@calliopelabs/cli 3.1.0 → 3.2.0

package/dist/execution/writer-recovery.js

@@ -0,0 +1,85 @@
+import * as fs from 'node:fs';
+import { dirname, basename, join } from 'node:path';
+import { canonicalPath } from '../approvals/index.js';
+/** A retained hard-link claim elects one reclaimer per dead writer inode. */
+export function recoverDeadWriterLock(file) {
+    try {
+        if (!['writer.lock', 'owner.lock'].includes(basename(file)) || canonicalPath(file) !== file)
+            return false;
+        const root = dirname(file), parent = fs.lstatSync(root);
+        if (!parent.isDirectory() || parent.isSymbolicLink() || parent.mode & 0o077)
+            return false;
+        const fd = fs.openSync(file, fs.constants.O_RDONLY | fs.constants.O_NOFOLLOW | fs.constants.O_NONBLOCK);
+        let stat, pid;
+        try {
+            stat = fs.fstatSync(fd);
+            if (!stat.isFile() || stat.mode & 0o077 || stat.size < 1 || stat.size > 10)
+                return false;
+            const bytes = Buffer.alloc(stat.size + 1), count = fs.readSync(fd, bytes, 0, bytes.length, 0), raw = bytes.subarray(0, count).toString();
+            if (count !== stat.size || !/^\d{1,10}$/.test(raw))
+                return false;
+            pid = Number(raw);
+            if (!Number.isSafeInteger(pid) || pid < 1 || pid > 2147483647)
+                return false;
+        }
+        finally {
+            fs.closeSync(fd);
+        }
+        try {
+            process.kill(pid, 0);
+            return false;
+        }
+        catch (error) {
+            if (error.code !== 'ESRCH')
+                return false;
+        }
+        const recovery = join(root, 'lock-recovery');
+        try {
+            fs.mkdirSync(recovery, { mode: 0o700 });
+        }
+        catch (error) {
+            if (error.code !== 'EEXIST')
+                return false;
+        }
+        const dir = fs.lstatSync(recovery);
+        if (!dir.isDirectory() || dir.isSymbolicLink() || dir.mode & 0o077 || canonicalPath(recovery) !== recovery)
+            return false;
+        const entries = fs.opendirSync(recovery);
+        let count = 0;
+        try {
+            while (entries.readSync())
+                if (++count >= 64)
+                    return false;
+        }
+        finally {
+            entries.closeSync();
+        }
+        const claim = join(recovery, `${basename(file)}-${stat.dev}-${stat.ino}`);
+        fs.linkSync(file, claim);
+        const captured = fs.lstatSync(claim), current = fs.lstatSync(file), after = fs.lstatSync(root);
+        if (captured.dev !== stat.dev || captured.ino !== stat.ino || current.dev !== stat.dev || current.ino !== stat.ino || after.dev !== parent.dev || after.ino !== parent.ino || canonicalPath(file) !== file)
+            return false;
+        for (const path of [recovery, root]) {
+            const directory = fs.openSync(path, 'r');
+            try {
+                fs.fsyncSync(directory);
+            }
+            finally {
+                fs.closeSync(directory);
+            }
+        }
+        fs.unlinkSync(file);
+        const directory = fs.openSync(root, 'r');
+        try {
+            fs.fsyncSync(directory);
+        }
+        finally {
+            fs.closeSync(directory);
+        }
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=writer-recovery.js.map

package/dist/execution/writer-recovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"writer-recovery.js","sourceRoot":"","sources":["../../src/execution/writer-recovery.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAC,OAAO,EAAC,QAAQ,EAAC,IAAI,EAAC,MAAM,WAAW,CAAC;AAChD,OAAO,EAAC,aAAa,EAAC,MAAM,uBAAuB,CAAC;AAEpD,6EAA6E;AAC7E,MAAM,UAAU,qBAAqB,CAAC,IAAW;IAC/C,IAAI,CAAC;QACH,IAAG,CAAC,CAAC,aAAa,EAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAE,aAAa,CAAC,IAAI,CAAC,KAAG,IAAI;YAAC,OAAO,KAAK,CAAC;QACnG,MAAM,IAAI,GAAC,OAAO,CAAC,IAAI,CAAC,EAAC,MAAM,GAAC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAAA,IAAG,CAAC,MAAM,CAAC,WAAW,EAAE,IAAE,MAAM,CAAC,cAAc,EAAE,IAAE,MAAM,CAAC,IAAI,GAAC,KAAK;YAAC,OAAO,KAAK,CAAC;QACrI,MAAM,EAAE,GAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAC,EAAE,CAAC,SAAS,CAAC,QAAQ,GAAC,EAAE,CAAC,SAAS,CAAC,UAAU,GAAC,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAAA,IAAI,IAAa,EAAC,GAAU,CAAC;QAC9H,IAAG,CAAC;YAAA,IAAI,GAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAAA,IAAG,CAAC,IAAI,CAAC,MAAM,EAAE,IAAE,IAAI,CAAC,IAAI,GAAC,KAAK,IAAE,IAAI,CAAC,IAAI,GAAC,CAAC,IAAE,IAAI,CAAC,IAAI,GAAC,EAAE;gBAAC,OAAO,KAAK,CAAC;YAAA,MAAM,KAAK,GAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,GAAC,CAAC,CAAC,EAAC,KAAK,GAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAC,KAAK,EAAC,CAAC,EAAC,KAAK,CAAC,MAAM,EAAC,CAAC,CAAC,EAAC,GAAG,GAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAC;YAAA,IAAG,KAAK,KAAG,IAAI,CAAC,IAAI,IAAE,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC;gBAAC,OAAO,KAAK,CAAC;YAAA,GAAG,GAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAAA,IAAG,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAE,GAAG,GAAC,CAAC,IAAE,GAAG,GAAC,UAAU;gBAAC,OAAO,KAAK,CAAC;QAAA,CAAC;gBAAO,CAAC;YAAA,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAAA,CAAC;QACvY,IAAG,CAAC;YAAA,OAAO,CAAC,IAAI,CAAC,GAAG,EAAC,CAAC,CAAC,CAAC;YAAA,OAAO,KAAK,CAAC;QAAA,CAAC;QAAA,OAAM,KAAK,EAAC,CAAC;YAAA,IAAI,KAA+B,CAAC,IAAI,KAAG,OAAO;gBAAC,OAAO,KAAK,CAAC;QAAA,CAAC;QACpH,MAAM,QAAQ,GAAC,IAAI,CAAC,IAAI,EAAC,eAAe,CAAC,CAAC;QAAA,IAAG,CAAC;YAAA,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAC,EAAC,IAAI,EAAC,KAAK,EAAC,CAAC,CAAC;QAAA,CAAC;QAAA,OAAM,KAAK,EAAC,CAAC;YAAA,IAAI,KAA+B,CAAC,IAAI,KAAG,QAAQ;gBAAC,OAAO,KAAK,CAAC;QAAA,CAAC;QAClK,MAAM,GAAG,GAAC,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAAA,IAAG,CAAC,GAAG,CAAC,WAAW,EAAE,IAAE,GAAG,CAAC,cAAc,EAAE,IAAE,GAAG,CAAC,IAAI,GAAC,KAAK,IAAE,aAAa,CAAC,QAAQ,CAAC,KAAG,QAAQ;YAAC,OAAO,KAAK,CAAC;QAC9I,MAAM,OAAO,GAAC,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QAAA,IAAI,KAAK,GAAC,CAAC,CAAC;QAAA,IAAG,CAAC;YAAA,OAAM,OAAO,CAAC,QAAQ,EAAE;gBAAC,IAAG,EAAE,KAAK,IAAE,EAAE;oBAAC,OAAO,KAAK,CAAC;QAAA,CAAC;gBAAO,CAAC;YAAA,OAAO,CAAC,SAAS,EAAE,CAAC;QAAA,CAAC;QAC1I,MAAM,KAAK,GAAC,IAAI,CAAC,QAAQ,EAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAAA,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAC,KAAK,CAAC,CAAC;QAC/F,MAAM,QAAQ,GAAC,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,EAAC,OAAO,GAAC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,EAAC,KAAK,GAAC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACvF,IAAG,QAAQ,CAAC,GAAG,KAAG,IAAI,CAAC,GAAG,IAAE,QAAQ,CAAC,GAAG,KAAG,IAAI,CAAC,GAAG,IAAE,OAAO,CAAC,GAAG,KAAG,IAAI,CAAC,GAAG,IAAE,OAAO,CAAC,GAAG,KAAG,IAAI,CAAC,GAAG,IAAE,KAAK,CAAC,GAAG,KAAG,MAAM,CAAC,GAAG,IAAE,KAAK,CAAC,GAAG,KAAG,MAAM,CAAC,GAAG,IAAE,aAAa,CAAC,IAAI,CAAC,KAAG,IAAI;YAAC,OAAO,KAAK,CAAC;QAC7L,KAAI,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAC,IAAI,CAAC,EAAC,CAAC;YAAA,MAAM,SAAS,GAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAC,GAAG,CAAC,CAAC;YAAA,IAAG,CAAC;gBAAA,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YAAA,CAAC;oBAAO,CAAC;gBAAA,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YAAA,CAAC;QAAA,CAAC;QACxI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAAA,MAAM,SAAS,GAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAC,GAAG,CAAC,CAAC;QAAA,IAAG,CAAC;YAAA,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAAA,CAAC;gBAAO,CAAC;YAAA,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAAA,CAAC;QAAA,OAAO,IAAI,CAAC;IACtI,CAAC;IAAA,MAAK,CAAC;QAAA,OAAO,KAAK,CAAC;IAAA,CAAC;AACvB,CAAC"}

package/dist/goals/accounting.d.ts

@@ -0,0 +1,69 @@
+import { type AccountSpend } from '../execution/index.js';
+import { ExecutionStore } from '../orchestration/execution-store.js';
+import type { ExecutionInspection } from '../orchestration/coordinator-types.js';
+import type { RunManifest } from '../orchestration/types.js';
+import { GoalStore } from './store.js';
+import type { GoalAllocation, GoalInspection } from './types.js';
+type RequestCounts = {
+    pending: number;
+    settled: number;
+    unknown: number;
+    exceeded: number;
+};
+export type GoalPhaseAccounting = {
+    status: 'not-allocated';
+    runId: null;
+    accounted: AccountSpend;
+} | {
+    status: 'unavailable';
+    runId: string;
+    reason: string;
+} | {
+    status: 'available';
+    runId: string;
+    allocationId: string;
+    runManifestHash: string;
+    planHash: string;
+    budgetRevision: string;
+    executionRevision: string | null;
+    accounted: AccountSpend;
+    requests: RequestCounts;
+    exceeded: boolean;
+    closed: boolean;
+    usageComplete: boolean;
+    pendingChildGrants: number;
+};
+export type GoalAccounting = {
+    version: 1;
+    status: 'unavailable';
+    reason: string;
+} | {
+    version: 1;
+    status: 'available' | 'partial';
+    basis: 'reservations-and-settlements';
+    goalId: string;
+    goalManifestHash: string;
+    goalRevision: string;
+    revision: string;
+    deadline: number;
+    limit: AccountSpend;
+    accounted: AccountSpend | null;
+    knownCharges: AccountSpend;
+    remaining: AccountSpend | null;
+    usageComplete: boolean;
+    phases: {
+        planning: GoalPhaseAccounting;
+        execution: GoalPhaseAccounting;
+    };
+};
+/** Shared identity check for inspection; unlike execution authority it also permits completed/revoked goals. */
+export declare function assertGoalRunBinding(goal: GoalInspection, allocation: GoalAllocation, manifest: RunManifest, goals: GoalStore): void;
+/** Two linked runs with bounded journal reads; a missing allocated ledger is never zero spend. */
+export declare function readGoalAccounting(goal: GoalInspection, goals: GoalStore, active?: {
+    store: ExecutionStore;
+    execution: ExecutionInspection;
+}, signal?: AbortSignal): GoalAccounting;
+/** Live numeric context for linked runs; no artifact reads, prompts, provider calls or grants. */
+export declare function linkedGoalAccounting(store: ExecutionStore, execution: ExecutionInspection, signal?: AbortSignal): GoalAccounting | undefined;
+export {};
+//# sourceMappingURL=accounting.d.ts.map

package/dist/goals/accounting.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"accounting.d.ts","sourceRoot":"","sources":["../../src/goals/accounting.ts"],"names":[],"mappings":"AAGA,OAAO,EAAmB,KAAK,YAAY,EAAC,MAAM,uBAAuB,CAAC;AAC1E,OAAO,EAAC,cAAc,EAAoC,MAAM,qCAAqC,CAAC;AAKtG,OAAO,KAAK,EAAC,mBAAmB,EAAC,MAAM,uCAAuC,CAAC;AAC/E,OAAO,KAAK,EAAC,WAAW,EAAC,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAAC,SAAS,EAAC,MAAM,YAAY,CAAC;AACrC,OAAO,KAAK,EAAC,cAAc,EAAC,cAAc,EAAC,MAAM,YAAY,CAAC;AAE9D,KAAK,aAAa,GAAC;IAAC,OAAO,EAAC,MAAM,CAAC;IAAA,OAAO,EAAC,MAAM,CAAC;IAAA,OAAO,EAAC,MAAM,CAAC;IAAA,QAAQ,EAAC,MAAM,CAAA;CAAC,CAAC;AAClF,MAAM,MAAM,mBAAmB,GAC5B;IAAC,MAAM,EAAC,eAAe,CAAC;IAAA,KAAK,EAAC,IAAI,CAAC;IAAA,SAAS,EAAC,YAAY,CAAA;CAAC,GAC1D;IAAC,MAAM,EAAC,aAAa,CAAC;IAAA,KAAK,EAAC,MAAM,CAAC;IAAA,MAAM,EAAC,MAAM,CAAA;CAAC,GACjD;IAAC,MAAM,EAAC,WAAW,CAAC;IAAA,KAAK,EAAC,MAAM,CAAC;IAAA,YAAY,EAAC,MAAM,CAAC;IAAA,eAAe,EAAC,MAAM,CAAC;IAAA,QAAQ,EAAC,MAAM,CAAC;IAAA,cAAc,EAAC,MAAM,CAAC;IAAA,iBAAiB,EAAC,MAAM,GAAC,IAAI,CAAC;IAAA,SAAS,EAAC,YAAY,CAAC;IAAA,QAAQ,EAAC,aAAa,CAAC;IAAA,QAAQ,EAAC,OAAO,CAAC;IAAA,MAAM,EAAC,OAAO,CAAC;IAAA,aAAa,EAAC,OAAO,CAAC;IAAA,kBAAkB,EAAC,MAAM,CAAA;CAAC,CAAC;AAClR,MAAM,MAAM,cAAc,GAAC;IAAC,OAAO,EAAC,CAAC,CAAC;IAAA,MAAM,EAAC,aAAa,CAAC;IAAA,MAAM,EAAC,MAAM,CAAA;CAAC,GACtE;IAAC,OAAO,EAAC,CAAC,CAAC;IAAA,MAAM,EAAC,WAAW,GAAC,SAAS,CAAC;IAAA,KAAK,EAAC,8BAA8B,CAAC;IAAA,MAAM,EAAC,MAAM,CAAC;IAAA,gBAAgB,EAAC,MAAM,CAAC;IAAA,YAAY,EAAC,MAAM,CAAC;IAAA,QAAQ,EAAC,MAAM,CAAC;IAAA,QAAQ,EAAC,MAAM,CAAC;IAAA,KAAK,EAAC,YAAY,CAAC;IAAA,SAAS,EAAC,YAAY,GAAC,IAAI,CAAC;IAAA,YAAY,EAAC,YAAY,CAAC;IAAA,SAAS,EAAC,YAAY,GAAC,IAAI,CAAC;IAAA,aAAa,EAAC,OAAO,CAAC;IAAA,MAAM,EAAC;QAAC,QAAQ,EAAC,mBAAmB,CAAC;QAAA,SAAS,EAAC,mBAAmB,CAAA;KAAC,CAAA;CAAC,CAAC;AAI1W,gHAAgH;AAChH,wBAAgB,oBAAoB,CAAC,IAAI,EAAC,cAAc,EAAC,UAAU,EAAC,cAAc,EAAC,QAAQ,EAAC,WAAW,EAAC,KAAK,EAAC,SAAS,GAAE,IAAI,CAG5H;AAED,kGAAkG;AAClG,wBAAgB,kBAAkB,CAAC,IAAI,EAAC,cAAc,EAAC,KAAK,EAAC,SAAS,EAAC,MAAM,CAAC,EAAC;IAAC,KAAK,EAAC,cAAc,CAAC;IAAA,SAAS,EAAC,mBAAmB,CAAA;CAAC,EAAC,MAAM,CAAC,EAAC,WAAW,GAAE,cAAc,CAgCtK;AAED,kGAAkG;AAClG,wBAAgB,oBAAoB,CAAC,KAAK,EAAC,cAAc,EAAC,SAAS,EAAC,mBAAmB,EAAC,MAAM,CAAC,EAAC,WAAW,GAAE,cAAc,GAAC,SAAS,CAIpI"}

package/dist/goals/accounting.js

@@ -0,0 +1,100 @@
+import { dirname, join } from 'node:path';
