@astrosheep/keiyaku 4.6.10 → 4.6.12

package/build/plugins/claude/skills/keiyaku/SKILL.md

@@ -36,7 +36,9 @@ selects the Contract repository; it never retargets that World. `call
 cwd). Without it, the call uses the invocation cwd; `--contract` associates a
 Contract without selecting an execution directory.
 
-`deliver`, `review`, and `audit` may take time after their leading admission.
+`deliver` and `review` may take time after their leading admission.
+`deliver --dry-run` only observes the prospective candidate, standing evidence,
+and target followability; it never runs Verification or hooks or admits work.
 Their witnessed progress is ephemeral stderr output; stdout remains one final
 text or JSON result. Ctrl-C asks the owned operation to stop and waits for its
 truthful final receipt, so it is not evidence that an already admitted action

package/build/plugins/claude/skills/keiyaku-babysit/SKILL.md

@@ -54,7 +54,7 @@ does not move without you.
 | Silent wedge: initial answer empty and worktree clean | Inspect status and history, then send one steering `tell`. If the worker remains unresponsive, `kill` and call a new Akuma; an empty answer alone is not proof the Contract failed. |
 | Verdict record refused with `not-allowed` | Read the worker's analysis in history. Record the verdict yourself if you did not deliver the candidate, or call a new Reviewer with the grant from `keiyaku-workflow` and have it inspect current work and record a fresh verdict. The refused request wrote no Contract testimony. |
 | Review stale after changed candidate tender | Normal content-currentness result. Give the same Reviewer the changed diff and current terms with `tell`; have it re-examine and record current testimony. A target move alone does not stale review. |
-| Target moved under the appointed worktree | Have the Deliverer inspect target movement and merge the target branch (main when selected) in that worktree when required; resolve conflicts there, then audit again. Do not resolve against a stale integration preview. |
+| Target moved under the appointed worktree | Have the Deliverer inspect target movement and merge the target branch (main when selected) in that worktree when required; resolve conflicts there, then run `deliver --dry-run` again. Do not resolve against a stale integration preview. |
 | Typed refusal names its rule | Fix the named input or physical condition, then retry from a fresh observation. Do not repeat the same request blindly. |
 
 ## What Babysitting Never Owns

package/build/plugins/claude/skills/keiyaku-bind/SKILL.md

@@ -157,8 +157,9 @@ commands; `5m` is the normal baseline.
 Verification runs only when the Contract selects the `verified` gate, against
 the exact integration snapshot in a clean disposable worktree for that attempt.
 `deliver` reuses current satisfied evidence or runs the declarations; unsatisfied
-results and runtime stops prevent placement. `audit` runs declarations for a
-prospective candidate. Without `verified`, no verb runs Verification and the
+results and runtime stops prevent placement. `deliver --dry-run` only observes
+standing evidence for a prospective candidate; it never executes declarations.
+Without `verified`, no verb runs Verification and the
 section is inert document text. `reviewed` independently requires review
 evidence. Selected gates are checked at placement.
 

package/build/plugins/claude/skills/keiyaku-workflow/SKILL.md

@@ -69,12 +69,13 @@ Each act changes a different part of the world:
   `reconcile` retries workspace realization.
 - **Work:** Changes and commits belong in the appointed worktree. Another
   lane's claim can move the target beneath it. Check target movement before
-  audit; when it matters, merge the target branch (main when selected) in the
-  worktree and resolve conflicts there before auditing.
-- **Audit:** Previews the candidate and target without tendering or claiming.
-  With `verified` selected, Verification runs for the captured subject and can
-  record an attestation. Without that gate, the section is inert text and no
-  verb runs Verification. A stopped run records no new verdict.
+  delivery preview; when it matters, merge the target branch (main when selected)
+  in the worktree and resolve conflicts there before previewing again.
+- **Delivery preview:** Use `deliver --dry-run` to observe the candidate, existing
+  Verification evidence and target followability without tendering or claiming.
+  It never runs Verification or hooks, admits testimony, or reconciles. Missing
+  or stale evidence means Verification is still required; an existing failure
+  remains unsatisfied. Preparation is not a promise of successful delivery.
 - **Deliver:** Captures a tender and integration against the observed target;
   journal gains a delivered candidate. Ready prerequisites and gates trigger
   placement and claim in this invocation; otherwise the candidate waits.
@@ -88,7 +89,7 @@ Each act changes a different part of the world:
   and abandoned Contracts cannot be reopened.
 
