@claudexor/schema 4.1.0 → 4.2.0

package/dist/process-scope.d.ts

@@ -0,0 +1,125 @@
+import { z } from "zod/v3";
+/**
+ * The run's process-scope outcome: who the whole-run terminal barrier found
+ * still carrying the run's scope marker, and what became of them. Written once
+ * to `final/process_scope.yaml` as its OWN artifact so it survives the later
+ * rewrites and projections the immutable RunFacts receipt goes through — a
+ * finished run must always be able to say what it left running.
+ *
+ * It is a DISCLOSURE, never a verdict axis: a non-empty survivor set or a
+ * Windows `tree_only` coverage never flips a succeeded run into a failure
+ * (INV-116 is untouched). Environment bytes are never recorded — pid, measured
+ * birth token and a short reason only.
+ */
+export declare const RunProcessScopeMember: z.ZodObject<{
+    pid: z.ZodNumber;
+    start_token: z.ZodString;
+}, "strict", z.ZodTypeAny, {
+    pid: number;
+    start_token: string;
+}, {
+    pid: number;
+    start_token: string;
+}>;
+export type RunProcessScopeMember = z.infer<typeof RunProcessScopeMember>;
+export declare const RunProcessScopeUnreadable: z.ZodObject<{
+    pid: z.ZodNumber;
+    reason: z.ZodString;
+}, "strict", z.ZodTypeAny, {
+    pid: number;
+    reason: string;
+}, {
+    pid: number;
+    reason: string;
+}>;
+export type RunProcessScopeUnreadable = z.infer<typeof RunProcessScopeUnreadable>;
+export declare const RunProcessScopeOutcome: z.ZodObject<{
+    marker: z.ZodString;
+    coverage: z.ZodEnum<["marker+capture", "marker", "tree_only"]>;
+    census: z.ZodEnum<["ok", "failed", "unsupported"]>;
+    census_failure: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    restricted: z.ZodDefault<z.ZodBoolean>;
+    ended: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        pid: z.ZodNumber;
+        start_token: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        pid: number;
+        start_token: string;
+    }, {
+        pid: number;
+        start_token: string;
+    }>, "many">>;
+    survivors: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        pid: z.ZodNumber;
+        start_token: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        pid: number;
+        start_token: string;
+    }, {
+        pid: number;
+        start_token: string;
+    }>, "many">>;
+    unreadable: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        pid: z.ZodNumber;
+        reason: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        pid: number;
+        reason: string;
+    }, {
+        pid: number;
+        reason: string;
+    }>, "many">>;
+    reused_groups: z.ZodDefault<z.ZodArray<z.ZodNumber, "many">>;
+    settled: z.ZodBoolean;
+    completeness: z.ZodDefault<z.ZodEnum<["complete", "not_provable"]>>;
+    completeness_reason: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    incomplete: z.ZodDefault<z.ZodBoolean>;
+}, "strict", z.ZodTypeAny, {
+    marker: string;
+    coverage: "marker" | "marker+capture" | "tree_only";
+    census: "failed" | "ok" | "unsupported";
+    census_failure: string | null;
+    restricted: boolean;
+    ended: {
+        pid: number;
+        start_token: string;
+    }[];
+    survivors: {
+        pid: number;
+        start_token: string;
+    }[];
+    unreadable: {
+        pid: number;
+        reason: string;
+    }[];
+    reused_groups: number[];
+    settled: boolean;
+    completeness: "complete" | "not_provable";
+    completeness_reason: string | null;
+    incomplete: boolean;
+}, {
+    marker: string;
+    coverage: "marker" | "marker+capture" | "tree_only";
+    census: "failed" | "ok" | "unsupported";
+    census_failure?: string | null | undefined;
+    restricted?: boolean | undefined;
+    ended?: {
+        pid: number;
+        start_token: string;
+    }[] | undefined;
+    survivors?: {
+        pid: number;
+        start_token: string;
+    }[] | undefined;
+    unreadable?: {
+        pid: number;
+        reason: string;
+    }[] | undefined;
+    reused_groups?: number[] | undefined;
+    settled: boolean;
+    completeness?: "complete" | "not_provable" | undefined;
+    completeness_reason?: string | null | undefined;
+    incomplete?: boolean | undefined;
+}>;
+export type RunProcessScopeOutcome = z.infer<typeof RunProcessScopeOutcome>;
+//# sourceMappingURL=process-scope.d.ts.map

