@basou/core 0.8.0 → 0.10.0

package/dist/index.d.ts

@@ -149,6 +149,10 @@ declare const SessionInnerImportSchema: z.ZodObject<{
         active_time_method: z.ZodOptional<z.ZodString>;
         machine_active_time_ms: z.ZodOptional<z.ZodNumber>;
     }, z.core.$strip>>;
+    integrity: z.ZodOptional<z.ZodObject<{
+        head_hash: z.ZodString;
+        event_count: z.ZodNumber;
+    }, z.core.$strict>>;
 }, z.core.$strict>;
 /**
  * Schema for the round-trip JSON payload accepted by `basou session import
@@ -210,6 +214,10 @@ declare const SessionImportPayloadSchema: z.ZodObject<{
             active_time_method: z.ZodOptional<z.ZodString>;
             machine_active_time_ms: z.ZodOptional<z.ZodNumber>;
         }, z.core.$strip>>;
+        integrity: z.ZodOptional<z.ZodObject<{
+            head_hash: z.ZodString;
+            event_count: z.ZodNumber;
+        }, z.core.$strict>>;
     }, z.core.$strict>;
     events: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
         schema_version: z.ZodLiteral<"0.1.0">;
@@ -217,6 +225,7 @@ declare const SessionImportPayloadSchema: z.ZodObject<{
         session_id: z.ZodString & z.ZodType<`ses_${string}`, string, z.core.$ZodTypeInternals<`ses_${string}`, string>>;
         occurred_at: z.ZodString;
         source: z.ZodString;
+        prev_hash: z.ZodOptional<z.ZodString>;
         type: z.ZodLiteral<"session_started">;
     }, z.core.$strip>, z.ZodObject<{
         schema_version: z.ZodLiteral<"0.1.0">;
@@ -224,6 +233,7 @@ declare const SessionImportPayloadSchema: z.ZodObject<{
         session_id: z.ZodString & z.ZodType<`ses_${string}`, string, z.core.$ZodTypeInternals<`ses_${string}`, string>>;
         occurred_at: z.ZodString;
         source: z.ZodString;
+        prev_hash: z.ZodOptional<z.ZodString>;
         type: z.ZodLiteral<"session_ended">;
         exit_code: z.ZodOptional<z.ZodNumber>;
     }, z.core.$strip>, z.ZodObject<{
@@ -232,6 +242,7 @@ declare const SessionImportPayloadSchema: z.ZodObject<{
         session_id: z.ZodString & z.ZodType<`ses_${string}`, string, z.core.$ZodTypeInternals<`ses_${string}`, string>>;
         occurred_at: z.ZodString;
         source: z.ZodString;
+        prev_hash: z.ZodOptional<z.ZodString>;
         type: z.ZodLiteral<"session_status_changed">;
         from: z.ZodString;
         to: z.ZodString;
@@ -241,6 +252,7 @@ declare const SessionImportPayloadSchema: z.ZodObject<{
         session_id: z.ZodString & z.ZodType<`ses_${string}`, string, z.core.$ZodTypeInternals<`ses_${string}`, string>>;
         occurred_at: z.ZodString;
         source: z.ZodString;
+        prev_hash: z.ZodOptional<z.ZodString>;
         type: z.ZodLiteral<"approval_requested">;
         approval_id: z.ZodString & z.ZodType<`appr_${string}`, string, z.core.$ZodTypeInternals<`appr_${string}`, string>>;
         expires_at: z.ZodDefault<z.ZodNullable<z.ZodString>>;
@@ -261,6 +273,7 @@ declare const SessionImportPayloadSchema: z.ZodObject<{
         session_id: z.ZodString & z.ZodType<`ses_${string}`, string, z.core.$ZodTypeInternals<`ses_${string}`, string>>;
         occurred_at: z.ZodString;
         source: z.ZodString;
+        prev_hash: z.ZodOptional<z.ZodString>;
         type: z.ZodLiteral<"approval_approved">;
         approval_id: z.ZodString & z.ZodType<`appr_${string}`, string, z.core.$ZodTypeInternals<`appr_${string}`, string>>;
         resolver: z.ZodOptional<z.ZodString>;
@@ -271,6 +284,7 @@ declare const SessionImportPayloadSchema: z.ZodObject<{
         session_id: z.ZodString & z.ZodType<`ses_${string}`, string, z.core.$ZodTypeInternals<`ses_${string}`, string>>;
         occurred_at: z.ZodString;
         source: z.ZodString;
+        prev_hash: z.ZodOptional<z.ZodString>;
         type: z.ZodLiteral<"approval_rejected">;
         approval_id: z.ZodString & z.ZodType<`appr_${string}`, string, z.core.$ZodTypeInternals<`appr_${string}`, string>>;
         resolver: z.ZodOptional<z.ZodString>;
@@ -281,6 +295,7 @@ declare const SessionImportPayloadSchema: z.ZodObject<{
         session_id: z.ZodString & z.ZodType<`ses_${string}`, string, z.core.$ZodTypeInternals<`ses_${string}`, string>>;
         occurred_at: z.ZodString;
         source: z.ZodString;
+        prev_hash: z.ZodOptional<z.ZodString>;
         type: z.ZodLiteral<"approval_expired">;
         approval_id: z.ZodString & z.ZodType<`appr_${string}`, string, z.core.$ZodTypeInternals<`appr_${string}`, string>>;
     }, z.core.$strip>, z.ZodObject<{
@@ -289,6 +304,7 @@ declare const SessionImportPayloadSchema: z.ZodObject<{
         session_id: z.ZodString & z.ZodType<`ses_${string}`, string, z.core.$ZodTypeInternals<`ses_${string}`, string>>;
         occurred_at: z.ZodString;
         source: z.ZodString;
+        prev_hash: z.ZodOptional<z.ZodString>;
         type: z.ZodLiteral<"command_executed">;
         command: z.ZodString;
         args: z.ZodArray<z.ZodString>;
@@ -303,6 +319,7 @@ declare const SessionImportPayloadSchema: z.ZodObject<{
         session_id: z.ZodString & z.ZodType<`ses_${string}`, string, z.core.$ZodTypeInternals<`ses_${string}`, string>>;
         occurred_at: z.ZodString;
         source: z.ZodString;
+        prev_hash: z.ZodOptional<z.ZodString>;
         type: z.ZodLiteral<"git_snapshot">;
         head: z.ZodString;
         branch: z.ZodString;
@@ -318,6 +335,7 @@ declare const SessionImportPayloadSchema: z.ZodObject<{
         session_id: z.ZodString & z.ZodType<`ses_${string}`, string, z.core.$ZodTypeInternals<`ses_${string}`, string>>;
         occurred_at: z.ZodString;
         source: z.ZodString;
+        prev_hash: z.ZodOptional<z.ZodString>;
         type: z.ZodLiteral<"file_changed">;
         path: z.ZodString;
         change_type: z.ZodEnum<{
@@ -333,6 +351,7 @@ declare const SessionImportPayloadSchema: z.ZodObject<{
         session_id: z.ZodString & z.ZodType<`ses_${string}`, string, z.core.$ZodTypeInternals<`ses_${string}`, string>>;
         occurred_at: z.ZodString;
         source: z.ZodString;
+        prev_hash: z.ZodOptional<z.ZodString>;
         type: z.ZodLiteral<"decision_recorded">;
         decision_id: z.ZodString & z.ZodType<`decision_${string}`, string, z.core.$ZodTypeInternals<`decision_${string}`, string>>;
         title: z.ZodString;
@@ -347,6 +366,7 @@ declare const SessionImportPayloadSchema: z.ZodObject<{
         session_id: z.ZodString & z.ZodType<`ses_${string}`, string, z.core.$ZodTypeInternals<`ses_${string}`, string>>;
         occurred_at: z.ZodString;
         source: z.ZodString;
+        prev_hash: z.ZodOptional<z.ZodString>;
         type: z.ZodLiteral<"task_created">;
         task_id: z.ZodString & z.ZodType<`task_${string}`, string, z.core.$ZodTypeInternals<`task_${string}`, string>>;
         title: z.ZodString;
@@ -356,6 +376,7 @@ declare const SessionImportPayloadSchema: z.ZodObject<{
         session_id: z.ZodString & z.ZodType<`ses_${string}`, string, z.core.$ZodTypeInternals<`ses_${string}`, string>>;
         occurred_at: z.ZodString;
         source: z.ZodString;
+        prev_hash: z.ZodOptional<z.ZodString>;
         type: z.ZodLiteral<"task_status_changed">;
         task_id: z.ZodString & z.ZodType<`task_${string}`, string, z.core.$ZodTypeInternals<`task_${string}`, string>>;
         from: z.ZodString;
