@deksden-com/dd-flow-cli 0.9.0-beta.137 → 0.9.0-beta.139

package/dist/services/recovery-snapshot-database.js

@@ -5,6 +5,10 @@ import { AppError, errorRecord } from "../shared/errors.js";
 import { registerStoreWriter } from "../storage/writer-contract.js";
 import { managedProcessRuntimeHome } from "./managed-processes.js";
 import { cleanupScopeWriters } from "./scope-writer-cleanup.js";
+import { hybridDigest } from "./hybrid-contracts.js";
+import { readRunStartRequest } from "./run-start-custody.js";
+import { readMemoryInitRunAllocation } from "./memory-init-run-allocation.js";
+import { readMemoryInitStartupInput } from "./memory-init-startup-custody.js";
 /** Export one RUN's relational evidence, never mutate the live authority. */
 export function captureRecoveryDatabase(source, output, projectId, runId, protocolIds = []) {
     source.exec(`VACUUM INTO '${output.replace(/'/g, "''")}'`);
@@ -21,6 +25,8 @@ export function captureRecoveryDatabase(source, output, projectId, runId, protoc
             db.prepare("INSERT INTO capture_protocols VALUES (?)").run(id);
         if (!db.prepare("SELECT 1 FROM runs WHERE (project_id, id) IN (SELECT * FROM capture_scope)").get())
             throw new AppError("snapshot_run_missing", "Recovery export requires the selected RUN", 1);
+        assertCapturedBundleAuthority(db, projectId, runId);
+        assertCapturedStartAuthority(db, projectId, runId);
         const ownRun = "(project_id, run_id) IN (SELECT * FROM capture_scope)";
         const ownProject = "project_id IN (SELECT project_id FROM capture_scope)";
         const works = `SELECT work_id FROM works WHERE ${ownRun}`;
@@ -52,13 +58,354 @@ export function captureRecoveryDatabase(source, output, projectId, runId, protoc
             merge_servers: "0", merge_sessions: "0", merge_queue: "0", lanes: "0", lane_locks: "0", lane_waiters: "0",
             sqlite_sequence: "0"
         };
-        for (const table of ["works", "stage_work_memberships", "repair_intents", "check_receipts", "merge_requests", "flow_run_flag_mutations", "usage", "flow_session_segments", "flow_jobs", "run_recovery_guards", "run_controllers", "run_controls"])
+        for (const table of ["works", "stage_work_memberships", "repair_intents", "check_receipts", "merge_requests", "flow_run_flag_mutations", "usage", "flow_session_segments", "flow_jobs", "run_recovery_guards", "run_controllers", "run_controls", "run_bundle_authorities", "run_start_requests"])
             rules[table] = ownRun;
         for (const table of ["plan_bindings", "plan_progress", "worktree_records", "audit_events"])
             rules[table] = `${ownProject} AND protocol_id IN (${protocols})`;
         // Relocation proofs are RUN-owned provenance needed to map unchanged context
         // bytes through subsequent recovery generations, not portable live authority.
-        rules.audit_events = `${ownProject} AND (protocol_id IN (${protocols}) OR (event_type = 'flow_run.publication_relocation' AND json_extract(payload_json, '$.run_id') IN (SELECT run_id FROM capture_scope)))`;
+        rules.audit_events = `${ownProject} AND (protocol_id IN (${protocols}) OR (event_type IN ('flow_run.publication_relocation', 'flow_run.workspace_rebound') AND json_extract(payload_json, '$.run_id') IN (SELECT run_id FROM capture_scope)))`;
+        // Bootstrap precedes RUN/project allocation: some owning receipts have
+        // NULL project_id. Select only the captured MB bundle's independently
+        // anchored request/roots, never all bootstrap receipts for this project.
+        // This preserves bytes; the bootstrap readers still validate the complete
+        // release/target/policy/engine/readiness chain before admitting recovery.
+        if (db.prepare("SELECT 1 FROM sqlite_schema WHERE type='table' AND name='run_bundle_authorities'").get()) {
+            const bootstrapReceipts = `EXISTS (SELECT 1 FROM run_bundle_authorities b JOIN runs r
+        ON r.project_id=b.project_id AND r.id=b.run_id
+        WHERE (b.project_id,b.run_id) IN (SELECT * FROM capture_scope)
+          AND json_extract(r.index_json,'$.execution_bundle.flow_id')='mb-init'
+          AND (audit_events.project_id IS NULL OR audit_events.project_id=b.project_id)
+          AND (
+            (event_type IN ('memory.init_git_policy','memory.init_release_selection','memory.init_startup_input','memory.init_startup_input_intent','memory.init_project_bootstrap_intent',
+              'memory.init_project_bootstrap','memory.init_engine_admission','memory.init_engine_bootstrap')
+              AND json_extract(payload_json,'$.scope.requestId')=json_extract(b.admission_json,'$.executionScope.requestId')
+              AND json_extract(payload_json,'$.scope.projectRoot')=json_extract(b.admission_json,'$.executionScope.projectRoot')
+              AND json_extract(payload_json,'$.scope.workspaceRoot')=json_extract(b.admission_json,'$.executionScope.workspace')
+              AND (
+                (event_type='memory.init_git_policy' AND json_extract(payload_json,'$.schema_id')='dd-flow/memory-init-git-policy@1')
+                OR (event_type='memory.init_release_selection' AND json_extract(payload_json,'$.schema_id')='dd-flow/memory-init-release-selection@1')
+                OR (audit_events.project_id IS NULL AND event_type='memory.init_startup_input' AND json_extract(payload_json,'$.schema_id') IN ('dd-flow/memory-init-startup-input@1','dd-flow/memory-init-startup-input@2','dd-flow/memory-init-startup-input@3'))
