@claudexor/orchestrator 4.1.0 → 4.2.0

package/dist/readonlyTerminals.js

@@ -0,0 +1,205 @@
+import { join } from "node:path";
+import { makeOutcomeFacts } from "@claudexor/schema";
+import { readOnlyNoSuccessTerminal } from "./attemptFinalize.js";
+import { budgetFailureRecord, classifyBudgetFailure } from "./budgetFailure.js";
+import { unanimousDeclaredFailure } from "./candidateEvidence.js";
+import { resumableTerminal } from "./continuity-terminal.js";
+import { attemptVendorFailure, dominantHarnessFailureCategory, harnessFailureNextActions, } from "./harnessFailure.js";
+import { poolFailure } from "./pool-attempt-evidence.js";
+import { writeFailure } from "./runTerminalResults.js";
+/** A read-only chain with no successful attempt (QA-036/QA-050/A5). */
+export function readOnlyChainFailureResult(input) {
+    const { store, paths, log, runId, taskId, mode, ledger, attempts, attemptTelemetries } = input;
+    const { budgetStopped, budgetDenial } = input;
+    const last = attempts[attempts.length - 1];
+    const webBlocked = attempts.some((a) => a.status === "blocked");
+    // QA-050: a budget refusal is a BUDGET failure, not a harness one — route
+    // it through the shared classifier so phase/category/code/route and the
+    // remediation are budget-typed (never auth/setup) across every mode.
+    const budgetMapping = budgetStopped && !webBlocked
+        ? classifyBudgetFailure({ denial: budgetDenial, terminal: ledger.terminal() })
+        : null;
+    const { message: singleError, poolAttempts } = poolFailure(budgetMapping?.safeMessage ??
+        last?.error ??
+        (budgetStopped ? "budget exhausted before any attempt" : "harness failed"), attempts);
+    if (input.fallbackOpen || webBlocked) {
+        log.emit("route.fallback.exhausted", {
+            harness_id: last?.harnessId ?? null,
+            attempt_id: last?.attemptId ?? null,
+            reason: "web_evidence_unsatisfied",
+            error: singleError,
+        });
+    }
+    const partialReport = [...attempts].reverse().find((a) => a.report)?.report ?? "";
+    input.writeTelemetry();
+    store.writeText(join(paths.contextDir, "context_error.md"), `# ${budgetMapping ? "Budget Denied" : "Harness Error"}\n\n${singleError}\n`);
+    const roEventRefs = attempts.map((a) => `attempts/${a.attemptId}/events.jsonl`);
+    if (budgetMapping) {
+        writeFailure(store, paths, {
+            ...budgetFailureRecord(budgetMapping, { eventRefs: roEventRefs, runDir: paths.root }),
+            safeMessage: singleError,
+            poolAttempts,
+        });
+    }
+    else {
+        // #31: classify the harness cause across the read-only attempts so auth
+        // guidance appears only on a real auth failure.
+        const roCategory = dominantHarnessFailureCategory(attemptTelemetries.flatMap((a) => a.telemetry.transientFailures));
+        // A5: the terminal already speaks with the LAST attempt's message; its
+        // typed refusal rides along machine-readably instead of reducing to it.
+        const roDeclared = webBlocked ? undefined : last?.declaredFailure;
+        writeFailure(store, paths, {
+            phase: "harness",
+            category: webBlocked ? "policy" : (roDeclared?.category ?? "harness_error"),
+            code: roDeclared?.code ?? null,
+            harnessId: last?.harnessId,
+            attemptId: last?.attemptId,
+            safeMessage: singleError,
+            eventRefs: roEventRefs,
+            runDir: paths.root,
+            resetsAt: roDeclared?.resetsAt ?? null,
+            requestRefusal: roDeclared?.requestRefusal,
+            vendorFailure: attemptVendorFailure(attemptTelemetries, last?.attemptId),
+            poolAttempts,
+            nextActions: harnessFailureNextActions(roCategory),
+        });
+    }
+    // QA-036: re-check the DELIVERABLE through the shared finalizer helper —
+    // a blocked Ask that produced NO answer can no longer read as a succeeded
+    // "Needs review" run (exit 0); it is an honest failure (exit 1).
+    const roTerminal = readOnlyNoSuccessTerminal({
+        webBlocked,
+        hasDeliverable: partialReport.trim().length > 0,
+        budgetStopped,
+        attemptsCount: attempts.length,
+    });
+    const terminalFacts = makeOutcomeFacts(roTerminal.lifecycle, {
+        ...(roTerminal.review ? { review: roTerminal.review } : {}),
+        reason: budgetMapping?.reason ?? roTerminal.reason,
+    });
+    const terminalHarnessId = budgetMapping?.harnessId ?? last?.harnessId;
+    store.writeText(join(paths.finalDir, "summary.md"), `# Run ${runId} (${mode})\n\n- Harness: ${terminalHarnessId ?? "none"}\n- Lifecycle: ${terminalFacts.lifecycle}${terminalFacts.reason ? ` (${terminalFacts.reason})` : ""}\n\n${singleError}\n`);
+    log.emit("output.ready", { kind: "summary", path: "final/summary.md", state: "diagnostic" });
+    if (terminalFacts.lifecycle === "succeeded") {
+        log.emit("run.blocked", {
+            lifecycle: terminalFacts.lifecycle,
+            facts: terminalFacts,
+            harness_id: terminalHarnessId,
+            error: singleError,
+            pool_attempts: poolAttempts,
+            failure_ref: "final/failure.yaml",
+            ...resumableTerminal(store, paths, attempts, true),
+        });
+    }
+    else {
+        log.emit("run.failed", {
+            lifecycle: terminalFacts.lifecycle,
+            facts: terminalFacts,
+            reason: terminalFacts.reason,
+            phase: budgetMapping?.phase,
+            harness_id: terminalHarnessId,
+            error: singleError,
+            pool_attempts: poolAttempts,
+            failure_ref: "final/failure.yaml",
+            ...resumableTerminal(store, paths, attempts, true),
+        });
+    }
+    return {
+        spendUsd: ledger.spend(),
+        runId,
+        taskId,
+        mode,
+        lifecycle: terminalFacts.lifecycle,
+        facts: terminalFacts,
+        winner: null,
+        runDir: paths.root,
+        summary: singleError,
+        candidates: attempts.map((a) => ({
+            attemptId: a.attemptId,
+            harnessId: a.harnessId,
+            status: a.status,
+        })),
+    };
+}
+/** A deep scan whose every explorer failed: no synthesizable deliverable (QA-036). */
+export function deepScanFailureResult(input) {
+    const { store, paths, log, runId, taskId, mode, ledger, attempts, attemptTelemetries } = input;
+    const { budgetStopped, budgetDenial } = input;
+    const blocked = attempts.some((a) => a.status === "blocked");
+    // QA-050/QA-019: only a pure-denial scan may claim a budget failure.
+    const scanBudgetMapping = budgetStopped && !blocked && attempts.every((a) => a.budgetDenied === true)
+        ? classifyBudgetFailure({ denial: budgetDenial, terminal: ledger.terminal() })
+        : null;
+    // D-16 r8: ALL scouts out of context → the aggregate is interrupted.
+    const allInterrupted = attempts.length > 0 && attempts.every((a) => a.interrupted === true);
+    const scanFailFacts = allInterrupted
+        ? makeOutcomeFacts("interrupted", { reason: "context_capacity_exhausted" })
+        : makeOutcomeFacts("failed", {
+            reason: scanBudgetMapping ? scanBudgetMapping.reason : "harness_failed",
+        });
+    const { message, poolAttempts } = poolFailure(scanBudgetMapping
+        ? scanBudgetMapping.safeMessage
+        : attempts.map((a) => `${a.attemptId}/${a.harnessId}: ${a.error ?? "failed"}`).join("\n"), attempts);
+    input.writeTelemetry();
+    if (scanBudgetMapping) {
+        writeFailure(store, paths, {
+            ...budgetFailureRecord(scanBudgetMapping, {
+                eventRefs: attempts.map((a) => `attempts/${a.attemptId}/events.jsonl`),
+                runDir: paths.root,
+            }),
+            safeMessage: message,
+            poolAttempts,
+        });
+    }
+    else {
+        // Mixed causes stay generic; only unanimous evidence may name the scan's cause.
+        const declared = blocked ? null : unanimousDeclaredFailure(attempts);
+        const scanCategory = dominantHarnessFailureCategory(attemptTelemetries.flatMap((a) => a.telemetry.transientFailures));
+        writeFailure(store, paths, {
+            phase: "harness",
+            category: blocked ? "policy" : (declared?.category ?? "harness_error"),
+            code: declared?.code,
+            resetsAt: declared?.resetsAt,
+            requestRefusal: declared?.requestRefusal,
+            safeMessage: message || "all explorers failed",
+            eventRefs: attempts.map((a) => `attempts/${a.attemptId}/events.jsonl`),
+            runDir: paths.root,
+            poolAttempts,
+            nextActions: [
+                ...harnessFailureNextActions(scanCategory).filter((a) => !a.startsWith("Retry")),
+                "Reduce explore width",
+                "Retry after setup",
+            ],
+        });
+    }
+    // QA-036: no successful explorer means no synthesizable deliverable.
+    store.writeText(join(paths.finalDir, "summary.md"), `# Run ${runId} (${mode})\n\n- Lifecycle: ${scanFailFacts.lifecycle}${scanFailFacts.reason ? ` (${scanFailFacts.reason})` : ""}\n\n${message}\n`);
+    log.emit("output.ready", { kind: "summary", path: "final/summary.md", state: "diagnostic" });
+    log.emit("run.failed", {
+        lifecycle: scanFailFacts.lifecycle,
+        facts: scanFailFacts,
+        reason: scanFailFacts.reason,
+        phase: scanBudgetMapping ? scanBudgetMapping.phase : "harness",
+        error: message,
+        pool_attempts: poolAttempts,
+        failure_ref: "final/failure.yaml",
+        ...resumableTerminal(store, paths, attempts, true),
+    });
+    return {
+        spendUsd: ledger.spend(),
+        runId,
+        taskId,
+        mode,
+        lifecycle: scanFailFacts.lifecycle,
+        facts: scanFailFacts,
+        winner: null,
+        runDir: paths.root,
+        summary: message,
+        candidates: attempts.map((a) => ({
+            attemptId: a.attemptId,
+            harnessId: a.harnessId,
+            status: a.status,
+        })),
+    };
+}
+//# sourceMappingURL=readonlyTerminals.js.map

