@cotal-ai/lang 0.0.0 → 0.18.0

package/dist/effects.d.ts

@@ -0,0 +1,231 @@
+/**
+ * The effect interface: one seam, two implementations.
+ *
+ * A handler is told to do a thing and reports what happened. It never touches the journal. That
+ * split is what makes the simulator a real test harness rather than a second implementation to
+ * keep in sync: every durability rule holds identically under simulation and production, because
+ * the interpreter, not the handler, is what enforces them.
+ *
+ * The simulation handler lives in this package. The production handler binds these calls onto the
+ * mesh (goals, checkpoints, work leases) and lives outside it, so this package stays pure.
+ */
+import type { StepKey } from "./keys.js";
+/**
+ * A handle's journalled form is a stable, site-independent reference: an agent's persistent
+ * identity, a channel's name, a run id. Never a session id, a file descriptor, or a host path.
+ * A run that resumes on another machine has to mean the same thing by every binding it holds,
+ * and a host-local pointer in journalled state is exactly how that stops being true.
+ */
+export interface AgentHandleValue {
+    readonly agent: string;
+    readonly persona: string;
+    readonly worktree?: string;
+    readonly role?: string;
+}
+export interface ChannelHandleValue {
+    readonly channel: string;
+}
+export type TurnStatus = "done" | "blocked" | "handoff";
+export interface TurnResultValue {
+    readonly status: TurnStatus;
+    readonly to?: AgentHandleValue;
+    readonly note?: string;
+    readonly at: number;
+}
+/**
+ * WHAT HAPPENED, which is all a handler is allowed to decide.
+ *
+ * A handler never chooses whether an expiry is returned or thrown. It reports the raw outcome, the
+ * interpreter journals THAT, and the disposition is computed from today's source afterwards, on
+ * the live path and the replay path alike (see applyCheckpointPolicy).
+ *
+ * Written the other way round the reapply rule cannot work at all, and this package shipped it
+ * that way for a day: a handler that throws L4007 makes the journal record `failed`, and a replay
+ * under an edited `proceed` then has nothing but an error to reinterpret. A policy applied before
+ * the journal is a policy baked into the record.
+ */
+export type CheckpointRaw = {
+    readonly outcome: "resolved";
+    readonly value?: unknown;
+    readonly artifact?: string;
+    readonly by?: string;
+    readonly at: number;
+    /**
+     * Which answer the settle accepted. Every resolver presents as the run driver, so the
+     * arbiter has to NAME its choice: a principal cannot discriminate between two answers.
+     *
+     * NOTHING IN THIS PACKAGE SETS IT. The binding between an answer id and a settle fact lives
+     * in the substrate the mesh handler talks to, which is a v0.4 delta this package does not
+     * carry; the field is here so the journal preserves what a production handler reports rather
+     * than dropping it, and the simulator deliberately never invents one. Read an absent
+     * `answerId` as "this handler does not name its answers", never as "the answer was anonymous".
+     */
+    readonly answerId?: string;
+} | {
+    readonly outcome: "expired";
+    readonly at: number;
+};
+export interface CheckpointResultValue {
+    readonly status: "resolved" | "expired";
+    readonly value?: unknown;
+    readonly by?: string;
+    readonly at: number;
+    readonly artifact?: string;
+}
+/** An event descriptor. Pure: building one performs no effect. */
+export type EventDescriptor = {
+    readonly event: "replied";
+    readonly agent: string;
+} | {
+    readonly event: "message";
+    readonly channel: string;
+    readonly from?: string;
+    readonly matches?: string;
+} | {
+    readonly event: "idle";
+    readonly channel: string;
+    readonly duration: string;
+} | {
+    readonly event: "down";
+    readonly agent: string;
+};
+/** A notify fact: a bounded decision record, never a message. See NOTIFY_BOUND. */
+export interface NotifyFact {
+    readonly decision: string;
+    readonly outcome: string;
+    readonly detail?: Readonly<Record<string, string | number | boolean>>;
+}
+export interface SpawnRequest {
+    readonly persona: string;
+    readonly model?: string;
+    readonly variant?: string;
+    readonly worktree?: string;
+    readonly join?: readonly ChannelHandleValue[];
+    readonly role?: string;
+    readonly permits?: Readonly<Record<string, unknown>>;
+    readonly supervise?: Readonly<Record<string, unknown>>;
+    /** What a fork does with this agent: spawn a fresh one, or reuse the original. Default respawn. */
+    readonly onFork?: "respawn" | "adopt";
+}
+export interface TurnRequest {
+    readonly agent: AgentHandleValue;
+    readonly deadline?: string;
+}
+export interface AskRequest {
+    readonly agent: AgentHandleValue;
+    readonly schema: unknown;
+    readonly deadline?: string;
+    readonly attempts?: number;
+}
+export interface CheckpointRequest {
+    readonly prompt: string;
+    readonly schema?: unknown;
+    readonly timeout?: string;
+    readonly onExpiry?: "fail" | "proceed" | "escalate";
+    readonly to?: string;
+}
+export interface SleepRequest {
+    readonly duration: string;
+}
+export interface WaitRequest {
+    readonly event: EventDescriptor;
+    readonly timeout?: string;
+}
+export interface NotifyRequest {
+    readonly agents: readonly AgentHandleValue[];
+    readonly fact: NotifyFact;
+}
+export interface MonitorRequest {
+    readonly agent: AgentHandleValue;
+}
+export interface ConclaveRequest {
+    readonly members: readonly AgentHandleValue[];
+    readonly channel?: string;
+}
+/** Raised by a handler when an effect fails in a way the program can catch. */
+export declare class EffectError extends Error {
+    readonly code: string;
+    readonly kind: string;
+    readonly detail?: Readonly<Record<string, unknown>> | undefined;
+    constructor(code: string, kind: string, message: string, detail?: Readonly<Record<string, unknown>> | undefined);
+}
+/** Raised into a branch that a `race` loser or a run cancellation has cut short. */
+export declare class Cancelled extends Error {
+    readonly reason: string;
+    constructor(reason: string);
+}
+/**
+ * Raw outcome to what the program sees, computed from TODAY's source.
