@caupulican/pi-adaptative 0.86.2 → 0.86.5

package/dist/core/delegation/worker-conversation-revision.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-conversation-revision.d.ts","sourceRoot":"","sources":["../../../src/core/delegation/worker-conversation-revision.ts"],"names":[],"mappings":"AAQA,MAAM,WAAW,8BAA8B;IAC9C,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,qBAAqB;IACrC,QAAQ,CAAC,QAAQ,EAAE,8BAA8B,CAAC;IAClD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,qBAAa,gCAAiC,SAAQ,KAAK;IAC1D,YAAY,OAAO,EAAE,MAAM,EAG1B;CACD;AAkBD,wBAAgB,kCAAkC,CAAC,IAAI,EAAE,MAAM,GAAG,8BAA8B,CAE/F;AAED,wBAAgB,kCAAkC,CACjD,IAAI,EAAE,8BAA8B,EACpC,KAAK,EAAE,8BAA8B,GACnC,OAAO,CAQT;AAmED;;;;;;;;GAQG;AACH,wBAAgB,wCAAwC,CACvD,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,qBAAqB,EACnC,eAAe,EAAE,MAAM,GACrB,qBAAqB,CAQvB;AAED,wBAAgB,qBAAqB,CACpC,WAAW,EAAE,MAAM,EACnB,iBAAiB,EAAE,MAAM,EACzB,WAAW,EAAE,MAAM,EACnB,gBAAgB,CAAC,EAAE,MAAM,GACvB,qBAAqB,CAOvB"}

package/dist/core/delegation/worker-conversation-revision.js

@@ -0,0 +1,203 @@
+import { createHash } from "node:crypto";
+import { closeSync, fstatSync, openSync, readSync, statSync } from "node:fs";
+import { resolve } from "node:path";
+import { CURRENT_SESSION_VERSION } from "@caupulican/pi-agent-core/session";
+const MAX_WORKER_SESSION_HEADER_BYTES = 64 * 1024;
+const WORKER_SESSION_ENTRY_DIGEST_SEED = createHash("sha256").update("pi-worker-session-entry-chain-v1").digest("hex");
+export class WorkerConversationOwnershipError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "WorkerConversationOwnershipError";
+    }
+}
+function revisionFromStats(stats) {
+    return {
+        dev: stats.dev,
+        ino: stats.ino,
+        size: stats.size,
+        mtimeNs: stats.mtimeNs,
+        ctimeNs: stats.ctimeNs,
+    };
+}
+export function readWorkerConversationFileRevision(file) {
+    return revisionFromStats(statSync(file, { bigint: true }));
+}
+export function sameWorkerConversationFileRevision(left, right) {
+    return (left.dev === right.dev &&
+        left.ino === right.ino &&
+        left.size === right.size &&
+        left.mtimeNs === right.mtimeNs &&
+        left.ctimeNs === right.ctimeNs);
+}
+function lineDigest(content) {
+    return createHash("sha256").update("pi-worker-session-line-v1").update("\0").update(content).digest("hex");
+}
+function nextEntryDigest(previous, byteLength, digest) {
+    return createHash("sha256")
+        .update("pi-worker-session-entry-chain-v1")
+        .update("\0")
+        .update(previous)
+        .update("\0")
+        .update(String(byteLength))
+        .update("\0")
+        .update(digest)
+        .digest("hex");
+}
+function verifyOwnedAppend(sessionFile, previousRevision, serialized) {
+    const expected = Buffer.from(`${serialized}\n`, "utf8");
+    const position = Number(previousRevision.size);
+    if (!Number.isSafeInteger(position)) {
+        throw new WorkerConversationOwnershipError("Worker conversation changed during its owned append.");
+    }
+    const fd = openSync(sessionFile, "r");
+    try {
+        const startRevision = revisionFromStats(fstatSync(fd, { bigint: true }));
+        if (startRevision.dev !== previousRevision.dev ||
+            startRevision.ino !== previousRevision.ino ||
+            startRevision.size !== previousRevision.size + BigInt(expected.length)) {
+            throw new WorkerConversationOwnershipError("Worker conversation changed during its owned append.");
+        }
+        const actual = Buffer.allocUnsafe(expected.length);
+        let bytesRead = 0;
+        while (bytesRead < actual.length) {
+            const count = readSync(fd, actual, bytesRead, actual.length - bytesRead, position + bytesRead);
+            if (count === 0) {
+                throw new WorkerConversationOwnershipError("Worker conversation changed during its owned append.");
+            }
+            bytesRead += count;
+        }
+        const endRevision = revisionFromStats(fstatSync(fd, { bigint: true }));
+        const pathRevision = readWorkerConversationFileRevision(sessionFile);
+        if (!sameWorkerConversationFileRevision(startRevision, endRevision) ||
+            !sameWorkerConversationFileRevision(endRevision, pathRevision) ||
+            !actual.equals(expected)) {
+            throw new WorkerConversationOwnershipError("Worker conversation changed during its owned append.");
+        }
+        const serializedBytes = actual.length - 1;
+        return {
+            revision: pathRevision,
+            serializedBytes,
+            digest: lineDigest(actual.subarray(0, serializedBytes)),
+        };
+    }
+    finally {
+        closeSync(fd);
+    }
+}
+/**
+ * Verify the exact bytes appended by SessionManager and advance the trusted raw-file head once.
+ *
+ * The caller must hold the canonical conversation lock. That advisory lock excludes every
+ * supported writer, while revision/digest scans detect changes made between owned critical
+ * sections and during cold opens. This bounded append check intentionally reads only the new
+ * suffix: it cannot detect a noncooperating process rewriting an equal-length prefix inside the
+ * locked append window without reintroducing an O(n) prefix scan or a second durable authority.
