@aztec/prover-node 0.0.1-commit.9ef841308 → 0.0.1-commit.a5db02d

package/dest/session-manager.d.ts

@@ -0,0 +1,158 @@
+import { type EpochNumber } from '@aztec/foundation/branded-types';
+import type { EthAddress } from '@aztec/foundation/eth-address';
+import { type LoggerBindings } from '@aztec/foundation/log';
+import type { DateProvider } from '@aztec/foundation/timer';
+import type { EpochProverFactory } from '@aztec/prover-client';
+import type { L2BlockSource } from '@aztec/stdlib/block';
+import type { EpochProvingJobState } from '@aztec/stdlib/interfaces/server';
+import type { CheckpointStore } from './checkpoint-store.js';
+import { CheckpointProver } from './job/checkpoint-prover.js';
+import type { EpochProvingJobData } from './job/epoch-proving-job-data.js';
+import { EpochSession, type EpochSessionDeps, type EpochSessionHooks, type SessionSpec } from './job/epoch-session.js';
+import type { ProverNodeJobMetrics } from './metrics.js';
+import type { ProofPublishingService } from './proof-publishing-service.js';
+/** Trigger payload for `reconcile`. */
+export type ReconcileTrigger = {
+    kind: 'checkpoint';
+    epoch: EpochNumber;
+} | {
+    kind: 'prune';
+    affectedEpochs: EpochNumber[];
+} | {
+    kind: 'tick';
+} | {
+    kind: 'start-proof';
+    spec: SessionSpec;
+};
+/** Config bag for session lifecycle decisions. */
+export type SessionManagerConfig = {
+    /** Cap on the number of non-terminal sessions (full + partial). 0 disables. */
+    maxPendingJobs: number;
+    /** Interval at which the internal periodic tick fires `reconcile({ kind: 'tick' })`. */
+    tickIntervalMs: number;
+    /** Forwarded to every session: delay before top-tree proving, letting late reorgs settle. */
+    finalizationDelayMs: number | undefined;
+};
+export type SessionManagerDeps = {
+    checkpointStore: CheckpointStore;
+    l2BlockSource: Pick<L2BlockSource, 'isEpochComplete' | 'getCheckpoints' | 'getL1Constants' | 'getBlockNumber' | 'getBlockData'>;
+    proverFactory: EpochProverFactory;
+    proverId: EthAddress;
+    publishingService: ProofPublishingService;
+    metrics: ProverNodeJobMetrics;
+    dateProvider: DateProvider;
+    config: SessionManagerConfig;
+    /**
+     * Optional callback fired when a session terminates with `failed`. The session manager
+     * doesn't own the failure-upload action; it just notifies the owner.
+     */
+    onSessionFailed?: (session: EpochSession) => Promise<void>;
+    bindings?: LoggerBindings;
+};
+/**
+ * Owns the lifecycle of every `EpochSession`. Each L2BlockStream event and periodic tick
+ * arrives via a dedicated entry point (`onCheckpointAdded`, `onPrune`, `onTick`, etc.) which
+ * schedules a `reconcile(trigger)` on a serial queue. Reconcile walks both session
+ * maps, cancels any session whose canonical content has shifted, re-creates it with
+ * the same spec but new content, and opens fresh full sessions for any epoch implicated
+ * by the trigger.
+ */
+export declare class SessionManager {
+    private readonly deps;
+    private readonly log;
+    private readonly fullSessions;
+    private readonly partialSessions;
+    /**
+     * Serialises every reconcile call. The trigger sources (L2BlockStream events, the
+     * periodic tick, JSON-RPC `startProof`) run independently, so without this queue two
+     * reconciles could interleave on the `await session.cancel(...)` step and orphan a
+     * freshly-constructed session.
+     */
+    private readonly reconcileQueue;
+    /** Cached L1 constants, populated on first read. */
+    private cachedL1Constants;
+    /**
+     * Highest epoch for which the periodic tick has successfully created a full session.
+     * Monotonic high-water mark: once the tick observes a session for epoch X, it stops
+     * trying to open one — even if that session subsequently fails (only a new checkpoint
+     * event reopens it). Crucially, the mark only advances when a session actually exists
+     * post-open, so transient blockers (atMaxSessionLimit, archiver still indexing) leave
+     * the mark in place and the next tick retries.
