@cotal-ai/lang 0.23.0 → 0.25.0

package/dist/journal.js

@@ -11,29 +11,193 @@
  * found, so a changed input is a diagnosable divergence naming the step, rather than a silent
  * miss that quietly re-runs the effect and lets two versions of the truth coexist.
  */
+import { NotCrossable, assertCrossable, assertScopeValueCrossable, deepFreeze } from "./values.js";
+import { RuntimeFault } from "./errors.js";
 import { stepKeyString } from "./keys.js";
+import { EFFECT_KINDS } from "./primitives.js";
+/**
+ * A durable append the store REFUSED.
+ *
+ * This is not an effect failure, and conflating the two is not cosmetic. A handler that completed
+ * plus a log that would not accept the completion, recorded as one fact, is an entry saying the
+ * work FAILED: a later replay then reports failure for work the world actually did, which is the
+ * journal lying about the one thing it exists to remember. The domains are separate: "the world
+ * said no" is the run's result, "the log said no" is the run losing its ability to have one. A
+ * driver reads the second as
+ * "stop, and do not record anything else", never as an outcome.
+ *
+ * Nothing was written and nothing in memory moved, so a caller holding this error knows exactly as
+ * much as it did before the call.
+ */
+export class JournalAppendRejected extends Error {
+    stepKey;
+    state;
+    reason;
+    code = "L5010";
+    /** True when the store could not tell whether the entry landed. See {@link IndeterminateAppend}. */
+    indeterminate;
+    constructor(stepKey, state, reason) {
+        const indeterminate = reason?.indeterminate === true;
+        super(`L5010 Journal append rejected\n\n  step  ${stepKey}   ${state}\n\n${reason.message}\n\n${indeterminate
+            ? "Whether the entry was recorded is UNKNOWN — the store could not tell — and the in-memory journal was left as it was."
+            : "The entry was not recorded and the in-memory journal was left as it was."} This is a durability failure, not an effect failure: whatever the effect did, it stands, and this run can no longer say so.`);
+        this.stepKey = stepKey;
+        this.state = state;
+        this.reason = reason;
+        this.indeterminate = indeterminate;
+        this.name = "JournalAppendRejected";
+    }
+}
 export class JournalReadOnlyError extends Error {
     constructor(key) {
         super(`journal is read-only; ${stepKeyString(key)} would have been appended`);
         this.name = "JournalReadOnlyError";
     }
 }
+/**
+ * The step-key string an entry was written under, rebuilt from the entry itself.
+ *
+ * A recorded entry keeps the scope path as a STRING and its own `(kind, name, occurrence)` beside
+ * it, so the key it was filed under is recoverable — but only by re-applying the grammar that
+ * `stepKeyString` owns. That grammar lives in exactly one place and this is how anything outside
+ * the language addresses a recorded step: a caller that re-joined the parts by hand would be
+ * maintaining a second copy of a rule, and the first edit to the naming would silently address a
+ * different step rather than fail.
+ */
+export function journalEntryKeyString(entry) {
+    const named = entry.name === "" ? entry.kind : `${entry.kind}:${entry.name}`;
+    return `${entry.scope}/${named}#${entry.occurrence}`;
+}
+/**
+ * WHY EACH FIELD MATTERS, said in its own words. One sentence for all three would have to be vague
+ * enough to fit the loosest, and the operator reading this is deciding whether to repair a store.
+ */
+const WHAT_THE_FIELD_IS = {
+    external: "`external` is what a resume re-binds the handler's own record to",
+    "error.detail": "`error.detail` is how a failed step explains itself, and a resume hands it to the program that catches it",
+    result: "`result` is what a resume hands back INSTEAD of running the step again",
+};
+function bindingWithoutCanonicalForm(entry, field, cause) {
+    const step = `${entry.scope}/${entry.name === "" ? entry.kind : `${entry.kind}:${entry.name}`}#${entry.occurrence}`;
+    return new RuntimeFault("L5024", `A recorded value has no canonical form\n\n  entry seq ${entry.seq}   ${entry.kind}   \`${field}\` UNREADABLE\n`
+        + `        step      ${step}\n        cause     ${cause.message}\n\n`
+        + `${WHAT_THE_FIELD_IS[field]}, so a value the language cannot express is one `
+        + "this run would hand back to the program as if it had been recorded. The entry cannot be read, and reading it as "
+        + `anything else would invent a fact.\n\nOptions\n  repair the entry at seq ${entry.seq} in the store, so its `
+        + `\`${field}\` is a value an effect boundary can carry\n  fork(run, "${step}")   start again from before this step`);
+}
+/** The entry kinds whose `result` is an assembly of branches rather than one handler's value. */
+const SCOPE_KINDS = new Set(["parallel", "race", "fanOut", "conclave"]);
+/** What the crossing rule calls the value it is refusing, so its path reads as the record's own. */
+const LABEL_OF = {
+    external: "the recorded binding",
+    "error.detail": "the recorded failure detail",
+    result: "the recorded result",
+};
 export class Journal {
     run;
     readOnly;
+    store;
     byKey = new Map();
     order = [];
+    /**
+     * Append order, allocated where the entry is BUILT rather than read off `order.length`.
+     *
+     * `begin` awaits a durable append before the key joins `order`, so two concurrent branches — which
+     * is the normal shape, not an edge case — both read the same length and both claimed the same
+     * `seq`. Rendering then showed two "first" steps, and any tooling ordering by it saw a tie it had
+     * no way to break. A counter is allocated synchronously, so the two branches cannot observe the
+     * same value however their awaits interleave.
+     */
+    nextSeq = 0;
     /** Every key the current replay has looked up. What is left over is an orphan. */
     consumed = new Set();
     constructor(init) {
         this.run = init.run;
         this.readOnly = init.readOnly === true;
+        if (init.store !== undefined)
+            this.store = init.store;
         for (const e of init.entries ?? []) {
+            // A journal is ONE run's. Seeding it with another run's entry would make this run resume
+            // against a history it never had — the keys are structural, so a foreign entry with the same
+            // scope and name matches, and its recorded result is returned as if this run had produced it.
+            if (e.run !== this.run)
+                throw new Error(`journal for run ${this.run} was seeded with an entry from run ${e.run}; a run resumes only from its own journal`);
             // The stored `scope` string is authoritative: it is what makes a journal readable back
             // without re-running the program that produced it.
+            // THE BINDING IS THE FIELD WITH NO WRITE-SIDE HISTORY. `result` crossed `assertCrossable` when
+            // it settled and the arguments crossed it when they dispatched; `external` reached the record
+            // through {@link Journal.bind} with nothing between it and the store until the guards in
+            // `performEffect` and `performScope`. Those fence every shipped caller, exactly two of them,
+            // both in perform.ts, but they fence it by ENUMERATION, and a record already written is behind
+            // them either way. This door is the one a loaded journal cannot go around.
