@calliopelabs/cli 3.1.0 → 3.2.0

package/dist/supervision/evidence.js

@@ -0,0 +1,68 @@
+import { canonicalJson } from '../approvals/index.js';
+import { readCollectedArtifact } from '../orchestration/verification.js';
+import { OrchestrationError } from '../orchestration/types.js';
+import { permits } from '../orchestration/validation.js';
+import { SessionPolicyError } from '../session-management/index.js';
+import { compactCommandReceipt } from './receipts.js';
+import { assertSupervisedRetry } from './journal.js';
+/** Immutable result references remain complete; artifact excerpts have explicit bounds. */
+export async function reviewEvidence(store, ids, options, readerId, compact = false) {
+    const view = store.read(), plan = store.context(view).plan, reader = readerId ? plan.agents.find(a => a.id === readerId) : undefined, outcomes = [];
+    let remaining = 32768;
+    if (readerId && !reader)
+        throw new SessionPolicyError();
+    for (const id of ids) {
+        const event = view.events.find(e => e.id === id);
+        if (!event || !['task_finished', 'task_accepted'].includes(event.change.type))
+            throw new OrchestrationError('invalid', 'Review evidence must name recorded task outcomes.');
+        const change = event.change;
+        const output = change.type === 'task_finished' ? change.output : view.state.tasks[change.taskId].output;
+        const artifacts = [];
+        for (const artifact of output?.artifacts ?? []) {
+            const sourcePath = plan.tasks.find(t => t.id === artifact.taskId).outputs.find(o => o.id === artifact.id).path;
+            if (reader && sourcePath && !permits(reader.allowedPaths, sourcePath, 'read'))
+                throw new SessionPolicyError();
+            const bytes = await readCollectedArtifact(store, artifact, options), command = compact ? plan.tasks.find(t => t.id === artifact.taskId)?.isolation?.commands.find(c => c.artifactId === artifact.id) : undefined;
+            const receipt = command ? compactCommandReceipt(bytes, command, plan.workspace.isolation.image) : undefined;
+            const length = Math.min(compact ? 512 : 4096, remaining, bytes.length);
+            if (receipt && Buffer.byteLength(receipt) > remaining)
+                throw new OrchestrationError('limit', 'Controller receipt summaries exceed the evidence limit.');
+            remaining -= receipt ? Buffer.byteLength(receipt) : length;
+            artifacts.push({ id: artifact.id, kind: artifact.kind, sha256: artifact.sha256, source: artifact.source, bytes: bytes.length, excerpt: receipt ?? bytes.subarray(0, length).toString('utf8'), truncated: receipt !== undefined || length < bytes.length, ...(receipt ? { derived: 'executor-command-summary-v1' } : {}) });
+        }
+        // A truncated worker report is operationally failed until a controller
+        // authorizes recovery, even when independently retained checks are
+        // complete. Preserve the task's review_required journal status while
+        // exposing the retry-worthy outcome to supervision.
+        const status = change.type === 'task_finished' && change.status === 'review_required' && /truncat/i.test(output?.summary ?? '')
+            ? 'failed'
+            : change.type === 'task_finished' ? change.status : 'completed';
+        outcomes.push({ eventId: id, taskId: change.taskId, status, summary: output?.summary, checks: output?.checks, risks: output?.unresolvedRisks, artifacts });
+    }
+    return outcomes;
+}
+/** Only executor receipts with confirmed process cleanup can justify another isolated attempt. */
+export async function retryEvidence(store, taskId, options) {
+    const view = store.read(), plan = store.context(view).plan, state = view.state;
+    assertSupervisedRetry(plan, state, view.events, taskId);
+    const task = state.tasks[taskId], spec = plan.tasks.find(t => t.id === taskId), receipts = [], artifacts = task.output?.artifacts ?? [];
+    if (task.mutations)
+        for (const artifact of artifacts) {
+            const bytes = await readCollectedArtifact(store, artifact, options), command = spec.isolation.commands.find(c => c.artifactId === artifact.id);
+            if (!command)
+                continue;
+            let value;
+            try {
+                value = JSON.parse(bytes.toString());
+            }
+            catch {
+                throw new OrchestrationError('invalid', 'Verification receipt is malformed.');
+            }
+            if (value.version !== 1 || value.kind !== 'isolated-command' || canonicalJson(value.argv) !== canonicalJson(command.argv) || value.image !== plan.workspace.isolation.image || value.cleanupConfirmed !== true || !['passed', 'failed', 'timeout'].includes(value.outcome) || !Number.isSafeInteger(value.exitCode) || value.exitCode < 0 || !/^[a-f0-9]{64}$/.test(value.workspace?.before) || value.workspace.before !== value.workspace.after)
+                throw new OrchestrationError('conflict', 'Verification cleanup or workspace evidence does not permit automatic retry.');
+            receipts.push({ artifactId: artifact.id, sha256: artifact.sha256, exitCode: value.exitCode, outcome: value.outcome, cleanupConfirmed: true });
+        }
+    assertSupervisedRetry(plan, state, view.events, taskId, receipts);
+    return { receipts, artifacts };
+}
+//# sourceMappingURL=evidence.js.map