+     */
+    private lastTickEpoch;
+    /** Test-only hooks applied to every session this manager constructs. */
+    private sessionHooks;
+    /** Periodic tick that nudges reconcile to pick up newly-complete epochs. Started by `start()`. */
+    private epochTicker;
+    constructor(deps: SessionManagerDeps);
+    /**
+     * Starts the periodic tick. Separated from the constructor so tests can drive `onTick()`
+     * manually without the background ticker interleaving. Idempotent.
+     */
+    start(): void;
+    /**
+     * Installs hooks applied to every session constructed from now on. Used by the e2e
+     * harness to interpose around top-tree proving (gate it, override it, observe it)
+     * without monkey-patching the orchestrator factory.
+     */
+    setSessionHooks(hooks: EpochSessionHooks): void;
+    /** Every live (non-terminal) session. */
+    allSessions(): EpochSession[];
+    /** Returns the full session for `epoch`, if any. */
+    getFullSession(epoch: EpochNumber): EpochSession | undefined;
+    /** Returns the partial session for `spec`, if any. */
+    getPartialSession(spec: SessionSpec): EpochSession | undefined;
+    /** Observability summary used by the prover-node API. */
+    getJobs(): {
+        uuid: string;
+        status: EpochProvingJobState;
+        epochNumber: EpochNumber;
+    }[];
+    /** Called by ProverNode after a chain-checkpointed event has been added to the store. */
+    onCheckpointAdded(epoch: EpochNumber): Promise<void>;
+    /** Called by ProverNode after a chain-pruned event has flipped store provers to pruned. */
+    onPrune(affectedEpochs: EpochNumber[]): Promise<void>;
+    /**
+     * Called periodically by ProverNode's ticker. Picks up epochs that have become complete
+     * by time without a fresh checkpoint event (e.g. the epoch's last slots are empty), and
+     * advances to the next epoch once the previous one is proven on L1.
+     */
+    onTick(): Promise<void>;
+    /**
+     * Schedules a proof attempt for the supplied epoch and returns the job id without waiting for
+     * the proof to complete — proving can far outlast an HTTP request, so callers poll `getJobs()`
+     * for the outcome. Every session — full or partial — begins at the epoch's first slot; the
+     * partial's spec stops at the last canonical slot, while the full's stops at the epoch's last
+     * slot. Dedupes against any existing session covering the same range, returning its id.
+     */
+    startProof(epoch: EpochNumber): Promise<string>;
+    /** Stops the tick, drains the reconcile queue, and cancels every live session. */
+    stop(): Promise<void>;
+    private scheduleReconcile;
+    private reconcile;
+    private recreateInvalidSessions;
+    private openFullSessionIfReady;
+    private openPartialSession;
+    protected constructSession(spec: SessionSpec, checkpoints: readonly CheckpointProver[]): EpochSession;
+    /** Extracted for test override. */
+    protected doConstructSession(spec: SessionSpec, checkpoints: readonly CheckpointProver[], sessionDeps: EpochSessionDeps, hooks?: EpochSessionHooks): EpochSession;
+    private buildSessionDeps;
+    private computeDeadline;
+    private runSession;
+    /**
+     * Builds the EpochProvingJobData snapshot for failure upload. Includes every checkpoint
+     * referenced by the session, regardless of whether sub-tree proving completed —
+     * partial state is still useful for post-mortem analysis.
