.cell === pending.cell &&
+                record.paidAttempt?.id === pending.paidAttempt.id)) {
+                await journal.recordUncertain(pending.cell, pending.paidAttempt, INTERRUPTED, ownership);
+            }
+        }
+        state = await journal.read();
+    }
+    const plan = planJournaledCouncil(cells, state);
+    const placeholder = (index, error) => ({ model: assignments[index].model,
+        role: assignments[index].role.name, provider: assignments[index].provider, status: 'canceled',
+        findings: [], durationMs: 0, error });
+    const merge = (reviews) => reviews.map((review, index) => plan.recorded.get(index) ?? (plan.exhausted.has(index) ? placeholder(index, EXHAUSTED) : review));
+    if (state.finalized) {
+        const reviews = cells.map((_, index) => plan.retained.get(index) ?? plan.recorded.get(index) ??
+            placeholder(index, plan.exhausted.has(index) ? EXHAUSTED : INTERRUPTED));
+        return { reviews, interrupted: false, retained: plan.retained.size, dispatched: 0 };
+    }
+    const attempts = new Map();
+    const declined = new Set();
+    const reviews = merge(await runReviews(assignments, prompts, {
+        ...input.runner,
+        retainedReviews: [...plan.retained].map(([callIndex, review]) => ({ callIndex, review,
+            callIdentity: reviewCallIdentity(assignments[callIndex], prompts[callIndex], callIndex) })),
+        eligibleCallIndices: plan.eligible,
+        beforeReview: async (index, signal) => {
+            if (signal.aborted)
+                return false;
+            if (input.admit && !input.admit()) {
+                declined.add(index);
+                return false;
+            }
+            const attempt = { id: randomUUID(), kind: 'paid' };
+            await journal.recordIntent(cells[index].id, attempt, ownership);
+            attempts.set(index, attempt);
+        },
+        acceptReview: async (review, index) => {
+            const attempt = attempts.get(index), cell = cells[index];
+            if (!attempt)
+                throw new Error('journaled_council_missing_intent');
+            if (review.status === 'canceled') {
+                await journal.recordUncertain(cell.id, attempt, review.error ?? 'Canceled with an unknown provider outcome.', ownership);
+                return;
+            }
+            const stored = journalable(review);
+            try {
+                if (!blockingCheckpointReviewSchema.safeParse(stored).success)
+                    throw new Error('checkpoint_invalid_result');
+                await journal.recordResult(cell.id, attempt, stored.status === 'success'
+                    ? { kind: 'success', chunk: cell.chunk, reviewBytes: JSON.stringify(stored) }
+                    : { kind: 'failure', chunk: cell.chunk, reviewBytes: JSON.stringify(stored), possiblyBilled: true }, ownership);
+            }
+            catch (error) {
+                // Validation refuses before any write. This run still reports the
+                // result; only a later resume would dispatch the call again.
+                if (!(error instanceof Error) || !['checkpoint_invalid_result', 'checkpoint_result_cell_mismatch'].includes(error.message))
+                    throw error;
+                await journal.recordUncertain(cell.id, attempt, 'Reviewer result could not be journaled; a resume treats it as interrupted.', ownership);
+            }
+        },
+    }));
+    const stopped = declined.size > 0 || input.runner.signal?.aborted === true;
+    const interrupted = stopped && reviews.some(review => review.status === 'canceled') &&
+        !closesAtQuorum(assignments, reviews, input.runner.quorum);
+    if (!interrupted)
+        await journal.finalize(ownership);
+    return { reviews, interrupted, retained: plan.retained.size, dispatched: attempts.size };
+}
+//# sourceMappingURL=journaled-council.js.map

package/dist/dispatch/journaled-council.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"journaled-council.js","sourceRoot":"","sources":["../../src/dispatch/journaled-council.