@calliopelabs/cli 3.1.0 → 3.2.1

package/dist/orchestration/recovery.js

@@ -0,0 +1,121 @@
+import { coordinatorProgress } from './progress.js';
+import { join } from 'node:path';
+import { digest } from '../approvals/index.js';
+import { throwIfCancelled, isCancellation } from '../cancellation.js';
+import { ExecutionGuard, ExecutionLimitError, ReservationLedger } from '../execution/index.js';
+import { readPinnedWorktreeBase, WorkerWorktree, worktreeGit, verifyInWorktree } from '../isolation/index.js';
+import { authorizeSessionAction, SessionPolicyError } from '../session-management/index.js';
+import { inspectExecution } from './coordinator-actions.js';
+import { prepareAgentExecution } from './execution.js';
+import { agentStopped } from './execution-journal.js';
+import { collectStoppedTaskOutput, checkArtifactSnapshot, workerSummary } from './verification.js';
+import { permits } from './validation.js';
+import { OrchestrationError } from './types.js';
+/** One evidence-only recovery of a legacy cutoff; no model call, retry or new clock. */
+export async function recoverTaskEvidence(cwd, runId, taskId, options = {}) {
+    const initial = await inspectExecution(cwd, runId, options), { store, view } = initial, prior = initial.execution;
+    if (!prior)
+        throw new OrchestrationError('unavailable', 'Run has no execution history.');
+    const context = store.context(prior), task = context.plan.tasks.find(t => t.id === taskId), state = prior.state.tasks[taskId];
+    if (!task)
+        throw new OrchestrationError('invalid', 'Unknown execution task.');
+    const outcome = [...prior.events].reverse().find(e => e.change.type === 'task_finished' && e.change.taskId === taskId);
+    if (prior.state.ownerId || !task.isolation || state?.status !== 'failed' || !state.mutations || state.output?.summary !== 'Worker stopped: length.' || state.artifactIds.length || !outcome)
+        throw new OrchestrationError('conflict', 'Recovery requires an inactive isolated cutoff attempt without receipts.');
+    const agent = context.plan.agents.find(a => a.id === task.agentId), workspaceRoot = join(store.root, `worker-${task.id}-${state.attempts}`);
+    // Read first: a missing ledger or baseline is not permission to recreate it.
+    new ReservationLedger(join(store.root, '..', 'budget')).read(cwd);
+    const base = readPinnedWorktreeBase(store.root, view.manifest.project.root, view.manifest.planHash);
+    const workspace = new WorkerWorktree(workspaceRoot, view.manifest.project.root, base);
+    const operation = `Recover evidence for run ${runId}, task ${taskId}, attempt ${state.attempts}\nOriginal outcome: ${outcome.id}\nWorktree: ${workspace.filesRoot}\nBaseline: ${base}\nPaths: ${agent.allowedPaths.map(p => p.path + ' (' + p.access + ')').join(', ')}\nImage: ${context.plan.workspace.isolation.image}\nCommands: ${task.isolation.commands.map(c => JSON.stringify(c.argv)).join('; ')}\nNo model calls; original budgets and deadlines remain in force.`;
+    await authorizeSessionAction(cwd, 'orchestration_evidence_recovery', { path: cwd, operation, runId, taskId, outcomeId: outcome.id, revision: prior.state.revision, planHash: view.manifest.planHash, workspace: workspace.filesRoot, base, attempt: state.attempts, commands: task.isolation.commands, paths: agent.allowedPaths }, { ...options, confirmation: 'mutating' });
+    const authority = await prepareAgentExecution(cwd, runId, agent.id, 1, options), lease = store.acquire(), controller = new AbortController();
+    let began = false, timedOut = false, authorityFailure, eventCursor = prior.events.length;
+    const abort = () => controller.abort();
+    options.signal?.addEventListener('abort', abort, { once: true });
+    if (options.signal?.aborted)
+        abort();
+    const assertAuthority = () => {
+        lease.check();
+        authority.assertAuthority?.();
+        store.assertApproval(prior.header);
+        const current = store.read();
+        if (agentStopped(current.state, store.context(current), agent.id) || began && (current.state.ownerId !== lease.id || current.state.tasks[taskId]?.status !== 'running'))
+            throw new ExecutionLimitError('authority', 'Evidence recovery ownership or agent authority changed.');
+        if (!began && current.state.revision !== prior.state.revision)
+            throw new OrchestrationError('conflict', 'Execution changed before evidence recovery.');
+    };
+    let timer, deadline;
+    const notify = () => { const execution = store.read(); for (const event of execution.events)
+        if (event.sequence > eventCursor) {
+            options.onEvent?.(event);
+            eventCursor = event.sequence;
+        } options.onProgress?.(coordinatorProgress(store, execution)); return execution; };
+    const append = async (change, verify = false) => {
+        await store.append(change, undefined, undefined, () => { lease.check(); if (verify) {
+            throwIfCancelled(controller.signal);
+            assertAuthority();
+            if (change.type === 'task_finished')
+                for (const artifact of change.output.artifacts)
+                    checkArtifactSnapshot(store, artifact);
+        } });
+        notify();
+    };
+    try {
+        const guard = new ExecutionGuard({ ...authority, workspace, assertAuthority }, cwd);
+        deadline = setTimeout(() => { timedOut = true; controller.abort(); }, Math.max(0, guard.deadline - Date.now()));
+        timer = setInterval(() => { try {
+            guard.assertActive(controller.signal);
+        }
+        catch (error) {
+            authorityFailure ??= error;
+            controller.abort();
+        } }, 100);
+        guard.assertActive(controller.signal);
+        const patch = await workspace.patch(controller.signal), changed = (await worktreeGit(workspace.filesRoot, ['diff', '--cached', '--name-only', '--no-renames', '-z', base, '--'], controller.signal)).split('\0').filter(Boolean);
+        if (changed.some(path => !state.changedFiles.includes(path) || !permits(agent.allowedPaths, path, 'write')))
+            throw new OrchestrationError('conflict', 'Retained workspace includes unrecorded or unauthorized changes; preserve it for manual inspection.');
+        const snapshot = workspace.snapshot(agent.allowedPaths, controller.signal);
+        await authorizeSessionAction(cwd, 'orchestration_evidence_recovery', { path: cwd, operation: operation + `\nPatch SHA-256: ${digest(patch)}\nWorkspace SHA-256: ${snapshot}`, runId, taskId, outcomeId: outcome.id, revision: prior.state.revision, workspace: workspace.filesRoot, base, patchHash: digest(patch), snapshot, commands: task.isolation.commands }, { ...options, signal: controller.signal, confirmation: 'mutating' });
+        guard.assertActive(controller.signal);
+        if (workspace.snapshot(agent.allowedPaths, controller.signal) !== snapshot || await workspace.patch(controller.signal) !== patch)
+            throw new OrchestrationError('conflict', 'Retained workspace changed during recovery approval.');
+        await store.appendBatch([{ change: { type: 'started', ownerId: lease.id } }, { change: { type: 'task_recovery_started', taskId, outcomeId: outcome.id } }], controller.signal, () => guard.assertActive(controller.signal));
+        began = true;
+        notify();
+        const recoveryOptions = { ...options, signal: controller.signal, workspace };
+        const executorOutputs = await verifyInWorktree(store, task, workspace, guard, { ...recoveryOptions, expectedWorkspaceHash: snapshot });
+        if (workspace.snapshot(agent.allowedPaths, controller.signal) !== snapshot || executorOutputs.get(task.isolation.patchArtifactId) !== patch)
+            throw new OrchestrationError('conflict', 'Retained workspace changed during recovery verification.');
+        const output = await collectStoppedTaskOutput(store, task, { ...recoveryOptions, executorOutputs });
+        output.summary = 'Recovered current retained workspace evidence after a worker output cutoff; the original report remains incomplete.';
+        // Evidence recovery closes the legacy cutoff attempt as failed. The
+        // retained checks stay attached to the output, but acceptance belongs to
+        // the subsequent bounded controller/worker attempt.
+        const recoveredOutput = output.status === 'partial' ? { ...output, status: 'failed' } : output;
+        await append({ type: 'task_finished', taskId, status: 'failed', output: recoveredOutput }, true);
+        began = false;
+        await append({ type: 'finished', ownerId: lease.id, status: 'failed' });
+        return notify();
+    }
+    catch (error) {
+        const failure = timedOut ? new ExecutionLimitError('deadline', 'Original evidence recovery deadline expired.') : authorityFailure ?? error;
+        if (began) {
+            const status = options.signal?.aborted ? 'cancelled' : timedOut || authorityFailure ? 'denied' : isCancellation(failure) ? 'cancelled' : failure instanceof SessionPolicyError || failure instanceof ExecutionLimitError ? 'denied' : 'failed';
+            const current = store.read().state, t = current.tasks[taskId];
+            const output = { version: 1, taskId, agentId: agent.id, status, summary: workerSummary(failure instanceof Error ? failure.message : 'Evidence recovery failed.'), changedFiles: [...t.changedFiles], artifacts: t.artifactIds.map(id => current.artifacts[id]), testEvidence: [], checks: [], unresolvedRisks: ['Evidence recovery did not complete; inspect the retained workspace and any process receipts.'], recommendedNextAction: 'Preserve this attempt; its one evidence recovery was consumed. No worker success was accepted.' };
+            await append({ type: 'task_finished', taskId, status, output });
+            began = false;
+            await append({ type: 'finished', ownerId: lease.id, status });
+        }
+        throw failure;
+    }
+    finally {
+        clearInterval(timer);
+        clearTimeout(deadline);
+        controller.abort();
+        options.signal?.removeEventListener('abort', abort);
+        lease.release();
+    }
+}
+//# sourceMappingURL=recovery.js.map

