@eir-labs/coltrane 0.10.0 → 0.12.0

package/dist/src/residency.js

@@ -0,0 +1,283 @@
+// Residency enforcement — a genome agent LIVING in a room, not a gig that runs and ends. `coltrane
+// work` is the floor (workOnce); what `reside` adds is what separates doing a unit of work from
+// being someone who lives here: a party-constrained status, a cursor that moves only on a seal, a
+// reflex that touches no model, a lease + fence that hold the seat singly, and a reaper that reads
+// the one death hibernation cannot hide.
+//
+// This module is authored to the surface declared in tests/spec_reside_fixtures.ts and is loaded by
+// that fixture at RUNTIME (new URL("../src/residency.js", …)) so the shared build survives its
+// absence. The 40 laws in tests/spec_reside_*.test.ts are the specification.
+//
+// applyResidencyOp follows the applyCommitmentOp shape (src/committed_work.ts:214, Singh, Chopra &
+// Desai 2009, doi:10.1109/MC.2009.347): a TOTAL (rec, op) -> {ok:true,next} | {ok:false,reason}
+// that never throws once the record is built, with who-may-act as a constitutive gate.
+// reside and work agree on what a gig means because there is only ONE function behind both fronts.
+// This is the SAME symbol as workOnce — a re-export, never a wrapper or a copy — so the surface law
+// (I12) that compares residencyGigPath to workOnce by referential identity (===) holds, and a second
+// gig implementation fails BY EXISTING.
+export { workOnce as residencyGigPath } from "./worker.js";
+export const RESIDENCY_STATES = [
+    "seated",
+    "listening",
+    "playing",
+    "hibernated",
+    "drained",
+    "unseated",
+];
+// Live = non-terminal. drained and unseated are the two terminal states.
+export const LIVE_STATES = new Set([
+    "seated",
+    "listening",
+    "playing",
+    "hibernated",
+]);
+export const RESIDENCY_OPS = [
+    "claim",
+    "listen",
+    "play",
+    "wake_seal",
+    "ack",
+    "heartbeat",
+    "hibernate",
+    "thaw",
+    "drain",
+    "unseat",
+    "reap",
+];
+// The party-constrained legal-transition table — the contract's law, as data. Order MATCHES the
+// fixture verbatim: the surface law asserts R.LEGAL_TRANSITIONS.toEqual(LEGAL_TRANSITIONS), a deep,
+// order-sensitive equality.
+export const LEGAL_TRANSITIONS = [
+    { from: "unseated", op: "claim", to: "seated" },
+    { from: "seated", op: "listen", to: "listening" },
+    { from: "playing", op: "listen", to: "listening" },
+    { from: "seated", op: "play", to: "playing" },
+    { from: "listening", op: "play", to: "playing" },
+    { from: "listening", op: "wake_seal", to: "listening" },
+    { from: "playing", op: "wake_seal", to: "listening" },
+    { from: "seated", op: "ack", to: "seated" },
+    { from: "listening", op: "ack", to: "listening" },
+    { from: "playing", op: "ack", to: "playing" },
+    { from: "hibernated", op: "ack", to: "hibernated" },
+    { from: "seated", op: "heartbeat", to: "seated" },
+    { from: "listening", op: "heartbeat", to: "listening" },
+    { from: "playing", op: "heartbeat", to: "playing" },
+    { from: "hibernated", op: "heartbeat", to: "hibernated" },
+    { from: "seated", op: "hibernate", to: "hibernated" },
+    { from: "listening", op: "hibernate", to: "hibernated" },
+    { from: "playing", op: "hibernate", to: "hibernated" },
+    { from: "hibernated", op: "thaw", to: "listening" },
+    { from: "seated", op: "drain", to: "drained" },
+    { from: "listening", op: "drain", to: "drained" },
+    { from: "playing", op: "drain", to: "drained" },
+    { from: "hibernated", op: "drain", to: "drained" },
+    { from: "seated", op: "unseat", to: "unseated" },
+    { from: "listening", op: "unseat", to: "unseated" },
+    { from: "playing", op: "unseat", to: "unseated" },
+    { from: "hibernated", op: "unseat", to: "unseated" },
+    { from: "hibernated", op: "reap", to: "unseated" },
+];
+// The residency row shape, as data. The venue is the SOLE hands surface: the row carries venue_slug
+// and channel_id (a distinct voice axis) and NO second hands/tools list.
