@cueai/omni-reader-mcp 1.5.5 → 1.7.0

package/dist/operation-journal.d.ts

@@ -1,13 +1,23 @@
+import type { DirectProfile } from "./capabilities.js";
 import { type RepresentationIntent } from "./protocol.js";
 export type JournalState = "CREATED" | "GRANT_PENDING" | "GRANT_ISSUED" | "UPLOADING" | "PROCESSING" | "RESULT_READY" | "ACK_PENDING" | "CLEANUP_PENDING" | "COMPLETED" | "FAILED" | "CANCELED" | "EXPIRED";
 export type JournalProgressUnit = "page" | "sheet" | "slide" | "frame" | "segment";
 export type JournalCleanupState = "not_created" | "in_use" | "pending" | "deleted";
 export type JournalDeliveryState = "not_created" | "pending" | "deleted_after_ack";
+export type JournalResultDelivery = "auto" | "artifact";
 export interface JournalProgress {
     readonly unit: JournalProgressUnit;
     readonly completed: number;
     readonly total: number;
 }
+export interface JournalBillingFacts {
+    readonly creditsCharged: number;
+    readonly creditsRemaining: number;
+}
+export interface JournalSettlementFacts {
+    readonly directProfile: DirectProfile | null;
+    readonly billing: JournalBillingFacts;
+}
 export type JournalSourceKind = "local" | "url";
 export type JournalDetail = "text" | "grounded" | "layout";
 export type JournalGroundingSchemaVersion = "none" | "omni.grounding.v1";
@@ -22,6 +32,9 @@ export interface JournalRecord {
     readonly detail: JournalDetail;
     readonly groundingSchemaVersion: JournalGroundingSchemaVersion;
     readonly bundleProtocolVersion: JournalBundleProtocolVersion;
+    readonly resultDeliveryEffective: JournalResultDelivery;
+    readonly directProfile: DirectProfile | null;
+    readonly billing: JournalBillingFacts | null;
     readonly operationId: string | null;
     readonly operationToken: string | null;
     readonly uploadUrl: string | null;
@@ -85,9 +98,12 @@ export declare class OperationJournal {
     constructor(options?: OperationJournalOptions);
     requestIdentityHmac(canonicalIdentityJson: string): Promise<string>;
     sourceLocatorHmac(sourceLocator: string): Promise<string>;
-    beginIntent(clientRequestId: string, canonicalIdentityJson: string, sourceKind?: JournalSourceKind, sourceLocator?: string | null, representation?: RepresentationIntent): Promise<JournalRecord>;
+    beginIntent(clientRequestId: string, canonicalIdentityJson: string, sourceKind?: JournalSourceKind, sourceLocator?: string | null, representation?: RepresentationIntent, resultDelivery?: JournalResultDelivery): Promise<JournalRecord>;
     migrateLegacyRecord(clientRequestId: string, canonicalIdentityJson: string, sourceLocator?: string | null): Promise<JournalRecord | null>;
     transition(clientRequestId: string, expectedState: JournalState, nextState: JournalState, patch: JournalPatch): Promise<JournalRecord>;
+    strengthenResultDelivery(clientRequestId: string, requested: JournalResultDelivery): Promise<JournalRecord>;
+    bindDirectProfile(clientRequestId: string, directProfile: DirectProfile): Promise<JournalRecord>;
+    bindSettlementFacts(clientRequestId: string, facts: JournalSettlementFacts): Promise<JournalRecord>;
     loadByRequestId(clientRequestId: string): Promise<JournalRecord | null>;
     loadByOperationId(operationId: string): Promise<JournalRecord | null>;
     loadLatestByRequestIdentityHmac(requestIdentityHmac: string): Promise<JournalRecord | null>;

package/dist/operation-journal.js

@@ -4,7 +4,7 @@ import { homedir } from "node:os";
 import path from "node:path";
 import { OmniBridgeError } from "./errors.js";
 import { GROUNDING_SCHEMA_VERSION, RESULT_BUNDLE_PROTOCOL_VERSION, normalizeRepresentation, } from "./protocol.js";
-// D2-D item 4-6: v3 records persist keyed identities instead of unkeyed
+// D2-D item 4-6: v3/v4 records persist keyed identities instead of unkeyed