package/dist/orchestration/recovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recovery.js","sourceRoot":"","sources":["../../src/orchestration/recovery.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,mBAAmB,EAAC,MAAM,eAAe,CAAC;AAClD,OAAO,EAAC,IAAI,EAAC,MAAM,WAAW,CAAC;AAC/B,OAAO,EAAC,MAAM,EAAC,MAAM,uBAAuB,CAAC;AAC7C,OAAO,EAAC,gBAAgB,EAAC,cAAc,EAAC,MAAM,oBAAoB,CAAC;AACnE,OAAO,EAAC,cAAc,EAAC,mBAAmB,EAAC,iBAAiB,EAAC,MAAM,uBAAuB,CAAC;AAC3F,OAAO,EAAC,sBAAsB,EAAC,cAAc,EAAC,WAAW,EAAC,gBAAgB,EAAC,MAAM,uBAAuB,CAAC;AACzG,OAAO,EAAC,sBAAsB,EAAC,kBAAkB,EAAC,MAAM,gCAAgC,CAAC;AACzF,OAAO,EAAC,gBAAgB,EAAC,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAC,qBAAqB,EAAC,MAAM,gBAAgB,CAAC;AACrD,OAAO,EAAC,YAAY,EAAC,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAC,wBAAwB,EAAC,qBAAqB,EAAC,aAAa,EAAC,MAAM,mBAAmB,CAAC;AAC/F,OAAO,EAAC,OAAO,EAAC,MAAM,iBAAiB,CAAC;AACxC,OAAO,EAAC,kBAAkB,EAAC,MAAM,YAAY,CAAC;AAI9C,wFAAwF;AACxF,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,GAAU,EAAC,KAAY,EAAC,MAAa,EAAC,OAAO,GAAoB,EAAE;IAC3G,MAAM,OAAO,GAAC,MAAM,gBAAgB,CAAC,GAAG,EAAC,KAAK,EAAC,OAAO,CAAC,EAAC,EAAC,KAAK,EAAC,IAAI,EAAC,GAAC,OAAO,EAAC,KAAK,GAAC,OAAO,CAAC,SAAS,CAAC;IACrG,IAAG,CAAC,KAAK;QAAC,MAAM,IAAI,kBAAkB,CAAC,aAAa,EAAC,+BAA+B,CAAC,CAAC;IACtF,MAAM,OAAO,GAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAC,IAAI,GAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,EAAE,KAAG,MAAM,CAAC,EAAC,KAAK,GAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAClH,IAAG,CAAC,IAAI;QAAC,MAAM,IAAI,kBAAkB,CAAC,SAAS,EAAC,yBAAyB,CAAC,CAAC;IAC3E,MAAM,OAAO,GAAC,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,MAAM,CAAC,IAAI,KAAG,eAAe,IAAE,CAAC,CAAC,MAAM,CAAC,MAAM,KAAG,MAAM,CAAC,CAAC;IAC7G,IAAG,KAAK,CAAC,KAAK,CAAC,OAAO,IAAE,CAAC,IAAI,CAAC,SAAS,IAAE,KAAK,EAAE,MAAM,KAAG,QAAQ,IAAE,CAAC,KAAK,CAAC,SAAS,IAAE,KAAK,CAAC,MAAM,EAAE,OAAO,KAAG,yBAAyB,IAAE,KAAK,CAAC,WAAW,CAAC,MAAM,IAAE,CAAC,OAAO;QACxK,MAAM,IAAI,kBAAkB,CAAC,UAAU,EAAC,yEAAyE,CAAC,CAAC;IACrH,MAAM,KAAK,GAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,EAAE,KAAG,IAAI,CAAC,OAAO,CAAE,EAAC,aAAa,GAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAC,UAAU,IAAI,CAAC,EAAE,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;IACnI,6EAA6E;IAC7E,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAC,IAAI,EAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChE,MAAM,IAAI,GAAC,sBAAsB,CAAC,KAAK,CAAC,IAAI,EAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAChG,MAAM,SAAS,GAAC,IAAI,cAAc,CAAC,aAAa,EAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAC,IAAI,CAAC,CAAC;IAClF,MAAM,SAAS,GAAC,4BAA4B,KAAK,UAAU,MAAM,aAAa,KAAK,CAAC,QAAQ,uBAAuB,OAAO,CAAC,EAAE,eAAe,SAAS,CAAC,SAAS,eAAe,IAAI,YAAY,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,IAAI,GAAC,IAAI,GAAC,CAAC,CAAC,MAAM,GAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,SAAU,CAAC,KAAK,eAAe,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAA,EAAE,CAAA,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,mEAAmE,CAAC;IACnc,MAAM,sBAAsB,CAAC,GAAG,EAAC,iCAAiC,EAAC,EAAC,IAAI,EAAC,GAAG,EAAC,SAAS,EAAC,KAAK,EAAC,MAAM,EAAC,SAAS,EAAC,OAAO,CAAC,EAAE,EAAC,QAAQ,EAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAC,QAAQ,EAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAC,SAAS,EAAC,SAAS,CAAC,SAAS,EAAC,IAAI,EAAC,OAAO,EAAC,KAAK,CAAC,QAAQ,EAAC,QAAQ,EAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAC,KAAK,EAAC,KAAK,CAAC,YAAY,EAAC,EAAE,EAAC,GAAG,OAAO,EAAC,YAAY,EAAC,UAAU,EAAC,CAAC,CAAC;IACnV,MAAM,SAAS,GAAC,MAAM,qBAAqB,CAAC,GAAG,EAAC,KAAK,EAAC,KAAK,CAAC,EAAE,EAAC,CAAC,EAAC,OAAO,CAAC,EAAC,KAAK,GAAC,KAAK,CAAC,OAAO,EAAE,EAAC,UAAU,GAAC,IAAI,eAAe,EAAE,CAAC;IACjI,IAAI,KAAK,GAAC,KAAK,EAAC,QAAQ,GAAC,KAAK,EAAC,gBAAwB,EAAC,WAAW,GAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC;IACxF,MAAM,KAAK,GAAC,GAAE,EAAE,CAAA,UAAU,CAAC,KAAK,EAAE,CAAC;IAAA,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAC,KAAK,EAAC,EAAC,IAAI,EAAC,IAAI,EAAC,CAAC,CAAC;IAAA,IAAG,OAAO,CAAC,MAAM,EAAE,OAAO;QAAC,KAAK,EAAE,CAAC;IAClI,MAAM,eAAe,GAAC,GAAE,EAAE;QACxB,KAAK,CAAC,KAAK,EAAE,CAAC;QAAA,SAAS,CAAC,eAAe,EAAE,EAAE,CAAC;QAAA,KAAK,CAAC,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC/E,MAAM,OAAO,GAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAC3B,IAAG,YAAY,CAAC,OAAO,CAAC,KAAK,EAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAC,KAAK,CAAC,EAAE,CAAC,IAAE,KAAK,IAAE,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,KAAG,KAAK,CAAC,EAAE,IAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,MAAM,KAAG,SAAS,CAAC;YAAC,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,yDAAyD,CAAC,CAAC;QAChQ,IAAG,CAAC,KAAK,IAAE,OAAO,CAAC,KAAK,CAAC,QAAQ,KAAG,KAAK,CAAC,KAAK,CAAC,QAAQ;YAAC,MAAM,IAAI,kBAAkB,CAAC,UAAU,EAAC,6CAA6C,CAAC,CAAC;IAClJ,CAAC,CAAC;IACF,IAAI,KAA8C,EAAC,QAAgD,CAAC;IACpG,MAAM,MAAM,GAAC,GAAE,EAAE,GAAC,MAAM,SAAS,GAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAA,KAAI,MAAM,KAAK,IAAI,SAAS,CAAC,MAAM;QAAC,IAAG,KAAK,CAAC,QAAQ,GAAC,WAAW,EAAC,CAAC;YAAA,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC;YAAA,WAAW,GAAC,KAAK,CAAC,QAAQ,CAAC;QAAA,CAAC,CAAA,OAAO,CAAC,UAAU,EAAE,CAAC,mBAAmB,CAAC,KAAK,EAAC,SAAS,CAAC,CAAC,CAAC,CAAA,OAAO,SAAS,CAAC,CAAA,CAAC,CAAC;IACrP,MAAM,MAAM,GAAC,KAAK,EAAC,MAAyC,EAAC,MAAM,GAAC,KAAK,EAAC,EAAE;QAC1E,MAAM,KAAK,CAAC,MAAM,CAAC,MAAM,EAAC,SAAS,EAAC,SAAS,EAAC,GAAE,EAAE,GAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAA,IAAG,MAAM,EAAC,CAAC;YAAA,gBAAgB,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YAAA,eAAe,EAAE,CAAC;YAAA,IAAG,MAAM,CAAC,IAAI,KAAG,eAAe;gBAAC,KAAI,MAAM,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS;oBAAC,qBAAqB,CAAC,KAAK,EAAC,QAAQ,CAAC,CAAC;QAAA,CAAC,CAAA,CAAC,CAAC,CAAC;QAAA,MAAM,EAAE,CAAC;IACtQ,CAAC,CAAC;IACF,IAAI,CAAC;QACH,MAAM,KAAK,GAAC,IAAI,cAAc,CAAC,EAAC,GAAG,SAAS,EAAC,SAAS,EAAC,eAAe,EAAC,EAAC,GAAG,CAAC,CAAC;QAC7E,QAAQ,GAAC,UAAU,CAAC,GAAE,EAAE,GAAC,QAAQ,GAAC,IAAI,CAAC,CAAA,UAAU,CAAC,KAAK,EAAE,CAAC,CAAA,CAAC,EAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAC,KAAK,CAAC,QAAQ,GAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACnG,KAAK,GAAC,WAAW,CAAC,GAAE,EAAE,GAAC,IAAG,CAAC;YAAA,KAAK,CAAC,YAAY,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAAA,CAAC;QAAA,OAAM,KAAK,EAAC,CAAC;YAAA,gBAAgB,KAAG,KAAK,CAAC;YAAA,UAAU,CAAC,KAAK,EAAE,CAAC;QAAA,CAAC,CAAA,CAAC,EAAC,GAAG,CAAC,CAAC;QACnI,KAAK,CAAC,YAAY,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACtC,MAAM,KAAK,GAAC,MAAM,SAAS,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,EAAC,OAAO,GAAC,CAAC,MAAM,WAAW,CAAC,SAAS,CAAC,SAAS,EAAC,CAAC,MAAM,EAAC,UAAU,EAAC,aAAa,EAAC,cAAc,EAAC,IAAI,EAAC,IAAI,EAAC,IAAI,CAAC,EAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACpN,IAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAA,EAAE,CAAA,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAE,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,EAAC,IAAI,EAAC,OAAO,CAAC,CAAC;YAAC,MAAM,IAAI,kBAAkB,CAAC,UAAU,EAAC,oGAAoG,CAAC,CAAC;QACnP,MAAM,QAAQ,GAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,YAAY,EAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACxE,MAAM,sBAAsB,CAAC,GAAG,EAAC,iCAAiC,EAAC,EAAC,IAAI,EAAC,GAAG,EAAC,SAAS,EAAC,SAAS,GAAC,oBAAoB,MAAM,CAAC,KAAK,CAAC,wBAAwB,QAAQ,EAAE,EAAC,KAAK,EAAC,MAAM,EAAC,SAAS,EAAC,OAAO,CAAC,EAAE,EAAC,QAAQ,EAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAC,SAAS,EAAC,SAAS,CAAC,SAAS,EAAC,IAAI,EAAC,SAAS,EAAC,MAAM,CAAC,KAAK,CAAC,EAAC,QAAQ,EAAC,QAAQ,EAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAC,EAAE,EAAC,GAAG,OAAO,EAAC,MAAM,EAAC,UAAU,CAAC,MAAM,EAAC,YAAY,EAAC,UAAU,EAAC,CAAC,CAAC;QAC3Y,KAAK,CAAC,YAAY,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACtC,IAAG,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,YAAY,EAAC,UAAU,CAAC,MAAM,CAAC,KAAG,QAAQ,IAAE,MAAM,SAAS,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,KAAG,KAAK;YAAC,MAAM,IAAI,kBAAkB,CAAC,UAAU,EAAC,sDAAsD,CAAC,CAAC;QACzN,MAAM,KAAK,CAAC,WAAW,CAAC,CAAC,EAAC,MAAM,EAAC,EAAC,IAAI,EAAC,SAAS,EAAC,OAAO,EAAC,KAAK,CAAC,EAAE,EAAC,EAAC,EAAC,EAAC,MAAM,EAAC,EAAC,IAAI,EAAC,uBAAuB,EAAC,MAAM,EAAC,SAAS,EAAC,OAAO,CAAC,EAAE,EAAC,EAAC,CAAC,EAAC,UAAU,CAAC,MAAM,EAAC,GAAE,EAAE,CAAA,KAAK,CAAC,YAAY,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;QACtM,KAAK,GAAC,IAAI,CAAC;QAAA,MAAM,EAAE,CAAC;QACpB,MAAM,eAAe,GAAC,EAAC,GAAG,OAAO,EAAC,MAAM,EAAC,UAAU,CAAC,MAAM,EAAC,SAAS,EAAC,CAAC;QACtE,MAAM,eAAe,GAAC,MAAM,gBAAgB,CAAC,KAAK,EAAC,IAAI,EAAC,SAAS,EAAC,KAAK,EAAC,EAAC,GAAG,eAAe,EAAC,qBAAqB,EAAC,QAAQ,EAAC,CAAC,CAAC;QAC7H,IAAG,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,YAAY,EAAC,UAAU,CAAC,MAAM,CAAC,KAAG,QAAQ,IAAE,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,KAAG,KAAK;YAAC,MAAM,IAAI,kBAAkB,CAAC,UAAU,EAAC,0DAA0D,CAAC,CAAC;QACxO,MAAM,MAAM,GAAC,MAAM,wBAAwB,CAAC,KAAK,EAAC,IAAI,EAAC,EAAC,GAAG,eAAe,EAAC,eAAe,EAAC,CAAC,CAAC;QAC7F,MAAM,CAAC,OAAO,GAAC,qHAAqH,CAAC;QACrI,oEAAoE;QACpE,yEAAyE;QACzE,oDAAoD;QACpD,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAC,GAAG,MAAM,EAAC,MAAM,EAAC,QAAiB,EAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QACpG,MAAM,MAAM,CAAC,EAAC,IAAI,EAAC,eAAe,EAAC,MAAM,EAAC,MAAM,EAAC,QAAQ,EAAC,MAAM,EAAC,eAAe,EAAC,EAAC,IAAI,CAAC,CAAC;QAAA,KAAK,GAAC,KAAK,CAAC;QACpG,MAAM,MAAM,CAAC,EAAC,IAAI,EAAC,UAAU,EAAC,OAAO,EAAC,KAAK,CAAC,EAAE,EAAC,MAAM,EAAC,QAAQ,EAAC,CAAC,CAAC;QAAA,OAAO,MAAM,EAAE,CAAC;IACnF,CAAC;IAAA,OAAM,KAAK,EAAC,CAAC;QACZ,MAAM,OAAO,GAAC,QAAQ,CAAA,CAAC,CAAA,IAAI,mBAAmB,CAAC,UAAU,EAAC,8CAA8C,CAAC,CAAA,CAAC,CAAA,gBAAgB,IAAE,KAAK,CAAC;QAClI,IAAG,KAAK,EAAC,CAAC;YACR,MAAM,MAAM,GAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAA,CAAC,CAAA,WAAW,CAAA,CAAC,CAAA,QAAQ,IAAE,gBAAgB,CAAA,CAAC,CAAA,QAAQ,CAAA,CAAC,CAAA,cAAc,CAAC,OAAO,CAAC,CAAA,CAAC,CAAA,WAAW,CAAA,CAAC,CAAA,OAAO,YAAY,kBAAkB,IAAE,OAAO,YAAY,mBAAmB,CAAA,CAAC,CAAA,QAAQ,CAAA,CAAC,CAAA,QAAQ,CAAC;YACzN,MAAM,OAAO,GAAC,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,EAAC,CAAC,GAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAE,CAAC;YAC1D,MAAM,MAAM,GAAY,EAAC,OAAO,EAAC,CAAC,EAAC,MAAM,EAAC,OAAO,EAAC,KAAK,CAAC,EAAE,EAAC,MAAM,EAAC,OAAO,EAAC,aAAa,CAAC,OAAO,YAAY,KAAK,CAAA,CAAC,CAAA,OAAO,CAAC,OAAO,CAAA,CAAC,CAAA,2BAA2B,CAAC,EAAC,YAAY,EAAC,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,EAAC,SAAS,EAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAA,EAAE,CAAA,OAAO,CAAC,SAAS,CAAC,EAAE,CAAE,CAAC,EAAC,YAAY,EAAC,EAAE,EAAC,MAAM,EAAC,EAAE,EAAC,eAAe,EAAC,CAAC,8FAA8F,CAAC,EAAC,qBAAqB,EAAC,gGAAgG,EAAC,CAAC;YAC1f,MAAM,MAAM,CAAC,EAAC,IAAI,EAAC,eAAe,EAAC,MAAM,EAAC,MAAM,EAAC,MAAM,EAAC,CAAC,CAAC;YAAA,KAAK,GAAC,KAAK,CAAC;YAAA,MAAM,MAAM,CAAC,EAAC,IAAI,EAAC,UAAU,EAAC,OAAO,EAAC,KAAK,CAAC,EAAE,EAAC,MAAM,EAAC,CAAC,CAAC;QAChI,CAAC;QACD,MAAM,OAAO,CAAC;IAChB,CAAC;YAAO,CAAC;QAAA,aAAa,CAAC,KAAK,CAAC,CAAC;QAAA,YAAY,CAAC,QAAQ,CAAC,CAAC;QAAA,UAAU,CAAC,KAAK,EAAE,CAAC;QAAA,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAC,KAAK,CAAC,CAAC;QAAA,KAAK,CAAC,OAAO,EAAE,CAAC;IAAA,CAAC;AAC9I,CAAC"}