package/dist/supervision/evidence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence.js","sourceRoot":"","sources":["../../src/supervision/evidence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,aAAa,EAAC,MAAM,uBAAuB,CAAC;AAIpD,OAAO,EAAC,qBAAqB,EAAC,MAAM,kCAAkC,CAAC;AACvE,OAAO,EAAC,kBAAkB,EAAC,MAAM,2BAA2B,CAAC;AAC7D,OAAO,EAAC,OAAO,EAAC,MAAM,gCAAgC,CAAC;AACvD,OAAO,EAAC,kBAAkB,EAAC,MAAM,gCAAgC,CAAC;AAClE,OAAO,EAAC,qBAAqB,EAAC,MAAM,eAAe,CAAC;AACpD,OAAO,EAAC,qBAAqB,EAAC,MAAM,cAAc,CAAC;AAGnD,2FAA2F;AAC3F,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,KAAoB,EAAC,GAAY,EAAC,OAAwB,EAAC,QAAgB,EAAC,OAAO,GAAC,KAAK;IAC5H,MAAM,IAAI,GAAC,KAAK,CAAC,IAAI,EAAE,EAAC,IAAI,GAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAC,MAAM,GAAC,QAAQ,CAAA,CAAC,CAAA,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,EAAE,KAAG,QAAQ,CAAC,CAAA,CAAC,CAAA,SAAS,EAAC,QAAQ,GAAC,EAAE,CAAC;IAAA,IAAI,SAAS,GAAC,KAAK,CAAC;IACrJ,IAAG,QAAQ,IAAE,CAAC,MAAM;QAAC,MAAM,IAAI,kBAAkB,EAAE,CAAC;IACpD,KAAI,MAAM,EAAE,IAAI,GAAG,EAAC,CAAC;QACnB,MAAM,KAAK,GAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,EAAE,KAAG,EAAE,CAAC,CAAC;QAC3C,IAAG,CAAC,KAAK,IAAE,CAAC,CAAC,eAAe,EAAC,eAAe,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC;YAAC,MAAM,IAAI,kBAAkB,CAAC,SAAS,EAAC,mDAAmD,CAAC,CAAC;QACtK,MAAM,MAAM,GAAC,KAAK,CAAC,MAA6E,CAAC;QACjG,MAAM,MAAM,GAAC,MAAM,CAAC,IAAI,KAAG,eAAe,CAAA,CAAC,CAAA,MAAM,CAAC,MAAM,CAAA,CAAC,CAAA,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAE,CAAC,MAAM,CAAC;QACjG,MAAM,SAAS,GAAC,EAAE,CAAC;QACnB,KAAI,MAAM,QAAQ,IAAI,MAAM,EAAE,SAAS,IAAE,EAAE,EAAC,CAAC;YAC3C,MAAM,UAAU,GAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,EAAE,KAAG,QAAQ,CAAC,MAAM,CAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,EAAE,KAAG,QAAQ,CAAC,EAAE,CAAE,CAAC,IAAI,CAAC;YACvG,IAAG,MAAM,IAAE,UAAU,IAAE,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,EAAC,UAAU,EAAC,MAAM,CAAC;gBAAC,MAAM,IAAI,kBAAkB,EAAE,CAAC;YACtG,MAAM,KAAK,GAAC,MAAM,qBAAqB,CAAC,KAAK,EAAC,QAAQ,EAAC,OAAO,CAAC,EAAC,OAAO,GAAC,OAAO,CAAA,CAAC,CAAA,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,EAAE,KAAG,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,UAAU,KAAG,QAAQ,CAAC,EAAE,CAAC,CAAA,CAAC,CAAA,SAAS,CAAC;YAC9L,MAAM,OAAO,GAAC,OAAO,CAAA,CAAC,CAAA,qBAAqB,CAAC,KAAK,EAAC,OAAO,EAAC,IAAI,CAAC,SAAS,CAAC,SAAU,CAAC,KAAK,CAAC,CAAA,CAAC,CAAA,SAAS,CAAC;YACrG,MAAM,MAAM,GAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAA,CAAC,CAAA,GAAG,CAAA,CAAC,CAAA,IAAI,EAAC,SAAS,EAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC/D,IAAG,OAAO,IAAE,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,GAAC,SAAS;gBAAC,MAAM,IAAI,kBAAkB,CAAC,OAAO,EAAC,yDAAyD,CAAC,CAAC;YACjJ,SAAS,IAAE,OAAO,CAAA,CAAC,CAAA,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAA,CAAC,CAAA,MAAM,CAAC;YACrD,SAAS,CAAC,IAAI,CAAC,EAAC,EAAE,EAAC,QAAQ,CAAC,EAAE,EAAC,IAAI,EAAC,QAAQ,CAAC,IAAI,EAAC,MAAM,EAAC,QAAQ,CAAC,MAAM,EAAC,MAAM,EAAC,QAAQ,CAAC,MAAM,EAAC,KAAK,EAAC,KAAK,CAAC,MAAM,EAAC,OAAO,EAAC,OAAO,IAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAC,SAAS,EAAC,OAAO,KAAG,SAAS,IAAE,MAAM,GAAC,KAAK,CAAC,MAAM,EAAC,GAAG,CAAC,OAAO,CAAA,CAAC,CAAA,EAAC,OAAO,EAAC,6BAAsC,EAAC,CAAA,CAAC,CAAA,EAAE,CAAC,EAAC,CAAC,CAAC;QACtS,CAAC;QACD,uEAAuE;QACvE,mEAAmE;QACnE,qEAAqE;QACrE,oDAAoD;QACpD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,KAAK,eAAe,IAAI,MAAM,CAAC,MAAM,KAAK,iBAAiB,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,IAAI,EAAE,CAAC;YAC7H,CAAC,CAAC,QAAiB;YACnB,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,WAAoB,CAAC;QAC3E,QAAQ,CAAC,IAAI,CAAC,EAAC,OAAO,EAAC,EAAE,EAAC,MAAM,EAAC,MAAM,CAAC,MAAM,EAAC,MAAM,EAAC,OAAO,EAAC,MAAM,EAAE,OAAO,EAAC,MAAM,EAAC,MAAM,EAAE,MAAM,EAAC,KAAK,EAAC,MAAM,EAAE,eAAe,EAAC,SAAS,EAAC,CAAC,CAAC;IAChJ,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,kGAAkG;AAClG,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,KAAoB,EAAC,MAAa,EAAC,OAAwB;IAC7F,MAAM,IAAI,GAAC,KAAK,CAAC,IAAI,EAAE,EAAC,IAAI,GAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAC,KAAK,GAAC,IAAI,CAAC,KAAK,CAAC;IACvE,qBAAqB,CAAC,IAAI,EAAC,KAAK,EAAC,IAAI,CAAC,MAAM,EAAC,MAAM,CAAC,CAAC;IACrD,MAAM,IAAI,GAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAE,EAAC,IAAI,GAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,EAAE,KAAG,MAAM,CAAE,EAAC,QAAQ,GAAgB,EAAE,EAAC,SAAS,GAAC,IAAI,CAAC,MAAM,EAAE,SAAS,IAAE,EAAE,CAAC;IACxI,IAAG,IAAI,CAAC,SAAS;QAAC,KAAI,MAAM,QAAQ,IAAI,SAAS,EAAC,CAAC;YACjD,MAAM,KAAK,GAAC,MAAM,qBAAqB,CAAC,KAAK,EAAC,QAAQ,EAAC,OAAO,CAAC,EAAC,OAAO,GAAC,IAAI,CAAC,SAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,UAAU,KAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;YACrI,IAAG,CAAC,OAAO;gBAAC,SAAS;YACrB,IAAI,KAAK,CAAC;YAAA,IAAG,CAAC;gBAAA,KAAK,GAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;YAAA,CAAC;YAAA,MAAK,CAAC;gBAAA,MAAM,IAAI,kBAAkB,CAAC,SAAS,EAAC,oCAAoC,CAAC,CAAC;YAAA,CAAC;YACtI,IAAG,KAAK,CAAC,OAAO,KAAG,CAAC,IAAE,KAAK,CAAC,IAAI,KAAG,kBAAkB,IAAE,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,KAAG,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,IAAE,KAAK,CAAC,KAAK,KAAG,IAAI,CAAC,SAAS,CAAC,SAAU,CAAC,KAAK,IAAE,KAAK,CAAC,gBAAgB,KAAG,IAAI,IAAE,CAAC,CAAC,QAAQ,EAAC,QAAQ,EAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,IAAE,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAE,KAAK,CAAC,QAAQ,GAAC,CAAC,IAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,IAAE,KAAK,CAAC,SAAS,CAAC,MAAM,KAAG,KAAK,CAAC,SAAS,CAAC,KAAK;gBAC5Y,MAAM,IAAI,kBAAkB,CAAC,UAAU,EAAC,6EAA6E,CAAC,CAAC;YACzH,QAAQ,CAAC,IAAI,CAAC,EAAC,UAAU,EAAC,QAAQ,CAAC,EAAE,EAAC,MAAM,EAAC,QAAQ,CAAC,MAAM,EAAC,QAAQ,EAAC,KAAK,CAAC,QAAQ,EAAC,OAAO,EAAC,KAAK,CAAC,OAAO,EAAC,gBAAgB,EAAC,IAAI,EAAC,CAAC,CAAC;QACrI,CAAC;IACD,qBAAqB,CAAC,IAAI,EAAC,KAAK,EAAC,IAAI,CAAC,MAAM,EAAC,MAAM,EAAC,QAAQ,CAAC,CAAC;IAAA,OAAM,EAAC,QAAQ,EAAC,SAAS,EAAC,CAAC;AAC3F,CAAC"}

