@eir-labs/coltrane 0.10.0 → 0.11.0

package/dist/src/repo_index.d.ts

@@ -0,0 +1,58 @@
+/** One import edge: `from` imports `symbol`, which is a real export of `to`. */
+export interface ImporterEdge {
+    from: string;
+    to: string;
+    symbol: string;
+}
+/** One module-to-test link: `test` references `module`. */
+export interface ModuleTest {
+    module: string;
+    test: string;
+}
+/** One entry point: `symbol` is an export of `module` that no other module imports. */
+export interface EntryPoint {
+    module: string;
+    symbol: string;
+}
+/**
+ * The compiled index -- MECHANICAL structure only. There is deliberately no `claims` / `unknowns`
+ * / `frame` field: judgment is not the compiler's to produce (I12). The absence is a compile-time
+ * property of this type, not a runtime filter -- nothing can put a judgment field here.
+ */
+export interface RepositoryIndex {
+    source_revision: string;
+    files_to_exports: Record<string, string[]>;
+    file_importers: ImporterEdge[];
+    module_tests: ModuleTest[];
+    entry_points: EntryPoint[];
+    conventions_observed: string[];
+    boundary: string[];
+}
+/** A file in the input set: its repo-relative path and its raw source text. */
+export type RepoFile = {
+    path: string;
+    content: string;
+};
+/**
+ * The compiler refuses rather than emitting a partial index. Thrown when a relative import
+ * specifier resolves to no file in the input set -- a dangling edge is not representable, so the
+ * whole index is withheld (I18, fail-closed).
+ */
+export declare class RepoIndexError extends Error {
+    constructor(message?: string);
+}
+/**
+ * Compile a repository index from source. Deterministic: the returned index is byte-identical
+ * under any permutation of `files`. Fails closed: a relative import that resolves to no file in
+ * the set throws RepoIndexError rather than yielding a partial, dangling index.
+ */
+export declare function compileRepositoryIndex(files: RepoFile[], opts: {
+    source_revision: string;
+}): RepositoryIndex;
+/**
+ * Reconcile a compiled index against a model's claimed reading of the SAME mechanical fields. The
+ * compiler is authoritative: on any divergence the compiled value wins, so a model-hallucinated
+ * edge is dropped (I15). The model reading is offered for comparison only -- it never adds to the
+ * mechanical structure.
+ */
+export declare function reconcileMechanical(compiled: RepositoryIndex, _modelReading: Pick<RepositoryIndex, "file_importers">): RepositoryIndex;

package/dist/src/repo_index.js

@@ -0,0 +1,232 @@
+// The deterministic producer for a change-context's MECHANICAL fields.
+//
+// The reading seat (agent john, software-change-pr-v1) spends most of a 24 tool-call cap
+// RE-DERIVING repository structure every run -- the import graph, the module-to-tests index, the
+// exported symbols and their entry points. This module COMPILES those facts from source, so the
+// mechanical half of a reading is a build artifact rather than a thing a model re-establishes by
+// hand (and mis-establishes: three hand-rolled structural sweeps this week each needed correction,
+// and a guessed invocation surface once survived into sealed tests).
+//
+// The prohibition that gives it its shape (#424 I12/I13): this compiler emits STRUCTURE ONLY. It
+// never populates `claims`, `unknowns` or `frame` -- noticing is the reader's office, not the
+// index's. The absence is enforced structurally: `RepositoryIndex` has no field for any of the
+// three, so a compiled index carrying one would not type-check. A fast index that notices nothing
+// is the POINT: it buys the reader's turns back for the judgment half a model is actually needed
+// for.
+//
+// Everything here is pure and deterministic: the same file set in any order compiles to a
+// byte-identical index (every field is canonicalised -- keys and arrays sorted -- before return).
+// The compiler fails CLOSED: an import that resolves to no file in the input set refuses with a
+// RepoIndexError rather than emitting a partial, dangling index.
+/**
+ * The compiler refuses rather than emitting a partial index. Thrown when a relative import
+ * specifier resolves to no file in the input set -- a dangling edge is not representable, so the
+ * whole index is withheld (I18, fail-closed).
+ */
+export class RepoIndexError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "RepoIndexError";
+        // Restore the prototype chain under ES5-target transpilation so `instanceof` holds.
+        Object.setPrototypeOf(this, RepoIndexError.prototype);
+    }
+}
+// -- source classification -----------------------------------------------------------------------
+const TEST_FILE = /\.test\.[cm]?[jt]sx?$/;
+const isTestFile = (path) => TEST_FILE.test(path);
+// -- a small POSIX path resolver (the tree is described in POSIX paths, no fs access) ------------
+/** Resolve a relative specifier against the importing file's directory, POSIX-style. */
+function resolveRelative(fromPath, spec) {
+    const slash = fromPath.lastIndexOf("/");
+    const fromDir = slash >= 0 ? fromPath.slice(0, slash) : "";
+    const parts = (fromDir ? fromDir.split("/") : []).concat(spec.split("/"));
+    const stack = [];
+    for (const p of parts) {
+        if (p === "" || p === ".")
+            continue;
+        if (p === "..") {
+            stack.pop();
+            continue;
+        }
+        stack.push(p);
+    }
+    return stack.join("/");
+}
+/**
+ * Map a resolved `.js`-style specifier target to the real source file in the set (the ESM/bundler
+ * convention: source is `.ts`, the specifier names the emitted `.js`). Returns the matched path,
+ * or undefined when nothing in the set answers it.