+                OR (audit_events.project_id IS NULL AND event_type='memory.init_startup_input_intent' AND json_extract(payload_json,'$.schema_id')='dd-flow/memory-init-startup-input-intent@1')
+                OR (event_type='memory.init_project_bootstrap_intent' AND json_extract(payload_json,'$.schema_id') IN
+                  ('dd-flow/memory-init-project-bootstrap-intent@1','dd-flow/memory-init-project-bootstrap-intent@2','dd-flow/memory-init-project-bootstrap-intent@3','dd-flow/memory-init-project-bootstrap-intent@4'))
+                OR (event_type='memory.init_project_bootstrap' AND json_extract(payload_json,'$.receipt.schema_id') IN
+                  ('dd-flow/memory-init-project-bootstrap@1','dd-flow/memory-init-project-bootstrap@2','dd-flow/memory-init-project-bootstrap@3','dd-flow/memory-init-project-bootstrap@4'))
+                OR (event_type='memory.init_engine_admission' AND json_extract(payload_json,'$.schema_id') IN
+                  ('dd-flow/memory-init-engine-admission@1','dd-flow/memory-init-engine-admission@2'))
+                OR (event_type='memory.init_engine_bootstrap' AND json_extract(payload_json,'$.schema_id')='dd-flow/memory-init-engine-bootstrap@1')))
+            OR (audit_events.project_id=b.project_id
+              AND event_type IN ('memory.init_run_allocation','memory.init_run_allocation_intent')
+              AND json_extract(payload_json,'$.run_id')=b.run_id
+              AND json_extract(payload_json,'$.scope.requestId')=json_extract(b.admission_json,'$.executionScope.requestId')
+              AND json_extract(payload_json,'$.scope.projectRoot')=json_extract(b.admission_json,'$.executionScope.projectRoot')
+              AND json_extract(payload_json,'$.scope.workspaceRoot')=json_extract(b.admission_json,'$.executionScope.workspace')
+              AND ((event_type='memory.init_run_allocation' AND json_extract(payload_json,'$.schema_id')='dd-flow/memory-init-run-allocation@1')
+                OR (event_type='memory.init_run_allocation_intent' AND json_extract(payload_json,'$.schema_id')='dd-flow/memory-init-run-allocation-intent@1')))
+            OR (event_type IN ('memory.bootstrap_ready','memory.bootstrap_readiness_intent')
+              AND json_extract(payload_json,'$.request_id')=json_extract(b.admission_json,'$.executionScope.requestId')
+              AND json_extract(payload_json,'$.project_root')=json_extract(b.admission_json,'$.executionScope.projectRoot')
+              AND json_extract(payload_json,'$.workspace_root')=json_extract(b.admission_json,'$.executionScope.workspace')
+              AND ((event_type='memory.bootstrap_ready' AND json_extract(payload_json,'$.schema_id')='dd-flow/memory-bootstrap-authority@1')
+                OR (event_type='memory.bootstrap_readiness_intent' AND json_extract(payload_json,'$.schema_id')='dd-flow/memory-bootstrap-readiness-intent@1')))))`;
+            rules.audit_events = `(${rules.audit_events}) OR (${bootstrapReceipts})`;
+        }
+        // Batch and composition registration are portable RUN evidence, not a host lease. Keep their
+        // independent receipt alongside the selected Works, never a neighboring
+        // RUN's receipt merely because it shares the project or names this RUN.
+        const batchReceipt = `event_type IN ('work.batch_registration', 'memory.composition_registration', 'memory.review_registration', 'memory.repair_registration', 'memory.second_repair_registration', 'memory.corrected_review_registration')
+      AND json_extract(payload_json, '$.run_id') IN (SELECT run_id FROM capture_scope)
+      AND json_extract(payload_json, '$.scope.run_id') IN (SELECT run_id FROM capture_scope)
+      AND json_extract(payload_json, '$.scope.project_id') IN (SELECT project_id FROM capture_scope)
+      AND json_extract(payload_json, '$.scope.parent_work_id') IN (${works})
+      AND json_type(payload_json, '$.work_ids') = 'object'
+      AND NOT EXISTS (SELECT 1 FROM json_each(payload_json, '$.work_ids') WHERE value NOT IN (${works}))`;
+        rules.audit_events = `(${rules.audit_events}) OR (${ownProject} AND (${batchReceipt}))`;
+        // Preserve independently admitted repair baselines by actual assigned
+        // Work/packet identity. Preservation never substitutes for owner admission.
+        const repairBaselineReceipt = `event_type = 'memory.repair_work_baseline'
+      AND json_extract(payload_json, '$.schema_id') IN ('dd-flow/memory-repair-work-baseline@2', 'dd-flow/memory-repair-work-baseline@3', 'dd-flow/memory-repair-work-baseline@4', 'dd-flow/memory-repair-work-baseline@5')
+      AND json_extract(payload_json, '$.project_id') = project_id
+      AND json_extract(payload_json, '$.run_id') IN (SELECT run_id FROM capture_scope)
+      AND EXISTS (SELECT 1 FROM works w WHERE w.project_id=audit_events.project_id
+        AND w.run_id=json_extract(audit_events.payload_json, '$.run_id')
+        AND w.work_id=json_extract(audit_events.payload_json, '$.work_id')
+        AND json_extract(w.payload_json, '$.kind')='memory-repair'
+        AND json_extract(w.payload_json, '$.memory_repair.packet_sha256')=json_extract(audit_events.payload_json, '$.packet_sha256'))`;
+        rules.audit_events = `(${rules.audit_events}) OR (${ownProject} AND (${repairBaselineReceipt}))`;
+        // A consumed dependency/peer view is part of the baseline's history. It
+        // predates WorkSession start, so do not require a start receipt here.