package/dist/supervision/health.d.ts

@@ -0,0 +1,16 @@
+import { type HealthEvent, type HealthSettings } from '../health/index.js';
+import type { ExecutionProjection } from '../orchestration/coordinator-types.js';
+import type { ProjectPlan } from '../orchestration/types.js';
+import type { SupervisionHealthEvidence } from './types.js';
+type HealthSource = {
+    read: () => HealthEvent[];
+    settings: HealthSettings;
+};
+/** Capture no endpoints, credentials, upstream text or model content. */
+export declare function supervisionHealthEvidence(plan: ProjectPlan, state: ExecutionProjection, options?: {
+    source?: HealthSource;
+    now?: number;
+}): SupervisionHealthEvidence;
+export declare function validateSupervisionHealthEvidence(value: unknown): SupervisionHealthEvidence;
+export {};
+//# sourceMappingURL=health.d.ts.map

package/dist/supervision/health.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"health.d.ts","sourceRoot":"","sources":["../../src/supervision/health.ts"],"names":[],"mappings":"AAEA,OAAO,EAA4C,KAAK,WAAW,EAAqB,KAAK,cAAc,EAAC,MAAM,oBAAoB,CAAC;AACvI,OAAO,KAAK,EAAC,mBAAmB,EAAC,MAAM,uCAAuC,CAAC;AAC/E,OAAO,KAAK,EAAC,WAAW,EAAC,MAAM,2BAA2B,CAAC;AAE3D,OAAO,KAAK,EAAC,yBAAyB,EAA2B,MAAM,YAAY,CAAC;AAEpF,KAAK,YAAY,GAAC;IAAC,IAAI,EAAC,MAAI,WAAW,EAAE,CAAC;IAAA,QAAQ,EAAC,cAAc,CAAA;CAAC,CAAC;AAcnE,yEAAyE;AACzE,wBAAgB,yBAAyB,CAAC,IAAI,EAAC,WAAW,EAAC,KAAK,EAAC,mBAAmB,EAAC,OAAO,GAAC;IAAC,MAAM,CAAC,EAAC,YAAY,CAAC;IAAA,GAAG,CAAC,EAAC,MAAM,CAAA;CAAI,GAAE,yBAAyB,CAQ5J;AAKD,wBAAgB,iCAAiC,CAAC,KAAK,EAAC,OAAO,GAAE,yBAAyB,CAqBzF"}

package/dist/supervision/health.js

@@ -0,0 +1,86 @@
+import { canonicalJson, digest } from '../approvals/index.js';
+import { getProviderNames } from '../config.js';
+import { HealthStore, providerTarget, summarizeHealth } from '../health/index.js';
+import { array, fail, hex, integer, shape } from '../orchestration/validation.js';
+const providersIn = (plan, state) => {
+    const providers = new Set(), all = getProviderNames();
+    for (const agent of plan.agents) {
+        if (agent.preference.provider === 'auto') {
+            const targets = [...(agent.routing?.pool ?? []), ...(agent.routing?.escalationPool ?? [])];
+            if (targets.length)
+                for (const target of targets)
+                    providers.add(target.provider);
+            else
+                for (const provider of all)
+                    providers.add(provider);
+        }
+        else
+            providers.add(agent.preference.provider);
+        for (const policy of [agent.routing, agent.childRouting])
+            for (const target of [...(policy?.pool ?? []), ...(policy?.escalationPool ?? [])])
+                providers.add(target.provider);
+    }
+    for (const route of Object.values(state.routes ?? {}))
+        providers.add(route.route.provider);
+    return [...providers].sort();
+};
+/** Capture no endpoints, credentials, upstream text or model content. */
+export function supervisionHealthEvidence(plan, state, options = {}) {
+    const now = options.now ?? Date.now(), observedAt = new Date(now).toISOString();
+    try {
+        const source = options.source ?? new HealthStore(), events = source.read(), providers = providersIn(plan, state), targets = providers.map(provider => providerTarget(provider));
+        const relevant = events.filter(event => targets.some(target => event.provider === target.provider && event.target === target.key));
+        const snapshots = targets.map(target => summarizeHealth(events, target, source.settings, now));
+        return { version: 1, observedAt, status: 'available', historyHash: digest(canonicalJson(relevant.map(({ id, sha256 }) => ({ id, sha256 })))), eventCount: relevant.length, providers: snapshots };
+    }
+    catch {
+        return { version: 1, observedAt, status: 'unavailable', historyHash: null, eventCount: 0, providers: [], reason: 'local-health-history-unavailable' };
+    }
+}
+const rate = (value) => value === null || typeof value === 'number' && Number.isFinite(value) && value >= 0 && value <= 1;
+const iso = (value) => typeof value === 'string' && Number.isFinite(Date.parse(value)) && new Date(value).toISOString() === value;
+const instant = (value) => value === null || iso(value);
+export function validateSupervisionHealthEvidence(value) {
+    shape(value, ['version', 'observedAt', 'status', 'historyHash', 'eventCount', 'providers'], ['reason']);
+    if (value.version !== 1 || !iso(value.observedAt) || !['available', 'unavailable'].includes(String(value.status)))
+        fail('Invalid supervision health evidence.');
+    integer(value.eventCount, 0, 10000);
+    array(value.providers, 32);
+    if (value.status === 'unavailable') {
+        if (value.historyHash !== null || value.eventCount !== 0 || value.providers.length || value.reason !== 'local-health-history-unavailable')
+            fail('Invalid unavailable supervision health evidence.');
+        return value;
+    }
+    if (!hex(value.historyHash) || value.reason !== undefined)
+        fail('Invalid available supervision health evidence.');
+    const names = getProviderNames(), seen = new Set();
+    for (const item of value.providers) {
+        shape(item, ['provider', 'target', 'sampleCount', 'latencyMs', 'timeoutRate', 'retryRate', 'errorRate', 'lastSuccessAt', 'lastFailure', 'discovery', 'lastSuccessfulConformanceAt', 'capabilities', 'quarantine', 'importedEvents']);
+        if (typeof item.provider !== 'string' || !names.includes(item.provider) || !hex(item.target) || seen.has(item.provider))
+            fail('Invalid supervision provider health target.');
+        seen.add(item.provider);
+        integer(item.sampleCount, 0, 10000);
+        integer(item.importedEvents, 0, 10000);
+        if (item.latencyMs !== null)
+            integer(item.latencyMs, 0, 86400000);
+        if (!rate(item.timeoutRate) || !rate(item.retryRate) || !rate(item.errorRate) || !instant(item.lastSuccessAt) || !instant(item.lastSuccessfulConformanceAt))
+            fail('Invalid supervision provider health metrics.');
+        if (item.lastFailure !== null) {
+            shape(item.lastFailure, ['at', 'kind', 'httpStatus']);
+            if (!iso(item.lastFailure.at) || !['authentication', 'quota', 'rate_limit', 'timeout', 'network', 'server', 'invalid_request', 'response', 'unknown'].includes(String(item.lastFailure.kind)) || item.lastFailure.httpStatus !== null && (typeof item.lastFailure.httpStatus !== 'number' || !Number.isSafeInteger(item.lastFailure.httpStatus) || item.lastFailure.httpStatus < 100 || item.lastFailure.httpStatus > 599))
+                fail('Invalid supervision provider failure.');
+        }
+        shape(item.discovery, ['status', 'at', 'modelCount']);
+        if (!['success', 'error', 'timeout', 'cancelled', 'unknown'].includes(String(item.discovery.status)) || !instant(item.discovery.at) || item.discovery.modelCount !== null && (typeof item.discovery.modelCount !== 'number' || !Number.isSafeInteger(item.discovery.modelCount) || item.discovery.modelCount < 0 || item.discovery.modelCount > 1000000))
+            fail('Invalid supervision provider discovery.');
+        shape(item.capabilities, ['tools', 'streaming', 'cancellation', 'usage']);
+        if (Object.values(item.capabilities).some(capability => capability !== 'unknown' && typeof capability !== 'boolean'))
+            fail('Invalid supervision provider capabilities.');
+        shape(item.quarantine, ['active', 'reason', 'expiresAt', 'failures']);
+        if (typeof item.quarantine.active !== 'boolean' || item.quarantine.reason !== null && !['authentication', 'quota', 'rate_limit', 'timeout', 'network', 'server', 'invalid_request', 'response', 'unknown'].includes(String(item.quarantine.reason)) || !instant(item.quarantine.expiresAt))
+            fail('Invalid supervision provider quarantine.');
+        integer(item.quarantine.failures, 0, 100);
+    }
+    return value;
+}
+//# sourceMappingURL=health.js.map