+ */
+function resolveModule(resolvedTarget, fileSet) {
+    const base = resolvedTarget.replace(/\.[cm]?jsx?$/, "");
+    const candidates = [
+        base + ".ts",
+        base + ".tsx",
+        base + ".mts",
+        base + ".cts",
+        resolvedTarget,
+        base + "/index.ts",
+        base + "/index.tsx",
+    ];
+    for (const c of candidates) {
+        if (fileSet.has(c))
+            return c;
+    }
+    return undefined;
+}
+/**
+ * Extract the named-import bindings and their module specifier from a source text. Only named
+ * imports carry the symbols an importer edge names; `import Default from` and `import * as ns`
+ * bring in no named export and are recorded with an empty symbol list (so resolution/fail-closed
+ * still runs on their specifier). Bare (non-relative) specifiers are left to the caller to skip.
+ */
+function parseImports(content) {
+    const out = [];
+    // `import [type] [ ... ] from "spec"` -- the binding clause is optional (side-effect imports).
+    const re = /import\s+(?:type\s+)?([^;'"]*?\s+from\s+)?["']([^"']+)["']/g;
+    let m;
+    while ((m = re.exec(content)) !== null) {
+        const clause = m[1] ?? "";
+        const spec = m[2];
+        const braces = /\{([^}]*)\}/.exec(clause);
+        const symbols = [];
+        if (braces) {
+            for (const raw of braces[1].split(",")) {
+                const name = raw.trim().split(/\s+as\s+/)[0]?.trim();
+                // The edge names the target's EXPORTED symbol -- the left side of `orig as local`.
+                if (name && /^[A-Za-z_$][\w$]*$/.test(name))
+                    symbols.push(name);
+            }
+        }
+        out.push({ spec, symbols });
+    }
+    return out;
+}
+/** Extract the exported symbol names declared in a source text. */
+function parseExports(content) {
+    const names = new Set();
+    const push = (re) => {
+        let m;
+        const g = new RegExp(re.source, "g");
+        while ((m = g.exec(content)) !== null)
+            if (m[1])
+                names.add(m[1]);
+    };
+    // export [async] function NAME / export [abstract] class NAME / export const|let|var NAME /
+    // export type|interface|enum NAME
+    push(/export\s+(?:async\s+)?function\s*\*?\s*([A-Za-z_$][\w$]*)/);
+    push(/export\s+(?:abstract\s+)?class\s+([A-Za-z_$][\w$]*)/);
+    push(/export\s+(?:const|let|var)\s+([A-Za-z_$][\w$]*)/);
+    push(/export\s+(?:type|interface|enum)\s+([A-Za-z_$][\w$]*)/);
+    // export { a, b as c } -- the exported name is the right side of `as`, else the bare name.
+    let mm;
+    const named = /export\s*(?:type\s*)?\{([^}]*)\}(?!\s*from)/g;
+    while ((mm = named.exec(content)) !== null) {
+        for (const raw of mm[1].split(",")) {
+            const parts = raw.trim().split(/\s+as\s+/);
+            const name = (parts[1] ?? parts[0])?.trim();
+            if (name && /^[A-Za-z_$][\w$]*$/.test(name))
+                names.add(name);
+        }
+    }
+    return [...names];
+}
+const isRelative = (spec) => spec.startsWith("./") || spec.startsWith("../");
+const edgeKey = (e) => `${e.from} ${e.to} ${e.symbol}`;
+const mtKey = (m) => `${m.module} ${m.test}`;
+const epKey = (e) => `${e.module} ${e.symbol}`;
+/**
+ * Compile a repository index from source. Deterministic: the returned index is byte-identical
+ * under any permutation of `files`. Fails closed: a relative import that resolves to no file in
+ * the set throws RepoIndexError rather than yielding a partial, dangling index.
+ */
+export function compileRepositoryIndex(files, opts) {
+    const fileSet = new Set(files.map((f) => f.path));
+    // Resolve a relative specifier or FAIL CLOSED -- every endpoint of every edge must be a real file.
+    const resolveOrThrow = (fromPath, spec) => {
+        const target = resolveModule(resolveRelative(fromPath, spec), fileSet);
+        if (target === undefined) {
+            throw new RepoIndexError(`unresolvable import in ${fromPath}: "${spec}" resolves to no file in the input set -- refusing a partial, dangling index`);
+        }
+        return target;
+    };
+    const filesToExports = {};
+    const edges = new Map();
+    const moduleTests = new Map();
+    const jsExtImport = { seen: false };
+    const colocatedTests = { seen: false };
+    for (const f of files) {
+        const imports = parseImports(f.content);
+        for (const imp of imports) {
+            if (!isRelative(imp.spec))
+                continue; // external/bare specifier -- not an in-tree edge
+            if (/\.[cm]?jsx?$/.test(imp.spec))
+                jsExtImport.seen = true;
+            const target = resolveOrThrow(f.path, imp.spec);
+            if (isTestFile(f.path)) {
+                // A test file's imports feed the module-to-tests index, never the importer graph.
+                if (!isTestFile(target)) {
+                    const mt = { module: target, test: f.path };
+                    moduleTests.set(mtKey(mt), mt);
+                    colocatedTests.seen = true;
+                }
+            }
+            else {
+                // A source file's named imports are importer edges -- one per named symbol.
+                for (const symbol of imp.symbols) {
+                    const e = { from: f.path, to: target, symbol };
+                    edges.set(edgeKey(e), e);
+                }
+            }
+        }
+        if (!isTestFile(f.path)) {
+            filesToExports[f.path] = parseExports(f.content);
+        }
+    }
+    // entry_points = exported symbols no OTHER module imports (roots of symbol consumption). A
+    // symbol reached only from a test file still counts as an entry point -- tests are not consumers
+    // in the import graph.