+import { canonicalJson, digest } from '../approvals/index.js';
+import { throwIfCancelled } from '../cancellation.js';
+import { ReservationLedger } from '../execution/index.js';
+import { ExecutionStore, privateDirectory, readArtifactBytes } from '../orchestration/execution-store.js';
+import { executionManifestForRun } from '../orchestration/execution.js';
+import { validateRunManifest } from '../orchestration/store.js';
+import { MAX_PLAN_BYTES } from '../orchestration/validation.js';
+import { inspectSpawnAuthority } from '../spawning/authority.js';
+import { GoalStore } from './store.js';
+const zero = () => ({ tokens: 0, costNanos: 0 });
+const unavailable = () => ({ version: 1, status: 'unavailable', reason: 'Goal accounting is unavailable or inconsistent; preserve the goal and its linked run budgets.' });
+/** Shared identity check for inspection; unlike execution authority it also permits completed/revoked goals. */
+export function assertGoalRunBinding(goal, allocation, manifest, goals) {
+    const expected = { version: 1, root: goals.root, id: goal.manifest.id, manifestHash: goal.manifest.hash, allocationId: allocation.id, phase: allocation.phase };
+    if (manifest.version !== 2 || manifest.id !== allocation.runId || manifest.planHash !== allocation.planHash || canonicalJson(manifest.goal) !== canonicalJson(expected) || canonicalJson(manifest.project) !== canonicalJson(goal.manifest.project) || manifest.createdAt !== goal.manifest.createdAt || manifest.plan.limits.tokenBudget !== allocation.tokens || Math.floor(manifest.plan.limits.costBudgetUsd * 1e9) !== allocation.costNanos || Date.parse(manifest.createdAt) + manifest.plan.limits.timeBudgetMs !== allocation.deadline)
+        throw new Error('Mismatched goal allocation.');
+}
+/** Two linked runs with bounded journal reads; a missing allocated ledger is never zero spend. */
+export function readGoalAccounting(goal, goals, active, signal) {
+    throwIfCancelled(signal);
+    try {
+        const current = goals.read(goal.manifest.id, goal.manifest.project.root);
+        if (current.manifest.hash !== goal.manifest.hash || current.state.revision !== goal.state.revision)
+            return unavailable();
+        goal = current;
+        if (active) {
+            const link = active.store.manifest.goal, a = link?.phase === 'planning' ? goal.state.planning : goal.state.execution;
+            if (!link || !a || dirname(dirname(active.store.root)) !== goal.manifest.runsRoot)
+                throw new Error('Foreign active run.');
+            assertGoalRunBinding(goal, a, active.store.manifest, goals);
+        }
+        const phase = (allocation) => {
+            if (!allocation)
+                return { status: 'not-allocated', runId: null, accounted: zero() };
+            try {
+                throwIfCancelled(signal);
+                privateDirectory(goal.manifest.runsRoot);
+                const dir = join(goal.manifest.runsRoot, allocation.runId);
+                privateDirectory(dir);
+                const manifest = validateRunManifest(JSON.parse(readArtifactBytes(join(dir, 'manifest.json'), MAX_PLAN_BYTES + 8192, true).toString()));
+                assertGoalRunBinding(goal, allocation, manifest, goals);
+                const store = new ExecutionStore(dir, manifest), ledger = new ReservationLedger(join(dir, 'budget'));
+                const execution = active?.store.manifest.id === allocation.runId ? active.execution : store.exists() ? store.read() : null;
+                const inspected = execution ? inspectSpawnAuthority(store, ledger, execution) : null, budget = inspected?.budget ?? ledger.read(goal.manifest.project.root);
+                if (canonicalJson(budget.manifest) !== canonicalJson(executionManifestForRun(manifest, Date.parse(goal.manifest.createdAt))))
+                    throw new Error('Goal budget contract changed.');
+                if (execution && (execution.header.runId !== manifest.id || execution.header.manifestHash !== manifest.hash || execution.state.runId !== manifest.id || execution.header.createdAt !== goal.manifest.createdAt || execution.header.deadline !== allocation.deadline) || !execution && budget.projection.childGrants?.length)
+                    throw new Error('Missing child execution evidence.');
+                const s = budget.projection, frozen = goal.state.planningSpend;
+                if (allocation.phase === 'planning' && goal.state.planningFrozen && (!frozen || frozen.revision !== s.revision || frozen.tokens !== s.spent.tokens || frozen.costNanos !== s.spent.costNanos))
+                    throw new Error('Frozen planning spend changed.');
+                const requests = { pending: 0, settled: 0, unknown: 0, exceeded: 0 };
+                for (const r of Object.values(s.requests))
+                    requests[r.state]++;
+                const closed = allocation.phase === 'planning' ? goal.state.planningFrozen : !!execution && !['ready', 'running'].includes(execution.state.status) && execution.state.ownerId === null;
+                const pendingChildGrants = inspected?.pending.length ?? 0;
+                return { status: 'available', runId: allocation.runId, allocationId: allocation.id, runManifestHash: manifest.hash, planHash: manifest.planHash, budgetRevision: s.revision, executionRevision: execution?.state.revision ?? null, accounted: { ...s.spent }, requests, exceeded: s.exceeded, closed, usageComplete: closed && !requests.pending && !requests.unknown && !requests.exceeded && !pendingChildGrants, pendingChildGrants };
+            }
+            catch {
+                throwIfCancelled(signal);
+                return { status: 'unavailable', runId: allocation.runId, reason: 'Allocated run, budget, clock, child history or frozen planning spend is unavailable or inconsistent.' };
+            }
+        };
+        const phases = { planning: phase(goal.state.planning), execution: phase(goal.state.execution) }, values = Object.values(phases), complete = values.every(p => p.status !== 'unavailable'), knownCharges = zero();
+        for (const p of values)
+            if (p.status !== 'unavailable') {
+                knownCharges.tokens += p.accounted.tokens;