 // request/source hashes. requestIdentityHmac and sourceLocatorHmac are
 // lowercase full hex of HMAC-SHA-256 over the journal secret with the exact
 // domain prefixes below; they are never returned in tool output and never
@@ -43,6 +43,15 @@ const PERSISTED_V3_KEYS = [
     "resultExpiresAt",
     "errorCode",
 ];
+const PERSISTED_V4_KEYS = [
+    ...PERSISTED_V3_KEYS,
+    "result_delivery_effective",
+];
+const PERSISTED_V5_KEYS = [
+    ...PERSISTED_V4_KEYS,
+    "direct_profile",
+    "billing",
+];
 const JOURNAL_STATES = new Set([
     "CREATED",
     "GRANT_PENDING",
@@ -81,6 +90,7 @@ const DELIVERY_STATES = new Set([
     "pending",
     "deleted_after_ack",
 ]);
+const RESULT_DELIVERIES = new Set(["auto", "artifact"]);
 const RECORD_FILE_PATTERN = /^[0-9a-f]{64}(?:\.issued)?\.json$/u;
 const LOCK_STALE_MS = 30_000;
 const HEX_64_PATTERN = /^[0-9a-f]{64}$/u;
@@ -255,6 +265,73 @@ function parseVersionThreeRecord(value) {
     }
     return value;
 }
+function parseVersionFourRecord(value) {
+    const keys = Object.keys(value);
+    if (keys.length !== PERSISTED_V4_KEYS.length ||
+        PERSISTED_V4_KEYS.some((key) => !(key in value)) ||
+        value.version !== 4 ||
+        typeof value.result_delivery_effective !== "string" ||
+        !RESULT_DELIVERIES.has(value.result_delivery_effective)) {
+        throw new Error("version-4 record fields are invalid");
+    }
+    const { result_delivery_effective, ...versionThreeFields } = value;
+    const validated = parseVersionThreeRecord({
+        ...versionThreeFields,
+        version: 3,
+    });
+    return {
+        ...validated,
+        version: 4,
+        result_delivery_effective: result_delivery_effective,
+    };
+}
+function isBillingDirectProfile(value) {
+    return value === "omni.direct_text_billing.v1"
+        || value === "omni.direct_grounding_billing.v1";
+}
+function isPersistedBilling(value) {
+    if (value === null || typeof value !== "object" || Array.isArray(value)) {
+        return false;
+    }
+    const billing = value;
+    return Object.keys(billing).length === 2
+        && "credits_charged" in billing
+        && "credits_remaining" in billing
+        && typeof billing.credits_charged === "number"
+        && Number.isFinite(billing.credits_charged)
+        && billing.credits_charged >= 0
+        && typeof billing.credits_remaining === "number"
+        && Number.isFinite(billing.credits_remaining)
+        && billing.credits_remaining >= 0;
+}
+function parseVersionFiveRecord(value) {
+    const keys = Object.keys(value);
+    if (keys.length !== PERSISTED_V5_KEYS.length
+        || PERSISTED_V5_KEYS.some((key) => !(key in value))
+        || value.version !== 5
+        || !(value.direct_profile === null
+            || isBillingDirectProfile(value.direct_profile))
+        || !(value.billing === null || isPersistedBilling(value.billing))) {
+        throw new Error("version-5 record fields are invalid");
+    }
+    const { direct_profile, billing, ...versionFourFields } = value;
+    const validated = parseVersionFourRecord({
+        ...versionFourFields,
+        version: 4,
+    });
+    if ((validated.sourceKind === "url" && direct_profile !== null)
+        || (validated.sourceKind === "local"
+            && billing !== null
+            && direct_profile === null)) {
+        throw new Error("version-5 settlement facts are invalid");
+    }
+    return {
+        ...validated,
+        version: 5,
+        direct_profile: direct_profile,
+        billing: billing,
+    };
+}
 function parsePersistedRecord(value) {
     if (value === null || typeof value !== "object" || Array.isArray(value)) {
         throw new Error("record is not an object");
@@ -266,12 +343,16 @@ function parsePersistedRecord(value) {