+ *
+ * The same call runs on the live path and after a journal hit, which is the whole point: a resumed
+ * run must reach this with the recorded fact and the current `onExpiry`, so editing `proceed` to
+ * `fail` makes the resume throw even though nothing about the recorded expiry changed.
+ *
+ * `escalate` never arrives here. It mints an effect rather than choosing a disposition, so it is
+ * hashed (design 5.12) and an edit to it diverges before any of this runs.
+ */
+export declare function applyCheckpointPolicy(raw: CheckpointRaw, onExpiry: "fail" | "proceed" | "escalate" | undefined): CheckpointResultValue;
+export interface CancelSignal {
+    readonly cancelled: boolean;
+    readonly reason?: string;
+    onCancel(fn: (reason: string) => void): void;
+}
+export interface EffectContext {
+    /** The key of the step being performed. Handlers use it for tracing, never for lookup. */
+    readonly key: StepKey;
+    readonly signal: CancelSignal;
+    /**
+     * `base64url(sha256(runId, stepKey, inputHash, attempt))`, on the pending entry BEFORE this
+     * handler was called. SUBMIT UNDER IT, idempotently: a resumed run reissues the same id and the
+     * far side recognises it rather than creating a second goal. This is the identity that makes an
+     * effect recoverable; {@link EffectContext.bind} carries facts the handler LEARNS and is never
+     * what recovery keys on, because a crash before the handler learned them leaves none.
+     */
+    readonly requestId: string;
+    /**
+     * Which attempt of this step {@link EffectContext.requestId} names, counted from 0.
+     *
+     * Only an escalating checkpoint ever exceeds 0, and it is the interpreter, not the handler, that
+     * decides whether to hop. A handler reads this for tracing and for the far side's own idempotency
+     * bookkeeping; it must not treat a non-zero attempt as licence to retry, because the attempt that
+     * is open is the only one it has been asked to complete.
+     */
+    readonly attempt: number;
+    /**
+     * Present when a previous attempt at this step started but never settled, carrying whatever it
+     * passed to {@link EffectContext.bind}. The handler must RE-BIND to that resource and await its
+     * terminal, not issue a fresh action: the goal already exists, the checkpoint token is already
+     * minted, and issuing a second one is how a crash turns into a duplicate side effect.
+     */
+    readonly resume?: Readonly<Record<string, unknown>>;
+    /**
+     * Declare the external resource this effect just created, BEFORE awaiting its terminal.
+     *
+     * This is what makes a crash mid-effect recoverable: the pending journal entry points at a
+     * real thing, so a resumed run re-binds to it and awaits its outcome instead of issuing a
+     * second action. Idempotency then comes from the layer underneath (a goal's bind fingerprint,
+     * a checkpoint's one-use settle fact, a work item's lease).
+     */
+    bind(external: Readonly<Record<string, unknown>>): Promise<void>;
+}
+export interface EffectHandler {
+    /**
+     * The host clock, which the interpreter uses to stamp `startedAt` and `endedAt` on journal
+     * entries. Production reads the wall clock; simulation reads a virtual one, which is how a
+     * program that waits four hours is tested in microseconds without pretending the wait did not
+     * happen. The program's own `now()` never reads this: it reads the run clock derived from
+     * those journalled stamps, which is what makes time advance only at effect boundaries.