+ */
+export function advanceWorkerSessionHeadAfterOwnedAppend(sessionFile, previousHead, serializedEntry) {
+    const append = verifyOwnedAppend(sessionFile, previousHead.revision, serializedEntry);
+    return {
+        revision: append.revision,
+        headerDigest: previousHead.headerDigest,
+        entryDigest: nextEntryDigest(previousHead.entryDigest, append.serializedBytes, append.digest),
+        entryCount: previousHead.entryCount + 1,
+    };
+}
+export function scanWorkerSessionFile(sessionFile, expectedSessionId, expectedCwd, prefixEntryCount) {
+    const fd = openSync(sessionFile, "r");
+    try {
+        return scanOpenWorkerSessionFile(fd, sessionFile, expectedSessionId, expectedCwd, prefixEntryCount);
+    }
+    finally {
+        closeSync(fd);
+    }
+}
+function scanOpenWorkerSessionFile(fd, sessionFile, expectedSessionId, expectedCwd, prefixEntryCount) {
+    const startRevision = revisionFromStats(fstatSync(fd, { bigint: true }));
+    const buffer = Buffer.allocUnsafe(64 * 1024);
+    let position = 0;
+    let lineBytes = 0;
+    let lineHash = createHash("sha256").update("pi-worker-session-line-v1").update("\0");
+    let lineIndex = 0;
+    let entryDigest = WORKER_SESSION_ENTRY_DIGEST_SEED;
+    let prefixDigest = prefixEntryCount === 0 ? entryDigest : undefined;
+    let headerDigest = "";
+    const headerParts = [];
+    let headerBytes = 0;
+    const finishLine = () => {
+        const digest = lineHash.digest("hex");
+        if (lineIndex === 0) {
+            headerDigest = digest;
+        }
+        else {
+            entryDigest = nextEntryDigest(entryDigest, lineBytes, digest);
+            if (lineIndex === prefixEntryCount)
+                prefixDigest = entryDigest;
+        }
+        lineIndex += 1;
+        lineBytes = 0;
+        lineHash = createHash("sha256").update("pi-worker-session-line-v1").update("\0");
+    };
+    while (true) {
+        const bytesRead = readSync(fd, buffer, 0, buffer.length, position);
+        if (bytesRead === 0)
+            break;
+        position += bytesRead;
+        let segmentStart = 0;
+        while (segmentStart < bytesRead) {
+            const newlineIndex = buffer.indexOf(0x0a, segmentStart);
+            const segmentEnd = newlineIndex < 0 || newlineIndex >= bytesRead ? bytesRead : newlineIndex;
+            const segment = buffer.subarray(segmentStart, segmentEnd);
+            lineHash.update(segment);
+            lineBytes += segment.length;
+            if (lineIndex === 0 && segment.length > 0) {
+                headerBytes += segment.length;
+                if (headerBytes > MAX_WORKER_SESSION_HEADER_BYTES) {
+                    throw new WorkerConversationOwnershipError("Worker conversation session header exceeds its bound.");
+                }
+                headerParts.push(Buffer.from(segment));
+            }
+            if (newlineIndex < 0 || newlineIndex >= bytesRead)
+                break;
+            finishLine();
+            segmentStart = newlineIndex + 1;
+        }
+    }
+    const endRevision = revisionFromStats(fstatSync(fd, { bigint: true }));
+    if (!sameWorkerConversationFileRevision(startRevision, endRevision)) {
+        throw new WorkerConversationOwnershipError("Worker conversation session file changed while it was verified.");
+    }
+    if (lineBytes !== 0) {
+        throw new WorkerConversationOwnershipError("Worker conversation session file ends with a partial entry.");
+    }
+    if (lineIndex === 0)
+        throw new WorkerConversationOwnershipError("Worker conversation session header is missing.");
+    let header;
+    try {
+        header = JSON.parse(Buffer.concat(headerParts, headerBytes).toString("utf8"));
+    }
+    catch {
+        throw new WorkerConversationOwnershipError("Worker conversation session header is invalid.");
+    }
+    if (!header ||
+        typeof header !== "object" ||
+        Array.isArray(header) ||
+        header.type !== "session" ||
+        header.version !== CURRENT_SESSION_VERSION ||
+        header.id !== expectedSessionId ||
+        typeof header.cwd !== "string" ||
+        resolve(header.cwd) !== resolve(expectedCwd)) {
+        throw new WorkerConversationOwnershipError("Worker conversation session header changed identity.");
+    }
+    const revision = readWorkerConversationFileRevision(sessionFile);
+    if (!sameWorkerConversationFileRevision(revision, endRevision) || revision.size !== BigInt(position)) {
+        throw new WorkerConversationOwnershipError("Worker conversation session file changed while it was verified.");
+    }
+    return {
+        revision,
+        headerDigest,
+        entryDigest,
+        entryCount: lineIndex - 1,
+        ...(prefixDigest ? { prefixDigest } : {}),
+    };
+}
+//# sourceMappingURL=worker-conversation-revision.js.map

package/dist/core/delegation/worker-conversation-revision.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-conversation-revision.js","sourceRoot":"","sources":["../../../src/core/delegation/worker-conversation-revision.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,uBAAuB,EAAE,MAAM,mCAAmC,CAAC;AAE5E,MAAM,+BAA+B,GAAG,EAAE,GAAG,IAAI,CAAC;AAClD,MAAM,gCAAgC,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,kCAAkC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAkBvH,MAAM,OAAO,gCAAiC,SAAQ,KAAK;IAC1D,YAAY,OAAe;QAC1B,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,kCAAkC,CAAC;IAChD,CAAC;CACD;AAED,SAAS,iBAAiB,CAAC,KAM1B;IACA,OAAO;QACN,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,OAAO,EAAE,KAAK,CAAC,OAAO;KACtB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,kCAAkC,CAAC,IAAY;IAC9D,OAAO,iBAAiB,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,kCAAkC,CACjD,IAAoC,EACpC,KAAqC;IAErC,OAAO,CACN,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG;QACtB,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG;QACtB,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;QACxB,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;QAC9B,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,CAC9B,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,OAAwB;IAC3C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,2BAA2B,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC5G,CAAC;AAED,SAAS,eAAe,CAAC,QAAgB,EAAE,UAAkB,EAAE,MAAc;IAC5E,OAAO,UAAU,CAAC,QAAQ,CAAC;SACzB,MAAM,CAAC,kCAAkC,CAAC;SAC1C,MAAM,CAAC,IAAI,CAAC;SACZ,MAAM,CAAC,QAAQ,CAAC;SAChB,MAAM,CAAC,IAAI,CAAC;