@alma-harness/runtime 0.7.0

package/LICENSE

@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.md

@@ -0,0 +1,96 @@
+# @alma-harness/runtime
+
+Official storage composition for `createConversationRunner`. This package wires
+existing stores; the host still supplies clients, audit, policy, prices, caps,
+revisions and limits. The root export contains types only.
+
+```ts
+import { createMemoryRuntime } from '@alma-harness/runtime/memory';
+import { createConversationRunner } from '@alma-harness/conversation';
+const resultPolicy = { maxSensitivity: 'personal' as const, maxRetentionMs: 60_000, maxChars: 100_000 };
+const runtime = createMemoryRuntime({ stepResultPolicy: resultPolicy, rootResultPolicy: resultPolicy });
+// hostConfig contains the non-storage conversation configuration.
+const runner = createConversationRunner({ ...hostConfig, ...runtime.stores,
+  step: { ...hostConfig.step, ...runtime.stores.step } });
+// Reuse the original idempotencyKey and input when retrying a delivery.
+const result = await runner.runTurn(request);
+await runtime.close();
+```
+
+See [the complete quickstart](../../examples/quickstart/src/agent.ts) for executable
+configuration. Memory is ephemeral: restarting loses notes, history, admission and
+replay protection. `close()` does not erase stores or reconcile uncertain work.
+
+## PostgreSQL
+
+Install the PostgreSQL peers and `pg` when using this subpath. Provision two trusted,
+dedicated schemas with different lowercase ASCII names (at most 63 characters).
+Public/system namespaces and connection URLs with startup `options` are rejected.
+
+```ts
+import { createPostgresRuntime, migratePostgresRuntime } from '@alma-harness/runtime/postgres';
+const namespace = { schema: 'agent_execution', rootSchema: 'agent_results',
+  onPoolError: (error: Error, schema: string) => console.error('Database pool error', schema, error) };
+// Run explicitly under a migration principal, outside request handling.
+await migratePostgresRuntime({ ...namespace, connectionString: migrationURL });
+const runtime = createPostgresRuntime({ ...namespace, connectionString: runtimeURL,
+  poolMax: { execution: 2, roots: 1 }, // Example connection budget, not a production recommendation.
+  stepResultPolicy: resultPolicy, rootResultPolicy: resultPolicy });
+```
+
+The migration principal needs schema/table/role provisioning rights. Migration
+installs official adapters, grants schema USAGE to `alma_app`/`alma_retention` and
+revokes their and PUBLIC's schema CREATE. It never grants login membership. The
+operator separately provisions the runtime login with `alma_app` membership,
+without superuser/BYPASSRLS/owner privileges. `alma_retention` membership belongs
+to a separately authorized operator login. Existing role attributes are unchanged.
+Migration is repeatable but not atomic across schemas: after a failure, correct the
+cause and rerun explicitly. Do not drop populated schemas to retry installation.
+
+The required synchronous `onPoolError(error, schema)` listener reports idle-client
+failures from both pools, including during migration. The host must not throw from
+this listener. Reporting does not retry work or release admission.
+
+Construction performs no connection, migration or grants. It owns two bounded pools
+(five connections each by default), pins their namespace and float settings, and uses the
+official scoped transactions. The result tables are physically separate for steps
+and conversation roots. Runtime startup fails on missing tables or memberships.
+
+`poolMax: { execution, roots }` sets the two independent limits. Both must be
+positive safe integers with a safe sum; null, partial objects and extra fields are
+rejected before either pool is allocated. The values are copied at construction;
+mutating the configuration cannot resize live pools. Checkout/connect timeout
+remains five seconds and idle timeout ten seconds. Generic driver overrides and
+public pool handles are not provided. Migrations have their own two max1 pools,
+always closed on completion/failure; application sizing does not tune migrations.
+
+Budget `sum(runtime instances × (execution + roots))` plus migrations, retention,
+backup, other pools and an administrative reserve against database capacity.
+Count every replica/worker class and reuse a runtime across its turns/observers.
+Connection limits do not bound worker concurrency or driver waiter queues. Host
+queue limits remain necessary; pressure cannot authorize retries or release
+uncertain admission. The deterministic max1 tests prove correctness with minimal
+capacity, not production throughput or a recommended server configuration.
+
+Register sessions and **both** result stores in the host's audited retention and
+erasure workflows. Erasing one result store does not erase the other. Quiesce workers
+before `close()`; it attempts both pools and is idempotent. Closing neither aborts
+nor releases uncertain admissions. Resolve `reconciliation_required` through the
+existing operator procedure, never by issuing a new delivery key.
+
+## Conversation operations
+
+`@alma-harness/runtime/operations` exports `createConversationOperations`. Supply
+runtime stores for metadata-only inspect, an existing step recovery capability for
+accounting-only repair, and separately privileged admission resolution plus a
+trusted maintained host quiescence capability for resolve. No default operator,
+provider clients, effect replay or automatic takeover is supplied.
+
+The installed `alma-operations` CLI accepts inspect/repair/resolve, an explicit
+local `--host` module and bounded JSON stdin. The host owns credentials and cleanup.
+See [the operator runbook](../../docs/conversation-operations.md) and its real
+PostgreSQL installed-consumer drill. Unknown/unpriced or late-only evidence stays
+blocked; release never marks an incomplete root successful. Expiry sweeps are
+explicitly scope-wide. A stale digest requires reinspection, while lost resolution
+ACK retries retain the same resolutionId. This is operator infrastructure, not a
+request-path fallback or a remote-worker fencing implementation.

package/dist/chunk-3OEFEOI4.js

@@ -0,0 +1,10 @@
+// src/policies.ts
+import { normalizeExecutionResultPolicy } from "@alma-harness/memory";
+function policies(value) {
+  return { stepResultPolicy: normalizeExecutionResultPolicy(value.stepResultPolicy), rootResultPolicy: normalizeExecutionResultPolicy(value.rootResultPolicy) };
+}
+
+export {
+  policies
+};
+//# sourceMappingURL=chunk-3OEFEOI4.js.map

package/dist/chunk-3OEFEOI4.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/policies.ts"],"sourcesContent":["import { normalizeExecutionResultPolicy } from \"@alma-harness/memory\";\nimport type { RuntimePolicies } from \"./index\";\nexport function policies(value: RuntimePolicies): RuntimePolicies {\n  return { stepResultPolicy: normalizeExecutionResultPolicy(value.stepResultPolicy), rootResultPolicy: normalizeExecutionResultPolicy(value.rootResultPolicy) };\n}\n"],"mappings":";AAAA,SAAS,sCAAsC;AAExC,SAAS,SAAS,OAAyC;AAChE,SAAO,EAAE,kBAAkB,+BAA+B,MAAM,gBAAgB,GAAG,kBAAkB,+BAA+B,MAAM,gBAAgB,EAAE;AAC9J;","names":[]}