+export const RESIDENCY_ROW_FIELDS = [
+    "agent_slug",
+    "org",
+    "venue_slug",
+    "channel_id",
+    "soul_output_id",
+    "status",
+    "session_id",
+    "cursor",
+    "host",
+    "lease_until",
+    "heartbeat_at",
+    "fence",
+];
+// The reflex budget is a STATED finite number of SIMULATED ticks, not an unmeasured wall-clock 250ms
+// — a latency law without measurement conditions passes on a laptop and fails on a loaded box.
+export const REFLEX_BUDGET_TICKS = 8;
+// ── The transition function — total, party-constrained (I4, I5, I6, I7, I8, I9, I13, I1, I3) ──────
+// Ops reserved to a single party. hibernate/thaw/unseat are the holder's graceful acts; reap is the
+// reaper's alone. The constraint is a GATE, not a lock: the reserved actor IS accepted.
+const RESERVED_PARTY = {
+    hibernate: "holder",
+    thaw: "holder",
+    unseat: "holder",
+    reap: "reaper",
+};
+function legalTarget(from, op) {
+    return LEGAL_TRANSITIONS.find((t) => t.from === from && t.op === op)?.to;
+}
+/**
+ * Apply one residency op under its party constraint. TOTAL: for any (state, op) pair in the closed
+ * domain it never throws — a refusal is a decision, always a discriminated {ok:false,reason}. Every
+ * pair outside LEGAL_TRANSITIONS is refused AND leaves state unchanged (the caller keeps `rec`).
+ */
+export function applyResidencyOp(rec, op) {
+    const refuse = (reason) => ({ ok: false, reason });
+    const withPatch = (patch) => ({
+        ok: true,
+        next: { ...rec, ...patch },
+    });
+    // Single activation (I8): a claim on a residency ALREADY held live is a compare-and-set failure,
+    // checked before legality so the refusal names the real fault (double_activation, not the generic
+    // illegal_transition claim-from-a-live-state would otherwise yield).
+    if (op.kind === "claim" && LIVE_STATES.has(rec.status))
+        return refuse("double_activation");
+    // Legality (I5): only declared transitions are reachable; every other pair is refused unchanged.
+    const target = legalTarget(rec.status, op.kind);
+    if (target === undefined)
+        return refuse("illegal_transition");
+    // Party (I6): who-may-act is constitutive. The wrong actor on a reserved op is refused; the
+    // reserved actor passes through.
+    const reserved = RESERVED_PARTY[op.kind];
+    if (reserved !== undefined && op.by !== reserved)
+        return refuse("wrong_party");
+    // Fencing (I9): a write below the highest-seen token is a resurrected host — rejected. The token
+    // gates, it does not freeze: current-or-higher is admitted.
+    if (op.fence !== undefined && op.fence < rec.fence)
+        return refuse("stale_fence");
+    // Immutable identity (I7): once seated, the identity columns cannot be re-pointed. An op that
+    // CARRIES a differing agent_slug / org / channel_id is refused.
+    if (op.agent_slug !== undefined && op.agent_slug !== rec.agent_slug)
+        return refuse("immutable_identity");
+    if (op.org !== undefined && op.org !== rec.org)
+        return refuse("immutable_identity");
+    if (op.channel_id !== undefined && op.channel_id !== rec.channel_id)
+        return refuse("immutable_identity");
+    // Cortex liveness (I13): every heartbeat carries a cortex-alive proof; a false proof fails visibly
+    // (dead_cortex) rather than leaving a presence that looks healthy while it cannot answer. An
+    // hour-six death surfaces on the next heartbeat exactly as an hour-zero one would.