@@ -366,6 +387,7 @@ declare const SessionImportPayloadSchema: z.ZodObject<{
         session_id: z.ZodString & z.ZodType<`ses_${string}`, string, z.core.$ZodTypeInternals<`ses_${string}`, string>>;
         occurred_at: z.ZodString;
         source: z.ZodString;
+        prev_hash: z.ZodOptional<z.ZodString>;
         type: z.ZodLiteral<"task_reconciled">;
         task_id: z.ZodString & z.ZodType<`task_${string}`, string, z.core.$ZodTypeInternals<`task_${string}`, string>>;
         removed_created_in_session: z.ZodDefault<z.ZodNullable<z.ZodString & z.ZodType<`ses_${string}`, string, z.core.$ZodTypeInternals<`ses_${string}`, string>>>>;
@@ -377,6 +399,7 @@ declare const SessionImportPayloadSchema: z.ZodObject<{
         session_id: z.ZodString & z.ZodType<`ses_${string}`, string, z.core.$ZodTypeInternals<`ses_${string}`, string>>;
         occurred_at: z.ZodString;
         source: z.ZodString;
+        prev_hash: z.ZodOptional<z.ZodString>;
         type: z.ZodLiteral<"task_linkage_refreshed">;
         task_id: z.ZodString & z.ZodType<`task_${string}`, string, z.core.$ZodTypeInternals<`task_${string}`, string>>;
         added_linked_sessions: z.ZodDefault<z.ZodArray<z.ZodString & z.ZodType<`ses_${string}`, string, z.core.$ZodTypeInternals<`ses_${string}`, string>>>>;
@@ -388,6 +411,7 @@ declare const SessionImportPayloadSchema: z.ZodObject<{
         session_id: z.ZodString & z.ZodType<`ses_${string}`, string, z.core.$ZodTypeInternals<`ses_${string}`, string>>;
         occurred_at: z.ZodString;
         source: z.ZodString;
+        prev_hash: z.ZodOptional<z.ZodString>;
         type: z.ZodLiteral<"task_deleted">;
         task_id: z.ZodString & z.ZodType<`task_${string}`, string, z.core.$ZodTypeInternals<`task_${string}`, string>>;
         title: z.ZodString;
@@ -397,6 +421,7 @@ declare const SessionImportPayloadSchema: z.ZodObject<{
         session_id: z.ZodString & z.ZodType<`ses_${string}`, string, z.core.$ZodTypeInternals<`ses_${string}`, string>>;
         occurred_at: z.ZodString;
         source: z.ZodString;
+        prev_hash: z.ZodOptional<z.ZodString>;
         type: z.ZodLiteral<"task_archived">;
         task_id: z.ZodString & z.ZodType<`task_${string}`, string, z.core.$ZodTypeInternals<`task_${string}`, string>>;
         title: z.ZodString;
@@ -406,6 +431,7 @@ declare const SessionImportPayloadSchema: z.ZodObject<{
         session_id: z.ZodString & z.ZodType<`ses_${string}`, string, z.core.$ZodTypeInternals<`ses_${string}`, string>>;
         occurred_at: z.ZodString;
         source: z.ZodString;
+        prev_hash: z.ZodOptional<z.ZodString>;
         type: z.ZodLiteral<"note_added">;
         body: z.ZodString;
     }, z.core.$strip>, z.ZodObject<{
@@ -414,6 +440,7 @@ declare const SessionImportPayloadSchema: z.ZodObject<{
         session_id: z.ZodString & z.ZodType<`ses_${string}`, string, z.core.$ZodTypeInternals<`ses_${string}`, string>>;
         occurred_at: z.ZodString;
         source: z.ZodString;
+        prev_hash: z.ZodOptional<z.ZodString>;
         type: z.ZodLiteral<"adapter_output">;
         stream: z.ZodEnum<{
             stdout: "stdout";
@@ -728,6 +755,7 @@ declare const SessionStartedEventSchema: z.ZodObject<{
     session_id: z.ZodString & z.ZodType<`ses_${string}`, string, z.core.$ZodTypeInternals<`ses_${string}`, string>>;
     occurred_at: z.ZodString;
     source: z.ZodString;
+    prev_hash: z.ZodOptional<z.ZodString>;
     type: z.ZodLiteral<"session_started">;
 }, z.core.$strip>;
 declare const SessionEndedEventSchema: z.ZodObject<{
@@ -736,6 +764,7 @@ declare const SessionEndedEventSchema: z.ZodObject<{
     session_id: z.ZodString & z.ZodType<`ses_${string}`, string, z.core.$ZodTypeInternals<`ses_${string}`, string>>;
     occurred_at: z.ZodString;
     source: z.ZodString;
+    prev_hash: z.ZodOptional<z.ZodString>;
     type: z.ZodLiteral<"session_ended">;
     exit_code: z.ZodOptional<z.ZodNumber>;
 }, z.core.$strip>;
@@ -745,6 +774,7 @@ declare const SessionStatusChangedEventSchema: z.ZodObject<{
     session_id: z.ZodString & z.ZodType<`ses_${string}`, string, z.core.$ZodTypeInternals<`ses_${string}`, string>>;
     occurred_at: z.ZodString;
     source: z.ZodString;
+    prev_hash: z.ZodOptional<z.ZodString>;
     type: z.ZodLiteral<"session_status_changed">;
     from: z.ZodString;
     to: z.ZodString;
@@ -755,6 +785,7 @@ declare const ApprovalRequestedEventSchema: z.ZodObject<{
     session_id: z.ZodString & z.ZodType<`ses_${string}`, string, z.core.$ZodTypeInternals<`ses_${string}`, string>>;
     occurred_at: z.ZodString;
     source: z.ZodString;
+    prev_hash: z.ZodOptional<z.ZodString>;
     type: z.ZodLiteral<"approval_requested">;
     approval_id: z.ZodString & z.ZodType<`appr_${string}`, string, z.core.$ZodTypeInternals<`appr_${string}`, string>>;
     expires_at: z.ZodDefault<z.ZodNullable<z.ZodString>>;
@@ -776,6 +807,7 @@ declare const ApprovalApprovedEventSchema: z.ZodObject<{
     session_id: z.ZodString & z.ZodType<`ses_${string}`, string, z.core.$ZodTypeInternals<`ses_${string}`, string>>;
     occurred_at: z.ZodString;
     source: z.ZodString;
+    prev_hash: z.ZodOptional<z.ZodString>;
     type: z.ZodLiteral<"approval_approved">;
     approval_id: z.ZodString & z.ZodType<`appr_${string}`, string, z.core.$ZodTypeInternals<`appr_${string}`, string>>;
     resolver: z.ZodOptional<z.ZodString>;
@@ -787,6 +819,7 @@ declare const ApprovalRejectedEventSchema: z.ZodObject<{
     session_id: z.ZodString & z.ZodType<`ses_${string}`, string, z.core.$ZodTypeInternals<`ses_${string}`, string>>;
     occurred_at: z.ZodString;
     source: z.ZodString;
+    prev_hash: z.ZodOptional<z.ZodString>;
     type: z.ZodLiteral<"approval_rejected">;
     approval_id: z.ZodString & z.ZodType<`appr_${string}`, string, z.core.$ZodTypeInternals<`appr_${string}`, string>>;
     resolver: z.ZodOptional<z.ZodString>;
@@ -798,6 +831,7 @@ declare const ApprovalExpiredEventSchema: z.ZodObject<{
     session_id: z.ZodString & z.ZodType<`ses_${string}`, string, z.core.$ZodTypeInternals<`ses_${string}`, string>>;
     occurred_at: z.ZodString;
     source: z.ZodString;
+    prev_hash: z.ZodOptional<z.ZodString>;
     type: z.ZodLiteral<"approval_expired">;
     approval_id: z.ZodString & z.ZodType<`appr_${string}`, string, z.core.$ZodTypeInternals<`appr_${string}`, string>>;
 }, z.core.$strip>;
@@ -807,6 +841,7 @@ declare const CommandExecutedEventSchema: z.ZodObject<{
     session_id: z.ZodString & z.ZodType<`ses_${string}`, string, z.core.$ZodTypeInternals<`ses_${string}`, string>>;
     occurred_at: z.ZodString;
     source: z.ZodString;
+    prev_hash: z.ZodOptional<z.ZodString>;
     type: z.ZodLiteral<"command_executed">;
     command: z.ZodString;
     args: z.ZodArray<z.ZodString>;
@@ -822,6 +857,7 @@ declare const GitSnapshotEventSchema: z.ZodObject<{
     session_id: z.ZodString & z.ZodType<`ses_${string}`, string, z.core.$ZodTypeInternals<`ses_${string}`, string>>;
     occurred_at: z.ZodString;
     source: z.ZodString;
+    prev_hash: z.ZodOptional<z.ZodString>;
     type: z.ZodLiteral<"git_snapshot">;
     head: z.ZodString;
     branch: z.ZodString;
@@ -838,6 +874,7 @@ declare const FileChangedEventSchema: z.ZodObject<{
     session_id: z.ZodString & z.ZodType<`ses_${string}`, string, z.core.$ZodTypeInternals<`ses_${string}`, string>>;