+                knownCharges.costNanos += p.accounted.costNanos;
+            }
+        if (!Number.isSafeInteger(knownCharges.tokens) || !Number.isSafeInteger(knownCharges.costNanos))
+            return unavailable();
+        const limit = { tokens: goal.manifest.limits.tokenBudget, costNanos: goal.manifest.limits.costBudgetNanos };
+        if (goals.read(goal.manifest.id, goal.manifest.project.root).state.revision !== goal.state.revision)
+            return unavailable();
+        throwIfCancelled(signal);
+        return { version: 1, status: complete ? 'available' : 'partial', basis: 'reservations-and-settlements', goalId: goal.manifest.id, goalManifestHash: goal.manifest.hash, goalRevision: goal.state.revision, revision: digest(canonicalJson({ goalRevision: goal.state.revision, phases })), deadline: goal.manifest.deadline, limit, accounted: complete ? { ...knownCharges } : null, knownCharges, remaining: complete ? { tokens: Math.max(0, limit.tokens - knownCharges.tokens), costNanos: Math.max(0, limit.costNanos - knownCharges.costNanos) } : null, usageComplete: complete && values.every(p => p.status === 'not-allocated' || p.status === 'available' && p.usageComplete), phases };
+    }
+    catch {
+        throwIfCancelled(signal);
+        return unavailable();
+    }
+}
+/** Live numeric context for linked runs; no artifact reads, prompts, provider calls or grants. */
+export function linkedGoalAccounting(store, execution, signal) {
+    const link = store.manifest.goal;
+    if (!link)
+        return undefined;
+    try {
+        const goals = new GoalStore(link.root), goal = goals.read(link.id, store.manifest.project.root);
+        if (goal.manifest.hash !== link.manifestHash)
+            return unavailable();
+        return readGoalAccounting(goal, goals, { store, execution }, signal);
+    }
+    catch {
+        throwIfCancelled(signal);
+        return unavailable();
+    }
+}
+//# sourceMappingURL=accounting.js.map

package/dist/goals/accounting.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"accounting.js","sourceRoot":"","sources":["../../src/goals/accounting.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,OAAO,EAAC,IAAI,EAAC,MAAM,WAAW,CAAC;AACvC,OAAO,EAAC,aAAa,EAAC,MAAM,EAAC,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAC,gBAAgB,EAAC,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAC,iBAAiB,EAAmB,MAAM,uBAAuB,CAAC;AAC1E,OAAO,EAAC,cAAc,EAAC,gBAAgB,EAAC,iBAAiB,EAAC,MAAM,qCAAqC,CAAC;AACtG,OAAO,EAAC,uBAAuB,EAAC,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAC,mBAAmB,EAAC,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAC,cAAc,EAAC,MAAM,gCAAgC,CAAC;AAC9D,OAAO,EAAC,qBAAqB,EAAC,MAAM,0BAA0B,CAAC;AAG/D,OAAO,EAAC,SAAS,EAAC,MAAM,YAAY,CAAC;AAUrC,MAAM,IAAI,GAAC,GAAe,EAAE,CAAA,CAAC,EAAC,MAAM,EAAC,CAAC,EAAC,SAAS,EAAC,CAAC,EAAC,CAAC,CAAC;AACrD,MAAM,WAAW,GAAC,GAAiB,EAAE,CAAA,CAAC,EAAC,OAAO,EAAC,CAAC,EAAC,MAAM,EAAC,aAAa,EAAC,MAAM,EAAC,+FAA+F,EAAC,CAAC,CAAC;AAE/K,gHAAgH;AAChH,MAAM,UAAU,oBAAoB,CAAC,IAAmB,EAAC,UAAyB,EAAC,QAAoB,EAAC,KAAe;IACrH,MAAM,QAAQ,GAAC,EAAC,OAAO,EAAC,CAAC,EAAC,IAAI,EAAC,KAAK,CAAC,IAAI,EAAC,EAAE,EAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAC,YAAY,EAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAC,YAAY,EAAC,UAAU,CAAC,EAAE,EAAC,KAAK,EAAC,UAAU,CAAC,KAAK,EAAC,CAAC;IACjJ,IAAG,QAAQ,CAAC,OAAO,KAAG,CAAC,IAAE,QAAQ,CAAC,EAAE,KAAG,UAAU,CAAC,KAAK,IAAE,QAAQ,CAAC,QAAQ,KAAG,UAAU,CAAC,QAAQ,IAAE,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAG,aAAa,CAAC,QAAQ,CAAC,IAAE,aAAa,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAG,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAE,QAAQ,CAAC,SAAS,KAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,IAAE,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,KAAG,UAAU,CAAC,MAAM,IAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,GAAC,GAAG,CAAC,KAAG,UAAU,CAAC,SAAS,IAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,KAAG,UAAU,CAAC,QAAQ;QAAC,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;AACzhB,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,kBAAkB,CAAC,IAAmB,EAAC,KAAe,EAAC,MAA4D,EAAC,MAAmB;IACrJ,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACzB,IAAI,CAAC;QACH,MAAM,OAAO,GAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACtE,IAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,KAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAE,OAAO,CAAC,KAAK,CAAC,QAAQ,KAAG,IAAI,CAAC,KAAK,CAAC,QAAQ;YAAC,OAAO,WAAW,EAAE,CAAC;QACjH,IAAI,GAAC,OAAO,CAAC;QACb,IAAG,MAAM,EAAC,CAAC;YAAA,MAAM,IAAI,GAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAC,CAAC,GAAC,IAAI,EAAE,KAAK,KAAG,UAAU,CAAA,CAAC,CAAA,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAA,CAAC,CAAA,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;YAAA,IAAG,CAAC,IAAI,IAAE,CAAC,CAAC,IAAE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ;gBAAC,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;YAAA,oBAAoB,CAAC,IAAI,EAAC,CAAC,EAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAC,KAAK,CAAC,CAAC;QAAA,CAAC;QACjS,MAAM,KAAK,GAAC,CAAC,UAA8B,EAAqB,EAAE;YAChE,IAAG,CAAC,UAAU;gBAAC,OAAM,EAAC,MAAM,EAAC,eAAe,EAAC,KAAK,EAAC,IAAI,EAAC,SAAS,EAAC,IAAI,EAAE,EAAC,CAAC;YAC1E,IAAI,CAAC;gBACH,gBAAgB,CAAC,MAAM,CAAC,CAAC;gBAAA,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBAAA,MAAM,GAAG,GAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAC,UAAU,CAAC,KAAK,CAAC,CAAC;gBAAA,gBAAgB,CAAC,GAAG,CAAC,CAAC;gBAChJ,MAAM,QAAQ,GAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,EAAC,eAAe,CAAC,EAAC,cAAc,GAAC,IAAI,EAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;gBAAA,oBAAoB,CAAC,IAAI,EAAC,UAAU,EAAC,QAAQ,EAAC,KAAK,CAAC,CAAC;gBACtL,MAAM,KAAK,GAAC,IAAI,cAAc,CAAC,GAAG,EAAC,QAAQ,CAAC,EAAC,MAAM,GAAC,IAAI,iBAAiB,CAAC,IAAI,CAAC,GAAG,EAAC,QAAQ,CAAC,CAAC,CAAC;gBAC9F,MAAM,SAAS,GAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,KAAG,UAAU,CAAC,KAAK,CAAA,CAAC,CAAA,MAAM,CAAC,SAAS,CAAA,CAAC,CAAA,KAAK,CAAC,MAAM,EAAE,CAAA,CAAC,CAAA,KAAK,CAAC,IAAI,EAAE,CAAA,CAAC,CAAA,IAAI,CAAC;gBAC/G,MAAM,SAAS,GAAC,SAAS,CAAA,CAAC,CAAA,qBAAqB,CAAC,KAAK,EAAC,MAAM,EAAC,SAAS,CAAC,CAAA,CAAC,CAAA,IAAI,EAAC,MAAM,GAAC,SAAS,EAAE,MAAM,IAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBAC/I,IAAG,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAG,aAAa,CAAC,uBAAuB,CAAC,QAAQ,EAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;oBAAC,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;gBAC1K,IAAG,SAAS,IAAE,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,KAAG,QAAQ,CAAC,EAAE,IAAE,SAAS,CAAC,MAAM,CAAC,YAAY,KAAG,QAAQ,CAAC,IAAI,IAAE,SAAS,CAAC,KAAK,CAAC,KAAK,KAAG,QAAQ,CAAC,EAAE,IAAE,SAAS,CAAC,MAAM,CAAC,SAAS,KAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,IAAE,SAAS,CAAC,MAAM,CAAC,QAAQ,KAAG,UAAU,CAAC,QAAQ,CAAC,IAAE,CAAC,SAAS,IAAE,MAAM,CAAC,UAAU,CAAC,WAAW,EAAE,MAAM;oBAAC,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;gBACxV,MAAM,CAAC,GAAC,MAAM,CAAC,UAAU,EAAC,MAAM,GAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC;gBAC1D,IAAG,UAAU,CAAC,KAAK,KAAG,UAAU,IAAE,IAAI,CAAC,KAAK,CAAC,cAAc,IAAE,CAAC,CAAC,MAAM,IAAE,MAAM,CAAC,QAAQ,KAAG,CAAC,CAAC,QAAQ,IAAE,MAAM,CAAC,MAAM,KAAG,CAAC,CAAC,KAAK,CAAC,MAAM,IAAE,MAAM,CAAC,SAAS,KAAG,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC;oBAAC,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;gBAC7N,MAAM,QAAQ,GAAe,EAAC,OAAO,EAAC,CAAC,EAAC,OAAO,EAAC,CAAC,EAAC,OAAO,EAAC,CAAC,EAAC,QAAQ,EAAC,CAAC,EAAC,CAAC;gBAAA,KAAI,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;oBAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;gBACrI,MAAM,MAAM,GAAC,UAAU,CAAC,KAAK,KAAG,UAAU,CAAA,CAAC,CAAA,IAAI,CAAC,KAAK,CAAC,cAAc,CAAA,CAAC,CAAA,CAAC,CAAC,SAAS,IAAE,CAAC,CAAC,OAAO,EAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,IAAE,SAAS,CAAC,KAAK,CAAC,OAAO,KAAG,IAAI,CAAC;gBACxK,MAAM,kBAAkB,GAAC,SAAS,EAAE,OAAO,CAAC,MAAM,IAAE,CAAC,CAAC;gBACtD,OAAM,EAAC,MAAM,EAAC,WAAW,EAAC,KAAK,EAAC,UAAU,CAAC,KAAK,EAAC,YAAY,EAAC,UAAU,CAAC,EAAE,EAAC,eAAe,EAAC,QAAQ,CAAC,IAAI,EAAC,QAAQ,EAAC,QAAQ,CAAC,QAAQ,EAAC,cAAc,EAAC,CAAC,CAAC,QAAQ,EAAC,iBAAiB,EAAC,SAAS,EAAE,KAAK,CAAC,QAAQ,IAAE,IAAI,EAAC,SAAS,EAAC,EAAC,GAAG,CAAC,CAAC,KAAK,EAAC,EAAC,QAAQ,EAAC,QAAQ,EAAC,CAAC,CAAC,QAAQ,EAAC,MAAM,EAAC,aAAa,EAAC,MAAM,IAAE,CAAC,QAAQ,CAAC,OAAO,IAAE,CAAC,QAAQ,CAAC,OAAO,IAAE,CAAC,QAAQ,CAAC,QAAQ,IAAE,CAAC,kBAAkB,EAAC,kBAAkB,EAAC,CAAC;YACtY,CAAC;YAAA,MAAK,CAAC;gBAAA,gBAAgB,CAAC,MAAM,CAAC,CAAC;gBAAA,OAAM,EAAC,MAAM,EAAC,aAAa,EAAC,KAAK,EAAC,UAAU,CAAC,KAAK,EAAC,MAAM,EAAC,sGAAsG,EAAC,CAAC;YAAA,CAAC;QACrM,CAAC,CAAC;QACF,MAAM,MAAM,GAAC,EAAC,QAAQ,EAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAC,SAAS,EAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAC,EAAC,MAAM,GAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAC,QAAQ,GAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,MAAM,KAAG,aAAa,CAAC,EAAC,YAAY,GAAC,IAAI,EAAE,CAAC;QAC7L,KAAI,MAAM,CAAC,IAAI,MAAM;YAAC,IAAG,CAAC,CAAC,MAAM,KAAG,aAAa,EAAC,CAAC;gBAAA,YAAY,CAAC,MAAM,IAAE,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC;gBAAA,YAAY,CAAC,SAAS,IAAE,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC;YAAA,CAAC;QAC1I,IAAG,CAAC,MAAM,CAAC,aAAa,CAAC,YAAY,CAAC,MAAM,CAAC,IAAE,CAAC,MAAM,CAAC,aAAa,CAAC,YAAY,CAAC,SAAS,CAAC;YAAC,OAAO,WAAW,EAAE,CAAC;QAClH,MAAM,KAAK,GAAC,EAAC,MAAM,EAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAC,SAAS,EAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,eAAe,EAAC,CAAC;QACrG,IAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,QAAQ,KAAG,IAAI,CAAC,KAAK,CAAC,QAAQ;YAAC,OAAO,WAAW,EAAE,CAAC;QAAA,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAC9I,OAAM,EAAC,OAAO,EAAC,CAAC,EAAC,MAAM,EAAC,QAAQ,CAAA,CAAC,CAAA,WAAW,CAAA,CAAC,CAAA,SAAS,EAAC,KAAK,EAAC,8BAA8B,EAAC,MAAM,EAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAC,gBAAgB,EAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAC,YAAY,EAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAC,QAAQ,EAAC,MAAM,CAAC,aAAa,CAAC,EAAC,YAAY,EAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAC,MAAM,EAAC,CAAC,CAAC,EAAC,QAAQ,EAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAC,KAAK,EAAC,SAAS,EAAC,QAAQ,CAAA,CAAC,CAAA,EAAC,GAAG,YAAY,EAAC,CAAA,CAAC,CAAA,IAAI,EAAC,YAAY,EAAC,SAAS,EAAC,QAAQ,CAAA,CAAC,CAAA,EAAC,MAAM,EAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAC,KAAK,CAAC,MAAM,GAAC,YAAY,CAAC,MAAM,CAAC,EAAC,SAAS,EAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAC,KAAK,CAAC,SAAS,GAAC,YAAY,CAAC,SAAS,CAAC,EAAC,CAAA,CAAC,CAAA,IAAI,EAAC,aAAa,EAAC,QAAQ,IAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,MAAM,KAAG,eAAe,IAAE,CAAC,CAAC,MAAM,KAAG,WAAW,IAAE,CAAC,CAAC,aAAa,CAAC,EAAC,MAAM,EAAC,CAAC;IAClmB,CAAC;IAAA,MAAK,CAAC;QAAA,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAAA,OAAO,WAAW,EAAE,CAAC;IAAA,CAAC;AACxD,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,oBAAoB,CAAC,KAAoB,EAAC,SAA6B,EAAC,MAAmB;IACzG,MAAM,IAAI,GAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;IAAA,IAAG,CAAC,IAAI;QAAC,OAAO,SAAS,CAAC;IACzD,IAAG,CAAC;QAAA,MAAM,KAAK,GAAC,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAC,IAAI,GAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAAA,IAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAG,IAAI,CAAC,YAAY;YAAC,OAAO,WAAW,EAAE,CAAC;QAAA,OAAO,kBAAkB,CAAC,IAAI,EAAC,KAAK,EAAC,EAAC,KAAK,EAAC,SAAS,EAAC,EAAC,MAAM,CAAC,CAAC;IAAA,CAAC;IAC7N,MAAK,CAAC;QAAA,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAAA,OAAO,WAAW,EAAE,CAAC;IAAA,CAAC;AACvD,CAAC"}

package/dist/goals/actions.d.ts

@@ -0,0 +1,33 @@
+import { ExecutionStore } from '../orchestration/index.js';
+import type { CoordinatorOptions, ExecutionEvent, ExecutionInspection } from '../orchestration/index.js';
+import { GoalStore } from './store.js';
+import { type GoalConfiguration } from './contracts.js';
+import { type GoalAccounting } from './accounting.js';
+import type { GoalInspection, GoalEvent, GoalStatus } from './types.js';
+export interface GoalOptions extends Omit<CoordinatorOptions, 'onEvent'>, GoalConfiguration {
+    goals?: GoalStore;
+    onGoalEvent?: (event: GoalEvent) => void;
+    onRunEvent?: (event: ExecutionEvent) => void;
+    onCreated?: (goal: GoalInspection) => void;
+}
+export interface GoalResult {
+    version: 1;
+    type: 'orchestration.goal';
+    goal: GoalInspection;
+    status: GoalStatus;
+    execution: ExecutionInspection | null;
+    accounting: GoalAccounting;
+    owners: {
+        goal: ReturnType<GoalStore['owner']>;
+        execution: ReturnType<ExecutionStore['owner']>;
+    };
+    interrupted: boolean;
+    exitCode: number;
+}
+export declare function inspectGoal(cwd: string, id: string, options?: GoalOptions): Promise<GoalResult>;