+        const repairCurrentViewReceipt = `event_type='memory.repair_current_view'
+      AND json_extract(payload_json,'$.schema_id')='dd-flow/memory-repair-current-view@1'
+      AND json_extract(payload_json,'$.project_id')=project_id
+      AND json_extract(payload_json,'$.run_id') IN (SELECT run_id FROM capture_scope)
+      AND EXISTS (SELECT 1 FROM audit_events b WHERE (${repairBaselineReceipt.replaceAll("audit_events.", "b.")})
+        AND b.project_id=audit_events.project_id
+        AND json_extract(b.payload_json,'$.schema_id') IN ('dd-flow/memory-repair-work-baseline@3', 'dd-flow/memory-repair-work-baseline@5')
+        AND json_extract(b.payload_json,'$.run_id')=json_extract(audit_events.payload_json,'$.run_id')
+        AND json_extract(b.payload_json,'$.work_id')=json_extract(audit_events.payload_json,'$.work_id')
+        AND json_extract(b.payload_json,'$.generation')=json_extract(audit_events.payload_json,'$.generation')
+        AND json_extract(b.payload_json,'$.registration_sha256')=json_extract(audit_events.payload_json,'$.registration_sha256')
+        AND json_extract(b.payload_json,'$.current_view_sha256')=json_extract(audit_events.payload_json,'$.view_sha256'))`;
+        rules.audit_events = `(${rules.audit_events}) OR (${ownProject} AND (${repairCurrentViewReceipt}))`;
+        const repairCopyReceipt = `event_type IN ('memory.repair_writer_copy_intent', 'memory.repair_writer_copy_build', 'memory.repair_writer_copy_ready')
+      AND json_extract(payload_json, '$.schema_id')='dd-flow/memory-repair-writer-copy-intent@1'
+      AND json_extract(payload_json, '$.project_id')=project_id
+      AND json_extract(payload_json, '$.run_id') IN (SELECT run_id FROM capture_scope)
+      AND json_extract(payload_json, '$.work_id') IN (${works})
+      AND EXISTS (SELECT 1 FROM audit_events b JOIN works w
+        ON w.project_id=b.project_id AND w.run_id=json_extract(b.payload_json, '$.run_id')
+        AND w.work_id=json_extract(b.payload_json, '$.work_id')
+        WHERE b.project_id=audit_events.project_id AND b.event_type='memory.repair_work_baseline'
+          AND json_extract(b.payload_json, '$.schema_id') IN ('dd-flow/memory-repair-work-baseline@2', 'dd-flow/memory-repair-work-baseline@3', 'dd-flow/memory-repair-work-baseline@4', 'dd-flow/memory-repair-work-baseline@5')
+          AND json_extract(b.payload_json, '$.project_id')=b.project_id
+          AND json_extract(b.payload_json, '$.run_id')=json_extract(audit_events.payload_json, '$.run_id')
+          AND json_extract(b.payload_json, '$.work_id')=json_extract(audit_events.payload_json, '$.work_id')
+          AND json_extract(b.payload_json, '$.generation')=json_extract(audit_events.payload_json, '$.generation')
+          AND json_extract(b.payload_json, '$.workspace_root')=json_extract(audit_events.payload_json, '$.source_root')
+          AND json_extract(w.payload_json, '$.kind')='memory-repair'
+          AND json_extract(w.payload_json, '$.memory_repair.packet_sha256')=json_extract(b.payload_json, '$.packet_sha256'))`;
+        rules.audit_events = `(${rules.audit_events}) OR (${ownProject} AND (${repairCopyReceipt}))`;
+        // Retain start evidence by relational WorkSession/physical Session and
+        // baseline generation. Export is preservation, never start admission.
+        const repairStartReceipt = `event_type='memory.repair_work_start'
+      AND json_extract(payload_json, '$.schema_id')='dd-flow/memory-repair-start@1'
+      AND json_extract(payload_json, '$.project_id')=project_id
+      AND json_extract(payload_json, '$.run_id') IN (SELECT run_id FROM capture_scope)
+      AND EXISTS (SELECT 1 FROM works w JOIN work_sessions ws ON ws.work_id=w.work_id
+        JOIN sessions s ON s.project_id=w.project_id AND s.session_id=ws.session_id
+        JOIN audit_events b ON b.project_id=w.project_id AND b.event_type='memory.repair_work_baseline'
+        WHERE w.project_id=audit_events.project_id AND w.run_id=json_extract(audit_events.payload_json, '$.run_id')
+          AND w.work_id=json_extract(audit_events.payload_json, '$.work_id')
+          AND json_extract(w.payload_json, '$.kind')='memory-repair'
+          AND ws.id=json_extract(audit_events.payload_json, '$.work_session_id')
+          AND ws.session_id=json_extract(audit_events.payload_json, '$.session_id')
+          AND ws.hook_event_id=json_extract(audit_events.payload_json, '$.hook_event_id')
+          AND s.harness=json_extract(audit_events.payload_json, '$.harness')
+          AND s.provider_session_id=json_extract(audit_events.payload_json, '$.provider_session_id')
+          AND json_extract(b.payload_json, '$.schema_id') IN ('dd-flow/memory-repair-work-baseline@2', 'dd-flow/memory-repair-work-baseline@3', 'dd-flow/memory-repair-work-baseline@4', 'dd-flow/memory-repair-work-baseline@5')
+          AND json_extract(b.payload_json, '$.project_id')=w.project_id
+          AND json_extract(b.payload_json, '$.run_id')=w.run_id
+          AND json_extract(b.payload_json, '$.work_id')=w.work_id
+          AND json_extract(b.payload_json, '$.generation')=json_extract(audit_events.payload_json, '$.generation')
+          AND json_extract(b.payload_json, '$.packet_sha256')=json_extract(w.payload_json, '$.memory_repair.packet_sha256'))`;
+        rules.audit_events = `(${rules.audit_events}) OR (${ownProject} AND (${repairStartReceipt}))`;
+        const nativeRepairBinding = `event_type='memory.repair_native_binding'
+      AND json_extract(payload_json,'$.schema_id')='dd-flow/memory-repair-native-binding@1'
+      AND json_extract(payload_json,'$.project_id')=project_id
+      AND json_extract(payload_json,'$.run_id') IN (SELECT run_id FROM capture_scope)
+      AND EXISTS (SELECT 1 FROM works w JOIN work_sessions ws ON ws.work_id=w.work_id