     occurred_at: z.ZodString;
     source: z.ZodString;
+    prev_hash: z.ZodOptional<z.ZodString>;
     type: z.ZodLiteral<"file_changed">;
     path: z.ZodString;
     change_type: z.ZodEnum<{
@@ -854,6 +891,7 @@ declare const DecisionRecordedEventSchema: z.ZodObject<{
     session_id: z.ZodString & z.ZodType<`ses_${string}`, string, z.core.$ZodTypeInternals<`ses_${string}`, string>>;
     occurred_at: z.ZodString;
     source: z.ZodString;
+    prev_hash: z.ZodOptional<z.ZodString>;
     type: z.ZodLiteral<"decision_recorded">;
     decision_id: z.ZodString & z.ZodType<`decision_${string}`, string, z.core.$ZodTypeInternals<`decision_${string}`, string>>;
     title: z.ZodString;
@@ -869,6 +907,7 @@ declare const TaskCreatedEventSchema: z.ZodObject<{
     session_id: z.ZodString & z.ZodType<`ses_${string}`, string, z.core.$ZodTypeInternals<`ses_${string}`, string>>;
     occurred_at: z.ZodString;
     source: z.ZodString;
+    prev_hash: z.ZodOptional<z.ZodString>;
     type: z.ZodLiteral<"task_created">;
     task_id: z.ZodString & z.ZodType<`task_${string}`, string, z.core.$ZodTypeInternals<`task_${string}`, string>>;
     title: z.ZodString;
@@ -879,6 +918,7 @@ declare const TaskStatusChangedEventSchema: z.ZodObject<{
     session_id: z.ZodString & z.ZodType<`ses_${string}`, string, z.core.$ZodTypeInternals<`ses_${string}`, string>>;
     occurred_at: z.ZodString;
     source: z.ZodString;
+    prev_hash: z.ZodOptional<z.ZodString>;
     type: z.ZodLiteral<"task_status_changed">;
     task_id: z.ZodString & z.ZodType<`task_${string}`, string, z.core.$ZodTypeInternals<`task_${string}`, string>>;
     from: z.ZodString;
@@ -890,6 +930,7 @@ declare const TaskReconciledEventSchema: z.ZodObject<{
     session_id: z.ZodString & z.ZodType<`ses_${string}`, string, z.core.$ZodTypeInternals<`ses_${string}`, string>>;
     occurred_at: z.ZodString;
     source: z.ZodString;
+    prev_hash: z.ZodOptional<z.ZodString>;
     type: z.ZodLiteral<"task_reconciled">;
     task_id: z.ZodString & z.ZodType<`task_${string}`, string, z.core.$ZodTypeInternals<`task_${string}`, string>>;
     removed_created_in_session: z.ZodDefault<z.ZodNullable<z.ZodString & z.ZodType<`ses_${string}`, string, z.core.$ZodTypeInternals<`ses_${string}`, string>>>>;
@@ -902,6 +943,7 @@ declare const TaskLinkageRefreshedEventSchema: z.ZodObject<{
     session_id: z.ZodString & z.ZodType<`ses_${string}`, string, z.core.$ZodTypeInternals<`ses_${string}`, string>>;
     occurred_at: z.ZodString;
     source: z.ZodString;
+    prev_hash: z.ZodOptional<z.ZodString>;
     type: z.ZodLiteral<"task_linkage_refreshed">;
     task_id: z.ZodString & z.ZodType<`task_${string}`, string, z.core.$ZodTypeInternals<`task_${string}`, string>>;
     added_linked_sessions: z.ZodDefault<z.ZodArray<z.ZodString & z.ZodType<`ses_${string}`, string, z.core.$ZodTypeInternals<`ses_${string}`, string>>>>;
@@ -914,6 +956,7 @@ declare const TaskDeletedEventSchema: z.ZodObject<{
     session_id: z.ZodString & z.ZodType<`ses_${string}`, string, z.core.$ZodTypeInternals<`ses_${string}`, string>>;
     occurred_at: z.ZodString;
     source: z.ZodString;
+    prev_hash: z.ZodOptional<z.ZodString>;
     type: z.ZodLiteral<"task_deleted">;
     task_id: z.ZodString & z.ZodType<`task_${string}`, string, z.core.$ZodTypeInternals<`task_${string}`, string>>;
     title: z.ZodString;
@@ -924,6 +967,7 @@ declare const TaskArchivedEventSchema: z.ZodObject<{
     session_id: z.ZodString & z.ZodType<`ses_${string}`, string, z.core.$ZodTypeInternals<`ses_${string}`, string>>;
     occurred_at: z.ZodString;
     source: z.ZodString;
+    prev_hash: z.ZodOptional<z.ZodString>;
     type: z.ZodLiteral<"task_archived">;
     task_id: z.ZodString & z.ZodType<`task_${string}`, string, z.core.$ZodTypeInternals<`task_${string}`, string>>;
     title: z.ZodString;
@@ -934,6 +978,7 @@ declare const NoteAddedEventSchema: z.ZodObject<{
     session_id: z.ZodString & z.ZodType<`ses_${string}`, string, z.core.$ZodTypeInternals<`ses_${string}`, string>>;
     occurred_at: z.ZodString;
     source: z.ZodString;
+    prev_hash: z.ZodOptional<z.ZodString>;
     type: z.ZodLiteral<"note_added">;
     body: z.ZodString;
 }, z.core.$strip>;
@@ -943,6 +988,7 @@ declare const AdapterOutputEventSchema: z.ZodObject<{
     session_id: z.ZodString & z.ZodType<`ses_${string}`, string, z.core.$ZodTypeInternals<`ses_${string}`, string>>;
     occurred_at: z.ZodString;
     source: z.ZodString;
+    prev_hash: z.ZodOptional<z.ZodString>;
     type: z.ZodLiteral<"adapter_output">;
     stream: z.ZodEnum<{
         stdout: "stdout";
@@ -963,6 +1009,7 @@ declare const EventSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     session_id: z.ZodString & z.ZodType<`ses_${string}`, string, z.core.$ZodTypeInternals<`ses_${string}`, string>>;
     occurred_at: z.ZodString;
     source: z.ZodString;
+    prev_hash: z.ZodOptional<z.ZodString>;
     type: z.ZodLiteral<"session_started">;
 }, z.core.$strip>, z.ZodObject<{
     schema_version: z.ZodLiteral<"0.1.0">;
@@ -970,6 +1017,7 @@ declare const EventSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     session_id: z.ZodString & z.ZodType<`ses_${string}`, string, z.core.$ZodTypeInternals<`ses_${string}`, string>>;
     occurred_at: z.ZodString;
     source: z.ZodString;
+    prev_hash: z.ZodOptional<z.ZodString>;
     type: z.ZodLiteral<"session_ended">;
     exit_code: z.ZodOptional<z.ZodNumber>;
 }, z.core.$strip>, z.ZodObject<{
@@ -978,6 +1026,7 @@ declare const EventSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     session_id: z.ZodString & z.ZodType<`ses_${string}`, string, z.core.$ZodTypeInternals<`ses_${string}`, string>>;
     occurred_at: z.ZodString;
     source: z.ZodString;
+    prev_hash: z.ZodOptional<z.ZodString>;
     type: z.ZodLiteral<"session_status_changed">;
     from: z.ZodString;
     to: z.ZodString;
@@ -987,6 +1036,7 @@ declare const EventSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     session_id: z.ZodString & z.ZodType<`ses_${string}`, string, z.core.$ZodTypeInternals<`ses_${string}`, string>>;
     occurred_at: z.ZodString;
     source: z.ZodString;
+    prev_hash: z.ZodOptional<z.ZodString>;
     type: z.ZodLiteral<"approval_requested">;
     approval_id: z.ZodString & z.ZodType<`appr_${string}`, string, z.core.$ZodTypeInternals<`appr_${string}`, string>>;
     expires_at: z.ZodDefault<z.ZodNullable<z.ZodString>>;
@@ -1007,6 +1057,7 @@ declare const EventSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     session_id: z.ZodString & z.ZodType<`ses_${string}`, string, z.core.$ZodTypeInternals<`ses_${string}`, string>>;
     occurred_at: z.ZodString;
     source: z.ZodString;
+    prev_hash: z.ZodOptional<z.ZodString>;
     type: z.ZodLiteral<"approval_approved">;
     approval_id: z.ZodString & z.ZodType<`appr_${string}`, string, z.core.$ZodTypeInternals<`appr_${string}`, string>>;
     resolver: z.ZodOptional<z.ZodString>;
@@ -1017,6 +1068,7 @@ declare const EventSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     session_id: z.ZodString & z.ZodType<`ses_${string}`, string, z.core.$ZodTypeInternals<`ses_${string}`, string>>;
     occurred_at: z.ZodString;
     source: z.ZodString;
+    prev_hash: z.ZodOptional<z.ZodString>;
     type: z.ZodLiteral<"approval_rejected">;