+    const importedSymbols = new Set();
+    for (const e of edges.values())
+        importedSymbols.add(`${e.to} ${e.symbol}`);
+    const entryPoints = [];
+    for (const [module, exports] of Object.entries(filesToExports)) {
+        for (const symbol of exports) {
+            if (!importedSymbols.has(`${module} ${symbol}`))
+                entryPoints.push({ module, symbol });
+        }
+    }
+    const conventions = [];
+    if (jsExtImport.seen)
+        conventions.push("esm-js-extension-import-specifiers");
+    if (colocatedTests.seen)
+        conventions.push("tests-reference-source-by-relative-import");
+    // -- canonicalise every field: sorted keys, sorted arrays -- so JSON.stringify is order-stable --
+    const canonExports = {};
+    for (const path of Object.keys(filesToExports).sort()) {
+        canonExports[path] = [...filesToExports[path]].sort();
+    }
+    return {
+        source_revision: opts.source_revision,
+        files_to_exports: canonExports,
+        file_importers: [...edges.values()].sort((a, b) => edgeKey(a).localeCompare(edgeKey(b))),
+        module_tests: [...moduleTests.values()].sort((a, b) => mtKey(a).localeCompare(mtKey(b))),
+        entry_points: entryPoints.sort((a, b) => epKey(a).localeCompare(epKey(b))),
+        conventions_observed: conventions.sort(),
+        boundary: [...fileSet].sort(),
+    };
+}
+/**
+ * Reconcile a compiled index against a model's claimed reading of the SAME mechanical fields. The
+ * compiler is authoritative: on any divergence the compiled value wins, so a model-hallucinated
+ * edge is dropped (I15). The model reading is offered for comparison only -- it never adds to the
+ * mechanical structure.
+ */
+export function reconcileMechanical(compiled, _modelReading) {
+    void _modelReading; // authoritative-compiler contract: the model's mechanical claims do not win
+    return {
+        ...compiled,
+        file_importers: [...compiled.file_importers],
+    };
+}
+//# sourceMappingURL=repo_index.js.map

package/dist/src/repo_index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repo_index.js","sourceRoot":"","sources":["../../src/repo_index.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,EAAE;AACF,yFAAyF;AACzF,iGAAiG;AACjG,gGAAgG;AAChG,iGAAiG;AACjG,mGAAmG;AACnG,qEAAqE;AACrE,EAAE;AACF,iGAAiG;AACjG,8FAA8F;AAC9F,+FAA+F;AAC/F,kGAAkG;AAClG,iGAAiG;AACjG,OAAO;AACP,EAAE;AACF,0FAA0F;AAC1F,kGAAkG;AAClG,gGAAgG;AAChG,iEAAiE;AAuCjE;;;;GAIG;AACH,MAAM,OAAO,cAAe,SAAQ,KAAK;IACvC,YAAY,OAAgB;QAC1B,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;QAC7B,oFAAoF;QACpF,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,cAAc,CAAC,SAAS,CAAC,CAAC;IACxD,CAAC;CACF;AAED,mGAAmG;AACnG,MAAM,SAAS,GAAG,uBAAuB,CAAC;AAC1C,MAAM,UAAU,GAAG,CAAC,IAAY,EAAW,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEnE,mGAAmG;AACnG,wFAAwF;AACxF,SAAS,eAAe,CAAC,QAAgB,EAAE,IAAY;IACrD,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,OAAO,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3D,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1E,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,GAAG;YAAE,SAAS;QACpC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YACf,KAAK,CAAC,GAAG,EAAE,CAAC;YACZ,SAAS;QACX,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAChB,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC;AAED;;;;GAIG;AACH,SAAS,aAAa,CAAC,cAAsB,EAAE,OAA4B;IACzE,MAAM,IAAI,GAAG,cAAc,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;IACxD,MAAM,UAAU,GAAG;QACjB,IAAI,GAAG,KAAK;QACZ,IAAI,GAAG,MAAM;QACb,IAAI,GAAG,MAAM;QACb,IAAI,GAAG,MAAM;QACb,cAAc;QACd,IAAI,GAAG,WAAW;QAClB,IAAI,GAAG,YAAY;KACpB,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAKD;;;;;GAKG;AACH,SAAS,YAAY,CAAC,OAAe;IACnC,MAAM,GAAG,GAAmB,EAAE,CAAC;IAC/B,+FAA+F;IAC/F,MAAM,EAAE,GAAG,6DAA6D,CAAC;IACzE,IAAI,CAAyB,CAAC;IAC9B,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;QACnB,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,IAAI,MAAM,EAAE,CAAC;YACX,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;gBACxC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;gBACrD,mFAAmF;gBACnF,IAAI,IAAI,IAAI,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC;oBAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClE,CAAC;QACH,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,mEAAmE;AACnE,SAAS,YAAY,CAAC,OAAe;IACnC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,MAAM,IAAI,GAAG,CAAC,EAAU,EAAE,EAAE;QAC1B,IAAI,CAAyB,CAAC;QAC9B,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACrC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI;YAAE,IAAI,CAAC,CAAC,CAAC,CAAC;gBAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACnE,CAAC,CAAC;IACF,4FAA4F;IAC5F,kCAAkC;IAClC,IAAI,CAAC,2DAA2D,CAAC,CAAC;IAClE,IAAI,CAAC,qDAAqD,CAAC,CAAC;IAC5D,IAAI,CAAC,iDAAiD,CAAC,CAAC;IACxD,IAAI,CAAC,uDAAuD,CAAC,CAAC;IAC9D,2FAA2F;IAC3F,IAAI,EAA0B,CAAC;IAC/B,MAAM,KAAK,GAAG,8CAA8C,CAAC;IAC7D,OAAO,CAAC,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC3C,KAAK,MAAM,GAAG,IAAI,EAAE,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YACpC,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAC3C,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;YAC5C,IAAI,IAAI,IAAI,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,IAAY,EAAW,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;AAC9F,MAAM,OAAO,GAAG,CAAC,CAAe,EAAU,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;AAC7E,MAAM,KAAK,GAAG,CAAC,CAAa,EAAU,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;AACjE,MAAM,KAAK,GAAG,CAAC,CAAa,EAAU,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;AAEnE;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CACpC,KAAiB,EACjB,IAAiC;IAEjC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAElD,mGAAmG;IACnG,MAAM,cAAc,GAAG,CAAC,QAAgB,EAAE,IAAY,EAAU,EAAE;QAChE,MAAM,MAAM,GAAG,aAAa,CAAC,eAAe,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;QACvE,