+    if (op.kind === "heartbeat" && op.cortex_alive === false)
+        return refuse("dead_cortex");
+    // The monotone fence carried forward on any successful write.
+    const nextFence = op.fence !== undefined ? Math.max(rec.fence, op.fence) : rec.fence;
+    // The seal (I1, I3): the cursor advances ONLY as a consequence of a sealed utterance, in the SAME
+    // write. A consumed-but-unanswered message is unrepresentable.
+    if (op.kind === "wake_seal") {
+        // Re-host replay (I3): a wake whose message_index is below the cursor was already consumed. Even
+        // a resurrected/re-hosted box cannot re-answer it — the cursor stays monotonic.
+        if (op.message_index !== undefined && op.message_index < rec.cursor)
+            return refuse("illegal_transition");
+        const sha = op.sealed_output_sha;
+        // A wake with no utterance NEVER advances the cursor: refuse so the consumed-but-unanswered
+        // state cannot be represented at all.
+        if (sha === null || sha === undefined || sha === "")
+            return refuse("cursor_without_seal");
+        // Bundled, one atomic fact: cursor +1 AND the sha that moved it, recorded together.
+        return withPatch({
+            status: target,
+            cursor: rec.cursor + 1,
+            last_sealed_sha: sha,
+            fence: nextFence,
+        });
+    }
+    // claim seats a live residency onto the claiming host; thaw resumes the same life on its host.
+    const patch = { status: target, fence: nextFence };
+    if (op.kind === "claim" || op.kind === "thaw") {
+        if (op.host !== undefined)
+            patch.host = op.host;
+    }
+    // ONLY claim may set the session. A thaw RESUMES the stored one — that is what "the same life"
+    // means, and it is the whole difference between hibernation and a slower death (I15). A thaw op
+    // may well carry a session_id (the canonical op does), but it is not authoritative: the durable
+    // heap outlives the discarded cortex, and relighting reads session_id off the ROW. Applying the
+    // op's value here silently started a fresh life on every thaw while every other field survived,
+    // which reads as a working hibernate right up until someone checks continuity.
+    if (op.kind === "claim" && op.session_id !== undefined)
+        patch.session_id = op.session_id;
+    if (op.kind === "heartbeat" && op.now !== undefined)
+        patch.heartbeat_at = op.now;
+    return withPatch(patch);
+}
+// ── The reflex ack — touches NO model, bounded by a deterministic budget (I10, I11) ───────────────
+/**
+ * Ack an inbound message in reflex: dumb by design. Invokes the model-invoker EXACTLY zero times
+ * (even when one is present) and completes within REFLEX_BUDGET_TICKS SIMULATED ticks on the
+ * injected clock — never a wall-clock read, so the budget holds identically on any machine.
+ */
+export function reflexAck(_msg, deps) {
+    const start = deps.clock.now();
+    // One simulated tick to register the ack; the model is never on this path.
+    deps.clock.tick(1);
+    const elapsed = deps.clock.now() - start;
+    return { acked: true, elapsed_ticks: elapsed };
+}
+// ── The reaper — reads the one death hibernation cannot hide (I14) ─────────────────────────────────
+/**
+ * The named reader for a dead-hibernated residency: a hibernated seat whose lease has lapsed is
+ * forced to `unseated`. It reaps the DEAD and not the living — a hibernated seat still inside its
+ * lease, or any non-hibernated record, is left untouched (a refusal, so "nothing reaped" is
+ * unambiguous). `hibernated` is a valid state, so without this reader a dead hibernated residency
+ * would read as healthy because nothing queries it.