SACZ,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;SAC1B,MAAM,CAAC,IAAI,CAAC;SACZ,MAAM,CAAC,MAAM,CAAC;SACd,MAAM,CAAC,KAAK,CAAC,CAAC;AACjB,CAAC;AAED,SAAS,iBAAiB,CACzB,WAAmB,EACnB,gBAAgD,EAChD,UAAkB;IAElB,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,IAAI,EAAE,MAAM,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAC/C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,gCAAgC,CAAC,sDAAsD,CAAC,CAAC;IACpG,CAAC;IACD,MAAM,EAAE,GAAG,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;IACtC,IAAI,CAAC;QACJ,MAAM,aAAa,GAAG,iBAAiB,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACzE,IACC,aAAa,CAAC,GAAG,KAAK,gBAAgB,CAAC,GAAG;YAC1C,aAAa,CAAC,GAAG,KAAK,gBAAgB,CAAC,GAAG;YAC1C,aAAa,CAAC,IAAI,KAAK,gBAAgB,CAAC,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EACrE,CAAC;YACF,MAAM,IAAI,gCAAgC,CAAC,sDAAsD,CAAC,CAAC;QACpG,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACnD,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,OAAO,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;YAClC,MAAM,KAAK,GAAG,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,GAAG,SAAS,EAAE,QAAQ,GAAG,SAAS,CAAC,CAAC;YAC/F,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;gBACjB,MAAM,IAAI,gCAAgC,CAAC,sDAAsD,CAAC,CAAC;YACpG,CAAC;YACD,SAAS,IAAI,KAAK,CAAC;QACpB,CAAC;QACD,MAAM,WAAW,GAAG,iBAAiB,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACvE,MAAM,YAAY,GAAG,kCAAkC,CAAC,WAAW,CAAC,CAAC;QACrE,IACC,CAAC,kCAAkC,CAAC,aAAa,EAAE,WAAW,CAAC;YAC/D,CAAC,kCAAkC,CAAC,WAAW,EAAE,YAAY,CAAC;YAC9D,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EACvB,CAAC;YACF,MAAM,IAAI,gCAAgC,CAAC,sDAAsD,CAAC,CAAC;QACpG,CAAC;QACD,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;QAC1C,OAAO;YACN,QAAQ,EAAE,YAAY;YACtB,eAAe;YACf,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;SACvD,CAAC;IACH,CAAC;YAAS,CAAC;QACV,SAAS,CAAC,EAAE,CAAC,CAAC;IACf,CAAC;AACF,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,wCAAwC,CACvD,WAAmB,EACnB,YAAmC,EACnC,eAAuB;IAEvB,MAAM,MAAM,GAAG,iBAAiB,CAAC,WAAW,EAAE,YAAY,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;IACtF,OAAO;QACN,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,YAAY,EAAE,YAAY,CAAC,YAAY;QACvC,WAAW,EAAE,eAAe,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC;QAC7F,UAAU,EAAE,YAAY,CAAC,UAAU,GAAG,CAAC;KACvC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CACpC,WAAmB,EACnB,iBAAyB,EACzB,WAAmB,EACnB,gBAAyB;IAEzB,MAAM,EAAE,GAAG,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;IACtC,IAAI,CAAC;QACJ,OAAO,yBAAyB,CAAC,EAAE,EAAE,WAAW,EAAE,iBAAiB,EAAE,WAAW,EAAE,gBAAgB,CAAC,CAAC;IACrG,CAAC;YAAS,CAAC;QACV,SAAS,CAAC,EAAE,CAAC,CAAC;IACf,CAAC;AACF,CAAC;AAED,SAAS,yBAAyB,CACjC,EAAU,EACV,WAAmB,EACnB,iBAAyB,EACzB,WAAmB,EACnB,gBAAyB;IAEzB,MAAM,aAAa,GAAG,iBAAiB,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACzE,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;IAC7C,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,2BAA2B,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACrF,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,WAAW,GAAG,gCAAgC,CAAC;IACnD,IAAI,YAAY,GAAG,gBAAgB,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;IACpE,IAAI,YAAY,GAAG,EAAE,CAAC;IACtB,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,IAAI,WAAW,GAAG,CAAC,CAAC;IAEpB,MAAM,UAAU,GAAG,GAAS,EAAE;QAC7B,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC;YACrB,YAAY,GAAG,MAAM,CAAC;QACvB,CAAC;aAAM,CAAC;YACP,WAAW,GAAG,eAAe,CAAC,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;YAC9D,IAAI,SAAS,KAAK,gBAAgB;gBAAE,YAAY,GAAG,WAAW,CAAC;QAChE,CAAC;QACD,SAAS,IAAI,CAAC,CAAC;QACf,SAAS,GAAG,CAAC,CAAC;QACd,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,2BAA2B,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAClF,CAAC,CAAC;IAEF,OAAO,IAAI,EAAE,CAAC;QACb,MAAM,SAAS,GAAG,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACnE,IAAI,SAAS,KAAK,CAAC;YAAE,MAAM;QAC3B,QAAQ,IAAI,SAAS,CAAC;QACtB,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,OAAO,YAAY,GAAG,SAAS,EAAE,CAAC;YACjC,MAAM,YAAY,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;YACxD,MAAM,UAAU,GAAG,YAAY,GAAG,CAAC,IAAI,YAAY,IAAI,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC;YAC5F,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;YAC1D,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACzB,SAAS,IAAI,OAAO,CAAC,MAAM,CAAC;YAC5B,IAAI,SAAS,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC3C,WAAW,IAAI,OAAO,CAAC,MAAM,CAAC;gBAC9B,IAAI,WAAW,GAAG,+BAA+B,EAAE,CAAC;oBACnD,MAAM,IAAI,gCAAgC,CAAC,uDAAuD,CAAC,CAAC;gBACrG,CAAC;gBACD,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;YACxC,CAAC;YACD,IAAI,YAAY,GAAG,CAAC,IAAI,YAAY,IAAI,SAAS;gBAAE,MAAM;YACzD,UAAU,EAAE,CAAC;YACb,YAAY,GAAG,YAAY,GAAG,CAAC,CAAC;QACjC,CAAC;IACF,CAAC;IACD,MAAM,WAAW,GAAG,iBAAiB,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACvE,IAAI,CAAC,kCAAkC,CAAC,aAAa,EAAE,WAAW,CAAC,EAAE,CAAC;QACrE,MAAM,IAAI,gCAAgC,CAAC,iEAAiE,CAAC,CAAC;IAC/G,CAAC;IACD,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,gCAAgC,CAAC,6DAA6D,CAAC,CAAC;IAC3G,CAAC;IACD,IAAI,SAAS,KAAK,CAAC;QAAE,MAAM,IAAI,gCAAgC,CAAC,gDAAgD,CAAC,CAAC;IAClH,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACJ,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/E,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,gCAAgC,CAAC,gDAAgD,CAAC,CAAC;IAC9F,CAAC;IACD,IACC,CAAC,MAAM;QACP,OAAO,MAAM,KAAK,QAAQ;QAC1B,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QACpB,MAA6B,CAAC,IAAI,KAAK,SAAS;QAChD,MAAgC,CAAC,OAAO,KAAK,uBAAuB;QACpE,MAA2B,CAAC,EAAE,KAAK,iBAAiB;QACrD,OAAQ,MAA4B,CAAC,GAAG,KAAK,QAAQ;QACrD,OAAO,CAAE,MAA0B,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,WAAW,CAAC,EAChE,CAAC;QACF,MAAM,IAAI,gCAAgC,CAAC,sDAAsD,CAAC,CAAC;IACpG,CAAC;IACD,MAAM,QAAQ,GAAG,kCAAkC,CAAC,WAAW,CAAC,CAAC;IACjE,IAAI,CAAC,kCAAkC,CAAC,QAAQ,EAAE,WAAW,CAAC,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtG,MAAM,IAAI,gCAAgC,CAAC,iEAAiE,CAAC,CAAC;IAC/G,CAAC;IACD,OAAO;QACN,QAAQ;QACR,YAAY;QACZ,WAAW;QACX,UAAU,EAAE,SAAS,GAAG,CAAC;QACzB,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzC,CAAC;AACH,CAAC","sourcesContent":["import { createHash } from \"node:crypto\";\nimport { closeSync, fstatSync, openSync, readSync, statSync } from \"node:fs\";\nimport { resolve } from \"node:path\";\nimport { CURRENT_SESSION_VERSION } from \"@caupulican/pi-agent-core/session\";\n\nconst MAX_WORKER_SESSION_HEADER_BYTES = 64 * 1024;\nconst WORKER_SESSION_ENTRY_DIGEST_SEED = createHash(\"sha256\").update(\"pi-worker-session-entry-chain-v1\").digest(\"hex\");\n\nexport