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAKzC,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,8BAA8B,EAAkE,MAAM,iBAAiB,CAAC;AACjI,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AACvE,OAAO,EAAE,kBAAkB,EAAE,UAAU,EAAsB,MAAM,aAAa,CAAC;AAEjF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC;AAEzC,MAAM,WAAW,GAAG,sFAAsF,CAAC;AAC3G,MAAM,SAAS,GAAG,yFAAyF,CAAC;AA8B5G;;;;;;GAMG;AACH,SAAS,WAAW,CAAC,MAAmB;IACtC,MAAM,EAAE,eAAe,EAAE,WAAW,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAC;IACzD,OAAO,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,EAAE,EAAE,sBAAsB,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9G,KAAK,EAAE,sBAAsB,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,sBAAsB,CAAC,OAAO,CAAC,WAAW,CAAC;YACtG,GAAG,CAAC,OAAO,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,sBAAsB,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;AACxH,CAAC;AASD,0FAA0F;AAC1F,MAAM,UAAU,oBAAoB,CAAC,KAAgC,EAAE,KAAsB;IAC3F,MAAM,OAAO,GAAG,IAAI,GAAG,EAAyB,CAAC;IACjD,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QACnC,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ;YAAE,SAAS;QACvC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAK,EAAE,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAK,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,WAAY,CAAC,CAAC,CAAC;IACvF,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,WAAW,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACxH,MAAM,IAAI,GAAa,EAAE,QAAQ,EAAE,IAAI,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,GAAG,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IACxG,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAC5B,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7B,MAAM,OAAO,GAAG,IAAI,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/D,IAAI,OAAO,EAAE,IAAI,KAAK,SAAS;YAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAgB,CAAC,CAAC;aACrG,IAAI,OAAO;YAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAgB,CAAC,CAAC;aACtF,IAAI,QAAQ,CAAC,MAAM,IAAI,uBAAuB;YAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;;YAC1E,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACd,CAAC;AAED,uGAAuG;AACvG,SAAS,cAAc,CAAC,WAAwC,EAAE,OAA+B,EAC/F,MAA+B;IAC/B,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,EAAE,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAC;IAClF,WAAW,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,EAAE;QACxC,IAAI,MAAM,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,OAAO;QACvD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3F,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAClD,IAAI,OAAO,CAAC,KAAK,CAAC,EAAE,MAAM,KAAK,SAAS;YAAE,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAChG,CAAC,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,CAAC,MAAM,CAAC;IAC/F,MAAM,MAAM,GAAG,mBAAmB,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IACnE,OAAO,MAAM,CAAC,QAAQ,GAAG,CAAC,IAAI,mBAAmB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AACtE,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,KAA4B;IACpE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IAC3D,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC;IACtC,IAAI,WAAW,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACjI,WAAW,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,EAAE;QACxC,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAE,CAAC;QAC3B,IAAI,UAAU,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,IAAI,UAAU,CAAC,QAAQ,KAAK,IAAI,CAAC,KAAK,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;YAChH,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACvD,CAAC;IACH,CAAC,CAAC,CAAC;IACH,IAAI,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;IACjC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;QACrB,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;YACtC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,WAAW,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI;gBAC3F,MAAM,CAAC,WAAW,EAAE,EAAE,KAAK,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC,EAAE,CAAC;gBACrD,MAAM,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,WAAW,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;YAC3F,CAAC;QACH,CAAC;QACD,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;IAC/B,CAAC;IACD,MAAM,IAAI,GAAG,oBAAoB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAChD,MAAM,WAAW,GAAG,CAAC,KAAa,EAAE,KAAa,EAAe,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,CAAE,CAAC,KAAK;QACpG,IAAI,EAAE,WAAW,CAAC,KAAK,CAAE,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,WAAW,CAAC,KAAK,CAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU;QAC/F,QAAQ,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,CAAC,OAAsB,EAAiB,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CACrF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IACpG,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QACpB,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC;YAC1F,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;QAC3E,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;IACtF,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAuB,CAAC;IAChD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,UAAU,CAAC,WAAW,EAAE,OAAO,EAAE;QAC3D,GAAG,KAAK,CAAC,MAAM;QACf,eAAe,EAAE,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM;YACnF,YAAY,EAAE,kBAAkB,CAAC,WAAW,CAAC,SAAS,CAAE,EAAE,OAAO,CAAC,SAAS,CAAE,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC;QAC/F,mBAAmB,EAAE,IAAI,CAAC,QAAQ;QAClC,YAAY,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YACpC,IAAI,MAAM,CAAC,OAAO;gBAAE,OAAO,KAAK,CAAC;YACjC,IAAI,KAAK,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;gBAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBAAC,OAAO,KAAK,CAAC;YAAC,CAAC;YACzE,MAAM,OAAO,GAAgB,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;YAChE,MAAM,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,KAAK,CAAE,CAAC,EAAE,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;YACjE,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC/B,CAAC;QACD,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE;YACpC,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,IAAI,GAAG,KAAK,CAAC,KAAK,CAAE,CAAC;YAC1D,IAAI,CAAC,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;YAClE,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;gBACjC,MAAM,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,IAAI,4CAA4C,EAAE,SAAS,CAAC,CAAC;gBACzH,OAAO;YACT,CAAC;YACD,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;YACnC,IAAI,CAAC;gBACH,IAAI,CAAC,8BAA8B,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO;oBAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;gBAC5G,MAAM,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,KAAK,SAAS;oBACtE,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE;oBAC7E,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,EAAE,SAAS,CAAC,CAAC;YACpH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,kEAAkE;gBAClE,6DAA6D;gBAC7D,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC,IAAI,CAAC,CAAC,2BAA2B,EAAE,iCAAiC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC;oBAAE,MAAM,KAAK,CAAC;gBACxI,MAAM,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,4EAA4E,EAAE,SAAS,CAAC,CAAC;YAC3I,CAAC;QACH,CAAC;KACF,CAAC,CAAC,CAAC;IACJ,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI,CAAC;IAC3E,MAAM,WAAW,GAAG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,UAAU,CAAC;QACjF,CAAC,cAAc,CAAC,WAAW,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC7D,IAAI,CAAC,WAAW;QAAE,MAAM,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACpD,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,UAAU,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;AAC3F,CAAC"}

package/dist/index.js

@@ -49,7 +49,7 @@ import { DEFAULT_CONVERGE_ATTEMPT_CAP, claimConvergeAttempt, ConvergeAttemptBudg
 import { DEFAULT_CONVERGE_ROUND_CAP, HARD_CONVERGE_ROUND_CAP, processRoundReport, recordVerdicts, findingGatingReason, ConvergeRoundCapError, ConvergeRunStateError, } from './converge/run-state.js';
 import { applyRoundGap, previewRoundGap } from './converge/round-gap.js';
 import { withNativeTarget } from './converge/target-ownership.js';
-import { guardReviewLaunch, ReviewLaunchRefused } from './converge/launch-guard.js';
+import { guardReviewLaunch, ReviewCouncilInterrupted, ReviewLaunchRefused } from './converge/launch-guard.js';
 import { selectCurrentRecoveredProduction } from './converge/recovered-production.js';
 import { createBoundFixRecovery } from './converge/bound-fix-recovery.js';
 import { openReadSink } from './telemetry/read-sink.js';
@@ -87,7 +87,8 @@ import { exportOrdinaryPendingPackage, retainOrdinaryLaunchInputs } from './conv
 import { capturePreparedCouncil } from './dispatch/capture-council.js';
 import { executeCapturedOriginal } from './dispatch/original-execution.js';
 import { resolveFinalizedAsyncExecution } from './dispatch/checkpoint-async-store.js';
-import { exportCheckpointProof } from './dispatch/checkpoint.js';
+import { CheckpointJournal, checkpointPath, exportCheckpointProof } from './dispatch/checkpoint.js';
+import { runJournaledCouncil } from './dispatch/journaled-council.js';
 import { captureAggregationInputs, AGGREGATION_ALGORITHM } from './report/aggregation-inputs.js';
 import { decodeSupplementalAsync } from './report/supplemental-async.js';
 import { projectCheckpointReport } from './report/checkpoint-projection.js';
@@ -213,7 +214,7 @@ program
     prev.push(val);
     return prev;
 }, [])
-    .option('--context <path>', 'Context file or directory to include (repeatable)', (val, prev) => {
+    .option('--context <path>', 'Context file to include (repeatable); a directory is not read', (val, prev) => {
     prev.push(val);
     return prev;
 }, [])
@@ -253,6 +254,7 @@ program
     .option('--resume-async-sha256 <hashes>', 'Comma-separated SHA-256 bindings for every legacy async result retained as historical evidence')
     .option('--retry-reason <reason>', 'Explicit bounded recovery decision for a previous failed or unknown launch; never resets caps')
     .option('--max-attempts <n>', 'Guarded convergence: explicitly authorized attempt cap (omitting preserves the cap)')