+            // TWO FIELDS, ONE RULE. `external` is what a resume re-binds to; `error.detail` is what a
+            // failed step reports itself with. Both are values a handler chose and both reached the record
+            // with no domain check until the guards in `performEffect` and `performScope`. `detail` is the
+            // second one and it is not hypothetical: a program that CATCHES an effect failure succeeds,
+            // so a run can complete with an unreadable value sitting in a settled entry. Measured, and
+            // through the worker that run dies on a structured-clone error naming a host algorithm.
+            for (const [field, value] of [["external", e.external], ["error.detail", e.error?.detail]]) {
+                if (value === undefined)
+                    continue;
+                try {
+                    assertCrossable(value, LABEL_OF[field]);
+                }
+                catch (cause) {
+                    if (!(cause instanceof NotCrossable))
+                        throw cause;
+                    throw bindingWithoutCanonicalForm(e, field, cause);
+                }
+            }
+            // `result` IS THE THIRD FIELD, AND IT IS NOT READ LIKE THE OTHER TWO. An effect's result is
+            // the handler's own value and answers to the rule whole. A SCOPE's result is the
+            // interpreter's assembly `{ branches, value }`, and its branch positions may legitimately be
+            // absent, so it answers to the same absence-exempt rule its write fence uses. `branches` is a
+            // list of branch NAMES (strings) and needs no exemption.
+            if (e.result !== undefined) {
+                try {
+                    if (SCOPE_KINDS.has(e.kind)) {
+                        const assembled = e.result;
+                        if (assembled.branches !== undefined)
+                            assertCrossable(assembled.branches, "the recorded branch list");
+                        assertScopeValueCrossable(assembled.value, "the recorded result.value", e.kind);
+                    }
+                    else {
+                        assertCrossable(e.result, LABEL_OF.result);
+                    }
+                }
+                catch (cause) {
+                    if (!(cause instanceof NotCrossable))
+                        throw cause;
+                    throw bindingWithoutCanonicalForm(e, "result", cause);
+                }
+            }
             const full = `${e.scope}/${e.name === "" ? e.kind : `${e.kind}:${e.name}`}#${e.occurrence}`;
-            this.byKey.set(full, e);
-            this.order.push(full);
+            // FROZEN ON THE WAY IN, because replay returns `entry.result` to the program as a value that
+            // already crossed an effect boundary. The LIVE path freezes the result before it settles, but
+            // a journal read back from a durable store is fresh deserialized data — measured before this
+            // line: a program mutated a replayed spawn handle, and pushed into a replayed scope result,
+            // with no L2031, on exactly the values whose recorded form is the one thing a resume trusts.
+            // The journal never mutates an entry in place (every transition builds a new record), so
+            // freezing the seed changes nothing else.
+            this.byKey.set(full, deepFreeze(e));
+            // FOLD THE LOG. A seed is an APPEND LOG, not a keyed view: the stream carries the pending
+            // record and the settled one as two records (`journal-store.smoke`: "settling appends a second
+            // record rather than editing the first"), `RunJournalAppender.steps()` replays both, and the
+            // driver seeds a journal straight from that. `byKey` already folds — last write wins, which is
+            // the settled row — so pushing the key again put the SAME entry in `order` twice and left the
+            // journal's two views disagreeing: the ceiling counted one step and `entries()` reported two,
+            // both resolving through `byKey`, so the pending row came back as a second copy of the settled
+            // one. `orphans()` reads `order`, so an unconsumed step reached the migrate table twice — one
+            // decision presented to an operator as two, about a step that happened once.
+            //
+            // FIRST occurrence, not last: `order` is the order the run PERFORMED its steps in, and a step
+            // begins when its pending row is written. Re-pushing on settle would reorder history by
+            // completion, which is a different sequence and not the one a reader is looking for.
+            if (!this.order.includes(full))
+                this.order.push(full);
+            if (e.seq >= this.nextSeq)
+                this.nextSeq = e.seq + 1;
         }
     }
     static keyOf(key) {
@@ -65,14 +229,41 @@ export class Journal {
             return { verdict: "replay-cancelled", entry };
         return { verdict: "replay", entry };
     }
-    /** Append the `pending` half: the effect is about to be performed. */
-    begin(key, inputHash, startedAt, requestId) {
+    /**
+     * Durably record one entry, BEFORE the in-memory map is allowed to hold it.
+     *
+     * The order is the whole point. Mutating first leaves a volatile transition behind when the store
+     * refuses: a `begin` whose append was rejected still reads as `pending`, and a `settle` whose
+     * append was rejected still reads as settled, so the in-memory journal claims a durability the
+     * store explicitly declined to provide. Persisting first means a rejected append changes nothing
+     * at all, which is the only state a caller can reason about.
+     *
+     * With no store there is nothing to refuse: `persist` returns, the map is updated, and nothing is
+     * awaited that could fail.
+     */
+    async persist(k, entry) {
+        if (this.store === undefined)
+            return;
+        try {
+            await this.store.append(entry);
+        }
+        catch (e) {
+            throw new JournalAppendRejected(k, entry.state, e);
+        }
+    }
+    /**
+     * Append the `pending` half: the effect is about to be performed.
+     *
+     * AWAIT THIS BEFORE DISPATCHING. The entry carries the request id the handler will submit under,
+     * and an identity that is not durable when the work is issued names nothing a resume can find.
+     */
+    async begin(key, inputHash, startedAt, requestId) {
         if (this.readOnly)
             throw new JournalReadOnlyError(key);
         const k = Journal.keyOf(key);
         const entry = {
             v: 1,
-            seq: this.order.length,
+            seq: this.nextSeq++,
             run: this.run,
             scope: k.slice(0, k.lastIndexOf("/")),
             kind: key.kind,
@@ -83,6 +274,7 @@ export class Journal {
             state: "pending",
             startedAt,
         };
+        await this.persist(k, entry);
         this.byKey.set(k, entry);
         this.order.push(k);
         this.consumed.add(k);
@@ -100,26 +292,38 @@ export class Journal {
      * The INDEX moves with the id, and it is the half that recovery reads: an id says what to submit
      * under, the index says how much of the chain is already spent.
      */
-    reissueAs(key, requestId, attempt) {
+    async reissueAs(key, requestId, attempt) {
         if (this.readOnly)
             throw new JournalReadOnlyError(key);
         const k = Journal.keyOf(key);
         const entry = this.byKey.get(k);
         if (entry === undefined)
             throw new Error(`reissueAs before begin for ${k}`);
-        this.byKey.set(k, { ...entry, requestId, attempt });
+        const next = { ...entry, requestId, attempt };
+        await this.persist(k, next);
+        this.byKey.set(k, next);
     }
-    bind(key, external) {
+    async bind(key, external) {
         if (this.readOnly)
             throw new JournalReadOnlyError(key);
         const k = Journal.keyOf(key);
         const entry = this.byKey.get(k);
         if (entry === undefined)
             throw new Error(`bind before begin for ${k}`);
-        this.byKey.set(k, { ...entry, external });
+        const next = { ...entry, external };
+        await this.persist(k, next);
+        this.byKey.set(k, next);
     }
-    /** Append the `settled` half. */
-    settle(key, outcome, endedAt) {
+    /**
+     * Append the `settled` half.