         return parseVersionTwoRecord(record);
     if (record.version === 3)
         return parseVersionThreeRecord(record);
+    if (record.version === 4)
+        return parseVersionFourRecord(record);
+    if (record.version === 5)
+        return parseVersionFiveRecord(record);
     throw new Error("record version is invalid");
 }
 function migrateInMemory(stored) {
-    if (stored.version === 3) {
+    if (stored.version === 3 || stored.version === 4 || stored.version === 5) {
         return {
-            version: 3,
+            version: 5,
             clientRequestId: stored.clientRequestId,
             requestIdentityHmac: stored.requestIdentityHmac,
             sourceLocatorHmac: stored.sourceLocatorHmac,
@@ -282,6 +363,16 @@ function migrateInMemory(stored) {
             detail: stored.detail,
             groundingSchemaVersion: stored.groundingSchemaVersion,
             bundleProtocolVersion: stored.bundleProtocolVersion,
+            resultDeliveryEffective: stored.version === 4 || stored.version === 5
+                ? stored.result_delivery_effective
+                : "auto",
+            directProfile: stored.version === 5 ? stored.direct_profile : null,
+            billing: stored.version === 5 && stored.billing !== null
+                ? {
+                    creditsCharged: stored.billing.credits_charged,
+                    creditsRemaining: stored.billing.credits_remaining,
+                }
+                : null,
             operationId: stored.operationId,
             operationToken: stored.operationToken,
             state: stored.state,
@@ -308,7 +399,7 @@ function migrateInMemory(stored) {
         // are recomputed only when safe canonical source facts reconstruct the
         // stored unkeyed requestHash (see #reconstructLegacy).
         return {
-            version: 3,
+            version: 5,
             clientRequestId: stored.clientRequestId,
             requestIdentityHmac: null,
             sourceLocatorHmac: null,
@@ -319,6 +410,9 @@ function migrateInMemory(stored) {
             detail: "text",
             groundingSchemaVersion: "none",
             bundleProtocolVersion: "none",
+            resultDeliveryEffective: "auto",
+            directProfile: null,
+            billing: null,
             operationId: stored.operationId,
             operationToken: stored.operationToken,
             state: stored.state,
@@ -341,7 +435,7 @@ function migrateInMemory(stored) {
         };
     }
     return {
-        version: 3,
+        version: 5,
         clientRequestId: stored.clientRequestId,
         requestIdentityHmac: null,
         sourceLocatorHmac: null,
@@ -352,6 +446,9 @@ function migrateInMemory(stored) {
         detail: "text",
         groundingSchemaVersion: "none",
         bundleProtocolVersion: "none",
+        resultDeliveryEffective: "auto",
+        directProfile: null,
+        billing: null,
         operationId: stored.operationId,
         operationToken: stored.operationToken,
         state: stored.state,
@@ -407,6 +504,10 @@ function assertStableTransition(current, updated) {
             throw bridgeError("JOURNAL_IDENTITY_CONFLICT", "A stable local operation identifier cannot be replaced.", false);
         }
     }
+    if (current.directProfile !== null
+        && current.directProfile !== updated.directProfile) {
+        throw bridgeError("JOURNAL_DIRECT_PROFILE_MISMATCH", "The direct billing profile cannot be replaced.", false);
+    }
     if (current.operationToken !== null &&
         current.operationToken !== updated.operationToken &&
         !(updated.operationToken === null && TERMINAL_STATES.has(updated.state))) {
@@ -428,12 +529,28 @@ function assertStableTransition(current, updated) {