package/dist/readonlyTerminals.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"readonlyTerminals.js","sourceRoot":"","sources":["../src/readonlyTerminals.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAIjC,OAAO,EAAE,gBAAgB,EAAiB,MAAM,mBAAmB,CAAC;AAGpE,OAAO,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AACjE,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAAqB,MAAM,oBAAoB,CAAC;AACnG,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,EAAE,iBAAiB,EAAgC,MAAM,0BAA0B,CAAC;AAC3F,OAAO,EACL,oBAAoB,EACpB,8BAA8B,EAC9B,yBAAyB,GAC1B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,EAAE,YAAY,EAAwB,MAAM,yBAAyB,CAAC;AAsC7E,uEAAuE;AACvE,MAAM,UAAU,0BAA0B,CACxC,KAA0D;IAE1D,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,kBAAkB,EAAE,GAAG,KAAK,CAAC;IAC/F,MAAM,EAAE,aAAa,EAAE,YAAY,EAAE,GAAG,KAAK,CAAC;IAC9C,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC3C,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;IAChE,0EAA0E;IAC1E,wEAAwE;IACxE,qEAAqE;IACrE,MAAM,aAAa,GACjB,aAAa,IAAI,CAAC,UAAU;QAC1B,CAAC,CAAC,qBAAqB,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;QAC9E,CAAC,CAAC,IAAI,CAAC;IACX,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,GAAG,WAAW,CACxD,aAAa,EAAE,WAAW;QACxB,IAAI,EAAE,KAAK;QACX,CAAC,aAAa,CAAC,CAAC,CAAC,qCAAqC,CAAC,CAAC,CAAC,gBAAgB,CAAC,EAC5E,QAAQ,CACT,CAAC;IACF,IAAI,KAAK,CAAC,YAAY,IAAI,UAAU,EAAE,CAAC;QACrC,GAAG,CAAC,IAAI,CAAC,0BAA0B,EAAE;YACnC,UAAU,EAAE,IAAI,EAAE,SAAS,IAAI,IAAI;YACnC,UAAU,EAAE,IAAI,EAAE,SAAS,IAAI,IAAI;YACnC,MAAM,EAAE,0BAA0B;YAClC,KAAK,EAAE,WAAW;SACnB,CAAC,CAAC;IACL,CAAC;IACD,MAAM,aAAa,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,IAAI,EAAE,CAAC;IAClF,KAAK,CAAC,cAAc,EAAE,CAAC;IACvB,KAAK,CAAC,SAAS,CACb,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,kBAAkB,CAAC,EAC1C,KAAK,aAAa,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,eAAe,OAAO,WAAW,IAAI,CAC7E,CAAC;IACF,MAAM,WAAW,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,SAAS,eAAe,CAAC,CAAC;IAChF,IAAI,aAAa,EAAE,CAAC;QAClB,YAAY,CAAC,KAAK,EAAE,KAAK,EAAE;YACzB,GAAG,mBAAmB,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;YACrF,WAAW,EAAE,WAAW;YACxB,YAAY;SACb,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,wEAAwE;QACxE,gDAAgD;QAChD,MAAM,UAAU,GAAG,8BAA8B,CAC/C,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CACjE,CAAC;QACF,uEAAuE;QACvE,wEAAwE;QACxE,MAAM,UAAU,GAAG,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,eAAe,CAAC;QAClE,YAAY,CAAC,KAAK,EAAE,KAAK,EAAE;YACzB,KAAK,EAAE,SAAS;YAChB,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,QAAQ,IAAI,eAAe,CAAC;YAC3E,IAAI,EAAE,UAAU,EAAE,IAAI,IAAI,IAAI;YAC9B,SAAS,EAAE,IAAI,EAAE,SAAS;YAC1B,SAAS,EAAE,IAAI,EAAE,SAAS;YAC1B,WAAW,EAAE,WAAW;YACxB,SAAS,EAAE,WAAW;YACtB,MAAM,EAAE,KAAK,CAAC,IAAI;YAClB,QAAQ,EAAE,UAAU,EAAE,QAAQ,IAAI,IAAI;YACtC,cAAc,EAAE,UAAU,EAAE,cAAc;YAC1C,aAAa,EAAE,oBAAoB,CAAC,kBAAkB,EAAE,IAAI,EAAE,SAAS,CAAC;YACxE,YAAY;YACZ,WAAW,EAAE,yBAAyB,CAAC,UAAU,CAAC;SACnD,CAAC,CAAC;IACL,CAAC;IACD,yEAAyE;IACzE,0EAA0E;IAC1E,iEAAiE;IACjE,MAAM,UAAU,GAAG,yBAAyB,CAAC;QAC3C,UAAU;QACV,cAAc,EAAE,aAAa,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAC/C,aAAa;QACb,aAAa,EAAE,QAAQ,CAAC,MAAM;KAC/B,CAAC,CAAC;IACH,MAAM,aAAa,GAAG,gBAAgB,CAAC,UAAU,CAAC,SAAS,EAAE;QAC3D,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,MAAM,EAAE,aAAa,EAAE,MAAM,IAAI,UAAU,CAAC,MAAM;KACnD,CAAC,CAAC;IACH,MAAM,iBAAiB,GAAG,aAAa,EAAE,SAAS,IAAI,IAAI,EAAE,SAAS,CAAC;IACtE,KAAK,CAAC,SAAS,CACb,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,YAAY,CAAC,EAClC,SAAS,KAAK,KAAK,IAAI,mBAAmB,iBAAiB,IAAI,MAAM,kBAAkB,aAAa,CAAC,SAAS,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,OAAO,WAAW,IAAI,CAChM,CAAC;IACF,GAAG,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;IAC7F,IAAI,aAAa,CAAC,SAAS,KAAK,WAAW,EAAE,CAAC;QAC5C,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE;YACtB,SAAS,EAAE,aAAa,CAAC,SAAS;YAClC,KAAK,EAAE,aAAa;YACpB,UAAU,EAAE,iBAAiB;YAC7B,KAAK,EAAE,WAAW;YAClB,aAAa,EAAE,YAAY;YAC3B,WAAW,EAAE,oBAAoB;YACjC,GAAG,iBAAiB,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC;SACnD,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE;YACrB,SAAS,EAAE,aAAa,CAAC,SAAS;YAClC,KAAK,EAAE,aAAa;YACpB,MAAM,EAAE,aAAa,CAAC,MAAM;YAC5B,KAAK,EAAE,aAAa,EAAE,KAAK;YAC3B,UAAU,EAAE,iBAAiB;YAC7B,KAAK,EAAE,WAAW;YAClB,aAAa,EAAE,YAAY;YAC3B,WAAW,EAAE,oBAAoB;YACjC,GAAG,iBAAiB,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC;SACnD,CAAC,CAAC;IACL,CAAC;IACD,OAAO;QACL,QAAQ,EAAE,MAAM,CAAC,KAAK,EAAE;QACxB,KAAK;QACL,MAAM;QACN,IAAI;QACJ,SAAS,EAAE,aAAa,CAAC,SAAS;QAClC,KAAK,EAAE,aAAa;QACpB,MAAM,EAAE,IAAI;QACZ,MAAM,EAAE,KAAK,CAAC,IAAI;QAClB,OAAO,EAAE,WAAW;QACpB,UAAU,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC/B,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,MAAM,EAAE,CAAC,CAAC,MAAM;SACjB,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,qBAAqB,CAAC,KAA8B;IAClE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,kBAAkB,EAAE,GAAG,KAAK,CAAC;IAC/F,MAAM,EAAE,aAAa,EAAE,YAAY,EAAE,GAAG,KAAK,CAAC;IAC9C,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;IAC7D,qEAAqE;IACrE,MAAM,iBAAiB,GACrB,aAAa,IAAI,CAAC,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,IAAI,CAAC;QACzE,CAAC,CAAC,qBAAqB,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;QAC9E,CAAC,CAAC,IAAI,CAAC;IACX,qEAAqE;IACrE,MAAM,cAAc,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC;IAC5F,MAAM,aAAa,GAAG,cAAc;QAClC,CAAC,CAAC,gBAAgB,CAAC,aAAa,EAAE,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC;QAC3E,CAAC,CAAC,gBAAgB,CAAC,QAAQ,EAAE;YACzB,MAAM,EAAE,iBAAiB,CAAC,CAAC,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,gBAAgB;SACxE,CAAC,CAAC;IACP,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,WAAW,CAC3C,iBAAiB;QACf,CAAC,CAAC,iBAAiB,CAAC,WAAW;QAC/B,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,KAAK,IAAI,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAC3F,QAAQ,CACT,CAAC;IACF,KAAK,CAAC,cAAc,EAAE,CAAC;IACvB,IAAI,iBAAiB,EAAE,CAAC;QACtB,YAAY,CAAC,KAAK,EAAE,KAAK,EAAE;YACzB,GAAG,mBAAmB,CAAC,iBAAiB,EAAE;gBACxC,SAAS,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,SAAS,eAAe,CAAC;gBACtE,MAAM,EAAE,KAAK,CAAC,IAAI;aACnB,CAAC;YACF,WAAW,EAAE,OAAO;YACpB,YAAY;SACb,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,gFAAgF;QAChF,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,wBAAwB,CAAC,QAAQ,CAAC,CAAC;QACrE,MAAM,YAAY,GAAG,8BAA8B,CACjD,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CACjE,CAAC;QACF,YAAY,CAAC,KAAK,EAAE,KAAK,EAAE;YACzB,KAAK,EAAE,SAAS;YAChB,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,QAAQ,IAAI,eAAe,CAAC;YACtE,IAAI,EAAE,QAAQ,EAAE,IAAI;YACpB,QAAQ,EAAE,QAAQ,EAAE,QAAQ;YAC5B,cAAc,EAAE,QAAQ,EAAE,cAAc;YACxC,WAAW,EAAE,OAAO,IAAI,sBAAsB;YAC9C,SAAS,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,SAAS,eAAe,CAAC;YACtE,MAAM,EAAE,KAAK,CAAC,IAAI;YAClB,YAAY;YACZ,WAAW,EAAE;gBACX,GAAG,yBAAyB,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;gBAChF,sBAAsB;gBACtB,mBAAmB;aACpB;SACF,CAAC,CAAC;IACL,CAAC;IACD,qEAAqE;IACrE,KAAK,CAAC,SAAS,CACb,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,YAAY,CAAC,EAClC,SAAS,KAAK,KAAK,IAAI,qBAAqB,aAAa,CAAC,SAAS,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,OAAO,OAAO,IAAI,CACjJ,CAAC;IACF,GAAG,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;IAC7F,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE;QACrB,SAAS,EAAE,aAAa,CAAC,SAAS;QAClC,KAAK,EAAE,aAAa;QACpB,MAAM,EAAE,aAAa,CAAC,MAAM;QAC5B,KAAK,EAAE,iBAAiB,CAAC,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;QAC9D,KAAK,EAAE,OAAO;QACd,aAAa,EAAE,YAAY;QAC3B,WAAW,EAAE,oBAAoB;QACjC,GAAG,iBAAiB,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC;KACnD,CAAC,CAAC;IACH,OAAO;QACL,QAAQ,EAAE,MAAM,CAAC,KAAK,EAAE;QACxB,KAAK;QACL,MAAM;QACN,IAAI;QACJ,SAAS,EAAE,aAAa,CAAC,SAAS;QAClC,KAAK,EAAE,aAAa;QACpB,MAAM,EAAE,IAAI;QACZ,MAAM,EAAE,KAAK,CAAC,IAAI;QAClB,OAAO,EAAE,OAAO;QAChB,UAAU,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC/B,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,MAAM,EAAE,CAAC,CAAC,MAAM;SACjB,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC"}