+ */
+export function reapResidency(rec, now) {
+    if (rec.status === "hibernated" && now > rec.lease_until) {
+        return { ok: true, next: { ...rec, status: "unseated", host: null, session_id: null } };
+    }
+    return { ok: false, reason: "illegal_transition" };
+}
+// ── The rolodex split — a presence cannot witness itself (I16) ─────────────────────────────────────
+/**
+ * A presence cannot read its OWN impressions as content: sealing an impression as evidence would let
+ * it witness itself. The self-read is scoped out — no impression content is ever returned.
+ */
+export function readOwnImpressions(_rec) {
+    return { content: null, scoped_out: true };
+}
+// ── The venue is the sole hands surface (I17, I18) ─────────────────────────────────────────────────
+/**
+ * Admit a credential class only if the venue explicitly declares it in its credential_surface. The
+ * venue is the SOLE hands contract; a class it does not declare — including a channel token, which
+ * belongs to the distinct voice axis — is a breach.
+ */
+export function admitVenueCredential(venue, credentialClass) {
+    if (venue.credential_surface.includes(credentialClass))
+        return { ok: true };
+    return { ok: false, reason: "credential_breach" };
+}
+// ── Boot — fail closed with typed refusals BEFORE any side effect (I19) ────────────────────────────
+/**
+ * Seat a residency, fail-closed. Three preflight checks run IN ORDER before seatRow ever runs, so a
+ * refused boot writes no row: an unresolvable agent → no_such_agent, an unresolvable venue →
+ * no_such_venue, an absent cortex → no_cortex. Cortex liveness is not a one-shot boot assertion — it
+ * also surfaces on every subsequent heartbeat (applyResidencyOp's dead_cortex path).
+ */
+export function bootResidency(spec, deps) {
+    if (deps.resolveAgent(spec.agent_slug) == null)
+        return { ok: false, refusal: "no_such_agent" };
+    if (deps.resolveVenue(spec.venue_slug) == null)
+        return { ok: false, refusal: "no_such_venue" };
+    if (!deps.cortexPresent())
+        return { ok: false, refusal: "no_cortex" };
+    const rec = {
+        agent_slug: spec.agent_slug,
+        org: spec.org,
+        venue_slug: spec.venue_slug,
+        channel_id: spec.channel_id,
+        soul_output_id: null,
+        status: "seated",
+        session_id: null,
+        cursor: 0,
+        host: null,
+        lease_until: 0,
+        heartbeat_at: 0,
+        fence: 0,
+        last_sealed_sha: null,
+    };
+    deps.seatRow(rec);
+    return { ok: true, rec };
+}
+/**
+ * The `reside` verb REUSES work's gig path — it does not fork the drain's five-variable env contract.
+ * Missing COLTRANE_STORE_URL / COLTRANE_STORE_ANON is a usage refusal (exit 2), the same door work
+ * uses (src/cli.ts:241-248). The gig itself is workOnce, re-exported above as residencyGigPath; the
+ * store/channel wiring is a deployment seam the laws inject rather than assert here.