 Placement judges declared gates, not the producer's identity. Review does not
-replace Verification; audit never requests placement. Read the final receipt
+replace Verification; delivery preview never requests placement. Read the final receipt
 for stops and reconciliation lag after an admitted act.
 
 ## 5. Handing A Role To An Akuma
@@ -101,7 +102,7 @@ authority.
 | Role | Grant at birth | Return |
 | --- | --- | --- |
 | Holder | The actions the delegated loop will perform; include `contract.review` when this holder will review. Commission with the `kei`, current Arc when one exists, appointed worktree, and holder duties. | Acceptance or abandonment, with receipts. |
-| Deliverer | The ordinary baseline: every Debt mutation, Contract audit and delivery, and Akuma management. `keiyaku -C <repo> call worker --alias @deliverer --contract <kei/...> --workdir <appointed-path> -` | The delivery receipt. |
+| Deliverer | The ordinary baseline: every Debt mutation, Contract delivery, and Akuma management. Preview is unkeyed. `keiyaku -C <repo> call worker --alias @deliverer --contract <kei/...> --workdir <appointed-path> -` | The delivery receipt. |
 | Reviewer | `--allowed contract.review`: `keiyaku -C <repo> call review-akuma --alias @reviewer --contract <kei/...> --workdir <appointed-path> --allowed contract.review -` | The verdict receipt. Without the grant, `not-allowed` refuses and no verdict is recorded. |
 
 An Archetype's explicit allowed set replaces the ordinary baseline; check

package/build/plugins/codex/skills/keiyaku/SKILL.md

@@ -36,7 +36,9 @@ selects the Contract repository; it never retargets that World. `call
 cwd). Without it, the call uses the invocation cwd; `--contract` associates a
 Contract without selecting an execution directory.
 
-`deliver`, `review`, and `audit` may take time after their leading admission.
+`deliver` and `review` may take time after their leading admission.
+`deliver --dry-run` only observes the prospective candidate, standing evidence,
+and target followability; it never runs Verification or hooks or admits work.
 Their witnessed progress is ephemeral stderr output; stdout remains one final
 text or JSON result. Ctrl-C asks the owned operation to stop and waits for its
 truthful final receipt, so it is not evidence that an already admitted action

package/build/plugins/codex/skills/keiyaku-babysit/SKILL.md

@@ -54,7 +54,7 @@ does not move without you.
 | Silent wedge: initial answer empty and worktree clean | Inspect status and history, then send one steering `tell`. If the worker remains unresponsive, `kill` and call a new Akuma; an empty answer alone is not proof the Contract failed. |
 | Verdict record refused with `not-allowed` | Read the worker's analysis in history. Record the verdict yourself if you did not deliver the candidate, or call a new Reviewer with the grant from `keiyaku-workflow` and have it inspect current work and record a fresh verdict. The refused request wrote no Contract testimony. |
 | Review stale after changed candidate tender | Normal content-currentness result. Give the same Reviewer the changed diff and current terms with `tell`; have it re-examine and record current testimony. A target move alone does not stale review. |
-| Target moved under the appointed worktree | Have the Deliverer inspect target movement and merge the target branch (main when selected) in that worktree when required; resolve conflicts there, then audit again. Do not resolve against a stale integration preview. |
+| Target moved under the appointed worktree | Have the Deliverer inspect target movement and merge the target branch (main when selected) in that worktree when required; resolve conflicts there, then run `deliver --dry-run` again. Do not resolve against a stale integration preview. |
 | Typed refusal names its rule | Fix the named input or physical condition, then retry from a fresh observation. Do not repeat the same request blindly. |
 
 ## What Babysitting Never Owns

package/build/plugins/codex/skills/keiyaku-bind/SKILL.md

@@ -157,8 +157,9 @@ commands; `5m` is the normal baseline.
 Verification runs only when the Contract selects the `verified` gate, against
 the exact integration snapshot in a clean disposable worktree for that attempt.
 `deliver` reuses current satisfied evidence or runs the declarations; unsatisfied
-results and runtime stops prevent placement. `audit` runs declarations for a
-prospective candidate. Without `verified`, no verb runs Verification and the
+results and runtime stops prevent placement. `deliver --dry-run` only observes
+standing evidence for a prospective candidate; it never executes declarations.
+Without `verified`, no verb runs Verification and the
 section is inert document text. `reviewed` independently requires review
 evidence. Selected gates are checked at placement.
 