+    .option('--max-slice-minutes <n>', 'Guarded convergence: start no new reviewer call after N minutes; running calls finish, then exit 5. Rerunning the same command resumes without a new attempt')
     .option('--max-rounds <n>', 'Guarded convergence: explicitly authorized round cap (2–99; omitting preserves the cap)')
     .option('--no-telemetry', 'Do not deliver this review as evidence to Harness')
     .option('--evidence-required', 'Exit 4 unless Harness acknowledged the evidence (spools first; retry with rcl telemetry flush)')
@@ -272,7 +274,7 @@ program
     prev.push(val);
     return prev;
 }, [])
-    .option('--context <path>', 'Context file or directory to include (repeatable)', (val, prev) => {
+    .option('--context <path>', 'Context file to include (repeatable); a directory is not read', (val, prev) => {
     prev.push(val);
     return prev;
 }, [])
@@ -1763,8 +1765,11 @@ async function runReview(target, opts) {
             catch { /* Startup delivery remains best-effort for legacy reviews. */ }
         }
         if (!opts.guardedConverge && (opts.launchIntent !== undefined || opts.retryReason !== undefined || opts.retryReport !== undefined ||
-            opts.maxAttempts !== undefined || opts.maxRounds !== undefined)) {
-            throw new ReviewLaunchRefused('guard_required', 'Launch intent, retry reason and launch caps require --guarded-converge.');
+            opts.maxAttempts !== undefined || opts.maxRounds !== undefined || opts.maxSliceMinutes !== undefined)) {
+            throw new ReviewLaunchRefused('guard_required', 'Launch intent, retry reason, launch caps and slice budgets require --guarded-converge.');
+        }
+        if (opts.maxSliceMinutes !== undefined && (!/^[1-9]\d{0,3}$/.test(opts.maxSliceMinutes) || Number(opts.maxSliceMinutes) > 1440)) {
+            throw new ReviewLaunchRefused('invalid_slice_budget', '--max-slice-minutes must be a whole number of minutes from 1 to 1440.');
         }
         if (opts.guardedConverge) {
             const converge = resolveConvergeContext(opts, reviewConvergeEnvironment(opts));
@@ -1912,7 +1917,8 @@ async function runReview(target, opts) {
             console.error(err);
         }
         process.exitCode = opts.guardedConverge && (err instanceof ConvergeAttemptBudgetExceededError || err instanceof ConvergeRoundCapError)
-            ? 2 : opts.guardedConverge && (err instanceof ConvergeAttemptStateError || err instanceof ConvergeRunStateError) ? 3 : 1;
+            ? 2 : opts.guardedConverge && (err instanceof ConvergeAttemptStateError || err instanceof ConvergeRunStateError) ? 3
+            : opts.guardedConverge && err instanceof ReviewCouncilInterrupted ? 5 : 1;
     }
 }
 /**
@@ -2218,10 +2224,38 @@ async function executeCouncil(spinner, prepared, diff, opts, extra, preparedWork
             }
             return result.completion;
         }
+        // Journal the ordinary council so an interrupted process resumes without
+        // repeating successful calls (RCL-80). Without an exact head and base, or
+        // inputs beyond the capture limits, dispatch stays unjournaled.
+        let ordinaryPlan;
+        if (/^[a-f0-9]{40}$/.test(extra.target.headSha ?? '') && /^[a-f0-9]{40}$/.test(extra.target.baseSha ?? '')) {
+            try {
+                ordinaryPlan = capturePreparedCouncil({ target: prepared.converge.target,
+                    headSha: extra.target.headSha, mergeBaseSha: extra.target.baseSha, diff, assignments,
+                    lanes: assignments.map(item => assignmentLane(item.model, prepared.coreModels, prepared.explicit)),
+                    chunks, prompts, config, specBytes: prepared.specContent ?? '', contextDocs,
+                    compatibility: { parser: { name: 'findings-json', version: 1 }, aggregation: AGGREGATION_ALGORITHM } }).plan;
+            }
+            catch (error) {
+                process.stderr.write(`Council journal unavailable (${scrubText(String(error), 200)}); an interrupted run cannot resume.\n`);
+            }
+        }
+        const journalPlan = ordinaryPlan;
+        if (opts.maxSliceMinutes !== undefined && !journalPlan) {
+            throw new ReviewLaunchRefused('slice_budget_unavailable', '--max-slice-minutes needs a journaled council (an exact head and base within the capture limits); rerun without it.');
+        }
         const claim = await guardReviewLaunch({
             gitCommonDir: await resolveGitCommonDir(),
             target: prepared.converge.target,
             startOver: opts.startOver, cycleRemote,
+            ...(journalPlan ? { ordinaryCheckpoint: { exists: async (namespace) => {
+                        try {