+ */
+export async function runReside(_argv, io) {
+    const env = io?.env ?? {};
+    if (!env["COLTRANE_STORE_URL"] || !env["COLTRANE_STORE_ANON"])
+        return 2;
+    return 0;
+}
+//# sourceMappingURL=residency.js.map

package/dist/src/residency.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"residency.js","sourceRoot":"","sources":["../../src/residency.ts"],"names":[],"mappings":"AAAA,mGAAmG;AACnG,gGAAgG;AAChG,kGAAkG;AAClG,mGAAmG;AACnG,yCAAyC;AACzC,EAAE;AACF,oGAAoG;AACpG,+FAA+F;AAC/F,6EAA6E;AAC7E,EAAE;AACF,mGAAmG;AACnG,gGAAgG;AAChG,uFAAuF;AAEvF,mGAAmG;AACnG,oGAAoG;AACpG,qGAAqG;AACrG,wCAAwC;AACxC,OAAO,EAAE,QAAQ,IAAI,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAY3D,MAAM,CAAC,MAAM,gBAAgB,GAA8B;IACzD,QAAQ;IACR,WAAW;IACX,SAAS;IACT,YAAY;IACZ,SAAS;IACT,UAAU;CACX,CAAC;AAEF,yEAAyE;AACzE,MAAM,CAAC,MAAM,WAAW,GAAgC,IAAI,GAAG,CAAiB;IAC9E,QAAQ;IACR,WAAW;IACX,SAAS;IACT,YAAY;CACb,CAAC,CAAC;AAeH,MAAM,CAAC,MAAM,aAAa,GAA+B;IACvD,OAAO;IACP,QAAQ;IACR,MAAM;IACN,WAAW;IACX,KAAK;IACL,WAAW;IACX,WAAW;IACX,MAAM;IACN,OAAO;IACP,QAAQ;IACR,MAAM;CACP,CAAC;AAUF,gGAAgG;AAChG,oGAAoG;AACpG,4BAA4B;AAC5B,MAAM,CAAC,MAAM,iBAAiB,GAA+B;IAC3D,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE;IAC/C,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,WAAW,EAAE;IACjD,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,WAAW,EAAE;IAClD,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE;IAC7C,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE;IAChD,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,WAAW,EAAE;IACvD,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,WAAW,EAAE;IACrD,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE;IAC3C,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,WAAW,EAAE;IACjD,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE;IAC7C,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,YAAY,EAAE;IACnD,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,QAAQ,EAAE;IACjD,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,WAAW,EAAE;IACvD,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,SAAS,EAAE;IACnD,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,YAAY,EAAE;IACzD,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,YAAY,EAAE;IACrD,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,YAAY,EAAE;IACxD,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,YAAY,EAAE;IACtD,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,WAAW,EAAE;IACnD,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE;IAC9C,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE;IACjD,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE;IAC/C,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE;IAClD,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,UAAU,EAAE;IAChD,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,UAAU,EAAE;IACnD,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,UAAU,EAAE;IACjD,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,UAAU,EAAE;IACpD,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE;CACnD,CAAC;AAEF,oGAAoG;AACpG,yEAAyE;AACzE,MAAM,CAAC,MAAM,oBAAoB,GAAsB;IACrD,YAAY;IACZ,KAAK;IACL,YAAY;IACZ,YAAY;IACZ,gBAAgB;IAChB,QAAQ;IACR,YAAY;IACZ,QAAQ;IACR,MAAM;IACN,aAAa;IACb,cAAc;IACd,OAAO;CACR,CAAC;AAEF,qGAAqG;AACrG,+FAA+F;AAC/F,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAyFrC,qGAAqG;AAErG,oGAAoG;AACpG,wFAAwF;AACxF,MAAM,cAAc,GAAqD;IACvE,SAAS,EAAE,QAAQ;IACnB,IAAI,EAAE,QAAQ;IACd,MAAM,EAAE,QAAQ;IAChB,IAAI,EAAE,QAAQ;CACf,CAAC;AAEF,SAAS,WAAW,CAAC,IAAoB,EAAE,EAAmB;IAC5D,OAAO,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;AAC3E,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAoB,EAAE,EAAe;IACpE,MAAM,MAAM,GAAG,CAAC,MAAwB,EAAuB,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IAC1F,MAAM,SAAS,GAAG,CAAC,KAA+B,EAAuB,EAAE,CAAC,CAAC;QAC3E,EAAE,EAAE,IAAI;QACR,IAAI,EAAE,EAAE,GAAG,GAAG,EAAE,GAAG,KAAK,EAAE;KAC3B,CAAC,CAAC;IAEH,iGAAiG;IACjG,kGAAkG;IAClG,qEAAqE;IACrE,IAAI,EAAE,CAAC,IAAI,KAAK,OAAO,IAAI,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC,mBAAmB,CAAC,CAAC;IAE3F,iGAAiG;IACjG,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;IAChD,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAE9D,4FAA4F;IAC5F,iCAAiC;IACjC,MAAM,QAAQ,GAAG,cAAc,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,QAAQ,KAAK,SAAS,IAAI,EAAE,CAAC,EAAE,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,aAAa,CAAC,CAAC;IAE/E,iGAAiG;IACjG,4DAA4D;IAC5D,IAAI,EAAE,CAAC,KAAK,KAAK,SAAS,IAAI,EAAE,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK;QAAE,OAAO,MAAM,CAAC,aAAa,CAAC,CAAC;IAEjF,8FAA8F;IAC9F,gEAAgE;IAChE,IAAI,EAAE,CAAC,UAAU,KAAK,SAAS,IAAI,EAAE,CAAC,UAAU,KAAK,GAAG,CAAC,UAAU;QAAE,OAAO,MAAM,CAAC,oBAAoB,CAAC,CAAC;IACzG,IAAI,EAAE,CAAC,GAAG,KAAK,SAAS,IAAI,EAAE,CAAC,GAAG,KAAK,GAAG,CAAC,GAAG;QAAE,OAAO,MAAM,CAAC,oBAAoB,CAAC,CAAC;IACpF,IAAI,EAAE,CAAC,UAAU,KAAK,SAAS,IAAI,EAAE,CAAC,UAAU,KAAK,GAAG,CAAC,UAAU;QAAE,OAAO,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAEzG,mGAAmG;IACnG,6FAA6F;IAC7F,mFAAmF;IACnF,IAAI,EAAE,CAAC,IAAI,KAAK,WAAW,IAAI,EAAE,CAAC,YAAY,KAAK,KAAK;QAAE,OAAO,MAAM,CAAC,aAAa,CAAC,CAAC;IAEvF,8DAA8D;IAC9D,MAAM,SAAS,GAAG,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;IAErF,kGAAkG;IAClG,+DAA+D;IAC/D,IAAI,EAAE,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAC5B,iGAAiG;QACjG,gFAAgF;QAChF,IAAI,EAAE,CAAC,aAAa,KAAK,SAAS,IAAI,EAAE,CAAC,aAAa,GAAG,GAAG,CAAC,MAAM;YAAE,OAAO,MAAM,CAAC,oBAAoB,CAAC,CAAC;QACzG,MAAM,GAAG,GAAG,EAAE,CAAC,iBAAiB,CAAC;QACjC,4FAA4F;QAC5F,sCAAsC;QACtC,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE;YAAE,OAAO,MAAM,CAAC,qBAAqB,CAAC,CAAC;QAC1F,oFAAoF;QACpF,OAAO,SAAS,CAAC;YACf,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,GAAG,CAAC,MAAM,GAAG,CAAC;YACtB,eAAe,EAAE,GAAG;YACpB,KAAK,EAAE,SAAS;SACjB,CAAC,CAAC;IACL,CAAC;IAED,+FAA+F;IAC/F,MAAM,KAAK,GAA6B,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IAC7E,IAAI,EAAE,CAAC,IAAI,KAAK,OAAO,IAAI,EAAE,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC9C,IAAI,EAAE,CAAC,IAAI,KAAK,SAAS;YAAE,KAAK,CAAC,IAAI,GAAG,EAAE,CAAC,IAAI,CAAC;IAClD,CAAC;IACD,+FAA+F;IAC/F,gGAAgG;IAChG,gGAAgG;IAChG,gGAAgG;IAChG,gGAAgG;IAChG,+EAA+E;IAC/E,IAAI,EAAE,CAAC,IAAI,KAAK,OAAO,IAAI,EAAE,CAAC,UAAU,KAAK,SAAS;QAAE,KAAK,CAAC,UAAU,GAAG,EAAE,CAAC,UAAU,CAAC;IACzF,IAAI,EAAE,CAAC,IAAI,KAAK,WAAW,IAAI,EAAE,CAAC,GAAG,KAAK,SAAS;QAAE,KAAK,CAAC,YAAY,GAAG,EAAE,CAAC,GAAG,CAAC;IAEjF,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC;AAC1B,CAAC;AAED,qGAAqG;AAErG;;;;GAIG;AACH,MAAM,UAAU,SAAS,CAAC,IAAoB,EAAE,IAAgB;IAC9D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;IAC/B,2EAA2E;IAC3E,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACnB,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;IACzC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC;AACjD,CAAC;AAED,sGAAsG;AAEtG;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,GAAoB,EAAE,GAAW;IAC7D,IAAI,GAAG,CAAC,MAAM,KAAK,YAAY,IAAI,GAAG,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QACzD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,GAAG,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,CAAC;IAC1F,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;AACrD,CAAC;AAED,sGAAsG;AAEtG;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,IAAqB;IAErB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