             throw bridgeError("JOURNAL_FACT_REGRESSION", "A confirmed local operation fact cannot be reverted.", false);
         }
     }
+    if (current.resultDeliveryEffective === "artifact" &&
+        updated.resultDeliveryEffective !== "artifact") {
+        throw bridgeError("JOURNAL_RESULT_DELIVERY_REGRESSION", "Artifact result delivery cannot be weakened to automatic delivery.", false);
+    }
 }
 function hmacEqual(left, right) {
     if (left.length !== right.length)
         return false;
     return timingSafeEqual(Buffer.from(left, "hex"), Buffer.from(right, "hex"));
 }
+function assertJournalBilling(billing) {
+    if (!Number.isFinite(billing.creditsCharged)
+        || billing.creditsCharged < 0
+        || !Number.isFinite(billing.creditsRemaining)
+        || billing.creditsRemaining < 0) {
+        throw bridgeError("JOURNAL_BILLING_INVALID", "The authoritative billing facts are invalid.", false);
+    }
+}
+function billingEqual(left, right) {
+    return left.creditsCharged === right.creditsCharged
+        && left.creditsRemaining === right.creditsRemaining;
+}
 export class OperationJournal {
     #rootDirectory;
     #now;
@@ -451,19 +568,22 @@ export class OperationJournal {
     async sourceLocatorHmac(sourceLocator) {
         return this.#hmac(SOURCE_LOCATOR_DOMAIN, sourceLocator);
     }
-    // v3 intent creation. canonicalIdentityJson is the exact canonical
+    // v5 intent creation. canonicalIdentityJson is the exact canonical
     // serialization of {source_kind, source_facts} (which includes the
     // normalized representation tuple); the journal derives the keyed identity
     // from it and persists only the HMAC, never the payload or any unkeyed hash.
-    async beginIntent(clientRequestId, canonicalIdentityJson, sourceKind = "local", sourceLocator = null, representation = TEXT_REPRESENTATION) {
+    async beginIntent(clientRequestId, canonicalIdentityJson, sourceKind = "local", sourceLocator = null, representation = TEXT_REPRESENTATION, resultDelivery = "auto") {
         validateClientRequestId(clientRequestId);
+        if (!RESULT_DELIVERIES.has(resultDelivery)) {
+            throw bridgeError("INVALID_RESULT_DELIVERY", "The result delivery mode is invalid.", false);
+        }
         const existing = await this.#readRecord(clientRequestId);
         if (existing !== null) {
             return this.#requireMatchingRequest(clientRequestId, canonicalIdentityJson, sourceLocator, existing);
         }
         const createdAt = this.#now().toISOString();
         const created = {
-            version: 3,
+            version: 5,
             clientRequestId,
             requestIdentityHmac: await this.#hmac(REQUEST_IDENTITY_DOMAIN, canonicalIdentityJson),
             sourceLocatorHmac: sourceLocator === null
@@ -476,6 +596,9 @@ export class OperationJournal {
             detail: representation.detail,
             groundingSchemaVersion: representation.groundingSchemaVersion,
             bundleProtocolVersion: representation.bundleProtocolVersion,
+            resultDeliveryEffective: resultDelivery,
+            directProfile: null,
+            billing: null,
             operationId: null,
             operationToken: null,
             state: "CREATED",
@@ -507,7 +630,7 @@ export class OperationJournal {
     }
     // Migrate a legacy v1/v2 record using the caller's safe canonical source
     // facts. When the facts reconstruct the stored unkeyed requestHash, the
-    // record migrates to v3 (durably) with domain-separated HMACs and keeps its
+    // record migrates to v4 (durably) with domain-separated HMACs and keeps its
     // state; otherwise it becomes a terminal source-free recovery failure and
     // never copies the unkeyed hashes. Returns null when no record exists.