+     */
+    now(): number;
+    spawn(req: SpawnRequest, ctx: EffectContext): Promise<AgentHandleValue>;
+    turn(req: TurnRequest, ctx: EffectContext): Promise<TurnResultValue>;
+    ask(req: AskRequest, ctx: EffectContext): Promise<unknown>;
+    checkpoint(req: CheckpointRequest, ctx: EffectContext): Promise<CheckpointRaw>;
+    sleep(req: SleepRequest, ctx: EffectContext): Promise<null>;
+    wait(req: WaitRequest, ctx: EffectContext): Promise<unknown | null>;
+    notify(req: NotifyRequest, ctx: EffectContext): Promise<null>;
+    monitor(req: MonitorRequest, ctx: EffectContext): Promise<null>;
+    openConclave(req: ConclaveRequest, ctx: EffectContext): Promise<ChannelHandleValue>;
+    closeConclave(req: ConclaveRequest, ctx: EffectContext): Promise<null>;
+}
+//# sourceMappingURL=effects.d.ts.map

package/dist/effects.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"effects.d.ts","sourceRoot":"","sources":["../src/effects.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAIzC;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS,CAAC;AAExD,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,EAAE,CAAC,EAAE,gBAAgB,CAAC;IAC/B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,aAAa,GACrB;IACE,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;IAC7B,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB;;;;;;;;;OASG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B,GACD;IAAE,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzD,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,MAAM,EAAE,UAAU,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,kEAAkE;AAClE,MAAM,MAAM,eAAe,GACvB;IAAE,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACrD;IAAE,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAC1G;IAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAC/E;IAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEvD,mFAAmF;AACnF,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC;CACvE;AAID,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,kBAAkB,EAAE,CAAC;IAC9C,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACrD,QAAQ,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACvD,mGAAmG;IACnG,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC;CACvC;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAC;IACjC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,UAAU,CAAC;IACpD,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC;IAChC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,MAAM,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAC7C,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;CAC3B;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAC;CAClC;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,OAAO,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAC9C,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAID,+EAA+E;AAC/E,qBAAa,WAAY,SAAQ,KAAK;IAElC,QAAQ,CAAC,IAAI,EAAE,MAAM;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM;IAErB,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBAH1C,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACrB,OAAO,EAAE,MAAM,EACN,MAAM,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,YAAA;CAKtD;AAED,oFAAoF;AACpF,qBAAa,SAAU,SAAQ,KAAK;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM;gBAAd,MAAM,EAAE,MAAM;CAIpC;AAED;;;;;;;;;GASG;AACH,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,aAAa,EAClB,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,GACpD,qBAAqB,CAqBvB;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,EAAE,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,GAAG,IAAI,CAAC;CAC9C;AAED,MAAM,WAAW,aAAa;IAC5B,0FAA0F;IAC1F,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B;;;;;;OAMG;IACH,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;;;;;;;OAOG;IACH,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB;;;;;OAKG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACpD;;;;;;;OAOG;IACH,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAClE;AAED,MAAM,WAAW,aAAa;IAC5B;;;;;;OAMG;IACH,GAAG,IAAI,MAAM,CAAC;IAEd,KAAK,CAAC,GAAG,EAAE,YAAY,EAAE,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACxE,IAAI,CAAC,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IACrE,GAAG,CAAC,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3D,UAAU,CAAC,GAAG,EAAE,iBAAiB,EAAE,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAC/E,KAAK,CAAC,GAAG,EAAE,YAAY,EAAE,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5D,IAAI,CAAC,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IACpE,MAAM,CAAC,GAAG,EAAE,aAAa,EAAE,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9D,OAAO,CAAC,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChE,YAAY,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACpF,aAAa,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACxE"}

package/dist/effects.js

@@ -0,0 +1,64 @@
+/**
+ * The effect interface: one seam, two implementations.
+ *
+ * A handler is told to do a thing and reports what happened. It never touches the journal. That
+ * split is what makes the simulator a real test harness rather than a second implementation to
+ * keep in sync: every durability rule holds identically under simulation and production, because
+ * the interpreter, not the handler, is what enforces them.
+ *
+ * The simulation handler lives in this package. The production handler binds these calls onto the
+ * mesh (goals, checkpoints, work leases) and lives outside it, so this package stays pure.
+ */
+// ---- the handler contract ---------------------------------------------------------------------
+/** Raised by a handler when an effect fails in a way the program can catch. */
+export class EffectError extends Error {
+    code;
+    kind;
+    detail;
+    constructor(code, kind, message, detail) {
+        super(message);
+        this.code = code;
+        this.kind = kind;
+        this.detail = detail;
+        this.name = "EffectError";
+    }
+}
+/** Raised into a branch that a `race` loser or a run cancellation has cut short. */
+export class Cancelled extends Error {
+    reason;
+    constructor(reason) {
+        super(`cancelled: ${reason}`);
+        this.reason = reason;
+        this.name = "Cancelled";
+    }
+}
+/**
+ * Raw outcome to what the program sees, computed from TODAY's source.
+ *
+ * The same call runs on the live path and after a journal hit, which is the whole point: a resumed
+ * run must reach this with the recorded fact and the current `onExpiry`, so editing `proceed` to
+ * `fail` makes the resume throw even though nothing about the recorded expiry changed.
+ *
+ * `escalate` never arrives here. It mints an effect rather than choosing a disposition, so it is
+ * hashed (design 5.12) and an edit to it diverges before any of this runs.