+export declare function startGoal(cwd: string, goal: string, options?: GoalOptions): Promise<GoalResult>;
+export declare function approveGoal(cwd: string, id: string, proposalHash: string, options?: GoalOptions): Promise<GoalResult>;
+export declare function resumeGoal(cwd: string, id: string, options?: GoalOptions): Promise<GoalResult>;
+export declare function cancelGoal(cwd: string, id: string, options?: GoalOptions): Promise<GoalResult>;
+export declare function reviseGoal(cwd: string, id: string, path: string, options?: GoalOptions): Promise<GoalResult>;
+//# sourceMappingURL=actions.d.ts.map

package/dist/goals/actions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"actions.d.ts","sourceRoot":"","sources":["../../src/goals/actions.ts"],"names":[],"mappings":"AAUA,OAAO,EAAU,cAAc,EAA+I,MAAM,2BAA2B,CAAC;AAChN,OAAO,KAAK,EAAC,kBAAkB,EAAC,cAAc,EAAC,mBAAmB,EAA2B,MAAM,2BAA2B,CAAC;AAC/H,OAAO,EAAC,SAAS,EAAC,MAAM,YAAY,CAAC;AACrC,OAAO,EAAsD,KAAK,iBAAiB,EAAC,MAAM,gBAAgB,CAAC;AAE3G,OAAO,EAAoB,KAAK,cAAc,EAAC,MAAM,iBAAiB,CAAC;AACvE,OAAO,KAAK,EAAC,cAAc,EAAC,SAAS,EAA0B,UAAU,EAA4B,MAAM,YAAY,CAAC;AAExH,MAAM,WAAW,WAAY,SAAQ,IAAI,CAAC,kBAAkB,EAAC,SAAS,CAAC,EAAC,iBAAiB;IACvF,KAAK,CAAC,EAAC,SAAS,CAAC;IAAA,WAAW,CAAC,EAAC,CAAC,KAAK,EAAC,SAAS,KAAG,IAAI,CAAC;IAAA,UAAU,CAAC,EAAC,CAAC,KAAK,EAAC,cAAc,KAAG,IAAI,CAAC;IAAA,SAAS,CAAC,EAAC,CAAC,IAAI,EAAC,cAAc,KAAG,IAAI,CAAC;CACvI;AACD,MAAM,WAAW,UAAU;IAAE,OAAO,EAAC,CAAC,CAAC;IAAA,IAAI,EAAC,oBAAoB,CAAC;IAAA,IAAI,EAAC,cAAc,CAAC;IAAA,MAAM,EAAC,UAAU,CAAC;IAAA,SAAS,EAAC,mBAAmB,GAAC,IAAI,CAAC;IAAA,UAAU,EAAC,cAAc,CAAC;IAAA,MAAM,EAAC;QAAC,IAAI,EAAC,UAAU,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;QAAA,SAAS,EAAC,UAAU,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAA;KAAC,CAAC;IAAA,WAAW,EAAC,OAAO,CAAC;IAAA,QAAQ,EAAC,MAAM,CAAA;CAAC;AAoBnS,wBAAsB,WAAW,CAAC,GAAG,EAAC,MAAM,EAAC,EAAE,EAAC,MAAM,EAAC,OAAO,GAAC,WAAc,GAAE,OAAO,CAAC,UAAU,CAAC,CAAiE;AA6CnK,wBAAsB,SAAS,CAAC,GAAG,EAAC,MAAM,EAAC,IAAI,EAAC,MAAM,EAAC,OAAO,GAAC,WAAc,GAAE,OAAO,CAAC,UAAU,CAAC,CAIjG;AACD,wBAAsB,WAAW,CAAC,GAAG,EAAC,MAAM,EAAC,EAAE,EAAC,MAAM,EAAC,YAAY,EAAC,MAAM,EAAC,OAAO,GAAC,WAAc,GAAE,OAAO,CAAC,UAAU,CAAC,CAQrH;AACD,wBAAsB,UAAU,CAAC,GAAG,EAAC,MAAM,EAAC,EAAE,EAAC,MAAM,EAAC,OAAO,GAAC,WAAc,GAAE,OAAO,CAAC,UAAU,CAAC,CAchG;AACD,wBAAsB,UAAU,CAAC,GAAG,EAAC,MAAM,EAAC,EAAE,EAAC,MAAM,EAAC,OAAO,GAAC,WAAc,GAAE,OAAO,CAAC,UAAU,CAAC,CAEhG;AACD,wBAAsB,UAAU,CAAC,GAAG,EAAC,MAAM,EAAC,EAAE,EAAC,MAAM,EAAC,IAAI,EAAC,MAAM,EAAC,OAAO,GAAC,WAAc,GAAE,OAAO,CAAC,UAAU,CAAC,CAG5G"}

package/dist/goals/actions.js

@@ -0,0 +1,261 @@
+import { coordinatorProgress } from '../orchestration/progress.js';
+import { existsSync } from 'node:fs';
+import { join } from 'node:path';
+import { canonicalJson, digest } from '../approvals/index.js';
+import { throwIfCancelled, isCancellation, cancellationError } from '../cancellation.js';
+import { authorizeSessionAction, SessionPolicyError } from '../session-management/index.js';
+import { ReservationLedger } from '../execution/ledger.js';
+import { ExecutionLimitError } from '../execution/types.js';
+import { assertLocalIsolationImage } from '../isolation/process.js';
+import { PROVIDER_REFUSAL_MESSAGE } from '../errors.js';
+import { RunStore, ExecutionStore, analyzePlan, bindPlan, changePreparedRun, loadRunPlan, executeReviewedRun, inspectExecution, readCollectedArtifact, workerSummary, OrchestrationError } from '../orchestration/index.js';
+import { GoalStore } from './store.js';
+import { newGoalManifest, plannerPlan, allocatePlan, proposePlan } from './contracts.js';
+import { validateGoalProposal } from './validation.js';
+import { readGoalAccounting } from './accounting.js';
+const goalStore = (options) => new GoalStore(options.goals?.root, options.onGoalEvent);
+function runStore(goal, options) { if (options.store && options.store.root !== goal.manifest.runsRoot)
+    throw new OrchestrationError('conflict', 'Goal is bound to its original run store.'); return options.store ?? new RunStore(goal.manifest.runsRoot); }
+const outcome = (error) => isCancellation(error) ? 'cancelled' : error instanceof SessionPolicyError || error instanceof ExecutionLimitError || error instanceof OrchestrationError && error.code === 'policy-denied' ? 'denied' : 'failed';
+function assertLinkedRun(goal, allocation, view, goals) {
+    const expected = { version: 1, root: goals.root, id: goal.manifest.id, manifestHash: goal.manifest.hash, allocationId: allocation.id, phase: allocation.phase };
+    if (view.manifest.version !== 2 || view.manifest.id !== allocation.runId || view.manifest.planHash !== allocation.planHash || canonicalJson(view.manifest.goal) !== canonicalJson(expected) || view.manifest.createdAt !== goal.manifest.createdAt)
+        throw new OrchestrationError('conflict', 'Run evidence differs from its parent goal allocation.');
+}
+const code = (status) => status === 'completed' ? 0 : status === 'review_required' ? 5 : status === 'partial' ? 4 : status === 'denied' ? 3 : status === 'cancelled' ? 130 : ['created', 'planning', 'approved', 'running'].includes(status) ? 0 : 1;
+function validateOptions(options) { if (options.maxOutputTokens !== undefined && (!Number.isSafeInteger(options.maxOutputTokens) || options.maxOutputTokens < 1 || options.maxOutputTokens > 100000000))
+    throw new OrchestrationError('invalid', 'Invalid goal output cap.'); }
+async function result(cwd, id, options) {
+    const goals = goalStore(options), goal = goals.read(id, cwd), runs = runStore(goal, options), owners = { goal: goals.owner(id), execution: null };
+    let execution = null, status = goal.state.status;
+    if (goal.state.execution && existsSync(join(runs.root, goal.state.execution.runId))) {
+        const inspected = await inspectExecution(cwd, goal.state.execution.runId, { store: runs, signal: options.signal });
+        assertLinkedRun(goal, goal.state.execution, inspected.view, goals);
+        execution = inspected.execution;
+        if (execution)
+            options.onProgress?.(coordinatorProgress(inspected.store, execution));
+        owners.execution = inspected.owner;
+        // A read may report newer child evidence (for example explicit task acceptance) without rewriting history.