package/dist/supervision/health.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"health.js","sourceRoot":"","sources":["../../src/supervision/health.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,aAAa,EAAC,MAAM,EAAC,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAC,gBAAgB,EAAC,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAC,WAAW,EAAC,cAAc,EAAC,eAAe,EAA0D,MAAM,oBAAoB,CAAC;AAGvI,OAAO,EAAC,KAAK,EAAC,IAAI,EAAC,GAAG,EAAC,OAAO,EAAC,KAAK,EAAC,MAAM,gCAAgC,CAAC;AAI5E,MAAM,WAAW,GAAC,CAAC,IAAgB,EAAC,KAAyB,EAAkB,EAAE;IAC/E,MAAM,SAAS,GAAC,IAAI,GAAG,EAAkB,EAAC,GAAG,GAAC,gBAAgB,EAAE,CAAC;IACjE,KAAI,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,EAAC,CAAC;QAC9B,IAAG,KAAK,CAAC,UAAU,CAAC,QAAQ,KAAG,MAAM,EAAC,CAAC;YACrC,MAAM,OAAO,GAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,IAAE,EAAE,CAAC,EAAC,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,cAAc,IAAE,EAAE,CAAC,CAAC,CAAC;YACpF,IAAG,OAAO,CAAC,MAAM;gBAAC,KAAI,MAAM,MAAM,IAAI,OAAO;oBAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;;gBAAK,KAAI,MAAM,QAAQ,IAAI,GAAG;oBAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACtI,CAAC;;YAAK,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,QAA0B,CAAC,CAAC;QACjE,KAAI,MAAM,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,EAAC,KAAK,CAAC,YAAY,CAAC;YAAC,KAAI,MAAM,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,IAAE,EAAE,CAAC,EAAC,GAAG,CAAC,MAAM,EAAE,cAAc,IAAE,EAAE,CAAC,CAAC;gBAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACpK,CAAC;IACD,KAAI,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,IAAE,EAAE,CAAC;QAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,QAA0B,CAAC,CAAC;IACzG,OAAO,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;AAC/B,CAAC,CAAC;AAEF,yEAAyE;AACzE,MAAM,UAAU,yBAAyB,CAAC,IAAgB,EAAC,KAAyB,EAAC,OAAO,GAAoC,EAAE;IAChI,MAAM,GAAG,GAAC,OAAO,CAAC,GAAG,IAAE,IAAI,CAAC,GAAG,EAAE,EAAC,UAAU,GAAC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;IACzE,IAAG,CAAC;QACF,MAAM,MAAM,GAAC,OAAO,CAAC,MAAM,IAAE,IAAI,WAAW,EAAE,EAAC,MAAM,GAAC,MAAM,CAAC,IAAI,EAAE,EAAC,SAAS,GAAC,WAAW,CAAC,IAAI,EAAC,KAAK,CAAC,EAAC,OAAO,GAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAA,EAAE,CAAA,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC;QAChK,MAAM,QAAQ,GAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAA,EAAE,CAAA,OAAO,CAAC,IAAI,CAAC,MAAM,CAAA,EAAE,CAAA,KAAK,CAAC,QAAQ,KAAG,MAAM,CAAC,QAAQ,IAAE,KAAK,CAAC,MAAM,KAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACvH,MAAM,SAAS,GAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAA,EAAE,CAAA,eAAe,CAAC,MAAM,EAAC,MAAM,EAAC,MAAM,CAAC,QAAQ,EAAC,GAAG,CAA8B,CAAC,CAAC;QACrH,OAAM,EAAC,OAAO,EAAC,CAAC,EAAC,UAAU,EAAC,MAAM,EAAC,WAAW,EAAC,WAAW,EAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAC,EAAE,EAAC,MAAM,EAAC,EAAC,EAAE,CAAA,CAAC,EAAC,EAAE,EAAC,MAAM,EAAC,CAAC,CAAC,CAAC,CAAC,EAAC,UAAU,EAAC,QAAQ,CAAC,MAAM,EAAC,SAAS,EAAC,SAAS,EAAC,CAAC;IAC/K,CAAC;IAAA,MAAK,CAAC;QAAA,OAAM,EAAC,OAAO,EAAC,CAAC,EAAC,UAAU,EAAC,MAAM,EAAC,aAAa,EAAC,WAAW,EAAC,IAAI,EAAC,UAAU,EAAC,CAAC,EAAC,SAAS,EAAC,EAAE,EAAC,MAAM,EAAC,kCAAkC,EAAC,CAAC;IAAA,CAAC;AACjJ,CAAC;AAED,MAAM,IAAI,GAAC,CAAC,KAAa,EAAC,EAAE,CAAA,KAAK,KAAG,IAAI,IAAE,OAAO,KAAK,KAAG,QAAQ,IAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAE,KAAK,IAAE,CAAC,IAAE,KAAK,IAAE,CAAC,CAAC;AAC9G,MAAM,GAAG,GAAC,CAAC,KAAa,EAAiB,EAAE,CAAA,OAAO,KAAK,KAAG,QAAQ,IAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAE,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,KAAG,KAAK,CAAC;AAC9I,MAAM,OAAO,GAAC,CAAC,KAAa,EAAC,EAAE,CAAA,KAAK,KAAG,IAAI,IAAE,GAAG,CAAC,KAAK,CAAC,CAAC;AACxD,MAAM,UAAU,iCAAiC,CAAC,KAAa;IAC7D,KAAK,CAAC,KAAK,EAAC,CAAC,SAAS,EAAC,YAAY,EAAC,QAAQ,EAAC,aAAa,EAAC,YAAY,EAAC,WAAW,CAAC,EAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;IACjG,IAAG,KAAK,CAAC,OAAO,KAAG,CAAC,IAAE,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,IAAE,CAAC,CAAC,WAAW,EAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;IACvJ,OAAO,CAAC,KAAK,CAAC,UAAU,EAAC,CAAC,EAAC,KAAK,CAAC,CAAC;IAAA,KAAK,CAAC,KAAK,CAAC,SAAS,EAAC,EAAE,CAAC,CAAC;IAC5D,IAAG,KAAK,CAAC,MAAM,KAAG,aAAa,EAAC,CAAC;QAC/B,IAAG,KAAK,CAAC,WAAW,KAAG,IAAI,IAAE,KAAK,CAAC,UAAU,KAAG,CAAC,IAAE,KAAK,CAAC,SAAS,CAAC,MAAM,IAAE,KAAK,CAAC,MAAM,KAAG,kCAAkC;YAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC;QACtL,OAAO,KAA6C,CAAC;IACvD,CAAC;IACD,IAAG,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,IAAE,KAAK,CAAC,MAAM,KAAG,SAAS;QAAC,IAAI,CAAC,gDAAgD,CAAC,CAAC;IAC5G,MAAM,KAAK,GAAC,gBAAgB,EAAE,EAAC,IAAI,GAAC,IAAI,GAAG,EAAU,CAAC;IACtD,KAAI,MAAM,IAAI,IAAI,KAAK,CAAC,SAAS,EAAC,CAAC;QACjC,KAAK,CAAC,IAAI,EAAC,CAAC,UAAU,EAAC,QAAQ,EAAC,aAAa,EAAC,WAAW,EAAC,aAAa,EAAC,WAAW,EAAC,WAAW,EAAC,eAAe,EAAC,aAAa,EAAC,WAAW,EAAC,6BAA6B,EAAC,cAAc,EAAC,YAAY,EAAC,gBAAgB,CAAC,CAAC,CAAC;QACvN,IAAG,OAAO,IAAI,CAAC,QAAQ,KAAG,QAAQ,IAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,QAA0B,CAAC,IAAE,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC;YAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;QAAA,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC7M,OAAO,CAAC,IAAI,CAAC,WAAW,EAAC,CAAC,EAAC,KAAK,CAAC,CAAC;QAAA,OAAO,CAAC,IAAI,CAAC,cAAc,EAAC,CAAC,EAAC,KAAK,CAAC,CAAC;QAAA,IAAG,IAAI,CAAC,SAAS,KAAG,IAAI;YAAC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAC,CAAC,EAAC,QAAQ,CAAC,CAAC;QACnI,IAAG,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,IAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAE,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,IAAE,CAAC,OAAO,CAAC,IAAI,CAAC,2BAA2B,CAAC;YAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;QACxM,IAAG,IAAI,CAAC,WAAW,KAAG,IAAI,EAAC,CAAC;YAAA,KAAK,CAAC,IAAI,CAAC,WAAW,EAAC,CAAC,IAAI,EAAC,MAAM,EAAC,YAAY,CAAC,CAAC,CAAC;YAAA,IAAG,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,IAAE,CAAC,CAAC,gBAAgB,EAAC,OAAO,EAAC,YAAY,EAAC,SAAS,EAAC,SAAS,EAAC,QAAQ,EAAC,iBAAiB,EAAC,UAAU,EAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,IAAE,IAAI,CAAC,WAAW,CAAC,UAAU,KAAG,IAAI,IAAE,CAAC,OAAO,IAAI,CAAC,WAAW,CAAC,UAAU,KAAG,QAAQ,IAAE,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,IAAE,IAAI,CAAC,WAAW,CAAC,UAAU,GAAC,GAAG,IAAE,IAAI,CAAC,WAAW,CAAC,UAAU,GAAC,GAAG,CAAC;gBAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;QAAA,CAAC;QAC5f,KAAK,CAAC,IAAI,CAAC,SAAS,EAAC,CAAC,QAAQ,EAAC,IAAI,EAAC,YAAY,CAAC,CAAC,CAAC;QAAA,IAAG,CAAC,CAAC,SAAS,EAAC,OAAO,EAAC,SAAS,EAAC,WAAW,EAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAE,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,IAAE,IAAI,CAAC,SAAS,CAAC,UAAU,KAAG,IAAI,IAAE,CAAC,OAAO,IAAI,CAAC,SAAS,CAAC,UAAU,KAAG,QAAQ,IAAE,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,IAAE,IAAI,CAAC,SAAS,CAAC,UAAU,GAAC,CAAC,IAAE,IAAI,CAAC,SAAS,CAAC,UAAU,GAAC,OAAO,CAAC;YAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;QACna,KAAK,CAAC,IAAI,CAAC,YAAY,EAAC,CAAC,OAAO,EAAC,WAAW,EAAC,cAAc,EAAC,OAAO,CAAC,CAAC,CAAC;QAAA,IAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,UAAU,CAAA,EAAE,CAAA,UAAU,KAAG,SAAS,IAAE,OAAO,UAAU,KAAG,SAAS,CAAC;YAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;QACrO,KAAK,CAAC,IAAI,CAAC,UAAU,EAAC,CAAC,QAAQ,EAAC,QAAQ,EAAC,WAAW,EAAC,UAAU,CAAC,CAAC,CAAC;QAAA,IAAG,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,KAAG,SAAS,IAAE,IAAI,CAAC,UAAU,CAAC,MAAM,KAAG,IAAI,IAAE,CAAC,CAAC,gBAAgB,EAAC,OAAO,EAAC,YAAY,EAAC,SAAS,EAAC,SAAS,EAAC,QAAQ,EAAC,iBAAiB,EAAC,UAAU,EAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,IAAE,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;YAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;QAAA,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAC,CAAC,EAAC,GAAG,CAAC,CAAC;IACra,CAAC;IACD,OAAO,KAA6C,CAAC;AACvD,CAAC"}