     approval_id: z.ZodString & z.ZodType<`appr_${string}`, string, z.core.$ZodTypeInternals<`appr_${string}`, string>>;
     resolver: z.ZodOptional<z.ZodString>;
@@ -1027,6 +1079,7 @@ declare const EventSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     session_id: z.ZodString & z.ZodType<`ses_${string}`, string, z.core.$ZodTypeInternals<`ses_${string}`, string>>;
     occurred_at: z.ZodString;
     source: z.ZodString;
+    prev_hash: z.ZodOptional<z.ZodString>;
     type: z.ZodLiteral<"approval_expired">;
     approval_id: z.ZodString & z.ZodType<`appr_${string}`, string, z.core.$ZodTypeInternals<`appr_${string}`, string>>;
 }, z.core.$strip>, z.ZodObject<{
@@ -1035,6 +1088,7 @@ declare const EventSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     session_id: z.ZodString & z.ZodType<`ses_${string}`, string, z.core.$ZodTypeInternals<`ses_${string}`, string>>;
     occurred_at: z.ZodString;
     source: z.ZodString;
+    prev_hash: z.ZodOptional<z.ZodString>;
     type: z.ZodLiteral<"command_executed">;
     command: z.ZodString;
     args: z.ZodArray<z.ZodString>;
@@ -1049,6 +1103,7 @@ declare const EventSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     session_id: z.ZodString & z.ZodType<`ses_${string}`, string, z.core.$ZodTypeInternals<`ses_${string}`, string>>;
     occurred_at: z.ZodString;
     source: z.ZodString;
+    prev_hash: z.ZodOptional<z.ZodString>;
     type: z.ZodLiteral<"git_snapshot">;
     head: z.ZodString;
     branch: z.ZodString;
@@ -1064,6 +1119,7 @@ declare const EventSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     session_id: z.ZodString & z.ZodType<`ses_${string}`, string, z.core.$ZodTypeInternals<`ses_${string}`, string>>;
     occurred_at: z.ZodString;
     source: z.ZodString;
+    prev_hash: z.ZodOptional<z.ZodString>;
     type: z.ZodLiteral<"file_changed">;
     path: z.ZodString;
     change_type: z.ZodEnum<{
@@ -1079,6 +1135,7 @@ declare const EventSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     session_id: z.ZodString & z.ZodType<`ses_${string}`, string, z.core.$ZodTypeInternals<`ses_${string}`, string>>;
     occurred_at: z.ZodString;
     source: z.ZodString;
+    prev_hash: z.ZodOptional<z.ZodString>;
     type: z.ZodLiteral<"decision_recorded">;
     decision_id: z.ZodString & z.ZodType<`decision_${string}`, string, z.core.$ZodTypeInternals<`decision_${string}`, string>>;
     title: z.ZodString;
@@ -1093,6 +1150,7 @@ declare const EventSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     session_id: z.ZodString & z.ZodType<`ses_${string}`, string, z.core.$ZodTypeInternals<`ses_${string}`, string>>;
     occurred_at: z.ZodString;
     source: z.ZodString;
+    prev_hash: z.ZodOptional<z.ZodString>;
     type: z.ZodLiteral<"task_created">;
     task_id: z.ZodString & z.ZodType<`task_${string}`, string, z.core.$ZodTypeInternals<`task_${string}`, string>>;
     title: z.ZodString;
@@ -1102,6 +1160,7 @@ declare const EventSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     session_id: z.ZodString & z.ZodType<`ses_${string}`, string, z.core.$ZodTypeInternals<`ses_${string}`, string>>;
     occurred_at: z.ZodString;
     source: z.ZodString;
+    prev_hash: z.ZodOptional<z.ZodString>;
     type: z.ZodLiteral<"task_status_changed">;
     task_id: z.ZodString & z.ZodType<`task_${string}`, string, z.core.$ZodTypeInternals<`task_${string}`, string>>;
     from: z.ZodString;
@@ -1112,6 +1171,7 @@ declare const EventSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     session_id: z.ZodString & z.ZodType<`ses_${string}`, string, z.core.$ZodTypeInternals<`ses_${string}`, string>>;
     occurred_at: z.ZodString;
     source: z.ZodString;
+    prev_hash: z.ZodOptional<z.ZodString>;
     type: z.ZodLiteral<"task_reconciled">;
     task_id: z.ZodString & z.ZodType<`task_${string}`, string, z.core.$ZodTypeInternals<`task_${string}`, string>>;
     removed_created_in_session: z.ZodDefault<z.ZodNullable<z.ZodString & z.ZodType<`ses_${string}`, string, z.core.$ZodTypeInternals<`ses_${string}`, string>>>>;
@@ -1123,6 +1183,7 @@ declare const EventSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     session_id: z.ZodString & z.ZodType<`ses_${string}`, string, z.core.$ZodTypeInternals<`ses_${string}`, string>>;
     occurred_at: z.ZodString;
     source: z.ZodString;
+    prev_hash: z.ZodOptional<z.ZodString>;
     type: z.ZodLiteral<"task_linkage_refreshed">;
     task_id: z.ZodString & z.ZodType<`task_${string}`, string, z.core.$ZodTypeInternals<`task_${string}`, string>>;
     added_linked_sessions: z.ZodDefault<z.ZodArray<z.ZodString & z.ZodType<`ses_${string}`, string, z.core.$ZodTypeInternals<`ses_${string}`, string>>>>;
@@ -1134,6 +1195,7 @@ declare const EventSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     session_id: z.ZodString & z.ZodType<`ses_${string}`, string, z.core.$ZodTypeInternals<`ses_${string}`, string>>;
     occurred_at: z.ZodString;
     source: z.ZodString;
+    prev_hash: z.ZodOptional<z.ZodString>;
     type: z.ZodLiteral<"task_deleted">;
     task_id: z.ZodString & z.ZodType<`task_${string}`, string, z.core.$ZodTypeInternals<`task_${string}`, string>>;
     title: z.ZodString;
@@ -1143,6 +1205,7 @@ declare const EventSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     session_id: z.ZodString & z.ZodType<`ses_${string}`, string, z.core.$ZodTypeInternals<`ses_${string}`, string>>;
     occurred_at: z.ZodString;
     source: z.ZodString;
+    prev_hash: z.ZodOptional<z.ZodString>;
     type: z.ZodLiteral<"task_archived">;
     task_id: z.ZodString & z.ZodType<`task_${string}`, string, z.core.$ZodTypeInternals<`task_${string}`, string>>;
     title: z.ZodString;
@@ -1152,6 +1215,7 @@ declare const EventSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     session_id: z.ZodString & z.ZodType<`ses_${string}`, string, z.core.$ZodTypeInternals<`ses_${string}`, string>>;
     occurred_at: z.ZodString;
     source: z.ZodString;
+    prev_hash: z.ZodOptional<z.ZodString>;
     type: z.ZodLiteral<"note_added">;
     body: z.ZodString;
 }, z.core.$strip>, z.ZodObject<{
@@ -1160,6 +1224,7 @@ declare const EventSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     session_id: z.ZodString & z.ZodType<`ses_${string}`, string, z.core.$ZodTypeInternals<`ses_${string}`, string>>;
     occurred_at: z.ZodString;
     source: z.ZodString;
+    prev_hash: z.ZodOptional<z.ZodString>;
     type: z.ZodLiteral<"adapter_output">;
     stream: z.ZodEnum<{
         stdout: "stdout";
@@ -1345,6 +1410,22 @@ declare const SessionMetricsSchema: z.ZodObject<{
 }, z.core.$strip>;
 /** Inferred runtime type for {@link SessionMetricsSchema}. */
 type SessionMetrics = z.infer<typeof SessionMetricsSchema>;
+/**
+ * Tamper-evidence head anchor for a session whose `events.jsonl` is hash
+ * chained: `head_hash` is the hex sha-256 of the last written event line
+ * (excluding the trailing newline), `event_count` the number of chained lines.
+ * Written by the import / in-place re-import writers and, for a live session
+ * (`exec` / `run` / ad-hoc), by the finalize once it reaches a terminal status.
+ * Absent on a still-live session (the anchor is stamped at finalize) and on a
+ * pre-feature unchained session. Additive optional => no schema_version bump.
+ * `.strict()` because the writers fully own the shape.
