@claudexor/control-api 3.1.1 → 3.2.0

package/dist/run-facts-projection.js

@@ -0,0 +1,133 @@
+import { lstatSync, readFileSync } from "node:fs";
+import { join } from "node:path";
+import { isTerminalLifecycle, RunFactsInvalidError, validateRunFactsReceipt, requiredActionsFor, } from "@claudexor/schema";
+import { parse as parseYaml } from "yaml";
+import { safeArtifactPath, safeArtifactRoot } from "./artifact-paths.js";
+/** Bind a canonical receipt to its daemon record without asserting a racy active lifecycle. */
+export function expectedRunFacts(record) {
+    return {
+        runId: record.runId ?? record.id,
+        ...(record.taskId ? { taskId: record.taskId } : {}),
+        ...(isTerminalLifecycle(record.state)
+            ? { lifecycle: record.state }
+            : {}),
+    };
+}
+/**
+ * Single terminal-facts accessor: a cross-field-valid RunFacts receipt wins;
+ * old/in-flight runs with no receipt retain legacy projections. A receipt that
+ * is present but invalid fails loudly and can never reopen legacy apply truth.
+ */
+export function effectiveTerminalFacts(runDir, legacyOutcomeFacts, legacyDecision = null, expected = {}) {
+    const runFacts = readRunFacts(runDir, expected);
+    const outcomeFacts = runFacts?.outcome ?? legacyOutcomeFacts;
+    return {
+        runFacts,
+        outcomeFacts,
+        decision: legacyDecision && outcomeFacts ? { ...legacyDecision, facts: outcomeFacts } : legacyDecision,
+    };
+}
+/**
+ * Project terminal compatibility fields from one canonical receipt read.
+ * Missing receipts use legacy derivations for in-flight and pre-RunFacts runs.
+ * Present-but-invalid receipts fail loudly.
+ */
+export function projectRunFactsForDetail(runDir, legacyOutcomeFacts, hasValidOperatorDecision, legacyApplyEligibility, expected = {}) {
+    const { runFacts, outcomeFacts } = effectiveTerminalFacts(runDir, legacyOutcomeFacts, null, expected);
+    if (runFacts) {
+        // Delivery state and operator decisions are the two legitimate
+        // post-terminal overlays. Re-derive only their mutable compatibility
+        // fields while keeping the receipt's terminal outcome authoritative.
+        const hasMutableOverlay = hasValidOperatorDecision || artifactExists(runDir, "final/delivery_state.yaml");
+        return {
+            runFacts,
+            outcomeFacts,
+            applyEligibility: hasMutableOverlay ? legacyApplyEligibility() : runFacts.apply.eligibility,
+            requiredActions: hasMutableOverlay
+                ? requiredActionsFor(runFacts.outcome, hasValidOperatorDecision)
+                : runFacts.required_actions,
+        };
+    }
+    return {
+        runFacts: null,
+        outcomeFacts: legacyOutcomeFacts,
+        applyEligibility: legacyApplyEligibility(),
+        requiredActions: requiredActionsFor(legacyOutcomeFacts, hasValidOperatorDecision),
+    };
+}
+/** RunFacts is already redacted; avoid a second presentation-redaction pass. */
+function readRunFacts(runDir, expected) {
+    if (!runDir)
+        return null;
+    const root = safeArtifactRoot(runDir);
+    if (!root) {
+        try {
+            lstatSync(runDir);
+        }
+        catch (error) {
+            if (error.code === "ENOENT")
+                return null;
+        }
+        throw invalidRunFacts();
+    }
+    const finalDir = join(root, "final");
+    let finalStat;
+    try {
+        finalStat = lstatSync(finalDir);
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return null;
+        throw invalidRunFacts();
+    }
+    if (finalStat.isSymbolicLink() || !finalStat.isDirectory()) {
+        throw invalidRunFacts();
+    }
+    const path = join(finalDir, "run_facts.yaml");
+    let stat;
+    try {
+        stat = lstatSync(path);
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return null;
+        throw invalidRunFacts();
+    }
+    if (stat.isSymbolicLink() || stat.isDirectory() || !stat.isFile()) {
+        throw invalidRunFacts();
+    }
+    try {
+        // Shape + cross-axis invariants + identity binding live in the ONE shared
+        // pure owner (@claudexor/schema); only YAML/file reading and the HTTP
+        // problem mapping below are control-api's own.
+        return validateRunFactsReceipt(parseYaml(readFileSync(path, "utf8")), expected);
+    }
+    catch {
+        throw invalidRunFacts();
+    }
+}
+/** Transport mapping of the shared refusal: the HTTP status and typed unblock
+ * action are control-api's own; message/code/retryable/evidenceRefs come from
+ * the ONE shared class in @claudexor/schema — never duplicated here. */
+class RunFactsInvalidHttpError extends RunFactsInvalidError {
+    status = 500;
+    requiredActions = ["inspect_run_artifacts"];
+}
+function invalidRunFacts() {
+    return new RunFactsInvalidHttpError();
+}
+function artifactExists(runDir, relativePath) {
+    try {
+        if (!runDir)
+            return false;
+        const path = safeArtifactPath(runDir, relativePath);
+        if (!path)
+            return false;
+        const stat = lstatSync(path);
+        return !stat.isSymbolicLink() && !stat.isDirectory();
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=run-facts-projection.js.map