     async migrateLegacyRecord(clientRequestId, canonicalIdentityJson, sourceLocator = null) {
@@ -515,8 +638,9 @@ export class OperationJournal {
         const stored = await this.#readRecord(clientRequestId);
         if (stored === null)
             return null;
-        if (stored.version === 3)
+        if (stored.version === 3 || stored.version === 4 || stored.version === 5) {
             return this.#recordToPublic(clientRequestId, stored);
+        }
         const expected = `sha256:${createHash("sha256").update(canonicalIdentityJson, "utf8").digest("hex")}`;
         if (stored.requestHash === expected) {
             const migrated = await this.#reconstructLegacy(stored, canonicalIdentityJson, sourceLocator);
@@ -559,6 +683,105 @@ export class OperationJournal {
             return updated;
         });
     }
+    async strengthenResultDelivery(clientRequestId, requested) {
+        validateClientRequestId(clientRequestId);
+        if (!RESULT_DELIVERIES.has(requested)) {
+            throw bridgeError("INVALID_RESULT_DELIVERY", "The result delivery mode is invalid.", false);
+        }
+        return this.#withRecordLock(clientRequestId, async () => {
+            const stored = await this.#readRecord(clientRequestId);
+            if (stored === null) {
+                throw bridgeError("JOURNAL_RECORD_NOT_FOUND", "The local operation journal record is missing.", true);
+            }
+            const current = await this.#recordToPublic(clientRequestId, stored);
+            if (requested === "auto" || current.resultDeliveryEffective === "artifact") {
+                return current;
+            }
+            const updated = {
+                ...current,
+                resultDeliveryEffective: "artifact",
+                updatedAt: this.#now().toISOString(),
+            };
+            assertStableTransition(current, updated);
+            await this.#replaceRecord(await this.#persistedRecord(updated), this.#recordPath(clientRequestId));
+            await unlink(this.#legacyIssuedRecordPath(clientRequestId)).catch(() => undefined);
+            return updated;
+        });
+    }
+    async bindDirectProfile(clientRequestId, directProfile) {
+        validateClientRequestId(clientRequestId);
+        if (!isBillingDirectProfile(directProfile)) {
+            throw bridgeError("JOURNAL_DIRECT_PROFILE_MISMATCH", "The direct billing profile does not match the operation source.", false);
+        }
+        return this.#withRecordLock(clientRequestId, async () => {
+            const stored = await this.#readRecord(clientRequestId);
+            if (stored === null) {
+                throw bridgeError("JOURNAL_RECORD_NOT_FOUND", "The local operation journal record is missing.", true);
+            }
+            const current = await this.#recordToPublic(clientRequestId, stored);
+            if (current.sourceKind !== "local") {
+                throw bridgeError("JOURNAL_DIRECT_PROFILE_MISMATCH", "The direct billing profile does not match the operation source.", false);
+            }
+            if (current.directProfile !== null) {
+                if (current.directProfile !== directProfile) {
+                    throw bridgeError("JOURNAL_DIRECT_PROFILE_MISMATCH", "The direct billing profile cannot be replaced.", false);
+                }
+                return current;
+            }
+            const updated = {
+                ...current,
+                directProfile,
+                updatedAt: this.#now().toISOString(),
+            };
+            assertStableTransition(current, updated);
+            await this.#replaceRecord(await this.#persistedRecord(updated), this.#recordPath(clientRequestId));
+            await unlink(this.#legacyIssuedRecordPath(clientRequestId)).catch(() => undefined);
+            return updated;
+        });
+    }
+    async bindSettlementFacts(clientRequestId, facts) {
+        validateClientRequestId(clientRequestId);
+        assertJournalBilling(facts.billing);
+        return this.#withRecordLock(clientRequestId, async () => {
+            const stored = await this.#readRecord(clientRequestId);
+            if (stored === null) {
+                throw bridgeError("JOURNAL_RECORD_NOT_FOUND", "The local operation journal record is missing.", true);
+            }
+            const current = await this.#recordToPublic(clientRequestId, stored);
+            const profileMatchesSource = current.sourceKind === "url"
+                ? facts.directProfile === null
+                : isBillingDirectProfile(facts.directProfile);
+            if (!profileMatchesSource) {
+                throw bridgeError("JOURNAL_DIRECT_PROFILE_MISMATCH", "The direct billing profile does not match the operation source.", false);
+            }
+            if (current.billing !== null) {
+                if (current.directProfile !== facts.directProfile) {
+                    throw bridgeError("JOURNAL_DIRECT_PROFILE_MISMATCH", "The direct billing profile cannot be replaced.", false);
+                }
+                if (!billingEqual(current.billing, facts.billing)) {
+                    throw bridgeError("JOURNAL_BILLING_MISMATCH", "The authoritative billing facts cannot be replaced.", false);
+                }
+                return current;
+            }
+            if (current.directProfile !== null
+                && current.directProfile !== facts.directProfile) {
+                throw bridgeError("JOURNAL_DIRECT_PROFILE_MISMATCH", "The direct billing profile cannot be replaced.", false);
+            }
+            const updated = {
+                ...current,
+                directProfile: facts.directProfile,
+                billing: {
+                    creditsCharged: facts.billing.creditsCharged,
+                    creditsRemaining: facts.billing.creditsRemaining,
+                },
+                updatedAt: this.#now().toISOString(),
+            };
+            assertStableTransition(current, updated);
+            await this.#replaceRecord(await this.#persistedRecord(updated), this.#recordPath(clientRequestId));
+            await unlink(this.#legacyIssuedRecordPath(clientRequestId)).catch(() => undefined);
+            return updated;
+        });
+    }
     async loadByRequestId(clientRequestId) {
         validateClientRequestId(clientRequestId);
         const persisted = await this.#readRecord(clientRequestId);
@@ -592,7 +815,7 @@ export class OperationJournal {
         // the journal receives, so the keyed handle is derived over that value.