package/dist/process-scope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-scope.d.ts","sourceRoot":"","sources":["../src/process-scope.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAE3B;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,qBAAqB;;;;;;;;;EAQvB,CAAC;AACZ,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAE1E,eAAO,MAAM,yBAAyB;;;;;;;;;EAK3B,CAAC;AACZ,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAElF,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAqE+D,CAAC;AACnG,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC"}

package/dist/process-scope.js

@@ -0,0 +1,81 @@
+import { z } from "zod/v3";
+/**
+ * The run's process-scope outcome: who the whole-run terminal barrier found
+ * still carrying the run's scope marker, and what became of them. Written once
+ * to `final/process_scope.yaml` as its OWN artifact so it survives the later
+ * rewrites and projections the immutable RunFacts receipt goes through — a
+ * finished run must always be able to say what it left running.
+ *
+ * It is a DISCLOSURE, never a verdict axis: a non-empty survivor set or a
+ * Windows `tree_only` coverage never flips a succeeded run into a failure
+ * (INV-116 is untouched). Environment bytes are never recorded — pid, measured
+ * birth token and a short reason only.
+ */
+export const RunProcessScopeMember = z
+    .object({
+    pid: z.number().int().positive(),
+    start_token: z
+        .string()
+        .min(1)
+        .describe("Measured kernel birth token the member was ended under."),
+})
+    .strict();
+export const RunProcessScopeUnreadable = z
+    .object({
+    pid: z.number().int().positive(),
+    reason: z.string().min(1).describe("Why a known member could not be read (never env bytes)."),
+})
+    .strict();
+export const RunProcessScopeOutcome = z
+    .object({
+    marker: z
+        .string()
+        .regex(/^[A-Z][A-Z0-9_]*_SCOPE_[0-9a-f]{32}$/)
+        .describe("The run's scope marker NAME (the value is always 1; never persisted)."),
+    coverage: z
+        .enum(["marker+capture", "marker", "tree_only"])
+        .describe("marker+capture: environment census plus the daemon's recorded descendants/process groups (POSIX with the daemon index); marker: environment census only (an embedder without the index); tree_only: no environment census exists on this host (Windows), the parent-chain tree kill ran instead."),
+    census: z
+        .enum(["ok", "failed", "unsupported"])
+        .describe("ok: a census completed; failed: the process table could not be read; unsupported: no census on this platform."),
+    census_failure: z.string().nullable().default(null),
+    restricted: z
+        .boolean()
+        .default(false)
+        .describe("The platform withholds some processes' environments from the census (macOS SIP hides Apple platform-binary environments), so an empty census cannot exclude a hidden platform-binary leftover — a disclosed residual, never a failure."),
+    ended: z
+        .array(RunProcessScopeMember)
+        .default([])
+        .describe("Members found alive and proven gone."),
+    survivors: z
+        .array(RunProcessScopeMember)
+        .default([])
+        .describe("Members still alive under their recorded identity when the bounded ladder ended."),
+    unreadable: z
+        .array(RunProcessScopeUnreadable)
+        .default([])
+        .describe("Known members whose identity or membership could not be read; never signalled unverified."),
+    reused_groups: z
+        .array(z.number().int().positive())
+        .default([])
+        .describe("Recorded process groups skipped entirely because the pgid-reuse rule failed (a live process owns the id with another birth, or a member predates the scope); disclosed residual, never signalled."),
+    settled: z
+        .boolean()
+        .describe("True only when every census source succeeded and no known member survived or stayed unreadable. Unreadable discovery candidates are not members; they limit completeness separately."),
+    completeness: z
+        .enum(["complete", "not_provable"])
+        .default("not_provable")
+        .describe("Whether a settled reap proves the scope empty: complete only where the census reads every same-uid environment (Linux) and every source succeeded; not_provable on macOS (SIP hides platform-binary environments, so a system binary started in the background by a shell that exited before capture cannot be ruled out), on Windows, after any census failure, and for an incomplete settlement (the single deadline expired: `incomplete` is true and completeness_reason names the deadline)."),
+    completeness_reason: z
+        .string()
+        .nullable()
+        .default(null)
+        .describe("Why the scope is not provably empty (null when complete): the census failure, the expired settlement deadline, the macOS platform-binary limit, or the unreadable same-uid count."),
+    incomplete: z
+        .boolean()
+        .default(false)
+        .describe("The single settlement deadline expired before every source was read: scanning and signalling stopped at that moment and what is known is disclosed; never a verdict."),
+})
+    .strict()
+    .describe("What the whole-run terminal barrier found carrying the run's scope marker, and did.");
+//# sourceMappingURL=process-scope.js.map