package/dist/run-facts-projection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-facts-projection.js","sourceRoot":"","sources":["../src/run-facts-projection.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAClD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,uBAAuB,EACvB,kBAAkB,GAOnB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAmBzE,+FAA+F;AAC/F,MAAM,UAAU,gBAAgB,CAAC,MAKhC;IACC,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,EAAE;QAChC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,GAAG,CAAC,mBAAmB,CAAC,MAAM,CAAC,KAAK,CAAC;YACnC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,KAAqC,EAAE;YAC7D,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CACpC,MAA0B,EAC1B,kBAA0C,EAC1C,cAAc,GAA0B,IAAI,EAC5C,QAAQ,GAAqB,EAAE;IAE/B,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAChD,MAAM,YAAY,GAAG,QAAQ,EAAE,OAAO,IAAI,kBAAkB,CAAC;IAC7D,OAAO;QACL,QAAQ;QACR,YAAY;QACZ,QAAQ,EACN,cAAc,IAAI,YAAY,CAAC,CAAC,CAAC,EAAE,GAAG,cAAc,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,cAAc;KAC/F,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CACtC,MAA0B,EAC1B,kBAA0C,EAC1C,wBAAiC,EACjC,sBAAqD,EACrD,QAAQ,GAAqB,EAAE;IAE/B,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,sBAAsB,CACvD,MAAM,EACN,kBAAkB,EAClB,IAAI,EACJ,QAAQ,CACT,CAAC;IACF,IAAI,QAAQ,EAAE,CAAC;QACb,+DAA+D;QAC/D,qEAAqE;QACrE,qEAAqE;QACrE,MAAM,iBAAiB,GACrB,wBAAwB,IAAI,cAAc,CAAC,MAAM,EAAE,2BAA2B,CAAC,CAAC;QAClF,OAAO;YACL,QAAQ;YACR,YAAY;YACZ,gBAAgB,EAAE,iBAAiB,CAAC,CAAC,CAAC,sBAAsB,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW;YAC3F,eAAe,EAAE,iBAAiB;gBAChC,CAAC,CAAC,kBAAkB,CAAC,QAAQ,CAAC,OAAO,EAAE,wBAAwB,CAAC;gBAChE,CAAC,CAAC,QAAQ,CAAC,gBAAgB;SAC9B,CAAC;IACJ,CAAC;IACD,OAAO;QACL,QAAQ,EAAE,IAAI;QACd,YAAY,EAAE,kBAAkB;QAChC,gBAAgB,EAAE,sBAAsB,EAAE;QAC1C,eAAe,EAAE,kBAAkB,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;KAClF,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,SAAS,YAAY,CAAC,MAA0B,EAAE,QAA0B;IAC1E,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,MAAM,IAAI,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACtC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,IAAI,CAAC;YACH,SAAS,CAAC,MAAM,CAAC,CAAC;QACpB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC;QACtE,CAAC;QACD,MAAM,eAAe,EAAE,CAAC;IAC1B,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACrC,IAAI,SAAuC,CAAC;IAC5C,IAAI,CAAC;QACH,SAAS,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IAClC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACpE,MAAM,eAAe,EAAE,CAAC;IAC1B,CAAC;IACD,IAAI,SAAS,CAAC,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC;QAC3D,MAAM,eAAe,EAAE,CAAC;IAC1B,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;IAC9C,IAAI,IAAkC,CAAC;IACvC,IAAI,CAAC;QACH,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACpE,MAAM,eAAe,EAAE,CAAC;IAC1B,CAAC;IACD,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QAClE,MAAM,eAAe,EAAE,CAAC;IAC1B,CAAC;IACD,IAAI,CAAC;QACH,0EAA0E;QAC1E,sEAAsE;QACtE,+CAA+C;QAC/C,OAAO,uBAAuB,CAAC,SAAS,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IAClF,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,eAAe,EAAE,CAAC;IAC1B,CAAC;AACH,CAAC;AAED;;wEAEwE;AACxE,MAAM,wBAAyB,SAAQ,oBAAoB;IAChD,MAAM,GAAG,GAAG,CAAC;IACb,eAAe,GAAG,CAAC,uBAAuB,CAAC,CAAC;CACtD;AAED,SAAS,eAAe;IACtB,OAAO,IAAI,wBAAwB,EAAE,CAAC;AACxC,CAAC;AAED,SAAS,cAAc,CAAC,MAA0B,EAAE,YAAoB;IACtE,IAAI,CAAC;QACH,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC1B,MAAM,IAAI,GAAG,gBAAgB,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QACpD,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC;QACxB,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC7B,OAAO,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/run-list-fingerprint.d.ts