+     */
+    static buildSessionProvingData(session: EpochSession): EpochProvingJobData;
+    private atMaxSessionLimit;
+    private epochsForTrigger;
+    private nextUnprovenEpoch;
+    private checkpointsForSpec;
+    private fireAndForgetCancel;
+    private checkpointsMatch;
+    private archiverFullyCovered;
+    private isProvenChainEncompassing;
+    private getL1Constants;
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dest/session-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-manager.d.ts","sourceRoot":"","sources":["../src/session-manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,KAAK,WAAW,EAAE,MAAM,iCAAiC,CAAC;AAEhF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAAe,KAAK,cAAc,EAAgB,MAAM,uBAAuB,CAAC;AAGvF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC/D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAQzD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AAE5E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAC9D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAC3E,OAAO,EACL,YAAY,EACZ,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EAEtB,KAAK,WAAW,EAEjB,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACzD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AAE5E,uCAAuC;AACvC,MAAM,MAAM,gBAAgB,GACxB;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,KAAK,EAAE,WAAW,CAAA;CAAE,GAC1C;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,cAAc,EAAE,WAAW,EAAE,CAAA;CAAE,GAChD;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAChB;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,IAAI,EAAE,WAAW,CAAA;CAAE,CAAC;AAE/C,kDAAkD;AAClD,MAAM,MAAM,oBAAoB,GAAG;IACjC,+EAA+E;IAC/E,cAAc,EAAE,MAAM,CAAC;IACvB,wFAAwF;IACxF,cAAc,EAAE,MAAM,CAAC;IACvB,6FAA6F;IAC7F,mBAAmB,EAAE,MAAM,GAAG,SAAS,CAAC;CACzC,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,eAAe,EAAE,eAAe,CAAC;IACjC,aAAa,EAAE,IAAI,CACjB,aAAa,EACb,iBAAiB,GAAG,gBAAgB,GAAG,gBAAgB,GAAG,gBAAgB,GAAG,cAAc,CAC5F,CAAC;IACF,aAAa,EAAE,kBAAkB,CAAC;IAClC,QAAQ,EAAE,UAAU,CAAC;IACrB,iBAAiB,EAAE,sBAAsB,CAAC;IAC1C,OAAO,EAAE,oBAAoB,CAAC;IAC9B,YAAY,EAAE,YAAY,CAAC;IAC3B,MAAM,EAAE,oBAAoB,CAAC;IAC7B;;;OAGG;IACH,eAAe,CAAC,EAAE,CAAC,OAAO,EAAE,YAAY,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3D,QAAQ,CAAC,EAAE,cAAc,CAAC;CAC3B,CAAC;AAEF;;;;;;;GAOG;AACH,qBAAa,cAAc;IA2Bb,OAAO,CAAC,QAAQ,CAAC,IAAI;IA1BjC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAC7B,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA6C;IAC1E,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAwC;IACxE;;;;;OAKG;IACH,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAqB;IACpD,oDAAoD;IACpD,OAAO,CAAC,iBAAiB,CAAgC;IACzD;;;;;;;OAOG;IACH,OAAO,CAAC,aAAa,CAA0B;IAC/C,wEAAwE;IACxE,OAAO,CAAC,YAAY,CAAgC;IACpD,kGAAkG;IAClG,OAAO,CAAC,WAAW,CAA6B;IAEhD,YAA6B,IAAI,EAAE,kBAAkB,EAGpD;IAED;;;OAGG;IACI,KAAK,IAAI,IAAI,CAMnB;IAED;;;;OAIG;IACI,eAAe,CAAC,KAAK,EAAE,iBAAiB,GAAG,IAAI,CAErD;IAID,yCAAyC;IAClC,WAAW,IAAI,YAAY,EAAE,CAEnC;IAED,oDAAoD;IAC7C,cAAc,CAAC,KAAK,EAAE,WAAW,GAAG,YAAY,GAAG,SAAS,CAElE;IAED,sDAAsD;IAC/C,iBAAiB,CAAC,IAAI,EAAE,WAAW,GAAG,YAAY,GAAG,SAAS,CAEpE;IAED,yDAAyD;IAClD,OAAO,IAAI;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,oBAAoB,CAAC;QAAC,WAAW,EAAE,WAAW,CAAA;KAAE,EAAE,CAM3F;IAID,yFAAyF;IAClF,iBAAiB,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAE1D;IAED,2FAA2F;IACpF,OAAO,CAAC,cAAc,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAE3D;IAED;;;;OAIG;IACI,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAE7B;IAID;;;;;;OAMG;IACU,UAAU,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAoC3D;IAED,kFAAkF;IACrE,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAOjC;IAID,OAAO,CAAC,iBAAiB;YAIX,SAAS;IA0BvB,OAAO,CAAC,uBAAuB;YAmCjB,sBAAsB;IAiCpC,OAAO,CAAC,kBAAkB;IA2B1B,SAAS,CAAC,gBAAgB,CAAC,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,SAAS,gBAAgB,EAAE,GAAG,YAAY,CAEpG;IAED,mCAAmC;IACnC,SAAS,CAAC,kBAAkB,CAC1B,IAAI,EAAE,WAAW,EACjB,WAAW,EAAE,SAAS,gBAAgB,EAAE,EACxC,WAAW,EAAE,gBAAgB,EAC7B,KAAK,CAAC,EAAE,iBAAiB,GACxB,YAAY,CAEd;IAED,OAAO,CAAC,gBAAgB;IAgBxB,OAAO,CAAC,eAAe;YAQT,UAAU;IA6BxB;;;;OAIG;IACH,OAAc,uBAAuB,CAAC,OAAO,EAAE,YAAY,GAAG,mBAAmB,CAkBhF;IAID,OAAO,CAAC,iBAAiB;YA2BX,gBAAgB;YAwBhB,iBAAiB;IAU/B,OAAO,CAAC,kBAAkB;IAI1B,OAAO,CAAC,mBAAmB;IAI3B,OAAO,CAAC,gBAAgB;IAYxB,OAAO,CAAC,oBAAoB;YAkBd,yBAAyB;YAUzB,cAAc;CAM7B"}