+        JOIN sessions s ON s.project_id=w.project_id AND s.session_id=ws.session_id
+        JOIN hook_events he ON he.project_id=w.project_id AND he.event_key=ws.hook_event_id
+        WHERE w.project_id=audit_events.project_id AND w.run_id=json_extract(audit_events.payload_json,'$.run_id')
+          AND w.work_id=json_extract(audit_events.payload_json,'$.work_id')
+          AND json_extract(w.payload_json,'$.kind')='memory-repair'
+          AND ws.id=json_extract(audit_events.payload_json,'$.work_session_id')
+          AND he.event_key=json_extract(audit_events.payload_json,'$.hook_event_key') AND he.status='claimed'
+          AND he.session_id=ws.session_id AND s.provider_session_id=json_extract(audit_events.payload_json,'$.binding.provider_session_id')
+          AND he.parent_session_id=json_extract(audit_events.payload_json,'$.parent_session_id'))`;
+        rules.audit_events = `(${rules.audit_events}) OR (${ownProject} AND (${nativeRepairBinding}))`;
+        const nativeReviewCopy = `event_type IN ('memory.native_review_copy_intent','memory.native_review_copy_ready')
+      AND COALESCE(json_extract(payload_json,'$.run_id'),json_extract(payload_json,'$.intent.run_id')) IN (SELECT run_id FROM capture_scope)
+      AND EXISTS (SELECT 1 FROM works w WHERE w.project_id=audit_events.project_id
+        AND w.run_id=COALESCE(json_extract(audit_events.payload_json,'$.run_id'),json_extract(audit_events.payload_json,'$.intent.run_id'))
+        AND w.work_id=COALESCE(json_extract(audit_events.payload_json,'$.work_id'),json_extract(audit_events.payload_json,'$.intent.work_id'))
+        AND json_extract(w.payload_json,'$.kind')='memory-review')`;
+        const nativeReviewBinding = `event_type='memory.native_review_binding'
+      AND json_extract(payload_json,'$.run_id') IN (SELECT run_id FROM capture_scope)
+      AND EXISTS (SELECT 1 FROM works w JOIN work_sessions ws ON ws.work_id=w.work_id
+        JOIN sessions s ON s.project_id=w.project_id AND s.session_id=ws.session_id
+        JOIN hook_events he ON he.project_id=w.project_id AND he.event_key=ws.hook_event_id
+        WHERE w.project_id=audit_events.project_id AND w.run_id=json_extract(audit_events.payload_json,'$.run_id')
+          AND w.work_id=json_extract(audit_events.payload_json,'$.work_id') AND json_extract(w.payload_json,'$.kind')='memory-review'
+          AND ws.id=json_extract(audit_events.payload_json,'$.work_session_id') AND he.status='claimed'
+          AND he.event_key=json_extract(audit_events.payload_json,'$.hook_event_key') AND he.session_id=ws.session_id
+          AND s.provider_session_id=json_extract(audit_events.payload_json,'$.provider_session_id'))`;
+        rules.audit_events = `(${rules.audit_events}) OR (${ownProject} AND ((${nativeReviewCopy}) OR (${nativeReviewBinding})))`;
+        // Keep publication/settlement evidence only with the selected relational
+        // start and baseline. Export preserves bytes, never admits their hashes,
+        // physical effects or semantic correctness on restoration.
+        const repairPublicationSchemas = [
+            ["memory.repair_publication_source", "dd-flow/memory-repair-publication-source@1"],
+            ["memory.repair_publication_intent", "dd-flow/memory-repair-publication-intent@1"],
+            ["memory.repair_publication_intent", "dd-flow/memory-repair-publication-intent@2"],
+            ["memory.repair_publication_action_intent", "dd-flow/memory-repair-publication-action-intent@1"],
+            ["memory.repair_publication_staging_build", "dd-flow/memory-repair-publication-staging@1"],
+            ["memory.repair_publication_staging_ready", "dd-flow/memory-repair-publication-staging@1"],
+            ["memory.repair_publication_file_ready", "dd-flow/memory-repair-publication-file-ready@1"],
+            ["memory.repair_publication_directory_ready", "dd-flow/memory-repair-publication-directory-ready@1"],
+            ["memory.repair_publication_action_complete", "dd-flow/memory-repair-publication-action-complete@1"],
+            ["memory.repair_publication_complete", "dd-flow/memory-repair-publication-complete@1"],
+            ["memory.repair_work_settlement", "dd-flow/memory-repair-work-settlement@1"],
+        ];
+        const repairPublicationReceipt = `(${repairPublicationSchemas.map(([event, schema]) => `(event_type='${event}' AND json_extract(payload_json,'$.schema_id')='${schema}')`).join(" OR ")})
+      AND json_extract(payload_json,'$.project_id')=project_id
+      AND json_extract(payload_json,'$.run_id') IN (SELECT run_id FROM capture_scope)
+      AND EXISTS (SELECT 1 FROM audit_events a WHERE (${repairStartReceipt.replaceAll("audit_events.", "a.")})
+        AND a.project_id=audit_events.project_id
+        AND json_extract(a.payload_json,'$.run_id')=json_extract(audit_events.payload_json,'$.run_id')
+        AND json_extract(a.payload_json,'$.work_id')=json_extract(audit_events.payload_json,'$.work_id')
+        AND json_extract(a.payload_json,'$.generation')=json_extract(audit_events.payload_json,'$.generation')
+        AND json_extract(a.payload_json,'$.work_session_id')=json_extract(audit_events.payload_json,'$.work_session_id'))`;
+        rules.audit_events = `(${rules.audit_events}) OR (${ownProject} AND (${repairPublicationReceipt}))`;
+        const coordinatorReceipt = `event_type = 'stage.coordinator_binding'
+      AND json_extract(payload_json, '$.run_id') IN (SELECT run_id FROM capture_scope)
+      AND json_extract(payload_json, '$.scope.run_id') = json_extract(payload_json, '$.run_id')
+      AND json_extract(payload_json, '$.scope.project_id') = project_id
+      AND json_extract(payload_json, '$.work_id') IN (${works})