package/dist/chunk-AZVGB23H.js

@@ -0,0 +1,239 @@
+// src/operations-input.ts
+import { settlementIdentifier, settlementScope } from "@alma-harness/core";
+var ConversationOperationError = class extends Error {
+  constructor(code) {
+    super(`Conversation operation: ${["invalid_request", "binding_conflict", "incomplete_inspection", "permission_required", "resolution_blocked", "stale_snapshot", "operation_failed"].includes(code) ? code : "operation_failed"}`);
+    this.code = code;
+    if (!["invalid_request", "binding_conflict", "incomplete_inspection", "permission_required", "resolution_blocked", "stale_snapshot", "operation_failed"].includes(code)) this.code = "operation_failed";
+    this.name = "ConversationOperationError";
+  }
+  code;
+};
+var fail = (code) => {
+  throw new ConversationOperationError(code);
+};
+function fields(value, keys) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return fail("invalid_request");
+  const descriptors = Object.getOwnPropertyDescriptors(value);
+  if (Reflect.ownKeys(descriptors).some((k) => typeof k !== "string" || !keys.includes(k) || !("value" in descriptors[k]))) return fail("invalid_request");
+  return Object.fromEntries(Object.entries(descriptors).map(([k, d]) => [k, d.value]));
+}
+function key(value) {
+  try {
+    const v = fields(value, ["scope", "sessionId", "rootKey"]);
+    return { scope: settlementScope(v.scope), sessionId: settlementIdentifier(v.sessionId), rootKey: settlementIdentifier(v.rootKey) };
+  } catch {
+    return fail("invalid_request");
+  }
+}
+function resolution(value) {
+  try {
+    const v = fields(value, ["key", "snapshotDigest", "resolutionId", "evidenceId"]);
+    if (typeof v.snapshotDigest !== "string" || !/^[a-f0-9]{64}$/.test(v.snapshotDigest)) return fail("invalid_request");
+    return { key: key(v.key), snapshotDigest: v.snapshotDigest, resolutionId: settlementIdentifier(v.resolutionId), evidenceId: settlementIdentifier(v.evidenceId) };
+  } catch {
+    return fail("invalid_request");
+  }
+}
+
+// src/operations.ts
+import { createHash } from "crypto";
+import { equalExecution, executionSettlementRequest, settlementIdentifier as settlementIdentifier2 } from "@alma-harness/core";
+import { bindOperationCost, checkOperationCall, normalizeRootCallReceipt } from "@alma-harness/execution";
+function canonical(value) {
+  if (value === null || typeof value !== "object") return JSON.stringify(value);
+  if (Array.isArray(value)) return `[${value.map(canonical).join(",")}]`;
+  return `{${Object.entries(value).filter(([, v]) => v !== void 0).sort(([a], [b]) => a < b ? -1 : a > b ? 1 : 0).map(([k, v]) => `${JSON.stringify(k)}:${canonical(v)}`).join(",")}}`;
+}
+var hash = (value) => createHash("sha256").update(canonical(value)).digest("hex");
+async function safe(fn) {
+  try {
+    return await fn();
+  } catch (error) {
+    if (error instanceof ConversationOperationError) throw error;
+    return fail("operation_failed");
+  }
+}
+function createConversationOperations(options) {
+  const { stores, recovery, operator, quiescence } = options;
+  const { admissions, step } = stores;
+  async function snapshot(k) {
+    const admission = await admissions.get(k.scope, k.rootKey);
+    if (!admission || admission.input.sessionId !== k.sessionId || admission.input.key !== k.rootKey || !equalExecution(admission.input.scope, k.scope)) return fail("binding_conflict");
+    const root = await step.trees.get(k.scope, k.rootKey);
+    if (root && !equalExecution(root.input, admission.input)) return fail("binding_conflict");
+    const members = [], receipts = [];
+    if (root) {
+      for (let afterOrdinal = 0; ; ) {
+        const page = await step.trees.listCalls(k.scope, k.rootKey, { afterOrdinal, limit: 100 });
+        for (const m of page) {
+          if (m.ordinal !== members.length + 1 || m.rootId !== root.input.id || members.length >= root.input.maxCalls) return fail("incomplete_inspection");
+          checkOperationCall(root.input, m.input);
+          members.push(m);
+        }
+        if (page.length < 100) break;
+        afterOrdinal = page.at(-1).ordinal;
+      }
+      if (members.length !== root.callCount) return fail("incomplete_inspection");
+      for (let afterOrdinal = 0; ; ) {
+        const page = await step.accounting.list(k.scope, k.rootKey, { afterOrdinal, limit: 100 });
+        for (const raw of page) {
+          const r = normalizeRootCallReceipt(raw);
+          if (r.accountingOrdinal !== receipts.length + 1 || r.rootId !== root.input.id || receipts.length >= members.length || receipts.some((x) => x.callId === r.callId)) return fail("binding_conflict");
+          if (r.previousUsd !== (receipts.at(-1)?.currentUsd ?? 0)) return fail("binding_conflict");
+          receipts.push(r);
+        }
+        if (page.length < 100) break;
+        afterOrdinal = page.at(-1).accountingOrdinal;
+      }
+    }
+    const accounting = await step.accounting.get(k.scope, k.rootKey);
+    if (root && (!accounting || accounting.rootId !== root.input.id || accounting.rootStatus !== root.status || accounting.reservedCalls !== members.length || accounting.settledCalls !== receipts.length || accounting.costUsd !== (receipts.at(-1)?.currentUsd ?? 0))) return fail("binding_conflict");
+    if (!root && accounting) return fail("binding_conflict");
+    const calls = [], proof = [admission, root, receipts, accounting];
+    for (const member of members) {
+      const e = member.input.execution, journal = await step.executions.get(k.scope, e.operationKey), receipt = receipts.find((r) => r.callId === e.callId);
+      if (journal && !equalExecution(journal.input, e)) return fail("binding_conflict");
+      const source = await step.settlements.getGoverned(k.scope, e.settlementId);
+      if (source) {
+        bindOperationCost(root.input, member, source);
+        if (!journal || !equalExecution(source.request, executionSettlementRequest(journal)) || journal.settlement && !equalExecution(journal.settlement, source.receipt)) return fail("binding_conflict");
+      }
+      if (receipt && (!source || receipt.reservationOrdinal !== member.ordinal || receipt.settlementId !== e.settlementId || receipt.costUsd !== source.receipt.settlement.costUsd)) return fail("binding_conflict");
+      const complete = journal?.state === "completed" && !!journal.settlement && !!source && !!receipt;
+      calls.push({
+        ordinal: member.ordinal,
+        kind: member.input.kind,
+        callId: e.callId,
+        operationKey: e.operationKey,
+        settlementId: e.settlementId,
+        deadlineAt: e.deadlineAt,
+        model: e.model,
+        priceVersion: e.priceVersion,
+        prices: e.prices,
+        providerRequestId: journal?.providerRequestId,
+        usage: journal?.evidence?.status === "known" ? journal.evidence.usage : void 0,
+        state: journal?.state ?? "missing",
+        evidence: journal?.evidence?.status ?? "missing",
+        pricing: journal?.pricing?.status ?? "missing",
+        accounted: complete,
+        ...receipt ? { costUsd: receipt.costUsd } : {},
+        recoveryUntil: journal?.recoveryUntil
+      });
+      proof.push(member, journal, source);
+    }
+    const pending = [];
+    let after;
+    for (let scanned = 0; ; ) {
+      const page = await step.inbox.listPending(k.scope, { limit: 100, ...after ? { after } : {} });
+      for (const row of page) {
+        if (!equalExecution(row.input.execution.scope, k.scope)) return fail("binding_conflict");
+        const cursor = { receivedAt: row.receivedAt, id: row.input.id };
+        if (after && (cursor.receivedAt < after.receivedAt || cursor.receivedAt === after.receivedAt && cursor.id <= after.id)) return fail("incomplete_inspection");
+        after = cursor;
+        const member = members.find((m) => m.input.execution.operationKey === row.input.execution.operationKey);
+        if (member) {
+          proof.push(row);
+          pending.push({ id: row.input.id, operationKey: row.input.execution.operationKey, receivedAt: row.receivedAt, evidence: row.input.evidence.status });
+        }
+      }
+      scanned += page.length;
+      if (page.length < 100) break;
+      if (scanned >= 1e4) return fail("incomplete_inspection");
+    }
+    if (!equalExecution(admission, await admissions.get(k.scope, k.rootKey)) || !equalExecution(root, await step.trees.get(k.scope, k.rootKey))) return fail("stale_snapshot");
+    const blockers = [
+      ...!root ? ["root_missing"] : [],
+      ...admission.status !== "reconciliation_required" ? ["admission_not_uncertain"] : [],
+      ...Date.now() < Date.parse(admission.input.deadlineAt) ? ["deadline_not_expired"] : [],
+      ...calls.some((c) => !c.accounted) ? ["incomplete_accounting"] : [],
+      ...pending.length ? ["pending_usage"] : []
+    ];
+    return {
+      key: k,
+      digest: hash(proof),
+      admission: { status: admission.status, rootId: admission.input.id, deadlineAt: admission.input.deadlineAt, resolutionId: admission.resolutionId },
+      root: root ? { status: root.status, callCount: root.callCount } : null,
+      accounting: accounting ? { costUsd: accounting.costUsd, reservedCalls: accounting.reservedCalls, settledCalls: accounting.settledCalls } : null,
+      calls,
+      pending,
+      blockers
+    };
+  }
+  async function barrier(intent, fn) {
+    if (!quiescence) return fail("permission_required");
+    let entered = false, active = true;
+    try {
+      return await quiescence.withQuiescence(structuredClone(intent), async () => {
+        if (!active || entered) return fail("permission_required");
+        entered = true;
+        return fn();
+      });
+    } finally {
+      active = false;
+    }
+  }
+  return {
+    inspect(value) {
+      return safe(() => snapshot(key(value)));
+    },
+    repair(value) {
+      return safe(async () => {
+        const k = key(value);
+        if (!recovery) return fail("permission_required");
+        return barrier({ action: "repair", key: k }, async () => {
+          if (!(await snapshot(k)).root) return fail("resolution_blocked");
+          const expired = {
+            admissions: (await admissions.reconcileExpired(k.scope, { limit: 100 })).length,
+            trees: (await step.trees.reconcileExpired(k.scope, { limit: 100 })).length,
+            executions: (await step.executions.reconcileExpired(k.scope, { limit: 100 })).length
+          };
+          const before = await snapshot(k);
+          for (const call of before.calls) if (call.state === "completed" || (call.state === "result_received" || call.state === "settled") && call.pricing === "ready") {
+            await recovery.recover({ scope: k.scope, rootKey: k.rootKey, operationKey: call.operationKey }, { leaseMs: 5e3 });
+          }
+          for (let after, scanned = 0; ; ) {
+            const page = await recovery.reconcileUsage(k, { limit: 100, ...after ? { after } : {} });
+            scanned += page.scanned;
+            if (page.scanned < 100) break;
+            if (!page.after || scanned >= 1e4 || equalExecution(after, page.after)) return fail("incomplete_inspection");
+            after = page.after;
+          }
+          return { sweepScope: k.scope, expired, snapshot: await snapshot(k) };
+        });
+      });
+    },
+    resolve(value) {
+      return safe(async () => {
+        const v = fields(value, ["key", "snapshotDigest", "resolutionId", "evidenceId"]), k = key(v.key);
+        const resolutionId = settlementIdentifier2(v.resolutionId), evidenceId = settlementIdentifier2(v.evidenceId);
+        if (typeof v.snapshotDigest !== "string" || !/^[a-f0-9]{64}$/.test(v.snapshotDigest)) return fail("invalid_request");
+        if (!operator) return fail("permission_required");
+        return barrier({ action: "resolve", key: k, resolutionId, evidenceId, snapshotDigest: v.snapshotDigest }, async () => {
+          const current = await snapshot(k);
+          if (current.admission.status === "released") {
+            if (current.admission.resolutionId !== resolutionId) return fail("binding_conflict");
+            return { status: "resolved", key: k, resolutionId };
+          }
+          if (current.digest !== v.snapshotDigest) return fail("stale_snapshot");
+          if (current.blockers.length) return fail("resolution_blocked");
+          try {
+            await operator.resolve(k.scope, k.rootKey, { resolutionId });
+          } catch {
+          }
+          const saved = await admissions.get(k.scope, k.rootKey);
+          if (!saved || saved.status !== "released" || saved.resolutionId !== resolutionId || saved.input.id !== current.admission.rootId || saved.input.sessionId !== k.sessionId || !equalExecution(saved.input.scope, k.scope) || saved.input.key !== k.rootKey) return fail("operation_failed");
+          return { status: "resolved", key: k, resolutionId };
+        });
+      });
+    }
+  };
+}
+
+export {
+  ConversationOperationError,
+  key,
+  resolution,
+  createConversationOperations
+};
+//# sourceMappingURL=chunk-AZVGB23H.js.map