package/dest/session-manager.js

@@ -0,0 +1,486 @@
+import { BlockNumber } from '@aztec/foundation/branded-types';
+import { createLogger } from '@aztec/foundation/log';
+import { SerialQueue } from '@aztec/foundation/queue';
+import { RunningPromise } from '@aztec/foundation/running-promise';
+import { getEpochAtSlot, getProofSubmissionDeadlineTimestamp, getSlotRangeForEpoch } from '@aztec/stdlib/epoch-helpers';
+import { CheckpointProver } from './job/checkpoint-prover.js';
+import { EpochSession, specKey } from './job/epoch-session.js';
+/**
+ * Owns the lifecycle of every `EpochSession`. Each L2BlockStream event and periodic tick
+ * arrives via a dedicated entry point (`onCheckpointAdded`, `onPrune`, `onTick`, etc.) which
+ * schedules a `reconcile(trigger)` on a serial queue. Reconcile walks both session
+ * maps, cancels any session whose canonical content has shifted, re-creates it with
+ * the same spec but new content, and opens fresh full sessions for any epoch implicated
+ * by the trigger.
+ */ export class SessionManager {
+    deps;
+    log;
+    fullSessions;
+    partialSessions;
+    /**
+   * Serialises every reconcile call. The trigger sources (L2BlockStream events, the
+   * periodic tick, JSON-RPC `startProof`) run independently, so without this queue two
+   * reconciles could interleave on the `await session.cancel(...)` step and orphan a
+   * freshly-constructed session.
+   */ reconcileQueue;
+    /** Cached L1 constants, populated on first read. */ cachedL1Constants;
+    /**
+   * Highest epoch for which the periodic tick has successfully created a full session.
+   * Monotonic high-water mark: once the tick observes a session for epoch X, it stops
+   * trying to open one — even if that session subsequently fails (only a new checkpoint
+   * event reopens it). Crucially, the mark only advances when a session actually exists
+   * post-open, so transient blockers (atMaxSessionLimit, archiver still indexing) leave
+   * the mark in place and the next tick retries.
+   */ lastTickEpoch;
+    /** Test-only hooks applied to every session this manager constructs. */ sessionHooks;
+    /** Periodic tick that nudges reconcile to pick up newly-complete epochs. Started by `start()`. */ epochTicker;
+    constructor(deps){
+        this.deps = deps;
+        this.fullSessions = new Map();
+        this.partialSessions = new Map();
+        this.reconcileQueue = new SerialQueue();
+        this.log = createLogger('prover-node:session-manager', deps.bindings);
+        this.reconcileQueue.start();
+    }
+    /**
+   * Starts the periodic tick. Separated from the constructor so tests can drive `onTick()`
+   * manually without the background ticker interleaving. Idempotent.
+   */ start() {
+        if (this.epochTicker) {
+            return;
+        }
+        this.epochTicker = new RunningPromise(()=>this.onTick(), this.log, this.deps.config.tickIntervalMs);
+        this.epochTicker.start();
+    }
+    /**
+   * Installs hooks applied to every session constructed from now on. Used by the e2e
+   * harness to interpose around top-tree proving (gate it, override it, observe it)
+   * without monkey-patching the orchestrator factory.