+        if (!goal.state.revoked && execution && (execution.state.status === 'completed' || !['failed', 'denied', 'cancelled'].includes(status) || goal.events.at(-1)?.change.type !== 'execution_interrupted')) {
+            if (execution.state.status === 'ready')
+                status = 'approved';
+            else
+                status = execution.state.status;
+        }
+        if (inspected.view.run.status === 'cancelled')
+            status = 'cancelled';
+    }
+    const interrupted = status === 'planning' && !owners.goal?.alive || execution?.state.status === 'running' && !owners.execution?.alive;
+    return { version: 1, type: 'orchestration.goal', goal, status, execution, accounting: readGoalAccounting(goal, goals, undefined, options.signal), owners, interrupted, exitCode: code(status) };
+}
+export async function inspectGoal(cwd, id, options = {}) { throwIfCancelled(options.signal); return result(cwd, id, options); }
+async function owned(cwd, id, options, work) {
+    validateOptions(options);
+    const goals = goalStore(options), initial = goals.read(id, cwd), owner = goals.acquire(id), controller = new AbortController();
+    let stopped;
+    const abort = () => { stopped ??= cancellationError(); controller.abort(); };
+    options.signal?.addEventListener('abort', abort, { once: true });
+    if (options.signal?.aborted)
+        abort();
+    const assert = () => { throwIfCancelled(controller.signal); owner.check(); const view = goals.read(id, cwd); if (view.state.revoked)
+        throw cancellationError(); if (Date.now() >= view.manifest.deadline)
+        throw new ExecutionLimitError('deadline', 'Original goal deadline expired.'); return view; };
+    const observe = () => { try {
+        assert();
+    }
+    catch (error) {
+        stopped ??= error;
+        controller.abort();
+    } }, timer = setInterval(observe, 100), deadline = setTimeout(observe, Math.max(0, initial.manifest.deadline - Date.now()));
+    const bound = { ...options, signal: controller.signal, approve: options.approve ? (decision, signal) => options.approve(decision, signal ?? controller.signal) : undefined };
+    try {
+        assert();
+        return await work({ goals, owner, signal: controller.signal, assert, options: bound });
+    }
+    catch (error) {
+        throw stopped ?? error;
+    }
+    finally {
+        clearInterval(timer);
+        clearTimeout(deadline);
+        controller.abort();
+        options.signal?.removeEventListener('abort', abort);
+        owner.release();
+    }
+}
+function planningSpend(goal) {
+    if (!goal.state.planning)
+        return null;
+    const root = join(goal.manifest.runsRoot, goal.state.planning.runId, 'budget');
+    if (!existsSync(root))
+        return null;
+    const value = new ReservationLedger(root).read(goal.manifest.project.root);
+    if (value.manifest.runId !== goal.state.planning.runId || value.manifest.planHash !== goal.state.planning.planHash)
+        throw new OrchestrationError('conflict', 'Planning ledger belongs to another allocation.');
+    if (value.projection.exceeded)
+        throw new ExecutionLimitError('budget', 'Planning usage exceeded its request reservation.');
+    return { ...value.projection.spent, revision: value.projection.revision };
+}
+async function ensureRun(cwd, goal, allocation, plan, context) {
+    const runs = runStore(goal, context.options), analysis = analyzePlan(plan);
+    if (analysis.hash !== allocation.planHash)
+        throw new OrchestrationError('conflict', 'Allocated plan changed before run creation.');
+    bindPlan(analysis, cwd);
+    const binding = { id: allocation.runId, createdAt: goal.manifest.createdAt, goal: { version: 1, root: context.goals.root, id: goal.manifest.id, manifestHash: goal.manifest.hash, allocationId: allocation.id, phase: allocation.phase } };
+    let view;
+    const internal = { ...context.options, store: runs, confirmation: 'none' };
+    if (existsSync(join(runs.root, allocation.runId))) {
+        view = await runs.read(allocation.runId, cwd, context.signal);
+        assertLinkedRun(goal, allocation, view, context.goals);
+    }
+    else {
+        await authorizeSessionAction(cwd, 'orchestration_prepare', { path: cwd, goalId: goal.manifest.id, allocationId: allocation.id, runId: allocation.runId, planHash: analysis.hash, agents: plan.agents.length, tasks: plan.tasks.length }, internal);
+        context.assert();
+        view = await runs.prepare(analysis, cwd, { kind: 'goal', path: `goals/${goal.manifest.id}/${allocation.phase}.json`, sha256: analysis.hash }, context.signal, binding);
+    }
+    context.assert();
+    if (view.run.status === 'cancelled')
+        throw cancellationError();
+    if (view.run.status === 'prepared')
+        view = await changePreparedRun(cwd, view.run.id, 'approved', internal);
+    context.assert();
+    return view;
+}
+async function planGoal(cwd, id, options) {
+    await owned(cwd, id, options, async (context) => {
+        let view = context.assert();
+        if (view.state.planningFrozen)
+            return;
+        if (!['created', 'planning'].includes(view.state.status))
+            throw new OrchestrationError('conflict', 'Goal is not awaiting planning.');
+        if (view.manifest.supervision) {
+            await assertLocalIsolationImage(view.manifest.supervision.image, context.signal);
+            context.assert();
+        }
+        const plan = plannerPlan(view.manifest);
+        if (!view.state.planning) {
+            const allocation = allocatePlan(view.manifest, plan, 'planning');
+            await context.goals.append(id, { type: 'planning_allocated', allocation }, { signal: context.signal, expectedRevision: view.state.revision, beforeCommit: () => context.assert() });
+            view = context.assert();
+        }
+        try {
+            const run = await ensureRun(cwd, view, view.state.planning, plan, context), runs = runStore(view, options), executionStore = new ExecutionStore(join(runs.root, run.run.id), run.manifest), execution = await executeReviewedRun(cwd, run.run.id, { ...context.options, measuredInputReservation: true, store: runs, confirmation: 'none', resume: executionStore.exists(), maxOutputTokens: Math.min(view.manifest.limits.maxOutputTokens, options.maxOutputTokens ?? view.manifest.limits.maxOutputTokens), onEvent: options.onRunEvent });
+            context.assert();
+            const task = execution.execution.state.tasks.propose, artifact = task.output?.artifacts.find(a => a.id === 'proposal'), spend = planningSpend(view);
+            if (execution.status === 'cancelled')
+                throw cancellationError();
+            if (!artifact || !spend || !['review_required', 'completed'].includes(task.status))
+                throw new OrchestrationError(execution.status === 'denied' ? 'policy-denied' : 'unavailable', task.output?.summary === PROVIDER_REFUSAL_MESSAGE ? `Planner stopped: ${PROVIDER_REFUSAL_MESSAGE}` : 'Planner did not produce a usable proposal; inspect its recorded session and budget.');
+            const bytes = await readCollectedArtifact(executionStore, artifact, context.options);
+            let value;
+            try {
+                value = JSON.parse(bytes.toString());
+            }
+            catch {
+                throw new OrchestrationError('invalid', 'Planner artifact is not a valid JSON plan.');
+            }
+            const proposal = proposePlan(view.manifest, value, { kind: 'agent', runId: run.run.id, artifactId: artifact.id, artifactHash: artifact.sha256, eventId: artifact.source.eventId }, spend);
+            bindPlan(analyzePlan(proposal.plan), cwd);
+            context.assert();
+            context.goals.writeProposal(proposal, spend, context.signal);
+            await context.goals.append(id, { type: 'planning_finished', status: 'review_required', spend, proposalHash: proposal.hash, reason: 'Plan structure, bounds and provenance validated; human approval is required.' }, { signal: context.signal, expectedRevision: view.state.revision, beforeCommit: () => { context.assert(); if (canonicalJson(planningSpend(view)) !== canonicalJson(spend))
+                    throw new OrchestrationError('conflict', 'Planning spend changed before proposal freeze.'); } });