@@ -0,0 +1,7 @@
+import type { DaemonRunRecord } from "./run-record.js";
+export declare function runListFingerprintProbeCountForTests(): number;
+export declare function resetRunListFingerprintProbeCountForTests(): void;
+/** Fingerprint only the mutable delivery overlay for settled runs; all other
+ * terminal artifacts are immutable. Active runs retain the complete set. */
+export declare function summaryFingerprint(rec: DaemonRunRecord): string;
+//# sourceMappingURL=run-list-fingerprint.d.ts.map

package/dist/run-list-fingerprint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-list-fingerprint.d.ts","sourceRoot":"","sources":["../src/run-list-fingerprint.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAMvD,wBAAgB,oCAAoC,IAAI,MAAM,CAE7D;AAED,wBAAgB,yCAAyC,IAAI,IAAI,CAEhE;AAED;4EAC4E;AAC5E,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,eAAe,GAAG,MAAM,CAyC/D"}

package/dist/run-list-fingerprint.js

@@ -0,0 +1,68 @@
+import { statSync } from "node:fs";
+import { sha256 } from "@claudexor/util";
+import { safeArtifactPath } from "./artifact-paths.js";
+import { TERMINAL_STATES } from "./sse-shared.js";
+/** Number of artifact-path probes performed by the run-list fingerprinter. */
+let fingerprintProbeCount = 0;
+export function runListFingerprintProbeCountForTests() {
+    return fingerprintProbeCount;
+}
+export function resetRunListFingerprintProbeCountForTests() {
+    fingerprintProbeCount = 0;
+}
+/** Fingerprint only the mutable delivery overlay for settled runs; all other
+ * terminal artifacts are immutable. Active runs retain the complete set. */
+export function summaryFingerprint(rec) {
+    const fileIdentity = (rel) => {
+        fingerprintProbeCount++;
+        if (!rec.runDir)
+            return "0";
+        const path = safeArtifactPath(rec.runDir, rel);
+        if (!path)
+            return "0";
+        try {
+            const stat = statSync(path, { bigint: true });
+            return [stat.dev, stat.ino, stat.size, stat.mtimeNs, stat.ctimeNs].join(":");
+        }
+        catch {
+            return "0";
+        }
+    };
+    const identity = [rec.state, paramsFingerprint(rec), rec.finishedAt ?? "", rec.error ?? ""];
+    if (TERMINAL_STATES.has(rec.state)) {
+        // Delivery is the only ordinary mutable terminal overlay. Retention is the
+        // other sanctioned transition: it atomically replaces the whole run tree
+        // with tombstone.yaml, so that marker must invalidate a previously cached
+        // ready summary without re-statting every immutable terminal artifact.
+        return [
+            ...identity,
+            fileIdentity("final/delivery_state.yaml"),
+            fileIdentity("tombstone.yaml"),
+        ].join("|");
+    }
+    return [
+        ...identity,
+        fileIdentity("events.jsonl"),
+        fileIdentity("arbitration/decision.yaml"),
+        fileIdentity("final/telemetry.yaml"),
+        fileIdentity("final/run_facts.yaml"),
+        fileIdentity("final/failure.yaml"),
+        fileIdentity("final/summary.md"),
+        fileIdentity("final/answer.md"),
+        fileIdentity("final/plan.md"),
+        fileIdentity("final/explore.md"),
+        fileIdentity("final/report.md"),
+        fileIdentity("final/patch.diff"),
+        fileIdentity("final/work_product.yaml"),
+        fileIdentity("final/delivery_state.yaml"),
+    ].join("|");
+}
+function paramsFingerprint(rec) {
+    try {
+        return sha256(JSON.stringify(rec.params ?? null));
+    }
+    catch {
+        return "unserializable-params";
+    }
+}
+//# sourceMappingURL=run-list-fingerprint.js.map

package/dist/run-list-fingerprint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-list-fingerprint.js","sourceRoot":"","sources":["../src/run-list-fingerprint.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAEvD,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAElD,8EAA8E;AAC9E,IAAI,qBAAqB,GAAG,CAAC,CAAC;AAE9B,MAAM,UAAU,oCAAoC;IAClD,OAAO,qBAAqB,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,yCAAyC;IACvD,qBAAqB,GAAG,CAAC,CAAC;AAC5B,CAAC;AAED;4EAC4E;AAC5E,MAAM,UAAU,kBAAkB,CAAC,GAAoB;IACrD,MAAM,YAAY,GAAG,CAAC,GAAW,EAAU,EAAE;QAC3C,qBAAqB,EAAE,CAAC;QACxB,IAAI,CAAC,GAAG,CAAC,MAAM;YAAE,OAAO,GAAG,CAAC;QAC5B,MAAM,IAAI,GAAG,gBAAgB,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC/C,IAAI,CAAC,IAAI;YAAE,OAAO,GAAG,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9C,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/E,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,GAAG,CAAC;QACb,CAAC;IACH,CAAC,CAAC;IACF,MAAM,QAAQ,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,iBAAiB,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,UAAU,IAAI,EAAE,EAAE,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IAC5F,IAAI,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACnC,2EAA2E;QAC3E,yEAAyE;QACzE,0EAA0E;QAC1E,uEAAuE;QACvE,OAAO;YACL,GAAG,QAAQ;YACX,YAAY,CAAC,2BAA2B,CAAC;YACzC,YAAY,CAAC,gBAAgB,CAAC;SAC/B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACd,CAAC;IACD,OAAO;QACL,GAAG,QAAQ;QACX,YAAY,CAAC,cAAc,CAAC;QAC5B,YAAY,CAAC,2BAA2B,CAAC;QACzC,YAAY,CAAC,sBAAsB,CAAC;QACpC,YAAY,CAAC,sBAAsB,CAAC;QACpC,YAAY,CAAC,oBAAoB,CAAC;QAClC,YAAY,CAAC,kBAAkB,CAAC;QAChC,YAAY,CAAC,iBAAiB,CAAC;QAC/B,YAAY,CAAC,eAAe,CAAC;QAC7B,YAAY,CAAC,kBAAkB,CAAC;QAChC,YAAY,CAAC,iBAAiB,CAAC;QAC/B,YAAY,CAAC,kBAAkB,CAAC;QAChC,YAAY,CAAC,yBAAyB,CAAC;QACvC,YAAY,CAAC,2BAA2B,CAAC;KAC1C,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAoB;IAC7C,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,uBAAuB,CAAC;IACjC,CAAC;AACH,CAAC"}