+     *
+     * `facts.cancel` is for a scope that cancels siblings: the intent is recorded WITH the outcome
+     * rather than after it, because a process dies between instructions and two appends are two
+     * network operations however few keywords separate them. `facts.closed` is a `conclave`'s
+     * membership disposition, for the same reason and with the same rule: it goes down with the
+     * outcome or not at all.
+     */
+    async settle(key, outcome, endedAt, facts = {}) {
         if (this.readOnly)
             throw new JournalReadOnlyError(key);
         const k = Journal.keyOf(key);
@@ -133,10 +337,58 @@ export class Journal {
             endedAt,
             ...(outcome.status === "ok" ? { result: outcome.result } : {}),
             ...(outcome.status === "failed" ? { error: outcome.error } : {}),
+            ...(facts.cancel !== undefined ? { cancel: facts.cancel } : {}),
+            ...(facts.closed !== undefined ? { closed: facts.closed } : {}),
+            ...(facts.branchDigest !== undefined ? { branchDigest: facts.branchDigest } : {}),
+            // Only where `result` is not carrying them, so the two can never disagree.
+            ...(outcome.status !== "ok" && facts.branches !== undefined ? { branches: facts.branches } : {}),
         };
+        await this.persist(k, settled);
         this.byKey.set(k, settled);
         return settled;
     }
+    /**
+     * Account for everything under a settled scope WITHOUT entering a branch.
+     *
+     * A settled scope is delivered from its own entry, so the branches are never walked — and an
+     * entry nothing walks is an orphan, which on a migration means "the edit removed this step". The
+     * branches were not removed; they were decided. So the subtree is marked consumed explicitly.
+     *
+     * A loser still sitting `pending` is settled `cancelled` in the same pass, because that is what
+     * it is: the scope resolved without it. Settling the record is NOT the cancellation — the world
+     * has to be told separately, which is what `cancel.issued` tracks — but leaving it pending would
+     * make a resumed run try to recover work the scope already decided to abandon.
+     */
+    async consumeScope(scopeKeyString, endedAt, 
+    /**
+     * Restrict the accounting to these branch keys.
+     *
+     * A resume passes nothing and takes the whole subtree, which is correct because the program
+     * hash is unchanged and nothing under the scope can have been removed. A MIGRATION passes the
+     * losers alone: the branches it does not name are walked instead, so that an effect the edited
+     * source removed still shows up as an orphan rather than being accounted for by a scope that
+     * never entered it.
+     */
+    only) {
+        const prefix = `${scopeKeyString}/b:`;
+        const wanted = only === undefined ? undefined : new Set([...only].map((b) => `${prefix}${b}/`));
+        const touched = [];
+        for (const k of this.order) {
+            if (!k.startsWith(prefix))
+                continue;
+            if (wanted !== undefined && ![...wanted].some((w) => k.startsWith(w)))
+                continue;
+            this.consumed.add(k);
+            touched.push(k);
+            const entry = this.byKey.get(k);
+            if (entry === undefined || entry.state !== "pending")
+                continue;
+            const cancelled = { ...entry, state: "settled", status: "cancelled", endedAt };
+            await this.persist(k, cancelled);
+            this.byKey.set(k, cancelled);
+        }
+        return touched;
+    }
     /** Every entry, in append order. The journal is the prompt context for repair. */
     entries() {
         return this.order.map((k) => this.byKey.get(k)).filter((e) => e !== undefined);
@@ -155,6 +407,33 @@ export class Journal {
             .map((k) => this.byKey.get(k))
             .filter((e) => e !== undefined);
     }
+    /**
+     * How many EFFECTS this run has already dispatched, counted from what is recorded.
+     *
+     * The effect ceiling is a RUN bound (L4009, "Run effect ceiling reached") and the
+     * interpreter's counter is per-instance, so without this a run got a fresh allowance at every
+     * activation and a runaway loop that crashed periodically could never reach the ceiling. The
+     * journal is the only thing that survives an activation, and it already holds the answer.
+     *
+     * Distinct KEYS, not entries: a dispatch writes a pending entry and then a settled one under the
+     * same key, and the interpreter counts the dispatch once. A pending entry still counts — the
+     * effect was performed, which is exactly why it was written before the handler was called.
+     *
+     * `conclave` is excluded because the interpreter does not count it either: it dispatches
+     * `openConclave` from the scope walker rather than through `performEffect`, so counting it here
+     * would make a resumed run's tally disagree with a fresh one's. That asymmetry is a real gap in
+     * what the ceiling sees and it is reported separately; this method mirrors the counter rather
+     * than quietly repairing it, because a seed that does not match the thing it seeds is worse than
+     * the gap it would paper over.
+     */
+    dispatchedEffects() {
+        let n = 0;
+        for (const e of this.byKey.values()) {
+            if (e.kind !== "conclave" && EFFECT_KINDS.includes(e.kind))
+                n += 1;
+        }
+        return n;
+    }
     /** Start a fresh replay pass. */
     resetConsumed() {
         this.consumed.clear();
@@ -174,16 +453,31 @@ export class Journal {
  */
 export class RunClock {
     value;
+    listeners;
     constructor(startedAt) {
         this.value = startedAt;
     }
     now() {
         return this.value;
     }
+    /**
+     * Observe every forward move of THIS clock. A `race` subscribes to each arm's clock, because an
+     * in-flight effect that lands after the arm was cancelled advances the arm past the frontier,
+     * and the cut has to be re-decided on the fact rather than left where the settle put it. A fork
+     * does not inherit listeners: the subscriber asked about one branch, not its descendants — a
+     * nested branch's history reaches the arm's own clock at the join, which fires this then.