package/build/plugins/codex/skills/keiyaku-workflow/SKILL.md

@@ -69,12 +69,13 @@ Each act changes a different part of the world:
   `reconcile` retries workspace realization.
 - **Work:** Changes and commits belong in the appointed worktree. Another
   lane's claim can move the target beneath it. Check target movement before
-  audit; when it matters, merge the target branch (main when selected) in the
-  worktree and resolve conflicts there before auditing.
-- **Audit:** Previews the candidate and target without tendering or claiming.
-  With `verified` selected, Verification runs for the captured subject and can
-  record an attestation. Without that gate, the section is inert text and no
-  verb runs Verification. A stopped run records no new verdict.
+  delivery preview; when it matters, merge the target branch (main when selected)
+  in the worktree and resolve conflicts there before previewing again.
+- **Delivery preview:** Use `deliver --dry-run` to observe the candidate, existing
+  Verification evidence and target followability without tendering or claiming.
+  It never runs Verification or hooks, admits testimony, or reconciles. Missing
+  or stale evidence means Verification is still required; an existing failure
+  remains unsatisfied. Preparation is not a promise of successful delivery.
 - **Deliver:** Captures a tender and integration against the observed target;
   journal gains a delivered candidate. Ready prerequisites and gates trigger
   placement and claim in this invocation; otherwise the candidate waits.
@@ -88,7 +89,7 @@ Each act changes a different part of the world:
   and abandoned Contracts cannot be reopened.
 
 Placement judges declared gates, not the producer's identity. Review does not
-replace Verification; audit never requests placement. Read the final receipt
+replace Verification; delivery preview never requests placement. Read the final receipt
 for stops and reconciliation lag after an admitted act.
 
 ## 5. Handing A Role To An Akuma
@@ -101,7 +102,7 @@ authority.
 | Role | Grant at birth | Return |
 | --- | --- | --- |
 | Holder | The actions the delegated loop will perform; include `contract.review` when this holder will review. Commission with the `kei`, current Arc when one exists, appointed worktree, and holder duties. | Acceptance or abandonment, with receipts. |
-| Deliverer | The ordinary baseline: every Debt mutation, Contract audit and delivery, and Akuma management. `keiyaku -C <repo> call worker --alias @deliverer --contract <kei/...> --workdir <appointed-path> -` | The delivery receipt. |
+| Deliverer | The ordinary baseline: every Debt mutation, Contract delivery, and Akuma management. Preview is unkeyed. `keiyaku -C <repo> call worker --alias @deliverer --contract <kei/...> --workdir <appointed-path> -` | The delivery receipt. |
 | Reviewer | `--allowed contract.review`: `keiyaku -C <repo> call review-akuma --alias @reviewer --contract <kei/...> --workdir <appointed-path> --allowed contract.review -` | The verdict receipt. Without the grant, `not-allowed` refuses and no verdict is recorded. |
 
 An Archetype's explicit allowed set replaces the ordinary baseline; check

package/build/plugins/opencode/skills/keiyaku/SKILL.md

@@ -36,7 +36,9 @@ selects the Contract repository; it never retargets that World. `call
 cwd). Without it, the call uses the invocation cwd; `--contract` associates a
 Contract without selecting an execution directory.
 
-`deliver`, `review`, and `audit` may take time after their leading admission.
+`deliver` and `review` may take time after their leading admission.
+`deliver --dry-run` only observes the prospective candidate, standing evidence,
+and target followability; it never runs Verification or hooks or admits work.
 Their witnessed progress is ephemeral stderr output; stdout remains one final
 text or JSON result. Ctrl-C asks the owned operation to stop and waits for its
 truthful final receipt, so it is not evidence that an already admitted action

package/build/plugins/opencode/skills/keiyaku-babysit/SKILL.md

@@ -54,7 +54,7 @@ does not move without you.
 | Silent wedge: initial answer empty and worktree clean | Inspect status and history, then send one steering `tell`. If the worker remains unresponsive, `kill` and call a new Akuma; an empty answer alone is not proof the Contract failed. |
 | Verdict record refused with `not-allowed` | Read the worker's analysis in history. Record the verdict yourself if you did not deliver the candidate, or call a new Reviewer with the grant from `keiyaku-workflow` and have it inspect current work and record a fresh verdict. The refused request wrote no Contract testimony. |
 | Review stale after changed candidate tender | Normal content-currentness result. Give the same Reviewer the changed diff and current terms with `tell`; have it re-examine and record current testimony. A target move alone does not stale review. |
-| Target moved under the appointed worktree | Have the Deliverer inspect target movement and merge the target branch (main when selected) in that worktree when required; resolve conflicts there, then audit again. Do not resolve against a stale integration preview. |
+| Target moved under the appointed worktree | Have the Deliverer inspect target movement and merge the target branch (main when selected) in that worktree when required; resolve conflicts there, then run `deliver --dry-run` again. Do not resolve against a stale integration preview. |
 | Typed refusal names its rule | Fix the named input or physical condition, then retry from a fresh observation. Do not repeat the same request blindly. |
 