+ */
+export function applyCheckpointPolicy(raw, onExpiry) {
+    if (raw.outcome === "resolved") {
+        return {
+            status: "resolved",
+            ...(raw.value !== undefined ? { value: raw.value } : {}),
+            ...(raw.by !== undefined ? { by: raw.by } : {}),
+            ...(raw.artifact !== undefined ? { artifact: raw.artifact } : {}),
+            at: raw.at,
+        };
+    }
+    // `escalate` reaching here means the chain is FINISHED: the interpreter already performed the
+    // one hop, and a second expiry settles exactly as `proceed` would (design 5.5, one hop). Only
+    // `fail` throws. Treating escalate as a throw made a completed escalation raise L4007, which is
+    // the opposite of what the stop rule says happens.
+    const disposition = onExpiry ?? "fail";
+    if (disposition === "proceed" || disposition === "escalate")
+        return { status: "expired", at: raw.at };
+    throw new EffectError("L4007", "checkpoint-expired", `L4007 Checkpoint expired\n\nNobody answered in time and this checkpoint's onExpiry is "fail".\n\nOptions\n  onExpiry: "proceed"    return { status: "expired" } and let the program decide\n  onExpiry: "escalate"   mint a second checkpoint addressed to someone else\n  raise the timeout`);
+}
+//# sourceMappingURL=effects.js.map

package/dist/effects.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"effects.js","sourceRoot":"","sources":["../src/effects.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAiJH,kGAAkG;AAElG,+EAA+E;AAC/E,MAAM,OAAO,WAAY,SAAQ,KAAK;IAEzB;IACA;IAEA;IAJX,YACW,IAAY,EACZ,IAAY,EACrB,OAAe,EACN,MAA0C;QAEnD,KAAK,CAAC,OAAO,CAAC,CAAC;QALN,SAAI,GAAJ,IAAI,CAAQ;QACZ,SAAI,GAAJ,IAAI,CAAQ;QAEZ,WAAM,GAAN,MAAM,CAAoC;QAGnD,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;IAC5B,CAAC;CACF;AAED,oFAAoF;AACpF,MAAM,OAAO,SAAU,SAAQ,KAAK;IACb;IAArB,YAAqB,MAAc;QACjC,KAAK,CAAC,cAAc,MAAM,EAAE,CAAC,CAAC;QADX,WAAM,GAAN,MAAM,CAAQ;QAEjC,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC;IAC1B,CAAC;CACF;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,qBAAqB,CACnC,GAAkB,EAClB,QAAqD;IAErD,IAAI,GAAG,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;QAC/B,OAAO;YACL,MAAM,EAAE,UAAU;YAClB,GAAG,CAAC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxD,GAAG,CAAC,GAAG,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/C,GAAG,CAAC,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjE,EAAE,EAAE,GAAG,CAAC,EAAE;SACX,CAAC;IACJ,CAAC;IACD,8FAA8F;IAC9F,8FAA8F;IAC9F,gGAAgG;IAChG,mDAAmD;IACnD,MAAM,WAAW,GAAG,QAAQ,IAAI,MAAM,CAAC;IACvC,IAAI,WAAW,KAAK,SAAS,IAAI,WAAW,KAAK,UAAU;QAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC;IACtG,MAAM,IAAI,WAAW,CACnB,OAAO,EACP,oBAAoB,EACpB,8RAA8R,CAC/R,CAAC;AACJ,CAAC"}

package/dist/errors.d.ts

@@ -0,0 +1,141 @@
+/**
+ * The error catalog. Errors are the primary UI of this language: their audience is an LLM
+ * repairing its own program, so every error whose cause is a call to a primitive carries that
+ * primitive's full signature and one working example, and the blame frame is always in
+ * user-program coordinates.
+ *
+ * Codes are stable and grouped: L1xxx grammar, L2xxx name resolution and static rules, L3xxx
+ * effect call shape, L4xxx runtime semantics, L5xxx durability, L6xxx simulation.