interface WorkerConversationFileRevision {\n\treadonly dev: bigint;\n\treadonly ino: bigint;\n\treadonly size: bigint;\n\treadonly mtimeNs: bigint;\n\treadonly ctimeNs: bigint;\n}\n\nexport interface WorkerSessionFileHead {\n\treadonly revision: WorkerConversationFileRevision;\n\treadonly headerDigest: string;\n\treadonly entryDigest: string;\n\treadonly entryCount: number;\n\treadonly prefixDigest?: string;\n}\n\nexport class WorkerConversationOwnershipError extends Error {\n\tconstructor(message: string) {\n\t\tsuper(message);\n\t\tthis.name = \"WorkerConversationOwnershipError\";\n\t}\n}\n\nfunction revisionFromStats(stats: {\n\tdev: bigint;\n\tino: bigint;\n\tsize: bigint;\n\tmtimeNs: bigint;\n\tctimeNs: bigint;\n}): WorkerConversationFileRevision {\n\treturn {\n\t\tdev: stats.dev,\n\t\tino: stats.ino,\n\t\tsize: stats.size,\n\t\tmtimeNs: stats.mtimeNs,\n\t\tctimeNs: stats.ctimeNs,\n\t};\n}\n\nexport function readWorkerConversationFileRevision(file: string): WorkerConversationFileRevision {\n\treturn revisionFromStats(statSync(file, { bigint: true }));\n}\n\nexport function sameWorkerConversationFileRevision(\n\tleft: WorkerConversationFileRevision,\n\tright: WorkerConversationFileRevision,\n): boolean {\n\treturn (\n\t\tleft.dev === right.dev &&\n\t\tleft.ino === right.ino &&\n\t\tleft.size === right.size &&\n\t\tleft.mtimeNs === right.mtimeNs &&\n\t\tleft.ctimeNs === right.ctimeNs\n\t);\n}\n\nfunction lineDigest(content: string | Buffer): string {\n\treturn createHash(\"sha256\").update(\"pi-worker-session-line-v1\").update(\"\\0\").update(content).digest(\"hex\");\n}\n\nfunction nextEntryDigest(previous: string, byteLength: number, digest: string): string {\n\treturn createHash(\"sha256\")\n\t\t.update(\"pi-worker-session-entry-chain-v1\")\n\t\t.update(\"\\0\")\n\t\t.update(previous)\n\t\t.update(\"\\0\")\n\t\t.update(String(byteLength))\n\t\t.update(\"\\0\")\n\t\t.update(digest)\n\t\t.digest(\"hex\");\n}\n\nfunction verifyOwnedAppend(\n\tsessionFile: string,\n\tpreviousRevision: WorkerConversationFileRevision,\n\tserialized: string,\n): { revision: WorkerConversationFileRevision; serializedBytes: number; digest: string } {\n\tconst expected = Buffer.from(`${serialized}\\n`, \"utf8\");\n\tconst position = Number(previousRevision.size);\n\tif (!Number.isSafeInteger(position)) {\n\t\tthrow new WorkerConversationOwnershipError(\"Worker conversation changed during its owned append.\");\n\t}\n\tconst fd = openSync(sessionFile, \"r\");\n\ttry {\n\t\tconst startRevision = revisionFromStats(fstatSync(fd, { bigint: true }));\n\t\tif (\n\t\t\tstartRevision.dev !== previousRevision.dev ||\n\t\t\tstartRevision.ino !== previousRevision.ino ||\n\t\t\tstartRevision.size !== previousRevision.size + BigInt(expected.length)\n\t\t) {\n\t\t\tthrow new WorkerConversationOwnershipError(\"Worker conversation changed during its owned append.\");\n\t\t}\n\t\tconst actual = Buffer.allocUnsafe(expected.length);\n\t\tlet bytesRead = 0;\n\t\twhile (bytesRead < actual.length) {\n\t\t\tconst count = readSync(fd, actual, bytesRead, actual.length - bytesRead, position + bytesRead);\n\t\t\tif (count === 0) {\n\t\t\t\tthrow new WorkerConversationOwnershipError(\"Worker conversation changed during its owned append.\");\n\t\t\t}\n\t\t\tbytesRead += count;\n\t\t}\n\t\tconst endRevision = revisionFromStats(fstatSync(fd, { bigint: true }));\n\t\tconst pathRevision = readWorkerConversationFileRevision(sessionFile);\n\t\tif (\n\t\t\t!sameWorkerConversationFileRevision(startRevision, endRevision) ||\n\t\t\t!sameWorkerConversationFileRevision(endRevision, pathRevision) ||\n\t\t\t!actual.equals(expected)\n\t\t) {\n\t\t\tthrow new WorkerConversationOwnershipError(\"Worker conversation changed during its owned append.\");\n\t\t}\n\t\tconst serializedBytes = actual.length - 1;\n\t\treturn {\n\t\t\trevision: pathRevision,\n\t\t\tserializedBytes,\n\t\t\tdigest: lineDigest(actual.subarray(0, serializedBytes)),\n\t\t};\n\t} finally {\n\t\tcloseSync(fd);\n\t}\n}\n\n/**\n * Verify the exact bytes appended by SessionManager and advance the trusted raw-file head once.\n *\n * The caller must hold the canonical conversation lock. That advisory lock excludes every\n * supported writer, while revision/digest scans detect changes made between owned critical\n * sections and during cold opens. This bounded append check intentionally reads only the new\n * suffix: it cannot detect a noncooperating process rewriting an equal-length prefix inside the\n * locked append window without reintroducing an O(n) prefix scan or a second durable authority.\n */\nexport function advanceWorkerSessionHeadAfterOwnedAppend(\n\tsessionFile: string,\n\tpreviousHead: WorkerSessionFileHead,\n\tserializedEntry: string,\n): WorkerSessionFileHead {\n\tconst append = verifyOwnedAppend(sessionFile, previousHead.revision, serializedEntry);\n\treturn {\n\t\trevision: append.revision,\n\t\theaderDigest: previousHead.headerDigest,\n\t\tentryDigest: nextEntryDigest(previousHead.entryDigest, append.serializedBytes, append.digest),\n\t\tentryCount: previousHead.entryCount + 1,\n\t};\n}\n\nexport function scanWorkerSessionFile(\n\tsessionFile: string,\n\texpectedSessionId: string,\n\texpectedCwd: string,\n\tprefixEntryCount?: number,\n): WorkerSessionFileHead {\n\tconst fd = openSync(sessionFile, \"r\");\n\ttry {\n\t\treturn scanOpenWorkerSessionFile(fd, sessionFile, expectedSessionId, expectedCwd, prefixEntryCount);\n\t} finally {\n\t\tcloseSync(fd);\n\t}\n}\n\nfunction scanOpenWorkerSessionFile(\n\tfd: number,\n\tsessionFile: string,\n\texpectedSessionId: string,\n\texpectedCwd: string,\n\tprefixEntryCount?: number,\n): WorkerSessionFileHead {\n\tconst startRevision = revisionFromStats(fstatSync(fd, { bigint: true }));\n\tconst buffer = Buffer.allocUnsafe(64 * 1024);\n\tlet position = 0;\n\tlet lineBytes = 0;\n\tlet lineHash = createHash(\"sha256\").update(\"pi-worker-session-line-v1\").update(\"\\0\");\n\tlet lineIndex = 0;\n\tlet entryDigest = WORKER_SESSION_ENTRY_DIGEST_SEED;\n\tlet prefixDigest = prefixEntryCount === 0 ? entryDigest : undefined;\n\tlet headerDigest = \"\";\n\tconst headerParts: Buffer[] = [];\n\tlet headerBytes = 0;\n\n\tconst finishLine = (): void => {\n\t\tconst digest = lineHash.digest(\"hex\");\n\t\tif (lineIndex === 0) {\n\t\t\theaderDigest = digest;\n\t\t} else {\n\t\t\tentryDigest = nextEntryDigest(entryDigest, lineBytes, digest);\n\t\t\tif (lineIndex === prefixEntryCount) prefixDigest = entryDigest;\n\t\t}\n\t\tlineIndex += 1;\n\t\tlineBytes = 0;\n\t\tlineHash = createHash(\"sha256\").update(\"pi-worker-session-line-v1\").update(\"\\0\");\n\t};\n\n\twhile (true) {\n\t\tconst bytesRead = readSync(fd, buffer, 0, buffer.length, position);\n\t\tif (bytesRead === 0) break;\n\t\tposition += bytesRead;\n\t\tlet segmentStart = 0;\n\t\twhile (segmentStart < bytesRead) {\n\t\t\tconst newlineIndex = buffer.indexOf(0x0a, segmentStart);\n\t\t\tconst segmentEnd = newlineIndex < 0 || newlineIndex >= bytesRead ? bytesRead : newlineIndex;\n\t\t\tconst segment = buffer.subarray(segmentStart, segmentEnd);\n\t\t\tlineHash.update(segment);\n\t\t\tlineBytes += segment.length;\n\t\t\tif (lineIndex === 0 && segment.length > 0) {\n\t\t\t\theaderBytes += segment.length;\n\t\t\t\tif (headerBytes > MAX_WORKER_SESSION_HEADER_BYTES) {\n\t\t\t\t\tthrow new WorkerConversationOwnershipError(\"Worker conversation session header exceeds its bound.