 ## What Babysitting Never Owns

package/build/plugins/opencode/skills/keiyaku-bind/SKILL.md

@@ -157,8 +157,9 @@ commands; `5m` is the normal baseline.
 Verification runs only when the Contract selects the `verified` gate, against
 the exact integration snapshot in a clean disposable worktree for that attempt.
 `deliver` reuses current satisfied evidence or runs the declarations; unsatisfied
-results and runtime stops prevent placement. `audit` runs declarations for a
-prospective candidate. Without `verified`, no verb runs Verification and the
+results and runtime stops prevent placement. `deliver --dry-run` only observes
+standing evidence for a prospective candidate; it never executes declarations.
+Without `verified`, no verb runs Verification and the
 section is inert document text. `reviewed` independently requires review
 evidence. Selected gates are checked at placement.
 

package/build/plugins/opencode/skills/keiyaku-workflow/SKILL.md

@@ -69,12 +69,13 @@ Each act changes a different part of the world:
   `reconcile` retries workspace realization.
 - **Work:** Changes and commits belong in the appointed worktree. Another
   lane's claim can move the target beneath it. Check target movement before
-  audit; when it matters, merge the target branch (main when selected) in the
-  worktree and resolve conflicts there before auditing.
-- **Audit:** Previews the candidate and target without tendering or claiming.
-  With `verified` selected, Verification runs for the captured subject and can
-  record an attestation. Without that gate, the section is inert text and no
-  verb runs Verification. A stopped run records no new verdict.
+  delivery preview; when it matters, merge the target branch (main when selected)
+  in the worktree and resolve conflicts there before previewing again.
+- **Delivery preview:** Use `deliver --dry-run` to observe the candidate, existing
+  Verification evidence and target followability without tendering or claiming.
+  It never runs Verification or hooks, admits testimony, or reconciles. Missing
+  or stale evidence means Verification is still required; an existing failure
+  remains unsatisfied. Preparation is not a promise of successful delivery.
 - **Deliver:** Captures a tender and integration against the observed target;
   journal gains a delivered candidate. Ready prerequisites and gates trigger
   placement and claim in this invocation; otherwise the candidate waits.
@@ -88,7 +89,7 @@ Each act changes a different part of the world:
   and abandoned Contracts cannot be reopened.
 
 Placement judges declared gates, not the producer's identity. Review does not
-replace Verification; audit never requests placement. Read the final receipt
+replace Verification; delivery preview never requests placement. Read the final receipt
 for stops and reconciliation lag after an admitted act.
 
 ## 5. Handing A Role To An Akuma
@@ -101,7 +102,7 @@ authority.
 | Role | Grant at birth | Return |
 | --- | --- | --- |
 | Holder | The actions the delegated loop will perform; include `contract.review` when this holder will review. Commission with the `kei`, current Arc when one exists, appointed worktree, and holder duties. | Acceptance or abandonment, with receipts. |
-| Deliverer | The ordinary baseline: every Debt mutation, Contract audit and delivery, and Akuma management. `keiyaku -C <repo> call worker --alias @deliverer --contract <kei/...> --workdir <appointed-path> -` | The delivery receipt. |
+| Deliverer | The ordinary baseline: every Debt mutation, Contract delivery, and Akuma management. Preview is unkeyed. `keiyaku -C <repo> call worker --alias @deliverer --contract <kei/...> --workdir <appointed-path> -` | The delivery receipt. |
 | Reviewer | `--allowed contract.review`: `keiyaku -C <repo> call review-akuma --alias @reviewer --contract <kei/...> --workdir <appointed-path> --allowed contract.review -` | The verdict receipt. Without the grant, `not-allowed` refuses and no verdict is recorded. |
 
 An Archetype's explicit allowed set replaces the ordinary baseline; check

package/build/skills/keiyaku/SKILL.md

@@ -36,7 +36,9 @@ selects the Contract repository; it never retargets that World. `call
 cwd). Without it, the call uses the invocation cwd; `--contract` associates a
 Contract without selecting an execution directory.
 