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,cAAc,CACtB,0BAA0B,QAAQ,MAAM,IAAI,8EAA8E,CAC3H,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IAEF,MAAM,cAAc,GAA6B,EAAE,CAAC;IACpD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC9C,MAAM,WAAW,GAAG,IAAI,GAAG,EAAsB,CAAC;IAClD,MAAM,WAAW,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACpC,MAAM,cAAc,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IAEvC,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,OAAO,GAAG,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QACxC,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;YAC1B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,SAAS,CAAC,iDAAiD;YACtF,IAAI,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,WAAW,CAAC,IAAI,GAAG,IAAI,CAAC;YAC3D,MAAM,MAAM,GAAG,cAAc,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;YAChD,IAAI,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvB,kFAAkF;gBAClF,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;oBACxB,MAAM,EAAE,GAAe,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;oBACxD,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;oBAC/B,cAAc,CAAC,IAAI,GAAG,IAAI,CAAC;gBAC7B,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,4EAA4E;gBAC5E,KAAK,MAAM,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;oBACjC,MAAM,CAAC,GAAiB,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;oBAC7D,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBAC3B,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IAED,2FAA2F;IAC3F,iGAAiG;IACjG,uBAAuB;IACvB,MAAM,eAAe,GAAG,IAAI,GAAG,EAAU,CAAC;IAC1C,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,EAAE;QAAE,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3E,MAAM,WAAW,GAAiB,EAAE,CAAC;IACrC,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;QAC/D,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,MAAM,EAAE,CAAC;gBAAE,WAAW,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACxF,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,IAAI,WAAW,CAAC,IAAI;QAAE,WAAW,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;IAC7E,IAAI,cAAc,CAAC,IAAI;QAAE,WAAW,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;IAEvF,kGAAkG;IAClG,MAAM,YAAY,GAA6B,EAAE,CAAC;IAClD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QACtD,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,cAAc,CAAC,IAAI,CAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACzD,CAAC;IAED,OAAO;QACL,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,gBAAgB,EAAE,YAAY;QAC9B,cAAc,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QACxF,YAAY,EAAE,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACxF,YAAY,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1E,oBAAoB,EAAE,WAAW,CAAC,IAAI,EAAE;QACxC,QAAQ,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,EAAE;KAC9B,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CACjC,QAAyB,EACzB,aAAsD;IAEtD,KAAK,aAAa,CAAC,CAAC,4EAA4E;IAChG,OAAO;QACL,GAAG,QAAQ;QACX,cAAc,EAAE,CAAC,GAAG,QAAQ,CAAC,cAAc,CAAC;KAC7C,CAAC;AACJ,CAAC"}

package/dist/src/reuse.d.ts

@@ -37,8 +37,14 @@ export declare function typeShapeFingerprint(def: {
  * agent's type surface, so a resume across an edited pipeline cannot happen. The rest close
  * the holes genome_hash does not cover:
  *
- *  - `gig_input_sha` — the dispatch payload. Phases 1..4 derived from payload A followed by
- *    phase 5 consuming payload B is the same splice as a genome change, one layer down.
+ *  - `gig_input_sha` — the sha256 of the CANONICAL dispatch payload, and ONLY that hash: the
+ *    payload itself is NEVER stored in a checkpoint (nor in the ledger). A later reader must not
+ *    try to "recover the input from the checkpoint" — there is nothing to recover; the hash is a
+ *    fingerprint, not a copy. Phases 1..4 derived from payload A followed by phase 5 consuming
+ *    payload B is the same splice as a genome change, one layer down. (#20: because the payload is
+ *    absent, a resume that OMITS --input cannot re-derive it; when every remaining chair is human
+ *    the resume gate INHERITS this recorded hash instead — see the runtime resume gate and the
+ *    inheritance-vs-waiver note on `runIdentityMismatch` below.)
  *  - `model_version` — a run whose first half was produced by one model and second half by
  *    another gets ONE `run_fingerprint`, carrying only the final model. That fingerprint then
  *    misdescribes the outputs it covers. Cheap to check; usually "unknown" on both sides, so
@@ -91,7 +97,32 @@ export declare function producersSha(input: {
         code_hash: string;
     }>;
 }): string;
-export declare function runIdentityMismatch(a: RunIdentity, b: RunIdentity): string[];
+/**
+ * `waiveProducers` skips ONLY the `producers_sha` comparison; every other field still compares
+ * and still enters the returned set. It defaults OFF, so an unadorned call is byte-for-byte the
+ * old behaviour. The one caller that sets it (the resume gate) has first proven that every chair
+ * left to run is human — and a producing agent's definition cannot change what a person is being
+ * asked to decide about work that is already sealed and hashed. That is the sole justification;
+ * genome_hash, gig_input_sha, model_version, depth and canonical_form_version are NEVER waived,
+ * because they can still describe something the remaining human chair is being asked to approve.
+ *
+ * That NEVER-WAIVED rule is about a STATED mismatch, and neither #19 nor #20 touches it. Waiving
+ * skips a comparison that WOULD have failed; INHERITING substitutes the checkpoint's own recorded
+ * value for a field the operator left unstated, so the comparison a resume runs is between the
+ * checkpoint and a value it does not contradict. Two fields inherit, at the runtime resume-gate
+ * call site, never here:
+ *   - depth (#19): a resume that omits --depth compares against the depth the CHECKPOINT recorded.