+ */
+/** Every code in the catalog, with the one-line title that heads the rendered error. */
+export declare const CATALOG: {
+    readonly L1001: "Forbidden syntax: `class`";
+    readonly L1002: "Forbidden syntax: `this`";
+    readonly L1003: "Forbidden syntax: `var`";
+    readonly L1004: "Forbidden syntax: `for...in`";
+    readonly L1005: "Forbidden syntax: generator";
+    readonly L1006: "Forbidden syntax: `eval` or `Function`";
+    readonly L1007: "Forbidden syntax: regular expression literal";
+    readonly L1008: "Missing semicolon";
+    readonly L1009: "Unbraced branch";
+    readonly L1010: "`switch` case does not terminate";
+    readonly L1011: "Computed property name";
+    readonly L1012: "Array elision";
+    readonly L1013: "Forbidden syntax: `with`";
+    readonly L1014: "Forbidden syntax: symbol";
+    readonly L1015: "Forbidden syntax: accessor";
+    readonly L1016: "Forbidden syntax: `instanceof`";
+    readonly L1017: "Forbidden syntax: label";
+    readonly L1018: "Forbidden syntax: tagged template literal";
+    readonly L1019: "Forbidden syntax: `new`";
+    readonly L1020: "Forbidden syntax: `import` or `export`";
+    readonly L1021: "Forbidden syntax: `delete`";
+    readonly L1022: "Forbidden syntax: `do...while`";
+    readonly L1023: "Forbidden syntax: `await` outside an async function";
+    readonly L1024: "`return` outside a function";
+    readonly L2001: "Unknown identifier";
+    readonly L2002: "Shadows a builtin or a primitive";
+    readonly L2003: "Assignment to a `const` binding";
+    readonly L2011: "The Promise API is not available";
+    readonly L2013: "An async call is not awaited";
+    readonly L2012: "Host global is not available";
+    readonly L2031: "Mutation of a frozen value";
+    readonly L3011: "Unknown option key";
+    readonly L3012: "Missing required step name";
+    readonly L3013: "Step name is not a literal";
+    readonly L3014: "Malformed step name";
+    readonly L3021: "`fanOut` has no stable key";
+    readonly L3022: "Two agents share a worktree concurrently";
+    readonly L3023: "Array-form `parallel` holds named effects";
+    readonly L3024: "`fanOut` branch keys are not unique";
+    readonly L3041: "Value cannot cross an effect boundary";
+    readonly L3042: "Function passed as effect data";
+    readonly L3043: "`notify` fact is not a bounded decision record";
+    readonly L3044: "`to` without `onExpiry: \"escalate\"`";
+    readonly L4001: "Permit exhausted";
+    readonly L4002: "Agent down";
+    readonly L4003: "Turn deadline elapsed";
+    readonly L4004: "Handoff across worktrees";
+    readonly L4005: "Handoff to an agent outside the run";
+    readonly L4006: "`ask` never produced a conforming record";
+    readonly L4007: "Checkpoint expired";
+    readonly L4008: "Concurrent worktree write";
+    readonly L4009: "Run effect ceiling reached";
+    readonly L4013: "Step budget exhausted";
+    readonly L5001: "Run divergence";
+    readonly L5002: "Program hash not available";
+    readonly L5003: "Orphaned `spawn` on migrate";
+    readonly L5004: "Orphaned resolved checkpoint on migrate";
+    readonly L5005: "External reference gone";
+    readonly L5006: "Effect result too large";
+    readonly L5007: "Lease lost";
+    readonly L6001: "Unscripted effect in simulation";
+    readonly L6002: "Simulation script entry unused";
+};
+export type LangErrorCode = keyof typeof CATALOG;
+/** A primitive's documentation, attached to any error blamed on a call to it. */
+export interface CalleeDoc {
+    readonly signature: string;
+    readonly doc: string;
+    readonly example: string;
+}
+/** Where in the user's program the blame lands. Always user-program coordinates. */
+export interface SourceSpan {
+    readonly file: string;
+    /** 1-based. */
+    readonly line: number;
+    /** 1-based. */
+    readonly column: number;
+}
+/** The machine-parseable form. This is what a repair loop consumes. */
+export interface LangErrorJson {
+    readonly code: LangErrorCode;
+    readonly title: string;
+    readonly where: SourceSpan & {
+        readonly frame: string;
+    };
+    readonly cause: string;
+    readonly fix: string;
+    readonly callee?: CalleeDoc;
+}
+export interface LangErrorInit {
+    readonly code: LangErrorCode;
+    readonly span: SourceSpan;
+    /** Plain English: why this is wrong, in terms of what the program is trying to do. */
+    readonly cause: string;
+    /** The edit that fixes it, concretely enough to apply. */
+    readonly fix: string;
+    /** The primitive this call named, when the error is blamed on one. */
+    readonly callee?: CalleeDoc;
+}
+/**
+ * Build the code frame: the offending line with a caret under the column. Rendering it here,
+ * from the source the parser saw, is what keeps the blame frame in user coordinates rather than
+ * in interpreter internals.
+ */
+export declare function codeFrame(source: string, span: SourceSpan): string;
+/** One error. Carries its own rendering so no caller has to reinvent the format. */
+export declare class LangError extends Error {
+    readonly code: LangErrorCode;
+    readonly title: string;
+    readonly span: SourceSpan;
+    readonly cause: string;
+    readonly fix: string;
+    readonly callee?: CalleeDoc;
+    constructor(init: LangErrorInit);
+    toJSON(source: string): LangErrorJson;
+    /** The human rendering: frame, cause, fix, then the callee's signature and example. */
+    render(source: string): string;
+}
+/**
+ * The validator collects every error before reporting, so an author sees the whole repair list
+ * at once rather than fixing one thing per round trip.