\");\n\t\t\t\t}\n\t\t\t\theaderParts.push(Buffer.from(segment));\n\t\t\t}\n\t\t\tif (newlineIndex < 0 || newlineIndex >= bytesRead) break;\n\t\t\tfinishLine();\n\t\t\tsegmentStart = newlineIndex + 1;\n\t\t}\n\t}\n\tconst endRevision = revisionFromStats(fstatSync(fd, { bigint: true }));\n\tif (!sameWorkerConversationFileRevision(startRevision, endRevision)) {\n\t\tthrow new WorkerConversationOwnershipError(\"Worker conversation session file changed while it was verified.\");\n\t}\n\tif (lineBytes !== 0) {\n\t\tthrow new WorkerConversationOwnershipError(\"Worker conversation session file ends with a partial entry.\");\n\t}\n\tif (lineIndex === 0) throw new WorkerConversationOwnershipError(\"Worker conversation session header is missing.\");\n\tlet header: unknown;\n\ttry {\n\t\theader = JSON.parse(Buffer.concat(headerParts, headerBytes).toString(\"utf8\"));\n\t} catch {\n\t\tthrow new WorkerConversationOwnershipError(\"Worker conversation session header is invalid.\");\n\t}\n\tif (\n\t\t!header ||\n\t\ttypeof header !== \"object\" ||\n\t\tArray.isArray(header) ||\n\t\t(header as { type?: unknown }).type !== \"session\" ||\n\t\t(header as { version?: unknown }).version !== CURRENT_SESSION_VERSION ||\n\t\t(header as { id?: unknown }).id !== expectedSessionId ||\n\t\ttypeof (header as { cwd?: unknown }).cwd !== \"string\" ||\n\t\tresolve((header as { cwd: string }).cwd) !== resolve(expectedCwd)\n\t) {\n\t\tthrow new WorkerConversationOwnershipError(\"Worker conversation session header changed identity.\");\n\t}\n\tconst revision = readWorkerConversationFileRevision(sessionFile);\n\tif (!sameWorkerConversationFileRevision(revision, endRevision) || revision.size !== BigInt(position)) {\n\t\tthrow new WorkerConversationOwnershipError(\"Worker conversation session file changed while it was verified.\");\n\t}\n\treturn {\n\t\trevision,\n\t\theaderDigest,\n\t\tentryDigest,\n\t\tentryCount: lineIndex - 1,\n\t\t...(prefixDigest ? { prefixDigest } : {}),\n\t};\n}\n"]}

package/dist/core/delegation/worker-conversation-store.d.ts

@@ -2,6 +2,34 @@ import { type CompactionPreparation, type CompactionResult, estimateContextToken
 import { type SessionContext, SessionManager } from "@caupulican/pi-agent-core/session";
 import type { Message, Usage } from "@caupulican/pi-ai";
 import type { AgentResumeContext, AttemptUsageSnapshot, ResourcePointer } from "../orchestration/contracts.ts";
+import { type WorkerContextForkReference } from "../orchestration/worker-context-fork-reference.ts";
+import { type WorkerConversationFileRevision, type WorkerSessionFileHead } from "./worker-conversation-revision.ts";
+export declare const MAX_WORKER_TRANSCRIPT_PAGE_MESSAGES = 64;
+export declare const MAX_WORKER_TRANSCRIPT_PAGE_BYTES: number;
+interface WorkerConversationTranscriptPageOptions {
+    /** Opaque raw-entry offset returned by the previous page. */
+    cursor?: number;
+    maxMessages?: number;
+    maxBytes?: number;
+}
+interface WorkerConversationTranscriptPage {
+    /** Opaque raw-entry offset used for this page; it is not a message count. */
+    cursor: number;
+    messages: Message[];
+    nextCursor?: number;
+    /** Messages consumed but not cloned because one message exceeded the complete page byte ceiling. */
+    omittedMessages: number;
+    /** Exact UTF-8 JSON byte length of `messages`, including array framing. */
+    serializedBytes: number;
+}
+interface WorkerControlTranscriptExpectation {
+    messageId: string;
+    content: string;
+}
+interface WorkerControlTranscriptReconciliation {
+    delivered: boolean;
+    appended: boolean;
+}
 export interface CreateWorkerConversationOptions {
     agentDir: string;
     parentSessionId: string;
@@ -12,8 +40,10 @@ export interface CreateWorkerConversationOptions {
     modelRef?: string;
     resourceProfileNames: readonly string[];
     contextPointers: readonly ResourcePointer[];
+    /** Immutable sanitized parent context captured before this logical agent is admitted. */
+    birthContextForkReference?: WorkerContextForkReference;
 }
-export interface OpenWorkerConversationOptions {
+interface OpenWorkerConversationOptions {
     agentDir: string;
     resumeContext: AgentResumeContext;
     expectedLogicalAgentId?: string;
@@ -45,23 +75,52 @@ export interface WorkerConversationRetentionPolicy {
      */
     getFailedCompactionUsage?: () => Usage | undefined;
 }
-export interface WorkerConversationRetentionOutcome {
+interface WorkerConversationRetentionOutcome {
     status: "within_limit" | "compacted_verified" | "compacted_deterministic" | "cannot_compact";
     context: SessionContext;
     contextUsage: ReturnType<typeof estimateContextTokens>;
 }
+interface WorkerConversationMetadataState {
+    logicalAgentId: string;
+    parentSessionId?: string;
+    birthContextForkReference?: WorkerContextForkReference;
+    usageAccountingVersion?: 1;
+}
+interface WorkerConversationMetadataBinding extends WorkerConversationMetadataState {
+    file: string;
+    agentDir: string;
+}
+interface WorkerConversationCore {
+    sessionManager: SessionManager;
+    head?: WorkerSessionFileHead;
+    metadataRevision?: WorkerConversationFileRevision;
+    metadataState?: WorkerConversationMetadataState;
+    invalid: boolean;
+    generation: number;
+    activeTranscriptCursors: number;
+}
+export interface WorkerTranscriptCommitCursor {
+    readonly kind: "worker-transcript-suffix-v1";
+}
 /**
  * Durable SessionManager-backed transcript for exactly one logical worker lane.