package/dist/supervision/index.d.ts

@@ -0,0 +1,13 @@
+export * from './types.js';
+export * from './contracts.js';
+export * from './journal.js';
+export * from './evidence.js';
+export * from './runtime.js';
+export * from './context.js';
+export * from './receipts.js';
+export * from './approval.js';
+export * from './reply.js';
+export * from './availability.js';
+export * from './effects.js';
+export * from './health.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/supervision/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/supervision/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,YAAY,CAAC;AAC3B,cAAc,mBAAmB,CAAC;AAClC,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC"}

package/dist/supervision/index.js

@@ -0,0 +1,13 @@
+export * from './types.js';
+export * from './contracts.js';
+export * from './journal.js';
+export * from './evidence.js';
+export * from './runtime.js';
+export * from './context.js';
+export * from './receipts.js';
+export * from './approval.js';
+export * from './reply.js';
+export * from './availability.js';
+export * from './effects.js';
+export * from './health.js';
+//# sourceMappingURL=index.js.map

package/dist/supervision/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/supervision/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,YAAY,CAAC;AAC3B,cAAc,mBAAmB,CAAC;AAClC,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC"}

package/dist/supervision/journal.d.ts

@@ -0,0 +1,16 @@
+import type { ProjectPlan, RunManifest } from '../orchestration/types.js';
+import type { ExecutionEvent, ExecutionProjection } from '../orchestration/coordinator-types.js';
+import type { SupervisionChange, SupervisionProjection, RetryReceipt } from './types.js';
+import type { SpawnProposal } from '../spawning/types.js';
+export declare function newSupervision(): SupervisionProjection;
+export declare function supervisionEvidence(events: ExecutionEvent[]): {
+    ids: string[];
+    hash: string;
+};
+export declare function validateSupervisionChange(value: unknown, plan: ProjectPlan): SupervisionChange;
+/** Replay checks references; the executor checks artifact bytes immediately before applying. */
+export declare function assertSupervisedRetry(plan: ProjectPlan, state: ExecutionProjection, events: ExecutionEvent[], taskId: string, receipts?: RetryReceipt[]): void;
+export declare function replaySupervisionChange(event: ExecutionEvent, plan: ProjectPlan, state: ExecutionProjection, prior: ExecutionEvent[], createdAt: number, manifest: RunManifest): void;
+/** A controller proposal is authorized by one recorded decision, never by its filename. */
+export declare function assertSupervisionProposal(proposal: SpawnProposal, state: ExecutionProjection): void;
+//# sourceMappingURL=journal.d.ts.map

package/dist/supervision/journal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"journal.d.ts","sourceRoot":"","sources":["../../src/supervision/journal.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAC,WAAW,EAAC,WAAW,EAAC,MAAM,2BAA2B,CAAC;AACvE,OAAO,KAAK,EAAC,cAAc,EAAC,mBAAmB,EAAC,MAAM,uCAAuC,CAAC;AAG9F,OAAO,KAAK,EAAC,iBAAiB,EAAC,qBAAqB,EAAC,YAAY,EAAC,MAAM,YAAY,CAAC;AACrF,OAAO,KAAK,EAAC,aAAa,EAAC,MAAM,sBAAsB,CAAC;AAExD,wBAAgB,cAAc,IAAG,qBAAqB,CAErD;AACD,wBAAgB,mBAAmB,CAAC,MAAM,EAAC,cAAc,EAAE,GAAE;IAAC,GAAG,EAAC,MAAM,EAAE,CAAC;IAAA,IAAI,EAAC,MAAM,CAAA;CAAC,CAItF;AACD,wBAAgB,yBAAyB,CAAC,KAAK,EAAC,OAAO,EAAC,IAAI,EAAC,WAAW,GAAE,iBAAiB,CAgC1F;AAED,gGAAgG;AAChG,wBAAgB,qBAAqB,CAAC,IAAI,EAAC,WAAW,EAAC,KAAK,EAAC,mBAAmB,EAAC,MAAM,EAAC,cAAc,EAAE,EAAC,MAAM,EAAC,MAAM,EAAC,QAAQ,CAAC,EAAC,YAAY,EAAE,GAAE,IAAI,CAiBpJ;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAC,cAAc,EAAC,IAAI,EAAC,WAAW,EAAC,KAAK,EAAC,mBAAmB,EAAC,KAAK,EAAC,cAAc,EAAE,EAAC,SAAS,EAAC,MAAM,EAAC,QAAQ,EAAC,WAAW,GAAE,IAAI,CA6EzK;AAED,2FAA2F;AAC3F,wBAAgB,yBAAyB,CAAC,QAAQ,EAAC,aAAa,EAAC,KAAK,EAAC,mBAAmB,GAAE,IAAI,CAM/F"}