package/dist/chunk-AZVGB23H.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/operations-input.ts","../src/operations.ts"],"sourcesContent":["import { settlementIdentifier, settlementScope, type Scope } from \"@alma-harness/core\";\nimport type { ConversationOperationKey, ConversationResolution } from \"./operations\";\nexport class ConversationOperationError extends Error {\n  constructor(readonly code: \"invalid_request\" | \"binding_conflict\" | \"incomplete_inspection\" | \"permission_required\" | \"resolution_blocked\" | \"stale_snapshot\" | \"operation_failed\") {\n    super(`Conversation operation: ${[\"invalid_request\", \"binding_conflict\", \"incomplete_inspection\", \"permission_required\", \"resolution_blocked\", \"stale_snapshot\", \"operation_failed\"].includes(code) ? code : \"operation_failed\"}`);\n    if (![\"invalid_request\", \"binding_conflict\", \"incomplete_inspection\", \"permission_required\", \"resolution_blocked\", \"stale_snapshot\", \"operation_failed\"].includes(code)) this.code = \"operation_failed\";\n    this.name = \"ConversationOperationError\";\n  }\n}\nexport const fail = (code: ConversationOperationError[\"code\"]): never => { throw new ConversationOperationError(code); };\nexport function fields(value: unknown, keys: string[]): Record<string, unknown> {\n  if (!value || typeof value !== \"object\" || Array.isArray(value)) return fail(\"invalid_request\");\n  const descriptors = Object.getOwnPropertyDescriptors(value);\n  if (Reflect.ownKeys(descriptors).some(k => typeof k !== \"string\" || !keys.includes(k) || !(\"value\" in descriptors[k]!))) return fail(\"invalid_request\");\n  return Object.fromEntries(Object.entries(descriptors).map(([k, d]) => [k, d.value]));\n}\nexport function key(value: unknown): ConversationOperationKey {\n  try { const v = fields(value, [\"scope\", \"sessionId\", \"rootKey\"]); return { scope: settlementScope(v.scope as Scope), sessionId: settlementIdentifier(v.sessionId), rootKey: settlementIdentifier(v.rootKey) }; }\n  catch { return fail(\"invalid_request\"); }\n}\n\nexport function resolution(value: unknown): ConversationResolution {\n  try {\n    const v = fields(value, [\"key\", \"snapshotDigest\", \"resolutionId\", \"evidenceId\"]);\n    if (typeof v.snapshotDigest !== \"string\" || !/^[a-f0-9]{64}$/.test(v.snapshotDigest)) return fail(\"invalid_request\");\n    return { key: key(v.key), snapshotDigest: v.snapshotDigest, resolutionId: settlementIdentifier(v.resolutionId), evidenceId: settlementIdentifier(v.evidenceId) };\n  } catch { return fail(\"invalid_request\"); }\n}\n","import { ConversationOperationError, fail, fields, key } from \"./operations-input\";\nexport { ConversationOperationError } from \"./operations-input\";\nimport { createHash } from \"node:crypto\";\nimport { equalExecution, executionSettlementRequest, settlementIdentifier, settlementScope, type Scope } from \"@alma-harness/core\";\nimport { bindOperationCost, checkOperationCall, normalizeRootCallReceipt, type OperationSessionStore, type RootCallReceipt, type OperationCallRecord } from \"@alma-harness/execution\";\nimport type { createGovernedStepRunner } from \"@alma-harness/single-call\";\nimport type { RuntimeStores } from \"./index\";\n\nexport interface ConversationOperationKey { scope: Scope; sessionId: string; rootKey: string }\nexport interface ConversationResolution { key: ConversationOperationKey; snapshotDigest: string; resolutionId: string; evidenceId: string }\nexport type ConversationOperationIntent = { action: \"repair\"; key: ConversationOperationKey } | ({ action: \"resolve\" } & ConversationResolution);\n/** Trusted host infrastructure: maintain the barrier for the whole callback, after verifying workers, effects and operator intent. */\nexport interface ConversationQuiescence {\n  withQuiescence<T>(intent: ConversationOperationIntent, operation: () => Promise<T>): Promise<T>;\n}\nexport interface ConversationOperationsOptions {\n  stores: RuntimeStores;\n  recovery?: Pick<ReturnType<typeof createGovernedStepRunner>, \"recover\" | \"reconcileUsage\">;\n  operator?: Pick<OperationSessionStore, \"resolve\">;\n  quiescence?: ConversationQuiescence;\n}\nfunction canonical(value: unknown): string {\n  if (value === null || typeof value !== \"object\") return JSON.stringify(value);\n  if (Array.isArray(value)) return `[${value.map(canonical).join(\",\")}]`;\n  return `{${Object.entries(value).filter(([, v]) => v !== undefined).sort(([a], [b]) => a < b ? -1 : a > b ? 1 : 0).map(([k, v]) => `${JSON.stringify(k)}:${canonical(v)}`).join(\",\")}}`;\n}\nconst hash = (value: unknown) => createHash(\"sha256\").update(canonical(value)).digest(\"hex\");\nasync function safe<T>(fn: () => Promise<T>): Promise<T> {\n  try { return await fn(); } catch (error) { if (error instanceof ConversationOperationError) throw error; return fail(\"operation_failed\"); }\n}\n\n/** Inspection never reads content. Mutation has no default operator or quiescence authority. */\nexport function createConversationOperations(options: ConversationOperationsOptions) {\n  const { stores, recovery, operator, quiescence } = options;\n  const { admissions, step } = stores;\n  async function snapshot(k: ConversationOperationKey) {\n    const admission = await admissions.get(k.scope, k.rootKey);\n    if (!admission || admission.input.sessionId !== k.sessionId || admission.input.key !== k.rootKey || !equalExecution(admission.input.scope, k.scope)) return fail(\"binding_conflict\");\n    const root = await step.trees.get(k.scope, k.rootKey);\n    if (root && !equalExecution(root.input, admission.input)) return fail(\"binding_conflict\");\n    const members: OperationCallRecord[] = [], receipts: RootCallReceipt[] = [];\n    if (root) {\n      for (let afterOrdinal = 0;;) {\n        const page = await step.trees.listCalls(k.scope, k.rootKey, { afterOrdinal, limit: 100 });\n        for (const m of page) {\n          if (m.ordinal !== members.length + 1 || m.rootId !== root.input.id || members.length >= root.input.maxCalls) return fail(\"incomplete_inspection\");\n          checkOperationCall(root.input, m.input); members.push(m);\n        }\n        if (page.length < 100) break; afterOrdinal = page.at(-1)!.ordinal;\n      }\n      if (members.length !== root.callCount) return fail(\"incomplete_inspection\");\n      for (let afterOrdinal = 0;;) {\n        const page = await step.accounting.list(k.scope, k.rootKey, { afterOrdinal, limit: 100 });\n        for (const raw of page) {\n          const r = normalizeRootCallReceipt(raw);\n          if (r.accountingOrdinal !== receipts.length + 1 || r.rootId !== root.input.id || receipts.length >= members.length || receipts.some(x => x.callId === r.callId)) return fail(\"binding_conflict\");\n          if (r.previousUsd !== (receipts.at(-1)?.currentUsd ?? 0)) return fail(\"binding_conflict\");\n          receipts.push(r);\n        }\n        if (page.length < 100) break; afterOrdinal = page.at(-1)!.accountingOrdinal;\n      }\n    }\n    const accounting = await step.accounting.get(k.scope, k.rootKey);\n    if (root && (!accounting || accounting.rootId !== root.input.id || accounting.rootStatus !== root.status || accounting.reservedCalls !== members.length || accounting.settledCalls !== receipts.length || accounting.costUsd !== (receipts.at(-1)?.currentUsd ?? 0))) return fail(\"binding_conflict\");\n    if (!root && accounting) return fail(\"binding_conflict\");\n    const calls = [], proof: unknown[] = [admission, root, receipts, accounting];\n    for (const member of members) {\n      const e = member.input.execution, journal = await step.executions.get(k.scope, e.operationKey), receipt = receipts.find(r => r.callId === e.callId);\n      if (journal && !equalExecution(journal.input, e)) return fail(\"binding_conflict\");\n      const source = await step.settlements.getGoverned(k.scope, e.settlementId);\n      if (source) {\n        bindOperationCost(root!.input, member, source);\n        if (!journal || !equalExecution(source.request, executionSettlementRequest(journal)) || (journal.settlement && !equalExecution(journal.settlement, source.receipt))) return fail(\"binding_conflict\");\n      }\n      if (receipt && (!source || receipt.reservationOrdinal !== member.ordinal || receipt.settlementId !== e.settlementId || receipt.costUsd !== source.receipt.settlement.costUsd)) return fail(\"binding_conflict\");\n      const complete = journal?.state === \"completed\" && !!journal.settlement && !!source && !!receipt;\n      calls.push({ ordinal: member.ordinal, kind: member.input.kind, callId: e.callId, operationKey: e.operationKey, settlementId: e.settlementId,\n        deadlineAt: e.deadlineAt, model: e.model, priceVersion: e.priceVersion, prices: e.prices, providerRequestId: journal?.providerRequestId, usage: journal?.evidence?.status === \"known\" ? journal.evidence.usage : undefined, state: journal?.state ?? \"missing\", evidence: journal?.evidence?.status ?? \"missing\", pricing: journal?.pricing?.status ?? \"missing\",\n        accounted: complete, ...(receipt ? { costUsd: receipt.costUsd } : {}), recoveryUntil: journal?.recoveryUntil });\n      proof.push(member, journal, source);\n    }\n    const pending = [];\n    let after: { receivedAt: string; id: string } | undefined;\n    for (let scanned = 0;;) {\n      const page = await step.inbox.listPending(k.scope, { limit: 100, ...(after ? { after } : {}) });\n      for (const row of page) {\n        if (!equalExecution(row.input.execution.scope, k.scope)) return fail(\"binding_conflict\");\n        const cursor = { receivedAt: row.receivedAt, id: row.input.id };\n        if (after && (cursor.receivedAt < after.receivedAt || (cursor.receivedAt === after.receivedAt && cursor.id <= after.id))) return fail(\"incomplete_inspection\");\n        after = cursor;\n        const member = members.find(m => m.input.execution.operationKey === row.input.execution.operationKey);\n        if (member) { proof.push(row); pending.push({ id: row.input.id, operationKey: row.input.execution.operationKey, receivedAt: row.receivedAt, evidence: row.input.evidence.status }); }\n      }\n      scanned += page.length;\n      if (page.length < 100) break;\n      if (scanned >= 10000) return fail(\"incomplete_inspection\");\n    }\n    if (!equalExecution(admission, await admissions.get(k.scope, k.rootKey)) || !equalExecution(root, await step.trees.get(k.scope, k.rootKey))) return fail(\"stale_snapshot\");\n    const blockers = [\n      ...(!root ? [\"root_missing\"] : []),\n      ...(admission.status !== \"reconciliation_required\" ? [\"admission_not_uncertain\"] : []),\n      ...(Date.now() < Date.parse(admission.input.deadlineAt) ? [\"deadline_not_expired\"] : []),\n      ...(calls.some(c => !c.accounted) ? [\"incomplete_accounting\"] : []),\n      ...(pending.length ? [\"pending_usage\"] : []),\n    ];\n    return { key: k, digest: hash(proof), admission: { status: admission.status, rootId: admission.input.id, deadlineAt: admission.input.deadlineAt, resolutionId: admission.resolutionId },\n      root: root ? { status: root.status, callCount: root.callCount } : null,\n      accounting: accounting ? { costUsd: accounting.costUsd, reservedCalls: accounting.reservedCalls, settledCalls: accounting.settledCalls } : null,\n      calls, pending, blockers };\n  }\n  async function barrier<T>(intent: ConversationOperationIntent, fn: () => Promise<T>): Promise<T> {\n    if (!quiescence) return fail(\"permission_required\");\n    let entered = false, active = true;\n    try {\n      return await quiescence.withQuiescence(structuredClone(intent), async () => {\n        if (!active || entered) return fail(\"permission_required\"); entered = true; return fn();\n      });\n    } finally { active = false; }\n  }\n  return {\n    inspect(value: ConversationOperationKey) { return safe(() => snapshot(key(value))); },\n    repair(value: ConversationOperationKey) { return safe(async () => {\n      const k = key(value); if (!recovery) return fail(\"permission_required\");\n      return barrier({ action: \"repair\", key: k }, async () => {\n        if (!