+      AND EXISTS (SELECT 1 FROM work_sessions ws WHERE ws.id = json_extract(payload_json, '$.work_session_id')
+        AND ws.work_id = json_extract(payload_json, '$.work_id') AND ws.session_id = json_extract(payload_json, '$.session_id'))
+      AND json_extract(payload_json, '$.session_id') IN (${sessions})`;
+        rules.audit_events = `(${rules.audit_events}) OR (${ownProject} AND (${coordinatorReceipt}))`;
+        const descriptorRootReceipt = `event_type = 'flow_run.descriptor_root_work'
+      AND json_extract(payload_json, '$.run_id') IN (SELECT run_id FROM capture_scope)
+      AND json_extract(payload_json, '$.binding.runId') = json_extract(payload_json, '$.run_id')
+      AND json_extract(payload_json, '$.binding.projectId') = project_id
+      AND json_extract(payload_json, '$.work_id') IN (${works})
+      AND EXISTS (SELECT 1 FROM runs r JOIN works w ON w.project_id=r.project_id AND w.run_id=r.id
+        WHERE r.project_id=audit_events.project_id AND r.id=json_extract(audit_events.payload_json, '$.run_id')
+          AND w.work_id=json_extract(audit_events.payload_json, '$.work_id') AND w.parent_work_id IS NULL
+          AND json_extract(r.index_json, '$.root_work_id')=w.work_id)`;
+        const descriptorCoordinatorReceipt = `event_type = 'flow_run.descriptor_coordinator'
+      AND json_extract(payload_json, '$.run_id') IN (SELECT run_id FROM capture_scope)
+      AND json_extract(payload_json, '$.binding.runId') = json_extract(payload_json, '$.run_id')
+      AND json_extract(payload_json, '$.binding.projectId') = project_id
+      AND json_extract(payload_json, '$.work_id') IN (${works})
+      AND EXISTS (SELECT 1 FROM stage_work_memberships m WHERE m.project_id=audit_events.project_id
+        AND m.run_id=json_extract(audit_events.payload_json, '$.run_id') AND m.work_id=json_extract(audit_events.payload_json, '$.work_id')
+        AND m.stage=json_extract(audit_events.payload_json, '$.stage') AND m.attempt=json_extract(audit_events.payload_json, '$.binding.attempt'))`;
+        rules.audit_events = `(${rules.audit_events}) OR (${ownProject} AND ((${descriptorRootReceipt}) OR (${descriptorCoordinatorReceipt})))`;
+        const descriptorSettlementReceipt = `event_type = 'flow_run.descriptor_stage_settlement'
+      AND json_extract(payload_json, '$.run_id') IN (SELECT run_id FROM capture_scope)
+      AND json_extract(payload_json, '$.work_id') IN (${works})
+      AND EXISTS (SELECT 1 FROM stage_work_memberships m JOIN work_sessions ws ON ws.work_id=m.work_id
+        WHERE m.project_id=audit_events.project_id AND m.run_id=json_extract(audit_events.payload_json, '$.run_id')
+          AND m.work_id=json_extract(audit_events.payload_json, '$.work_id') AND m.stage=json_extract(audit_events.payload_json, '$.stage')
+          AND m.attempt=json_extract(audit_events.payload_json, '$.binding.attempt')
+          AND ws.id=json_extract(audit_events.payload_json, '$.work_session_id'))`;
+        rules.audit_events = `(${rules.audit_events}) OR (${ownProject} AND (${descriptorSettlementReceipt}))`;
+        const memoryVerificationReceipt = `event_type = 'memory.verification_acceptance'
+      AND json_extract(payload_json, '$.run_id') IN (SELECT run_id FROM capture_scope)
+      AND json_extract(payload_json, '$.project_id') = project_id
+      AND json_extract(payload_json, '$.schema_id') = 'dd-flow/memory-verification-acceptance@1'
+      AND json_extract(payload_json, '$.stage') = 'verify'
+      AND EXISTS (SELECT 1 FROM runs r, json_each(r.index_json, '$.stage_runs') s
+        WHERE r.project_id=audit_events.project_id AND r.id=json_extract(payload_json, '$.run_id')
+          AND json_extract(s.value, '$.stage')='verify' AND json_extract(s.value, '$.status')='done'
+          AND json_extract(s.value, '$.attempt')=json_extract(payload_json, '$.attempt')
+          AND json_extract(s.value, '$.input_sha256')=json_extract(payload_json, '$.input_sha256')
+          AND json_extract(s.value, '$.data_sha256')=json_extract(payload_json, '$.result_sha256'))`;
+        rules.audit_events = `(${rules.audit_events}) OR (${ownProject} AND (${memoryVerificationReceipt}))`;
+        // Preservation only, not admission: reconnect independently restores the
+        // corrected view, owning policy and exact passed check rows.
+        const memoryCorrectionCheckReceipt = `event_type = 'memory.correction_checks'
+      AND json_extract(payload_json, '$.run_id') IN (SELECT run_id FROM capture_scope)
+      AND json_extract(payload_json, '$.project_id') = project_id
+      AND json_extract(payload_json, '$.schema_id') = 'dd-flow/memory-correction-checks@1'
+      AND json_extract(payload_json, '$.wave') IN (1, 2)
+      AND json_type(payload_json, '$.checks') = 'array'
+      AND json_array_length(payload_json, '$.checks') BETWEEN 1 AND 4096
+      AND EXISTS (SELECT 1 FROM runs r, json_each(r.index_json, '$.stage_runs') s
+        WHERE r.project_id=audit_events.project_id AND r.id=json_extract(payload_json, '$.run_id')
+          AND json_extract(s.value, '$.stage')='review'
+          AND json_extract(s.value, '$.input_sha256')=json_extract(payload_json, '$.review_input_sha256'))
+      AND NOT EXISTS (SELECT 1 FROM json_each(payload_json, '$.checks') c
+        WHERE NOT EXISTS (SELECT 1 FROM check_receipts cr WHERE cr.project_id=audit_events.project_id
+          AND cr.run_id=json_extract(audit_events.payload_json, '$.run_id') AND cr.id=json_extract(c.value, '$.id')))`;
+        rules.audit_events = `(${rules.audit_events}) OR (${ownProject} AND (${memoryCorrectionCheckReceipt}))`;
+        // Retain independently accepted review receipts only for the exact closed
+        // Stage and allocated reviewers. This is preservation, not replay admission.