package/dist/run-record.d.ts

@@ -0,0 +1,53 @@
+export interface DaemonRunRecord {
+    id: string;
+    state: string;
+    runId?: string;
+    taskId?: string;
+    runDir?: string;
+    error?: string;
+    errorCode?: string;
+    errorStatus?: number;
+    errorRetryable?: boolean;
+    errorRequiredActions?: string[];
+    errorContext?: Record<string, unknown>;
+    params?: unknown;
+    createdAt?: string;
+    startedAt?: string;
+    finishedAt?: string;
+}
+export interface DaemonFacadeClient {
+    enqueue(params: unknown, options?: {
+        idempotencyKey?: string;
+        clientId?: string;
+        idempotencyRequest?: unknown;
+        operation?: string;
+    }): Promise<{
+        id: string;
+        state: string;
+        reused?: boolean;
+    }>;
+    findAccepted?(params: unknown, options: {
+        idempotencyKey: string;
+        clientId?: string;
+        operation?: string;
+        idempotencyRequest?: unknown;
+    }): Promise<DaemonRunRecord | null>;
+    status(id: string): Promise<DaemonRunRecord>;
+    list(): Promise<DaemonRunRecord[]>;
+    cancel(id: string): Promise<unknown>;
+    fenceDelegationParent?(runId: string): Promise<unknown>;
+}
+export interface ControlOperatorDecisionRecord {
+    action: "accept_risk" | "override_needs_human";
+    findingIds: string[];
+    acceptedRisks: string[];
+    patchSha256: string;
+    decidedAt: string;
+}
+export declare function paramsRecord(record: DaemonRunRecord): Record<string, unknown>;
+/** Bounded direct Delegate children for reload projections. Exact persisted
+ * lineage only; ordinary parentRunId is intentionally ignored. */
+export declare function directDelegatedChildrenFromRecords(parentRunId: string, runs: readonly DaemonRunRecord[], limit?: number): DaemonRunRecord[];
+/** Persisted Delegate-only descendant graph; ordinary parentRunId is ignored. */
+export declare function delegatedDescendantsFromRecords(parentRunId: string, runs: readonly DaemonRunRecord[]): DaemonRunRecord[];
+//# sourceMappingURL=run-record.d.ts.map

package/dist/run-record.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-record.d.ts","sourceRoot":"","sources":["../src/run-record.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;IAChC,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,CACL,MAAM,EAAE,OAAO,EACf,OAAO,CAAC,EAAE;QACR,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,kBAAkB,CAAC,EAAE,OAAO,CAAC;QAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,GACA,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAC5D,YAAY,CAAC,CACX,MAAM,EAAE,OAAO,EACf,OAAO,EAAE;QACP,cAAc,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,kBAAkB,CAAC,EAAE,OAAO,CAAC;KAC9B,GACA,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;IACnC,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAC7C,IAAI,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC;IACnC,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACrC,qBAAqB,CAAC,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACzD;AAED,MAAM,WAAW,6BAA6B;IAC5C,MAAM,EAAE,aAAa,GAAG,sBAAsB,CAAC;IAC/C,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,wBAAgB,YAAY,CAAC,MAAM,EAAE,eAAe,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAI7E;AAED;kEACkE;AAClE,wBAAgB,kCAAkC,CAChD,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,SAAS,eAAe,EAAE,EAChC,KAAK,SAAyB,GAC7B,eAAe,EAAE,CAwBnB;AAED,iFAAiF;AACjF,wBAAgB,+BAA+B,CAC7C,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,SAAS,eAAe,EAAE,GAC/B,eAAe,EAAE,CAuBnB"}