package/dist/process-scope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-scope.js","sourceRoot":"","sources":["../src/process-scope.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAE3B;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC;KACnC,MAAM,CAAC;IACN,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAChC,WAAW,EAAE,CAAC;SACX,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CAAC,yDAAyD,CAAC;CACvE,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC;KACvC,MAAM,CAAC;IACN,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAChC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,yDAAyD,CAAC;CAC9F,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC;KACpC,MAAM,CAAC;IACN,MAAM,EAAE,CAAC;SACN,MAAM,EAAE;SACR,KAAK,CAAC,sCAAsC,CAAC;SAC7C,QAAQ,CAAC,uEAAuE,CAAC;IACpF,QAAQ,EAAE,CAAC;SACR,IAAI,CAAC,CAAC,gBAAgB,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;SAC/C,QAAQ,CACP,kSAAkS,CACnS;IACH,MAAM,EAAE,CAAC;SACN,IAAI,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;SACrC,QAAQ,CACP,+GAA+G,CAChH;IACH,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACnD,UAAU,EAAE,CAAC;SACV,OAAO,EAAE;SACT,OAAO,CAAC,KAAK,CAAC;SACd,QAAQ,CACP,wOAAwO,CACzO;IACH,KAAK,EAAE,CAAC;SACL,KAAK,CAAC,qBAAqB,CAAC;SAC5B,OAAO,CAAC,EAAE,CAAC;SACX,QAAQ,CAAC,sCAAsC,CAAC;IACnD,SAAS,EAAE,CAAC;SACT,KAAK,CAAC,qBAAqB,CAAC;SAC5B,OAAO,CAAC,EAAE,CAAC;SACX,QAAQ,CAAC,kFAAkF,CAAC;IAC/F,UAAU,EAAE,CAAC;SACV,KAAK,CAAC,yBAAyB,CAAC;SAChC,OAAO,CAAC,EAAE,CAAC;SACX,QAAQ,CACP,2FAA2F,CAC5F;IACH,aAAa,EAAE,CAAC;SACb,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC;SAClC,OAAO,CAAC,EAAE,CAAC;SACX,QAAQ,CACP,mMAAmM,CACpM;IACH,OAAO,EAAE,CAAC;SACP,OAAO,EAAE;SACT,QAAQ,CACP,sLAAsL,CACvL;IACH,YAAY,EAAE,CAAC;SACZ,IAAI,CAAC,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;SAClC,OAAO,CAAC,cAAc,CAAC;SACvB,QAAQ,CACP,meAAme,CACpe;IACH,mBAAmB,EAAE,CAAC;SACnB,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CACP,mLAAmL,CACpL;IACH,UAAU,EAAE,CAAC;SACV,OAAO,EAAE;SACT,OAAO,CAAC,KAAK,CAAC;SACd,QAAQ,CACP,sKAAsK,CACvK;CACJ,CAAC;KACD,MAAM,EAAE;KACR,QAAQ,CAAC,qFAAqF,CAAC,CAAC"}

package/dist/run-continuation.d.ts

@@ -23,6 +23,7 @@ export declare const EnvelopeCustody: z.ZodObject<{
     state: z.ZodEnum<["live", "retained"]>;
     holder_run_id: z.ZodString;
     holder_run_dir: z.ZodString;
+    continuation_eligible: z.ZodOptional<z.ZodBoolean>;
     envelope: z.ZodObject<{
         id: z.ZodString;
         task_id: z.ZodString;
@@ -80,6 +81,7 @@ export declare const EnvelopeCustody: z.ZodObject<{
     state: "live" | "retained";
     holder_run_id: string;
     holder_run_dir: string;
+    continuation_eligible?: boolean | undefined;
     envelope: {
         id: string;
         task_id: string;
@@ -105,6 +107,7 @@ export declare const EnvelopeCustody: z.ZodObject<{
     state: "live" | "retained";
     holder_run_id: string;
     holder_run_dir: string;
+    continuation_eligible?: boolean | undefined;
     envelope: {
         id: string;
         task_id: string;