+   */ setSessionHooks(hooks) {
+        this.sessionHooks = hooks;
+    }
+    // ---------------- read-only views ----------------
+    /** Every live (non-terminal) session. */ allSessions() {
+        return [
+            ...this.fullSessions.values(),
+            ...this.partialSessions.values()
+        ];
+    }
+    /** Returns the full session for `epoch`, if any. */ getFullSession(epoch) {
+        return this.fullSessions.get(epoch);
+    }
+    /** Returns the partial session for `spec`, if any. */ getPartialSession(spec) {
+        return this.partialSessions.get(specKey(spec));
+    }
+    /** Observability summary used by the prover-node API. */ getJobs() {
+        return this.allSessions().map((s)=>({
+                uuid: s.getId(),
+                status: s.getState(),
+                epochNumber: s.getEpochNumber()
+            }));
+    }
+    // ---------------- event entry points ----------------
+    /** Called by ProverNode after a chain-checkpointed event has been added to the store. */ onCheckpointAdded(epoch) {
+        return this.scheduleReconcile({
+            kind: 'checkpoint',
+            epoch
+        });
+    }
+    /** Called by ProverNode after a chain-pruned event has flipped store provers to pruned. */ onPrune(affectedEpochs) {
+        return this.scheduleReconcile({
+            kind: 'prune',
+            affectedEpochs
+        });
+    }
+    /**
+   * Called periodically by ProverNode's ticker. Picks up epochs that have become complete
+   * by time without a fresh checkpoint event (e.g. the epoch's last slots are empty), and
+   * advances to the next epoch once the previous one is proven on L1.
+   */ onTick() {
+        return this.scheduleReconcile({
+            kind: 'tick'
+        });
+    }
+    // ---------------- public API ----------------
+    /**
+   * Schedules a proof attempt for the supplied epoch and returns the job id without waiting for
+   * the proof to complete — proving can far outlast an HTTP request, so callers poll `getJobs()`
+   * for the outcome. Every session — full or partial — begins at the epoch's first slot; the
+   * partial's spec stops at the last canonical slot, while the full's stops at the epoch's last
+   * slot. Dedupes against any existing session covering the same range, returning its id.
+   */ async startProof(epoch) {
+        const canonical = await this.deps.checkpointStore.listForEpoch(epoch);
+        if (canonical.length === 0) {
+            throw new EmptyEpochError(epoch);
+        }
+        // Don't re-prove an epoch the L1 proven chain already encompasses — it was already proven
+        // (possibly by another prover node), so a fresh proof would be wasted work.
+        if (await this.isProvenChainEncompassing(canonical)) {
+            throw new EpochAlreadyProvenError(epoch);
+        }
+        const l1Constants = await this.getL1Constants();
+        const [fromSlot] = getSlotRangeForEpoch(epoch, l1Constants);
+        const toSlot = canonical[canonical.length - 1].slotNumber;
+        const spec = {
+            kind: 'partial',
+            epochNumber: epoch,
+            fromSlot,
+            toSlot
+        };
+        // Reuse a session already covering this exact range rather than scheduling a duplicate.
+        const existingFull = this.getFullSession(epoch);
+        if (existingFull && !existingFull.isTerminal() && existingFull.getSpec().fromSlot === fromSlot && existingFull.getSpec().toSlot === toSlot) {
+            return existingFull.getId();
+        }
+        const existingPartial = this.getPartialSession(spec);
+        if (existingPartial && !existingPartial.isTerminal()) {
+            return existingPartial.getId();
+        }
+        await this.scheduleReconcile({
+            kind: 'start-proof',
+            spec
+        });
+        const created = this.getPartialSession(spec);
+        if (!created) {
+            throw new Error(`Failed to schedule partial proof for epoch ${epoch}`);
+        }
+        return created.getId();
+    }
+    /** Stops the tick, drains the reconcile queue, and cancels every live session. */ async stop() {
+        await this.epochTicker?.stop();
+        await this.reconcileQueue.cancel();
+        const sessions = this.allSessions();
+        // A clean shutdown is just a restart, so preserve the in-flight broker jobs (abortJobs: false)
+        // for the restarted node to reuse rather than re-proving the epoch from scratch.
+        await Promise.allSettled(sessions.map((s)=>s.cancel('prover-node stopping', {
+                abortJobs: false
+            })));
+    }
+    // ---------------- reconcile ----------------
+    scheduleReconcile(trigger) {
+        return this.reconcileQueue.put(()=>this.reconcile(trigger));
+    }
+    async reconcile(trigger) {
+        this.log.debug(`Reconciling`, {
+            trigger
+        });
+        this.recreateInvalidSessions();
+        const implicatedEpochs = await this.epochsForTrigger(trigger);
+        for (const epoch of implicatedEpochs){
+            await this.openFullSessionIfReady(epoch);
+        }
+        // Advance the tick high-water mark only once a session actually exists for the epoch.
+        // `openFullSessionIfReady` can early-return without creating one (atMaxSessionLimit,
+        // archiver still indexing, etc.); in those cases we want the next tick to try again
+        // rather than skip the epoch forever.