package/dist/reviewEvidence.d.ts

@@ -0,0 +1,4 @@
+import type { ArtifactStore } from "@claudexor/artifact-store";
+export declare function prepareReviewEvidenceDir(sourceDir: string, _candidateCwd: string): string;
+export declare function recordReviewEvidenceCleanup(store: ArtifactStore, metadataPath: string, attemptId: string, candidateEvidenceDir: string, candidateCwd: string): void;
+//# sourceMappingURL=reviewEvidence.d.ts.map

package/dist/reviewEvidence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reviewEvidence.d.ts","sourceRoot":"","sources":["../src/reviewEvidence.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAG/D,wBAAgB,wBAAwB,CAAC,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,MAAM,CASzF;AAqBD,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,aAAa,EACpB,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,MAAM,EACjB,oBAAoB,EAAE,MAAM,EAC5B,YAAY,EAAE,MAAM,GACnB,IAAI,CAYN"}

package/dist/reviewEvidence.js

@@ -0,0 +1,46 @@
+/**
+ * Review evidence preflight and cleanup for candidate review (`candidateReview.ts`):
+ * the evidence packet is an external runtime artifact that ReviewEngine copies
+ * into its own reviewer workspace; nothing is ever written into the candidate tree.
+ */
+import { existsSync } from "node:fs";
+import { preflightEvidence } from "@claudexor/context";
+export function prepareReviewEvidenceDir(sourceDir, _candidateCwd) {
+    // Evidence is an external runtime artifact. ReviewEngine builds a separate
+    // reviewer workspace and copies the packet there; writing/copying it into
+    // the candidate tree would contaminate the Git diff and, worse, overwrite a
+    // user-owned path with the same name.
+    if (!existsSync(sourceDir)) {
+        throw new Error(`review evidence preflight failed for ${sourceDir}: source packet missing`);
+    }
+    return requireReviewEvidence(sourceDir);
+}
+function requireReviewEvidence(dir) {
+    const result = preflightEvidence(dir);
+    if (result.ok)
+        return dir;
+    const missing = result.missing.length ? `missing=${result.missing.join(",")}` : "";
+    const empty = result.empty.length ? `empty=${result.empty.join(",")}` : "";
+    throw new Error(`review evidence preflight failed for ${dir}: ${[missing, empty].filter(Boolean).join(" ")}`);
+}
+function cleanupReviewEvidenceDir(_candidateEvidenceDir, _candidateCwd) {
+    // No candidate-tree packet exists in v2; external runtime retention is
+    // governed by the artifact/journal lifecycle rather than best-effort rm.
+    return null;
+}
+export function recordReviewEvidenceCleanup(store, metadataPath, attemptId, candidateEvidenceDir, candidateCwd) {
+    const cleanupMetadata = cleanupReviewEvidenceDir(candidateEvidenceDir, candidateCwd);
+    if (!cleanupMetadata)
+        return;
+    try {
+        store.writeYaml(metadataPath, {
+            ...cleanupMetadata,
+            attempt_id: attemptId,
+        });
+    }
+    catch {
+        // Cleanup telemetry must not mask the review/revalidation failure that
+        // triggered best-effort cleanup.
+    }
+}
+//# sourceMappingURL=reviewEvidence.js.map

package/dist/reviewEvidence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reviewEvidence.js","sourceRoot":"","sources":["../src/reviewEvidence.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAErC,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAEvD,MAAM,UAAU,wBAAwB,CAAC,SAAiB,EAAE,aAAqB;IAC/E,2EAA2E;IAC3E,0EAA0E;IAC1E,4EAA4E;IAC5E,sCAAsC;IACtC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,wCAAwC,SAAS,yBAAyB,CAAC,CAAC;IAC9F,CAAC;IACD,OAAO,qBAAqB,CAAC,SAAS,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,qBAAqB,CAAC,GAAW;IACxC,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,MAAM,CAAC,EAAE;QAAE,OAAO,GAAG,CAAC;IAC1B,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACnF,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3E,MAAM,IAAI,KAAK,CACb,wCAAwC,GAAG,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAC7F,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAC/B,qBAA6B,EAC7B,aAAqB;IAErB,uEAAuE;IACvE,yEAAyE;IACzE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,KAAoB,EACpB,YAAoB,EACpB,SAAiB,EACjB,oBAA4B,EAC5B,YAAoB;IAEpB,MAAM,eAAe,GAAG,wBAAwB,CAAC,oBAAoB,EAAE,YAAY,CAAC,CAAC;IACrF,IAAI,CAAC,eAAe;QAAE,OAAO;IAC7B,IAAI,CAAC;QACH,KAAK,CAAC,SAAS,CAAC,YAAY,EAAE;YAC5B,GAAG,eAAe;YAClB,UAAU,EAAE,SAAS;SACtB,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,uEAAuE;QACvE,iCAAiC;IACnC,CAAC;AACH,CAAC"}