(await snapshot(k)).root) return fail(\"resolution_blocked\");\n        const expired = { admissions: (await admissions.reconcileExpired(k.scope, { limit: 100 })).length,\n          trees: (await step.trees.reconcileExpired(k.scope, { limit: 100 })).length,\n          executions: (await step.executions.reconcileExpired(k.scope, { limit: 100 })).length };\n        const before = await snapshot(k);\n        for (const call of before.calls) if (call.state === \"completed\" || ((call.state === \"result_received\" || call.state === \"settled\") && call.pricing === \"ready\")) {\n          await recovery.recover({ scope: k.scope, rootKey: k.rootKey, operationKey: call.operationKey }, { leaseMs: 5000 });\n        }\n        for (let after: { receivedAt: string; id: string } | undefined, scanned = 0;;) {\n          const page = await recovery.reconcileUsage(k, { limit: 100, ...(after ? { after } : {}) }); scanned += page.scanned;\n          if (page.scanned < 100) break;\n          if (!page.after || scanned >= 10000 || equalExecution(after, page.after)) return fail(\"incomplete_inspection\"); after = page.after;\n        }\n        return { sweepScope: k.scope, expired, snapshot: await snapshot(k) };\n      });\n    }); },\n    resolve(value: ConversationResolution) { return safe(async () => {\n      const v = fields(value, [\"key\", \"snapshotDigest\", \"resolutionId\", \"evidenceId\"]), k = key(v.key);\n      const resolutionId = settlementIdentifier(v.resolutionId), evidenceId = settlementIdentifier(v.evidenceId);\n      if (typeof v.snapshotDigest !== \"string\" || !/^[a-f0-9]{64}$/.test(v.snapshotDigest)) return fail(\"invalid_request\");\n      if (!operator) return fail(\"permission_required\");\n      return barrier({ action: \"resolve\", key: k, resolutionId, evidenceId, snapshotDigest: v.snapshotDigest }, async () => {\n        const current = await snapshot(k);\n        if (current.admission.status === \"released\") { if (current.admission.resolutionId !== resolutionId) return fail(\"binding_conflict\"); return { status: \"resolved\" as const, key: k, resolutionId }; }\n        if (current.digest !== v.snapshotDigest) return fail(\"stale_snapshot\");\n        if (current.blockers.length) return fail(\"resolution_blocked\");\n        try { await operator.resolve(k.scope, k.rootKey, { resolutionId }); }\n        catch { /* Only verified readback of this exact resolution can confirm a lost ACK. */ }\n        const saved = await admissions.get(k.scope, k.rootKey);\n        if (!saved || saved.status !== \"released\" || saved.resolutionId !== resolutionId || saved.input.id !== current.admission.rootId || saved.input.sessionId !== k.sessionId || !equalExecution(saved.input.scope, k.scope) || saved.input.key !== k.rootKey) return fail(\"operation_failed\");\n        return { status: \"resolved\" as const, key: k, resolutionId };\n      });\n    }); },\n  };\n}\n"],"mappings":";AAAA,SAAS,sBAAsB,uBAAmC;AAE3D,IAAM,6BAAN,cAAyC,MAAM;AAAA,EACpD,YAAqB,MAA+J;AAClL,UAAM,2BAA2B,CAAC,mBAAmB,oBAAoB,yBAAyB,uBAAuB,sBAAsB,kBAAkB,kBAAkB,EAAE,SAAS,IAAI,IAAI,OAAO,kBAAkB,EAAE;AAD9M;AAEnB,QAAI,CAAC,CAAC,mBAAmB,oBAAoB,yBAAyB,uBAAuB,sBAAsB,kBAAkB,kBAAkB,EAAE,SAAS,IAAI,EAAG,MAAK,OAAO;AACrL,SAAK,OAAO;AAAA,EACd;AAAA,EAJqB;AAKvB;AACO,IAAM,OAAO,CAAC,SAAoD;AAAE,QAAM,IAAI,2BAA2B,IAAI;AAAG;AAChH,SAAS,OAAO,OAAgB,MAAyC;AAC9E,MAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,EAAG,QAAO,KAAK,iBAAiB;AAC9F,QAAM,cAAc,OAAO,0BAA0B,KAAK;AAC1D,MAAI,QAAQ,QAAQ,WAAW,EAAE,KAAK,OAAK,OAAO,MAAM,YAAY,CAAC,KAAK,SAAS,CAAC,KAAK,EAAE,WAAW,YAAY,CAAC,EAAG,EAAG,QAAO,KAAK,iBAAiB;AACtJ,SAAO,OAAO,YAAY,OAAO,QAAQ,WAAW,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;AACrF;AACO,SAAS,IAAI,OAA0C;AAC5D,MAAI;AAAE,UAAM,IAAI,OAAO,OAAO,CAAC,SAAS,aAAa,SAAS,CAAC;AAAG,WAAO,EAAE,OAAO,gBAAgB,EAAE,KAAc,GAAG,WAAW,qBAAqB,EAAE,SAAS,GAAG,SAAS,qBAAqB,EAAE,OAAO,EAAE;AAAA,EAAG,QACzM;AAAE,WAAO,KAAK,iBAAiB;AAAA,EAAG;AAC1C;AAEO,SAAS,WAAW,OAAwC;AACjE,MAAI;AACF,UAAM,IAAI,OAAO,OAAO,CAAC,OAAO,kBAAkB,gBAAgB,YAAY,CAAC;AAC/E,QAAI,OAAO,EAAE,mBAAmB,YAAY,CAAC,iBAAiB,KAAK,EAAE,cAAc,EAAG,QAAO,KAAK,iBAAiB;AACnH,WAAO,EAAE,KAAK,IAAI,EAAE,GAAG,GAAG,gBAAgB,EAAE,gBAAgB,cAAc,qBAAqB,EAAE,YAAY,GAAG,YAAY,qBAAqB,EAAE,UAAU,EAAE;AAAA,EACjK,QAAQ;AAAE,WAAO,KAAK,iBAAiB;AAAA,EAAG;AAC5C;;;ACzBA,SAAS,kBAAkB;AAC3B,SAAS,gBAAgB,4BAA4B,wBAAAA,6BAAyD;AAC9G,SAAS,mBAAmB,oBAAoB,gCAA4G;AAiB5J,SAAS,UAAU,OAAwB;AACzC,MAAI,UAAU,QAAQ,OAAO,UAAU,SAAU,QAAO,KAAK,UAAU,KAAK;AAC5E,MAAI,MAAM,QAAQ,KAAK,EAAG,QAAO,IAAI,MAAM,IAAI,SAAS,EAAE,KAAK,GAAG,CAAC;AACnE,SAAO,IAAI,OAAO,QAAQ,KAAK,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC,MAAM,MAAM,MAAS,EAAE,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,KAAK,UAAU,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,EAAE,EAAE,KAAK,GAAG,CAAC;AACtL;AACA,IAAM,OAAO,CAAC,UAAmB,WAAW,QAAQ,EAAE,OAAO,UAAU,KAAK,CAAC,EAAE,OAAO,KAAK;AAC3F,eAAe,KAAQ,IAAkC;AACvD,MAAI;AAAE,WAAO,MAAM,GAAG;AAAA,EAAG,SAAS,OAAO;AAAE,QAAI,iBAAiB,2BAA4B,OAAM;AAAO,WAAO,KAAK,kBAAkB;AAAA,EAAG;AAC5I;AAGO,SAAS,6BAA6B,SAAwC;AACnF,QAAM,EAAE,QAAQ,UAAU,UAAU,WAAW,IAAI;AACnD,QAAM,EAAE,YAAY,KAAK,IAAI;AAC7B,iBAAe,SAAS,GAA6B;AACnD,UAAM,YAAY,MAAM,WAAW,IAAI,EAAE,OAAO,EAAE,OAAO;AACzD,QAAI,CAAC,aAAa,UAAU,MAAM,cAAc,EAAE,aAAa,UAAU,MAAM,QAAQ,EAAE,WAAW,CAAC,eAAe,UAAU,MAAM,OAAO,EAAE,KAAK,EAAG,QAAO,KAAK,kBAAkB;AACnL,UAAM,OAAO,MAAM,KAAK,MAAM,IAAI,EAAE,OAAO,EAAE,OAAO;AACpD,QAAI,QAAQ,CAAC,eAAe,KAAK,OAAO,UAAU,KAAK,EAAG,QAAO,KAAK,kBAAkB;AACxF,UAAM,UAAiC,CAAC,GAAG,WAA8B,CAAC;AAC1E,QAAI,MAAM;AACR,eAAS,eAAe,OAAK;AAC3B,cAAM,OAAO,MAAM,KAAK,MAAM,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,cAAc,OAAO,IAAI,CAAC;AACxF,mBAAW,KAAK,MAAM;AACpB,cAAI,EAAE,YAAY,QAAQ,SAAS,KAAK,EAAE,WAAW,KAAK,MAAM,MAAM,QAAQ,UAAU,KAAK,MAAM,SAAU,QAAO,KAAK,uBAAuB;AAChJ,6BAAmB,KAAK,OAAO,EAAE,KAAK;AAAG,kBAAQ,KAAK,CAAC;AAAA,QACzD;AACA,YAAI,KAAK,SAAS,IAAK;AAAO,uBAAe,KAAK,GAAG,EAAE,EAAG;AAAA,MAC5D;AACA,UAAI,QAAQ,WAAW,KAAK,UAAW,QAAO,KAAK,uBAAuB;AAC1E,eAAS,eAAe,OAAK;AAC3B,cAAM,OAAO,MAAM,KAAK,WAAW,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,cAAc,OAAO,IAAI,CAAC;AACxF,mBAAW,OAAO,MAAM;AACtB,gBAAM,IAAI,yBAAyB,GAAG;AACtC,cAAI,EAAE,sBAAsB,SAAS,SAAS,KAAK,EAAE,WAAW,KAAK,MAAM,MAAM,SAAS,UAAU,QAAQ,UAAU,SAAS,KAAK,OAAK,EAAE,WAAW,EAAE,MAAM,EAAG,QAAO,KAAK,kBAAkB;AAC/L,cAAI,EAAE,iBAAiB,SAAS,GAAG,EAAE,GAAG,cAAc,GAAI,QAAO,KAAK,kBAAkB;AACxF,mBAAS,KAAK,CAAC;AAAA,QACjB;AACA,YAAI,KAAK,SAAS,IAAK;AAAO,uBAAe,KAAK,GAAG,EAAE,EAAG;AAAA,MAC5D;AAAA,IACF;AACA,UAAM,aAAa,MAAM,KAAK,WAAW,IAAI,EAAE,OAAO,EAAE,OAAO;AAC/D,QAAI,SAAS,CAAC,cAAc,WAAW,WAAW,KAAK,MAAM,MAAM,WAAW,eAAe,KAAK,UAAU,WAAW,kBAAkB,QAAQ,UAAU,WAAW,iBAAiB,SAAS,UAAU,WAAW,aAAa,SAAS,GAAG,EAAE,GAAG,cAAc,IAAK,QAAO,KAAK,kBAAkB;AACpS,QAAI,CAAC,QAAQ,WAAY,QAAO,KAAK,kBAAkB;AACvD,UAAM,QAAQ,CAAC,GAAG,QAAmB,CAAC,WAAW,MAAM,UAAU,UAAU;AAC3E,eAAW,UAAU,SAAS;AAC5B,YAAM,IAAI,OAAO,MAAM,WAAW,UAAU,MAAM,KAAK,WAAW,IAAI,EAAE,OAAO,EAAE,YAAY,GAAG,UAAU,SAAS,KAAK,OAAK,EAAE,WAAW,EAAE,MAAM;AAClJ,UAAI,WAAW,CAAC,eAAe,QAAQ,OAAO,CAAC,EAAG,QAAO,KAAK,kBAAkB;AAChF,YAAM,SAAS,MAAM,KAAK,YAAY,YAAY,EAAE,OAAO,EAAE,YAAY;AACzE,UAAI,QAAQ;AACV,0BAAkB,KAAM,OAAO,QAAQ,MAAM;AAC7C,YAAI,CAAC,WAAW,CAAC,eAAe,OAAO,SAAS,2BAA2B,OAAO,CAAC,KAAM,QAAQ,cAAc,CAAC,eAAe,QAAQ,YAAY,OAAO,OAAO,EAAI,QAAO,KAAK,kBAAkB;AAAA,MACrM;AACA,UAAI,YAAY,CAAC,UAAU,QAAQ,uBAAuB,OAAO,WAAW,QAAQ,iBAAiB,EAAE,gBAAgB,QAAQ,YAAY,OAAO,QAAQ,WAAW,SAAU,QAAO,KAAK,kBAAkB;AAC7M,YAAM,WAAW,SAAS,UAAU,eAAe,CAAC,CAAC,QAAQ,cAAc,CAAC,CAAC,UAAU,CAAC,CAAC;AACzF,YAAM,KAAK;AAAA,QAAE,SAAS,OAAO;AAAA,QAAS,MAAM,OAAO,MAAM;AAAA,QAAM,QAAQ,EAAE;AAAA,QAAQ,cAAc,EAAE;AAAA,QAAc,cAAc,EAAE;AAAA,QAC7H,YAAY,EAAE;AAAA,QAAY,OAAO,EAAE;AAAA,QAAO,cAAc,EAAE;AAAA,QAAc,QAAQ,EAAE;AAAA,QAAQ,mBAAmB,SAAS;AAAA,QAAmB,OAAO,SAAS,UAAU,WAAW,UAAU,QAAQ,SAAS,QAAQ;AAAA,QAAW,OAAO,SAAS,SAAS;AAAA,QAAW,UAAU,SAAS,UAAU,UAAU;AAAA,QAAW,SAAS,SAAS,SAAS,UAAU;AAAA,QACvV,WAAW;AAAA,QAAU,GAAI,UAAU,EAAE,SAAS,QAAQ,QAAQ,IAAI,CAAC;AAAA,QAAI,eAAe,SAAS;AAAA,MAAc,CAAC;AAChH,YAAM,KAAK,QAAQ,SAAS,MAAM;AAAA,IACpC;AACA,UAAM,UAAU,CAAC;AACjB,QAAI;AACJ,aAAS,UAAU,OAAK;AACtB,YAAM,OAAO,MAAM,KAAK,MAAM,YAAY,EAAE,OAAO,EAAE,OAAO,KAAK,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC,EAAG,CAAC;AAC9F,iBAAW,OAAO,MAAM;AACtB,YAAI,CAAC,eAAe,IAAI,MAAM,UAAU,OAAO,EAAE,KAAK,EAAG,QAAO,KAAK,kBAAkB;AACvF,cAAM,SAAS,EAAE,YAAY,IAAI,YAAY,IAAI,IAAI,MAAM,GAAG;AAC9D,YAAI,UAAU,OAAO,aAAa,MAAM,cAAe,OAAO,eAAe,MAAM,cAAc,OAAO,MAAM,MAAM,IAAM,QAAO,KAAK,uBAAuB;AAC7J,gBAAQ;AACR,cAAM,SAAS,QAAQ,KAAK,OAAK,EAAE,MAAM,UAAU,iBAAiB,IAAI,MAAM,UAAU,YAAY;AACpG,YAAI,QAAQ;AAAE,gBAAM,KAAK,GAAG;AAAG,kBAAQ,KAAK,EAAE,IAAI,IAAI,MAAM,IAAI,cAAc,IAAI,MAAM,UAAU,cAAc,YAAY,IAAI,YAAY,UAAU,IAAI,MAAM,SAAS,OAAO,CAAC;AAAA,QAAG;AAAA,MACtL;AACA,iBAAW,KAAK;AAChB,UAAI,KAAK,SAAS,IAAK;AACvB,UAAI,WAAW,IAAO,QAAO,KAAK,uBAAuB;AAAA,IAC3D;AACA,QAAI,CAAC,eAAe,WAAW,MAAM,WAAW,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,eAAe,MAAM,MAAM,KAAK,MAAM,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,EAAG,QAAO,KAAK,gBAAgB;AACzK,UAAM,WAAW;AAAA,MACf,GAAI,CAAC,OAAO,CAAC,cAAc,IAAI,CAAC;AAAA,MAChC,GAAI,UAAU,WAAW,4BAA4B,CAAC,yBAAyB,IAAI,CAAC;AAAA,MACpF,GAAI,KAAK,IAAI,IAAI,KAAK,MAAM,UAAU,MAAM,UAAU,IAAI,CAAC,sBAAsB,IAAI,CAAC;AAAA,MACtF,GAAI,MAAM,KAAK,OAAK,CAAC,EAAE,SAAS,IAAI,CAAC,uBAAuB,IAAI,CAAC;AAAA,MACjE,GAAI,QAAQ,SAAS,CAAC,eAAe,IAAI,CAAC;AAAA,IAC5C;AACA,WAAO;AAAA,MAAE,KAAK;AAAA,MAAG,QAAQ,KAAK,KAAK;AAAA,MAAG,WAAW,EAAE,QAAQ,UAAU,QAAQ,QAAQ,UAAU,MAAM,IAAI,YAAY,UAAU,MAAM,YAAY,cAAc,UAAU,aAAa;AAAA,MACpL,MAAM,OAAO,EAAE,QAAQ,KAAK,QAAQ,WAAW,KAAK,UAAU,IAAI;AAAA,MAClE,YAAY,aAAa,EAAE,SAAS,WAAW,SAAS,eAAe,WAAW,eAAe,cAAc,WAAW,aAAa,IAAI;AAAA,MAC3I;AAAA,MAAO;AAAA,MAAS;AAAA,IAAS;AAAA,EAC7B;AACA,iBAAe,QAAW,QAAqC,IAAkC;AAC/F,QAAI,CAAC,WAAY,QAAO,KAAK,qBAAqB;AAClD,QAAI,UAAU,OAAO,SAAS;AAC9B,QAAI;AACF,aAAO,MAAM,WAAW,eAAe,gBAAgB,MAAM,GAAG,YAAY;AAC1E,YAAI,CAAC,UAAU,QAAS,QAAO,KAAK,qBAAqB;AAAG,kBAAU;AAAM,eAAO,GAAG;AAAA,MACxF,CAAC;AAAA,IACH,UAAE;AAAU,eAAS;AAAA,IAAO;AAAA,EAC9B;AACA,SAAO;AAAA,IACL,QAAQ,OAAiC;AAAE,aAAO,KAAK,MAAM,SAAS,IAAI,KAAK,CAAC,CAAC;AAAA,IAAG;AAAA,IACpF,OAAO,OAAiC;AAAE,aAAO,KAAK,YAAY;AAChE,cAAM,IAAI,IAAI,KAAK;AAAG,YAAI,CAAC,SAAU,QAAO,KAAK,qBAAqB;AACtE,eAAO,QAAQ,EAAE,QAAQ,UAAU,KAAK,EAAE,GAAG,YAAY;AACvD,cAAI,EAAE,MAAM,SAAS,CAAC,GAAG,KAAM,QAAO,KAAK,oBAAoB;AAC/D,gBAAM,UAAU;AAAA,YAAE,aAAa,MAAM,WAAW,iBAAiB,EAAE,OAAO,EAAE,OAAO,IAAI,CAAC,GAAG;AAAA,YACzF,QAAQ,MAAM,KAAK,MAAM,iBAAiB,EAAE,OAAO,EAAE,OAAO,IAAI,CAAC,GAAG;AAAA,YACpE,aAAa,MAAM,KAAK,WAAW,iBAAiB,EAAE,OAAO,EAAE,OAAO,IAAI,CAAC,GAAG;AAAA,UAAO;AACvF,gBAAM,SAAS,MAAM,SAAS,CAAC;AAC/B,qBAAW,QAAQ,OAAO,MAAO,KAAI,KAAK,UAAU,gBAAiB,KAAK,UAAU,qBAAqB,KAAK,UAAU,cAAc,KAAK,YAAY,SAAU;AAC/J,kBAAM,SAAS,QAAQ,EAAE,OAAO,EAAE,OAAO,SAAS,EAAE,SAAS,cAAc,KAAK,aAAa,GAAG,EAAE,SAAS,IAAK,CAAC;AAAA,UACnH;AACA,mBAAS,OAAuD,UAAU,OAAK;AAC7E,kBAAM,OAAO,MAAM,SAAS,eAAe,GAAG,EAAE,OAAO,KAAK,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC,EAAG,CAAC;AAAG,uBAAW,KAAK;AAC5G,gBAAI,KAAK,UAAU,IAAK;AACxB,gBAAI,CAAC,KAAK,SAAS,WAAW,OAAS,eAAe,OAAO,KAAK,KAAK,EAAG,QAAO,KAAK,uBAAuB;AAAG,oBAAQ,KAAK;AAAA,UAC/H;AACA,iBAAO,EAAE,YAAY,EAAE,OAAO,SAAS,UAAU,MAAM,SAAS,CAAC,EAAE;AAAA,QACrE,CAAC;AAAA,MACH,CAAC;AAAA,IAAG;AAAA,IACJ,QAAQ,OAA+B;AAAE,aAAO,KAAK,YAAY;AAC/D,cAAM,IAAI,OAAO,OAAO,CAAC,OAAO,kBAAkB,gBAAgB,YAAY,CAAC,GAAG,IAAI,IAAI,EAAE,GAAG;AAC/F,cAAM,eAAeA,sBAAqB,EAAE,YAAY,GAAG,aAAaA,sBAAqB,EAAE,UAAU;AACzG,YAAI,OAAO,EAAE,mBAAmB,YAAY,CAAC,iBAAiB,KAAK,EAAE,cAAc,EAAG,QAAO,KAAK,iBAAiB;AACnH,YAAI,CAAC,SAAU,QAAO,KAAK,qBAAqB;AAChD,eAAO,QAAQ,EAAE,QAAQ,WAAW,KAAK,GAAG,cAAc,YAAY,gBAAgB,EAAE,eAAe,GAAG,YAAY;AACpH,gBAAM,UAAU,MAAM,SAAS,CAAC;AAChC,cAAI,QAAQ,UAAU,WAAW,YAAY;AAAE,gBAAI,QAAQ,UAAU,iBAAiB,aAAc,QAAO,KAAK,kBAAkB;AAAG,mBAAO,EAAE,QAAQ,YAAqB,KAAK,GAAG,aAAa;AAAA,UAAG;AACnM,cAAI,QAAQ,WAAW,EAAE,eAAgB,QAAO,KAAK,gBAAgB;AACrE,cAAI,QAAQ,SAAS,OAAQ,QAAO,KAAK,oBAAoB;AAC7D,cAAI;AAAE,kBAAM,SAAS,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,aAAa,CAAC;AAAA,UAAG,QAC9D;AAAA,UAAgF;AACtF,gBAAM,QAAQ,MAAM,WAAW,IAAI,EAAE,OAAO,EAAE,OAAO;AACrD,cAAI,CAAC,SAAS,MAAM,WAAW,cAAc,MAAM,iBAAiB,gBAAgB,MAAM,MAAM,OAAO,QAAQ,UAAU,UAAU,MAAM,MAAM,cAAc,EAAE,aAAa,CAAC,eAAe,MAAM,MAAM,OAAO,EAAE,KAAK,KAAK,MAAM,MAAM,QAAQ,EAAE,QAAS,QAAO,KAAK,kBAAkB;AACxR,iBAAO,EAAE,QAAQ,YAAqB,KAAK,GAAG,aAAa;AAAA,QAC7D,CAAC;AAAA,MACH,CAAC;AAAA,IAAG;AAAA,EACN;AACF;","names":["settlementIdentifier"]}