+        if (trigger.kind === 'tick' && implicatedEpochs.length === 1) {
+            const epoch = implicatedEpochs[0];
+            if (this.fullSessions.has(epoch)) {
+                this.lastTickEpoch = epoch;
+            }
+        }
+        if (trigger.kind === 'start-proof') {
+            this.openPartialSession(trigger.spec);
+        }
+    }
+    recreateInvalidSessions() {
+        for (const [key, session] of Array.from(this.fullSessions.entries())){
+            if (session.isTerminal()) {
+                this.fullSessions.delete(key);
+                continue;
+            }
+            const canonical = this.checkpointsForSpec(session.getSpec());
+            if (!this.checkpointsMatch(session.getCheckpoints(), canonical)) {
+                this.fireAndForgetCancel(session, 'canonical content changed');
+                this.fullSessions.delete(key);
+                if (canonical.length > 0) {
+                    const newSession = this.constructSession(session.getSpec(), canonical);
+                    this.fullSessions.set(key, newSession);
+                    void this.runSession(newSession);
+                }
+            }
+        }
+        for (const [key, session] of Array.from(this.partialSessions.entries())){
+            if (session.isTerminal()) {
+                this.partialSessions.delete(key);
+                continue;
+            }
+            const canonical = this.checkpointsForSpec(session.getSpec());
+            if (!this.checkpointsMatch(session.getCheckpoints(), canonical)) {
+                this.fireAndForgetCancel(session, 'canonical content changed');
+                this.partialSessions.delete(key);
+                if (canonical.length > 0) {
+                    const newSession = this.constructSession(session.getSpec(), canonical);
+                    this.partialSessions.set(key, newSession);
+                    void this.runSession(newSession);
+                }
+            }
+        }
+    }
+    async openFullSessionIfReady(epoch) {
+        // `recreateInvalidSessions` runs at the top of every reconcile and deletes terminal sessions
+        // before this is called, so a session present here is live and already covers the epoch.
+        if (this.fullSessions.has(epoch)) {
+            return;
+        }
+        if (this.atMaxSessionLimit()) {
+            this.log.debug(`Skipping full-session open for epoch ${epoch}: max pending jobs reached`);
+            return;
+        }
+        if (!await this.deps.l2BlockSource.isEpochComplete(epoch)) {
+            return;
+        }
+        const l1Constants = await this.getL1Constants();
+        const archiverCps = await this.deps.l2BlockSource.getCheckpoints({
+            epoch
+        });
+        if (archiverCps.length === 0) {
+            return;
+        }
+        const [fromSlot, toSlot] = getSlotRangeForEpoch(epoch, l1Constants);
+        const canonical = this.deps.checkpointStore.listInSlotRange(fromSlot, toSlot);
+        if (!this.archiverFullyCovered(archiverCps, canonical)) {
+            this.log.debug(`Skipping full-session open for epoch ${epoch}: archiver checkpoints not all in store`, {
+                archiverCount: archiverCps.length,
+                storeCount: canonical.length
+            });
+            return;
+        }
+        const spec = {
+            kind: 'full',
+            epochNumber: epoch,
+            fromSlot,
+            toSlot
+        };
+        const session = this.constructSession(spec, canonical);
+        this.fullSessions.set(epoch, session);
+        void this.runSession(session);
+    }
+    openPartialSession(spec) {
+        const canonical = this.deps.checkpointStore.listInSlotRange(spec.fromSlot, spec.toSlot);
+        if (canonical.length === 0) {
+            return;
+        }
+        // Reuse a live partial session for this epoch whose checkpoint set already matches the
+        // canonical content — e.g. a repeated `startProof` with no new checkpoints mined since the
+        // last one. Reconstructing would re-prove identical content and burn a pending-job slot.