         const createdAt = this.#now().toISOString();
         const created = {
-            version: 3,
+            version: 5,
             clientRequestId,
             requestIdentityHmac: await this.#hmac(REQUEST_IDENTITY_DOMAIN, requestHash),
             sourceLocatorHmac: null,
@@ -603,6 +826,9 @@ export class OperationJournal {
             detail: "text",
             groundingSchemaVersion: "none",
             bundleProtocolVersion: "none",
+            resultDeliveryEffective: "auto",
+            directProfile: null,
+            billing: null,
             operationId: null,
             operationToken: null,
             state: "CREATED",
@@ -698,7 +924,7 @@ export class OperationJournal {
     }
     async #persistedRecord(record) {
         return {
-            version: 3,
+            version: 5,
             clientRequestId: record.clientRequestId,
             // A legacy record persisted before reconstruction (for example a
             // source-free recovery failure) gets the deterministic keyed handle of
@@ -711,6 +937,14 @@ export class OperationJournal {
             detail: record.detail,
             groundingSchemaVersion: record.groundingSchemaVersion,
             bundleProtocolVersion: record.bundleProtocolVersion,
+            result_delivery_effective: record.resultDeliveryEffective,
+            direct_profile: record.directProfile,
+            billing: record.billing === null
+                ? null
+                : {
+                    credits_charged: record.billing.creditsCharged,
+                    credits_remaining: record.billing.creditsRemaining,
+                },
             operationId: record.operationId,
             operationToken: record.operationToken === null
                 ? null
@@ -736,7 +970,7 @@ export class OperationJournal {
     }
     async #persistedFromInMemory(record) {
         return {
-            version: 3,
+            version: 5,
             clientRequestId: record.clientRequestId,
             requestIdentityHmac: record.requestIdentityHmac === null
                 ? await this.#hmac(REQUEST_IDENTITY_DOMAIN, "")
@@ -746,6 +980,14 @@ export class OperationJournal {
             detail: record.detail,
             groundingSchemaVersion: record.groundingSchemaVersion,
             bundleProtocolVersion: record.bundleProtocolVersion,
+            result_delivery_effective: record.resultDeliveryEffective,
+            direct_profile: record.directProfile,
+            billing: record.billing === null
+                ? null
+                : {
+                    credits_charged: record.billing.creditsCharged,
+                    credits_remaining: record.billing.creditsRemaining,
+                },
             operationId: record.operationId,
             operationToken: record.operationToken,
             state: record.state,
@@ -784,6 +1026,9 @@ export class OperationJournal {
             detail: migrated.detail,
             groundingSchemaVersion: migrated.groundingSchemaVersion,
             bundleProtocolVersion: migrated.bundleProtocolVersion,
+            resultDeliveryEffective: migrated.resultDeliveryEffective,
+            directProfile: migrated.directProfile,
+            billing: migrated.billing,
             operationId: migrated.operationId,
             operationToken,
             uploadUrl: migrated.uploadUrl,
@@ -819,7 +1064,7 @@ export class OperationJournal {
         return migrated;
     }
     async #requireMatchingRequest(clientRequestId, canonicalIdentityJson, sourceLocator, persisted) {
-        if (persisted.version === 3) {