package/dist/run-record.js

@@ -0,0 +1,61 @@
+import { MAX_DELEGATED_CHILDREN } from "@claudexor/schema";
+export function paramsRecord(record) {
+    return record.params && typeof record.params === "object" && !Array.isArray(record.params)
+        ? record.params
+        : {};
+}
+/** Bounded direct Delegate children for reload projections. Exact persisted
+ * lineage only; ordinary parentRunId is intentionally ignored. */
+export function directDelegatedChildrenFromRecords(parentRunId, runs, limit = MAX_DELEGATED_CHILDREN) {
+    const boundedLimit = Math.max(0, limit);
+    if (boundedLimit === 0)
+        return [];
+    const ordered = runs
+        .filter((run) => paramsRecord(run)["delegatedFromRunId"] === parentRunId &&
+        (run.runId ?? run.id) !== parentRunId)
+        .sort((a, b) => {
+        const created = (a.createdAt ?? "\uffff").localeCompare(b.createdAt ?? "\uffff");
+        const runId = (a.runId ?? a.id).localeCompare(b.runId ?? b.id);
+        return created || runId || a.id.localeCompare(b.id);
+    });
+    const out = [];
+    const seen = new Set([parentRunId]);
+    for (const run of ordered) {
+        const runId = run.runId ?? run.id;
+        if (seen.has(runId))
+            continue;
+        seen.add(runId);
+        out.push(run);
+        if (out.length >= boundedLimit)
+            break;
+    }
+    return out;
+}
+/** Persisted Delegate-only descendant graph; ordinary parentRunId is ignored. */
+export function delegatedDescendantsFromRecords(parentRunId, runs) {
+    const children = new Map();
+    for (const run of runs) {
+        const parent = paramsRecord(run)["delegatedFromRunId"];
+        if (typeof parent !== "string")
+            continue;
+        const rows = children.get(parent) ?? [];
+        rows.push(run);
+        children.set(parent, rows);
+    }
+    const out = [];
+    const seen = new Set([parentRunId]);
+    const queue = [parentRunId];
+    while (queue.length > 0) {
+        const parent = queue.shift();
+        for (const child of children.get(parent) ?? []) {
+            const childRunId = child.runId ?? child.id;
+            if (seen.has(childRunId))
+                continue;
+            seen.add(childRunId);
+            out.push(child);
+            queue.push(childRunId);
+        }
+    }
+    return out;
+}
+//# sourceMappingURL=run-record.js.map

package/dist/run-record.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-record.js","sourceRoot":"","sources":["../src/run-record.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAqD3D,MAAM,UAAU,YAAY,CAAC,MAAuB;IAClD,OAAO,MAAM,CAAC,MAAM,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;QACxF,CAAC,CAAE,MAAM,CAAC,MAAkC;QAC5C,CAAC,CAAC,EAAE,CAAC;AACT,CAAC;AAED;kEACkE;AAClE,MAAM,UAAU,kCAAkC,CAChD,WAAmB,EACnB,IAAgC,EAChC,KAAK,GAAG,sBAAsB;IAE9B,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACxC,IAAI,YAAY,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAClC,MAAM,OAAO,GAAG,IAAI;SACjB,MAAM,CACL,CAAC,GAAG,EAAE,EAAE,CACN,YAAY,CAAC,GAAG,CAAC,CAAC,oBAAoB,CAAC,KAAK,WAAW;QACvD,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,EAAE,CAAC,KAAK,WAAW,CACxC;SACA,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACb,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,SAAS,IAAI,QAAQ,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,IAAI,QAAQ,CAAC,CAAC;QACjF,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC;QAC/D,OAAO,OAAO,IAAI,KAAK,IAAI,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IACL,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAS,CAAC,WAAW,CAAC,CAAC,CAAC;IAC5C,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,EAAE,CAAC;QAClC,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,SAAS;QAC9B,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAChB,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACd,IAAI,GAAG,CAAC,MAAM,IAAI,YAAY;YAAE,MAAM;IACxC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,+BAA+B,CAC7C,WAAmB,EACnB,IAAgC;IAEhC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA6B,CAAC;IACtD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,oBAAoB,CAAC,CAAC;QACvD,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,SAAS;QACzC,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACxC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACf,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC7B,CAAC;IACD,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAS,CAAC,WAAW,CAAC,CAAC,CAAC;IAC5C,MAAM,KAAK,GAAG,CAAC,WAAW,CAAC,CAAC;IAC5B,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,EAAG,CAAC;QAC9B,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;YAC/C,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,EAAE,CAAC;YAC3C,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;gBAAE,SAAS;YACnC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YACrB,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAChB,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/run-retry-routes.d.ts

@@ -1,13 +1,14 @@
 import type { IncomingMessage, ServerResponse } from "node:http";
 import type { DaemonControlApiOptions, DaemonFacadeClient, DaemonRunRecord } from "./daemon-server.js";
-type RetryServices = Pick<NonNullable<DaemonControlApiOptions["services"]>, "createThreadTurn" | "setTurnEnqueueError" | "threadDetail" | "validateResources" | "preflightRunRequirements">;
+type RetryServices = Pick<NonNullable<DaemonControlApiOptions["services"]>, "createThreadTurn" | "findThreadTurnByIdempotency" | "setTurnEnqueueError" | "threadDetail" | "validateResources" | "preflightRunRequirements">;
 export interface RunRetryRouteContext {
     daemon: DaemonFacadeClient;
     services?: RetryServices;
     findRun(id: string): Promise<DaemonRunRecord | null>;
     waitForRunStart(jobId: string): Promise<DaemonRunRecord>;
+    serializeThreadMutation<T>(threadId: string, work: () => Promise<T>): Promise<T>;
     json(response: ServerResponse, status: number, body: unknown): void;
-    requestError(response: ServerResponse, error: unknown): void;
+    requestError(response: ServerResponse, error: unknown, fallbackStatus?: 400 | 500): void;
 }
 export declare function handleRunRetryRoute(ctx: RunRetryRouteContext, method: string, path: string, req: IncomingMessage, res: ServerResponse): Promise<boolean>;
 export {};