package/dist/supervision/journal.js

@@ -0,0 +1,311 @@
+import { canonicalJson, digest } from '../approvals/index.js';
+import { array, fail, hex, integer, shape, text, uuid } from '../orchestration/validation.js';
+import { supervisionProposalHash } from './approval.js';
+import { validateSupervisionDecision } from './contracts.js';
+import { validateSupervisionHealthEvidence } from './health.js';
+export function newSupervision() {
+    return { version: 1, rounds: 0, stalledRounds: 0, phase: 'ready', evidenceIds: [], evidenceHash: null, reviewedHash: null, completedTasks: 0, forceReview: false, operatorReview: false, review: null, active: null, draft: null, decision: null, decisionId: null, halt: null, strategies: Object.create(null) };
+}
+export function supervisionEvidence(events) {
+    const latest = new Map();
+    for (const event of events)
+        if (event.change.type === 'task_finished' || event.change.type === 'task_accepted')
+            latest.set(event.change.taskId, event.id);
+    const ids = [...latest.values()];
+    return { ids, hash: digest(canonicalJson(ids)) };
+}
+export function validateSupervisionChange(value, plan) {
+    if (!plan.supervision)
+        fail('Supervision events require a reviewed supervision policy.');
+    shape(value, ['type'], ['round', 'role', 'agentId', 'sessionId', 'evidenceIds', 'evidenceHash', 'health', 'decision', 'decisionId', 'receipts', 'outcome', 'reason', 'source', 'proposalHash', 'requestAttribution']);
+    if (value.requestAttribution !== undefined && (value.type !== 'supervision_started' || value.requestAttribution !== 1))
+        fail('Invalid supervision request attribution.');
+    if (value.type === 'supervision_started' || value.type === 'supervision_decided') {
+        shape(value, ['type', 'round', 'role', 'agentId', 'sessionId', ...(value.type === 'supervision_started' ? ['evidenceIds', 'evidenceHash'] : ['decision'])], value.type === 'supervision_started' ? ['health', 'requestAttribution'] : []);
+        integer(value.round, 1, plan.supervision.maxRounds);
+        if (!['controller', 'reviewer'].includes(String(value.role)) || value.agentId !== (value.role === 'controller' ? plan.supervision.controllerId : plan.supervision.reviewerId))
+            fail('Controller event does not match its reviewed agent.');
+        text(value.sessionId, 128);
+        if (!/^[a-zA-Z0-9_-]+$/.test(value.sessionId))
+            fail('Invalid controller session.');
+        if (value.type === 'supervision_started') {
+            array(value.evidenceIds, 1024, 1);
+            if (value.evidenceIds.some(ref => !uuid(ref)) || new Set(value.evidenceIds).size !== value.evidenceIds.length || !hex(value.evidenceHash) || value.evidenceHash !== digest(canonicalJson(value.evidenceIds)))
+                fail('Invalid controller evidence snapshot.');
+            if (value.health !== undefined)
+                validateSupervisionHealthEvidence(value.health);
+        }
+    }
+    else if (value.type === 'supervision_applied') {
+        shape(value, ['type', 'round', 'decisionId', 'receipts']);
+        integer(value.round, 1, plan.supervision.maxRounds);
+        if (!uuid(value.decisionId))
+            fail('Invalid controller decision reference.');
+        array(value.receipts, 8);
+        for (const receipt of value.receipts) {
+            shape(receipt, ['artifactId', 'sha256', 'exitCode', 'outcome', 'cleanupConfirmed']);
+            text(receipt.artifactId, 64);
+            integer(receipt.exitCode, -1, 2147483647);
+            if (!hex(receipt.sha256) || !['passed', 'failed', 'timeout'].includes(String(receipt.outcome)) || receipt.cleanupConfirmed !== true)
+                fail('Automatic retries require confirmed verification cleanup.');
+        }
+    }
+    else if (value.type === 'supervision_halted') {
+        shape(value, ['type', 'round', 'outcome', 'reason']);
+        integer(value.round, 0, plan.supervision.maxRounds);
+        text(value.reason);
+        if (!['stop', 'limit', 'failed', 'denied', 'cancelled', 'interrupted'].includes(String(value.outcome)))
+            fail('Invalid supervision stop reason.');
+    }
+    else if (value.type === 'supervision_proposed' || value.type === 'supervision_approved') {
+        shape(value, ['type', 'decisionId', 'proposalHash', 'source']);
+        if (!uuid(value.decisionId) || !hex(value.proposalHash) || !['cli', 'repl'].includes(String(value.source)))
+            fail('Improvement review requires an exact proposal hash and operator source.');
+    }
+    else if (value.type === 'supervision_withdrawn') {
+        shape(value, ['type', 'decisionId', 'source']);
+        if (!uuid(value.decisionId) || !['cli', 'repl'].includes(String(value.source)))
+            fail('Improvement withdrawal requires an explicit operator and decision ID.');
+    }
+    else if (value.type === 'supervision_reset') {
+        shape(value, ['type', 'source']);
+        if (!['cli', 'repl'].includes(String(value.source)))
+            fail('Controller recovery requires an explicit operator action.');
+    }
+    else
+        fail('Unknown supervision event.');
+    return value;
+}
+/** Replay checks references; the executor checks artifact bytes immediately before applying. */
+export function assertSupervisedRetry(plan, state, events, taskId, receipts) {
+    const task = state.tasks[taskId], spec = plan.tasks.find(value => value.id === taskId), agent = plan.agents.find(value => value.id === spec?.agentId);
+    const retainedPartial = task?.status === 'review_required' && /truncat/i.test(task.output?.summary ?? '') && task.output?.checks?.length && task.output.checks.every(check => check.passed);
+    if (!task || !spec || !agent || !(task.status === 'failed' || retainedPartial) || task.escalation || task.attempts > agent.escalationPolicy.maxRetries || plan.tasks.some(other => other.dependencies.includes(taskId) && state.tasks[other.id].attempts > 0))
+        fail('Supervised retry requires a failed, unconsumed task with attempts remaining.');
+    let ancestor = agent;
+    for (let n = 0; n < plan.agents.length; n++) {
+        if (state.stoppedAgents.includes(ancestor.id) || Object.values(state.tasks).some(t => t.agentId === ancestor.id && t.escalation))
+            fail('A stopped or escalated agent cannot be retried automatically.');
+        const parent = plan.agents.find(value => value.id === ancestor.parentId);
+        if (!parent)
+            break;
+        ancestor = parent;
+    }
+    let lastStart = -1;
+    for (let i = events.length - 1; i >= 0; i--)