package/dist/run-continuation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"run-continuation.d.ts","sourceRoot":"","sources":["../src/run-continuation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAK3B;;;;;;;GAOG;AAEH,yDAAyD;AACzD,eAAO,MAAM,yBAAyB,+BAInC,CAAC;AACJ,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAElF;;;;;;;GAOG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAmBsE,CAAC;AACnG,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D,oDAAoD;AACpD,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;EAejC,CAAC;AACJ,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAE9E,+FAA+F;AAC/F,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;WAO/B,CAAC;AACF,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC"}
+{"version":3,"file":"run-continuation.d.ts","sourceRoot":"","sources":["../src/run-continuation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAK3B;;;;;;;GAOG;AAEH,yDAAyD;AACzD,eAAO,MAAM,yBAAyB,+BAInC,CAAC;AACJ,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAElF;;;;;;;GAOG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAyBsE,CAAC;AACnG,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D,oDAAoD;AACpD,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;EAejC,CAAC;AACJ,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAE9E,+FAA+F;AAC/F,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;WAO/B,CAAC;AACF,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC"}

package/dist/run-continuation.js

@@ -28,6 +28,10 @@ export const EnvelopeCustody = z
     state: z.enum(["live", "retained"]),
     holder_run_id: Id.describe("Run that holds the envelope."),
     holder_run_dir: z.string().min(1).describe("Absolute run directory of the holder."),
+    continuation_eligible: z
+        .boolean()
+        .optional()
+        .describe("False for diagnostic source retention addressed by attempt, without a run continuation pointer. Absent retains the historical singleton continuation contract."),
     envelope: WorkspaceEnvelope.describe("The envelope exactly as created (adoption reuses it)."),
     cause: ResumableCause.nullable().describe("Why the holder stopped; null while live."),
     retained_at: z.string().nullable().describe("When custody became retained; null while live."),