package/dist/index.d.ts

@@ -0,0 +1,17 @@
+import { ExecutionResultPolicy } from '@alma-harness/core';
+import { ConversationConfig } from '@alma-harness/conversation';
+
+interface RuntimePolicies {
+    stepResultPolicy: ExecutionResultPolicy;
+    rootResultPolicy: ExecutionResultPolicy;
+}
+type RuntimeStores = Pick<ConversationConfig, "sessions" | "admissions" | "rootResults"> & {
+    step: Pick<ConversationConfig["step"], "executions" | "results" | "inbox" | "settlements" | "spend" | "trees" | "accounting">;
+};
+interface Runtime {
+    stores: RuntimeStores;
+    /** Quiesce workers first. Resource cleanup never erases content or resolves admission. */
+    close(): Promise<void>;
+}
+
+export type { Runtime, RuntimePolicies, RuntimeStores };

package/dist/index.js

@@ -0,0 +1 @@
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/memory.d.ts

@@ -0,0 +1,8 @@
+import { RuntimePolicies, Runtime } from './index.js';
+import '@alma-harness/core';
+import '@alma-harness/conversation';
+
+/** Ephemeral reference composition. Reconstructing it loses all data and execution history. */
+declare function createMemoryRuntime(value: RuntimePolicies): Runtime;
+
+export { createMemoryRuntime };

package/dist/memory.js

@@ -0,0 +1,33 @@
+import {
+  policies
+} from "./chunk-3OEFEOI4.js";
+
+// src/memory.ts
+import { InMemoryExecutionStore, InMemorySessionStore } from "@alma-harness/core/testing";
+import { InMemoryOperationSessionStore, InMemoryOperationTreeStore, InMemoryOperationAccountingStore, InMemoryUsageInbox, InMemoryGovernedCostSettlementStore } from "@alma-harness/execution/testing";
+import { InMemoryExecutionResultStore } from "@alma-harness/memory/testing";
+function createMemoryRuntime(value) {
+  const p = policies(value), settlements = new InMemoryGovernedCostSettlementStore(), trees = new InMemoryOperationTreeStore();
+  return {
+    stores: {
+      sessions: new InMemorySessionStore(),
+      admissions: new InMemoryOperationSessionStore(),
+      rootResults: new InMemoryExecutionResultStore(p.rootResultPolicy),
+      step: {
+        executions: new InMemoryExecutionStore(),
+        results: new InMemoryExecutionResultStore(p.stepResultPolicy),
+        inbox: new InMemoryUsageInbox(),
+        settlements,
+        spend: settlements,
+        trees,
+        accounting: new InMemoryOperationAccountingStore(trees, settlements)
+      }
+    },
+    async close() {
+    }
+  };
+}
+export {
+  createMemoryRuntime
+};
+//# sourceMappingURL=memory.js.map

package/dist/memory.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/memory.ts"],"sourcesContent":["import { InMemoryExecutionStore, InMemorySessionStore } from \"@alma-harness/core/testing\";\nimport { InMemoryOperationSessionStore, InMemoryOperationTreeStore, InMemoryOperationAccountingStore, InMemoryUsageInbox, InMemoryGovernedCostSettlementStore } from \"@alma-harness/execution/testing\";\nimport { InMemoryExecutionResultStore } from \"@alma-harness/memory/testing\";\nimport type { Runtime, RuntimePolicies } from \"./index\";\nimport { policies } from \"./policies\";\n/** Ephemeral reference composition. Reconstructing it loses all data and execution history. */\nexport function createMemoryRuntime(value: RuntimePolicies): Runtime {\n  const p = policies(value), settlements = new InMemoryGovernedCostSettlementStore(), trees = new InMemoryOperationTreeStore();\n  return {\n    stores: {\n      sessions: new InMemorySessionStore(), admissions: new InMemoryOperationSessionStore(),\n      rootResults: new InMemoryExecutionResultStore(p.rootResultPolicy),\n      step: { executions: new InMemoryExecutionStore(), results: new InMemoryExecutionResultStore(p.stepResultPolicy), inbox: new InMemoryUsageInbox(),\n        settlements, spend: settlements, trees, accounting: new InMemoryOperationAccountingStore(trees, settlements) },\n    },\n    async close() {},\n  };\n}\n"],"mappings":";;;;;AAAA,SAAS,wBAAwB,4BAA4B;AAC7D,SAAS,+BAA+B,4BAA4B,kCAAkC,oBAAoB,2CAA2C;AACrK,SAAS,oCAAoC;AAItC,SAAS,oBAAoB,OAAiC;AACnE,QAAM,IAAI,SAAS,KAAK,GAAG,cAAc,IAAI,oCAAoC,GAAG,QAAQ,IAAI,2BAA2B;AAC3H,SAAO;AAAA,IACL,QAAQ;AAAA,MACN,UAAU,IAAI,qBAAqB;AAAA,MAAG,YAAY,IAAI,8BAA8B;AAAA,MACpF,aAAa,IAAI,6BAA6B,EAAE,gBAAgB;AAAA,MAChE,MAAM;AAAA,QAAE,YAAY,IAAI,uBAAuB;AAAA,QAAG,SAAS,IAAI,6BAA6B,EAAE,gBAAgB;AAAA,QAAG,OAAO,IAAI,mBAAmB;AAAA,QAC7I;AAAA,QAAa,OAAO;AAAA,QAAa;AAAA,QAAO,YAAY,IAAI,iCAAiC,OAAO,WAAW;AAAA,MAAE;AAAA,IACjH;AAAA,IACA,MAAM,QAAQ;AAAA,IAAC;AAAA,EACjB;AACF;","names":[]}

package/dist/operations-cli.d.ts

@@ -0,0 +1,20 @@
+#!/usr/bin/env node
+import { createConversationOperations } from './operations.js';
+import '@alma-harness/core';
+import '@alma-harness/execution';
+import '@alma-harness/single-call';
+import './index.js';
+import '@alma-harness/conversation';
+
+type Operations = ReturnType<typeof createConversationOperations>;
+interface ConversationOperationsHost {
+    operations: Operations;
+    close(): Promise<void>;
+}
+declare function runConversationOperationsCli(args: string[], io: {
+    input: AsyncIterable<string | Uint8Array>;
+    output(text: string): void;
+    loadHost(path: string): Promise<ConversationOperationsHost>;
+}): Promise<number>;
+
+export { type ConversationOperationsHost, runConversationOperationsCli };