+ */
+declare const SessionIntegritySchema: z.ZodObject<{
+    head_hash: z.ZodString;
+    event_count: z.ZodNumber;
+}, z.core.$strict>;
+/** Inferred runtime type for {@link SessionIntegritySchema}. */
+type SessionIntegrity = z.infer<typeof SessionIntegritySchema>;
 /**
  * Schema for `.basou/sessions/<session_id>/session.yaml`. The minimal
  * session document carries the actual fields nested under the outer
@@ -1405,6 +1486,10 @@ declare const SessionSchema: z.ZodObject<{
             active_time_method: z.ZodOptional<z.ZodString>;
             machine_active_time_ms: z.ZodOptional<z.ZodNumber>;
         }, z.core.$strip>>;
+        integrity: z.ZodOptional<z.ZodObject<{
+            head_hash: z.ZodString;
+            event_count: z.ZodNumber;
+        }, z.core.$strict>>;
     }, z.core.$strip>;
 }, z.core.$strip>;
 /** Inferred runtime type for {@link SessionSchema}. */
@@ -1470,6 +1555,35 @@ declare function enumerateSessionDirs(paths: BasouPaths): Promise<string[]>;
  *   or the zod error).
  */
 declare function readSessionYaml(paths: BasouPaths, sessionId: string): Promise<Session>;
+/**
+ * Apply a terminal-status mutation to a live session's `session.yaml` AND, in
+ * the same locked write, stamp the tamper-evidence head anchor derived from the
+ * on-disk `events.jsonl` tail. Used by the `exec` / `run` orchestrators for
+ * BOTH terminal writers (the normal end-of-run finalize and the spawn-failure
+ * `failed` finalize).
+ *
+ * Why locked + anchor-from-tail: live appends chain the LOG only and leave the
+ * anchor for finalize. Reading the final tail under the session lock means a
+ * foreign line appended just before finalize (e.g. a `decision record` attached
+ * to a still-running session) is included in the anchor, and a foreign attach
+ * that arrives after the terminal status is set is rejected by the attach gate
+ * — so the anchor can never disagree with the at-rest log. The whole-document
+ * read-modify-write also preserves any field a foreign locked writer set (e.g.
+ * a task attach's `task_id`).
+ *
+ * The anchor is written only when the log is actually chained with at least one
+ * line; a legacy unchained session (and an empty log) is left with no
+ * `integrity` anchor, matching the import writers. The mutator receives the
+ * full {@link Session} document and typically sets
+ * `session.session.status` / `ended_at` / `invocation.exit_code` /
+ * `related_files`.
+ *
+ * Throws the {@link inspectChainTail} errors (torn / mixed log), the
+ * {@link readSessionYaml} errors, a zod error if the mutation produces an
+ * invalid document, or `Error("Failed to overwrite YAML file")` on a disk
+ * failure.
+ */
+declare function finalizeSessionYaml(paths: BasouPaths, sessionId: string, mutate: (session: Session) => void): Promise<void>;
 /**
  * Classify a `running` session as suspect using one of two rules:
  *
@@ -1539,6 +1653,144 @@ type DecisionsRendererResult = {
  */
 declare function renderDecisions(input: DecisionsRendererInput): Promise<DecisionsRendererResult>;
 
+/**
+ * Session-bound genesis hash: the `prev_hash` carried by the FIRST event line
+ * of a chained `events.jsonl`. Binding the genesis to the session id means a
+ * chain copied verbatim from another session fails verification at line 1
+ * even though its internal back-pointers are intact.
+ */
+declare function genesisHash(sessionId: string): string;
+/**
+ * Hex sha-256 of one event line's written bytes (EXCLUDING the trailing
+ * `\n`). The hash covers the literal serialized bytes — no canonical JSON
+ * form. Writers pass the line string (always valid UTF-8, so its UTF-8
+ * encoding IS the written bytes); the verifier passes the RAW BYTES it read,
+ * so a byte-level mutation that decodes to the same string (e.g. an invalid
+ * UTF-8 sequence collapsing to U+FFFD) still breaks the chain.
+ */
+declare function lineHash(rawLine: string | Buffer): string;
+/**
+ * The single serializer for event lines. Every writer (bulk and append) MUST
+ * go through this function so the bytes a chain hashes can never diverge from
+ * the bytes another code path would write.
+ */
+declare function serializeEventLine(event: Event): string;
+/** Result of {@link chainEvents}: the serialized lines plus the head anchor inputs. */
+type ChainedEvents = {
+    /** Serialized event lines (no trailing newline on the entries). */
+    lines: string[];
+    /**
+     * Hex sha-256 of the LAST line — the value `session.yaml.integrity.head_hash`
+     * anchors. For an empty batch this is the genesis hash and no anchor is
+     * written.
+     */
+    headHash: string;
+    /** Number of chained lines (= `integrity.event_count`). */
+    count: number;
+};
+/**
+ * Thread a `prev_hash` back-pointer through `events` and serialize them:
+ * line 0 carries `genesisHash(sessionId)`, line N carries the hash of line
+ * N-1's written bytes. Any `prev_hash` already present on an incoming event
+ * (e.g. a round-trip import payload) is discarded and recomputed — chains are
+ * never trusted from input, only derived at write time.
+ */
+declare function chainEvents(events: ReadonlyArray<Event>, sessionId: string): ChainedEvents;
+/**
+ * Chain PRE-EXISTING serialized event lines WITHOUT re-serializing them
+ * through the schema layer: each original line is JSON-parsed, given a
+ * `prev_hash`, and stringified again. Because `JSON.parse`/`JSON.stringify`
+ * round-trips key insertion order and every value verbatim, the output line
+ * is the original line with only the `prev_hash` member appended — no zod
+ * key-stripping or default materialization can occur. Used by the in-place
+ * rechain migration of pre-chaining imported sessions.
+ *
+ * Callers MUST gate validity first (non-empty, JSON-parseable,
+ * schema-valid, byte-identical JSON round-trip); this helper assumes
+ * parseable lines and throws raw on a parse failure.
+ */
+declare function chainRawJsonLines(rawLines: ReadonlyArray<string>, sessionId: string): ChainedEvents;
+
+/**
+ * The chain state of an existing `events.jsonl`, as needed by the live append
+ * and finalize paths.
+ *
+ * - `chained` — whether the NEXT line written to this log must carry a
+ *   `prev_hash`. True for an empty / not-yet-created log (a fresh session
+ *   chains from its genesis) and for a log whose FIRST complete line already
+ *   carries `prev_hash`. False for a legacy / pre-feature log whose first line
+ *   is unchained (so it stays unchained — we never half-chain a file).
+ * - `head` — the `prev_hash` value the next line carries when `chained`:
+ *   `genesisHash(sessionId)` for an empty log, otherwise `lineHash` of the LAST
+ *   complete line's raw bytes. Meaningless (set to the genesis hash) when
+ *   `chained` is false.
+ * - `count` — number of complete (newline-terminated) lines on disk; the
+ *   `event_count` an integrity anchor records.
+ */
+type ChainTailState = {
+    chained: boolean;
+    head: string;
+    count: number;
+};
+/**
+ * Inspect `<sessions>/<sessionId>/events.jsonl` to decide how the next append
+ * (or the finalize anchor) must treat the chain. READ-ONLY; the caller MUST
+ * already hold the session lock so the inspected tail cannot move underneath a
+ * subsequent append.
+ *
+ * Chained-ness is decided from the FIRST complete line (does the log claim to
+ * be chained), and the head pointer is taken from the LAST complete line. If
+ * the first and last lines DISAGREE — a mixed / partially-tampered file — the
+ * call THROWS rather than extending a broken chain; verify is the detector, the
+ * writer must not deepen a break. An unterminated final line (a torn tail from
+ * a crashed prior append) also THROWS so a new line is never glued onto a
+ * fragment.
+ *
+ * Throws `Error("Failed to read events.jsonl")` for non-ENOENT I/O,
+ * `Error("Unterminated final line in events.jsonl")` for a torn tail, and
+ * `Error("events.jsonl is partially chained")` for a mixed first/last line.
+ */
+declare function inspectChainTail(paths: BasouPaths, sessionId: string): Promise<ChainTailState>;
+/**
+ * Append one event to `<sessions>/<sessionId>/events.jsonl`, threading the
+ * tamper-evidence hash chain. The caller MUST already hold the session lock
+ * (`acquireLock(paths, "session", sessionId)`); this function does NOT acquire
+ * it, so it composes inside a larger caller-owned critical section (the
+ * convention used by `decision record`, `session note`, task attach and
+ * approval resolution) without re-entrant lock deadlock.
+ *
+ * The event is validated against {@link EventSchema}, then — if the existing
+ * log is chained (or empty) — written with a `prev_hash` back-pointer derived
+ * from the real on-disk tail (see {@link inspectChainTail}); a legacy unchained
+ * log keeps receiving plain unchained lines. The single serializer
+ * ({@link serializeEventLine}) is shared with the bulk writers so the bytes a
+ * chain hashes can never diverge from another path's bytes.