package/dist/run-continuation.js.map

@@ -1 +1 @@
-{"version":3,"file":"run-continuation.js","sourceRoot":"","sources":["../src/run-continuation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAC3B,OAAO,EAAE,EAAE,EAAE,MAAM,iBAAiB,CAAC;AACrC,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAEnD;;;;;;;GAOG;AAEH,yDAAyD;AACzD,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC;KACvC,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;KACxB,QAAQ,CACP,8MAA8M,CAC/M,CAAC;AAGJ;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC;KAC7B,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACrB,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACnC,aAAa,EAAE,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;IAC1D,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,uCAAuC,CAAC;IACnF,QAAQ,EAAE,iBAAiB,CAAC,QAAQ,CAAC,uDAAuD,CAAC;IAC7F,KAAK,EAAE,cAAc,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;IACrF,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gDAAgD,CAAC;IAC7F,KAAK,EAAE,CAAC;SACL,MAAM,EAAE;SACR,GAAG,EAAE;SACL,WAAW,EAAE;SACb,QAAQ,EAAE;SACV,QAAQ,CACP,uGAAuG,CACxG;CACJ,CAAC;KACD,MAAM,EAAE;KACR,QAAQ,CAAC,qFAAqF,CAAC,CAAC;AAGnG,oDAAoD;AACpD,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC;KACrC,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;IACpE,KAAK,EAAE,CAAC;SACL,MAAM,EAAE;SACR,GAAG,EAAE;SACL,WAAW,EAAE;SACb,QAAQ,EAAE;SACV,QAAQ,CAAC,6EAA6E,CAAC;IAC1F,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,6BAA6B,CAAC;IAC9D,KAAK,EAAE,cAAc,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qCAAqC,CAAC;CACjF,CAAC;KACD,MAAM,EAAE;KACR,QAAQ,CACP,qHAAqH,CACtH,CAAC;AAGJ,+FAA+F;AAC/F,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CACxC,CAAC,CAAC,MAAM,CAAC;IACP,KAAK,EAAE,EAAE;IACT,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACxC,CAAC,CACH,CAAC"}
+{"version":3,"file":"run-continuation.js","sourceRoot":"","sources":["../src/run-continuation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAC3B,OAAO,EAAE,EAAE,EAAE,MAAM,iBAAiB,CAAC;AACrC,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAEnD;;;;;;;GAOG;AAEH,yDAAyD;AACzD,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC;KACvC,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;KACxB,QAAQ,CACP,8MAA8M,CAC/M,CAAC;AAGJ;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC;KAC7B,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACrB,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACnC,aAAa,EAAE,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;IAC1D,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,uCAAuC,CAAC;IACnF,qBAAqB,EAAE,CAAC;SACrB,OAAO,EAAE;SACT,QAAQ,EAAE;SACV,QAAQ,CACP,gKAAgK,CACjK;IACH,QAAQ,EAAE,iBAAiB,CAAC,QAAQ,CAAC,uDAAuD,CAAC;IAC7F,KAAK,EAAE,cAAc,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;IACrF,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gDAAgD,CAAC;IAC7F,KAAK,EAAE,CAAC;SACL,MAAM,EAAE;SACR,GAAG,EAAE;SACL,WAAW,EAAE;SACb,QAAQ,EAAE;SACV,QAAQ,CACP,uGAAuG,CACxG;CACJ,CAAC;KACD,MAAM,EAAE;KACR,QAAQ,CAAC,qFAAqF,CAAC,CAAC;AAGnG,oDAAoD;AACpD,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC;KACrC,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;IACpE,KAAK,EAAE,CAAC;SACL,MAAM,EAAE;SACR,GAAG,EAAE;SACL,WAAW,EAAE;SACb,QAAQ,EAAE;SACV,QAAQ,CAAC,6EAA6E,CAAC;IAC1F,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,6BAA6B,CAAC;IAC9D,KAAK,EAAE,cAAc,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qCAAqC,CAAC;CACjF,CAAC;KACD,MAAM,EAAE;KACR,QAAQ,CACP,qHAAqH,CACtH,CAAC;AAGJ,+FAA+F;AAC/F,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CACxC,CAAC,CAAC,MAAM,CAAC;IACP,KAAK,EAAE,EAAE;IACT,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACxC,CAAC,CACH,CAAC"}

package/dist/store-status.d.ts

@@ -314,6 +314,22 @@ export declare const DaemonStoreFacts: z.ZodObject<{
     interval_ms: z.ZodNullable<z.ZodNumber>;
     wal_bytes: z.ZodNullable<z.ZodNumber>;
     busy_waits: z.ZodNullable<z.ZodNumber>;
+    commit: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+        attempts: z.ZodNumber;
+        failures: z.ZodNumber;
+        last_ms: z.ZodNullable<z.ZodNumber>;
+        max_ms: z.ZodNullable<z.ZodNumber>;
+    }, "strip", z.ZodTypeAny, {
+        attempts: number;
+        failures: number;
+        last_ms: number | null;
+        max_ms: number | null;
+    }, {
+        attempts: number;
+        failures: number;
+        last_ms: number | null;
+        max_ms: number | null;
+    }>>>;
     obligations_open: z.ZodNullable<z.ZodNumber>;
     integrity: z.ZodNullable<z.ZodEnum<["pending", "ok", "failed"]>>;
     migration: z.ZodNullable<z.ZodObject<{
@@ -376,6 +392,12 @@ export declare const DaemonStoreFacts: z.ZodObject<{
     interval_ms: number | null;
     wal_bytes: number | null;
     busy_waits: number | null;
+    commit?: {
+        attempts: number;
+        failures: number;
+        last_ms: number | null;
+        max_ms: number | null;
+    } | null | undefined;
     obligations_open: number | null;
     integrity: "failed" | "ok" | "pending" | null;
     migration: {
@@ -424,6 +446,12 @@ export declare const DaemonStoreFacts: z.ZodObject<{
     interval_ms: number | null;
     wal_bytes: number | null;
     busy_waits: number | null;
+    commit?: {
+        attempts: number;
+        failures: number;
+        last_ms: number | null;
+        max_ms: number | null;
+    } | null | undefined;
     obligations_open: number | null;
     integrity: "failed" | "ok" | "pending" | null;
     migration: {