+ */
+export declare class LangErrors extends Error {
+    readonly errors: readonly LangError[];
+    readonly source: string;
+    constructor(errors: readonly LangError[], source: string);
+    toJSON(): readonly LangErrorJson[];
+    render(): string;
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,wFAAwF;AACxF,eAAO,MAAM,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA0EV,CAAC;AAEX,MAAM,MAAM,aAAa,GAAG,MAAM,OAAO,OAAO,CAAC;AAEjD,iFAAiF;AACjF,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,oFAAoF;AACpF,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,eAAe;IACf,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,eAAe;IACf,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,uEAAuE;AACvE,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,UAAU,GAAG;QAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IACxD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC;CAC7B;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,sFAAsF;IACtF,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,0DAA0D;IAC1D,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,sEAAsE;IACtE,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC;CAC7B;AAED;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,MAAM,CASlE;AAED,oFAAoF;AACpF,qBAAa,SAAU,SAAQ,KAAK;IAClC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC;gBAEhB,IAAI,EAAE,aAAa;IAW/B,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,aAAa;IAWrC,uFAAuF;IACvF,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM;CAe/B;AAED;;;GAGG;AACH,qBAAa,UAAW,SAAQ,KAAK;IACnC,QAAQ,CAAC,MAAM,EAAE,SAAS,SAAS,EAAE,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;gBAEZ,MAAM,EAAE,SAAS,SAAS,EAAE,EAAE,MAAM,EAAE,MAAM;IAOxD,MAAM,IAAI,SAAS,aAAa,EAAE;IAIlC,MAAM,IAAI,MAAM;CAGjB"}

package/dist/errors.js

@@ -0,0 +1,163 @@
+/**
+ * The error catalog. Errors are the primary UI of this language: their audience is an LLM
+ * repairing its own program, so every error whose cause is a call to a primitive carries that
+ * primitive's full signature and one working example, and the blame frame is always in
+ * user-program coordinates.
+ *
+ * Codes are stable and grouped: L1xxx grammar, L2xxx name resolution and static rules, L3xxx
+ * effect call shape, L4xxx runtime semantics, L5xxx durability, L6xxx simulation.
+ */
+/** Every code in the catalog, with the one-line title that heads the rendered error. */
+export const CATALOG = {
+    // ---- L1xxx: grammar -----------------------------------------------------------------------
+    L1001: "Forbidden syntax: `class`",
+    L1002: "Forbidden syntax: `this`",
+    L1003: "Forbidden syntax: `var`",
+    L1004: "Forbidden syntax: `for...in`",
+    L1005: "Forbidden syntax: generator",
+    L1006: "Forbidden syntax: `eval` or `Function`",
+    L1007: "Forbidden syntax: regular expression literal",
+    L1008: "Missing semicolon",
+    L1009: "Unbraced branch",
+    L1010: "`switch` case does not terminate",
+    L1011: "Computed property name",
+    L1012: "Array elision",
+    L1013: "Forbidden syntax: `with`",
+    L1014: "Forbidden syntax: symbol",
+    L1015: "Forbidden syntax: accessor",
+    L1016: "Forbidden syntax: `instanceof`",
+    L1017: "Forbidden syntax: label",
+    L1018: "Forbidden syntax: tagged template literal",
+    L1019: "Forbidden syntax: `new`",
+    L1020: "Forbidden syntax: `import` or `export`",
+    L1021: "Forbidden syntax: `delete`",
+    L1022: "Forbidden syntax: `do...while`",
+    L1023: "Forbidden syntax: `await` outside an async function",
+    L1024: "`return` outside a function",
+    // ---- L2xxx: name resolution and static rules ----------------------------------------------
+    L2001: "Unknown identifier",
+    L2002: "Shadows a builtin or a primitive",
+    L2003: "Assignment to a `const` binding",
+    L2011: "The Promise API is not available",
+    L2013: "An async call is not awaited",
+    L2012: "Host global is not available",
+    L2031: "Mutation of a frozen value",
+    // ---- L3xxx: effect call shape --------------------------------------------------------------
+    L3011: "Unknown option key",
+    L3012: "Missing required step name",
+    L3013: "Step name is not a literal",
+    L3014: "Malformed step name",
+    L3021: "`fanOut` has no stable key",
+    L3022: "Two agents share a worktree concurrently",
+    L3023: "Array-form `parallel` holds named effects",
+    L3024: "`fanOut` branch keys are not unique",
+    L3041: "Value cannot cross an effect boundary",
+    L3042: "Function passed as effect data",
+    L3043: "`notify` fact is not a bounded decision record",
+    L3044: "`to` without `onExpiry: \"escalate\"`",
+    // ---- L4xxx: runtime semantics ---------------------------------------------------------------
+    L4001: "Permit exhausted",
+    L4002: "Agent down",
+    L4003: "Turn deadline elapsed",
+    L4004: "Handoff across worktrees",
+    L4005: "Handoff to an agent outside the run",
+    L4006: "`ask` never produced a conforming record",
+    L4007: "Checkpoint expired",
+    L4008: "Concurrent worktree write",
+    L4009: "Run effect ceiling reached",
+    L4013: "Step budget exhausted",
+    // ---- L5xxx: durability -----------------------------------------------------------------------
+    L5001: "Run divergence",
+    L5002: "Program hash not available",
+    L5003: "Orphaned `spawn` on migrate",
+    L5004: "Orphaned resolved checkpoint on migrate",
+    L5005: "External reference gone",
+    L5006: "Effect result too large",
+    L5007: "Lease lost",
+    // ---- L6xxx: simulation -------------------------------------------------------------------------
+    L6001: "Unscripted effect in simulation",
+    L6002: "Simulation script entry unused",
+};
+/**
+ * Build the code frame: the offending line with a caret under the column. Rendering it here,
+ * from the source the parser saw, is what keeps the blame frame in user coordinates rather than
+ * in interpreter internals.