  *
- * Single-writer invariant: orchestration must ensure that no two live processes append to the same
- * conversation. This store deliberately does not merge branches or lock competing writers; a
- * complete child transcript is committed only after it proves the current provider-visible context
- * is its exact prefix.
+ * The canonical session-file lock plus a raw-byte revision head fences competing processes. One
+ * store shares the parsed core across lightweight resume-context views; unexpected durable changes
+ * fail closed for active owners and only strict append-only recovery may replace the core.
  */
 export declare class WorkerConversation {
-    private readonly sessionManager;
+    private readonly core;
     private readonly resumeContext;
-    constructor(sessionManager: SessionManager, resumeContext: AgentResumeContext);
+    private readonly agentDir?;
+    private readonly metadataFile?;
+    constructor(sessionManager: SessionManager, resumeContext: AgentResumeContext, metadata?: WorkerConversationMetadataBinding, sharedCore?: WorkerConversationCore);
+    private get sessionManager();
+    private set sessionManager(value);
+    /** Persisted conversations share one adopted metadata state; direct in-memory instances are current. */
+    private get usageAccountingVersion();
+    /** Immutable parent-context identity installed before this logical worker's first attempt. */
+    getBirthContextForkReference(): WorkerContextForkReference | undefined;
     /** Resolve current provider-visible messages lazily through SessionManager. */
     getProviderContext(): SessionContext;
     /** Convert the current compacted projection at its transcript owner, never at each consumer. */
@@ -73,21 +132,58 @@ export declare class WorkerConversation {
      * context. This is recovery/audit data; it is never loaded into a provider request implicitly.
      */
     getRawTranscript(): Message[];
+    /**
+     * Read one bounded raw-transcript page without materializing the complete session entry list.
+     * A message larger than the complete page ceiling is consumed as an omission so every valid
+     * non-terminal cursor advances. The opaque cursor is a raw-entry offset, so each entry is visited
+     * at most once across a complete pagination pass and a page may contain no transcript messages.
+     * `serializedBytes` measures the returned `messages` JSON array.
+     */
+    getRawTranscriptPage(options?: WorkerConversationTranscriptPageOptions): WorkerConversationTranscriptPage;
+    /** Last durable provider message owned by one attempt, never an earlier persistent-worker turn. */
+    getLastAttemptMessage(attemptId: string): Message | undefined;
     /** Durable host-observed mutation progress. Custom entries never enter provider context. */
     recordChangedFile(attemptId: string, filePath: string): void;
     /** Rehydrate the bounded mutation set across owner-session disposal and worker resume. */
     getChangedFiles(attemptId: string): string[];
+    /**
+     * Mark the first transcript entry owned by one durable attempt. Persistent logical workers share
+     * a conversation across tasks, so recovery accounting must not replay an earlier task's spend as
+     * the new attempt's baseline. The marker is idempotent and never enters provider context.
+     */
+    beginAttemptUsage(attemptId: string): void;
+    /**
+     * Persist the authoritative task prompt once inside its durable attempt boundary. The boundary,
+     * rather than provider-history length, is the idempotency owner: inherited birth messages and
+     * queued mailbox controls may already exist, while a crash after append must not duplicate the
+     * prompt on resume.
+     */
+    ensureAttemptUserPrompt(attemptId: string, prompt: string): void;
+    /** Whether missing attempt markers have versioned, fail-closed accounting semantics. */
+    usesAttemptUsageBoundaries(): boolean;
+    /**
+     * Upgrade a legacy idle conversation before its next durable task is prepared. Persisting this
+     * evidence first closes the crash window where the task exists but its transcript marker does not.
+     */
+    enableAttemptUsageBoundaries(): void;
     /**
      * Recover cumulative accounting from raw entry metadata without cloning or resolving message
-     * payloads that compaction deliberately moved out of the provider-visible working set.
+     * payloads that compaction deliberately moved out of the provider-visible working set. Attempts
+     * created before usage boundaries existed conservatively fall back to the complete transcript.
      */
-    getRawTranscriptUsage(): AttemptUsageSnapshot;
+    getRawTranscriptUsage(attemptId?: string): AttemptUsageSnapshot;
     /**
      * Locate a bounded set of durable mailbox delivery commits without materializing or cloning the
      * complete raw transcript. Recovery uses this only to close the narrow crash window after a
      * control message was appended but before its mailbox acknowledgement was persisted.
      */
-    findDeliveredWorkerControlMessageIds(pendingMessageIds: readonly string[]): Set<string>;
+    findDeliveredWorkerControlMessageIds(expectations: readonly WorkerControlTranscriptExpectation[]): Set<string>;
+    /**
+     * Atomically prove one exact worker-control identity and optionally append it. Reopening inside
+     * the canonical session-file lock makes two stale recovery owners serialize on the latest durable
+     * transcript instead of both observing absence and appending a duplicate.
+     */
+    reconcileWorkerControlMessage(expectation: WorkerControlTranscriptExpectation, message: Message, appendIfMissing: boolean): WorkerControlTranscriptReconciliation;
     /**
      * Append one shared-compaction checkpoint when the current provider-visible context exceeds the
      * explicit worker policy. The source transcript remains append-only; only the projection sent to
@@ -96,22 +192,38 @@ export declare class WorkerConversation {
     compactProviderContext(policy: WorkerConversationRetentionPolicy, signal?: AbortSignal): Promise<WorkerConversationRetentionOutcome>;
     /** Append one already-authorized worker message to the canonical transcript. */
     appendMessage(message: Message): string;
-    /**
-     * Commit one complete child-owned transcript without replaying its persisted prefix.
-     *
-     * Any mismatch is a divergence: appending would duplicate or reorder provider context, so the
-     * caller must resolve it rather than silently branching this logical worker conversation.