package/dist/store-status.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"store-status.d.ts","sourceRoot":"","sources":["../src/store-status.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAM3B,wEAAwE;AACxE,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;EAOjC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAE5E,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA+B5B,CAAC;AAEH,iFAAiF;AACjF,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAU3B,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC"}
+{"version":3,"file":"store-status.d.ts","sourceRoot":"","sources":["../src/store-status.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAM3B,wEAAwE;AACxE,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;EAOjC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAE5E,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA+B5B,CAAC;AAUH,iFAAiF;AACjF,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAe3B,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC"}

package/dist/store-status.js

@@ -43,6 +43,13 @@ export const StoreFlusherFacts = z.object({
         deaths: count,
     }),
 });
+/** One summary for the store's whole lifetime, not a rolling window. */
+const StoreCommitFacts = z.object({
+    attempts: count.describe("COMMIT calls entered, failed ones included."),
+    failures: count.describe("COMMIT calls that threw."),
+    last_ms: ms.nullable().describe("Duration of the latest COMMIT call; null before the first."),
+    max_ms: ms.nullable().describe("Longest COMMIT call; null before the first."),
+});
 /** Missing on old engines; null metrics mean the SQL runtime is not open yet. */
 export const DaemonStoreFacts = z.object({
     flusher: StoreFlusherFacts.nullable(),
@@ -51,6 +58,9 @@ export const DaemonStoreFacts = z.object({
     interval_ms: ms.nullable(),
     wal_bytes: count.nullable(),
     busy_waits: count.nullable(),
+    commit: StoreCommitFacts.nullable()
+        .optional()
+        .describe("Request-thread transaction COMMIT calls since this engine store opened, timed around the native call only: a WAL header sync or automatic checkpoint SQLite runs inside it is included; BEGIN, the transaction body and ROLLBACK are not. A long call is a measurement, not proof of a disk cause. Null while the store is not open; older engines omit it."),
     obligations_open: count.nullable(),
     integrity: z.enum(["pending", "ok", "failed"]).nullable(),
     migration: StoreMigrationProgress.nullable(),