+ *
+ * Does NOT touch `session.yaml.integrity`: the head anchor is written once, at
+ * the terminal-status finalize, by {@link finalizeSessionYaml}. A still-live
+ * session therefore has a chained log but no anchor yet, which `verify` reports
+ * as the benign `in_progress`.
+ *
+ * Throws `"Invalid Basou event payload"` on validation failure, the
+ * {@link inspectChainTail} errors on a torn / mixed log, or `"Failed to append
+ * event to events.jsonl"` on a disk failure. The native error is attached as
+ * `cause`.
+ */
+declare function appendChainedEventLocked(paths: BasouPaths, sessionId: string, event: unknown): Promise<{
+    chained: boolean;
+}>;
+/**
+ * Self-locking wrapper around {@link appendChainedEventLocked} for callers that
+ * do NOT already hold the session lock (the `exec` / `run` orchestrators, which
+ * append one event at a time to a session they own). Acquires the session lock,
+ * appends, and releases. Each append is a short-lived lock hold — the lock is
+ * NEVER held across a child process — so a foreign attach can interleave safely
+ * and the next append chains onto the true tail.
+ */
+declare function appendChainedEvent(paths: BasouPaths, sessionId: string, event: unknown): Promise<{
+    chained: boolean;
+}>;
+
 /**
  * Append a single Basou event to `<sessionDir>/events.jsonl`.
  *
@@ -1547,6 +1799,14 @@ declare function renderDecisions(input: DecisionsRendererInput): Promise<Decisio
  * Validation enforces the per-variant contract (required fields, source
  * vocabulary, strict variants such as `adapter_output`).
  *
+ * This LOW-LEVEL writer does NOT hash-chain — it writes the validated event as
+ * a plain line. Hash-chained appends go through `appendChainedEvent` /
+ * `appendChainedEventLocked` (the live `exec` / `run` / attach / approval
+ * paths), and the bulk import writers chain via {@link writeEventsBulk} with
+ * `chain: true`. A direct caller of this raw export can still add an unchained
+ * line to a chained log; that is DETECTED by `basou verify`
+ * (`missing_prev_hash`), not prevented — a documented boundary.
+ *
  * Atomicity: writes go through `appendFile` which uses `O_APPEND`. Lines up
  * to `PIPE_BUF` bytes (Linux 4096 / macOS 512) are written atomically by the
  * kernel; longer lines may interleave with concurrent writers and are not
@@ -1560,6 +1820,23 @@ declare function renderDecisions(input: DecisionsRendererInput): Promise<Decisio
  * @param event unknown payload to validate and append
  */
 declare function appendEvent(sessionDir: string, event: unknown): Promise<void>;
+/** Options for {@link writeEventsBulk}. */
+type WriteEventsBulkOptions = {
+    /**
+     * Thread a per-line `prev_hash` hash chain through the batch and return the
+     * head anchor inputs. Used ONLY by the import writers (fresh import and
+     * in-place re-import); defaults to false so the live / ad-hoc writers keep
+     * producing plain unchained lines.
+     */
+    chain?: boolean;
+};
+/** Head anchor inputs returned by a chained {@link writeEventsBulk}. */
+type BulkChainResult = {
+    /** Hex sha-256 of the last written line (excluding the trailing `\n`). */
+    headHash: string;
+    /** Number of chained lines written. */
+    count: number;
+};
 /**
  * Write `events.jsonl` in one atomic tmp+rename pass via {@link atomicReplace},
  * validating every event against {@link EventSchema} before any disk I/O so
@@ -1570,12 +1847,116 @@ declare function appendEvent(sessionDir: string, event: unknown): Promise<void>;
  * of events must land together or not at all. Zero events produces a
  * zero-byte file so the session_yaml `events_log` pointer remains valid.
  *
+ * With `options.chain` set, each line is written with a `prev_hash`
+ * back-pointer (any incoming `prev_hash` is discarded and recomputed; the
+ * chain's genesis is bound to `basename(sessionDir)` = the session id) and
+ * the head anchor inputs are returned so the caller can persist
+ * `session.yaml.integrity`. An empty chained batch writes a zero-byte file
+ * and returns null — no anchor. Without `chain` the return value is null and
+ * the written bytes are identical to the previous unchained format.
+ *
  * Throws `"Invalid Basou event payload"` (same fixed message as
  * {@link appendEvent}) on validation failure, or `"Failed to write
  * events.jsonl"` on a disk I/O failure. The original native error is attached
  * as `cause`.
  */
-declare function writeEventsBulk(sessionDir: string, events: Event[]): Promise<void>;
+declare function writeEventsBulk(sessionDir: string, events: Event[], options?: WriteEventsBulkOptions): Promise<BulkChainResult | null>;
+
+/**
+ * Verification outcome for one session's `events.jsonl`.
+ *
+ * - `unchained` — no event line carries `prev_hash` (live / ad-hoc / legacy
+ *   session) and `session.yaml` carries no integrity anchor. Informational.
+ * - `empty` — zero events and no integrity anchor. Informational.
+ * - `incomplete` — the log is chained but `session.yaml` is ENTIRELY absent
+ *   (an import crashed between the events write and the yaml write, or the
+ *   yaml was deleted out of band). Benign: a re-import / `--force` repairs it.
+ * - `tampered` — a real integrity break (see {@link ChainBreakReason}).
+ * - `in_progress` — a chained log whose session is still LIVE (a non-terminal
+ *   status: initialized / running / waiting_approval). The internal
+ *   back-pointer chain is fully verified, but the tail and head anchor are
+ *   forgiven because a live session's log is legitimately still growing and its
+ *   anchor is not written until the terminal finalize. Informational, exit 0.
+ * - `verified` — every back-pointer, genesis, session-id and line-discipline
+ *   check passed AND the head anchor matches the on-disk log.
+ */
+type ChainVerdictStatus = "verified" | "unchained" | "empty" | "incomplete" | "in_progress" | "tampered";
+/** Machine-readable detail for a `tampered` (or `incomplete`) verdict. */
+type ChainBreakReason = 
+/** The file does not end with `\n`; chained writers always terminate the last line. */
+"torn_tail"
+/** A blank line inside a chained log; chained writers never emit one. */
+ | "blank_line"
+/** A line of a chained log failed JSON parsing; writers only emit valid JSON. */
+ | "malformed_line"
+/** A chained log has a line without `prev_hash`; chained writers chain every line. */
+ | "missing_prev_hash"
+/** Line 1's `prev_hash` is not this session's genesis hash (edit or cross-session copy). */
+ | "genesis_mismatch"
+/** A line's `prev_hash` does not hash-match the previous line (edit / insert / delete / reorder). */
+ | "broken_link"
+/** A line's `session_id` is not this session's id (cross-session copied line). */
+ | "session_id_mismatch"
+/** `session.yaml` exists but its `integrity` anchor is missing (anchor stripped). */
+ | "anchor_missing"
+/** The anchor's `head_hash` / `event_count` disagree with the on-disk log (edit or truncation). */
+ | "anchor_mismatch"
+/** An integrity anchor exists but the log is unchained, empty, or missing (chain stripped). */
+ | "anchor_without_chain"
+/** `session.yaml` exists but could not be parsed / validated, so the anchor is unreadable. */
+ | "yaml_unreadable"
+/** `incomplete` only: `session.yaml` is entirely absent. */
+ | "yaml_missing";
+/** Result of {@link verifyEventsChain}. */
+type ChainVerdict = {
+    status: ChainVerdictStatus;
+    /** Complete (newline-terminated) event lines found on disk. */
+    eventCount: number;
+    /** Detail for `tampered` / `incomplete`; absent otherwise. */
+    reason?: ChainBreakReason;
+    /** 1-based line number of the first break, when one specific line broke. */
+    line?: number;
+};
+/**
+ * Verify the tamper-evidence hash chain of `<sessions>/<sessionId>/events.jsonl`
+ * against the head anchor in `session.yaml.integrity`. READ-ONLY.
+ *
+ * The verifier reads the RAW line BYTES (not the schema-filtering replay
+ * reader, which silently drops bad lines; and not a decoded string, which
+ * would collapse invalid UTF-8 sequences into U+FFFD and let a byte-level
+ * substitution survive re-hashing) and hashes exactly the bytes it read.
+ * The verdict is decided on the events first, then the anchor:
+ *
+ * - No line carries `prev_hash` (or there are zero lines / no file): the log
+ *   is unchained. If `session.yaml` nevertheless carries an integrity anchor,
+ *   the chain was stripped out of band => `tampered` (`anchor_without_chain`);
+ *   otherwise `unchained` / `empty`.