+ */
+export function codeFrame(source, span) {
+    const lines = source.split("\n");
+    const idx = span.line - 1;
+    if (idx < 0 || idx >= lines.length)
+        return "";
+    const gutter = String(span.line);
+    const pad = " ".repeat(gutter.length);
+    const text = lines[idx] ?? "";
+    const caretPad = " ".repeat(Math.max(0, span.column - 1));
+    return `${gutter} | ${text}\n${pad} | ${caretPad}^`;
+}
+/** One error. Carries its own rendering so no caller has to reinvent the format. */
+export class LangError extends Error {
+    code;
+    title;
+    span;
+    cause;
+    fix;
+    callee;
+    constructor(init) {
+        super(`${init.code} ${CATALOG[init.code]}`);
+        this.name = "LangError";
+        this.code = init.code;
+        this.title = CATALOG[init.code];
+        this.span = init.span;
+        this.cause = init.cause;
+        this.fix = init.fix;
+        if (init.callee !== undefined)
+            this.callee = init.callee;
+    }
+    toJSON(source) {
+        const base = {
+            code: this.code,
+            title: this.title,
+            where: { ...this.span, frame: codeFrame(source, this.span) },
+            cause: this.cause,
+            fix: this.fix,
+        };
+        return this.callee === undefined ? base : { ...base, callee: this.callee };
+    }
+    /** The human rendering: frame, cause, fix, then the callee's signature and example. */
+    render(source) {
+        const parts = [
+            `${this.code}  ${this.title}`,
+            "",
+            codeFrame(source, this.span),
+            "",
+            this.cause,
+            "",
+            `Fix: ${this.fix}`,
+        ];
+        if (this.callee !== undefined) {
+            parts.push("", this.callee.signature, this.callee.doc, "", this.callee.example);
+        }
+        return parts.join("\n");
+    }
+}
+/**
+ * The validator collects every error before reporting, so an author sees the whole repair list
+ * at once rather than fixing one thing per round trip.
+ */
+export class LangErrors extends Error {
+    errors;
+    source;
+    constructor(errors, source) {
+        super(`${errors.length} error${errors.length === 1 ? "" : "s"} in program`);
+        this.name = "LangErrors";
+        this.errors = errors;
+        this.source = source;
+    }
+    toJSON() {
+        return this.errors.map((e) => e.toJSON(this.source));
+    }
+    render() {
+        return this.errors.map((e) => e.render(this.source)).join("\n\n");
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,wFAAwF;AACxF,MAAM,CAAC,MAAM,OAAO,GAAG;IACrB,8FAA8F;IAC9F,KAAK,EAAE,2BAA2B;IAClC,KAAK,EAAE,0BAA0B;IACjC,KAAK,EAAE,yBAAyB;IAChC,KAAK,EAAE,8BAA8B;IACrC,KAAK,EAAE,6BAA6B;IACpC,KAAK,EAAE,wCAAwC;IAC/C,KAAK,EAAE,8CAA8C;IACrD,KAAK,EAAE,mBAAmB;IAC1B,KAAK,EAAE,iBAAiB;IACxB,KAAK,EAAE,kCAAkC;IACzC,KAAK,EAAE,wBAAwB;IAC/B,KAAK,EAAE,eAAe;IACtB,KAAK,EAAE,0BAA0B;IACjC,KAAK,EAAE,0BAA0B;IACjC,KAAK,EAAE,4BAA4B;IACnC,KAAK,EAAE,gCAAgC;IACvC,KAAK,EAAE,yBAAyB;IAChC,KAAK,EAAE,2CAA2C;IAClD,KAAK,EAAE,yBAAyB;IAChC,KAAK,EAAE,wCAAwC;IAC/C,KAAK,EAAE,4BAA4B;IACnC,KAAK,EAAE,gCAAgC;IACvC,KAAK,EAAE,qDAAqD;IAC5D,KAAK,EAAE,6BAA6B;IAEpC,8FAA8F;IAC9F,KAAK,EAAE,oBAAoB;IAC3B,KAAK,EAAE,kCAAkC;IACzC,KAAK,EAAE,iCAAiC;IACxC,KAAK,EAAE,kCAAkC;IACzC,KAAK,EAAE,8BAA8B;IACrC,KAAK,EAAE,8BAA8B;IACrC,KAAK,EAAE,4BAA4B;IAEnC,+FAA+F;IAC/F,KAAK,EAAE,oBAAoB;IAC3B,KAAK,EAAE,4BAA4B;IACnC,KAAK,EAAE,4BAA4B;IACnC,KAAK,EAAE,qBAAqB;IAC5B,KAAK,EAAE,4BAA4B;IACnC,KAAK,EAAE,0CAA0C;IACjD,KAAK,EAAE,2CAA2C;IAClD,KAAK,EAAE,qCAAqC;IAC5C,KAAK,EAAE,uCAAuC;IAC9C,KAAK,EAAE,gCAAgC;IACvC,KAAK,EAAE,gDAAgD;IACvD,KAAK,EAAE,uCAAuC;IAE9C,gGAAgG;IAChG,KAAK,EAAE,kBAAkB;IACzB,KAAK,EAAE,YAAY;IACnB,KAAK,EAAE,uBAAuB;IAC9B,KAAK,EAAE,0BAA0B;IACjC,KAAK,EAAE,qCAAqC;IAC5C,KAAK,EAAE,0CAA0C;IACjD,KAAK,EAAE,oBAAoB;IAC3B,KAAK,EAAE,2BAA2B;IAClC,KAAK,EAAE,4BAA4B;IACnC,KAAK,EAAE,uBAAuB;IAE9B,iGAAiG;IACjG,KAAK,EAAE,gBAAgB;IACvB,KAAK,EAAE,4BAA4B;IACnC,KAAK,EAAE,6BAA6B;IACpC,KAAK,EAAE