package/dist/orchestration/request-accounting.d.ts

@@ -0,0 +1,35 @@
+import type { AccountSpend, RequestAttribution, ReservationLedger } from '../execution/index.js';
+import type { ExecutionInspection, RunPlanContext } from './coordinator-types.js';
+export type AttributedCharge = {
+    source: RequestAttribution;
+    agentId: string;
+} & ({
+    status: 'available';
+    accounted: AccountSpend;
+    requestIds: string[];
+    requests: {
+        pending: number;
+        settled: number;
+        unknown: number;
+        exceeded: number;
+    };
+    closed: boolean;
+    usageComplete: boolean;
+} | {
+    status: 'unavailable';
+    reason: string;
+});
+export type RequestAccounting = {
+    version: 1;
+    status: 'available';
+    revision: string;
+    executionRevision: string;
+    groups: Record<string, AttributedCharge>;
+} | {
+    version: 1;
+    status: 'unavailable';
+    reason: string;
+};
+/** Requires validated, matching execution and budget histories. Never infers ownership from time. */
+export declare function attributeRequests(budget: ReturnType<ReservationLedger['read']>, execution: ExecutionInspection, context: RunPlanContext): RequestAccounting;
+//# sourceMappingURL=request-accounting.d.ts.map

package/dist/orchestration/request-accounting.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-accounting.d.ts","sourceRoot":"","sources":["../../src/orchestration/request-accounting.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAC,YAAY,EAAC,kBAAkB,EAAC,iBAAiB,EAAC,MAAM,uBAAuB,CAAC;AAC7F,OAAO,KAAK,EAAC,mBAAmB,EAAC,cAAc,EAAC,MAAM,wBAAwB,CAAC;AAE/E,MAAM,MAAM,gBAAgB,GAAG;IAC7B,MAAM,EAAC,kBAAkB,CAAC;IAAA,OAAO,EAAC,MAAM,CAAC;CAC1C,GAAG,CAAC;IAAC,MAAM,EAAC,WAAW,CAAC;IAAA,SAAS,EAAC,YAAY,CAAC;IAAA,UAAU,EAAC,MAAM,EAAE,CAAC;IAAA,QAAQ,EAAC;QAAC,OAAO,EAAC,MAAM,CAAC;QAAA,OAAO,EAAC,MAAM,CAAC;QAAA,OAAO,EAAC,MAAM,CAAC;QAAA,QAAQ,EAAC,MAAM,CAAA;KAAC,CAAC;IAAA,MAAM,EAAC,OAAO,CAAC;IAAA,aAAa,EAAC,OAAO,CAAA;CAAC,GAC9K;IAAC,MAAM,EAAC,aAAa,CAAC;IAAA,MAAM,EAAC,MAAM,CAAA;CAAC,CAAC,CAAC;AACzC,MAAM,MAAM,iBAAiB,GAAG;IAAC,OAAO,EAAC,CAAC,CAAC;IAAA,MAAM,EAAC,WAAW,CAAC;IAAA,QAAQ,EAAC,MAAM,CAAC;IAAA,iBAAiB,EAAC,MAAM,CAAC;IAAA,MAAM,EAAC,MAAM,CAAC,MAAM,EAAC,gBAAgB,CAAC,CAAA;CAAC,GAC3I;IAAC,OAAO,EAAC,CAAC,CAAC;IAAA,MAAM,EAAC,aAAa,CAAC;IAAA,MAAM,EAAC,MAAM,CAAA;CAAC,CAAC;AAElD,qGAAqG;AACrG,wBAAgB,iBAAiB,CAAC,MAAM,EAAC,UAAU,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,EAAC,SAAS,EAAC,mBAAmB,EAAC,OAAO,EAAC,cAAc,GAAE,iBAAiB,CAuCrJ"}

package/dist/orchestration/request-accounting.js

@@ -0,0 +1,71 @@
+import { canonicalJson } from '../approvals/index.js';
+/** Requires validated, matching execution and budget histories. Never infers ownership from time. */
+export function attributeRequests(budget, execution, context) {
+    try {
+        if (budget.manifest.runId !== context.id || execution.header.runId !== context.id)
+            throw new Error('Foreign history.');
+        const starts = new Map(), activeTasks = new Map();
+        let activeReview;
+        for (const event of execution.events) {
+            const c = event.change;
+            if (c.type === 'task_started') {
+                activeTasks.set(c.taskId, event.id);
+                if (c.requestAttribution === 1) {
+                    const agentId = context.plan.tasks.find(t => t.id === c.taskId).agentId;
+                    starts.set(event.id, { source: { version: 1, kind: 'task', eventId: event.id, eventHash: event.hash, sessionId: c.sessionId, taskId: c.taskId, attempt: c.attempt }, agentId, at: Date.parse(event.at) });
+                }
+            }
+            else if (c.type === 'supervision_started') {
+                activeReview = event.id;
+                if (c.requestAttribution === 1)
+                    starts.set(event.id, { source: { version: 1, kind: 'supervision', eventId: event.id, eventHash: event.hash, sessionId: c.sessionId, role: c.role, round: c.round }, agentId: c.agentId, at: Date.parse(event.at) });
+            }
+            else if (c.type === 'task_finished') {
+                const start = starts.get(activeTasks.get(c.taskId) ?? '');
+                if (start)
+                    start.end = Date.parse(event.at);
+                activeTasks.delete(c.taskId);
+            }
+            else if (c.type === 'supervision_decided' || c.type === 'supervision_halted') {
+                const start = starts.get(activeReview ?? '');
+                if (start)
+                    start.end = Date.parse(event.at);
+                activeReview = undefined;
+            }
+        }
+        const unbound = new Set();
+        const groups = Object.create(null);
+        for (const [id, start] of starts)
+            groups[id] = { source: start.source, agentId: start.agentId, status: 'available', accounted: { tokens: 0, costNanos: 0 }, requestIds: [], requests: { pending: 0, settled: 0, unknown: 0, exceeded: 0 }, closed: start.end !== undefined, usageComplete: false };
+        for (const event of budget.events) {
+            if (event.change.type !== 'reserve')
+                continue;
+            const r = event.change.reservation, source = r.attribution;
+            if (!source) {
+                unbound.add(r.agentId);
+                continue;
+            }
+            const start = starts.get(source.eventId), request = budget.projection.requests[r.id], group = groups[source.eventId];
+            if (!start || !request?.accounted || group?.status !== 'available' || r.agentId !== start.agentId || canonicalJson(source) !== canonicalJson(start.source) || event.at < start.at || start.end !== undefined && event.at > start.end)
+                throw new Error('Invalid request binding.');
+            group.requestIds.push(r.id);
+            group.requests[request.state]++;
+            group.accounted.tokens += request.accounted.tokens;
+            group.accounted.costNanos += request.accounted.costNanos;
+            if (!Number.isSafeInteger(group.accounted.tokens) || !Number.isSafeInteger(group.accounted.costNanos))
+                throw new Error('Invalid charges.');
+        }
+        for (const [id, group] of Object.entries(groups))
+            if (group.status === 'available') {
+                if (unbound.has(group.agentId))
+                    groups[id] = { source: group.source, agentId: group.agentId, status: 'unavailable', reason: 'This agent has requests without attempt/review provenance; its costs cannot be partitioned safely.' };
+                else
+                    group.usageComplete = group.closed && !group.requests.pending && !group.requests.unknown && !group.requests.exceeded;
+            }
+        return { version: 1, status: 'available', revision: budget.projection.revision, executionRevision: execution.state.revision, groups };
+    }
+    catch {
+        return { version: 1, status: 'unavailable', reason: 'Request provenance does not match this execution history; no attempt or review cost can be established.' };
+    }
+}
+//# sourceMappingURL=request-accounting.js.map