-     */
-    commitTranscript(transcript: readonly Message[]): number;
+    private appendSessionEntry;
+    private appendSessionEntryLocked;
+    private reopenVerifiedSessionManagerLocked;
+    private synchronizeCoreLocked;
+    /** Store-only refresh while the canonical session-file lock is already held. */
+    refreshCachedCoreLocked(): void;
+    private captureTranscriptCommitCursorLocked;
+    /** Atomically capture the provider projection and the raw-entry cursor that immediately follows it. */
+    beginTranscriptCommit(): {
+        history: Message[];
+        cursor: WorkerTranscriptCommitCursor;
+    };
+    private withCanonicalSessionLock;
+    /** Commit only the bounded child-loop suffix captured by an opaque raw-entry cursor. */
+    captureTranscriptCommitCursor(): WorkerTranscriptCommitCursor;
+    abortTranscriptCommit(cursor: WorkerTranscriptCommitCursor): void;
+    commitTranscript(cursor: WorkerTranscriptCommitCursor, suffix: readonly Message[], options?: {
+        appendMissing?: boolean;
+    }): number;
     /** Return an isolated copy suitable for durable orchestration/process-resume state. */
     getResumeContext(): AgentResumeContext;
 }
 /** Creates and reopens canonical SessionManager transcripts for logical Pi worker lanes. */
 export declare class WorkerConversationStore {
+    private readonly cachedCores;
+    clearCache(): void;
     create(options: CreateWorkerConversationOptions): WorkerConversation;
     private createLocked;
     /** Open the one canonical transcript or atomically create it with the exact same durable identity. */
     ensure(options: CreateWorkerConversationOptions): WorkerConversation;
     open(options: OpenWorkerConversationOptions): WorkerConversation;
+    private openExisting;
 }
+export {};
 //# sourceMappingURL=worker-conversation-store.d.ts.map

package/dist/core/delegation/worker-conversation-store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"worker-conversation-store.d.ts","sourceRoot":"","sources":["../../../src/core/delegation/worker-conversation-store.ts"],"names":[],"mappings":"AAIA,OAAO,EACN,KAAK,qBAAqB,EAC1B,KAAK,gBAAgB,EAErB,qBAAqB,EAErB,MAAM,iDAAiD,CAAC;AAEzD,OAAO,EAAwB,KAAK,cAAc,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AAC9G,OAAO,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAIxD,OAAO,KAAK,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAY/G,MAAM,WAAW,+BAA+B;IAC/C,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;IACxB,8FAA8F;IAC9F,cAAc,EAAE,MAAM,CAAC;IACvB,GAAG,EAAE,MAAM,CAAC;IACZ,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oBAAoB,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,eAAe,EAAE,SAAS,eAAe,EAAE,CAAC;CAC5C;AAED,MAAM,WAAW,6BAA6B;IAC7C,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,kBAAkB,CAAC;IAClC,sBAAsB,CAAC,EAAE,MAAM,CAAC;CAChC;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,iCAAiC;IACjD,6EAA6E;IAC7E,gBAAgB,EAAE,MAAM,CAAC;IACzB,0FAA0F;IAC1F,gBAAgB,EAAE,MAAM,CAAC;IACzB;;;;OAIG;IACH,0BAA0B,CAAC,EAAE,CAAC,WAAW,EAAE,qBAAqB,KAAK,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC/F;;;;OAIG;IACH,wBAAwB,CAAC,EAAE,MAAM,KAAK,GAAG,SAAS,CAAC;CACnD;AAED,MAAM,WAAW,kCAAkC;IAClD,MAAM,EAAE,cAAc,GAAG,oBAAoB,GAAG,yBAAyB,GAAG,gBAAgB,CAAC;IAC7F,OAAO,EAAE,cAAc,CAAC;IACxB,YAAY,EAAE,UAAU,CAAC,OAAO,qBAAqB,CAAC,CAAC;CACvD;AA0GD;;;;;;;GAOG;AACH,qBAAa,kBAAkB;IAC9B,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAiB;IAChD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAqB;IAEnD,YAAY,cAAc,EAAE,cAAc,EAAE,aAAa,EAAE,kBAAkB,EAG5E;IAED,+EAA+E;IAC/E,kBAAkB,IAAI,cAAc,CAEnC;IAED,gGAAgG;IAChG,mBAAmB,IAAI,OAAO,EAAE,CAE/B;IAED,kGAAkG;IAClG,qBAAqB,IAAI,OAAO,CAE/B;IAED;;;OAGG;IACH,gBAAgB,IAAI,OAAO,EAAE,CAW5B;IAED,4FAA4F;IAC5F,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAe3D;IAED,0FAA0F;IAC1F,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,EAAE,CAoB3C;IAED;;;OAGG;IACH,qBAAqB,IAAI,oBAAoB,CAmC5C;IAED;;;;OAIG;IACH,oCAAoC,CAAC,iBAAiB,EAAE,SAAS,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,CAmBtF;IAED;;;;OAIG;IACG,sBAAsB,CAC3B,MAAM,EAAE,iCAAiC,EACzC,MAAM,CAAC,EAAE,WAAW,GAClB,OAAO,CAAC,kCAAkC,CAAC,CAwD7C;IAED,gFAAgF;IAChF,aAAa,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAEtC;IAED;;;;;OAKG;IACH,gBAAgB,CAAC,UAAU,EAAE,SAAS,OAAO,EAAE,GAAG,MAAM,CAiBvD;IAED,uFAAuF;IACvF,gBAAgB,IAAI,kBAAkB,CAErC;CACD;AA0BD,4FAA4F;AAC5F,qBAAa,uBAAuB;IACnC,MAAM,CAAC,OAAO,EAAE,+BAA+B,GAAG,kBAAkB,CAInE;IAED,OAAO,CAAC,YAAY;IAsCpB,sGAAsG;IACtG,MAAM,CAAC,OAAO,EAAE,+BAA+B,GAAG,kBAAkB,CAWnE;IAED,IAAI,CAAC,OAAO,EAAE,6BAA6B,GAAG,kBAAkB,CAoC/D;CACD"}