+        const existing = Array.from(this.partialSessions.values()).find((s)=>s.getSpec().epochNumber === spec.epochNumber && !s.isTerminal() && this.checkpointsMatch(s.getCheckpoints(), canonical));
+        if (existing) {
+            return;
+        }
+        if (this.atMaxSessionLimit()) {
+            throw new Error(`Maximum pending proving jobs ${this.deps.config.maxPendingJobs} reached.`);
+        }
+        const session = this.constructSession(spec, canonical);
+        this.partialSessions.set(specKey(spec), session);
+        void this.runSession(session);
+    }
+    // ---------------- session construction ----------------
+    constructSession(spec, checkpoints) {
+        return this.doConstructSession(spec, checkpoints, this.buildSessionDeps(spec.epochNumber), this.sessionHooks);
+    }
+    /** Extracted for test override. */ doConstructSession(spec, checkpoints, sessionDeps, hooks) {
+        return new EpochSession(spec, checkpoints, {
+            ...sessionDeps,
+            hooks
+        });
+    }
+    buildSessionDeps(epochNumber) {
+        const config = {
+            finalizationDelayMs: this.deps.config.finalizationDelayMs
+        };
+        return {
+            proverFactory: this.deps.proverFactory,
+            proverId: this.deps.proverId,
+            publishingService: this.deps.publishingService,
+            metrics: this.deps.metrics,
+            dateProvider: this.deps.dateProvider,
+            deadline: this.computeDeadline(epochNumber),
+            config,
+            bindings: this.deps.bindings
+        };
+    }
+    computeDeadline(epochNumber) {
+        if (!this.cachedL1Constants) {
+            return undefined;
+        }
+        const ts = getProofSubmissionDeadlineTimestamp(epochNumber, this.cachedL1Constants);
+        return new Date(Number(ts) * 1000);
+    }
+    async runSession(session) {
+        // A reconcile may have cancelled this session before it starts (content-change
+        // recreation). Don't proceed — start() would build a TopTreeJob that should never run.
+        if (session.isTerminal()) {
+            this.log.debug(`Skipping start for ${session.getId()}: already terminal (${session.getState()})`);
+            return;
+        }
+        const state = await session.start();
+        this.log.info(`Session ${session.getId()} exited with state ${state}`);
+        if (state === 'failed' && this.deps.onSessionFailed) {
+            // Best-effort suppression of the spurious post-mortem upload a prune produces: if the session's
+            // checkpoints no longer match the store's current set, the failure was caused by the content
+            // changing under it, not a genuine proving fault, so skip the upload. This is inherently racy —
+            // the store lags the world-state unwind, so a fault observed before the prune is reconciled here
+            // still uploads. The epoch is recovered regardless by recreating the session on re-add.
+            if (!this.checkpointsMatch(session.getCheckpoints(), this.checkpointsForSpec(session.getSpec()))) {
+                this.log.info(`Skipping failure upload for session ${session.getId()}: canonical content changed`, {
+                    ...session.getSpec()
+                });
+                return;
+            }
+            try {
+                await this.deps.onSessionFailed(session);
+            } catch (err) {
+                this.log.error(`Error in onSessionFailed callback for ${session.getSpec().epochNumber}`, err);
+            }
+        }
+    }
+    /**
+   * Builds the EpochProvingJobData snapshot for failure upload. Includes every checkpoint
+   * referenced by the session, regardless of whether sub-tree proving completed —
+   * partial state is still useful for post-mortem analysis.
+   */ static buildSessionProvingData(session) {
+        const checkpoints = session.getCheckpoints();
+        const txs = new Map();
+        const l1ToL2Messages = {};
+        for (const c of checkpoints){
+            for (const [hash, tx] of c.txs){
+                txs.set(hash, tx);
+            }
+            l1ToL2Messages[c.checkpoint.number] = c.l1ToL2Messages;
+        }
+        return {
+            epochNumber: session.getSpec().epochNumber,
+            checkpoints: checkpoints.map((c)=>c.checkpoint),
+            txs,
+            l1ToL2Messages,
+            previousBlockHeader: checkpoints[0].previousBlockHeader,
+            attestations: []
+        };
+    }
+    // ---------------- reconcile helpers ----------------
+    atMaxSessionLimit() {
+        const { maxPendingJobs: max } = this.deps.config;
+        if (!max || max <= 0) {
+            return false;
+        }
+        const live = this.allSessions().filter((s)=>!s.isTerminal()).length;
+        return live >= max;
+    }
+    /**
+   * Maps a reconcile trigger to the epochs whose full session should be (re)opened.
+   *
+   * This is where the "don't retry a genuinely-failed epoch, but do recover a pruned one" invariant
+   * lives — enforced by which triggers are gated by `lastTickEpoch`:
+   *
+   * - The periodic `tick` IS gated: once a tick has opened a session for an epoch, `lastTickEpoch`
+   *   advances to it and later ticks skip it (`epoch <= lastTickEpoch`). So a failed attempt is never
+   *   resubmitted on a loop by the tick.