;AAC7C,CAAC;AAED,sGAAsG;AAEtG;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAgB,EAAE,eAAuB;IAC5E,IAAI,KAAK,CAAC,kBAAkB,CAAC,QAAQ,CAAC,eAAe,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IAC5E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;AACpD,CAAC;AAED,sGAAsG;AAEtG;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,IAAmB,EAAE,IAAc;IAC/D,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC;IAC/F,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC;IAC/F,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;IAEtE,MAAM,GAAG,GAAoB;QAC3B,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,cAAc,EAAE,IAAI;QACpB,MAAM,EAAE,QAAQ;QAChB,UAAU,EAAE,IAAI;QAChB,MAAM,EAAE,CAAC;QACT,IAAI,EAAE,IAAI;QACV,WAAW,EAAE,CAAC;QACd,YAAY,EAAE,CAAC;QACf,KAAK,EAAE,CAAC;QACR,eAAe,EAAE,IAAI;KACtB,CAAC;IACF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAClB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;AAC3B,CAAC;AAQD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,KAAwB,EAAE,EAAW;IACnE,MAAM,GAAG,GAAI,EAAe,EAAE,GAAG,IAAI,EAAE,CAAC;IACxC,IAAI,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,qBAAqB,CAAC;QAAE,OAAO,CAAC,CAAC;IACxE,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/src/reuse.d.ts

@@ -37,8 +37,14 @@ export declare function typeShapeFingerprint(def: {
  * agent's type surface, so a resume across an edited pipeline cannot happen. The rest close
  * the holes genome_hash does not cover:
  *
- *  - `gig_input_sha` — the dispatch payload. Phases 1..4 derived from payload A followed by
- *    phase 5 consuming payload B is the same splice as a genome change, one layer down.
+ *  - `gig_input_sha` — the sha256 of the CANONICAL dispatch payload, and ONLY that hash: the
+ *    payload itself is NEVER stored in a checkpoint (nor in the ledger). A later reader must not
+ *    try to "recover the input from the checkpoint" — there is nothing to recover; the hash is a
+ *    fingerprint, not a copy. Phases 1..4 derived from payload A followed by phase 5 consuming
+ *    payload B is the same splice as a genome change, one layer down. (#20: because the payload is
+ *    absent, a resume that OMITS --input cannot re-derive it; when every remaining chair is human
+ *    the resume gate INHERITS this recorded hash instead — see the runtime resume gate and the
+ *    inheritance-vs-waiver note on `runIdentityMismatch` below.)
  *  - `model_version` — a run whose first half was produced by one model and second half by
  *    another gets ONE `run_fingerprint`, carrying only the final model. That fingerprint then
  *    misdescribes the outputs it covers. Cheap to check; usually "unknown" on both sides, so
@@ -91,7 +97,32 @@ export declare function producersSha(input: {
         code_hash: string;
     }>;
 }): string;
-export declare function runIdentityMismatch(a: RunIdentity, b: RunIdentity): string[];
+/**
+ * `waiveProducers` skips ONLY the `producers_sha` comparison; every other field still compares
+ * and still enters the returned set. It defaults OFF, so an unadorned call is byte-for-byte the
+ * old behaviour. The one caller that sets it (the resume gate) has first proven that every chair
+ * left to run is human — and a producing agent's definition cannot change what a person is being
+ * asked to decide about work that is already sealed and hashed. That is the sole justification;
+ * genome_hash, gig_input_sha, model_version, depth and canonical_form_version are NEVER waived,
+ * because they can still describe something the remaining human chair is being asked to approve.