+{"version":3,"file":"worker-conversation-store.d.ts","sourceRoot":"","sources":["../../../src/core/delegation/worker-conversation-store.ts"],"names":[],"mappings":"AAIA,OAAO,EACN,KAAK,qBAAqB,EAC1B,KAAK,gBAAgB,EAErB,qBAAqB,EAErB,MAAM,iDAAiD,CAAC;AAGzD,OAAO,EAGN,KAAK,cAAc,EACnB,cAAc,EACd,MAAM,mCAAmC,CAAC;AAC3C,OAAO,KAAK,EAA8B,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAIpF,OAAO,KAAK,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAC/G,OAAO,EAEN,KAAK,0BAA0B,EAC/B,MAAM,mDAAmD,CAAC;AAU3D,OAAO,EAKN,KAAK,8BAA8B,EAEnC,KAAK,qBAAqB,EAC1B,MAAM,mCAAmC,CAAC;AAO3C,eAAO,MAAM,mCAAmC,KAAK,CAAC;AACtD,eAAO,MAAM,gCAAgC,QAAa,CAAC;AAE3D,UAAU,uCAAuC;IAChD,6DAA6D;IAC7D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,UAAU,gCAAgC;IACzC,6EAA6E;IAC7E,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,oGAAoG;IACpG,eAAe,EAAE,MAAM,CAAC;IACxB,2EAA2E;IAC3E,eAAe,EAAE,MAAM,CAAC;CACxB;AAED,UAAU,kCAAkC;IAC3C,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CAChB;AAED,UAAU,qCAAqC;IAC9C,SAAS,EAAE,OAAO,CAAC;IACnB,QAAQ,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,+BAA+B;IAC/C,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;IACxB,8FAA8F;IAC9F,cAAc,EAAE,MAAM,CAAC;IACvB,GAAG,EAAE,MAAM,CAAC;IACZ,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oBAAoB,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,eAAe,EAAE,SAAS,eAAe,EAAE,CAAC;IAC5C,yFAAyF;IACzF,yBAAyB,CAAC,EAAE,0BAA0B,CAAC;CACvD;AAED,UAAU,6BAA6B;IACtC,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,kBAAkB,CAAC;IAClC,sBAAsB,CAAC,EAAE,MAAM,CAAC;CAChC;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,iCAAiC;IACjD,6EAA6E;IAC7E,gBAAgB,EAAE,MAAM,CAAC;IACzB,0FAA0F;IAC1F,gBAAgB,EAAE,MAAM,CAAC;IACzB;;;;OAIG;IACH,0BAA0B,CAAC,EAAE,CAAC,WAAW,EAAE,qBAAqB,KAAK,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC/F;;;;OAIG;IACH,wBAAwB,CAAC,EAAE,MAAM,KAAK,GAAG,SAAS,CAAC;CACnD;AAED,UAAU,kCAAkC;IAC3C,MAAM,EAAE,cAAc,GAAG,oBAAoB,GAAG,yBAAyB,GAAG,gBAAgB,CAAC;IAC7F,OAAO,EAAE,cAAc,CAAC;IACxB,YAAY,EAAE,UAAU,CAAC,OAAO,qBAAqB,CAAC,CAAC;CACvD;AAYD,UAAU,+BAA+B;IACxC,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,yBAAyB,CAAC,EAAE,0BAA0B,CAAC;IACvD,sBAAsB,CAAC,EAAE,CAAC,CAAC;CAC3B;AAED,UAAU,iCAAkC,SAAQ,+BAA+B;IAClF,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;CACjB;AAED,UAAU,sBAAsB;IAC/B,cAAc,EAAE,cAAc,CAAC;IAC/B,IAAI,CAAC,EAAE,qBAAqB,CAAC;IAC7B,gBAAgB,CAAC,EAAE,8BAA8B,CAAC;IAClD,aAAa,CAAC,EAAE,+BAA+B,CAAC;IAChD,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,uBAAuB,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,4BAA4B;IAC5C,QAAQ,CAAC,IAAI,EAAE,6BAA6B,CAAC;CAC7C;AA2rBD;;;;;;GAMG;AACH,qBAAa,kBAAkB;IAC9B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAyB;IAC9C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAqB;IACnD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAS;IAEvC,YACC,cAAc,EAAE,cAAc,EAC9B,aAAa,EAAE,kBAAkB,EACjC,QAAQ,CAAC,EAAE,iCAAiC,EAC5C,UAAU,CAAC,EAAE,sBAAsB,EAYnC;IAED,OAAO,KAAK,cAAc,GAEzB;IAED,OAAO,KAAK,cAAc,QAEzB;IAED,wGAAwG;IACxG,OAAO,KAAK,sBAAsB,GAEjC;IAED,8FAA8F;IAC9F,4BAA4B,IAAI,0BAA0B,GAAG,SAAS,CAGrE;IAED,+EAA+E;IAC/E,kBAAkB,IAAI,cAAc,CAEnC;IAED,gGAAgG;IAChG,mBAAmB,IAAI,OAAO,EAAE,CAE/B;IAED,kGAAkG;IAClG,qBAAqB,IAAI,OAAO,CAE/B;IAED;;;OAGG;IACH,gBAAgB,IAAI,OAAO,EAAE,CAO5B;IAED;;;;;;OAMG;IACH,oBAAoB,CAAC,OAAO,GAAE,uCAA4C,GAAG,gCAAgC,CA6F5G;IAED,mGAAmG;IACnG,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAuB5D;IAED,4FAA4F;IAC5F,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAkB3D;IAED,0FAA0F;IAC1F,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,EAAE,CA6B3C;IAED;;;;OAIG;IACH,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CASzC;IAED;;;;;OAKG;IACH,uBAAuB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAmB/D;IAED,wFAAwF;IACxF,0BAA0B,IAAI,OAAO,CAEpC;IAED;;;OAGG;IACH,4BAA4B,IAAI,IAAI,CAyBnC;IAED;;;;OAIG;IACH,qBAAqB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,oBAAoB,CA8C9D;IAED;;;;OAIG;IACH,oCAAoC,CAAC,YAAY,EAAE,SAAS,kCAAkC,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,CAM7G;IAED;;;;OAIG;IACH,6BAA6B,CAC5B,WAAW,EAAE,kCAAkC,EAC/C,OAAO,EAAE,OAAO,EAChB,eAAe,EAAE,OAAO,GACtB,qCAAqC,CAYvC;IAED;;;;OAIG;IACG,sBAAsB,CAC3B,MAAM,EAAE,iCAAiC,EACzC,MAAM,CAAC,EAAE,WAAW,GAClB,OAAO,CAAC,kCAAkC,CAAC,CAgE7C;IAED,gFAAgF;IAChF,aAAa,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAItC;IAED,OAAO,CAAC,kBAAkB;IAM1B,OAAO,CAAC,wBAAwB;IA0ChC,OAAO,CAAC,kCAAkC;IAkB1C,OAAO,CAAC,qBAAqB;IA8D7B,gFAAgF;IAChF,uBAAuB,IAAI,IAAI,CAE9B;IAED,OAAO,CAAC,mCAAmC;IAY3C,uGAAuG;IACvG,qBAAqB,IAAI;QAAE,OAAO,EAAE,OAAO,EAAE,CAAC;QAAC,MAAM,EAAE,4BAA4B,CAAA;KAAE,CAKpF;IAED,OAAO,CAAC,wBAAwB;IAuBhC,wFAAwF;IACxF,6BAA6B,IAAI,4BAA4B,CAI5D;IAED,qBAAqB,CAAC,MAAM,EAAE,4BAA4B,GAAG,IAAI,CAShE;IAED,gBAAgB,CACf,MAAM,EAAE,4BAA4B,EACpC,MAAM,EAAE,SAAS,OAAO,EAAE,EAC1B,OAAO,CAAC,EAAE;QAAE,aAAa,CAAC,EAAE,OAAO,CAAA;KAAE,GACnC,MAAM,CA8DR;IAED,uFAAuF;IACvF,gBAAgB,IAAI,kBAAkB,CAErC;CACD;AA0BD,4FAA4F;AAC5F,qBAAa,uBAAuB;IACnC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAmD;IAE/E,UAAU,IAAI,IAAI,CASjB;IAED,MAAM,CAAC,OAAO,EAAE,+BAA+B,GAAG,kBAAkB,CAInE;IAED,OAAO,CAAC,YAAY;IAiFpB,sGAAsG;IACtG,MAAM,CAAC,OAAO,EAAE,+BAA+B,GAAG,kBAAkB,CAkBnE;IAED,IAAI,CAAC,OAAO,EAAE,6BAA6B,GAAG,kBAAkB,CAQ/D;IAED,OAAO,CAAC,YAAY;CAkVpB"}