+ *   - gig_input_sha (#20): a resume whose every remaining chair is human and that omits --input
+ *     compares against the gig_input_sha the CHECKPOINT recorded — because the payload is never
+ *     stored (see RunIdentity.gig_input_sha) and the remaining human chairs consume no payload.
+ * Both stay never-waived: an EXPLICIT --depth or --input that disagrees still drives a refusal, and
+ * gig_input_sha keeps gating in full the moment any remaining chair is a model chair. Inheriting a
+ * value nobody contradicted is a different act from skipping a comparison that would have failed,
+ * so reading #19 or #20 as a hole in this rule is a mistake.
+ */
+export declare function runIdentityMismatch(a: RunIdentity, b: RunIdentity, opts?: {
+    waiveProducers?: boolean;
+}): string[];
 /**
  * The composite identity of one checkpointed seat: `(chart_slug, movement_id, role)`.
  *
@@ -142,6 +173,13 @@ export interface CheckpointRole {
 export interface GigCheckpoint {
     schema_version: number;
     gig_id: string;
+    /**
+     * The run identity a resume must match. NOTE what this does NOT contain: the dispatch payload.
+     * `identity.gig_input_sha` is a sha256 of the canonical payload and nothing else — the checkpoint
+     * stores the HASH, never the bytes. A later reader must not attempt to "recover the input from
+     * the checkpoint"; that recovery is structurally impossible. On a human-only resume that omits
+     * --input, the gate inherits this hash rather than reconstructing a payload it never kept (#20).
+     */
     identity: RunIdentity;
     /**
      * The engine build (COLTRANE_VERSION) that WROTE this checkpoint.
@@ -151,7 +189,9 @@ export interface GigCheckpoint {
      * producers_sha) legitimately drifts between two builds that both write `schema_version` 1.
      * When a resume then refuses on that drift, the raw before/after hashes alone do not tell an
      * operator WHICH build would have matched — they have to guess the producing version. Recording
-     * it here turns "these two 64-hex strings disagree" into "resume from a <version> build".
+     * it here lets the refusal, when the versions genuinely DIFFER, turn "these two 64-hex strings
+     * disagree" into "resume from a <version> build". When this version equals the current one the
+     * refusal names the drifted fields instead, since the version is not what moved.
      *
      * Optional for BACK-COMPAT: a checkpoint written before this field existed has none, and a
      * resume of it refuses/succeeds exactly as before, naming "(engine version unrecorded)" in

package/dist/src/reuse.js.map

@@ -1 +1 @@
-{"version":3,"file":"reuse.js","sourceRoot":"","sources":["../../src/reuse.ts"],"names":[],"mappings":"AAAA,mDAAmD;AACnD,EAAE;AACF,0FAA0F;AAC1F,6FAA6F;AAC7F,wFAAwF;AACxF,2FAA2F;AAC3F,yFAAyF;AACzF,4FAA4F;AAC5F,gCAAgC;AAChC,EAAE;AACF,6FAA6F;AAC7F,2FAA2F;AAC3F,wFAAwF;AACxF,6FAA6F;AAC7F,2FAA2F;AAC3F,0FAA0F;AAC1F,6DAA6D;AAC7D,EAAE;AACF,oFAAoF;AACpF,2FAA2F;AAC3F,0FAA0F;AAC1F,kDAAkD;AAClD,EAAE;AACF,yFAAyF;AACzF,8FAA8F;AAC9F,4EAA4E;AAE5E,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAE3D;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,CAAC;AAEvC,kGAAkG;AAClG,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC;AAE3C,8FAA8F;AAC9F,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAEtC,MAAM,OAAO,eAAgB,SAAQ,KAAK;CAAG;AAc7C;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAIpC;IACC,OAAO,SAAS,CACd,SAAS,CAAC;QACR,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,QAAQ,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE;QACjD,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,IAAI;KAC3B,CAAC,CACH,CAAC;AACJ,CAAC;AAuDD;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,KAG5B;IACC,OAAO,SAAS,CACd,SAAS,CAAC;QACR,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,MAAM,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;aAC9B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;aACtD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;KACpE,CAAC,CACH,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,CAAc,EAAE,CAAc;IAChE,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAA6B,EAAE,CAAC;QAC3D,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,kFAAkF;AAClF,iBAAiB;AACjB,kFAAkF;AAElF;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,iBAAiB,CAAC,UAAkB,EAAE,WAA+B,EAAE,IAAY;IACjG,OAAO,GAAG,UAAU,IAAI,WAAW,IAAI,UAAU,IAAI,IAAI,EAAE,CAAC;AAC9D,CAAC;AAyMD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,aAAa,CAAC,KAAoB;IAChD,MAAM,KAAK,GAAG,CAAC,GAAG,KAAe,EAAU,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7F,8FAA8F;IAC9F,6FAA6F;IAC7F,kDAAkD;IAClD,MAAM,UAAU,GACd,KAAK,CAAC,UAAU,KAAK,SAAS,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS;QAC/D,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,UAAU,IAAI,EAAE,EAAE,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IACtE,OAAO,SAAS,CACd,KAAK,CACH,iBAAiB,EACjB,KAAK,CAAC,sBAAsB,EAC5B,KAAK,CAAC,aAAa,EACnB,KAAK,CAAC,KAAK,EACX,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,EACtB,SAAS,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,EAC9B,SAAS,CAAC,KAAK,CAAC,gBAAgB,IAAI,IAAI,CAAC,EACzC,SAAS,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,EAChF,SAAS,CAAC,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC,EACvC,KAAK,CAAC,aAAa,EACnB,KAAK,CAAC,aAAa,EACnB,KAAK,CAAC,KAAK,EACX,SAAS,CAAC,CAAC,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC,IAAI,EAAE,CAAC,CAC1C,GAAG,UAAU,CACf,CAAC;AACJ,CAAC;AAkBD;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,eAAe,CAAC,KAAiB,EAAE,aAAgC;IACjF,IAAI,KAAK,CAAC,cAAc,KAAK,oBAAoB,EAAE,CAAC;QAClD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,aAAa,KAAK,CAAC,cAAc,mBAAmB,oBAAoB,EAAE,EAAE,CAAC;IACrI,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChE,0FAA0F;QAC1F,uFAAuF;QACvF,oDAAoD;QACpD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAAC;IACzF,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;QACzC,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;YACf,6DAA6D;YAC7D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,EAAE,MAAM,EAAE,iCAAiC,CAAC,CAAC,WAAW,GAAG,EAAE,CAAC;QACpH,CAAC;QACD,IAAI,GAAG,KAAK,CAAC,CAAC,gBAAgB,EAAE,CAAC;YAC/B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,2BAA2B,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,WAAW,iDAAiD,EAAE,CAAC;QACxI,CAAC;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,kFAAkF;AAClF,qBAAqB;AACrB,kFAAkF;AAElF,6FAA6F;AAC7F,oFAAoF;AACpF,EAAE;AACF,gGAAgG;AAChG,6FAA6F;AAC7F,gDAAgD;AAChD,MAAM,WAAW,GAAG,eAAe,CAAC;AAEpC,SAAS,YAAY,CAAI,IAAY;IACnC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3C,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC3C,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAM,CAAC;IAC/B,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,eAAe,CAAC,IAAI,IAAI,oBAAoB,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACtG,CAAC;AACH,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,qBAAqB,CAAC,UAAkB;IACtD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;IACjD,OAAO;QACL,IAAI,CAAC,MAAM;YACT,sFAAsF;YACtF,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC;gBAAE,OAAO,SAAS,CAAC;YACxD,OAAO,YAAY,CAAgB,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC;QACvE,CAAC;QACD,KAAK,CAAC,EAAE;YACN,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,MAAM,OAAO,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;QACvE,CAAC;QACD,MAAM,CAAC,MAAM;YACX,uFAAuF;YACvF,oEAAoE;YACpE,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC;gBAAE,OAAO;YAC9C,IAAI,CAAC;gBAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;QACnG,CAAC;KACF,CAAC;AACJ,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,gBAAgB,CAAC,UAAkB;IACjD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAC3C,OAAO;QACL,GAAG,CAAC,SAAS;YACX,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC;gBAAE,OAAO,SAAS,CAAC;YACxD,OAAO,YAAY,CAAa,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,OAAO,CAAC,CAAC,CAAC;QACvE,CAAC;QACD,GAAG,CAAC,KAAK;YACP,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,SAAS,OAAO,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QAChF,CAAC;KACF,CAAC;AACJ,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,2BAA2B;IACzC,MAAM,CAAC,GAAG,IAAI,GAAG,EAAkB,CAAC;IACpC,OAAO;QACL,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE;YACX,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACtB,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAmB,CAAC;QAC5E,CAAC;QACD,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACxD,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;KAClC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB;IACpC,MAAM,CAAC,GAAG,IAAI,GAAG,EAAkB,CAAC;IACpC,OAAO;QACL,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE;YACT,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACrB,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAgB,CAAC;QACzE,CAAC;QACD,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;KACvD,CAAC;AACJ,CAAC"}
+{"version":3,"file":"reuse.js","sourceRoot":"","sources":["../../src/reuse.ts"],"names":[],"mappings":"AAAA,mDAAmD;AACnD,EAAE;AACF,0FAA0F;AAC1F,6FAA6F;AAC7F,wFAAwF;AACxF,2FAA2F;AAC3F,yFAAyF;AACzF,4FAA4F;AAC5F,gCAAgC;AAChC,EAAE;AACF,6FAA6F;AAC7F,2FAA2F;AAC3F,wFAAwF;AACxF,6FAA6F;AAC7F,2FAA2F;AAC3F,0FAA0F;AAC1F,6DAA6D;AAC7D,EAAE;AACF,oFAAoF;AACpF,2FAA2F;AAC3F,0FAA0F;AAC1F,kDAAkD;AAClD,EAAE;AACF,yFAAyF;AACzF,8FAA8F;AAC9F,4EAA4E;AAE5E,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAE3D;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,CAAC;AAEvC,kGAAkG;AAClG,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC;AAE3C,8FAA8F;AAC9F,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAEtC,MAAM,OAAO,eAAgB,SAAQ,KAAK;CAAG;AAc7C;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAIpC;IACC,OAAO,SAAS,CACd,SAAS,CAAC;QACR,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,QAAQ,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE;QACjD,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,IAAI;KAC3B,CAAC,CACH,CAAC;AACJ,CAAC;AA6DD;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,KAG5B;IACC,OAAO,SAAS,CACd,SAAS,CAAC;QACR,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,MAAM,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;aAC9B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;aACtD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;KACpE,CAAC,CACH,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,mBAAmB,CACjC,CAAc,EACd,CAAc,EACd,OAAqC,EAAE;IAEvC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAA6B,EAAE,CAAC;QAC3D,IAAI,CAAC,KAAK,eAAe,IAAI,IAAI,CAAC,cAAc;YAAE,SAAS;QAC3D,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,kFAAkF;AAClF,iBAAiB;AACjB,kFAAkF;AAElF;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,iBAAiB,CAAC,UAAkB,EAAE,WAA+B,EAAE,IAAY;IACjG,OAAO,GAAG,UAAU,SAAS,WAAW,IAAI,UAAU,SAAS,IAAI,EAAE,CAAC;AACxE,CAAC;AAkND;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,aAAa,CAAC,KAAoB;IAChD,MAAM,KAAK,GAAG,CAAC,GAAG,KAAe,EAAU,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7F,8FAA8F;IAC9F,6FAA6F;IAC7F,kDAAkD;IAClD,MAAM,UAAU,GACd,KAAK,CAAC,UAAU,KAAK,SAAS,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS;QAC/D,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,UAAU,IAAI,EAAE,EAAE,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IACtE,OAAO,SAAS,CACd,KAAK,CACH,iBAAiB,EACjB,KAAK,CAAC,sBAAsB,EAC5B,KAAK,CAAC,aAAa,EACnB,KAAK,CAAC,KAAK,EACX,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,EACtB,SAAS,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,EAC9B,SAAS,CAAC,KAAK,CAAC,gBAAgB,IAAI,IAAI,CAAC,EACzC,SAAS,