+     */
+    onAdvance(fn) {
+        (this.listeners ??= []).push(fn);
+    }
     /** Advance past an effect this branch awaited. Monotone: an out-of-order settle cannot rewind. */
     advance(endedAt) {
-        if (endedAt > this.value)
+        if (endedAt > this.value) {
             this.value = endedAt;
+            if (this.listeners !== undefined)
+                for (const l of this.listeners)
+                    l(this.value);
+        }
     }
     /** A branch inherits its parent's clock at the moment it forks. */
     fork() {

package/dist/journal.js.map

@@ -1 +1 @@
-{"version":3,"file":"journal.js","sourceRoot":"","sources":["../src/journal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,EAAgB,aAAa,EAAE,MAAM,WAAW,CAAC;AA4ExD,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAC7C,YAAY,GAAY;QACtB,KAAK,CAAC,yBAAyB,aAAa,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;QAC9E,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAED,MAAM,OAAO,OAAO;IACT,GAAG,CAAS;IACZ,QAAQ,CAAU;IACV,KAAK,GAAG,IAAI,GAAG,EAAwB,CAAC;IACxC,KAAK,GAAa,EAAE,CAAC;IACtC,kFAAkF;IACjE,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IAE9C,YAAY,IAAiB;QAC3B,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;QACpB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC;QACvC,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;YACnC,uFAAuF;YACvF,mDAAmD;YACnD,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC;YAC5F,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YACxB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IAEO,MAAM,CAAC,KAAK,CAAC,GAAY;QAC/B,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,GAAY,EAAE,SAAiB;QACpC,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACrB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAChC,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;QACpD,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YAClC,OAAO;gBACL,OAAO,EAAE,UAAU;gBACnB,KAAK;gBACL,YAAY,EAAE,KAAK,CAAC,SAAS;gBAC7B,WAAW,EAAE,SAAS;aACvB,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;YAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;QACpE,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ;YAAE,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;QAC1E,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW;YAAE,OAAO,EAAE,OAAO,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAC;QAChF,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IACtC,CAAC;IAED,sEAAsE;IACtE,KAAK,CAAC,GAAY,EAAE,SAAiB,EAAE,SAAiB,EAAE,SAAkB;QAC1E,IAAI,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,oBAAoB,CAAC,GAAG,CAAC,CAAC;QACvD,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,KAAK,GAAiB;YAC1B,CAAC,EAAE,CAAC;YACJ,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM;YACtB,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACrC,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,SAAS;YACT,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,KAAK,EAAE,SAAS;YAChB,SAAS;SACV,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACzB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACnB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACrB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,wFAAwF;IACxF;;;;;;;;;;OAUG;IACH,SAAS,CAAC,GAAY,EAAE,SAAiB,EAAE,OAAe;QACxD,IAAI,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,oBAAoB,CAAC,GAAG,CAAC,CAAC;QACvD,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAChC,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,EAAE,CAAC,CAAC;QAC5E,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,IAAI,CAAC,GAAY,EAAE,QAA2C;QAC5D,IAAI,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,oBAAoB,CAAC,GAAG,CAAC,CAAC;QACvD,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAChC,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,EAAE,CAAC,CAAC;QACvE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC5C,CAAC;IAED,iCAAiC;IACjC,MAAM,CACJ,GAAY,EACZ,OAGoC,EACpC,OAAe;QAEf,IAAI,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,oBAAoB,CAAC,GAAG,CAAC,CAAC;QACvD,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAChC,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,EAAE,CAAC,CAAC;QACzE,MAAM,OAAO,GAAiB;YAC5B,GAAG,KAAK;YACR,KAAK,EAAE,SAAS;YAChB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,OAAO;YACP,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjE,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QAC3B,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,kFAAkF;IAClF,OAAO;QACL,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAqB,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;IACpG,CAAC;IAED,GAAG,CAAC,GAAY;QACd,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5C,CAAC;IAED;;;;OAIG;IACH,OAAO;QACL,OAAO,IAAI,CAAC,KAAK;aACd,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;aACpC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;aAC7B,MAAM,CAAC,CAAC,CAAC,EAAqB,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;IACvD,CAAC;IAED,iCAAiC;IACjC,aAAa;QACX,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;CACF;AAED;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,QAAQ;IACX,KAAK,CAAS;IAEtB,YAAY,SAAiB;QAC3B,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;IACzB,CAAC;IAED,GAAG;QACD,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED,kGAAkG;IAClG,OAAO,CAAC,OAAe;QACrB,IAAI,OAAO,GAAG,IAAI,CAAC,KAAK;YAAE,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC;IACjD,CAAC;IAED,mEAAmE;IACnE,IAAI;QACF,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;IAED,8FAA8F;IAC9F,IAAI,CAAC,QAA6B;QAChC,KAAK,MAAM,CAAC,IAAI,QAAQ;YAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IAClD,CAAC;CACF"}
+{"version":3,"file":"journal.js","sourceRoot":"","sources":["../src/journal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,yBAAyB,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACnG,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAkC,aAAa,EAAE,MAAM,WAAW,CAAC;AAC1E,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AA0J/C;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAOnC;IACA;IACA;IARF,IAAI,GAAG,OAAO,CAAC;IAExB,oGAAoG;IAC3F,aAAa,CAAU;IAEhC,YACW,OAAe,EACf,KAAiB,EACjB,MAAa;QAEtB,MAAM,aAAa,GAAI,MAA0D,EAAE,aAAa,KAAK,IAAI,CAAC;QAC1G,KAAK,CACH,4CAA4C,OAAO,MAAM,KAAK,OAAO,MAAM,CAAC,OAAO,OACjF,aAAa;YACX,CAAC,CAAC,sHAAsH;YACxH,CAAC,CAAC,0EACN,8HAA8H,CAC/H,CAAC;QAXO,YAAO,GAAP,OAAO,CAAQ;QACf,UAAK,GAAL,KAAK,CAAY;QACjB,WAAM,GAAN,MAAM,CAAO;QAUtB,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;QACnC,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAED,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAC7C,YAAY,GAAY;QACtB,KAAK,CAAC,yBAAyB,aAAa,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;QAC9E,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAmB;IACvD,