package/dist/run-retry-routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"run-retry-routes.d.ts","sourceRoot":"","sources":["../src/run-retry-routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAWjE,OAAO,KAAK,EACV,uBAAuB,EACvB,kBAAkB,EAClB,eAAe,EAChB,MAAM,oBAAoB,CAAC;AAK5B,KAAK,aAAa,GAAG,IAAI,CACvB,WAAW,CAAC,uBAAuB,CAAC,UAAU,CAAC,CAAC,EAC9C,kBAAkB,GAClB,qBAAqB,GACrB,cAAc,GACd,mBAAmB,GACnB,0BAA0B,CAC7B,CAAC;AAEF,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,kBAAkB,CAAC;IAC3B,QAAQ,CAAC,EAAE,aAAa,CAAC;IACzB,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;IACrD,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IACzD,IAAI,CAAC,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,IAAI,CAAC;IACpE,YAAY,CAAC,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI,CAAC;CAC9D;AAED,wBAAsB,mBAAmB,CACvC,GAAG,EAAE,oBAAoB,EACzB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,GAClB,OAAO,CAAC,OAAO,CAAC,CAYlB"}
+{"version":3,"file":"run-retry-routes.d.ts","sourceRoot":"","sources":["../src/run-retry-routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAWjE,OAAO,KAAK,EACV,uBAAuB,EACvB,kBAAkB,EAClB,eAAe,EAChB,MAAM,oBAAoB,CAAC;AAM5B,KAAK,aAAa,GAAG,IAAI,CACvB,WAAW,CAAC,uBAAuB,CAAC,UAAU,CAAC,CAAC,EAC9C,kBAAkB,GAClB,6BAA6B,GAC7B,qBAAqB,GACrB,cAAc,GACd,mBAAmB,GACnB,0BAA0B,CAC7B,CAAC;AAEF,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,kBAAkB,CAAC;IAC3B,QAAQ,CAAC,EAAE,aAAa,CAAC;IACzB,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;IACrD,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IACzD,uBAAuB,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACjF,IAAI,CAAC,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,IAAI,CAAC;IACpE,YAAY,CAAC,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,OAAO,EAAE,cAAc,CAAC,EAAE,GAAG,GAAG,GAAG,GAAG,IAAI,CAAC;CAC1F;AAED,wBAAsB,mBAAmB,CACvC,GAAG,EAAE,oBAAoB,EACzB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,GAClB,OAAO,CAAC,OAAO,CAAC,CAYlB"}