package/dist/operations-cli.js

@@ -0,0 +1,76 @@
+#!/usr/bin/env node
+import {
+  ConversationOperationError,
+  key,
+  resolution
+} from "./chunk-AZVGB23H.js";
+
+// src/operations-cli.ts
+import { realpathSync } from "fs";
+import { pathToFileURL } from "url";
+import { resolve } from "path";
+var help = "alma-operations <inspect|repair|resolve> --host <trusted-local-module>\nRead one scoped JSON request from stdin. Host owns credentials, operator authorization and maintained quiescence.\n";
+async function runConversationOperationsCli(args, io) {
+  if (args.length === 1 && (args[0] === "--help" || args[0] === "help")) {
+    io.output(help);
+    return 0;
+  }
+  let host;
+  let code = 0, response;
+  try {
+    const command = args[0];
+    if (args.length !== 3 || !["inspect", "repair", "resolve"].includes(command ?? "") || args[1] !== "--host" || !args[2] || /^[a-z][a-z0-9+.-]*:/i.test(args[2]) || args[2].includes("\0")) throw new ConversationOperationError("invalid_request");
+    let bytes = 0;
+    const parts = [];
+    for await (const chunk of io.input) {
+      const b = Buffer.from(chunk);
+      bytes += b.length;
+      if (bytes > 65536) throw new ConversationOperationError("invalid_request");
+      parts.push(b);
+    }
+    let request;
+    try {
+      request = JSON.parse(Buffer.concat(parts).toString("utf8"));
+    } catch {
+      throw new ConversationOperationError("invalid_request");
+    }
+    request = command === "resolve" ? resolution(request) : key(request);
+    host = await io.loadHost(resolve(args[2]));
+    if (!host || typeof host.close !== "function" || !host.operations) throw new ConversationOperationError("invalid_request");
+    if (command === "inspect") response = await host.operations.inspect(request);
+    else if (command === "repair") response = await host.operations.repair(request);
+    else response = await host.operations.resolve(request);
+    const text = JSON.stringify(response);
+    if (typeof text !== "string" || Buffer.byteLength(text) > 1e6) throw new ConversationOperationError("incomplete_inspection");
+  } catch (error) {
+    const kind = error instanceof ConversationOperationError ? error.code : "operation_failed";
+    response = { error: kind };
+    code = kind === "invalid_request" ? 2 : 3;
+  } finally {
+    if (host) try {
+      await host.close();
+    } catch {
+      code = 3;
+      response = { error: "operation_failed" };
+    }
+  }
+  io.output(`${JSON.stringify(response)}
+`);
+  return code;
+}
+if (process.argv[1] && import.meta.url === pathToFileURL(realpathSync(process.argv[1])).href) {
+  process.exitCode = await runConversationOperationsCli(process.argv.slice(2), {
+    input: process.stdin,
+    output: (text) => {
+      process.stdout.write(text);
+    },
+    async loadHost(path) {
+      const module = await import(pathToFileURL(path).href);
+      return await module.createOperationsHost();
+    }
+  });
+}
+export {
+  runConversationOperationsCli
+};
+//# sourceMappingURL=operations-cli.js.map

package/dist/operations-cli.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/operations-cli.ts"],"sourcesContent":["#!/usr/bin/env node\nimport { key, resolution } from \"./operations-input\";\nimport { realpathSync } from \"node:fs\";\nimport { pathToFileURL } from \"node:url\";\nimport { resolve } from \"node:path\";\nimport { ConversationOperationError, type createConversationOperations } from \"./operations\";\ntype Operations = ReturnType<typeof createConversationOperations>;\nexport interface ConversationOperationsHost { operations: Operations; close(): Promise<void> }\nconst help = \"alma-operations <inspect|repair|resolve> --host <trusted-local-module>\\nRead one scoped JSON request from stdin. Host owns credentials, operator authorization and maintained quiescence.\\n\";\nexport async function runConversationOperationsCli(args: string[], io: {\n  input: AsyncIterable<string | Uint8Array>; output(text: string): void;\n  loadHost(path: string): Promise<ConversationOperationsHost>;\n}): Promise<number> {\n  if (args.length === 1 && (args[0] === \"--help\" || args[0] === \"help\")) { io.output(help); return 0; }\n  let host: ConversationOperationsHost | undefined;\n  let code = 0, response: unknown;\n  try {\n    const command = args[0];\n    if (args.length !== 3 || ![\"inspect\", \"repair\", \"resolve\"].includes(command ?? \"\") || args[1] !== \"--host\" || !args[2] || /^[a-z][a-z0-9+.-]*:/i.test(args[2]) || args[2].includes(\"\\0\")) throw new ConversationOperationError(\"invalid_request\");\n    let bytes = 0; const parts: Buffer[] = [];\n    for await (const chunk of io.input) { const b = Buffer.from(chunk); bytes += b.length; if (bytes > 65536) throw new ConversationOperationError(\"invalid_request\"); parts.push(b); }\n    let request: unknown;\n    try { request = JSON.parse(Buffer.concat(parts).toString(\"utf8\")); } catch { throw new ConversationOperationError(\"invalid_request\"); }\n    request = command === \"resolve\" ? resolution(request) : key(request);\n    host = await io.loadHost(resolve(args[2]));\n    if (!host || typeof host.close !== \"function\" || !host.operations) throw new ConversationOperationError(\"invalid_request\");\n    if (command === \"inspect\") response = await host.operations.inspect(request as Parameters<Operations[\"inspect\"]>[0]);\n    else if (command === \"repair\") response = await host.operations.repair(request as Parameters<Operations[\"repair\"]>[0]);\n    else response = await host.operations.resolve(request as Parameters<Operations[\"resolve\"]>[0]);\n    const text = JSON.stringify(response);\n    if (typeof text !== \"string\" || Buffer.byteLength(text) > 1_000_000) throw new ConversationOperationError(\"incomplete_inspection\");\n  } catch (error) {\n    const kind = error instanceof ConversationOperationError ? error.code : \"operation_failed\";\n    response = { error: kind }; code = kind === \"invalid_request\" ? 2 : 3;\n  } finally {\n    if (host) try { await host.close(); } catch { code = 3; response = { error: \"operation_failed\" }; }\n  }\n  io.output(`${JSON.stringify(response)}\\n`); return code;\n}\n// Importing the subpath does not load a host or touch stdin.\nif (process.argv[1] && import.meta.url === pathToFileURL(realpathSync(process.argv[1])).href) {\n  process.exitCode = await runConversationOperationsCli(process.argv.slice(2), {\n    input: process.stdin, output: text => { process.stdout.write(text); },\n    async loadHost(path) { const module = await import(pathToFileURL(path).href); return await module.createOperationsHost(); },\n  });\n}\n"],"mappings":";;;;;;;;AAEA,SAAS,oBAAoB;AAC7B,SAAS,qBAAqB;AAC9B,SAAS,eAAe;AAIxB,IAAM,OAAO;AACb,eAAsB,6BAA6B,MAAgB,IAG/C;AAClB,MAAI,KAAK,WAAW,MAAM,KAAK,CAAC,MAAM,YAAY,KAAK,CAAC,MAAM,SAAS;AAAE,OAAG,OAAO,IAAI;AAAG,WAAO;AAAA,EAAG;AACpG,MAAI;AACJ,MAAI,OAAO,GAAG;AACd,MAAI;AACF,UAAM,UAAU,KAAK,CAAC;AACtB,QAAI,KAAK,WAAW,KAAK,CAAC,CAAC,WAAW,UAAU,SAAS,EAAE,SAAS,WAAW,EAAE,KAAK,KAAK,CAAC,MAAM,YAAY,CAAC,KAAK,CAAC,KAAK,uBAAuB,KAAK,KAAK,CAAC,CAAC,KAAK,KAAK,CAAC,EAAE,SAAS,IAAI,EAAG,OAAM,IAAI,2BAA2B,iBAAiB;AAChP,QAAI,QAAQ;AAAG,UAAM,QAAkB,CAAC;AACxC,qBAAiB,SAAS,GAAG,OAAO;AAAE,YAAM,IAAI,OAAO,KAAK,KAAK;AAAG,eAAS,EAAE;AAAQ,UAAI,QAAQ,MAAO,OAAM,IAAI,2BAA2B,iBAAiB;AAAG,YAAM,KAAK,CAAC;AAAA,IAAG;AAClL,QAAI;AACJ,QAAI;AAAE,gBAAU,KAAK,MAAM,OAAO,OAAO,KAAK,EAAE,SAAS,MAAM,CAAC;AAAA,IAAG,QAAQ;AAAE,YAAM,IAAI,2BAA2B,iBAAiB;AAAA,IAAG;AACtI,cAAU,YAAY,YAAY,WAAW,OAAO,IAAI,IAAI,OAAO;AACnE,WAAO,MAAM,GAAG,SAAS,QAAQ,KAAK,CAAC,CAAC,CAAC;AACzC,QAAI,CAAC,QAAQ,OAAO,KAAK,UAAU,cAAc,CAAC,KAAK,WAAY,OAAM,IAAI,2BAA2B,iBAAiB;AACzH,QAAI,YAAY,UAAW,YAAW,MAAM,KAAK,WAAW,QAAQ,OAA+C;AAAA,aAC1G,YAAY,SAAU,YAAW,MAAM,KAAK,WAAW,OAAO,OAA8C;AAAA,QAChH,YAAW,MAAM,KAAK,WAAW,QAAQ,OAA+C;AAC7F,UAAM,OAAO,KAAK,UAAU,QAAQ;AACpC,QAAI,OAAO,SAAS,YAAY,OAAO,WAAW,IAAI,IAAI,IAAW,OAAM,IAAI,2BAA2B,uBAAuB;AAAA,EACnI,SAAS,OAAO;AACd,UAAM,OAAO,iBAAiB,6BAA6B,MAAM,OAAO;AACxE,eAAW,EAAE,OAAO,KAAK;AAAG,WAAO,SAAS,oBAAoB,IAAI;AAAA,EACtE,UAAE;AACA,QAAI,KAAM,KAAI;AAAE,YAAM,KAAK,MAAM;AAAA,IAAG,QAAQ;AAAE,aAAO;AAAG,iBAAW,EAAE,OAAO,mBAAmB;AAAA,IAAG;AAAA,EACpG;AACA,KAAG,OAAO,GAAG,KAAK,UAAU,QAAQ,CAAC;AAAA,CAAI;AAAG,SAAO;AACrD;AAEA,IAAI,QAAQ,KAAK,CAAC,KAAK,YAAY,QAAQ,cAAc,aAAa,QAAQ,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM;AAC5F,UAAQ,WAAW,MAAM,6BAA6B,QAAQ,KAAK,MAAM,CAAC,GAAG;AAAA,IAC3E,OAAO,QAAQ;AAAA,IAAO,QAAQ,UAAQ;AAAE,cAAQ,OAAO,MAAM,IAAI;AAAA,IAAG;AAAA,IACpE,MAAM,SAAS,MAAM;AAAE,YAAM,SAAS,MAAM,OAAO,cAAc,IAAI,EAAE;AAAO,aAAO,MAAM,OAAO,qBAAqB;AAAA,IAAG;AAAA,EAC5H,CAAC;AACH;","names":[]}

package/dist/operations.d.ts

@@ -0,0 +1,147 @@
+import * as _alma_harness_core from '@alma-harness/core';
+import { Scope } from '@alma-harness/core';
+import { OperationSessionStore } from '@alma-harness/execution';
+import { createGovernedStepRunner } from '@alma-harness/single-call';
+import { RuntimeStores } from './index.js';
+import '@alma-harness/conversation';
+
+declare class ConversationOperationError extends Error {
+    readonly code: "invalid_request" | "binding_conflict" | "incomplete_inspection" | "permission_required" | "resolution_blocked" | "stale_snapshot" | "operation_failed";
+    constructor(code: "invalid_request" | "binding_conflict" | "incomplete_inspection" | "permission_required" | "resolution_blocked" | "stale_snapshot" | "operation_failed");
+}
+
+interface ConversationOperationKey {
+    scope: Scope;
+    sessionId: string;
+    rootKey: string;
+}
+interface ConversationResolution {
+    key: ConversationOperationKey;
+    snapshotDigest: string;
+    resolutionId: string;
+    evidenceId: string;
+}
+type ConversationOperationIntent = {
+    action: "repair";
+    key: ConversationOperationKey;
+} | ({
+    action: "resolve";
+} & ConversationResolution);
+/** Trusted host infrastructure: maintain the barrier for the whole callback, after verifying workers, effects and operator intent. */
+interface ConversationQuiescence {
+    withQuiescence<T>(intent: ConversationOperationIntent, operation: () => Promise<T>): Promise<T>;
+}
+interface ConversationOperationsOptions {
+    stores: RuntimeStores;
+    recovery?: Pick<ReturnType<typeof createGovernedStepRunner>, "recover" | "reconcileUsage">;
+    operator?: Pick<OperationSessionStore, "resolve">;
+    quiescence?: ConversationQuiescence;
+}
+/** Inspection never reads content. Mutation has no default operator or quiescence authority. */
+declare function createConversationOperations(options: ConversationOperationsOptions): {
+    inspect(value: ConversationOperationKey): Promise<{
+        key: ConversationOperationKey;
+        digest: string;
+        admission: {
+            status: "reconciliation_required" | "active" | "released";
+            rootId: string;
+            deadlineAt: string;
+            resolutionId: string | undefined;
+        };
+        root: {
+            status: "reconciliation_required" | "active" | "closed";
+            callCount: number;
+        } | null;
+        accounting: {
+            costUsd: number;
+            reservedCalls: number;
+            settledCalls: number;
+        } | null;
+        calls: {
+            recoveryUntil: string | undefined;
+            costUsd?: number;
+            ordinal: number;
+            kind: "main" | "direct" | "delegate" | "summary";
+            callId: string;
+            operationKey: string;
+            settlementId: string;
+            deadlineAt: string;
+            model: _alma_harness_core.ModelRef;
+            priceVersion: string;
+            prices: _alma_harness_core.ModelPrice[];
+            providerRequestId: string | undefined;
+            usage: _alma_harness_core.Usage | undefined;
+            state: string;
+            evidence: string;
+            pricing: string;
+            accounted: boolean;
+        }[];
+        pending: {
+            id: string;
+            operationKey: string;
+            receivedAt: string;
+            evidence: "known" | "unpriced" | "not_dispatched" | "unknown";
+        }[];
+        blockers: string[];
+    }>;
+    repair(value: ConversationOperationKey): Promise<{
+        sweepScope: Scope;
+        expired: {
+            admissions: number;
+            trees: number;
+            executions: number;
+        };
+        snapshot: {
+            key: ConversationOperationKey;
+            digest: string;
+            admission: {
+                status: "reconciliation_required" | "active" | "released";
+                rootId: string;
+                deadlineAt: string;
+                resolutionId: string | undefined;
+            };
+            root: {
+                status: "reconciliation_required" | "active" | "closed";
+                callCount: number;
+            } | null;
+            accounting: {
+                costUsd: number;
+                reservedCalls: number;
+                settledCalls: number;
+            } | null;
+            calls: {
+                recoveryUntil: string | undefined;
+                costUsd?: number;
+                ordinal: number;
+                kind: "main" | "direct" | "delegate" | "summary";
+                callId: string;
+                operationKey: string;
+                settlementId: string;
+                deadlineAt: string;
+                model: _alma_harness_core.ModelRef;
+                priceVersion: string;
+                prices: _alma_harness_core.ModelPrice[];
+                providerRequestId: string | undefined;
+                usage: _alma_harness_core.Usage | undefined;
+                state: string;
+                evidence: string;
+                pricing: string;
+                accounted: boolean;
+            }[];
+            pending: {
+                id: string;
+                operationKey: string;
+                receivedAt: string;
+                evidence: "known" | "unpriced" | "not_dispatched" | "unknown";
+            }[];
+            blockers: string[];
+        };
+    }>;
+    resolve(value: ConversationResolution): Promise<{
+        status: "resolved";
+        key: ConversationOperationKey;
+        resolutionId: string;
+    }>;
+};
+
+export { ConversationOperationError, type ConversationOperationIntent, type ConversationOperationKey, type ConversationOperationsOptions, type ConversationQuiescence, type ConversationResolution, createConversationOperations };