package/dist/orchestration/request-accounting.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-accounting.js","sourceRoot":"","sources":["../../src/orchestration/request-accounting.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,aAAa,EAAC,MAAM,uBAAuB,CAAC;AAWpD,qGAAqG;AACrG,MAAM,UAAU,iBAAiB,CAAC,MAA4C,EAAC,SAA6B,EAAC,OAAsB;IACjI,IAAI,CAAC;QACH,IAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,KAAG,OAAO,CAAC,EAAE,IAAE,SAAS,CAAC,MAAM,CAAC,KAAK,KAAG,OAAO,CAAC,EAAE;YAAC,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;QAC/G,MAAM,MAAM,GAAC,IAAI,GAAG,EAA2E,EAAC,WAAW,GAAC,IAAI,GAAG,EAAiB,CAAC;QAAA,IAAI,YAA6B,CAAC;QACvK,KAAI,MAAM,KAAK,IAAI,SAAS,CAAC,MAAM,EAAC,CAAC;YACnC,MAAM,CAAC,GAAC,KAAK,CAAC,MAAM,CAAC;YACrB,IAAG,CAAC,CAAC,IAAI,KAAG,cAAc,EAAC,CAAC;gBAC1B,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBACnC,IAAG,CAAC,CAAC,kBAAkB,KAAG,CAAC,EAAC,CAAC;oBAC3B,MAAM,OAAO,GAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,EAAE,KAAG,CAAC,CAAC,MAAM,CAAE,CAAC,OAAO,CAAC;oBACnE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAC,EAAC,MAAM,EAAC,EAAC,OAAO,EAAC,CAAC,EAAC,IAAI,EAAC,MAAM,EAAC,OAAO,EAAC,KAAK,CAAC,EAAE,EAAC,SAAS,EAAC,KAAK,CAAC,IAAI,EAAC,SAAS,EAAC,CAAC,CAAC,SAAS,EAAC,MAAM,EAAC,CAAC,CAAC,MAAM,EAAC,OAAO,EAAC,CAAC,CAAC,OAAO,EAAC,EAAC,OAAO,EAAC,EAAE,EAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,EAAC,CAAC,CAAC;gBACtL,CAAC;YACH,CAAC;iBAAK,IAAG,CAAC,CAAC,IAAI,KAAG,qBAAqB,EAAC,CAAC;gBACvC,YAAY,GAAC,KAAK,CAAC,EAAE,CAAC;gBACtB,IAAG,CAAC,CAAC,kBAAkB,KAAG,CAAC;oBAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAC,EAAC,MAAM,EAAC,EAAC,OAAO,EAAC,CAAC,EAAC,IAAI,EAAC,aAAa,EAAC,OAAO,EAAC,KAAK,CAAC,EAAE,EAAC,SAAS,EAAC,KAAK,CAAC,IAAI,EAAC,SAAS,EAAC,CAAC,CAAC,SAAS,EAAC,IAAI,EAAC,CAAC,CAAC,IAAI,EAAC,KAAK,EAAC,CAAC,CAAC,KAAK,EAAC,EAAC,OAAO,EAAC,CAAC,CAAC,OAAO,EAAC,EAAE,EAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,EAAC,CAAC,CAAC;YAC3N,CAAC;iBAAK,IAAG,CAAC,CAAC,IAAI,KAAG,eAAe,EAAC,CAAC;gBACjC,MAAM,KAAK,GAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAE,EAAE,CAAC,CAAC;gBAAA,IAAG,KAAK;oBAAC,KAAK,CAAC,GAAG,GAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBAAA,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YAC7H,CAAC;iBAAK,IAAG,CAAC,CAAC,IAAI,KAAG,qBAAqB,IAAE,CAAC,CAAC,IAAI,KAAG,oBAAoB,EAAC,CAAC;gBACtE,MAAM,KAAK,GAAC,MAAM,CAAC,GAAG,CAAC,YAAY,IAAE,EAAE,CAAC,CAAC;gBAAA,IAAG,KAAK;oBAAC,KAAK,CAAC,GAAG,GAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBAAA,YAAY,GAAC,SAAS,CAAC;YAC1G,CAAC;QACH,CAAC;QACD,MAAM,OAAO,GAAC,IAAI,GAAG,EAAU,CAAC;QAChC,MAAM,MAAM,GAAiC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACjE,KAAI,MAAM,CAAC,EAAE,EAAC,KAAK,CAAC,IAAG,MAAM;YAAC,MAAM,CAAC,EAAE,CAAC,GAAC,EAAC,MAAM,EAAC,KAAK,CAAC,MAAM,EAAC,OAAO,EAAC,KAAK,CAAC,OAAO,EAAC,MAAM,EAAC,WAAW,EAAC,SAAS,EAAC,EAAC,MAAM,EAAC,CAAC,EAAC,SAAS,EAAC,CAAC,EAAC,EAAC,UAAU,EAAC,EAAE,EAAC,QAAQ,EAAC,EAAC,OAAO,EAAC,CAAC,EAAC,OAAO,EAAC,CAAC,EAAC,OAAO,EAAC,CAAC,EAAC,QAAQ,EAAC,CAAC,EAAC,EAAC,MAAM,EAAC,KAAK,CAAC,GAAG,KAAG,SAAS,EAAC,aAAa,EAAC,KAAK,EAAC,CAAC;QAC5P,KAAI,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAC,CAAC;YAChC,IAAG,KAAK,CAAC,MAAM,CAAC,IAAI,KAAG,SAAS;gBAAC,SAAS;YAC1C,MAAM,CAAC,GAAC,KAAK,CAAC,MAAM,CAAC,WAAW,EAAC,MAAM,GAAC,CAAC,CAAC,WAAW,CAAC;YACtD,IAAG,CAAC,MAAM,EAAC,CAAC;gBAAA,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;gBAAA,SAAS;YAAA,CAAC;YAC7C,MAAM,KAAK,GAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,EAAC,OAAO,GAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAC,KAAK,GAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAC7G,IAAG,CAAC,KAAK,IAAE,CAAC,OAAO,EAAE,SAAS,IAAE,KAAK,EAAE,MAAM,KAAG,WAAW,IAAE,CAAC,CAAC,OAAO,KAAG,KAAK,CAAC,OAAO,IAAE,aAAa,CAAC,MAAM,CAAC,KAAG,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,IAAE,KAAK,CAAC,EAAE,GAAC,KAAK,CAAC,EAAE,IAAE,KAAK,CAAC,GAAG,KAAG,SAAS,IAAE,KAAK,CAAC,EAAE,GAAC,KAAK,CAAC,GAAG;gBAAC,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;YACtP,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAAA,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAAA,KAAK,CAAC,SAAS,CAAC,MAAM,IAAE,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC;YAAA,KAAK,CAAC,SAAS,CAAC,SAAS,IAAE,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC;YACpK,IAAG,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,IAAE,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC;gBAAC,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACzI,CAAC;QACD,KAAI,MAAM,CAAC,EAAE,EAAC,KAAK,CAAC,IAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;YAAC,IAAG,KAAK,CAAC,MAAM,KAAG,WAAW,EAAC,CAAC;gBAC3E,IAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC;oBAAC,MAAM,CAAC,EAAE,CAAC,GAAC,EAAC,MAAM,EAAC,KAAK,CAAC,MAAM,EAAC,OAAO,EAAC,KAAK,CAAC,OAAO,EAAC,MAAM,EAAC,aAAa,EAAC,MAAM,EAAC,oGAAoG,EAAC,CAAC;;oBACjN,KAAK,CAAC,aAAa,GAAC,KAAK,CAAC,MAAM,IAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,IAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,IAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACpH,CAAC;QACD,OAAM,EAAC,OAAO,EAAC,CAAC,EAAC,MAAM,EAAC,WAAW,EAAC,QAAQ,EAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAC,iBAAiB,EAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,EAAC,MAAM,EAAC,CAAC;IAC7H,CAAC;IAAA,MAAK,CAAC;QAAA,OAAM,EAAC,OAAO,EAAC,CAAC,EAAC,MAAM,EAAC,aAAa,EAAC,MAAM,EAAC,yGAAyG,EAAC,CAAC;IAAA,CAAC;AAClK,CAAC"}

package/dist/orchestration/routing.d.ts

@@ -0,0 +1,20 @@
+import { type SmartRoutingPolicy, type SmartRoutingSelection } from '../routing/smart.js';
+import type { RoutingDecision } from '../routing/types.js';
+import type { ExecutionEvent, RunPlanContext } from './coordinator-types.js';
+import type { ExecutionStore } from './execution-store.js';
+export interface RecordedAgentRoute {
+    version: 1;
+    decisionId: string;
+    provider: string;
+    model: string;
+    reason: string;
+    profile: SmartRoutingPolicy['profile'];
+    stage: SmartRoutingSelection['stage'];
+    evidenceId?: string;
+}
+/** Only a recorded failed check with immutable evidence opens the escalation pool. */
+export declare function taskSmartSelection(policy: SmartRoutingPolicy, events: ExecutionEvent[], taskId?: string): SmartRoutingSelection;
+export declare function validateRecordedRoute(value: unknown, context: RunPlanContext, agentId: string): RecordedAgentRoute;
+/** Await the event before dispatch so failure to record cannot send a paid request. */
+export declare function recordAgentRoute(store: ExecutionStore, agentId: string, sessionId: string, decision: RoutingDecision, signal: AbortSignal, assertActive: () => void, taskId?: string): Promise<void>;
+//# sourceMappingURL=routing.d.ts.map