+        }
+        catch (error) {
+            const current = context.goals.read(id, cwd);
+            if (!current.state.planningFrozen) {
+                let spend = null;
+                try {
+                    spend = planningSpend(current);
+                }
+                catch { /* Damaged/overrun spend cannot authorize execution. */ }
+                await context.goals.append(id, { type: 'planning_finished', status: context.signal.aborted ? 'cancelled' : outcome(error), spend, proposalHash: null, reason: workerSummary(error instanceof Error ? error.message : 'Planning failed.') }, { beforeCommit: context.owner.check });
+            }
+            throw error;
+        }
+    });
+    return result(cwd, id, options);
+}
+export async function startGoal(cwd, goal, options = {}) {
+    throwIfCancelled(options.signal);
+    validateOptions(options);
+    const runs = options.store ?? new RunStore(), goals = goalStore(options), manifest = newGoalManifest(cwd, goal, runs.root, options);
+    await authorizeSessionAction(cwd, 'orchestration_goal_plan', { path: cwd, goalHash: digest(goal), limits: manifest.limits, workspace: manifest.workspace, preference: manifest.preference, ...(manifest.routing ? { routing: manifest.routing } : {}), ...(manifest.team ? { team: manifest.team } : {}), ...(manifest.supervision ? { supervision: manifest.supervision } : {}) }, options);
+    throwIfCancelled(options.signal);
+    const created = goals.create(manifest, options.signal);
+    options.onCreated?.(created);
+    return planGoal(cwd, manifest.id, { ...options, store: runs, goals });
+}
+export async function approveGoal(cwd, id, proposalHash, options = {}) {
+    await owned(cwd, id, options, async (context) => {
+        const view = context.assert();
+        if (view.state.status !== 'review_required' || !view.proposal || view.proposal.hash !== proposalHash || view.state.execution)
+            throw new OrchestrationError('conflict', 'Approval must name the current, unallocated proposal hash.');
+        validateGoalProposal(view.proposal, view.manifest, view.state.planningSpend);
+        bindPlan(analyzePlan(view.proposal.plan), cwd);
+        await authorizeSessionAction(cwd, 'orchestration_goal_approve', { path: cwd, operation: `Approve goal ${id}, proposal ${proposalHash}: ${view.proposal.plan.tasks.length} tasks, ${view.proposal.plan.limits.tokenBudget} tokens, $${view.proposal.plan.limits.costBudgetUsd}, original deadline ${new Date(view.manifest.deadline).toISOString()}. File mutations still require their own permission.`, goalId: id, proposalHash, revision: view.state.revision, plan: view.proposal.plan, planningSpend: view.state.planningSpend, deadline: view.manifest.deadline }, { ...context.options, confirmation: options.source === 'repl' ? 'mutating' : options.confirmation });
+        context.assert();
+        const allocation = allocatePlan(view.manifest, view.proposal.plan, 'execution');
+        await context.goals.append(id, { type: 'execution_allocated', allocation, proposalHash, source: options.source ?? 'cli' }, { signal: context.signal, expectedRevision: view.state.revision, beforeCommit: () => { context.assert(); if (canonicalJson(planningSpend(view)) !== canonicalJson(view.state.planningSpend))
+                throw new OrchestrationError('conflict', 'Planning spend changed during approval.'); } });
+    });
+    return resumeGoal(cwd, id, options);
+}
+export async function resumeGoal(cwd, id, options = {}) {
+    throwIfCancelled(options.signal);
+    const initial = goalStore(options).read(id, cwd);
+    if (initial.state.revoked || initial.state.status === 'completed')
+        return result(cwd, id, options);
+    if (!initial.state.execution) {
+        if (initial.state.planningFrozen)
+            return result(cwd, id, options);
+        return planGoal(cwd, id, options);
+    }
+    const current = await result(cwd, id, options);
+    if (current.status === 'completed')
+        return current;
+    await owned(cwd, id, options, async (context) => {
+        const view = context.assert(), a = view.state.execution, proposal = view.proposal;
+        const run = await ensureRun(cwd, view, a, proposal.plan, context), runs = runStore(view, options), store = new ExecutionStore(join(runs.root, run.run.id), run.manifest);
+        if (store.exists() && store.read().state.status === 'completed') {
+            const execution = store.read(), tasks = Object.values(execution.state.tasks);
+            await context.goals.append(id, { type: 'execution_finished', runId: a.runId, revision: execution.state.revision, status: 'completed', completed: tasks.filter(t => t.status === 'completed').length, total: tasks.length }, { signal: context.signal, beforeCommit: () => context.assert() });
+            return;
+        }
+        await authorizeSessionAction(cwd, 'orchestration_goal_resume', { path: cwd, goalId: id, runId: a.runId, proposalHash: proposal.hash, revision: view.state.revision }, context.options);
+        context.assert();
+        await context.goals.append(id, { type: 'execution_started', runId: a.runId }, { signal: context.signal, beforeCommit: () => context.assert() });
+        try {
+            const execution = await executeReviewedRun(cwd, run.run.id, { ...context.options, store: runs, confirmation: 'none', resume: store.exists(), maxOutputTokens: Math.min(view.manifest.limits.maxOutputTokens, options.maxOutputTokens ?? view.manifest.limits.maxOutputTokens), onEvent: options.onRunEvent }), tasks = Object.values(execution.execution.state.tasks);
+            await context.goals.append(id, { type: 'execution_finished', runId: a.runId, revision: execution.execution.state.revision, status: execution.status, completed: tasks.filter(t => t.status === 'completed').length, total: tasks.length }, { beforeCommit: context.owner.check });
+        }
+        catch (error) {
+            await context.goals.append(id, { type: 'execution_interrupted', runId: a.runId, status: context.signal.aborted ? 'cancelled' : outcome(error), reason: workerSummary(error instanceof Error ? error.message : 'Execution interrupted; inspect its original run before retrying.') }, { beforeCommit: context.owner.check });
+            throw error;
+        }
+    });
+    return result(cwd, id, options);
+}
+export async function cancelGoal(cwd, id, options = {}) {
+    const goals = goalStore(options), view = goals.read(id, cwd);
+    if ((await result(cwd, id, options)).status === 'completed')
+        throw new OrchestrationError('conflict', 'Completed goals cannot be cancelled.');
+    await authorizeSessionAction(cwd, 'orchestration_goal_cancel', { path: cwd, goalId: id, manifestHash: view.manifest.hash, revision: view.state.revision }, options);
+    throwIfCancelled(options.signal);
+    await goals.append(id, { type: 'cancelled', source: options.source ?? 'cli' }, { signal: options.signal });
+    return result(cwd, id, options);
+}
+export async function reviseGoal(cwd, id, path, options = {}) {
+    await owned(cwd, id, options, async (context) => {
+        const view = context.assert();
+        if (!['review_required', 'failed', 'denied', 'cancelled'].includes(view.state.status) || !view.state.planningFrozen || view.state.execution || !view.state.planningSpend)
+            throw new OrchestrationError('conflict', 'Only frozen, unallocated planning can be revised.');
+        const loaded = await loadRunPlan(cwd, path, false, context.options), proposal = proposePlan(view.manifest, loaded.analysis.plan, { kind: 'human', path: loaded.source.path, sha256: loaded.source.sha256 }, view.state.planningSpend);
+        await authorizeSessionAction(cwd, 'orchestration_goal_revise', { path: cwd, goalId: id, previousProposalHash: view.state.proposalHash, proposalHash: proposal.hash, source: loaded.source }, context.options);
+        context.assert();
+        context.goals.writeProposal(proposal, view.state.planningSpend, context.signal);
+        await context.goals.append(id, { type: 'proposal_revised', proposalHash: proposal.hash }, { signal: context.signal, expectedRevision: view.state.revision, beforeCommit: () => context.assert() });
+    });
+    return result(cwd, id, options);
+}
+//# sourceMappingURL=actions.js.map