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7E,OAAO,GAAG,KAAK,CAAC,KAAK,IAAI,KAAK,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;AACvD,CAAC;AAwBD;;;GAGG;AACH,MAAM,iBAAiB,GAAkC;IACvD,QAAQ,EAAE,kEAAkE;IAC5E,cAAc,EAAE,2GAA2G;IAC3H,MAAM,EAAE,wEAAwE;CACjF,CAAC;AAEF,SAAS,2BAA2B,CAAC,KAAmB,EAAE,KAAoB,EAAE,KAAmB;IACjG,MAAM,IAAI,GAAG,GAAG,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;IACpH,OAAO,IAAI,YAAY,CACrB,OAAO,EACP,yDAAyD,KAAK,CAAC,GAAG,MAAM,KAAK,CAAC,IAAI,QAAQ,KAAK,iBAAiB;UAC5G,qBAAqB,IAAI,uBAAuB,KAAK,CAAC,OAAO,MAAM;UACnE,GAAG,iBAAiB,CAAC,KAAK,CAAC,kDAAkD;UAC7E,kHAAkH;UAClH,4EAA4E,KAAK,CAAC,GAAG,wBAAwB;UAC7G,KAAK,KAAK,4DAA4D,IAAI,wCAAwC,CACvH,CAAC;AACJ,CAAC;AAED,iGAAiG;AACjG,MAAM,WAAW,GAAwB,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC;AAE7F,oGAAoG;AACpG,MAAM,QAAQ,GAAkC;IAC9C,QAAQ,EAAE,sBAAsB;IAChC,cAAc,EAAE,6BAA6B;IAC7C,MAAM,EAAE,qBAAqB;CAC9B,CAAC;AAEF,MAAM,OAAO,OAAO;IACT,GAAG,CAAS;IACZ,QAAQ,CAAU;IACV,KAAK,CAAgB;IACrB,KAAK,GAAG,IAAI,GAAG,EAAwB,CAAC;IACxC,KAAK,GAAa,EAAE,CAAC;IACtC;;;;;;;;OAQG;IACK,OAAO,GAAG,CAAC,CAAC;IACpB,kFAAkF;IACjE,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IAE9C,YAAY,IAAiB;QAC3B,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;QACpB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC;QACvC,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;YAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACtD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;YACnC,yFAAyF;YACzF,6FAA6F;YAC7F,8FAA8F;YAC9F,IAAI,CAAC,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG;gBACpB,MAAM,IAAI,KAAK,CAAC,mBAAmB,IAAI,CAAC,GAAG,sCAAsC,CAAC,CAAC,GAAG,2CAA2C,CAAC,CAAC;YACrI,uFAAuF;YACvF,mDAAmD;YACnD,+FAA+F;YAC/F,8FAA8F;YAC9F,yFAAyF;YACzF,6FAA6F;YAC7F,+FAA+F;YAC/F,2EAA2E;YAC3E,0FAA0F;YAC1F,+FAA+F;YAC/F,+FAA+F;YAC/F,4FAA4F;YAC5F,2FAA2F;YAC3F,wFAAwF;YACxF,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,cAAc,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAU,EAAE,CAAC;gBACpG,IAAI,KAAK,KAAK,SAAS;oBAAE,SAAS;gBAClC,IAAI,CAAC;oBACH,eAAe,CAAC,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;gBAC1C,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,CAAC,CAAC,KAAK,YAAY,YAAY,CAAC;wBAAE,MAAM,KAAK,CAAC;oBAClD,MAAM,2BAA2B,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;gBACrD,CAAC;YACH,CAAC;YACD,4FAA4F;YAC5F,iFAAiF;YACjF,6FAA6F;YAC7F,8FAA8F;YAC9F,yDAAyD;YACzD,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC3B,IAAI,CAAC;oBACH,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;wBAC5B,MAAM,SAAS,GAAG,CAAC,CAAC,MAAmE,CAAC;wBACxF,IAAI,SAAS,CAAC,QAAQ,KAAK,SAAS;4BAAE,eAAe,CAAC,SAAS,CAAC,QAAQ,EAAE,0BAA0B,CAAC,CAAC;wBACtG,yBAAyB,CAAC,SAAS,CAAC,KAAK,EAAE,2BAA2B,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;oBAClF,CAAC;yBAAM,CAAC;wBACN,eAAe,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;oBAC7C,CAAC;gBACH,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,CAAC,CAAC,KAAK,YAAY,YAAY,CAAC;wBAAE,MAAM,KAAK,CAAC;oBAClD,MAAM,2BAA2B,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;gBACxD,CAAC;YACH,CAAC;YACD,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC;YAC5F,6FAA6F;YAC7F,8FAA8F;YAC9F,6FAA6F;YAC7F,4FAA4F;YAC5F,6FAA6F;YAC7F,yFAAyF;YACzF,0CAA0C;YAC1C,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;YACpC,0FAA0F;YAC1F,+FAA+F;YAC/F,6FAA6F;YAC7F,+FAA+F;YAC/F,8FAA8F;YAC9F,8FAA8F;YAC9F,+FAA+F;YAC/F,8FAA8F;YAC9F,6EAA6E;YAC7E,EAAE;YACF,8FAA8F;YAC9F,wFAAwF;YACxF,qFAAqF;YACrF,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtD,IAAI,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,OAAO;gBAAE,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IAEO,MAAM,CAAC,KAAK,CAAC,GAAY;QAC/B,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,GAAY,EAAE,SAAiB;QACpC,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACrB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAChC,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;QACpD,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YAClC,OAAO;gBACL,OAAO,EAAE,UAAU;gBACnB,KAAK;gBACL,YAAY,EAAE,KAAK,CAAC,SAAS;gBAC7B,WAAW,EAAE,SAAS;aACvB,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;YAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;QACpE,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ;YAAE,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;QAC1E,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW;YAAE,OAAO,EAAE,OAAO,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAC;QAChF,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IACtC,CAAC;IAED;;;;;;;;;;;OAWG;IACK,KAAK,CAAC,OAAO,CAAC,CAAS,EAAE,KAAmB;QAClD,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;YAAE,OAAO;QACrC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,IAAI,qBAAqB,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,EAAE,CAAU,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,KAAK,CAAC,GAAY,EAAE,SAAiB,EAAE,SAAiB,EAAE,SAAkB;QAChF,IAAI,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,oBAAoB,CAAC,GAAG,CAAC,CAAC;QACvD,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,KAAK,GAAiB;YAC1B,CAAC,EAAE,CAAC;YACJ,GAAG,EAAE,IAAI,CAAC,OAAO,EAAE;YACnB,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACrC,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,SAAS;YACT,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,KAAK,EAAE,SAAS;YAChB,SAAS;SACV,CAAC;QACF,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAC7B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACzB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACnB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACrB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,wFAAwF;IACxF;;;;;;;;;;OAUG;IACH,KAAK,CAAC,SAAS,CAAC,GAAY,EAAE,SAAiB,EAAE,OAAe;QAC9D,IAAI,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,oBAAoB,CAAC,GAAG,CAAC,CAAC;QACvD,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAChC,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,EAAE,CAAC,CAAC;QAC5E,MAAM,IAAI,GAAG,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;QAC9C,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QAC5B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,GAAY,EAAE,QAA2C;QAClE,IAAI,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,oBAAoB,CAAC,GAAG,CAAC,CAAC;QACvD,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAChC,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,EAAE,CAAC,CAAC;QACvE,MAAM,IAAI,GAAG,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,CAAC;QACpC,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QAC5B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,MAAM,CACV,GAAY,EACZ,OAGoC,EACpC,OAAe,EACf,QAKI,EAAE;QAEN,IAAI,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,oBAAoB,CAAC,GAAG,CAAC,CAAC;QACvD,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAChC,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,EAAE,CAAC,CAAC;QACzE,MAAM,OAAO,GAAiB;YAC5B,GAAG,KAAK;YACR,KAAK,EAAE,SAAS;YAChB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,OAAO;YACP,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/D,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/D,GAAG,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjF,2EAA2E;YAC3E,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjG,CAAC;QACF,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QAC/B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QAC3B,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,YAAY,CAChB,cAAsB,EACtB,OAAe;IACf;;;;;;;;OAQG;IACH,IAA0B;QAE1B,MAAM,MAAM,GAAG,GAAG,cAAc,KAAK,CAAC;QACtC,MAAM,MAAM,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QAChG,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC3B,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC;gBAAE,SAAS;YACpC,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;gBAAE,SAAS;YAChF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACrB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAChB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAChC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;gBAAE,SAAS;YAC/D,MAAM,SAAS,GAAiB,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC;YAC7F,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;YACjC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QAC/B,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,kFAAkF;IAClF,OAAO;QACL,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAqB,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;IACpG,CAAC;IAED,GAAG,CAAC,GAAY;QACd,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5C,CAAC;IAED;;;;OAIG;IACH,OAAO;QACL,OAAO,IAAI,CAAC,KAAK;aACd,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;aACpC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;aAC7B,MAAM,CAAC,CAAC,CAAC,EAAqB,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;IACvD,CAAC;IAED;;;;;;;;;;;;;;;;;;OAkBG;IACH,iBAAiB;QACf,IAAI,CAAC,GAAG,CAAC,CAAC;QACV,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YACpC,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,IAAK,YAAkC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;gBAAE,CAAC,IAAI,CAAC,CAAC;QAC5F,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,iCAAiC;IACjC,aAAa;QACX,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;CACF;AAED;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,QAAQ;IACX,KAAK,CAAS;IACd,SAAS,CAA6B;IAE9C,YAAY,SAAiB;QAC3B,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;IACzB,CAAC;IAED,GAAG;QACD,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED;;;;;;OAMG;IACH,SAAS,CAAC,EAAyB;QACjC,CAAC,IAAI,CAAC,SAAS,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnC,CAAC;IAED,kGAAkG;IAClG,OAAO,CAAC,OAAe;QACrB,IAAI,OAAO,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC;YACrB,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS;gBAAE,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,SAAS;oBAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;IAED,mEAAmE;IACnE,IAAI;QACF,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;IAED,8FAA8F;IAC9F,IAAI,CAAC,QAA6B;QAChC,KAAK,MAAM,CAAC,IAAI,QAAQ;YAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IAClD,CAAC;CACF"}

package/dist/keys.d.ts

@@ -16,6 +16,15 @@
 import type { EffectKind } from "./primitives.js";
 /** The concurrency combinators that open a scope. */
 export type ScopeKind = "parallel" | "race" | "fanOut" | "conclave";
+/**
+ * What a journal entry can be keyed as: an effect, or a concurrency SCOPE.
+ *
+ * The scope kinds are here because a combinator writes an entry for itself, and without them that
+ * entry has no legal key and no legal kind — which is the state this package was in: scopes pushed
+ * a frame, allocated an occurrence, and journalled nothing, so a replayed `race` re-raced and could
+ * resolve a different arm with nothing recorded saying which one had won.
+ */
+export type JournalKind = EffectKind | ScopeKind;
 export interface ScopeFrame {
     readonly kind: ScopeKind;
     /** The combinator's step name, or null when it was not named. */
@@ -27,7 +36,7 @@ export interface ScopeFrame {
 }
 export interface StepKey {
     readonly scope: readonly ScopeFrame[];
-    readonly kind: EffectKind;
+    readonly kind: JournalKind;
     /** The literal step name, or "" when the effect was not named. */
     readonly name: string;
     readonly occurrence: number;
@@ -51,6 +60,27 @@ export declare const DIGEST_PREFIX: "sha256:";
  */
 export declare function requestId(runId: string, key: StepKey, inputHash: string, attempt?: number): string;
 export declare function digest(value: unknown): string;
+/**
+ * A program's identity, as one function so there is only one answer.
+ *
+ * The interpreter pins a run to this and a migration records the source it moved TO, and those two
+ * must be the same hash of the same thing — a second copy of `digest({ source })` in another package
+ * is a different function's answer wearing this one's name the moment either side changes.
+ */
+export declare function programHashOf(source: string): string;
+/**
+ * The characters the key grammar reserves as STRUCTURE.
+ *
+ * `frameString` and `stepKeyString` below build a key by concatenation and escape nothing, so any
+ * of these appearing inside a name or a branch key forges a path segment: a single branch keyed
+ * `a/parallel:inner#0/b:b` prints exactly what a genuinely nested `a` → `inner` → `b` prints. The
+ * validator refuses them at the source rather than escaping them here, because escaping would
+ * change every key already written to a journal.
+ *
+ * It lives beside the grammar that reserves them: a key format that gains a delimiter and leaves
+ * this set behind gives a validator that guards the wrong characters and still passes its tests.
+ */
+export declare const KEY_RESERVED_RE: RegExp;
 /** The canonical string form, used in the journal, the trace, and error messages. */
 export declare function scopePathString(scope: readonly ScopeFrame[]): string;
 export declare function stepKeyString(key: StepKey): string;
@@ -75,6 +105,14 @@ export declare class KeyScope {
      * per combinator call, then {@link branch} once per branch.
      */
     nextScope(kind: ScopeKind, name?: string | null): number;
+    /**
+     * The scope's OWN key, in the namespace that opened it.
+     *
+     * Allocation-free on purpose: {@link KeyScope.nextScope} already allocated the occurrence, and
+     * calling this must not consume a second one. The scope entry therefore sits beside the effects
+     * of the namespace that opened it (`/race:first-answer#0`), while its branches live under it.