+        if (persisted.version === 3 || persisted.version === 4 || persisted.version === 5) {
             const expected = await this.#hmacExisting(REQUEST_IDENTITY_DOMAIN, canonicalIdentityJson);
             if (!hmacEqual(persisted.requestIdentityHmac, expected)) {
                 throw bridgeError("IDEMPOTENCY_COLLISION", "This local operation request identifier is already bound to different metadata.", false);
@@ -833,7 +1078,7 @@ export class OperationJournal {
         throw bridgeError("IDEMPOTENCY_COLLISION", "This local operation request identifier is already bound to different metadata.", false);
     }
     async #requireMatchingCubeRequest(clientRequestId, requestHash, persisted) {
-        if (persisted.version === 3) {
+        if (persisted.version === 3 || persisted.version === 4 || persisted.version === 5) {
             const expected = await this.#hmacExisting(REQUEST_IDENTITY_DOMAIN, requestHash);
             if (!hmacEqual(persisted.requestIdentityHmac, expected)) {
                 throw bridgeError("IDEMPOTENCY_COLLISION", "This local operation request identifier is already bound to different metadata.", false);

package/dist/operation-manager.d.ts

@@ -3,7 +3,7 @@ import type { CubeGrantClient } from "./cube-client.js";
 import type { IiisClient, ResultRetentionSink } from "./iiis-client.js";
 import type { JournalPatch, JournalRecord, JournalState, OperationJournal } from "./operation-journal.js";
 import { type OpenAllowedFileOptions, type OpenedAllowedFile } from "./path-security.js";
-import { type RepresentationIntent } from "./protocol.js";
+import { type RepresentationIntent, type ResultDelivery } from "./protocol.js";
 import type { RemoteOmniClient } from "./remote-client.js";
 import { type ParseResult } from "./result-contract.js";
 export interface SubmitOperationInput {
@@ -12,6 +12,7 @@ export interface SubmitOperationInput {
     readonly clientRequestId: string;
     readonly signal?: AbortSignal;
     readonly context?: unknown;
+    readonly resultDelivery?: ResultDelivery;
     readonly representation?: RepresentationIntent;
 }
 export interface OperationDriverUpdate {
@@ -38,8 +39,9 @@ export interface OperationManagerDriver {
     result?(record: JournalRecord, signal: AbortSignal): Promise<ParseResult | void>;
 }
 export interface OperationManagerOptions {
-    readonly journal: Pick<OperationJournal, "beginIntent" | "migrateLegacyRecord" | "requestIdentityHmac" | "sourceLocatorHmac" | "transition" | "loadByRequestId" | "loadByOperationId" | "loadLatestByRequestIdentityHmac" | "loadLatestBySourceLocatorHmac" | "listRecoverable">;
+    readonly journal: Pick<OperationJournal, "beginIntent" | "bindSettlementFacts" | "migrateLegacyRecord" | "requestIdentityHmac" | "sourceLocatorHmac" | "transition" | "loadByRequestId" | "loadByOperationId" | "loadLatestByRequestIdentityHmac" | "loadLatestBySourceLocatorHmac" | "listRecoverable" | "strengthenResultDelivery">;
     readonly driver: OperationManagerDriver;
+    readonly presentResult?: (record: JournalRecord, canonicalResult: ParseResult) => Promise<ParseResult>;
     readonly now?: () => number;
     readonly sleep?: (milliseconds: number) => Promise<void>;
 }
@@ -61,6 +63,8 @@ export interface LocalRetention extends ResultRetentionSink {
 }
 export interface LocalArtifactStore {
     createRetention(): LocalRetention;
+    preflightWrite?(): Promise<void>;
+    mintReadCursor?(resultId: string, byteOffset: number): Promise<string>;
     read(resultId: string, cursor?: string, maxBytes?: number): Promise<ArtifactReadResult>;
     readBundleDescriptor?(resultId: string): Promise<BundleLocalResult | null>;
 }