package/dist/rotation-predicate.d.ts

@@ -1,27 +1,5 @@
-/**
- * A2: the WIDENED reactive rotation predicate (W5.4 + the structural branch).
- *
- * Two independent ways an attempt becomes rotation-eligible:
- *
- * 1. TYPED fast path (W5.4 canon, unchanged): the attempt saw a TYPED vendor
- *    rate-limit signal. Deliberately NOT hardened against thinking/tool
- *    activity — the canon guard is no-deliverable/no-mutation, not
- *    no-progress.
- *
- * 2. STRUCTURAL branch (owner decision 7=A): the attempt ended in a TERMINAL,
- *    non-transient death BEFORE the agent demonstrably did any work. This
- *    deliberately covers ANY pre-progress non-transient death — an invalid
- *    flag, a missing binary, an untyped vendor refusal — bounded by the
- *    profile pool size, and is NEVER narrowed by error-text matching.
- *    Transient-retryable deaths are excluded: the transient machinery retries
- *    them on the SAME profile first (rotation never fires on a plain
- *    transient).
- *
- * Both branches require an empty deliverable and no observed workspace
- * mutation — a partially-acted attempt never silently reruns under another
- * credential.
- */
 import type { AttemptOutputMarkers } from "./attemptOutputMarkers.js";
+import type { TryFacts } from "./inrun-continuity-types.js";
 /** Typed evidence one native try presents to the rotation predicate. */
 export interface RotationEvidence {
     requestRefused?: boolean;
@@ -71,4 +49,10 @@ export declare function reactiveRotationEvidence(args: {
     deliverableEmpty: boolean;
     workspaceDiffNonEmpty?: boolean;
 }): RotationEvidence;
+/**
+ * One settled in-run try's facts as that fold's input. After progress
+ * (`forceEligible`) the no-deliverable/no-mutation fence scopes only the
+ * `fresh` carrier: the planner picks the carrier, rotation only the account.
+ */
+export declare function inRunRotationArgs(facts: TryFacts, forceEligible: boolean): Parameters<typeof reactiveRotationEvidence>[0];
 //# sourceMappingURL=rotation-predicate.d.ts.map

package/dist/rotation-predicate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rotation-predicate.d.ts","sourceRoot":"","sources":["../src/rotation-predicate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAEtE,wEAAwE;AACxE,MAAM,WAAW,gBAAgB;IAC/B,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,qEAAqE;IACrE,aAAa,EAAE,OAAO,CAAC;IACvB;;gFAE4E;IAC5E,gBAAgB,EAAE,OAAO,CAAC;IAC1B;;iFAE6E;IAC7E,gBAAgB,EAAE,OAAO,CAAC;IAC1B;iFAC6E;IAC7E,yBAAyB,EAAE,OAAO,CAAC;IACnC;gFAC4E;IAC5E,gBAAgB,EAAE,OAAO,CAAC;CAC3B;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE;IAC3C,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,aAAa,EAAE,OAAO,CAAC;IACvB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,yBAAyB,CAAC,EAAE,OAAO,CAAC;IACpC,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B,GAAG,OAAO,CAKV;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE;IAC7C,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,OAAO,EAAE,oBAAoB,CAAC;IAC9B,aAAa,EAAE,OAAO,CAAC;IACvB,YAAY,EAAE,OAAO,CAAC;IACtB,cAAc,EAAE,OAAO,CAAC;IACxB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,qBAAqB,CAAC,EAAE,OAAO,CAAC;CACjC,GAAG,gBAAgB,CASnB"}
+{"version":3,"file":"rotation-predicate.d.ts","sourceRoot":"","sources":["../src/rotation-predicate.ts"],"names":[],"mappings":"AAwBA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AAE5D,wEAAwE;AACxE,MAAM,WAAW,gBAAgB;IAC/B,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,qEAAqE;IACrE,aAAa,EAAE,OAAO,CAAC;IACvB;;gFAE4E;IAC5E,gBAAgB,EAAE,OAAO,CAAC;IAC1B;;iFAE6E;IAC7E,gBAAgB,EAAE,OAAO,CAAC;IAC1B;iFAC6E;IAC7E,yBAAyB,EAAE,OAAO,CAAC;IACnC;gFAC4E;IAC5E,gBAAgB,EAAE,OAAO,CAAC;CAC3B;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE;IAC3C,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,aAAa,EAAE,OAAO,CAAC;IACvB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,yBAAyB,CAAC,EAAE,OAAO,CAAC;IACpC,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B,GAAG,OAAO,CAKV;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE;IAC7C,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,OAAO,EAAE,oBAAoB,CAAC;IAC9B,aAAa,EAAE,OAAO,CAAC;IACvB,YAAY,EAAE,OAAO,CAAC;IACtB,cAAc,EAAE,OAAO,CAAC;IACxB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,qBAAqB,CAAC,EAAE,OAAO,CAAC;CACjC,GAAG,gBAAgB,CASnB;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,QAAQ,EACf,aAAa,EAAE,OAAO,GACrB,UAAU,CAAC,OAAO,wBAAwB,CAAC,CAAC,CAAC,CAAC,CAehD"}

package/dist/rotation-predicate.js

@@ -1,3 +1,27 @@
+/**
+ * A2: the WIDENED reactive rotation predicate (W5.4 + the structural branch).
+ *
+ * Two independent ways an attempt becomes rotation-eligible:
+ *
+ * 1. TYPED fast path (W5.4 canon, unchanged): the attempt saw a TYPED vendor
+ *    rate-limit signal. Deliberately NOT hardened against thinking/tool
+ *    activity — the canon guard is no-deliverable/no-mutation, not
+ *    no-progress.
+ *
+ * 2. STRUCTURAL branch (owner decision 7=A): the attempt ended in a TERMINAL,
+ *    non-transient death BEFORE the agent demonstrably did any work. This
+ *    deliberately covers ANY pre-progress non-transient death — an invalid
+ *    flag, a missing binary, an untyped vendor refusal — bounded by the
+ *    profile pool size, and is NEVER narrowed by error-text matching.
+ *    Transient-retryable deaths are excluded: the transient machinery retries
+ *    them on the SAME profile first (rotation never fires on a plain
+ *    transient).
+ *
+ * Both branches require an empty deliverable and no observed workspace
+ * mutation — a partially-acted attempt never silently reruns under another
+ * credential.
+ */
+import { acceptedTryOutput } from "@claudexor/core";
 /**
  * `rotation_retry_eligible`: the one predicate both lanes and both branches
  * read. Optional fields default CONSERVATIVELY (absent evidence never widens
@@ -29,4 +53,25 @@ export function reactiveRotationEvidence(args) {
         sawAgentProgress: args.markers.sawAgentProgress,
     };
 }
+/**
+ * One settled in-run try's facts as that fold's input. After progress
+ * (`forceEligible`) the no-deliverable/no-mutation fence scopes only the
+ * `fresh` carrier: the planner picks the carrier, rotation only the account.
+ */
+export function inRunRotationArgs(facts, forceEligible) {
+    const accepted = acceptedTryOutput(facts.answer, facts.harnessErrored);
+    return {
+        markers: forceEligible
+            ? { sawAgentProgress: false, fileChanges: 0, sawSessionStart: facts.markers.sawSessionStart }
+            : facts.markers,
+        requestRefused: facts.requestRefused,
+        sawTypedLimit: facts.sawTypedLimit,
+        sawRetryable: facts.sawRetryable,
+        attemptErrored: facts.harnessErrored,
+        deliverableEmpty: forceEligible
+            ? true
+            : facts.workspaceDiffNonEmpty !== true && accepted.length === 0,
+        workspaceDiffNonEmpty: forceEligible ? false : facts.workspaceDiffNonEmpty,
+    };
+}
 //# sourceMappingURL=rotation-predicate.js.map