+   * - `checkpoint` and `prune` are deliberately NOT gated. They only fire when the epoch's canonical
+   *   content actually changes — a checkpoint arrives, or a reorg prunes/replaces one — which is
+   *   exactly when re-attempting is correct.
+   *
+   * A genuine proving failure produces no content change, hence no checkpoint/prune event, so only
+   * the gated tick could reopen it — and it won't. A prune + re-add fires ungated events, so the
+   * epoch is reopened through this path (and `openFullSessionIfReady` rebuilds over the fresh
+   * provers). See the "onTick does not retry ... but recovers ... re-added" test.
+   */ async epochsForTrigger(trigger) {
+        switch(trigger.kind){
+            case 'checkpoint':
+                return [
+                    trigger.epoch
+                ];
+            case 'prune':
+                return trigger.affectedEpochs;
+            case 'tick':
+                {
+                    const epoch = await this.nextUnprovenEpoch();
+                    if (epoch === undefined || this.lastTickEpoch !== undefined && epoch <= this.lastTickEpoch) {
+                        return [];
+                    }
+                    return [
+                        epoch
+                    ];
+                }
+            case 'start-proof':
+                return [];
+        }
+    }
+    /**
+   * The next epoch to prove: the epoch containing the first block after the proven tip.
+   * Returns undefined when that block has not been mined yet (e.g. nothing new to prove).
+   * Subsequent ticks advance only once the chain's proven height moves forward, so epochs
+   * are proven in order rather than all at once.
+   */ async nextUnprovenEpoch() {
+        const lastProven = await this.deps.l2BlockSource.getBlockNumber({
+            tag: 'proven'
+        }) ?? BlockNumber.ZERO;
+        const firstToProve = BlockNumber(lastProven + 1);
+        const header = (await this.deps.l2BlockSource.getBlockData({
+            number: firstToProve
+        }))?.header;
+        if (!header) {
+            return undefined;
+        }
+        return getEpochAtSlot(header.getSlot(), await this.getL1Constants());
+    }
+    checkpointsForSpec(spec) {
+        return this.deps.checkpointStore.listInSlotRange(spec.fromSlot, spec.toSlot);
+    }
+    fireAndForgetCancel(session, reason) {
+        void session.cancel(reason).catch((err)=>this.log.warn(`Error cancelling session ${session.getId()}`, err));
+    }
+    checkpointsMatch(a, b) {
+        if (a.length !== b.length) {
+            return false;
+        }
+        for(let i = 0; i < a.length; i++){
+            if (a[i].id !== b[i].id || a[i].isCancelled()) {
+                return false;
+            }
+        }
+        return true;
+    }
+    archiverFullyCovered(archiverCps, storeCps) {
+        if (storeCps.length < archiverCps.length) {
+            return false;
+        }
+        // Compare by content-addressed id (number, slot, archive root) rather than checkpoint number:
+        // a reorg can keep the number while changing the checkpoint's post-state archive root.
+        const storeIds = new Set(storeCps.map((p)=>p.id));
+        return archiverCps.every((cp)=>storeIds.has(CheckpointProver.idFor(cp.checkpoint)));
+    }
+    /**
+   * Returns true if the L1 proven tip already covers every canonical checkpoint in the set — i.e.
+   * the epoch has already been fully proven, so there is no point starting a new proof for it.
+   * Conservatively returns false when nothing is proven yet.
+   */ async isProvenChainEncompassing(canonical) {
+        const provenBlock = await this.deps.l2BlockSource.getBlockNumber({
+            tag: 'proven'
+        });
+        if (!provenBlock || provenBlock <= 0) {
+            return false;
+        }
+        const lastCheckpoint = canonical[canonical.length - 1].checkpoint;
+        const lastBlock = lastCheckpoint.blocks[lastCheckpoint.blocks.length - 1].number;
+        return provenBlock >= lastBlock;
+    }
+    async getL1Constants() {
+        if (!this.cachedL1Constants) {
+            this.cachedL1Constants = await this.deps.l2BlockSource.getL1Constants();
+        }
+        return this.cachedL1Constants;
+    }
+}
+class EmptyEpochError extends Error {
+    constructor(epochNumber){
+        super(`No blocks found for epoch ${epochNumber}`);
+        this.name = 'EmptyEpochError';
+    }
+}
+class EpochAlreadyProvenError extends Error {
+    constructor(epochNumber){
+        super(`Epoch ${epochNumber} is already proven on L1`);
+        this.name = 'EpochAlreadyProvenError';
+    }
+}