-`deliver`, `review`, and `audit` may take time after their leading admission.
+`deliver` and `review` may take time after their leading admission.
+`deliver --dry-run` only observes the prospective candidate, standing evidence,
+and target followability; it never runs Verification or hooks or admits work.
 Their witnessed progress is ephemeral stderr output; stdout remains one final
 text or JSON result. Ctrl-C asks the owned operation to stop and waits for its
 truthful final receipt, so it is not evidence that an already admitted action

package/build/skills/keiyaku-babysit/SKILL.md

@@ -54,7 +54,7 @@ does not move without you.
 | Silent wedge: initial answer empty and worktree clean | Inspect status and history, then send one steering `tell`. If the worker remains unresponsive, `kill` and call a new Akuma; an empty answer alone is not proof the Contract failed. |
 | Verdict record refused with `not-allowed` | Read the worker's analysis in history. Record the verdict yourself if you did not deliver the candidate, or call a new Reviewer with the grant from `keiyaku-workflow` and have it inspect current work and record a fresh verdict. The refused request wrote no Contract testimony. |
 | Review stale after changed candidate tender | Normal content-currentness result. Give the same Reviewer the changed diff and current terms with `tell`; have it re-examine and record current testimony. A target move alone does not stale review. |
-| Target moved under the appointed worktree | Have the Deliverer inspect target movement and merge the target branch (main when selected) in that worktree when required; resolve conflicts there, then audit again. Do not resolve against a stale integration preview. |
+| Target moved under the appointed worktree | Have the Deliverer inspect target movement and merge the target branch (main when selected) in that worktree when required; resolve conflicts there, then run `deliver --dry-run` again. Do not resolve against a stale integration preview. |
 | Typed refusal names its rule | Fix the named input or physical condition, then retry from a fresh observation. Do not repeat the same request blindly. |
 
 ## What Babysitting Never Owns

package/build/skills/keiyaku-bind/SKILL.md

@@ -157,8 +157,9 @@ commands; `5m` is the normal baseline.
 Verification runs only when the Contract selects the `verified` gate, against
 the exact integration snapshot in a clean disposable worktree for that attempt.
 `deliver` reuses current satisfied evidence or runs the declarations; unsatisfied
-results and runtime stops prevent placement. `audit` runs declarations for a
-prospective candidate. Without `verified`, no verb runs Verification and the
+results and runtime stops prevent placement. `deliver --dry-run` only observes
+standing evidence for a prospective candidate; it never executes declarations.
+Without `verified`, no verb runs Verification and the
 section is inert document text. `reviewed` independently requires review
 evidence. Selected gates are checked at placement.
 

package/build/skills/keiyaku-workflow/SKILL.md

@@ -69,12 +69,13 @@ Each act changes a different part of the world:
   `reconcile` retries workspace realization.
 - **Work:** Changes and commits belong in the appointed worktree. Another
   lane's claim can move the target beneath it. Check target movement before
-  audit; when it matters, merge the target branch (main when selected) in the
-  worktree and resolve conflicts there before auditing.
-- **Audit:** Previews the candidate and target without tendering or claiming.
-  With `verified` selected, Verification runs for the captured subject and can
-  record an attestation. Without that gate, the section is inert text and no
-  verb runs Verification. A stopped run records no new verdict.
+  delivery preview; when it matters, merge the target branch (main when selected)
+  in the worktree and resolve conflicts there before previewing again.
+- **Delivery preview:** Use `deliver --dry-run` to observe the candidate, existing
+  Verification evidence and target followability without tendering or claiming.
+  It never runs Verification or hooks, admits testimony, or reconciles. Missing
+  or stale evidence means Verification is still required; an existing failure
+  remains unsatisfied. Preparation is not a promise of successful delivery.
 - **Deliver:** Captures a tender and integration against the observed target;
   journal gains a delivered candidate. Ready prerequisites and gates trigger
   placement and claim in this invocation; otherwise the candidate waits.
@@ -88,7 +89,7 @@ Each act changes a different part of the world:
   and abandoned Contracts cannot be reopened.
 
 Placement judges declared gates, not the producer's identity. Review does not
-replace Verification; audit never requests placement. Read the final receipt
+replace Verification; delivery preview never requests placement. Read the final receipt
 for stops and reconciliation lag after an admitted act.
 