package/dist/store-status.js.map

@@ -1 +1 @@
-{"version":3,"file":"store-status.js","sourceRoot":"","sources":["../src/store-status.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAC3B,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;AAC7C,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC;AAEpC,wEAAwE;AACxE,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC;IACxF,mBAAmB,EAAE,KAAK;IAC1B,eAAe,EAAE,KAAK;IACtB,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACvC,cAAc,EAAE,KAAK;IACrB,UAAU,EAAE,KAAK;CAClB,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACzC,WAAW,EAAE,EAAE;IACf,UAAU,EAAE,KAAK;IACjB,uBAAuB,EAAE,KAAK;IAC9B,qBAAqB,EAAE,KAAK;IAC5B,eAAe,EAAE,KAAK;IACtB,YAAY,EAAE,EAAE;IAChB,eAAe,EAAE,YAAY,CAAC,QAAQ,EAAE;IACxC,SAAS,EAAE,CAAC;SACT,MAAM,CAAC;QACN,EAAE,EAAE,YAAY;QAChB,OAAO,EAAE,EAAE;QACX,UAAU,EAAE,EAAE,CAAC,QAAQ,EAAE;QACzB,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE;QAClB,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;QACpB,SAAS,EAAE,KAAK,CAAC,QAAQ,EAAE;QAC3B,UAAU,EAAE,CAAC;aACV,MAAM,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC;aAC9E,QAAQ,EAAE;KACd,CAAC;SACD,QAAQ,EAAE;IACb,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC;QACjB,MAAM,EAAE,KAAK;QACb,QAAQ,EAAE,KAAK;QACf,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,KAAK;QAClB,UAAU,EAAE,KAAK;QACjB,QAAQ,EAAE,KAAK;QACf,MAAM,EAAE,KAAK;KACd,CAAC;CACH,CAAC,CAAC;AAEH,iFAAiF;AACjF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,OAAO,EAAE,iBAAiB,CAAC,QAAQ,EAAE;IACrC,YAAY,EAAE,EAAE,CAAC,QAAQ,EAAE;IAC3B,eAAe,EAAE,YAAY,CAAC,QAAQ,EAAE;IACxC,WAAW,EAAE,EAAE,CAAC,QAAQ,EAAE;IAC1B,SAAS,EAAE,KAAK,CAAC,QAAQ,EAAE;IAC3B,UAAU,EAAE,KAAK,CAAC,QAAQ,EAAE;IAC5B,gBAAgB,EAAE,KAAK,CAAC,QAAQ,EAAE;IAClC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE;IACzD,SAAS,EAAE,sBAAsB,CAAC,QAAQ,EAAE;CAC7C,CAAC,CAAC"}
+{"version":3,"file":"store-status.js","sourceRoot":"","sources":["../src/store-status.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAC3B,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;AAC7C,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC;AAEpC,wEAAwE;AACxE,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC;IACxF,mBAAmB,EAAE,KAAK;IAC1B,eAAe,EAAE,KAAK;IACtB,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACvC,cAAc,EAAE,KAAK;IACrB,UAAU,EAAE,KAAK;CAClB,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACzC,WAAW,EAAE,EAAE;IACf,UAAU,EAAE,KAAK;IACjB,uBAAuB,EAAE,KAAK;IAC9B,qBAAqB,EAAE,KAAK;IAC5B,eAAe,EAAE,KAAK;IACtB,YAAY,EAAE,EAAE;IAChB,eAAe,EAAE,YAAY,CAAC,QAAQ,EAAE;IACxC,SAAS,EAAE,CAAC;SACT,MAAM,CAAC;QACN,EAAE,EAAE,YAAY;QAChB,OAAO,EAAE,EAAE;QACX,UAAU,EAAE,EAAE,CAAC,QAAQ,EAAE;QACzB,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE;QAClB,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;QACpB,SAAS,EAAE,KAAK,CAAC,QAAQ,EAAE;QAC3B,UAAU,EAAE,CAAC;aACV,MAAM,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC;aAC9E,QAAQ,EAAE;KACd,CAAC;SACD,QAAQ,EAAE;IACb,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC;QACjB,MAAM,EAAE,KAAK;QACb,QAAQ,EAAE,KAAK;QACf,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,KAAK;QAClB,UAAU,EAAE,KAAK;QACjB,QAAQ,EAAE,KAAK;QACf,MAAM,EAAE,KAAK;KACd,CAAC;CACH,CAAC,CAAC;AAEH,wEAAwE;AACxE,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,6CAA6C,CAAC;IACvE,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,0BAA0B,CAAC;IACpD,OAAO,EAAE,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4DAA4D,CAAC;IAC7F,MAAM,EAAE,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6CAA6C,CAAC;CAC9E,CAAC,CAAC;AAEH,iFAAiF;AACjF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,OAAO,EAAE,iBAAiB,CAAC,QAAQ,EAAE;IACrC,YAAY,EAAE,EAAE,CAAC,QAAQ,EAAE;IAC3B,eAAe,EAAE,YAAY,CAAC,QAAQ,EAAE;IACxC,WAAW,EAAE,EAAE,CAAC,QAAQ,EAAE;IAC1B,SAAS,EAAE,KAAK,CAAC,QAAQ,EAAE;IAC3B,UAAU,EAAE,KAAK,CAAC,QAAQ,EAAE;IAC5B,MAAM,EAAE,gBAAgB,CAAC,QAAQ,EAAE;SAChC,QAAQ,EAAE;SACV,QAAQ,CACP,6VAA6V,CAC9V;IACH,gBAAgB,EAAE,KAAK,CAAC,QAAQ,EAAE;IAClC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE;IACzD,SAAS,EAAE,sBAAsB,CAAC,QAAQ,EAAE;CAC7C,CAAC,CAAC"}