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,EAChF,SAAS,CAAC,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC,EACvC,KAAK,CAAC,aAAa,EACnB,KAAK,CAAC,aAAa,EACnB,KAAK,CAAC,KAAK,EACX,SAAS,CAAC,CAAC,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC,IAAI,EAAE,CAAC,CAC1C,GAAG,UAAU,CACf,CAAC;AACJ,CAAC;AAkBD;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,eAAe,CAAC,KAAiB,EAAE,aAAgC;IACjF,IAAI,KAAK,CAAC,cAAc,KAAK,oBAAoB,EAAE,CAAC;QAClD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,aAAa,KAAK,CAAC,cAAc,mBAAmB,oBAAoB,EAAE,EAAE,CAAC;IACrI,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChE,0FAA0F;QAC1F,uFAAuF;QACvF,oDAAoD;QACpD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAAC;IACzF,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;QACzC,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;YACf,6DAA6D;YAC7D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,EAAE,MAAM,EAAE,iCAAiC,CAAC,CAAC,WAAW,GAAG,EAAE,CAAC;QACpH,CAAC;QACD,IAAI,GAAG,KAAK,CAAC,CAAC,gBAAgB,EAAE,CAAC;YAC/B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,2BAA2B,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,WAAW,iDAAiD,EAAE,CAAC;QACxI,CAAC;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,kFAAkF;AAClF,qBAAqB;AACrB,kFAAkF;AAElF,6FAA6F;AAC7F,oFAAoF;AACpF,EAAE;AACF,gGAAgG;AAChG,6FAA6F;AAC7F,gDAAgD;AAChD,MAAM,WAAW,GAAG,eAAe,CAAC;AAEpC,SAAS,YAAY,CAAI,IAAY;IACnC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3C,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC3C,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAM,CAAC;IAC/B,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,eAAe,CAAC,IAAI,IAAI,oBAAoB,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACtG,CAAC;AACH,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,qBAAqB,CAAC,UAAkB;IACtD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;IACjD,OAAO;QACL,IAAI,CAAC,MAAM;YACT,sFAAsF;YACtF,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC;gBAAE,OAAO,SAAS,CAAC;YACxD,OAAO,YAAY,CAAgB,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC;QACvE,CAAC;QACD,KAAK,CAAC,EAAE;YACN,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,MAAM,OAAO,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;QACvE,CAAC;QACD,MAAM,CAAC,MAAM;YACX,uFAAuF;YACvF,oEAAoE;YACpE,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC;gBAAE,OAAO;YAC9C,IAAI,CAAC;gBAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;QACnG,CAAC;KACF,CAAC;AACJ,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,gBAAgB,CAAC,UAAkB;IACjD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAC3C,OAAO;QACL,GAAG,CAAC,SAAS;YACX,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC;gBAAE,OAAO,SAAS,CAAC;YACxD,OAAO,YAAY,CAAa,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,OAAO,CAAC,CAAC,CAAC;QACvE,CAAC;QACD,GAAG,CAAC,KAAK;YACP,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,SAAS,OAAO,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QAChF,CAAC;KACF,CAAC;AACJ,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,2BAA2B;IACzC,MAAM,CAAC,GAAG,IAAI,GAAG,EAAkB,CAAC;IACpC,OAAO;QACL,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE;YACX,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACtB,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAmB,CAAC;QAC5E,CAAC;QACD,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACxD,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;KAClC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB;IACpC,MAAM,CAAC,GAAG,IAAI,GAAG,EAAkB,CAAC;IACpC,OAAO;QACL,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE;YACT,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACrB,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAgB,CAAC;QACzE,CAAC;QACD,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;KACvD,CAAC;AACJ,CAAC"}

package/dist/src/runtime.d.ts

@@ -1,10 +1,12 @@
 import type { Standard, Agent, Chair } from "./composition.js";
 import { type ToolProviderRegistry } from "./tool_providers.js";
 import { type Realization } from "./venue_realize.js";
+import type { VenueRealizer, CredentialResolver } from "./venue_realizer.js";
 import type { Venue } from "./chart.js";
 export declare const CORE_TO_PRIMITIVE: Record<string, Agent["primitives"][number]>;
 import { type CheckpointStore, type ReuseStore, type PriorBudgetState } from "./reuse.js";
 import type { OutputStore, OutputRecord } from "./outputs.js";
+import { type GigConformanceResult } from "./gig_conformance.js";
 import { type Ledger, type GigUsage } from "./ledger.js";
 import type { Depth } from "./pricing.js";
 import type { SkillRecord, EvalRecord } from "./loader.js";
@@ -22,6 +24,11 @@ export interface AgentInvocationContext {
     depth?: Depth | undefined;
     realization?: Realization | undefined;
     venue?: Venue | undefined;
+    substrateMcpConfigs?: Readonly<Record<string, unknown>> | undefined;
+    seatExec?: {
+        container: string;
+        workspace: string;
+    } | undefined;
     turn_budget?: number | undefined;
     turn_reserve?: number | undefined;
 }
@@ -67,6 +74,19 @@ export type GigProgressEvent = {
     role: string;
     agent: string;
     missing: string[];
+} | {
+    type: "lineage_adoption";
+    phase: string;
+    role: string;
+    /** true only when the verdict passed, was signed, and named a record. */
+    adopt: boolean;
+    /** content_sha of the lineage-record the institution would be grounded in. */
+    record_ref?: string;
+    /** WHICH institution it grounds. Absent on a refusal. */
+    institution_slug?: string;
+    approved_by?: string;
+    /** every applicable refusal, not just the first — see lineageAdoption. */
+    refusals?: string[];
 } | {
     type: "agent_event";
     phase: string;
@@ -230,6 +250,19 @@ export interface RunDeps {
      * away; noticing a silent $6 is not.