 ## 5. Handing A Role To An Akuma
@@ -101,7 +102,7 @@ authority.
 | Role | Grant at birth | Return |
 | --- | --- | --- |
 | Holder | The actions the delegated loop will perform; include `contract.review` when this holder will review. Commission with the `kei`, current Arc when one exists, appointed worktree, and holder duties. | Acceptance or abandonment, with receipts. |
-| Deliverer | The ordinary baseline: every Debt mutation, Contract audit and delivery, and Akuma management. `keiyaku -C <repo> call worker --alias @deliverer --contract <kei/...> --workdir <appointed-path> -` | The delivery receipt. |
+| Deliverer | The ordinary baseline: every Debt mutation, Contract delivery, and Akuma management. Preview is unkeyed. `keiyaku -C <repo> call worker --alias @deliverer --contract <kei/...> --workdir <appointed-path> -` | The delivery receipt. |
 | Reviewer | `--allowed contract.review`: `keiyaku -C <repo> call review-akuma --alias @reviewer --contract <kei/...> --workdir <appointed-path> --allowed contract.review -` | The verdict receipt. Without the grant, `not-allowed` refuses and no verdict is recorded. |
 
 An Archetype's explicit allowed set replaces the ordinary baseline; check

package/build/src/akuma/akuma-errors.d.ts

@@ -17,6 +17,11 @@ export declare class AkumaDecodeError extends Error {
     readonly kind = "akuma-decode";
     constructor(diagnostic: string, answer?: string | undefined);
 }
+export declare class AkumaSelfInterruptError extends Error {
+    readonly id: AkuId;
+    readonly kind = "akuma-self-interrupt";
+    constructor(id: AkuId);
+}
 export declare class AkumaProviderError extends Error {
     readonly diagnostic: string;
     readonly kind = "akuma-provider";

package/build/src/akuma/akuma-errors.js

@@ -30,6 +30,15 @@ export class AkumaDecodeError extends Error {
         this.name = "AkumaDecodeError";
     }
 }
+export class AkumaSelfInterruptError extends Error {
+    id;
+    kind = "akuma-self-interrupt";
+    constructor(id) {
+        super(`Akuma ${id} cannot interrupt its serving Body`);
+        this.id = id;
+        this.name = "AkumaSelfInterruptError";
+    }
+}
 export class AkumaProviderError extends Error {
     diagnostic;
     kind = "akuma-provider";

package/build/src/akuma/akuma-owner.d.ts

@@ -5,16 +5,11 @@ import { type AkumaStreamSnapshot } from "./akuma-stream.js";
 import type { AkumaStatus } from "./akuma.js";
 import { type TellResult, type TellWakeRuntime } from "./body.js";
 import { type CallInitialTell, type CallInitialTellAdmission } from "./call-initial-tell.js";
-import { HeldAkumaLeash, type KillEvidence, type ResumeCoordinate, type TellFact, type TurnOutcome } from "./heart/index.js";
+import { HeldAkumaLeash, type InterruptTellAdmission, type KillEvidence, type ResumeCoordinate, type TellFact, type TurnOutcome } from "./heart/index.js";
 import { type AkuId, type AkumaPaths } from "./identity.js";
 import type { ActivityHistory, ExactHistory } from "./projection.js";
-export type InterruptReceipt = Readonly<{
+export type InterruptReceipt = TellResult | Extract<InterruptTellAdmission, {
     kind: "unavailable";
-    evidence: "hung" | "untidy" | "unavailable";
-}> | Readonly<{
-    kind: "interrupted";
-    putDown: "was-idle" | "self-aborted";
-    tell: TellResult;
 }>;
 export type ForkReceipt = Readonly<{
     kind: "forked";
@@ -47,15 +42,13 @@ type TellAdmission = Readonly<{
     wake: Promise<TellResult>;
 }>;
 type InitialTellAdmission = CallInitialTellAdmission;
-type InterruptAdmission = Readonly<{
+type InterruptAdmission = Extract<InterruptTellAdmission, {
     kind: "unavailable";
-    evidence: "hung" | "untidy" | "unavailable";
-}> | Readonly<{
+}> | (Omit<Extract<InterruptTellAdmission, {
+    kind: "recorded";
+}>, "kind"> & Readonly<{
     kind: "admitted";
-    tell: TellFact;
-    putDown: "was-idle" | "self-aborted";
-    wake: Promise<TellResult>;
-}>;
+}>);
 export declare function settleAkumaKill(paths: AkumaPaths, signal?: AbortSignal, retainLeash?: boolean): Promise<Readonly<{
     evidence: KillEvidence;
     leash?: HeldAkumaLeash;
@@ -139,22 +132,24 @@ export declare class AkumaOwner {
     }>>;
     interrupt(body: string, options?: Readonly<{
         tellId?: string;
+        recordedAt?: string;
         schemaJson?: string;
         initiator?: string;
         signal?: AbortSignal;
         runtime?: TellWakeRuntime;
     }>): Promise<InterruptReceipt>;
-    /**
-     * Settle the predecessor and record the interrupt Tell, returning at the
-     * admission boundary so a bounded caller owns the wake wait.
-     */
+    /** Atomic Tell-plus-barrier admission; no leash wait or completion observation occurs here. */
     admitInterrupt(body: string, options?: Readonly<{
         tellId?: string;
+        recordedAt?: string;
         schemaJson?: string;
         initiator?: string;
         signal?: AbortSignal;
-        runtime?: TellWakeRuntime;
     }>): Promise<InterruptAdmission>;
+    /** Complete only the exact admitted predecessor barrier, then wake the stable Tell. */
+    completeInterruptAdmission(admission: Extract<InterruptAdmission, {
+        kind: "admitted";
+    }>, runtime?: TellWakeRuntime, signal?: AbortSignal): Promise<TellResult>;
     fork(input: Readonly<{
         at: string;
         caller?: AkumaCaller;