+ * - At least one line carries `prev_hash`: the log claims to be chained, and
+ *   every check applies — line discipline (terminating `\n`, no blank lines,
+ *   valid JSON), genesis binding, per-line back-pointers, per-line session id,
+ *   and finally the head anchor (`incomplete` when `session.yaml` is entirely
+ *   absent; `tampered` when it is present without a matching anchor).
+ *
+ * - When the chained log belongs to a LIVE session (a non-terminal status),
+ *   the internal chain is verified but a torn tail / absent / mismatching
+ *   anchor is FORGIVEN as `in_progress`: a live session's tail is legitimately
+ *   still growing and its anchor is written only at the terminal finalize.
+ *
+ * NON-CRYPTOGRAPHIC: the anchor lives in `session.yaml`, which is itself
+ * editable; an attacker rewriting BOTH files consistently is not detected.
+ * Signing is a follow-up.
+ *
+ * Throws `Error("Failed to read events.jsonl")` only for non-ENOENT I/O
+ * failures (EACCES etc.) — an unreadable file is an environment problem, not
+ * a verdict.
+ *
+ * READ-ONLY and lock-free: a session being finalized concurrently can leave the
+ * two files momentarily out of step (old events read before a finalize, new
+ * anchor read after it). A strict `anchor_mismatch` is therefore re-snapshotted
+ * ONCE before being returned — a genuine mismatch is deterministic across the
+ * retry, while a finalize-in-flight resolves within it.
+ */
+declare function verifyEventsChain(paths: BasouPaths, sessionId: string): Promise<ChainVerdict>;
 
 /**
  * Status classification used by the `file_changed` event schema. Limited to
@@ -1755,8 +2136,8 @@ declare function isValidPrefixedId(value: string): boolean;
  * Self-edges are rejected so the audit trail stays monotonic.
  */
 declare const TaskStatusSchema: z.ZodEnum<{
-    planned: "planned";
     in_progress: "in_progress";
+    planned: "planned";
     done: "done";
     cancelled: "cancelled";
 }>;
@@ -1776,8 +2157,8 @@ declare const TaskSchema: z.ZodObject<{
         title: z.ZodString;
         label: z.ZodOptional<z.ZodString>;
         status: z.ZodEnum<{
-            planned: "planned";
             in_progress: "in_progress";
+            planned: "planned";
             done: "done";
             cancelled: "cancelled";
         }>;
@@ -3139,6 +3520,9 @@ type LockHandle = {
  *
  * Acquisition strategy:
  *   1. {@link atomicCreate} the lockfile (POSIX link(2) + EEXIST).
+ *      On ENOENT (a workspace from before `.basou/locks/` existed), create
+ *      the directory and retry once; a retry failure throws the pathless
+ *      `"Failed to acquire lock"`.
  *   2. On EEXIST, probe the existing lockfile via {@link isStaleLock}.
  *      - If stale (= holder pid is dead or lock is older than
  *        {@link STALE_LOCK_MAX_AGE_MS}), `unlink` the stale file and retry
@@ -3344,7 +3728,7 @@ type ReimportResult = {
     reusedIdCount: number;
 } | {
     status: "skipped";
-    reason: "prior_events_unreadable" | "prior_derived_dropped";
+    reason: "prior_events_unreadable" | "prior_derived_dropped" | "prior_chain_broken";
 };
 /**
  * Re-import a source whose native log GREW into the SAME Basou session,
@@ -3363,6 +3747,42 @@ type ReimportResult = {
  * ABORTED (`status: "skipped"`) rather than risk dropping data on the rewrite.
  */
 declare function reimportPreservingId(paths: BasouPaths, manifest: Manifest, priorSessionId: string, freshPayload: SessionImportPayload, options?: ReimportOptions): Promise<ReimportResult>;
+/** Options for {@link rechainSessionInPlace}. */
+type RechainOptions = {
+    /**
+     * Compute the outcome and write nothing. The session lock is STILL taken:
+     * an unlocked read could observe a concurrent in-place re-import's
+     * two-file write window (events rewritten, yaml not yet) and report a
+     * state a locked run would never see.
+     */
+    dryRun?: boolean;
+};
+/** Result of {@link rechainSessionInPlace}. */
+type RechainResult = {
+    status: "rechained";
+    eventCount: number;
+} | {
+    status: "skipped";
+    reason: "already_chained" | "empty" | "not_imported" | "tampered" | "events_unreadable" | "session_id_mismatch" | "yaml_missing" | "yaml_unreadable";
+};
+/**
+ * Add the tamper-evidence hash chain, IN PLACE, to an imported session that
+ * was written before chaining existed (or whose chain was legitimately never
+ * computed). Event ids, order, field sets, values and key order are all
+ * preserved exactly — each original line is re-emitted with only `prev_hash`
+ * appended (see {@link chainRawJsonLines}); `session.yaml` is rewritten as
+ * read with only `integrity` added. Nothing else changes, so cross-session
+ * references (`linked_events`) survive, unlike a `--force` re-import.
+ *
+ * Rechaining asserts tamper-evidence FROM NOW ON; it does not retroactively
+ * prove the pre-existing content was never modified before the migration.
+ *
+ * Refuses anything it cannot preserve exactly or that is not the closed
+ * imported corpus — see {@link RechainResult} reasons. Throws (rather than
+ * returning a skip) on environment-level I/O failures, mirroring
+ * `verifyEventsChain`.
+ */
+declare function rechainSessionInPlace(paths: BasouPaths, sessionId: string, options?: RechainOptions): Promise<RechainResult>;
 
 /**
  * Walk the cause chain (up to `depth` levels) looking for an Error whose
@@ -3464,4 +3884,4 @@ declare function overwriteYamlFile(filePath: string, value: unknown): Promise<vo
  */
 declare const BASOU_CORE_VERSION = "0.1.0";
 
-export { ACTIVE_GAP_CAP_MS, type ActiveTimeBasis, type AdapterOutputEvent, type AppendBasouGitignoreResult, type AppendEventToExistingInput, type AppendEventToExistingResult, type Approval, type ApprovalApprovedEvent, type ApprovalExpiredEvent, ApprovalIdSchema, type ApprovalLocation, type ApprovalRejectedEvent, type ApprovalRequestedEvent, ApprovalSchema, type ApprovalStatus, ApprovalStatusSchema, type ArchiveTaskInput, type ArchiveTaskResult, type AttachTaskInput, type AttachUpdateTaskStatusInput, type AttachableStatus, BASOU_CORE_VERSION, type BasouPaths, CLAUDE_IMPORT_SOURCE, CODEX_IMPORT_SOURCE, type CaptureMode, ChildProcessRunner, type ClaudeTranscriptRecord, type ClaudeTranscriptToPayloadOptions, type CodexRolloutRecord, type CodexRolloutToPayloadOptions, type CommandExecutedEvent, type CommandLookup, type CreateAdHocSessionInput, type CreateAdHocSessionResult, type CreateAdHocTaskInput, type CreateManifestInput, type CreateTaskInput, type CreateTaskResult, type DayWorkStats, DecisionIdSchema, type DecisionRecordedEvent, type DecisionsRendererInput, type DecisionsRendererResult, type DeleteTaskInput, type DeleteTaskResult, type DiffResult, type EditTaskInput, type EditTaskResult, type Event, EventIdSchema, EventSchema, EventSourceSchema, FailedToFinalizeError, type FileChange, type FileChangeStatus, type FileChangedEvent, GENERATED_END, GENERATED_START, type GitSnapshot, type GitSnapshotEvent, type HandoffRendererInput, type HandoffRendererResult, ID_PREFIXES, type IdPrefix, type ImportSessionOptions, type ImportSessionResult, IsoTimestampSchema, JSON_SCHEMA_VERSION, type JsonSchemaArtifact, type LoadSessionEntriesOptions, type LoadTaskEntriesOptions, type LoadedApproval, type LockHandle, type LockScope, type Manifest, ManifestSchema, type MarkerSection, type MeasureAvailability, type NoteAddedEvent, type PrefixedId, type ProcessRunner, type ReconcileAllResult, type ReconcileAllTasksInput, type ReconcileAllTasksOptions, type ReconcileFailure, type ReconcileResult, type ReconcileTaskInput, type RefreshLinkageInput, type RefreshLinkageResult, type ReimportOptions, type ReimportResult, type ReplayOptions, type ReplayWarning, type RiskLevel, RiskLevelSchema, type RunOptions, type