+     */
+    scopeKey(kind: ScopeKind, name: string | null, occurrence: number): StepKey;
     /** The child namespace for one branch of a scope opened from here. */
     branch(kind: ScopeKind, name: string | null, occurrence: number, branchKey: string): KeyScope;
 }

package/dist/keys.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"keys.d.ts","sourceRoot":"","sources":["../src/keys.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAIH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAElD,qDAAqD;AACrD,MAAM,MAAM,SAAS,GAAG,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,UAAU,CAAC;AAEpE,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,iEAAiE;IACjE,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,wEAAwE;IACxE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,iEAAiE;IACjE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,KAAK,EAAE,SAAS,UAAU,EAAE,CAAC;IACtC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,kEAAkE;IAClE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED;gDACgD;AAChD,eAAO,MAAM,aAAa,EAAG,SAAkB,CAAC;AAEhD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,SAAI,GAAG,MAAM,CAI7F;AAED,wBAAgB,MAAM,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAE7C;AAOD,qFAAqF;AACrF,wBAAgB,eAAe,CAAC,KAAK,EAAE,SAAS,UAAU,EAAE,GAAG,MAAM,CAEpE;AAED,wBAAgB,aAAa,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAGlD;AAED,wBAAgB,aAAa,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,GAAG,OAAO,CAE7D;AAED;;;;;;;GAOG;AACH,qBAAa,QAAQ;IAIP,QAAQ,CAAC,IAAI,EAAE,SAAS,UAAU,EAAE;IAHhD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA6B;IAC1D,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA6B;gBAEpC,IAAI,GAAE,SAAS,UAAU,EAAO;IAErD,uFAAuF;IACvF,UAAU,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,SAAK,GAAG,OAAO;IAOhD;;;OAGG;IACH,SAAS,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,GAAE,MAAM,GAAG,IAAW,GAAG,MAAM;IAO9D,sEAAsE;IACtE,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,QAAQ;CAG9F;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,QAAQ,EAAE,SAAS,OAAO,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,MAAM,EAAE,CAIrG"}
+{"version":3,"file":"keys.d.ts","sourceRoot":"","sources":["../src/keys.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAIH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAGlD,qDAAqD;AACrD,MAAM,MAAM,SAAS,GAAG,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,UAAU,CAAC;AAEpE;;;;;;;GAOG;AACH,MAAM,MAAM,WAAW,GAAG,UAAU,GAAG,SAAS,CAAC;AAEjD,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,iEAAiE;IACjE,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,wEAAwE;IACxE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,iEAAiE;IACjE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,KAAK,EAAE,SAAS,UAAU,EAAE,CAAC;IACtC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,kEAAkE;IAClE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED;gDACgD;AAChD,eAAO,MAAM,aAAa,EAAG,SAAkB,CAAC;AAEhD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,SAAI,GAAG,MAAM,CAI7F;AAED,wBAAgB,MAAM,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAE7C;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEpD;AAED;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,eAAe,QAAU,CAAC;AA0BvC,qFAAqF;AACrF,wBAAgB,eAAe,CAAC,KAAK,EAAE,SAAS,UAAU,EAAE,GAAG,MAAM,CAEpE;AAED,wBAAgB,aAAa,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAGlD;AAED,wBAAgB,aAAa,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,GAAG,OAAO,CAE7D;AAED;;;;;;;GAOG;AACH,qBAAa,QAAQ;IAIP,QAAQ,CAAC,IAAI,EAAE,SAAS,UAAU,EAAE;IAHhD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA6B;IAC1D,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA6B;gBAEpC,IAAI,GAAE,SAAS,UAAU,EAAO;IAErD,uFAAuF;IACvF,UAAU,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,SAAK,GAAG,OAAO;IAchD;;;OAGG;IACH,SAAS,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,GAAE,MAAM,GAAG,IAAW,GAAG,MAAM;IAO9D;;;;;;OAMG;IACH,QAAQ,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO;IAI3E,sEAAsE;IACtE,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,QAAQ;CAO9F;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,QAAQ,EAAE,SAAS,OAAO,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,MAAM,EAAE,CAIrG"}

package/dist/keys.js

@@ -15,6 +15,7 @@
  */
 import { createHash } from "node:crypto";
 import { canonicalize } from "json-canonicalize";
+import { RuntimeFault } from "./errors.js";
 /** `sha256:<hex>` over the RFC 8785 canonical form, matching the digest discipline used for
  *  contract artifacts elsewhere in the repo. */
 export const DIGEST_PREFIX = "sha256:";
@@ -40,6 +41,45 @@ export function requestId(runId, key, inputHash, attempt = 0) {
 export function digest(value) {
     return DIGEST_PREFIX + createHash("sha256").update(canonicalize(value), "utf8").digest("hex");
 }
+/**
+ * A program's identity, as one function so there is only one answer.
+ *
+ * The interpreter pins a run to this and a migration records the source it moved TO, and those two
+ * must be the same hash of the same thing — a second copy of `digest({ source })` in another package
+ * is a different function's answer wearing this one's name the moment either side changes.
+ */
+export function programHashOf(source) {
+    return digest({ source });
+}
+/**
+ * The characters the key grammar reserves as STRUCTURE.
+ *
+ * `frameString` and `stepKeyString` below build a key by concatenation and escape nothing, so any
+ * of these appearing inside a name or a branch key forges a path segment: a single branch keyed
+ * `a/parallel:inner#0/b:b` prints exactly what a genuinely nested `a` → `inner` → `b` prints. The
+ * validator refuses them at the source rather than escaping them here, because escaping would
+ * change every key already written to a journal.
+ *
+ * It lives beside the grammar that reserves them: a key format that gains a delimiter and leaves
+ * this set behind gives a validator that guards the wrong characters and still passes its tests.
+ */
+export const KEY_RESERVED_RE = /[/#:]/;
+/**
+ * Refuse a name or branch key that would forge structure, at the point the key is MINTED.
+ *
+ * The validator closes the static case, and it is the better place to close it — an author gets the
+ * refusal before the run starts. But it can only see a LITERAL. `fanOut(items, (i) => sleep("1m",
+ * { name: i }))` names each step after its item, which is idiomatic and is how a fan-out gets
+ * distinct keys at all, and those values are usually data from outside the program. **A forged key
+ * built from data is strictly easier to reach than one written in the source, and it is exactly the
+ * case static analysis cannot see.** So the guard exists in both places on purpose: this is not a
+ * belt on the validator's braces, it covers inputs the validator provably cannot.
+ */
+function assertKeySafe(value, what) {
+    if (!KEY_RESERVED_RE.test(value))
+        return;
+    throw new RuntimeFault("L3025", `${what} is ${JSON.stringify(value)}, which contains a character the step-key grammar reserves (\`/\`, \`#\` or \`:\`). Keys are built by concatenation and nothing is escaped, so this value would forge a scope path that a genuinely nested scope also produces — and two locations sharing a key share a durable journal row, silently when their inputs match.`);
+}
 function frameString(f) {
     const named = f.name === null ? f.kind : `${f.kind}:${f.name}`;
     return `/${named}#${f.occurrence}/b:${f.branch}`;
@@ -72,6 +112,13 @@ export class KeyScope {
     }
     /** Allocate the next occurrence for an effect in this namespace, and build its key. */
     nextEffect(kind, name = "") {
+        // The validator refuses a reserved character in a LITERAL name, but a name can be computed —
+        // `fanOut(items, (lens) => sleep("1m", { name: lens }))` is idiomatic and its name is only
+        // known here. A static check cannot see that value, so the refusal has to exist at the point
+        // where it does. Without this, a fan-out over items containing a `/` forges scope structure
+        // from data, which is the same collision the validator closes for the static case and is
+        // strictly easier to hit, because the items usually come from outside the program.
+        assertKeySafe(name, `the name of this \`${kind}\``);
         const tag = `${kind}:${name}`;
         const occurrence = this.effectCounts.get(tag) ?? 0;
         this.effectCounts.set(tag, occurrence + 1);
@@ -87,8 +134,22 @@ export class KeyScope {
         this.scopeCounts.set(tag, occurrence + 1);
         return occurrence;
     }
+    /**
+     * The scope's OWN key, in the namespace that opened it.
+     *
+     * Allocation-free on purpose: {@link KeyScope.nextScope} already allocated the occurrence, and
+     * calling this must not consume a second one. The scope entry therefore sits beside the effects
+     * of the namespace that opened it (`/race:first-answer#0`), while its branches live under it.