,yCAAyC;IAChD,KAAK,EAAE,yBAAyB;IAChC,KAAK,EAAE,yBAAyB;IAChC,KAAK,EAAE,YAAY;IAEnB,mGAAmG;IACnG,KAAK,EAAE,iCAAiC;IACxC,KAAK,EAAE,gCAAgC;CAC/B,CAAC;AAyCX;;;;GAIG;AACH,MAAM,UAAU,SAAS,CAAC,MAAc,EAAE,IAAgB;IACxD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACjC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC;IAC1B,IAAI,GAAG,GAAG,CAAC,IAAI,GAAG,IAAI,KAAK,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IAC9C,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjC,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;IAC9B,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;IAC1D,OAAO,GAAG,MAAM,MAAM,IAAI,KAAK,GAAG,MAAM,QAAQ,GAAG,CAAC;AACtD,CAAC;AAED,oFAAoF;AACpF,MAAM,OAAO,SAAU,SAAQ,KAAK;IACzB,IAAI,CAAgB;IACpB,KAAK,CAAS;IACd,IAAI,CAAa;IACjB,KAAK,CAAS;IACd,GAAG,CAAS;IACZ,MAAM,CAAa;IAE5B,YAAY,IAAmB;QAC7B,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC5C,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACtB,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACtB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACxB,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;QACpB,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;YAAE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC3D,CAAC;IAED,MAAM,CAAC,MAAc;QACnB,MAAM,IAAI,GAAG;YACX,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,KAAK,EAAE,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE;YAC5D,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,GAAG,EAAE,IAAI,CAAC,GAAG;SACd,CAAC;QACF,OAAO,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;IAC7E,CAAC;IAED,uFAAuF;IACvF,MAAM,CAAC,MAAc;QACnB,MAAM,KAAK,GAAG;YACZ,GAAG,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,KAAK,EAAE;YAC7B,EAAE;YACF,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC;YAC5B,EAAE;YACF,IAAI,CAAC,KAAK;YACV,EAAE;YACF,QAAQ,IAAI,CAAC,GAAG,EAAE;SACnB,CAAC;QACF,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC9B,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAClF,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,OAAO,UAAW,SAAQ,KAAK;IAC1B,MAAM,CAAuB;IAC7B,MAAM,CAAS;IAExB,YAAY,MAA4B,EAAE,MAAc;QACtD,KAAK,CAAC,GAAG,MAAM,CAAC,MAAM,SAAS,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,aAAa,CAAC,CAAC;QAC5E,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC;QACzB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,MAAM;QACJ,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IACvD,CAAC;IAED,MAAM;QACJ,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACpE,CAAC;CACF"}

package/dist/grammar.d.ts

@@ -0,0 +1,28 @@
+/**
+ * The validator: one acorn parse followed by two AST walks, before anything executes.
+ *
+ * This file is where the design's central claim becomes mechanical rather than aspirational. A
+ * program that could reach ambient IO, an ambient clock, host identity, or hidden concurrency
+ * does not parse, so "determinism by convention" is not an option an author can take. Every rule
+ * in section 3 of the design doc maps to a check here and to a stable error code.
+ *
+ * Walk 1 is SHAPE: reject forbidden node types. Walk 2 is RESOLUTION: build the scope tree, bind
+ * every identifier, and check effect call shape. Both collect every error before reporting, so an
+ * author sees the whole repair list at once instead of one item per round trip.
+ */
+import type { Node } from "acorn";
+import { LangError } from "./errors.js";
+/** Acorn nodes are loosely typed; this is the shape we actually read. */
+type AnyNode = Node & Record<string, unknown>;
+export interface ValidateResult {
+    readonly ast: AnyNode;
+    readonly warnings: readonly LangError[];
+}
+/**
+ * Parse and validate a program. Throws {@link LangErrors} carrying every problem found, so an
+ * author repairs the whole list in one pass. Returns the AST plus the lints that did not fail
+ * the program.
+ */
+export declare function validate(source: string, file?: string): ValidateResult;
+export {};
+//# sourceMappingURL=grammar.d.ts.map