package/dist/run-retry-routes.js

@@ -2,7 +2,8 @@ import { readFileSync } from "node:fs";
 import { join } from "node:path";
 import { parse as parseYaml } from "yaml";
 import { ControlRunAgainDraft, ControlRunRetryResponse, ControlRunStartRequest, TaskContract, } from "@claudexor/schema";
-import { recordTurnEnqueueFailure } from "./thread-turn-routes.js";
+import { recordTurnEnqueueFailure, turnEnqueueProblemResponse } from "./thread-turn-routes.js";
+import { resolveThreadRecoveryTurn } from "./thread-recovery.js";
 import { TERMINAL_STATES } from "./sse-shared.js";
 import * as runStart from "./run-start.js";
 export async function handleRunRetryRoute(ctx, method, path, req, res) {
@@ -22,14 +23,25 @@ async function exactRetry(ctx, id, req, res) {
     const source = await ctx.findRun(id);
     if (!source)
         return ctx.json(res, 404, { error: "no such run" });
+    const sourceParams = paramsRecord(source);
+    if (typeof sourceParams["delegatedFromRunId"] === "string") {
+        return ctx.json(res, 409, {
+            error: "Exact Retry is unavailable for a Delegate child after its parent authority ends; use Run Again to create an ordinary editable run",
+            code: "delegated_child_retry_unavailable",
+            retryable: false,
+        });
+    }
     if (source.state === "queued" || source.state === "running") {
         return ctx.json(res, 409, { error: `run is still ${source.state}` });
     }
     let idempotencyKey;
     let params;
+    let sourceTurnProvenance = {};
     try {
         idempotencyKey = runStart.requiredIdempotencyKey(req);
-        const parsed = ControlRunStartRequest.parse(await sourceParamsWithThreadAttachments(ctx, source));
+        const replay = await sourceReplayInput(ctx, source);
+        sourceTurnProvenance = replay.turn;
+        const parsed = ControlRunStartRequest.parse(replay.params);
         const { turnId: _turnId, retryOf: _retryOf, ...original } = parsed;
         // QA-035: Exact Retry replays the IMMUTABLE original request. The stored
         // params omit any model/effort the caller left to settings, so re-reading
@@ -48,64 +60,112 @@ async function exactRetry(ctx, id, req, res) {
             parentRunId: source.runId ?? source.id,
             retryOf: source.runId ?? source.id,
         });
-        await ctx.services?.validateResources?.(params.attachments ?? []);
-        await ctx.services?.preflightRunRequirements?.(params);
     }
     catch (error) {
         return ctx.requestError(res, error);
     }
     const sourceRunId = source.runId ?? source.id;
     const threadId = typeof params.threadId === "string" ? params.threadId : null;
-    let retryTurnId;
-    if (threadId && ctx.services?.createThreadTurn) {
-        const turn = (await ctx.services.createThreadTurn(threadId, params.prompt, {
-            kind: "followup",
-            parentRunId: sourceRunId,
-            planRunId: params.planRunId ?? null,
-            attachments: params.attachments,
-            idempotency: {
-                key: idempotencyKey,
-                client: "control-api",
-                request: { retryOf: sourceRunId },
-            },
-        }));
-        retryTurnId = turn.id;
-    }
-    const request = { ...params, ...(retryTurnId ? { turnId: retryTurnId } : {}) };
-    let job;
+    const idempotencyRequest = { retryOf: sourceRunId };
+    // A durable daemon command is the canonical replay owner. Probe it before
+    // any mutable resource/Git/harness preflight so a later environment change
+    // cannot replace an already-accepted handle with a new admission error.
+    let preflightStarted = false;
     try {
-        job = await ctx.daemon.enqueue(request, {
+        const prior = await runStart.findAcceptedAroundPreflight(() => ctx.daemon.findAccepted?.(params, {
             idempotencyKey,
             clientId: "control-api",
             operation: "run.retry",
-            idempotencyRequest: { retryOf: sourceRunId },
+            idempotencyRequest,
+        }) ?? Promise.resolve(null), async () => {
+            preflightStarted = true;
+            await ctx.services?.validateResources?.(params.attachments ?? []);
+            await ctx.services?.preflightRunRequirements?.(params);
         });
+        if (prior) {
+            const priorParams = paramsRecord(prior);
+            const priorTurnId = typeof priorParams["turnId"] === "string" ? priorParams["turnId"] : undefined;
+            return await respondToExactRetryJob(ctx, res, sourceRunId, prior, threadId, priorTurnId);
+        }
     }
     catch (error) {
-        recordTurnEnqueueFailure(ctx.services?.setTurnEnqueueError, retryTurnId, error);
-        return ctx.requestError(res, error);
+        return ctx.requestError(res, error, preflightStarted ? undefined : 500);
+    }
+    const retry = async () => {
+        let retryTurnId;
+        if (threadId) {
+            const turn = await resolveThreadRecoveryTurn(ctx.daemon, ctx.services, source, threadId, params.prompt, {
+                kind: "followup",
+                parentRunId: sourceRunId,
+                planRunId: params.planRunId ?? null,
+                planHash: sourceTurnProvenance.planHash ?? null,
+                planOverridden: sourceTurnProvenance.planOverridden === true,
+                attachments: params.attachments,
+            }, {
+                key: idempotencyKey,
+                client: "control-api",
+                request: idempotencyRequest,
+            }, (turnId) => ctx.daemon.findAccepted?.({ ...params, turnId }, {
+                idempotencyKey,
+                clientId: "control-api",
+                operation: "run.retry",
+                idempotencyRequest,
+            }) ?? Promise.resolve(null));
+            retryTurnId = turn.id;
+        }
+        const request = { ...params, ...(retryTurnId ? { turnId: retryTurnId } : {}) };
+        let job;
+        try {
+            job = await ctx.daemon.enqueue(request, {
+                idempotencyKey,
+                clientId: "control-api",
+                operation: "run.retry",
+                idempotencyRequest,
+            });
+        }
+        catch (error) {
+            const problem = recordTurnEnqueueFailure(ctx.services?.setTurnEnqueueError, retryTurnId, error);
+            const status = error && typeof error === "object" && "status" in error
+                ? Number(error.status)
+                : 500;
+            return ctx.json(res, status, turnEnqueueProblemResponse(problem, {
+                ...(threadId ? { threadId } : {}),
+                ...(retryTurnId ? { turnId: retryTurnId } : {}),
+            }));
+        }