+        const memoryReviewReceipt = `((event_type = 'memory.review_acceptance'
+        AND json_extract(payload_json, '$.schema_id') = 'dd-flow/memory-review-acceptance@1'
+        AND json_extract(payload_json, '$.wave') = 0)
+      OR (event_type = 'memory.corrected_review_acceptance'
+        AND json_extract(payload_json, '$.schema_id') = 'dd-flow/memory-corrected-review-acceptance@1'
+        AND (json_extract(payload_json, '$.wave') = 1
+          OR (json_extract(payload_json, '$.wave') = 2
+            AND json_type(payload_json, '$.first_review_proof_sha256') = 'text'
+            AND length(json_extract(payload_json, '$.first_review_proof_sha256')) = 64
+            AND json_extract(payload_json, '$.first_review_proof_sha256') NOT GLOB '*[^0-9a-f]*'))))
+      AND json_extract(payload_json, '$.run_id') IN (SELECT run_id FROM capture_scope)
+      AND json_extract(payload_json, '$.project_id') = project_id
+      AND json_extract(payload_json, '$.stage') = 'review'
+      AND json_extract(payload_json, '$.registration_scope.project_id') = project_id
+      AND json_extract(payload_json, '$.registration_scope.run_id') = json_extract(payload_json, '$.run_id')
+      AND json_extract(payload_json, '$.registration_scope.stage') = 'review'
+      AND json_extract(payload_json, '$.registration_scope.attempt') = json_extract(payload_json, '$.attempt')
+      AND json_extract(payload_json, '$.registration_scope.input_sha256') = json_extract(payload_json, '$.input_sha256')
+      AND json_extract(payload_json, '$.registration_scope.parent_work_id') IN (${works})
+      AND json_type(payload_json, '$.workers') = 'array'
+      AND json_array_length(payload_json, '$.workers') BETWEEN 0 AND 256
+      AND (json_extract(payload_json, '$.wave') = 0 OR json_array_length(payload_json, '$.workers') > 0)
+      AND NOT EXISTS (SELECT 1 FROM json_each(payload_json, '$.workers') worker
+        WHERE NOT EXISTS (SELECT 1 FROM works w WHERE w.project_id=audit_events.project_id
+          AND w.run_id=json_extract(audit_events.payload_json, '$.run_id')
+          AND w.work_id=json_extract(worker.value, '$.work_id')))
+      AND EXISTS (SELECT 1 FROM runs r, json_each(r.index_json, '$.stage_runs') s
+        WHERE r.project_id=audit_events.project_id AND r.id=json_extract(payload_json, '$.run_id')
+          AND json_extract(s.value, '$.stage')='review' AND json_extract(s.value, '$.status')='done'
+          AND json_extract(s.value, '$.attempt')=json_extract(payload_json, '$.attempt')
+          AND json_extract(s.value, '$.input_sha256')=json_extract(payload_json, '$.input_sha256')
+          AND json_extract(s.value, '$.data_sha256')=json_extract(payload_json, '$.result_sha256'))`;
+        rules.audit_events = `(${rules.audit_events}) OR (${ownProject} AND (${memoryReviewReceipt}))`;
+        // Terminal evidence precedes Stage/RUN acceptance. Preserve only the
+        // selected MB bundle, exact finish input and independently closed review.
+        // Packet bytes remain under the existing Stage packet preservation rule.
+        const memoryFinishEvidence = `event_type='memory.finish_evidence'
+      AND json_extract(payload_json,'$.schema_id')='dd-flow/memory-finish-evidence@1'
+      AND json_extract(payload_json,'$.project_id')=project_id
+      AND json_extract(payload_json,'$.run_id') IN (SELECT run_id FROM capture_scope)
+      AND json_extract(payload_json,'$.stage')='finish'
+      AND json_type(payload_json,'$.readiness_sha256')='text'
+      AND length(json_extract(payload_json,'$.readiness_sha256'))=64
+      AND json_extract(payload_json,'$.readiness_sha256') NOT GLOB '*[^0-9a-f]*'
+      AND EXISTS (SELECT 1 FROM runs r,json_each(r.index_json,'$.stage_runs') f,json_each(r.index_json,'$.stage_runs') v
+        WHERE r.project_id=audit_events.project_id AND r.id=json_extract(audit_events.payload_json,'$.run_id')
+          AND json_extract(r.index_json,'$.execution_bundle.flow_id')='mb-init'
+          AND json_extract(r.index_json,'$.execution_bundle.manifest_sha256')=json_extract(audit_events.payload_json,'$.bundle_sha256')
+          AND json_extract(f.value,'$.stage')='finish'
+          AND json_extract(f.value,'$.attempt')=json_extract(audit_events.payload_json,'$.attempt')
+          AND json_extract(f.value,'$.input_sha256')=json_extract(audit_events.payload_json,'$.input_sha256')
+          AND json_extract(v.value,'$.stage')='review' AND json_extract(v.value,'$.status')='done'
+          AND json_extract(v.value,'$.data_sha256')=json_extract(audit_events.payload_json,'$.review_sha256'))`;
+        rules.audit_events = `(${rules.audit_events}) OR (${ownProject} AND (${memoryFinishEvidence}))`;
+        const memoryFinishAcceptance = `event_type='memory.finish_acceptance'
+      AND json_extract(payload_json,'$.schema_id')='dd-flow/memory-finish-acceptance@1'
+      AND json_extract(payload_json,'$.project_id')=project_id
+      AND json_extract(payload_json,'$.run_id') IN (SELECT run_id FROM capture_scope)
+      AND json_extract(payload_json,'$.stage')='finish'
+      AND json_type(payload_json,'$.evidence_sha256')='text'
+      AND length(json_extract(payload_json,'$.evidence_sha256'))=64
+      AND json_extract(payload_json,'$.evidence_sha256') NOT GLOB '*[^0-9a-f]*'
+      AND EXISTS (SELECT 1 FROM runs r,json_each(r.index_json,'$.stage_runs') f
+        WHERE r.project_id=audit_events.project_id AND r.id=json_extract(audit_events.payload_json,'$.run_id')