RunResult, STUCK_THRESHOLD_MS, type SanitizePathOptions, type SanitizeRelatedFilesResult, SchemaVersionSchema, type Session, type SessionEndedEvent, type SessionEntry, SessionIdSchema, type SessionImportPayload, SessionImportPayloadSchema, type SessionInnerImportInput, SessionInnerImportSchema, type SessionMetrics, SessionMetricsSchema, SessionSchema, type SessionSkipReason, type SessionSourceKind, SessionSourceKindSchema, type SessionStartedEvent, type SessionStatus, type SessionStatusChangedEvent, SessionStatusSchema, type SessionWorkStats, type SourceWorkStats, type StatusCount, StatusSchema, type StatusSnapshot, type SuspectReason, type Task, type TaskArchivedEvent, type TaskCreatedEvent, type TaskDeletedEvent, type TaskDocument, TaskIdSchema, type TaskLinkageRefreshedEvent, type TaskReconciledEvent, TaskSchema, type TaskSkipReason, type TaskStatus, type TaskStatusChangedEvent, TaskStatusSchema, TaskWriteAfterEventError, type TaskWriteAfterEventPhase, type TokenTotals, type UpdateAdHocTaskStatusInput, type UpdateTaskStatusInput, type UpdateTaskStatusResult, type WorkStatsInput, type WorkStatsResult, type WorkStatsTotals, WorkspaceIdSchema, type WriteTaskFileMode, acquireLock, appendBasouGitignore, appendEvent, appendEventToExistingSession, archiveTask, assertBasouRootSafe, basouPaths, buildJsonSchemas, buildStatusSnapshot, classifySuspect, claudeCodeAdapterMetadata, claudeTranscriptToImportPayload, codexRolloutToImportPayload, computeWorkStats, createAdHocSessionWithEvent, createManifest, createTaskWithEvent, deleteTask, editTask, ensureBasouDirectory, enumerateApprovals, enumerateArchivedTaskIds, enumerateSessionDirs, enumerateTaskIds, findErrorCode, getDiff, getSnapshot, importSessionFromJson, isImportDerivedSource, isLazyExpired, isValidPrefixedId, linkYamlFile, loadApproval, loadSessionEntries, loadTaskEntries, overwriteYamlFile, parseDuration, parseMarkers, prefixedUlid, readAllEvents, readManifest, readMarkdownFile, readSessionYaml, readStatus, readTaskFile, readTaskFileWithArchiveFallback, readYamlFile, reconcileAllTasks, reconcileTask, refreshTaskLinkedSessions, reimportPreservingId, renderDecisions, renderHandoff, renderWithMarkers, replayEvents, resolveClaudeCodeCommand, resolveRepositoryRoot, resolveSessionId, resolveTaskId, sanitizePath, sanitizeRelatedFiles, sanitizeWorkingDirectory, serializeJsonSchema, sessionWorkStatsFromEvents, summarizeAdapterOutput, tryRemoteUrl, ulid, updateTaskStatusWithEvent, writeEventsBulk, writeManifest, writeMarkdownFile, writeStatus, writeTaskFile, writeYamlFile };
+export { ACTIVE_GAP_CAP_MS, type ActiveTimeBasis, type AdapterOutputEvent, type AppendBasouGitignoreResult, type AppendEventToExistingInput, type AppendEventToExistingResult, type Approval, type ApprovalApprovedEvent, type ApprovalExpiredEvent, ApprovalIdSchema, type ApprovalLocation, type ApprovalRejectedEvent, type ApprovalRequestedEvent, ApprovalSchema, type ApprovalStatus, ApprovalStatusSchema, type ArchiveTaskInput, type ArchiveTaskResult, type AttachTaskInput, type AttachUpdateTaskStatusInput, type AttachableStatus, BASOU_CORE_VERSION, type BasouPaths, type BulkChainResult, CLAUDE_IMPORT_SOURCE, CODEX_IMPORT_SOURCE, type CaptureMode, type ChainBreakReason, type ChainTailState, type ChainVerdict, type ChainVerdictStatus, type ChainedEvents, ChildProcessRunner, type ClaudeTranscriptRecord, type ClaudeTranscriptToPayloadOptions, type CodexRolloutRecord, type CodexRolloutToPayloadOptions, type CommandExecutedEvent, type CommandLookup, type CreateAdHocSessionInput, type CreateAdHocSessionResult, type CreateAdHocTaskInput, type CreateManifestInput, type CreateTaskInput, type CreateTaskResult, type DayWorkStats, DecisionIdSchema, type DecisionRecordedEvent, type DecisionsRendererInput, type DecisionsRendererResult, type DeleteTaskInput, type DeleteTaskResult, type DiffResult, type EditTaskInput, type EditTaskResult, type Event, EventIdSchema, EventSchema, EventSourceSchema, FailedToFinalizeError, type FileChange, type FileChangeStatus, type FileChangedEvent, GENERATED_END, GENERATED_START, type GitSnapshot, type GitSnapshotEvent, type HandoffRendererInput, type HandoffRendererResult, ID_PREFIXES, type IdPrefix, type ImportSessionOptions, type ImportSessionResult, IsoTimestampSchema, JSON_SCHEMA_VERSION, type JsonSchemaArtifact, type LoadSessionEntriesOptions, type LoadTaskEntriesOptions, type LoadedApproval, type LockHandle, type LockScope, type Manifest, ManifestSchema, type MarkerSection, type MeasureAvailability, type NoteAddedEvent, type PrefixedId, type ProcessRunner, type RechainOptions, type RechainResult, type ReconcileAllResult, type ReconcileAllTasksInput, type ReconcileAllTasksOptions, type ReconcileFailure, type ReconcileResult, type ReconcileTaskInput, type RefreshLinkageInput, type RefreshLinkageResult, type ReimportOptions, type ReimportResult, type ReplayOptions, type ReplayWarning, type RiskLevel, RiskLevelSchema, type RunOptions, type RunResult, STUCK_THRESHOLD_MS, type SanitizePathOptions, type SanitizeRelatedFilesResult, SchemaVersionSchema, type Session, type SessionEndedEvent, type SessionEntry, SessionIdSchema, type SessionImportPayload, SessionImportPayloadSchema, type SessionInnerImportInput, SessionInnerImportSchema, type SessionIntegrity, SessionIntegritySchema, type SessionMetrics, SessionMetricsSchema, SessionSchema, type SessionSkipReason, type SessionSourceKind, SessionSourceKindSchema, type SessionStartedEvent, type SessionStatus, type SessionStatusChangedEvent, SessionStatusSchema, type SessionWorkStats, type SourceWorkStats, type StatusCount, StatusSchema, type StatusSnapshot, type SuspectReason, type Task, type TaskArchivedEvent, type TaskCreatedEvent, type TaskDeletedEvent, type TaskDocument, TaskIdSchema, type TaskLinkageRefreshedEvent, type TaskReconciledEvent, TaskSchema, type TaskSkipReason, type TaskStatus, type TaskStatusChangedEvent, TaskStatusSchema, TaskWriteAfterEventError, type TaskWriteAfterEventPhase, type TokenTotals, type UpdateAdHocTaskStatusInput, type UpdateTaskStatusInput, type UpdateTaskStatusResult, type WorkStatsInput, type WorkStatsResult, type WorkStatsTotals, WorkspaceIdSchema, type WriteEventsBulkOptions, type WriteTaskFileMode, acquireLock, appendBasouGitignore, appendChainedEvent, appendChainedEventLocked, appendEvent, appendEventToExistingSession, archiveTask, assertBasouRootSafe, basouPaths, buildJsonSchemas, buildStatusSnapshot, chainEvents, chainRawJsonLines, classifySuspect, claudeCodeAdapterMetadata, claudeTranscriptToImportPayload, codexRolloutToImportPayload, computeWorkStats, createAdHocSessionWithEvent, createManifest, createTaskWithEvent, deleteTask, editTask, ensureBasouDirectory, enumerateApprovals, enumerateArchivedTaskIds, enumerateSessionDirs, enumerateTaskIds, finalizeSessionYaml, findErrorCode, genesisHash, getDiff, getSnapshot, importSessionFromJson, inspectChainTail, isImportDerivedSource, isLazyExpired, isValidPrefixedId, lineHash, linkYamlFile, loadApproval, loadSessionEntries, loadTaskEntries, overwriteYamlFile, parseDuration, parseMarkers, prefixedUlid, readAllEvents, readManifest, readMarkdownFile, readSessionYaml, readStatus, readTaskFile, readTaskFileWithArchiveFallback, readYamlFile, rechainSessionInPlace, reconcileAllTasks, reconcileTask, refreshTaskLinkedSessions, reimportPreservingId, renderDecisions, renderHandoff, renderWithMarkers, replayEvents, resolveClaudeCodeCommand, resolveRepositoryRoot, resolveSessionId, resolveTaskId, sanitizePath, sanitizeRelatedFiles, sanitizeWorkingDirectory, serializeEventLine, serializeJsonSchema, sessionWorkStatsFromEvents, summarizeAdapterOutput, tryRemoteUrl, ulid, updateTaskStatusWithEvent, verifyEventsChain, writeEventsBulk, writeManifest, writeMarkdownFile, writeStatus, writeTaskFile, writeYamlFile };