package/build/src/akuma/akuma-owner.js

@@ -7,18 +7,34 @@ import { createAkumaStream } from "./akuma-stream.js";
 import { handoffPendingTells, spawnAkumaBody, wakeRecordedTell, } from "./body.js";
 import { admitCallInitialTell } from "./call-initial-tell.js";
 import { acquireLeash } from "./control.js";
-import { HeldAkumaLeash, activitySlice, projectTell, readForkPoint, readHeart, readKill, readLastAnsweredTurn, readSoul, readTell, recordTell, requestPause, requestStop, } from "./heart/index.js";
+import { activitySlice, projectTell, readForkPoint, readHeart, readInterruptCompletion, readKill, readLastAnsweredTurn, readSoul, readTell, recordTell, requestStop, } from "./heart/index.js";
 import { parsePublicHistoryId, pathsForAkuId } from "./identity.js";
 import { projectTurns, selectExactHistory, selectHistory } from "./projection.js";
 import { resolveProviderExecution } from "./providers/index.js";
 import { publishAkuma } from "./publication.js";
+async function awaitInterruptCompletion(paths, barrier, signal) {
+    const leash = await acquireLeash(paths, {
+        bodySequence: barrier.bodySequence,
+        ...(signal === undefined ? { deadline: Number.POSITIVE_INFINITY } : { signal }),
+    });
+    if (leash === null)
+        return await readInterruptCompletion(paths, barrier);
+    try {
+        const result = await leash.completeInterruptBarrier(paths, barrier);
+        if (result.kind === "completed" || result.kind === "unavailable")
+            return result;
+        return { kind: "unavailable", evidence: "untidy" };
+    }
+    finally {
+        leash.release();
+    }
+}
 function diagnostic(error) {
     return error instanceof Error ? error.message : String(error);
 }
-async function takeLeashUntilSignal(paths, bodySequence, signal, unbounded = false) {
+async function takeLeashUntilSignal(paths, bodySequence, signal) {
     const leash = await acquireLeash(paths, {
         bodySequence,
-        ...(signal === undefined && unbounded ? { deadline: Number.POSITIVE_INFINITY } : {}),
         ...(signal === undefined ? {} : { signal }),
     });
     if (leash !== null)
@@ -271,62 +287,48 @@ export class AkumaOwner {
         const admitted = await this.admitInterrupt(body, options);
         if (admitted.kind === "unavailable")
             return admitted;
-        return { kind: "interrupted", putDown: admitted.putDown, tell: await admitted.wake };
+        return await this.completeInterruptAdmission(admitted, options.runtime, options.signal);
     }
-    /**
-     * Settle the predecessor and record the interrupt Tell, returning at the
-     * admission boundary so a bounded caller owns the wake wait.
-     */
+    /** Atomic Tell-plus-barrier admission; no leash wait or completion observation occurs here. */
     async admitInterrupt(body, options = {}) {
-        const request = await requestPause(this.paths, new Date().toISOString(), options.signal);
-        if (request.kind === "not-born") {
+        const admitted = await recordTell(this.paths, {
+            kind: "tell",
+            id: options.tellId ?? randomUUID(),
+            body,
+            recordedAt: options.recordedAt ?? new Date().toISOString(),
+            ...(options.initiator === undefined ? {} : { initiator: options.initiator }),
+            ...(options.schemaJson === undefined ? {} : { schemaJson: options.schemaJson }),
+        }, { interrupt: true, ...(options.signal === undefined ? {} : { signal: options.signal }) });
+        if (admitted.kind === "not-born")
             throw new AkumaNotBornError(this.id);
+        if (admitted.kind === "unavailable")
+            return admitted;
+        return { ...admitted, kind: "admitted" };
+    }
+    /** Complete only the exact admitted predecessor barrier, then wake the stable Tell. */
+    async completeInterruptAdmission(admission, runtime, signal) {
+        if (admission.barrier === undefined)
+            return await wakeRecordedTell(this.paths, admission.tell.id, runtime, signal);
+        const completion = await awaitInterruptCompletion(this.paths, admission.barrier, signal);
+        if (completion.kind === "unavailable") {
+            const receipt = await this.admittedReceipt(admission.tell.id);
+            return {
+                ...receipt,
+                interruption: {
+                    kind: "unavailable",
+                    bodySequence: admission.barrier.bodySequence,
+                    evidence: completion.evidence,
+                },
+            };
         }
-        let putDown = "was-idle";
-        let leash = await HeldAkumaLeash.try(this.paths);
-        if (leash === null) {
-            const waited = await takeLeashUntilSignal(this.paths, request.body.sequence, options.signal, true);
-            if ("kind" in waited)
-                return waited;
-            leash = waited;
-            putDown = "self-aborted";
-        }
-        let recorded;
-        try {
-            options.signal?.throwIfAborted();
-            const settledBody = (await readHeart(this.paths)).latestBody;
-            if (settledBody?.sequence === request.body.sequence && settledBody.hung !== undefined) {
-                await leash.clearPause(this.paths);
-                return { kind: "unavailable", evidence: "hung" };
-            }
-            if (settledBody?.sequence !== request.body.sequence || settledBody.end === undefined) {
-                await leash.clearPause(this.paths);
-                return { kind: "unavailable", evidence: "untidy" };
-            }
-            if (request.body.end !== undefined || settledBody.end !== "put-down")
-                putDown = "was-idle";
-            options.signal?.throwIfAborted();
-            const id = randomUUID();
-            const admitted = await leash.recordInterruptTell(this.paths, {
-                kind: "tell",
-                id: options.tellId ?? id,
-                body,
-                recordedAt: new Date().toISOString(),
-                ...(options.initiator === undefined ? {} : { initiator: options.initiator }),
-                ...(options.schemaJson === undefined ? {} : { schemaJson: options.schemaJson }),
-            });
-            if (admitted.kind === "not-born")
-                throw new AkumaNotBornError(this.id);
-            recorded = admitted.tell;
-        }
-        finally {
-            leash.release();
-        }
+        const receipt = await wakeRecordedTell(this.paths, admission.tell.id, runtime, signal);
         return {
-            kind: "admitted",
-            tell: recorded,
-            putDown,
-            wake: wakeRecordedTell(this.paths, recorded.id, options.runtime, options.signal),
+            ...receipt,
+            interruption: {
+                kind: "completed",
+                bodySequence: admission.barrier.bodySequence,
+                putDown: admission.predecessorWasRunning && completion.body.end === "put-down" ? "self-aborted" : "was-idle",
+            },
         };
     }
     async fork(input) {