+          AND json_extract(r.index_json,'$.execution_bundle.flow_id')='mb-init'
+          AND json_extract(r.index_json,'$.execution_bundle.manifest_sha256')=json_extract(audit_events.payload_json,'$.bundle_sha256')
+          AND json_extract(f.value,'$.stage')='finish' AND json_extract(f.value,'$.status')='done'
+          AND json_extract(f.value,'$.attempt')=json_extract(audit_events.payload_json,'$.attempt')
+          AND json_extract(f.value,'$.input_sha256')=json_extract(audit_events.payload_json,'$.input_sha256')
+          AND json_extract(f.value,'$.data_schema_id')='dd-flow/mb-init-finish-result@1'
+          AND json_extract(f.value,'$.data_sha256')=json_extract(audit_events.payload_json,'$.result_sha256'))`;
+        rules.audit_events = `(${rules.audit_events}) OR (${ownProject} AND (${memoryFinishAcceptance}))`;
+        const descriptorRunSettlementReceipt = `event_type = 'flow_run.descriptor_run_settlement'
+      AND json_extract(payload_json, '$.run_id') IN (SELECT run_id FROM capture_scope)
+      AND EXISTS (SELECT 1 FROM works w WHERE w.project_id=audit_events.project_id
+        AND w.run_id=json_extract(audit_events.payload_json, '$.run_id')
+        AND w.work_id=json_extract(audit_events.payload_json, '$.work_id') AND w.parent_work_id IS NULL)`;
+        rules.audit_events = `(${rules.audit_events}) OR (${ownProject} AND (${descriptorRunSettlementReceipt}))`;
+        // Exact packet/report bytes remain predecessor and restart custody. A
+        // selected RUN's receipts have no protocol_id and must not be discarded.
+        const stageReceipt = `event_type IN ('flow_run.stage_packet', 'flow_run.stage_report', 'flow_run.descriptor_stage_start')
+      AND json_extract(payload_json, '$.run_id') IN (SELECT run_id FROM capture_scope)
+      AND EXISTS (SELECT 1 FROM runs r, json_each(r.index_json, '$.stage_runs') s
+        WHERE r.project_id = audit_events.project_id AND r.id = json_extract(payload_json, '$.run_id')
+          AND json_extract(s.value, '$.stage') = json_extract(payload_json, '$.stage'))`;
+        rules.audit_events = `(${rules.audit_events}) OR (${ownProject} AND (${stageReceipt}))`;
+        const startReceipt = `event_type IN ('flow_run.start_request', 'flow_run.start_root_owned', 'flow_run.start_published')
+      AND json_extract(payload_json, '$.run_id') IN (SELECT run_id FROM capture_scope)
+      AND EXISTS (SELECT 1 FROM runs r WHERE r.project_id = audit_events.project_id AND r.id = json_extract(payload_json, '$.run_id')
+        AND json_extract(r.index_json, '$.start_request.request_id') = json_extract(payload_json, '$.request_id'))`;
+        rules.audit_events = `(${rules.audit_events}) OR (${ownProject} AND (${startReceipt}))`;
         for (const table of ["run_controller_events", "run_controller_operations"])
             rules[table] = `controller_id IN (SELECT controller_id FROM run_controllers WHERE ${ownRun})`;
         for (const table of ["run_control_admissions", "run_control_stage_admissions", "run_control_operations", "run_control_workers"])
@@ -104,6 +451,74 @@ export function captureRecoveryDatabase(source, output, projectId, runId, protoc
         throw new AppError("snapshot_database_failed", primary instanceof Error ? primary.message : "Snapshot database cleanup failed", 1, { ...(failed ? { cause: errorRecord(primary) } : {}), snapshot_cleanup_errors: cleanup });
     }
 }
+/** Validate retained allocation against the same consistent SQL copy. This
+ * preserves evidence only; absolute filesystem/engine paths are not relocated.
+ */
+function assertCapturedStartAuthority(db, projectId, runId) {
+    const marker = JSON.parse(db.prepare("SELECT index_json FROM runs WHERE project_id = ? AND id = ?").get(projectId, runId).index_json)?.start_request;
+    const hasTable = db.prepare("SELECT 1 FROM sqlite_schema WHERE type = 'table' AND name = 'run_start_requests'").get();
+    const row = hasTable ? db.prepare("SELECT request_id FROM run_start_requests WHERE project_id = ? AND run_id = ?").get(projectId, runId) : undefined;
+    const audit = db.prepare("SELECT json_extract(payload_json, '$.request_id') AS request_id FROM audit_events WHERE project_id = ? AND event_type = 'flow_run.start_request' AND json_extract(payload_json, '$.run_id') = ? LIMIT 1").get(projectId, runId);
+    if (!marker && !row && !audit)
+        return;
+    if (!marker || !row || !audit || marker.request_id !== row.request_id || row.request_id !== audit.request_id)
+        throw new AppError("snapshot_start_authority_invalid", "Captured RUN is missing its independent allocation evidence", 1);
+    // Adapt the read-only query surface, never open or migrate another store.
+    const context = { db: {
+            readSnapshot: (operation) => operation(), // The copied database writer already pins this snapshot.
+            get: (sql, parameters = []) => db.prepare(sql).get(...parameters),
+            all: (sql, parameters = []) => db.prepare(sql).all(...parameters)
+        } };
+    const retained = readRunStartRequest(context, projectId, row.request_id);
+    if (retained?.payload.initial_index.execution_bundle?.flow_id === "mb-init") {
+        const p = retained.payload;
+        // This adapter supplies only SQL reads; the reservation/readiness readers
+        // must not access a host home or physical engine during capture.
+        const allocation = readMemoryInitRunAllocation(context, { requestId: p.request_id, projectRoot: p.project_root, workspaceRoot: p.workspace_root });
+        if (!allocation || allocation.project_id !== projectId || allocation.run_id !== runId)
+            throw new AppError("snapshot_start_authority_invalid", "Captured memory RUN is missing its request-bound identity reservation", 1);
+        if (db.prepare(`SELECT 1 FROM audit_events WHERE event_type IN ('memory.init_startup_input','memory.init_startup_input_intent')
+      AND json_extract(payload_json,'$.scope.requestId')=? AND json_extract(payload_json,'$.scope.projectRoot')=? LIMIT 1`).get(p.request_id, p.project_root)) {
+            readMemoryInitStartupInput(context, { requestId: p.request_id, projectRoot: p.project_root, workspaceRoot: p.workspace_root });
+        }
+    }
+}
+/** Check the consistent copied database, not a racy earlier read of the live
+ * store. Legacy evidence gains no descriptor or filesystem admission here.
+ */
+function assertCapturedBundleAuthority(db, projectId, runId) {
+    const run = db.prepare("SELECT index_json FROM runs WHERE project_id = ? AND id = ?").get(projectId, runId);
+    const hasTable = db.prepare("SELECT 1 FROM sqlite_schema WHERE type = 'table' AND name = 'run_bundle_authorities'").get();
+    const row = hasTable ? db.prepare("SELECT manifest_sha256, admission_json FROM run_bundle_authorities WHERE project_id = ? AND run_id = ?").get(projectId, runId) : undefined;
+    const invalid = () => { throw new AppError("snapshot_bundle_authority_invalid", "Captured RUN bundle anchor and independent authority disagree", 1); };
+    let anchor;
+    try {
+        anchor = JSON.parse(run.index_json)?.execution_bundle;
+    }
+    catch {
+        if (row)
+            invalid();
+        return;
+    }
+    if (anchor === undefined) {
+        if (row)
+            invalid();
+        return;
+    }
+    if (!anchor || anchor.schema_id !== "dd-flow/run-execution-bundle@1" || !row
+        || [anchor.manifest_sha256, anchor.descriptor_sha256, anchor.admission_sha256].some(value => typeof value !== "string" || !/^[a-f0-9]{64}$/.test(value))
+        || typeof anchor.flow_id !== "string" || !anchor.flow_id || row.manifest_sha256 !== anchor.manifest_sha256
+        || Buffer.byteLength(row.admission_json, "utf8") > 1024 * 1024)
+        invalid();
+    try {
+        const retained = JSON.parse(row.admission_json);
+        if (retained.runId !== runId || hybridDigest(retained) !== anchor.admission_sha256)
+            invalid();
+    }
+    catch {
+        invalid();
+    }
+}
 /** Physical leases are evidence, not authority to resurrect on another host. */
 export function readRecoveryResourceEvidence(resourceHome, projectId, runId, authority) {
     const file = path.join(resourceHome, "runtime.sqlite");

package/dist/services/release-archive-producer.js

@@ -0,0 +1,52 @@
+import { gzipSync } from "node:zlib";
+import { createHash } from "node:crypto";
+import { AppError } from "../shared/errors.js";
+import { inspectReleaseArchive } from "./release-archive.js";
+/** Deterministic regular-file-only tar/gzip. Extraction admission is also applied
+ * to producer output; producing bytes never grants them installation authority.
+ */
+export function produceReleaseArchive(files) {
+    const refuse = () => { throw new AppError("release_producer", "Archive production refused", 1, { reason: "invalid_archive_input", effect: "no_effect" }); };
+    if (!files.length || files.length > 100_000)
+        refuse();
+    const chunks = [];
+    let expanded = 1024;
+    const append = (name, bytes, mode, type) => {
+        expanded += 512 + Math.ceil(bytes.length / 512) * 512;
+        if (expanded > 512 * 1024 * 1024)
+            refuse();
+        const header = Buffer.alloc(512);
+        header.write(name);
+        header.write(mode.toString(8).padStart(7, "0") + "\0", 100);
+        header.write("0000000\0", 108);
+        header.write("0000000\0", 116);
+        header.write(bytes.length.toString(8).padStart(11, "0") + "\0", 124);
+        header.write("00000000000\0", 136);
+        header.fill(32, 148, 156);
+        header[156] = type;
+        header.write("ustar\0", 257);
+        header.write("00", 263);
+        header.write(header.reduce((sum, byte) => sum + byte, 0).toString(8).padStart(6, "0") + "\0 ", 148);
+        chunks.push(header, bytes, Buffer.alloc((512 - bytes.length % 512) % 512));
+    };
+    let index = 0;
+    for (const file of [...files].sort((a, b) => Buffer.compare(Buffer.from(a.path), Buffer.from(b.path)))) {
+        const length = Buffer.byteLength(file.path);
+        if (!length || length > 4096 || !Buffer.isBuffer(file.bytes) || typeof file.executable !== "boolean")
+            refuse();
+        let name = file.path;
+        if (length > 100) {
+            const record = `path=${file.path}\n`;
+            let size = Buffer.byteLength(record) + 2;
+            while (size !== Buffer.byteLength(record) + String(size).length + 1)
+                size = Buffer.byteLength(record) + String(size).length + 1;
+            append(`PaxHeaders/${index}`, Buffer.from(`${size} ${record}`), 0o644, 120);
+            name = `entries/${index}`;
+        }
+        append(name, file.bytes, file.executable ? 0o755 : 0o644, 48);
+        index++;
+    }
+    const bytes = gzipSync(Buffer.concat([...chunks, Buffer.alloc(1024)]), { level: 9 });
+    inspectReleaseArchive({ url: "https://producer.invalid/archive", bytes: bytes.length, sha256: createHash("sha256").update(bytes).digest("hex") }, bytes);
+    return bytes;
+}