+        if (events[i].change.type === 'task_started' && 'taskId' in events[i].change && events[i].change.taskId === taskId) {
+            lastStart = i;
+            break;
+        }
+    const tools = new Map();
+    for (const event of events.slice(lastStart + 1))
+        if (event.change.type === 'tool' && event.change.taskId === taskId) {
+            const c = event.change;
+            if (c.stage === 'started')
+                tools.set(c.callId, { name: c.name, finished: false });
+            else if (tools.has(c.callId))
+                tools.get(c.callId).finished = true;
+        }
+    if (task.mutations && (!plan.workspace.isolation || !spec.isolation || [...tools.values()].some(tool => !tool.finished)))
+        fail('Uncertain mutation outcomes require explicit recovery.');
+    if (receipts === undefined)
+        return;
+    const artifacts = task.output?.artifacts ?? [], shellCount = [...tools.values()].filter(tool => tool.name === 'shell').length;
+    if (task.mutations && (!shellCount || receipts.length !== shellCount || !artifacts.some(a => a.id === spec.isolation?.patchArtifactId)) || !task.mutations && receipts.length)
+        fail('An isolated retry requires its original verification and patch evidence.');
+    if (new Set(receipts.map(receipt => receipt.artifactId)).size !== receipts.length)
+        fail('Duplicate retry evidence.');
+    for (const receipt of receipts)
+        if (!spec.isolation?.commands.some(command => command.artifactId === receipt.artifactId) || !artifacts.some(artifact => artifact.id === receipt.artifactId && artifact.sha256 === receipt.sha256 && artifact.kind === 'test_result'))
+            fail('Retry receipts differ from the recorded task artifacts.');
+}
+export function replaySupervisionChange(event, plan, state, prior, createdAt, manifest) {
+    const c = validateSupervisionChange(event.change, plan), s = state.supervision, policy = plan.supervision;
+    const active = () => { if (state.status !== 'running' || !state.ownerId || Object.values(state.tasks).some(task => task.status === 'running'))
+        fail('Supervision requires an owned execution barrier with no active workers.'); };
+    if (c.type === 'supervision_withdrawn') {
+        if (state.ownerId || !['ready', 'decision', 'halted'].includes(s.phase))
+            fail('Stop active execution before withdrawing an improvement.');
+        if (s.decisionId && s.decisionId !== c.decisionId)
+            fail('Resolve the current pending decision before withdrawing an older improvement.');
+        const target = prior.find(e => e.id === c.decisionId), change = target?.change;
+        if (change?.type !== 'supervision_decided' || change.role === 'controller' && policy.reviewerId || !('hypothesis' in change.decision) || prior.some(e => e.change.type === 'supervision_withdrawn' && e.change.decisionId === c.decisionId))
+            fail('Withdrawal requires an unwithdrawn final improvement decision.');
+        const d = change.decision;
+        if (d.action === 'replan' && s.strategies[d.taskId]?.decisionId === c.decisionId) {
+            const withdrawn = new Set(prior.filter(e => e.change.type === 'supervision_withdrawn').map(e => e.change.decisionId));
+            withdrawn.add(c.decisionId);
+            delete s.strategies[d.taskId];
+            for (const applied of [...prior].reverse())
+                if (applied.change.type === 'supervision_applied' && !withdrawn.has(applied.change.decisionId)) {
+                    const decision = prior.find(e => e.id === applied.change.decisionId), value = decision?.change;
+                    if (value?.type === 'supervision_decided' && value.decision.action === 'replan' && value.decision.taskId === d.taskId) {
+                        s.strategies[d.taskId] = { decisionId: decision.id, strategy: value.decision.strategy, evidence: [...value.decision.evidence] };
+                        break;
+                    }
+                }
+        }
+        if (d.action === 'decompose')
+            for (const agent of d.children.agents)
+                if (state.graph?.plan.agents.some(a => a.id === agent.id) && !state.stoppedAgents.includes(agent.id))
+                    state.stoppedAgents.push(agent.id);
+        // A withdrawal is a restriction: retain evidence, allocations and task outcomes, then stop.
+        s.phase = 'halted';
+        s.operatorReview = false;
+        s.review = null;
+        s.active = null;
+        s.decision = null;
+        s.decisionId = null;
+        s.draft = null;
+        s.halt = { outcome: 'stop', reason: 'An improvement was withdrawn by the operator; inspect retained results before explicit recovery.' };
+        return;
+    }
+    if (c.type === 'supervision_reset') {
+        if (state.ownerId || s.phase !== 'halted' || !s.decision && s.rounds >= policy.maxRounds || Date.parse(event.at) >= state.deadline)
+            fail('Controller recovery requires an inactive, unexpired run with rounds remaining.');
+        s.phase = s.decision ? 'decision' : 'ready';
+        s.active = null;
+        s.halt = null;
+        s.forceReview = !s.decision;
+        if (!s.decision) {
+            s.draft = null;
+            s.decisionId = null;
+        }
+        return;
+    }
+    active();
+    if (c.type === 'supervision_proposed' || c.type === 'supervision_approved') {
+        const decision = prior.find(e => e.id === c.decisionId);
+        if (s.phase !== 'decision' || s.decisionId !== c.decisionId || !s.decision || !('hypothesis' in s.decision) || !decision || Date.parse(event.at) >= state.deadline || c.proposalHash !== supervisionProposalHash(manifest, decision, state.deadline))
+            fail('Improvement review differs from the current unexpired proposal.');
+        if (c.type === 'supervision_proposed') {
+            if (s.review?.announced)
+                fail('This proposal already has a review hold.');
+            s.review = { decisionId: c.decisionId, proposalHash: c.proposalHash, approved: false, announced: true };
+        }
+        else {
+            if (!s.review || s.review.approved || s.review.decisionId !== c.decisionId || s.review.proposalHash !== c.proposalHash)
+                fail('Approval requires its pending proposal hold.');
+            s.review.approved = true;
+            s.operatorReview = false;
+        }
+        return;
+    }
+    if (c.type === 'supervision_started') {
+        const evidence = supervisionEvidence(prior);
+        if (canonicalJson(c.evidenceIds) !== canonicalJson(evidence.ids) || c.evidenceHash !== evidence.hash || Date.parse(event.at) >= state.deadline)