package/build/src/akuma/akuma-selection-execution.d.ts

@@ -20,6 +20,10 @@ type TellExecutionInput = Readonly<{
     onObserve?: AskObserver;
     outcomeObserved?: OutcomeObserver;
 }>;
+type AskExecutionInput = TellExecutionInput & Readonly<{
+    timeoutMs?: number;
+    schemaJson?: string;
+}>;
 export declare function executeTellAkuma(input: TellExecutionInput): Promise<AkumaTellResult>;
 export declare function decodeAskObservation<T>(observation: AkumaAskObservation, schema: Schema<T>): AkumaAskObservation<T>;
 export declare function observeAdmittedAskAkuma(input: Readonly<{
@@ -40,10 +44,7 @@ export declare function observeAdmittedAskAkuma(input: Readonly<{
     onObserve?: AskObserver;
     outcomeObserved?: OutcomeObserver;
 }>): Promise<AkumaAskResult>;
-export declare function executeAskAkuma(input: TellExecutionInput & Readonly<{
-    timeoutMs?: number;
-    schemaJson?: string;
-}>): Promise<AkumaAskResult>;
+export declare function executeAskAkuma(input: AskExecutionInput): Promise<AkumaAskResult>;
 type KillExecutionInput = Readonly<{
     path: WorldRoot;
     ids: readonly AkumaStatus["id"][];