package/dist/operations.js

@@ -0,0 +1,9 @@
+import {
+  ConversationOperationError,
+  createConversationOperations
+} from "./chunk-AZVGB23H.js";
+export {
+  ConversationOperationError,
+  createConversationOperations
+};
+//# sourceMappingURL=operations.js.map

package/dist/operations.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/postgres.d.ts

@@ -0,0 +1,23 @@
+import { RuntimePolicies, Runtime } from './index.js';
+import '@alma-harness/core';
+import '@alma-harness/conversation';
+
+interface PostgresRuntimeNamespace {
+    connectionString: string;
+    schema: string;
+    rootSchema: string;
+    onPoolError: (error: Error, schema: string) => void;
+}
+type PostgresRuntimeOptions = PostgresRuntimeNamespace & RuntimePolicies & {
+    /** Per owned pool, not per turn. Omission keeps five connections in each pool. */
+    poolMax?: {
+        execution: number;
+        roots: number;
+    };
+};
+/** No connections, migrations or grants occur at construction. Owned pools pin both namespaces. */
+declare function createPostgresRuntime(value: PostgresRuntimeOptions): Runtime;
+/** Explicit administrator operation. Partial installation may be rerun; no login memberships are granted. */
+declare function migratePostgresRuntime(value: PostgresRuntimeNamespace): Promise<void>;
+
+export { type PostgresRuntimeNamespace, type PostgresRuntimeOptions, createPostgresRuntime, migratePostgresRuntime };

package/dist/postgres.js

@@ -0,0 +1,106 @@
+import {
+  policies
+} from "./chunk-3OEFEOI4.js";
+
+// src/postgres.ts
+import pg from "pg";
+import {
+  PostgresSessionStore,
+  PostgresExecutionStore,
+  PostgresExecutionResultStore,
+  PostgresUsageInbox,
+  PostgresCostSettlementStore,
+  PostgresSpendStore,
+  migrateSessionStore,
+  migrateExecutionStore,
+  migrateExecutionResultStore,
+  migrateUsageInbox
+} from "@alma-harness/postgres";
+import { PostgresOperationSessionStore, PostgresOperationTreeStore, PostgresOperationAccountingStore, migrateOperationAccountingStore, migrateOperationSessionStore } from "@alma-harness/postgres-execution";
+function limits(value) {
+  if (value === void 0) return { execution: 5, roots: 5 };
+  if (!value || typeof value !== "object" || Array.isArray(value)) throw new TypeError("Invalid runtime pool limits");
+  const fields = Object.getOwnPropertyDescriptors(value), keys = Reflect.ownKeys(fields);
+  if (keys.length !== 2 || !keys.includes("execution") || !keys.includes("roots")) throw new TypeError("Invalid runtime pool limits");
+  const execution = fields.execution?.value, roots = fields.roots?.value;
+  if (!Number.isSafeInteger(execution) || execution < 1 || !Number.isSafeInteger(roots) || roots < 1 || !Number.isSafeInteger(execution + roots)) throw new TypeError("Invalid runtime pool limits");
+  return { execution, roots };
+}
+function namespace(value) {
+  const { connectionString, schema, rootSchema, onPoolError } = value;
+  if (typeof onPoolError !== "function") throw new TypeError("Runtime requires onPoolError reporting");
+  for (const s of [schema, rootSchema]) {
+    if (typeof s !== "string" || !/^[a-z_][a-z0-9_]{0,62}$/.test(s) || s === "public" || s === "information_schema" || s.startsWith("pg_")) throw new TypeError("Invalid dedicated runtime schema");
+  }
+  if (schema === rootSchema) throw new TypeError("Runtime result namespaces must be distinct");
+  let url;
+  try {
+    url = new URL(connectionString);
+  } catch {
+    throw new TypeError("Invalid PostgreSQL connection URL");
+  }
+  if (!["postgres:", "postgresql:"].includes(url.protocol) || !url.hostname || url.searchParams.has("options")) throw new TypeError("Runtime requires a PostgreSQL URL without startup options");
+  return { connectionString, schema, rootSchema, onPoolError };
+}
+function pools(n, max) {
+  const open = (schema, size) => {
+    const pool = new pg.Pool({
+      connectionString: n.connectionString,
+      options: `-c search_path=${schema} -c extra_float_digits=3`,
+      max: size,
+      connectionTimeoutMillis: 5e3,
+      idleTimeoutMillis: 1e4
+    });
+    pool.on("error", (error) => n.onPoolError(error, schema));
+    return pool;
+  };
+  const execution = open(n.schema, max.execution), roots = open(n.rootSchema, max.roots);
+  let closing;
+  return { execution, roots, close() {
+    return closing ??= Promise.allSettled([Promise.resolve().then(() => execution.end()), Promise.resolve().then(() => roots.end())]).then((results) => {
+      const errors = results.flatMap((r) => r.status === "rejected" ? [r.reason] : []);
+      if (errors.length) throw new AggregateError(errors, "Runtime pool cleanup failed");
+    });
+  } };
+}
+function createPostgresRuntime(value) {
+  const n = namespace(value), p = policies(value), max = limits(value.poolMax), owned = pools(n, max);
+  return { stores: {
+    sessions: new PostgresSessionStore(owned.execution),
+    admissions: new PostgresOperationSessionStore(owned.execution),
+    rootResults: new PostgresExecutionResultStore(owned.roots, p.rootResultPolicy),
+    step: {
+      executions: new PostgresExecutionStore(owned.execution),
+      results: new PostgresExecutionResultStore(owned.execution, p.stepResultPolicy),
+      inbox: new PostgresUsageInbox(owned.execution),
+      settlements: new PostgresCostSettlementStore(owned.execution),
+      spend: new PostgresSpendStore(owned.execution),
+      trees: new PostgresOperationTreeStore(owned.execution),
+      accounting: new PostgresOperationAccountingStore(owned.execution)
+    }
+  }, close: owned.close };
+}
+async function migratePostgresRuntime(value) {
+  const n = namespace(value), owned = pools(n, { execution: 1, roots: 1 });
+  try {
+    await owned.execution.query(`create schema if not exists ${n.schema}`);
+    await owned.roots.query(`create schema if not exists ${n.rootSchema}`);
+    await migrateSessionStore(owned.execution);
+    await migrateExecutionStore(owned.execution);
+    await migrateExecutionResultStore(owned.execution);
+    await migrateUsageInbox(owned.execution);
+    await migrateOperationAccountingStore(owned.execution);
+    await migrateOperationSessionStore(owned.execution);
+    await migrateExecutionResultStore(owned.roots);
+    for (const [pool, schema] of [[owned.execution, n.schema], [owned.roots, n.rootSchema]]) {
+      await pool.query(`grant usage on schema ${schema} to alma_app, alma_retention; revoke create on schema ${schema} from public, alma_app, alma_retention`);
+    }
+  } finally {
+    await owned.close();
+  }
+}
+export {
+  createPostgresRuntime,
+  migratePostgresRuntime
+};
+//# sourceMappingURL=postgres.js.map