+            fail('Controller evidence changed or its deadline expired.');
+        const account = plan.agents.find(a => a.id === c.agentId);
+        let ancestor = account;
+        for (let n = 0; n < plan.agents.length; n++) {
+            if (c.role === 'controller' && (state.stoppedAgents.includes(ancestor.id) || Object.values(state.tasks).some(task => task.agentId === ancestor.id && (task.escalation || task.status === 'denied'))))
+                fail('Stopped agents cannot supervise.');
+            const parent = plan.agents.find(a => a.id === ancestor.parentId);
+            if (!parent)
+                break;
+            ancestor = parent;
+        }
+        if (Date.parse(event.at) >= createdAt + account.timeBudgetMs)
+            fail('Controller account deadline expired.');
+        if (c.role === 'controller') {
+            if (s.phase !== 'ready' || c.round !== s.rounds + 1 || !s.forceReview && s.reviewedHash === evidence.hash)
+                fail('Controller round is duplicated or not ready.');
+            const completed = Object.values(state.tasks).filter(task => task.status === 'completed').length;
+            if (completed <= s.completedTasks && s.stalledRounds >= policy.maxStalledRounds)
+                fail('Controller stalled-round limit reached.');
+            s.stalledRounds = completed > s.completedTasks ? 0 : s.stalledRounds + 1;
+            s.completedTasks = completed;
+            s.rounds = c.round;
+            s.evidenceIds = [...c.evidenceIds];
+            s.evidenceHash = c.evidenceHash;
+            s.draft = null;
+            s.decision = null;
+            s.decisionId = null;
+            s.forceReview = false;
+        }
+        else if (s.phase !== 'draft-ready' || c.round !== s.rounds || s.evidenceHash !== c.evidenceHash)
+            fail('Reviewer needs the recorded controller draft in this round.');
+        s.phase = c.role;
+        s.active = { agentId: c.agentId, sessionId: c.sessionId, role: c.role };
+    }
+    else if (c.type === 'supervision_decided') {
+        if (Date.parse(event.at) >= Math.min(state.deadline, createdAt + plan.agents.find(a => a.id === c.agentId).timeBudgetMs))
+            fail('Controller result arrived after its original deadline.');
+        if (c.round !== s.rounds || s.phase !== c.role || s.active?.agentId !== c.agentId || s.active.sessionId !== c.sessionId || s.evidenceHash !== supervisionEvidence(prior).hash)
+            fail('Controller result does not match its active evidence snapshot.');
+        const decision = validateSupervisionDecision(c.decision, policy, plan, new Set(s.evidenceIds));
+        s.active = null;
+        if (c.role === 'controller' && policy.reviewerId) {
+            s.draft = decision;
+            s.phase = 'draft-ready';
+        }
+        else {
+            s.decision = decision;
+            s.decisionId = event.id;
+            s.phase = 'decision';
+            if (s.operatorReview) {
+                if ('hypothesis' in decision)
+                    s.review = { decisionId: event.id, proposalHash: supervisionProposalHash(manifest, event, state.deadline), approved: false, announced: false };
+                else
+                    s.operatorReview = false;
+            }
+        }
+    }
+    else if (c.type === 'supervision_applied') {
+        if (Date.parse(event.at) >= state.deadline)
+            fail('Controller action exceeded the original run deadline.');
+        if (s.phase !== 'decision' || c.round !== s.rounds || s.decisionId !== c.decisionId || !s.decision)
+            fail('Controller action has no unapplied decision.');
+        const d = s.decision;
+        if (s.review && !s.review.approved)
+            fail('The proposed improvement requires its exact reviewed approval.');
+        s.review = null;
+        if (d.action === 'retry' || d.action === 'replan') {
+            assertSupervisedRetry(plan, state, prior, d.taskId, c.receipts);
+            const last = [...prior].reverse().find(e => e.change.type === 'task_finished' && e.change.taskId === d.taskId);
+            if (!last || !d.evidence.includes(last.id))
+                fail('A retry must reference the current failed attempt.');
+            const task = state.tasks[d.taskId];
+            task.status = 'pending';
+            task.output = null;
+            task.artifactIds = [];
+            task.changedFiles = [];
+            task.mutations = false;
+            task.escalation = null;
+            if (d.action === 'replan')
+                s.strategies[d.taskId] = { decisionId: c.decisionId, strategy: d.strategy, evidence: [...d.evidence] };
+        }
+        else {
+            if (c.receipts.length)
+                fail('Only retry decisions may carry verification receipts.');
+            if (d.action === 'decompose' && !state.graph?.admissions.some(admission => admission.proposal.source.eventId === c.decisionId))
+                fail('Child decomposition needs a recorded budget-backed graph admission.');
+        }
+        s.phase = d.action === 'stop' ? 'halted' : 'ready';
+        s.reviewedHash = s.evidenceHash;
+        if (d.action === 'stop')
+            s.halt = { outcome: 'stop', reason: d.reason };
+        s.decision = null;
+        s.decisionId = null;
+        s.draft = null;
+    }
+    else if (c.type === 'supervision_halted') {
+        if (c.round !== s.rounds)
+            fail('Controller stop refers to another round.');
+        s.phase = 'halted';
+        s.active = null;
+        s.halt = { outcome: c.outcome, reason: c.reason };
+    }
+}
+/** A controller proposal is authorized by one recorded decision, never by its filename. */
+export function assertSupervisionProposal(proposal, state) {
+    const s = state.supervision, d = s?.decision;
+    if (proposal.source.kind !== 'supervision' || !s || s.phase !== 'decision' || s.decisionId !== proposal.source.eventId || !d || d.action !== 'decompose' || !state.ownerId || state.status !== 'running' || Object.values(state.tasks).some(task => task.status === 'running'))
+        fail('Child admission requires the active, recorded controller decision.');
+    if (s.review && !s.review.approved)
+        fail('Child admission requires the exact reviewed improvement approval.');
+    const children = { version: proposal.version, parentId: proposal.parentId, agents: proposal.agents, tasks: proposal.tasks };
+    if (canonicalJson(children) !== canonicalJson(d.children) || proposal.source.sha256 !== digest(canonicalJson(d.children)))
+        fail('Child proposal differs from the recorded controller decision.');
+}
+//# sourceMappingURL=journal.js.map