package/dist/rotation-predicate.js.map

@@ -1 +1 @@
-{"version":3,"file":"rotation-predicate.js","sourceRoot":"","sources":["../src/rotation-predicate.ts"],"names":[],"mappings":"AA8CA;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAOrC;IACC,IAAI,KAAK,CAAC,cAAc;QAAE,OAAO,KAAK,CAAC;IACvC,IAAI,CAAC,KAAK,CAAC,gBAAgB,IAAI,KAAK,CAAC,gBAAgB,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC7E,IAAI,KAAK,CAAC,aAAa;QAAE,OAAO,IAAI,CAAC;IACrC,OAAO,KAAK,CAAC,yBAAyB,KAAK,IAAI,IAAI,KAAK,CAAC,gBAAgB,KAAK,IAAI,CAAC;AACrF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAQxC;IACC,OAAO;QACL,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,gBAAgB,EAAE,CAAC,IAAI,CAAC,qBAAqB,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,WAAW,GAAG,CAAC;QACvF,yBAAyB,EAAE,IAAI,CAAC,cAAc,IAAI,CAAC,IAAI,CAAC,YAAY;QACpE,gBAAgB,EAAE,IAAI,CAAC,OAAO,CAAC,gBAAgB;KAChD,CAAC;AACJ,CAAC"}
+{"version":3,"file":"rotation-predicate.js","sourceRoot":"","sources":["../src/rotation-predicate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAyBpD;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAOrC;IACC,IAAI,KAAK,CAAC,cAAc;QAAE,OAAO,KAAK,CAAC;IACvC,IAAI,CAAC,KAAK,CAAC,gBAAgB,IAAI,KAAK,CAAC,gBAAgB,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC7E,IAAI,KAAK,CAAC,aAAa;QAAE,OAAO,IAAI,CAAC;IACrC,OAAO,KAAK,CAAC,yBAAyB,KAAK,IAAI,IAAI,KAAK,CAAC,gBAAgB,KAAK,IAAI,CAAC;AACrF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAQxC;IACC,OAAO;QACL,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,gBAAgB,EAAE,CAAC,IAAI,CAAC,qBAAqB,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,WAAW,GAAG,CAAC;QACvF,yBAAyB,EAAE,IAAI,CAAC,cAAc,IAAI,CAAC,IAAI,CAAC,YAAY;QACpE,gBAAgB,EAAE,IAAI,CAAC,OAAO,CAAC,gBAAgB;KAChD,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAC/B,KAAe,EACf,aAAsB;IAEtB,MAAM,QAAQ,GAAG,iBAAiB,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;IACvE,OAAO;QACL,OAAO,EAAE,aAAa;YACpB,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,EAAE,eAAe,EAAE,KAAK,CAAC,OAAO,CAAC,eAAe,EAAE;YAC7F,CAAC,CAAC,KAAK,CAAC,OAAO;QACjB,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,gBAAgB,EAAE,aAAa;YAC7B,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,KAAK,CAAC,qBAAqB,KAAK,IAAI,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QACjE,qBAAqB,EAAE,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,qBAAqB;KAC3E,CAAC;AACJ,CAAC"}

package/dist/runEventLog.d.ts

@@ -44,6 +44,7 @@ export declare function beginAnnouncedRun(start: RunAnnouncementInput, announce:
     paths: RunPaths;
     log: EventLog;
     ledger: BudgetLedger;
+    runContext: AnnouncedRunContext;
 };
 export {};
 //# sourceMappingURL=runEventLog.d.ts.map

package/dist/runEventLog.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runEventLog.d.ts","sourceRoot":"","sources":["../src/runEventLog.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AACzE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,QAAQ,EAAE,KAAK,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAC9E,OAAO,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAGzF,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAChF,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAElD,OAAO,EAAuB,KAAK,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAExF,UAAU,gBAAgB;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,QAAQ,KAAK,IAAI,CAAC;IAC3C,iBAAiB,CAAC,EAAE,uBAAuB,CAAC;IAC5C,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,QAAQ,KAAK,IAAI,CAAC;CACrC;AAED,UAAU,oBAAoB;IAC5B,KAAK,EAAE,QAAQ,CAAC;IAChB,QAAQ,EAAE,YAAY,CAAC;IACvB,cAAc,EAAE,SAAS,aAAa,EAAE,CAAC;IACzC,KAAK,EAAE,aAAa,CAAC;IACrB,SAAS,CAAC,EAAE,yBAAyB,CAAC;IACtC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,QAAQ,CAAC;IACf,KAAK,EAAE,MAAM,GAAG,aAAa,GAAG,MAAM,GAAG,QAAQ,CAAC;IAClD,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,mGAAmG;AACnG,wBAAgB,iBAAiB,CAC/B,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,gBAAgB,GACtB,QAAQ,CAWV;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,CAO5E;AAcD;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,oBAAoB,EAC3B,QAAQ,EAAE,CAAC,OAAO,EAAE,mBAAmB,KAAK,IAAI,GAC/C;IAAE,KAAK,EAAE,aAAa,CAAC;IAAC,KAAK,EAAE,QAAQ,CAAC;IAAC,GAAG,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,YAAY,CAAA;CAAE,CA6BhF"}
+{"version":3,"file":"runEventLog.d.ts","sourceRoot":"","sources":["../src/runEventLog.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AACzE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,QAAQ,EAAE,KAAK,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAC9E,OAAO,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAGzF,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAChF,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAElD,OAAO,EAAuB,KAAK,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAExF,UAAU,gBAAgB;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,QAAQ,KAAK,IAAI,CAAC;IAC3C,iBAAiB,CAAC,EAAE,uBAAuB,CAAC;IAC5C,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,QAAQ,KAAK,IAAI,CAAC;CACrC;AAED,UAAU,oBAAoB;IAC5B,KAAK,EAAE,QAAQ,CAAC;IAChB,QAAQ,EAAE,YAAY,CAAC;IACvB,cAAc,EAAE,SAAS,aAAa,EAAE,CAAC;IACzC,KAAK,EAAE,aAAa,CAAC;IACrB,SAAS,CAAC,EAAE,yBAAyB,CAAC;IACtC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,QAAQ,CAAC;IACf,KAAK,EAAE,MAAM,GAAG,aAAa,GAAG,MAAM,GAAG,QAAQ,CAAC;IAClD,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,mGAAmG;AACnG,wBAAgB,iBAAiB,CAC/B,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,gBAAgB,GACtB,QAAQ,CAWV;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,CAO5E;AAcD;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,oBAAoB,EAC3B,QAAQ,EAAE,CAAC,OAAO,EAAE,mBAAmB,KAAK,IAAI,GAC/C;IACD,KAAK,EAAE,aAAa,CAAC;IACrB,KAAK,EAAE,QAAQ,CAAC;IAChB,GAAG,EAAE,QAAQ,CAAC;IACd,MAAM,EAAE,YAAY,CAAC;IACrB,UAAU,EAAE,mBAAmB,CAAC;CACjC,CA4BA"}