package/generated/ControlAccountRoutingEvidenceResponse.schema.json

@@ -0,0 +1,101 @@
+{
+  "$ref": "#/definitions/ControlAccountRoutingEvidenceResponse",
+  "definitions": {
+    "ControlAccountRoutingEvidenceResponse": {
+      "type": "object",
+      "properties": {
+        "refusals": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "properties": {
+              "harness_id": {
+                "type": "string",
+                "minLength": 1,
+                "description": "Harness family the observed account belongs to."
+              },
+              "profile_id": {
+                "type": "string",
+                "minLength": 1,
+                "description": "Account row whose started session was refused before progress."
+              },
+              "requested_model": {
+                "type": [
+                  "string",
+                  "null"
+                ],
+                "description": "Model the run asked this account for; null = the harness default model."
+              },
+              "observed_at": {
+                "type": "string",
+                "minLength": 1,
+                "description": "When the pre-progress refusal was observed."
+              },
+              "expires_at": {
+                "type": "string",
+                "minLength": 1,
+                "description": "Self-expiry instant (observation retention, not a vendor reset time); after this the observation is ignored."
+              }
+            },
+            "required": [
+              "harness_id",
+              "profile_id",
+              "requested_model",
+              "observed_at",
+              "expires_at"
+            ],
+            "additionalProperties": false,
+            "description": "A bounded, self-expiring typed observation that an account refused a started session before any progress; it orders the account pool and never excludes a row."
+          },
+          "description": "Live pre-progress refusal observations, each scoped to one requested model."
+        },
+        "lastService": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "properties": {
+              "harness_id": {
+                "type": "string",
+                "minLength": 1,
+                "description": "Harness family of the account."
+              },
+              "profile_id": {
+                "type": "string",
+                "minLength": 1,
+                "description": "Account row that served the request."
+              },
+              "requested_model": {
+                "type": [
+                  "string",
+                  "null"
+                ],
+                "description": "Model the run asked for; null = the harness default model."
+              },
+              "observed_at": {
+                "type": "string",
+                "minLength": 1,
+                "description": "When the account was observed serving that request."
+              }
+            },
+            "required": [
+              "harness_id",
+              "profile_id",
+              "requested_model",
+              "observed_at"
+            ],
+            "additionalProperties": false,
+            "description": "The latest observed service of one account for one requested model under its current credential binding."
+          },
+          "description": "Latest observed service per registered account and requested model, most recent service first."
+        }
+      },
+      "required": [
+        "refusals",
+        "lastService"
+      ],
+      "additionalProperties": false,
+      "description": "Model-scoped account routing evidence: live refusal marks and the durable last-served order."
+    }
+  },
+  "$schema": "http://json-schema.org/draft-07/schema#"
+}

package/generated/ControlDaemonStatus.schema.json

@@ -464,6 +464,58 @@
                 }
               ]
             },
+            "commit": {
+              "anyOf": [
+                {
+                  "type": "object",
+                  "properties": {
+                    "attempts": {
+                      "type": "integer",
+                      "minimum": 0,
+                      "description": "COMMIT calls entered, failed ones included."
+                    },
+                    "failures": {
+                      "type": "integer",
+                      "minimum": 0,
+                      "description": "COMMIT calls that threw."
+                    },
+                    "last_ms": {
+                      "anyOf": [
+                        {
+                          "$ref": "#/definitions/ControlDaemonStatus/properties/store/properties/flusher/anyOf/0/properties/interval_ms"
+                        },
+                        {
+                          "type": "null"
+                        }
+                      ],
+                      "description": "Duration of the latest COMMIT call; null before the first."
+                    },
+                    "max_ms": {
+                      "anyOf": [
+                        {
+                          "$ref": "#/definitions/ControlDaemonStatus/properties/store/properties/flusher/anyOf/0/properties/interval_ms"
+                        },
+                        {
+                          "type": "null"
+                        }
+                      ],
+                      "description": "Longest COMMIT call; null before the first."
+                    }
+                  },
+                  "required": [
+                    "attempts",
+                    "failures",
+                    "last_ms",
+                    "max_ms"
+                  ],
+                  "additionalProperties": false
+                },
+                {
+                  "type": "null"
+                }
+              ],
+              "description": "Request-thread transaction COMMIT calls since this engine store opened, timed around the native call only: a WAL header sync or automatic checkpoint SQLite runs inside it is included; BEGIN, the transaction body and ROLLBACK are not. A long call is a measurement, not proof of a disk cause. Null while the store is not open; older engines omit it."
+            },
             "obligations_open": {
               "anyOf": [
                 {