package/dist/orchestration/routing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routing.d.ts","sourceRoot":"","sources":["../../src/orchestration/routing.ts"],"names":[],"mappings":"AAEA,OAAO,EAA8B,KAAK,kBAAkB,EAAC,KAAK,qBAAqB,EAAC,MAAM,qBAAqB,CAAC;AACpH,OAAO,KAAK,EAAC,eAAe,EAAC,MAAM,qBAAqB,CAAC;AACzD,OAAO,KAAK,EAAC,cAAc,EAAC,cAAc,EAAC,MAAM,wBAAwB,CAAC;AAC1E,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,sBAAsB,CAAC;AAGzD,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAC,CAAC,CAAC;IAAA,UAAU,EAAC,MAAM,CAAC;IAAA,QAAQ,EAAC,MAAM,CAAC;IAAA,KAAK,EAAC,MAAM,CAAC;IAAA,MAAM,EAAC,MAAM,CAAC;IACvE,OAAO,EAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC;IAAA,KAAK,EAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAAA,UAAU,CAAC,EAAC,MAAM,CAAC;CAC/F;AACD,sFAAsF;AACtF,wBAAgB,kBAAkB,CAAC,MAAM,EAAC,kBAAkB,EAAC,MAAM,EAAC,cAAc,EAAE,EAAC,MAAM,CAAC,EAAC,MAAM,GAAE,qBAAqB,CAKzH;AACD,wBAAgB,qBAAqB,CAAC,KAAK,EAAC,OAAO,EAAC,OAAO,EAAC,cAAc,EAAC,OAAO,EAAC,MAAM,GAAE,kBAAkB,CAW5G;AACD,uFAAuF;AACvF,wBAAsB,gBAAgB,CAAC,KAAK,EAAC,cAAc,EAAC,OAAO,EAAC,MAAM,EAAC,SAAS,EAAC,MAAM,EAAC,QAAQ,EAAC,eAAe,EAAC,MAAM,EAAC,WAAW,EAAC,YAAY,EAAC,MAAI,IAAI,EAAC,MAAM,CAAC,EAAC,MAAM,GAAE,OAAO,CAAC,IAAI,CAAC,CAI1L"}

package/dist/orchestration/routing.js

@@ -0,0 +1,38 @@
+import { approvalDisplayText } from '../approvals/index.js';
+import { getProviderNames } from '../config.js';
+import { smartPool, smartTargetMatches } from '../routing/smart.js';
+import { shape, text, uuid, fail } from './validation.js';
+/** Only a recorded failed check with immutable evidence opens the escalation pool. */
+export function taskSmartSelection(policy, events, taskId) {
+    const last = taskId ? [...events].reverse().find(event => event.change.type === 'task_finished' && event.change.taskId === taskId) : undefined;
+    const c = last?.change;
+    return policy.escalationPool && c?.type === 'task_finished' && c.status === 'failed' && c.output.checks.some(check => !check.passed && check.observedHash !== null && c.output.artifacts.some(artifact => artifact.id === check.artifactId && artifact.sha256 === check.observedHash))
+        ? { policy, stage: 'escalation', evidenceId: last.id } : { policy, stage: 'initial' };
+}
+export function validateRecordedRoute(value, context, agentId) {
+    shape(value, ['version', 'decisionId', 'provider', 'model', 'reason', 'profile', 'stage'], ['evidenceId']);
+    const agent = context.plan.agents.find(a => a.id === agentId), policy = agent?.routing;
+    if (value.version !== 1 || !uuid(value.decisionId) || !policy || value.profile !== policy.profile || !['initial', 'escalation'].includes(String(value.stage)))
+        fail('Route evidence requires the reviewed agent Smart policy.');
+    text(value.provider, 64);
+    text(value.model, 256);
+    text(value.reason, 4096);
+    if (!getProviderNames().includes(value.provider))
+        fail('Unknown routed provider.');
+    if (value.stage === 'escalation' ? !policy.escalationPool || !uuid(value.evidenceId) : value.evidenceId !== undefined)
+        fail('Escalated routing requires recorded verification evidence.');
+    const preference = agent.preference;
+    if (preference.provider !== 'auto' && preference.provider !== value.provider || preference.model && preference.model !== value.model)
+        fail('Routing evidence changed an explicit agent pin.');
+    if (!preference.model && (preference.provider === 'auto' || smartPool({ policy, stage: value.stage }).some(t => t.provider === preference.provider)) && !smartTargetMatches(smartPool({ policy, stage: value.stage }), value.provider, { id: value.model }))
+        fail('Routing evidence exceeds the reviewed model pool.');
+    return value;
+}
+/** Await the event before dispatch so failure to record cannot send a paid request. */
+export async function recordAgentRoute(store, agentId, sessionId, decision, signal, assertActive, taskId) {
+    if (!decision.selected || !decision.smart)
+        return;
+    const route = { version: 1, decisionId: decision.id, provider: decision.selected.provider, model: decision.selected.model, reason: approvalDisplayText(decision.reason).slice(0, 4096), ...decision.smart };
+    await store.append({ type: 'agent_routed', agentId, sessionId, ...(taskId ? { taskId } : {}), route }, signal, undefined, assertActive);
+}
+//# sourceMappingURL=routing.js.map