+     */
+    scopeKey(kind, name, occurrence) {
+        return { scope: this.path, kind, name: name ?? "", occurrence };
+    }
     /** The child namespace for one branch of a scope opened from here. */
     branch(kind, name, occurrence, branchKey) {
+        // The other half of the same hazard, and the one the review actually found. A `fanOut` keyed by
+        // a function over its items produces branch keys from DATA, so this is reachable without anyone
+        // writing a suspicious literal anywhere in the program.
+        assertKeySafe(branchKey, `the branch key of this \`${kind}\``);
         return new KeyScope([...this.path, { kind, name, occurrence, branch: branchKey }]);
     }
 }

package/dist/keys.js.map

@@ -1 +1 @@
-{"version":3,"file":"keys.js","sourceRoot":"","sources":["../src/keys.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAwBjD;gDACgD;AAChD,MAAM,CAAC,MAAM,aAAa,GAAG,SAAkB,CAAC;AAEhD;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,SAAS,CAAC,KAAa,EAAE,GAAY,EAAE,SAAiB,EAAE,OAAO,GAAG,CAAC;IACnF,OAAO,UAAU,CAAC,QAAQ,CAAC;SACxB,MAAM,CAAC,YAAY,CAAC,CAAC,KAAK,EAAE,aAAa,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,EAAE,MAAM,CAAC;SAC7E,MAAM,CAAC,WAAW,CAAC,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,KAAc;IACnC,OAAO,aAAa,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChG,CAAC;AAED,SAAS,WAAW,CAAC,CAAa;IAChC,MAAM,KAAK,GAAG,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/D,OAAO,IAAI,KAAK,IAAI,CAAC,CAAC,UAAU,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC;AACnD,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,eAAe,CAAC,KAA4B;IAC1D,OAAO,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,GAAY;IACxC,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;IACrE,OAAO,GAAG,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;AACpE,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,CAAU,EAAE,CAAU;IAClD,OAAO,aAAa,CAAC,CAAC,CAAC,KAAK,aAAa,CAAC,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,QAAQ;IAIE;IAHJ,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;IAEzD,YAAqB,OAA8B,EAAE;QAAhC,SAAI,GAAJ,IAAI,CAA4B;IAAG,CAAC;IAEzD,uFAAuF;IACvF,UAAU,CAAC,IAAgB,EAAE,IAAI,GAAG,EAAE;QACpC,MAAM,GAAG,GAAG,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;QAC9B,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,GAAG,CAAC,CAAC,CAAC;QAC3C,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IACtD,CAAC;IAED;;;OAGG;IACH,SAAS,CAAC,IAAe,EAAE,OAAsB,IAAI;QACnD,MAAM,GAAG,GAAG,GAAG,IAAI,IAAI,IAAI,IAAI,EAAE,EAAE,CAAC;QACpC,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClD,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,GAAG,CAAC,CAAC,CAAC;QAC1C,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,sEAAsE;IACtE,MAAM,CAAC,IAAe,EAAE,IAAmB,EAAE,UAAkB,EAAE,SAAiB;QAChF,OAAO,IAAI,QAAQ,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;IACrF,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,QAAgE;IACzF,OAAO,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QAC5B,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACnC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAmC,CAAC,CAAC;AACvD,CAAC"}
+{"version":3,"file":"keys.js","sourceRoot":"","sources":["../src/keys.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEjD,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAiC3C;gDACgD;AAChD,MAAM,CAAC,MAAM,aAAa,GAAG,SAAkB,CAAC;AAEhD;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,SAAS,CAAC,KAAa,EAAE,GAAY,EAAE,SAAiB,EAAE,OAAO,GAAG,CAAC;IACnF,OAAO,UAAU,CAAC,QAAQ,CAAC;SACxB,MAAM,CAAC,YAAY,CAAC,CAAC,KAAK,EAAE,aAAa,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,EAAE,MAAM,CAAC;SAC7E,MAAM,CAAC,WAAW,CAAC,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,KAAc;IACnC,OAAO,aAAa,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChG,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,MAAc;IAC1C,OAAO,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;AAC5B,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,OAAO,CAAC;AAEvC;;;;;;;;;;GAUG;AACH,SAAS,aAAa,CAAC,KAAa,EAAE,IAAY;IAChD,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO;IACzC,MAAM,IAAI,YAAY,CACpB,OAAO,EACP,GAAG,IAAI,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,iUAAiU,CACrW,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,CAAa;IAChC,MAAM,KAAK,GAAG,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/D,OAAO,IAAI,KAAK,IAAI,CAAC,CAAC,UAAU,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC;AACnD,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,eAAe,CAAC,KAA4B;IAC1D,OAAO,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,GAAY;IACxC,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;IACrE,OAAO,GAAG,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;AACpE,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,CAAU,EAAE,CAAU;IAClD,OAAO,aAAa,CAAC,CAAC,CAAC,KAAK,aAAa,CAAC,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,QAAQ;IAIE;IAHJ,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;IAEzD,YAAqB,OAA8B,EAAE;QAAhC,SAAI,GAAJ,IAAI,CAA4B;IAAG,CAAC;IAEzD,uFAAuF;IACvF,UAAU,CAAC,IAAgB,EAAE,IAAI,GAAG,EAAE;QACpC,6FAA6F;QAC7F,2FAA2F;QAC3F,6FAA6F;QAC7F,4FAA4F;QAC5F,yFAAyF;QACzF,mFAAmF;QACnF,aAAa,CAAC,IAAI,EAAE,sBAAsB,IAAI,IAAI,CAAC,CAAC;QACpD,MAAM,GAAG,GAAG,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;QAC9B,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,GAAG,CAAC,CAAC,CAAC;QAC3C,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IACtD,CAAC;IAED;;;OAGG;IACH,SAAS,CAAC,IAAe,EAAE,OAAsB,IAAI;QACnD,MAAM,GAAG,GAAG,GAAG,IAAI,IAAI,IAAI,IAAI,EAAE,EAAE,CAAC;QACpC,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClD,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,GAAG,CAAC,CAAC,CAAC;QAC1C,OAAO,UAAU,CAAC;IACpB,CAAC;IAED;;;;;;OAMG;IACH,QAAQ,CAAC,IAAe,EAAE,IAAmB,EAAE,UAAkB;QAC/D,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,IAAI,EAAE,EAAE,UAAU,EAAE,CAAC;IAClE,CAAC;IAED,sEAAsE;IACtE,MAAM,CAAC,IAAe,EAAE,IAAmB,EAAE,UAAkB,EAAE,SAAiB;QAChF,gGAAgG;QAChG,gGAAgG;QAChG,wDAAwD;QACxD,aAAa,CAAC,SAAS,EAAE,4BAA4B,IAAI,IAAI,CAAC,CAAC;QAC/D,OAAO,IAAI,QAAQ,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;IACrF,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,QAAgE;IACzF,OAAO,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QAC5B,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACnC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAmC,CAAC,CAAC;AACvD,CAAC"}