package/dist/runEventLog.js

@@ -63,9 +63,10 @@ export function beginAnnouncedRun(start, announce) {
         log.emit("run.created", { mode, prompt: redactSecrets(start.prompt) });
         return preparedLedger;
     });
-    announce(announcedRunContext({ log, store, paths, runId, taskId, mode, phase }, ledger, () => authority?.hasParent(runId) === true));
+    const runContext = announcedRunContext({ log, store, paths, runId, taskId, mode, phase }, ledger, () => authority?.hasParent(runId) === true);
+    announce(runContext);
     safeInvoke(input.onRunStart, { runId, taskId, runDir: paths.root });
     announcePreparedProjectGitInitialization(input, log);
-    return { store, paths, log, ledger };
+    return { store, paths, log, ledger, runContext };
 }
 //# sourceMappingURL=runEventLog.js.map

package/dist/runEventLog.js.map

@@ -1 +1 @@
-{"version":3,"file":"runEventLog.js","sourceRoot":"","sources":["../src/runEventLog.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,QAAQ,EAAgC,MAAM,sBAAsB,CAAC;AAE9E,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC5D,OAAO,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAGhE,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAA4B,MAAM,yBAAyB,CAAC;AAsBxF,mGAAmG;AACnG,MAAM,UAAU,iBAAiB,CAC/B,UAAkB,EAClB,KAAa,EACb,MAAc,EACd,KAAuB;IAEvB,MAAM,GAAG,GAAG,IAAI,QAAQ,CACtB,UAAU,EACV,KAAK,EACL,MAAM,EACN,KAAK,CAAC,cAAc,EACpB,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,OAAO,CACd,CAAC;IACF,IAAI,KAAK,CAAC,iBAAiB;QAAE,GAAG,CAAC,sBAAsB,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IACjF,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CAAI,GAAa,EAAE,OAAgB;IACvE,IAAI,CAAC;QACH,OAAO,OAAO,EAAE,CAAC;IACnB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,GAAG,CAAC,OAAO,EAAE,CAAC;QACd,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,wCAAwC,CAAC,KAAe,EAAE,GAAa;IAC9E,MAAM,MAAM,GAAG,KAAK,CAAC,wBAAwB,CAAC;IAC9C,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,WAAW,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC;QAAE,OAAO;IAC1E,GAAG,CAAC,IAAI,CAAC,yBAAyB,EAAE;QAClC,SAAS,EAAE,KAAK,CAAC,QAAQ;QACzB,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,kBAAkB,EAAE,MAAM,CAAC,iBAAiB;QAC5C,gBAAgB,EAAE,MAAM,CAAC,eAAe;QACxC,QAAQ,EAAE,MAAM,CAAC,OAAO;KACzB,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAC/B,KAA2B,EAC3B,QAAgD;IAEhD,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAChG,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACrC,MAAM,GAAG,GAAG,iBAAiB,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IACtE,MAAM,MAAM,GAAG,sBAAsB,CAAC,GAAG,EAAE,GAAG,EAAE;QAC9C,MAAM,cAAc,GAAG,gBAAgB,CAAC;YACtC,KAAK;YACL,QAAQ;YACR,GAAG;YACH,SAAS;YACT,cAAc;SACf,CAAC,CAAC;QACH,IAAI,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC;YAC7B,MAAM,IAAI,GAAG,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC;YACrC,wBAAwB,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC1E,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACvE,OAAO,cAAc,CAAC;IACxB,CAAC,CAAC,CAAC;IACH,QAAQ,CACN,mBAAmB,CACjB,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,EACjD,MAAM,EACN,GAAG,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,KAAK,CAAC,KAAK,IAAI,CAC3C,CACF,CAAC;IACF,UAAU,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACpE,wCAAwC,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACrD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;AACvC,CAAC"}
+{"version":3,"file":"runEventLog.js","sourceRoot":"","sources":["../src/runEventLog.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,QAAQ,EAAgC,MAAM,sBAAsB,CAAC;AAE9E,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC5D,OAAO,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAGhE,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAA4B,MAAM,yBAAyB,CAAC;AAsBxF,mGAAmG;AACnG,MAAM,UAAU,iBAAiB,CAC/B,UAAkB,EAClB,KAAa,EACb,MAAc,EACd,KAAuB;IAEvB,MAAM,GAAG,GAAG,IAAI,QAAQ,CACtB,UAAU,EACV,KAAK,EACL,MAAM,EACN,KAAK,CAAC,cAAc,EACpB,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,OAAO,CACd,CAAC;IACF,IAAI,KAAK,CAAC,iBAAiB;QAAE,GAAG,CAAC,sBAAsB,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IACjF,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CAAI,GAAa,EAAE,OAAgB;IACvE,IAAI,CAAC;QACH,OAAO,OAAO,EAAE,CAAC;IACnB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,GAAG,CAAC,OAAO,EAAE,CAAC;QACd,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,wCAAwC,CAAC,KAAe,EAAE,GAAa;IAC9E,MAAM,MAAM,GAAG,KAAK,CAAC,wBAAwB,CAAC;IAC9C,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,WAAW,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC;QAAE,OAAO;IAC1E,GAAG,CAAC,IAAI,CAAC,yBAAyB,EAAE;QAClC,SAAS,EAAE,KAAK,CAAC,QAAQ;QACzB,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,kBAAkB,EAAE,MAAM,CAAC,iBAAiB;QAC5C,gBAAgB,EAAE,MAAM,CAAC,eAAe;QACxC,QAAQ,EAAE,MAAM,CAAC,OAAO;KACzB,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAC/B,KAA2B,EAC3B,QAAgD;IAQhD,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAChG,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACrC,MAAM,GAAG,GAAG,iBAAiB,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IACtE,MAAM,MAAM,GAAG,sBAAsB,CAAC,GAAG,EAAE,GAAG,EAAE;QAC9C,MAAM,cAAc,GAAG,gBAAgB,CAAC;YACtC,KAAK;YACL,QAAQ;YACR,GAAG;YACH,SAAS;YACT,cAAc;SACf,CAAC,CAAC;QACH,IAAI,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC;YAC7B,MAAM,IAAI,GAAG,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC;YACrC,wBAAwB,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC1E,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACvE,OAAO,cAAc,CAAC;IACxB,CAAC,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,mBAAmB,CACpC,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,EACjD,MAAM,EACN,GAAG,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,KAAK,CAAC,KAAK,IAAI,CAC3C,CAAC;IACF,QAAQ,CAAC,UAAU,CAAC,CAAC;IACrB,UAAU,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACpE,wCAAwC,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACrD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;AACnD,CAAC"}