      */
     resume_from?: string | undefined;
+    /**
+     * #20 — the caller supplied NO --input on this (resume) dispatch. Default-false semantics:
+     * absent or false means "a value WAS supplied" (even an explicit `{}`); true means "the caller
+     * stated no payload at all". It exists for the same reason `depth?: Depth | undefined` does —
+     * an omitted value must be distinguishable from a stated one. The dispatch payload is never
+     * carried in a checkpoint (only its hash is; see src/reuse.ts RunIdentity.gig_input_sha), so an
+     * omitted --input cannot be reconstructed. Instead, on a resume whose every remaining chair is
+     * human, the gate INHERITS the checkpoint's recorded gig_input_sha rather than refusing on the
+     * drift to sha256('{}'). A SUPPLIED value is never inherited, so a disagreeing --input still
+     * gates; and while any remaining chair is a MODEL chair the gate is unchanged. worker.ts passes
+     * the real claim input and never sets this, so the gate stays fully active for worker runs.
+     */
+    gig_input_omitted?: boolean | undefined;
     /**
      * The chair-level reuse cache. Presence IS the opt-in — the runtime never constructs one —
      * and it enables BOTH reads and writes.
@@ -277,6 +310,44 @@ export interface RunDeps {
      *  any class present but NOT declared by the venue's `credential_surface` is a breach that fails
      *  the gig closed. Absent = none present (deny-by-default: an empty surface admits nothing). */
     credentialsPresent?: string[] | undefined;
+    /**
+     * The SUBSTRATE seam (substrate → dispatch wiring). When supplied AND the resolved venue declares
+     * `mcp_servers`, runGig realizes the substrate (a real room) alongside the policy `realization`:
+     * it calls `venueRealizer.realize(venue, credentialResolver, { gigId })`, threads the returned
+     * handle's `mcpServerConfigs` onto every chair's `AgentInvocationContext.substrateMcpConfigs` so
+     * the spawn reaches the servers running inside the room, and tears the handle down in the same
+     * finally block that tears down the policy realization.
+     *
+     * ABSENT = the substrate is skipped entirely: a venue-named gig still runs the policy gauntlet and
+     * confines its chairs by construction, exactly as before this wire existed — the room is opt-in on
+     * the deployment supplying an implementation, never mandatory. The engine ships the interface
+     * (src/venue_realizer.ts); the deployment supplies `dockerComposeRealizer()`/`localProcessRealizer()`
+     * and tests supply the daemon-free substitute (a realizer with an injected `run` seam).
+     */
+    venueRealizer?: VenueRealizer | undefined;
+    /**
+     * How the substrate realizer binds credentials into the room. Passed as the required positional
+     * `credentialResolver` argument to `venueRealizer.realize()`. Absent → `async () => ({})`, an empty
+     * resolver: the interface is satisfied without a new mandatory field, and a class the resolver does
+     * not supply reaches the room as an empty secret that fails at the service that reads it — the
+     * direction a missing credential should fail. The deployment supplies the real resolver.
+     */
+    credentialResolver?: CredentialResolver | undefined;
+    /**
+     * The repository this RUN operates on — the SUBJECT of work, named by the RUN and NEVER by the
+     * venue. A venue is one AT-REST room and is one-to-MANY against repositories: one room serves many
+     * repositories, so pinning the repository on the venue would mint a venue per repository. When
+     * supplied AND the resolved venue has a realizer, it is threaded into the substrate realizer as
+     * `RealizeOpts.repoUrl`, so the realized room's workspace is populated (through src/workspace.ts
+     * `prepareWorkspace`, the SAME mechanism the drain uses) with a clone of THIS repository — and two
+     * concurrent code-editing gigs against the same room get DISJOINT trees.
+     *
+     * The source is EXPLICIT: a dispatch field on the server path, the claim's governed `repo_url`
+     * column on the drain path. It is never process.cwd() and never an ambient host path — inferring the
+     * operator's own checkout is exactly the isolation failure an explicit source forecloses. ABSENT =
+     * the room declines to populate (an empty read-only workspace) and no git credential is minted.
+     */
+    repoUrl?: string | undefined;
 }
 /**
  * Per-gig cost-budget input. Honors budget-state.json schema (PR #56). Only
@@ -472,6 +543,17 @@ export interface GigResult {
     movement_id?: string;
     genome_hash: string;
     run_fingerprint: string;
+    /**
+     * The gig-close CONFORMANCE classification — does this sealed run fit its own construction? A
+     * pure, deterministic verdict over (the standard, the sealed set) along two axes, FIT (every
+     * chair's declared output_contract is satisfied) and TIMING (every record's engine-stamped
+     * input_shas respect the declared edges). It is a CLASSIFIER that routes review, not a gate:
+     * present as a PROPERTY of the run beside `run_fingerprint`, deliberately NOT folded into it (a
+     * run containing its own grade would be self-referential) and never sealed as an output INSIDE
+     * the gig it grades. Present only on the completion path — an `awaiting_approval` return is a
+     * distinct shape whose INCOMPLETE verdict is the classifier's job to state when it is called.
+     */
+    conformance?: GigConformanceResult;
     /**
      * Records this run CONSUMED but did not produce — an earlier movement's sealed outputs, carried
      * in over a chart edge. Present only when seeds were actually read, so its absence is the claim