+                            return !!await CheckpointJournal.openRead(checkpointPath(common, prepared.converge.target, namespace), journalPlan);
+                        }
+                        catch {
+                            return false;
+                        }
+                    } } } : {}),
             boundFixRecovery,
             recoverySource: prepared.converge.recovery_source,
             headSha: extra.target.headSha ?? '',
@@ -2263,8 +2297,10 @@ async function executeCouncil(spinner, prepared, diff, opts, extra, preparedWork
                 if (boundFixRecovery)
                     process.stderr.write(`Bound fix recovery verified from run ${boundFixRecovery.runId}; attempt ${claim.attempt} retains the existing review history.\n`);
             },
-            run: async (converge) => {
-                const guardedCompletion = await executeCouncil(spinner, { ...prepared, converge }, diff, { ...opts, guardedConverge: false, exclusiveOutputs: true }, extra, work);
+            run: async (converge, ownership, _original, checkpoint) => {
+                if (checkpoint?.resumed)
+                    process.stderr.write(`Resuming the interrupted council of attempt ${converge.attempt}; journaled calls are not repeated.\n`);
+                const guardedCompletion = await executeCouncil(spinner, { ...prepared, converge }, diff, { ...opts, guardedConverge: false, exclusiveOutputs: true }, { ...extra, ...(checkpoint && journalPlan ? { ordinaryCheckpoint: { ...checkpoint, ownership, plan: journalPlan } } : {}) }, work);
                 if (!guardedCompletion)
                     throw new Error('guarded_launch_missing_completion');
                 completion = guardedCompletion;
@@ -2289,7 +2325,7 @@ async function executeCouncil(spinner, prepared, diff, opts, extra, preparedWork
     let asyncStoreDir;
     let asyncKey;
     let asyncLaunched = 0;
-    if (!extra.pendingResume &&
+    if (!extra.pendingResume && !extra.ordinaryCheckpoint?.resumed &&
         asyncTargetLabel !== undefined &&
         (asyncAssignments.length > 0 || (config.asyncModels?.length ?? 0) > 0)) {
         try {
@@ -2396,8 +2432,8 @@ async function executeCouncil(spinner, prepared, diff, opts, extra, preparedWork
                 policy: { version: 1, fraction: config.quorumFraction ?? DEFAULT_QUORUM_FRACTION } });
             chunkReviews = pendingProjection.seatReviews.map(seat => structuredClone(seat.review));
         }
-        else
-            chunkReviews = await runReviews(chunkAssignments.map((ca) => ca.assignment), prompts, {
+        else {
+            const ordinaryRunner = {
                 // Fall back to the shared constants, never to inline literals:
                 // duplicated defaults drift (this read 120_000 after the default
                 // moved to 600_000).
@@ -2418,7 +2454,26 @@ async function executeCouncil(spinner, prepared, diff, opts, extra, preparedWork
                     blocking: chunkAssignments.map((ca) => assignmentLane(ca.assignment.model, prepared.coreModels, prepared.explicit) === 'blocking'),
                 },
                 onReviewComplete: (review) => progress.complete(review),
-            });
+            };
+            const checkpoint = extra.ordinaryCheckpoint;
+            if (checkpoint) {
+                const open = { commonDir: await resolveGitCommonDir(), namespace: checkpoint.namespace,
+                    plan: checkpoint.plan, ownership: checkpoint.ownership };
+                const journal = await (checkpoint.resumed ? CheckpointJournal.openWrite(open) : CheckpointJournal.create(open));
+                const sliceEndsAt = opts.maxSliceMinutes === undefined ? undefined : Date.now() + Number(opts.maxSliceMinutes) * 60_000;
+                const journaled = await runJournaledCouncil({ journal, ownership: checkpoint.ownership,
+                    assignments: chunkAssignments.map((ca) => ca.assignment), prompts, runner: ordinaryRunner,
+                    ...(sliceEndsAt === undefined ? {} : { admit: () => Date.now() < sliceEndsAt }) });
+                if (journaled.retained > 0)
+                    process.stderr.write(`Reused ${journaled.retained} journaled call(s) from the interrupted council.\n`);
+                if (journaled.interrupted) {
+                    throw new ReviewCouncilInterrupted(journaled.reviews.filter(review => review.status !== 'canceled').length, totalCalls);
+                }
+                chunkReviews = journaled.reviews;
+            }
+            else
+                chunkReviews = await runReviews(chunkAssignments.map((ca) => ca.assignment), prompts, ordinaryRunner);
+        }
     }
     finally {
         progress.stop();