package/dist/runScope.d.ts

@@ -0,0 +1,86 @@
+import { type ScopeReapOptions, type ScopeReapOutcome } from "@claudexor/core";
+import { type RunProcessScopeOutcome as RunProcessScopeOutcomeType } from "@claudexor/schema";
+import type { AnnouncedRunContext } from "./runTerminalContext.js";
+import type { ResolvedRouteContext } from "./routeContext.js";
+export interface RunScopeCustodian {
+    /**
+     * Mint and durably record the run's scope marker BEFORE its first launch.
+     * Returns the marker NAME to carry in every spec env. Must not throw for a
+     * recoverable persistence failure — it degrades to in-process custody and
+     * discloses, never fails the run.
+     */
+    open(runId: string): Promise<{
+        marker: string;
+    }>;
+    /**
+     * End every live process carrying the run's marker and retire/disclose the
+     * durable entry. Idempotent per run.
+     */
+    settle(runId: string, marker: string): Promise<ScopeReapOutcome>;
+}
+/**
+ * The default custodian for an embedder/test with no daemon index: it mints
+ * and reaps in process (no durable crash-recovery record), remembering each
+ * marker's opening time so the census can skip processes older than the
+ * scope. The reaper's own per-marker coalescing makes repeat settles safe.
+ */
+export declare function createInProcessRunScopeCustodian(reap?: (opts: ScopeReapOptions) => Promise<ScopeReapOutcome>): RunScopeCustodian;
+export declare const inProcessRunScopeCustodian: RunScopeCustodian;
+/**
+ * Add the run's scope marker (and, when the env is a scoped native-state HOME,
+ * the host facts) to a harness spec env WITHOUT overwriting the existing
+ * HOME/config/auth patch. The marker is applied last so it always survives.
+ * `baseEnv` may be absent (an in-place run that inherits the operator env):
+ * the marker still applies so the run can end what it leaves. Returns
+ * `undefined` only when there is no marker (custody disabled).
+ */
+export declare function scopedSpecEnv(marker: string | undefined, baseEnv: Record<string, string> | undefined, options?: {
+    source?: NodeJS.ProcessEnv;
+}): Record<string, string> | undefined;
+/**
+ * The env patch for a deterministic command the run itself launches (its
+ * candidate gates, final verification and adoption): the scope marker alone, so
+ * whatever the command leaves running is ended at the whole-run barrier. The
+ * gate keeps its own HOME and allowlist; nothing is cleaned up per command.
+ */
+export declare function runScopeGateEnv(marker: string | undefined): Record<string, string> | undefined;
+/** The outcome written when the custodian itself failed: unknown, never clean. */
+export declare function failedScopeOutcome(reason: string): ScopeReapOutcome;
+/**
+ * Write the scope outcome to its OWN terminal artifact (`final/process_scope.yaml`)
+ * so it survives the record rewrites and projections the immutable RunFacts
+ * receipt goes through. Best-effort: a write failure never fails an
+ * already-terminal run (the reap itself already happened).
+ */
+export declare function writeRunScopeFacts(ctx: AnnouncedRunContext, marker: string, outcome: ScopeReapOutcome): RunProcessScopeOutcomeType | null;
+/**
+ * The route-admitting readiness probe and the run must share the EXACT env
+ * (W3.3 / TZ-1 §B: evidence gathered in one env while the run executes in
+ * another is not evidence). The marker and host facts therefore join the
+ * route context itself, so the probe, the model inventory and the spawn all
+ * see one env; `scopedSpecEnv` on the eventual spec is then idempotent.
+ */
+export declare function scopedRouteContext(ctx: ResolvedRouteContext, marker: string | undefined): ResolvedRouteContext;
+/**
+ * The per-run custody wiring of `Orchestrator.run()` (owner 1A, #449): the
+ * marker minted and recorded BEFORE the first launch, the announced context
+ * holding its terminal (the existing deferred-terminal mechanism) until the
+ * barrier has settled custody, settlement memoised so the barrier, the
+ * terminalization fallback and the never-announced path agree on ONE outcome,
+ * and the typed facts recorded exactly once. A settlement that throws is
+ * disclosed as a failed outcome, never as a run failure. Without a custodian
+ * (an embedder), custody is in-process only.
+ */
+export interface RunScopeCustody {
+    readonly marker: string;
+    /** Wrap `announce`: remember the context and hold its terminal for the barrier. */
+    announced(announce: (a: AnnouncedRunContext) => void): (a: AnnouncedRunContext) => void;
+    /** The whole-run barrier body: `drain` first; settle and record in `finally`. */
+    barrier(drain: () => Promise<void>): Promise<void>;
+    /** Idempotent fallback for a path that never reached the barrier. */
+    record(): Promise<void>;
+    /** A run that never announced launched nothing, but its marker was recorded: settle it. */
+    settleUnannounced(): Promise<void>;
+}
+export declare function openRunScopeCustody(custodian: RunScopeCustodian | undefined, runId: string): Promise<RunScopeCustody>;
+//# sourceMappingURL=runScope.d.ts.map

package/dist/runScope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runScope.d.ts","sourceRoot":"","sources":["../src/runScope.ts"],"names":[],"mappings":"AAcA,OAAO,EAKL,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACtB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAEL,KAAK,sBAAsB,IAAI,0BAA0B,EAC1D,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAE9D,MAAM,WAAW,iBAAiB;IAChC;;;;;OAKG;IACH,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjD;;;OAGG;IACH,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;CAClE;AAED;;;;;GAKG;AACH,wBAAgB,gCAAgC,CAC9C,IAAI,GAAE,CAAC,IAAI,EAAE,gBAAgB,KAAK,OAAO,CAAC,gBAAgB,CAAoB,GAC7E,iBAAiB,CAcnB;AAED,eAAO,MAAM,0BAA0B,EAAE,iBAAsD,CAAC;AAEhG;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAC3B,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,EAC3C,OAAO,GAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC,UAAU,CAAA;CAAO,GAC3C,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAOpC;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAE9F;AAoBD,kFAAkF;AAClF,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,gBAAgB,CAgBnE;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,mBAAmB,EACxB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,gBAAgB,GACxB,0BAA0B,GAAG,IAAI,CAQnC;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,oBAAoB,EACzB,MAAM,EAAE,MAAM,GAAG,SAAS,GACzB,oBAAoB,CAetB;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,mFAAmF;IACnF,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,mBAAmB,KAAK,IAAI,GAAG,CAAC,CAAC,EAAE,mBAAmB,KAAK,IAAI,CAAC;IACxF,iFAAiF;IACjF,OAAO,CAAC,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnD,qEAAqE;IACrE,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACxB,2FAA2F;IAC3F,iBAAiB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACpC;AAED,wBAAsB,mBAAmB,CACvC,SAAS,EAAE,iBAAiB,GAAG,SAAS,EACxC,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,eAAe,CAAC,CAyC1B"}