+        return respondToExactRetryJob(ctx, res, sourceRunId, job, threadId, retryTurnId);
+    };
+    try {
+        return await (threadId ? ctx.serializeThreadMutation(threadId, retry) : retry());
+    }
+    catch (error) {
+        return ctx.requestError(res, error, 500);
+    }
+}
+async function respondToExactRetryJob(ctx, res, sourceRunId, job, threadId, retryTurnId) {
+    let accepted;
+    try {
+        accepted = await ctx.waitForRunStart(job.id);
+    }
+    catch (error) {
+        return ctx.json(res, 500, {
+            error: `retry job ${job.id} was accepted but its start could not be observed: ${error instanceof Error ? error.message : String(error)}`,
+            jobId: job.id,
+            retryOf: sourceRunId,
+            ...(threadId ? { threadId } : {}),
+            ...(retryTurnId ? { turnId: retryTurnId } : {}),
+        });
     }
-    const accepted = await ctx.waitForRunStart(job.id);
     if (!accepted.runId && TERMINAL_STATES.has(accepted.state)) {
         // The replayed job died BEFORE it bound a run (e.g. the trust gate's typed
         // 403). A 202 here would hand the caller a durable handle for a run that
-        // will never exist, and `claudexor retry` would exit 0 on a refusal. POST
-        // /runs and POST /threads/:id/turns already project a pre-start terminal
-        // as its typed failure; Exact Retry was the one surface that did not.
-        //
-        // The status mapping deliberately follows POST /runs
-        // (`runStart.unboundRunStartResponse`): the persisted `errorStatus`
-        // verbatim, otherwise 500. The sibling turn surface
-        // (`preStartRefusalStatus` in thread-turn-routes.ts) additionally maps a
-        // status-less `trust_full_access_required` to 403, so a trust refusal
-        // recorded WITHOUT an errorStatus is mapped differently by the two
-        // surfaces. Unifying them is out of scope here.
-        const { status, body } = runStart.unboundRunStartResponse(accepted, true);
-        return ctx.json(res, status, {
-            ...body,
+        // will never exist, and `claudexor retry` would exit 0 on it.
+        const { status, body } = runStart.unboundRunStartResponse(accepted, true, {
             retryOf: sourceRunId,
+            ...(threadId ? { threadId } : {}),
             ...(retryTurnId ? { turnId: retryTurnId } : {}),
         });
+        return ctx.json(res, status, body);
     }
     ctx.json(res, accepted.runId ? 200 : 202, ControlRunRetryResponse.parse({
         retryOf: sourceRunId,
@@ -120,13 +180,13 @@ async function runAgain(ctx, id, res) {
     if (!source)
         return ctx.json(res, 404, { error: "no such run" });
     try {
-        const parsed = ControlRunStartRequest.parse(await sourceParamsWithThreadAttachments(ctx, source));
+        const parsed = ControlRunStartRequest.parse((await sourceReplayInput(ctx, source)).params);
         // Strip EVERY server-owned binding, with disclosure: the draft is an
         // editable POST /runs request, and POST /runs 400s threadId/planRef (they
         // belong to the turn pipeline) — surviving here would make the draft
         // unpostable, and a replayed planRef would smuggle the frozen-plan
         // reference past the boundary (INV-081). Same set as decision-rerun.
-        const { turnId, retryOf, planRunId, planRef, threadId, ...request } = parsed;
+        const { turnId, retryOf, planRunId, planRef, threadId, parentRunId, delegatedFromRunId, ...request } = parsed;
         const differences = [
             ...(turnId
                 ? [{ field: "turnId", change: "omitted", reason: "server-owned turn binding" }]
@@ -149,6 +209,18 @@ async function runAgain(ctx, id, res) {
             ...(threadId
                 ? [{ field: "threadId", change: "omitted", reason: "server-owned thread binding" }]
                 : []),
+            ...(parentRunId
+                ? [{ field: "parentRunId", change: "omitted", reason: "new ordinary run" }]
+                : []),
+            ...(delegatedFromRunId
+                ? [
+                    {
+                        field: "delegatedFromRunId",
+                        change: "omitted",
+                        reason: "Delegate parent authority is not replayable",
+                    },
+                ]
+                : []),
         ];
         ctx.json(res, 200, ControlRunAgainDraft.parse({ sourceRunId: source.runId ?? source.id, request, differences }));
     }
@@ -156,6 +228,11 @@ async function runAgain(ctx, id, res) {
         ctx.requestError(res, error);
     }
 }
+function paramsRecord(rec) {
+    return rec.params && typeof rec.params === "object" && !Array.isArray(rec.params)
+        ? rec.params
+        : {};
+}
 /** QA-035: read the model/effort the engine froze into the source run's
  * TaskContract. Exact Retry injects these as the immutable route so a settings
  * change between runs cannot silently re-resolve the model or drop the effort.
@@ -178,28 +255,32 @@ function readFrozenRouting(source) {
         : undefined;
     return { ...(models ? { models } : {}), ...(efforts ? { efforts } : {}) };
 }
-async function sourceParamsWithThreadAttachments(ctx, source) {
+async function sourceReplayInput(ctx, source) {
     const params = source.params && typeof source.params === "object" && !Array.isArray(source.params)
         ? { ...source.params }
         : {};
-    if (params["attachments"] !== undefined)
-        return params;
     const threadId = typeof params["threadId"] === "string" ? params["threadId"] : null;
     const turnId = typeof params["turnId"] === "string" ? params["turnId"] : null;
     if (!threadId || !turnId || !ctx.services?.threadDetail)
-        return params;
+        return { params, turn: {} };
     const detail = await ctx.services.threadDetail(threadId);
     const turn = detail.turns.find((candidate) => candidate &&
         typeof candidate === "object" &&
         !Array.isArray(candidate) &&
         candidate.id === turnId);
-    if (Array.isArray(turn?.attachments)) {
+    if (params["attachments"] === undefined && Array.isArray(turn?.attachments)) {
         params["attachments"] = turn.attachments.map((attachment) => ({
             resourceId: attachment && typeof attachment === "object"
                 ? attachment.resource_id
                 : undefined,
         }));
     }
-    return params;
+    return {
+        params,
+        turn: {
+            planHash: typeof turn?.plan_hash === "string" ? turn.plan_hash : null,
+            planOverridden: turn?.plan_readiness_overridden === true,
+        },
+    };
 }
 //# sourceMappingURL=run-retry-routes.js.map