package/dist/orchestration/routing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routing.js","sourceRoot":"","sources":["../../src/orchestration/routing.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,mBAAmB,EAAC,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAC,gBAAgB,EAAC,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAC,SAAS,EAAC,kBAAkB,EAAoD,MAAM,qBAAqB,CAAC;AAIpH,OAAO,EAAC,KAAK,EAAC,IAAI,EAAC,IAAI,EAAC,IAAI,EAAC,MAAM,iBAAiB,CAAC;AAMrD,sFAAsF;AACtF,MAAM,UAAU,kBAAkB,CAAC,MAAyB,EAAC,MAAuB,EAAC,MAAc;IACjG,MAAM,IAAI,GAAC,MAAM,CAAA,CAAC,CAAA,CAAC,GAAG,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,KAAK,CAAA,EAAE,CAAA,KAAK,CAAC,MAAM,CAAC,IAAI,KAAG,eAAe,IAAE,KAAK,CAAC,MAAM,CAAC,MAAM,KAAG,MAAM,CAAC,CAAA,CAAC,CAAA,SAAS,CAAC;IACjI,MAAM,CAAC,GAAC,IAAI,EAAE,MAAM,CAAC;IACrB,OAAO,MAAM,CAAC,cAAc,IAAE,CAAC,EAAE,IAAI,KAAG,eAAe,IAAE,CAAC,CAAC,MAAM,KAAG,QAAQ,IAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAA,EAAE,CAAA,CAAC,KAAK,CAAC,MAAM,IAAE,KAAK,CAAC,YAAY,KAAG,IAAI,IAAE,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAA,EAAE,CAAA,QAAQ,CAAC,EAAE,KAAG,KAAK,CAAC,UAAU,IAAE,QAAQ,CAAC,MAAM,KAAG,KAAK,CAAC,YAAY,CAAC,CAAC;QAC1P,CAAC,CAAA,EAAC,MAAM,EAAC,KAAK,EAAC,YAAY,EAAC,UAAU,EAAC,IAAK,CAAC,EAAE,EAAC,CAAA,CAAC,CAAA,EAAC,MAAM,EAAC,KAAK,EAAC,SAAS,EAAC,CAAC;AAC9E,CAAC;AACD,MAAM,UAAU,qBAAqB,CAAC,KAAa,EAAC,OAAsB,EAAC,OAAc;IACvF,KAAK,CAAC,KAAK,EAAC,CAAC,SAAS,EAAC,YAAY,EAAC,UAAU,EAAC,OAAO,EAAC,QAAQ,EAAC,SAAS,EAAC,OAAO,CAAC,EAAC,CAAC,YAAY,CAAC,CAAC,CAAC;IACnG,MAAM,KAAK,GAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,EAAE,KAAG,OAAO,CAAC,EAAC,MAAM,GAAC,KAAK,EAAE,OAAO,CAAC;IAC9E,IAAG,KAAK,CAAC,OAAO,KAAG,CAAC,IAAE,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAE,CAAC,MAAM,IAAE,KAAK,CAAC,OAAO,KAAG,MAAM,CAAC,OAAO,IAAE,CAAC,CAAC,SAAS,EAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAAC,IAAI,CAAC,0DAA0D,CAAC,CAAC;IACjN,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAC,EAAE,CAAC,CAAC;IAAA,IAAI,CAAC,KAAK,CAAC,KAAK,EAAC,GAAG,CAAC,CAAC;IAAA,IAAI,CAAC,KAAK,CAAC,MAAM,EAAC,IAAI,CAAC,CAAC;IACtE,IAAG,CAAC,gBAAgB,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAiB,CAAC;QAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IAC1F,IAAG,KAAK,CAAC,KAAK,KAAG,YAAY,CAAA,CAAC,CAAA,CAAC,MAAM,CAAC,cAAc,IAAE,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA,CAAC,CAAA,KAAK,CAAC,UAAU,KAAG,SAAS;QAAC,IAAI,CAAC,4DAA4D,CAAC,CAAC;IAC9K,MAAM,UAAU,GAAC,KAAM,CAAC,UAAU,CAAC;IACnC,IAAG,UAAU,CAAC,QAAQ,KAAG,MAAM,IAAE,UAAU,CAAC,QAAQ,KAAG,KAAK,CAAC,QAAQ,IAAE,UAAU,CAAC,KAAK,IAAE,UAAU,CAAC,KAAK,KAAG,KAAK,CAAC,KAAK;QAAC,IAAI,CAAC,iDAAiD,CAAC,CAAC;IAChL,IAAG,CAAC,UAAU,CAAC,KAAK,IAAE,CAAC,UAAU,CAAC,QAAQ,KAAG,MAAM,IAAE,SAAS,CAAC,EAAC,MAAM,EAAC,KAAK,EAAC,KAAK,CAAC,KAAuC,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,QAAQ,KAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,IAAE,CAAC,kBAAkB,CAAC,SAAS,CAAC,EAAC,MAAM,EAAC,KAAK,EAAC,KAAK,CAAC,KAAuC,EAAC,CAAC,EAAC,KAAK,CAAC,QAAQ,EAAC,EAAC,EAAE,EAAC,KAAK,CAAC,KAAK,EAAC,CAAC;QAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;IAChW,OAAO,KAAsC,CAAC;AAChD,CAAC;AACD,uFAAuF;AACvF,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,KAAoB,EAAC,OAAc,EAAC,SAAgB,EAAC,QAAwB,EAAC,MAAkB,EAAC,YAAqB,EAAC,MAAc;IAC1K,IAAG,CAAC,QAAQ,CAAC,QAAQ,IAAE,CAAC,QAAQ,CAAC,KAAK;QAAC,OAAO;IAC9C,MAAM,KAAK,GAAoB,EAAC,OAAO,EAAC,CAAC,EAAC,UAAU,EAAC,QAAQ,CAAC,EAAE,EAAC,QAAQ,EAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,EAAC,KAAK,EAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,EAAC,MAAM,EAAC,mBAAmB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAC,IAAI,CAAC,EAAC,GAAG,QAAQ,CAAC,KAAK,EAAC,CAAC;IAChN,MAAM,KAAK,CAAC,MAAM,CAAC,EAAC,IAAI,EAAC,cAAc,EAAC,OAAO,EAAC,SAAS,EAAC,GAAG,CAAC,MAAM,CAAA,CAAC,CAAA,EAAC,MAAM,EAAC,CAAA,CAAC,CAAA,EAAE,CAAC,EAAC,KAAK,EAAC,EAAC,MAAM,EAAC,SAAS,EAAC,YAAY,CAAC,CAAC;AAC1H,CAAC"}

package/dist/orchestration/store.d.ts

@@ -0,0 +1,26 @@
+import { type OrchestrationEvent, type PreparedRun, type RunChange, type RunInspection, type RunManifest, type PlanAnalysis } from './types.js';
+import type { BoundRun } from '../goals/types.js';
+export declare const MAX_RUNS = 1000, MAX_RUN_EVENTS = 10000, MAX_RUN_EVENT_BYTES: number;
+export declare function validateRunManifest(value: unknown): RunManifest;
+export declare function validateRunEvent(value: unknown): OrchestrationEvent;
+/** A pure projection. Approval records intent; they cannot authorize tools or prove task completion. */
+export declare function replayRun(manifest: RunManifest, events: OrchestrationEvent[]): PreparedRun;
+export declare class RunStore {
+    private readonly now;
+    readonly root: string;
+    constructor(root?: string, now?: () => string);
+    private runDir;
+    private names;
+    private inventory;
+    read(id: string, cwd: string, signal?: AbortSignal): Promise<RunInspection>;
+    list(cwd: string, signal?: AbortSignal): Promise<{
+        runs: PreparedRun[];
+        unavailable: number;
+    }>;
+    prepare(analysis: PlanAnalysis, cwd: string, source: RunManifest['source'], signal?: AbortSignal, binding?: BoundRun): Promise<RunInspection>;
+    transition(id: string, cwd: string, expectedRevision: string, change: Exclude<RunChange, {
+        type: 'prepared';
+    }>, signal?: AbortSignal): Promise<RunInspection>;
+    private commit;
+}
+//# sourceMappingURL=store.d.ts.map

package/dist/orchestration/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/orchestration/store.ts"],"names":[],"mappings":"AAQA,OAAO,EAAsC,KAAK,kBAAkB,EAAE,KAAK,WAAW,EAAE,KAAK,SAAS,EAAE,KAAK,aAAa,EAAE,KAAK,WAAW,EAAE,KAAK,YAAY,EAAE,MAAM,YAAY,CAAC;AAEpL,OAAO,KAAK,EAAC,QAAQ,EAAC,MAAM,mBAAmB,CAAC;AAChD,eAAO,MAAM,QAAQ,OAAO,EAAE,cAAc,QAAQ,EAAE,mBAAmB,QAAmB,CAAC;AA6B7F,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,WAAW,CAQ/D;AACD,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,kBAAkB,CAQnE;AACD,wGAAwG;AACxG,wBAAgB,SAAS,CAAC,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,kBAAkB,EAAE,GAAG,WAAW,CAgB1F;AAED,qBAAa,QAAQ;IAEmD,OAAO,CAAC,QAAQ,CAAC,GAAG;IAD1F,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,YAAY,IAAI,SAAoD,EAAmB,GAAG,eAAiC,EAAgC;IAC3J,OAAO,CAAC,MAAM;IACd,OAAO,CAAC,KAAK;IAWb,OAAO,CAAC,SAAS;IAUX,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,aAAa,CAAC,CAkBhF;IACK,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,WAAW,EAAE,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC,CAMnG;IACK,OAAO,CAAC,QAAQ,EAAE,YAAY,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,EAAE,WAAW,EAAC,OAAO,CAAC,EAAC,QAAQ,GAAG,OAAO,CAAC,aAAa,CAAC,CAehJ;IACK,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,SAAS,EAAE;QAAC,IAAI,EAAC,UAAU,CAAA;KAAC,CAAC,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,aAAa,CAAC,CAS/J;IACD,OAAO,CAAC,MAAM;CAmBf"}