package/dist/postgres.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/postgres.ts"],"sourcesContent":["import pg from \"pg\";\nimport { PostgresSessionStore, PostgresExecutionStore, PostgresExecutionResultStore, PostgresUsageInbox, PostgresCostSettlementStore, PostgresSpendStore,\n  migrateSessionStore, migrateExecutionStore, migrateExecutionResultStore, migrateUsageInbox } from \"@alma-harness/postgres\";\nimport { PostgresOperationSessionStore, PostgresOperationTreeStore, PostgresOperationAccountingStore, migrateOperationAccountingStore, migrateOperationSessionStore } from \"@alma-harness/postgres-execution\";\nimport type { Runtime, RuntimePolicies } from \"./index\";\nimport { policies } from \"./policies\";\nexport interface PostgresRuntimeNamespace { connectionString: string; schema: string; rootSchema: string; onPoolError: (error: Error, schema: string) => void }\nexport type PostgresRuntimeOptions = PostgresRuntimeNamespace & RuntimePolicies & {\n  /** Per owned pool, not per turn. Omission keeps five connections in each pool. */\n  poolMax?: { execution: number; roots: number };\n};\nfunction limits(value: unknown): { execution: number; roots: number } {\n  if(value===undefined)return {execution:5,roots:5};\n  if(!value || typeof value!==\"object\" || Array.isArray(value))throw new TypeError(\"Invalid runtime pool limits\");\n  const fields=Object.getOwnPropertyDescriptors(value),keys=Reflect.ownKeys(fields);\n  if(keys.length!==2 || !keys.includes(\"execution\") || !keys.includes(\"roots\"))throw new TypeError(\"Invalid runtime pool limits\");\n  const execution=fields.execution?.value,roots=fields.roots?.value;\n  if(!Number.isSafeInteger(execution) || execution<1 || !Number.isSafeInteger(roots) || roots<1 || !Number.isSafeInteger(execution+roots))throw new TypeError(\"Invalid runtime pool limits\");\n  return {execution,roots};\n}\nfunction namespace(value: PostgresRuntimeNamespace): PostgresRuntimeNamespace {\n  const { connectionString, schema, rootSchema, onPoolError } = value;\n  if (typeof onPoolError !== \"function\") throw new TypeError(\"Runtime requires onPoolError reporting\");\n  for (const s of [schema, rootSchema]) {\n    if (typeof s !== \"string\" || !/^[a-z_][a-z0-9_]{0,62}$/.test(s) || s === \"public\" || s === \"information_schema\" || s.startsWith(\"pg_\")) throw new TypeError(\"Invalid dedicated runtime schema\");\n  }\n  if (schema === rootSchema) throw new TypeError(\"Runtime result namespaces must be distinct\");\n  let url: URL;\n  try { url = new URL(connectionString); } catch { throw new TypeError(\"Invalid PostgreSQL connection URL\"); }\n  if (![\"postgres:\", \"postgresql:\"].includes(url.protocol) || !url.hostname || url.searchParams.has(\"options\")) throw new TypeError(\"Runtime requires a PostgreSQL URL without startup options\");\n  return { connectionString, schema, rootSchema, onPoolError };\n}\nfunction pools(n: PostgresRuntimeNamespace, max: { execution: number; roots: number }) {\n  const open = (schema: string, size: number) => {\n    const pool = new pg.Pool({ connectionString: n.connectionString,\n    options: `-c search_path=${schema} -c extra_float_digits=3`, max: size, connectionTimeoutMillis: 5000, idleTimeoutMillis: 10000 });\n    pool.on(\"error\", error => n.onPoolError(error, schema));\n    return pool;\n  };\n  const execution = open(n.schema,max.execution), roots = open(n.rootSchema,max.roots);\n  let closing: Promise<void> | undefined;\n  return { execution, roots, close() {\n    return closing ??= Promise.allSettled([Promise.resolve().then(() => execution.end()), Promise.resolve().then(() => roots.end())]).then(results => {\n      const errors = results.flatMap(r => r.status === \"rejected\" ? [r.reason] : []);\n      if (errors.length) throw new AggregateError(errors, \"Runtime pool cleanup failed\");\n    });\n  } };\n}\n/** No connections, migrations or grants occur at construction. Owned pools pin both namespaces. */\nexport function createPostgresRuntime(value: PostgresRuntimeOptions): Runtime {\n  const n = namespace(value), p = policies(value), max = limits(value.poolMax), owned = pools(n,max);\n  return { stores: {\n    sessions: new PostgresSessionStore(owned.execution), admissions: new PostgresOperationSessionStore(owned.execution),\n    rootResults: new PostgresExecutionResultStore(owned.roots, p.rootResultPolicy),\n    step: { executions: new PostgresExecutionStore(owned.execution), results: new PostgresExecutionResultStore(owned.execution, p.stepResultPolicy),\n      inbox: new PostgresUsageInbox(owned.execution), settlements: new PostgresCostSettlementStore(owned.execution), spend: new PostgresSpendStore(owned.execution),\n      trees: new PostgresOperationTreeStore(owned.execution), accounting: new PostgresOperationAccountingStore(owned.execution) },\n  }, close: owned.close };\n}\n/** Explicit administrator operation. Partial installation may be rerun; no login memberships are granted. */\nexport async function migratePostgresRuntime(value: PostgresRuntimeNamespace): Promise<void> {\n  const n = namespace(value), owned = pools(n,{execution:1,roots:1});\n  try {\n    await owned.execution.query(`create schema if not exists ${n.schema}`);\n    await owned.roots.query(`create schema if not exists ${n.rootSchema}`);\n    await migrateSessionStore(owned.execution);\n    await migrateExecutionStore(owned.execution);\n    await migrateExecutionResultStore(owned.execution);\n    await migrateUsageInbox(owned.execution);\n    await migrateOperationAccountingStore(owned.execution);\n    await migrateOperationSessionStore(owned.execution);\n    await migrateExecutionResultStore(owned.roots);\n    for (const [pool, schema] of [[owned.execution, n.schema], [owned.roots, n.rootSchema]] as const) {\n      await pool.query(`grant usage on schema ${schema} to alma_app, alma_retention; revoke create on schema ${schema} from public, alma_app, alma_retention`);\n    }\n  } finally { await owned.close(); }\n}\n"],"mappings":";;;;;AAAA,OAAO,QAAQ;AACf;AAAA,EAAS;AAAA,EAAsB;AAAA,EAAwB;AAAA,EAA8B;AAAA,EAAoB;AAAA,EAA6B;AAAA,EACpI;AAAA,EAAqB;AAAA,EAAuB;AAAA,EAA6B;AAAA,OAAyB;AACpG,SAAS,+BAA+B,4BAA4B,kCAAkC,iCAAiC,oCAAoC;AAQ3K,SAAS,OAAO,OAAsD;AACpE,MAAG,UAAQ,OAAU,QAAO,EAAC,WAAU,GAAE,OAAM,EAAC;AAChD,MAAG,CAAC,SAAS,OAAO,UAAQ,YAAY,MAAM,QAAQ,KAAK,EAAE,OAAM,IAAI,UAAU,6BAA6B;AAC9G,QAAM,SAAO,OAAO,0BAA0B,KAAK,GAAE,OAAK,QAAQ,QAAQ,MAAM;AAChF,MAAG,KAAK,WAAS,KAAK,CAAC,KAAK,SAAS,WAAW,KAAK,CAAC,KAAK,SAAS,OAAO,EAAE,OAAM,IAAI,UAAU,6BAA6B;AAC9H,QAAM,YAAU,OAAO,WAAW,OAAM,QAAM,OAAO,OAAO;AAC5D,MAAG,CAAC,OAAO,cAAc,SAAS,KAAK,YAAU,KAAK,CAAC,OAAO,cAAc,KAAK,KAAK,QAAM,KAAK,CAAC,OAAO,cAAc,YAAU,KAAK,EAAE,OAAM,IAAI,UAAU,6BAA6B;AACzL,SAAO,EAAC,WAAU,MAAK;AACzB;AACA,SAAS,UAAU,OAA2D;AAC5E,QAAM,EAAE,kBAAkB,QAAQ,YAAY,YAAY,IAAI;AAC9D,MAAI,OAAO,gBAAgB,WAAY,OAAM,IAAI,UAAU,wCAAwC;AACnG,aAAW,KAAK,CAAC,QAAQ,UAAU,GAAG;AACpC,QAAI,OAAO,MAAM,YAAY,CAAC,0BAA0B,KAAK,CAAC,KAAK,MAAM,YAAY,MAAM,wBAAwB,EAAE,WAAW,KAAK,EAAG,OAAM,IAAI,UAAU,kCAAkC;AAAA,EAChM;AACA,MAAI,WAAW,WAAY,OAAM,IAAI,UAAU,4CAA4C;AAC3F,MAAI;AACJ,MAAI;AAAE,UAAM,IAAI,IAAI,gBAAgB;AAAA,EAAG,QAAQ;AAAE,UAAM,IAAI,UAAU,mCAAmC;AAAA,EAAG;AAC3G,MAAI,CAAC,CAAC,aAAa,aAAa,EAAE,SAAS,IAAI,QAAQ,KAAK,CAAC,IAAI,YAAY,IAAI,aAAa,IAAI,SAAS,EAAG,OAAM,IAAI,UAAU,2DAA2D;AAC7L,SAAO,EAAE,kBAAkB,QAAQ,YAAY,YAAY;AAC7D;AACA,SAAS,MAAM,GAA6B,KAA2C;AACrF,QAAM,OAAO,CAAC,QAAgB,SAAiB;AAC7C,UAAM,OAAO,IAAI,GAAG,KAAK;AAAA,MAAE,kBAAkB,EAAE;AAAA,MAC/C,SAAS,kBAAkB,MAAM;AAAA,MAA4B,KAAK;AAAA,MAAM,yBAAyB;AAAA,MAAM,mBAAmB;AAAA,IAAM,CAAC;AACjI,SAAK,GAAG,SAAS,WAAS,EAAE,YAAY,OAAO,MAAM,CAAC;AACtD,WAAO;AAAA,EACT;AACA,QAAM,YAAY,KAAK,EAAE,QAAO,IAAI,SAAS,GAAG,QAAQ,KAAK,EAAE,YAAW,IAAI,KAAK;AACnF,MAAI;AACJ,SAAO,EAAE,WAAW,OAAO,QAAQ;AACjC,WAAO,YAAY,QAAQ,WAAW,CAAC,QAAQ,QAAQ,EAAE,KAAK,MAAM,UAAU,IAAI,CAAC,GAAG,QAAQ,QAAQ,EAAE,KAAK,MAAM,MAAM,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,aAAW;AAChJ,YAAM,SAAS,QAAQ,QAAQ,OAAK,EAAE,WAAW,aAAa,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC;AAC7E,UAAI,OAAO,OAAQ,OAAM,IAAI,eAAe,QAAQ,6BAA6B;AAAA,IACnF,CAAC;AAAA,EACH,EAAE;AACJ;AAEO,SAAS,sBAAsB,OAAwC;AAC5E,QAAM,IAAI,UAAU,KAAK,GAAG,IAAI,SAAS,KAAK,GAAG,MAAM,OAAO,MAAM,OAAO,GAAG,QAAQ,MAAM,GAAE,GAAG;AACjG,SAAO,EAAE,QAAQ;AAAA,IACf,UAAU,IAAI,qBAAqB,MAAM,SAAS;AAAA,IAAG,YAAY,IAAI,8BAA8B,MAAM,SAAS;AAAA,IAClH,aAAa,IAAI,6BAA6B,MAAM,OAAO,EAAE,gBAAgB;AAAA,IAC7E,MAAM;AAAA,MAAE,YAAY,IAAI,uBAAuB,MAAM,SAAS;AAAA,MAAG,SAAS,IAAI,6BAA6B,MAAM,WAAW,EAAE,gBAAgB;AAAA,MAC5I,OAAO,IAAI,mBAAmB,MAAM,SAAS;AAAA,MAAG,aAAa,IAAI,4BAA4B,MAAM,SAAS;AAAA,MAAG,OAAO,IAAI,mBAAmB,MAAM,SAAS;AAAA,MAC5J,OAAO,IAAI,2BAA2B,MAAM,SAAS;AAAA,MAAG,YAAY,IAAI,iCAAiC,MAAM,SAAS;AAAA,IAAE;AAAA,EAC9H,GAAG,OAAO,MAAM,MAAM;AACxB;AAEA,eAAsB,uBAAuB,OAAgD;AAC3F,QAAM,IAAI,UAAU,KAAK,GAAG,QAAQ,MAAM,GAAE,EAAC,WAAU,GAAE,OAAM,EAAC,CAAC;AACjE,MAAI;AACF,UAAM,MAAM,UAAU,MAAM,+BAA+B,EAAE,MAAM,EAAE;AACrE,UAAM,MAAM,MAAM,MAAM,+BAA+B,EAAE,UAAU,EAAE;AACrE,UAAM,oBAAoB,MAAM,SAAS;AACzC,UAAM,sBAAsB,MAAM,SAAS;AAC3C,UAAM,4BAA4B,MAAM,SAAS;AACjD,UAAM,kBAAkB,MAAM,SAAS;AACvC,UAAM,gCAAgC,MAAM,SAAS;AACrD,UAAM,6BAA6B,MAAM,SAAS;AAClD,UAAM,4BAA4B,MAAM,KAAK;AAC7C,eAAW,CAAC,MAAM,MAAM,KAAK,CAAC,CAAC,MAAM,WAAW,EAAE,MAAM,GAAG,CAAC,MAAM,OAAO,EAAE,UAAU,CAAC,GAAY;AAChG,YAAM,KAAK,MAAM,yBAAyB,MAAM,yDAAyD,MAAM,wCAAwC;AAAA,IACzJ;AAAA,EACF,UAAE;AAAU,UAAM,MAAM,MAAM;AAAA,EAAG;AACnC;","names":[]}

package/package.json

@@ -0,0 +1,88 @@
+{
+  "name": "@alma-harness/runtime",
+  "version": "0.7.0",
+  "description": "Official store composition for governed Alma conversations.",
+  "license": "Apache-2.0",
+  "type": "module",
+  "engines": {
+    "node": ">=22"
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./memory": {
+      "types": "./dist/memory.d.ts",
+      "default": "./dist/memory.js"
+    },
+    "./postgres": {
+      "types": "./dist/postgres.d.ts",
+      "default": "./dist/postgres.js"
+    },
+    "./operations": {
+      "types": "./dist/operations.d.ts",
+      "default": "./dist/operations.js"
+    },
+    "./operations-cli": {
+      "types": "./dist/operations-cli.d.ts",
+      "default": "./dist/operations-cli.js"
+    }
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/FabioFernandesCarneiro/alma.git",
+    "directory": "packages/runtime"
+  },
+  "peerDependencies": {
+    "pg": "^8.16.3",
+    "@alma-harness/core": "^0.7.0",
+    "@alma-harness/conversation": "^0.7.0",
+    "@alma-harness/postgres": "^0.7.0",
+    "@alma-harness/memory": "^0.7.0",
+    "@alma-harness/execution": "^0.7.0",
+    "@alma-harness/single-call": "^0.7.0",
+    "@alma-harness/postgres-execution": "^0.7.0"
+  },
+  "peerDependenciesMeta": {
+    "pg": {
+      "optional": true
+    },
+    "@alma-harness/postgres": {
+      "optional": true
+    },
+    "@alma-harness/postgres-execution": {
+      "optional": true
+    }
+  },
+  "devDependencies": {
+    "@types/node": "^24.1.0",
+    "@types/pg": "^8.15.4",
+    "typescript": "^5.9.2",
+    "vitest": "^3.2.4",
+    "pg": "^8.16.3",
+    "@alma-harness/core": "^0.7.0",
+    "@alma-harness/conversation": "^0.7.0",
+    "@alma-harness/single-call": "^0.7.0",
+    "@alma-harness/postgres": "^0.7.0",
+    "@alma-harness/execution": "^0.7.0",
+    "@alma-harness/memory": "^0.7.0",
+    "@alma-harness/postgres-execution": "^0.7.0"
+  },
+  "files": [
+    "dist"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "bin": {
+    "alma-operations": "./dist/operations-cli.js"
+  },
+  "scripts": {
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run",
+    "build": "tsup"
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts"
+}