+ *
+ * That NEVER-WAIVED rule is about a STATED mismatch, and neither #19 nor #20 touches it. Waiving
+ * skips a comparison that WOULD have failed; INHERITING substitutes the checkpoint's own recorded
+ * value for a field the operator left unstated, so the comparison a resume runs is between the
+ * checkpoint and a value it does not contradict. Two fields inherit, at the runtime resume-gate
+ * call site, never here:
+ *   - depth (#19): a resume that omits --depth compares against the depth the CHECKPOINT recorded.
+ *   - gig_input_sha (#20): a resume whose every remaining chair is human and that omits --input
+ *     compares against the gig_input_sha the CHECKPOINT recorded — because the payload is never
+ *     stored (see RunIdentity.gig_input_sha) and the remaining human chairs consume no payload.
+ * Both stay never-waived: an EXPLICIT --depth or --input that disagrees still drives a refusal, and
+ * gig_input_sha keeps gating in full the moment any remaining chair is a model chair. Inheriting a
+ * value nobody contradicted is a different act from skipping a comparison that would have failed,
+ * so reading #19 or #20 as a hole in this rule is a mistake.
+ */
+export declare function runIdentityMismatch(a: RunIdentity, b: RunIdentity, opts?: {
+    waiveProducers?: boolean;
+}): string[];
 /**
  * The composite identity of one checkpointed seat: `(chart_slug, movement_id, role)`.
  *
@@ -142,6 +173,13 @@ export interface CheckpointRole {
 export interface GigCheckpoint {
     schema_version: number;
     gig_id: string;
+    /**
+     * The run identity a resume must match. NOTE what this does NOT contain: the dispatch payload.
+     * `identity.gig_input_sha` is a sha256 of the canonical payload and nothing else — the checkpoint
+     * stores the HASH, never the bytes. A later reader must not attempt to "recover the input from
+     * the checkpoint"; that recovery is structurally impossible. On a human-only resume that omits
+     * --input, the gate inherits this hash rather than reconstructing a payload it never kept (#20).
+     */
     identity: RunIdentity;
     /**
      * The engine build (COLTRANE_VERSION) that WROTE this checkpoint.
@@ -151,7 +189,9 @@ export interface GigCheckpoint {
      * producers_sha) legitimately drifts between two builds that both write `schema_version` 1.
      * When a resume then refuses on that drift, the raw before/after hashes alone do not tell an
      * operator WHICH build would have matched — they have to guess the producing version. Recording
-     * it here turns "these two 64-hex strings disagree" into "resume from a <version> build".
+     * it here lets the refusal, when the versions genuinely DIFFER, turn "these two 64-hex strings
+     * disagree" into "resume from a <version> build". When this version equals the current one the
+     * refusal names the drifted fields instead, since the version is not what moved.
      *
      * Optional for BACK-COMPAT: a checkpoint written before this field existed has none, and a
      * resume of it refuses/succeeds exactly as before, naming "(engine version unrecorded)" in

package/dist/src/reuse.js.map

@@ -1 +1 @@
-{"version":3,"file":"reuse.js","sourceRoot":"","sources":["../../src/reuse.ts"],"names":[],"mappings":"AAAA,mDAAmD;AACnD,EAAE;AACF,0FAA0F;AAC1F,6FAA6F;AAC7F,wFAAwF;AACxF,2FAA2F;AAC3F,yFAAyF;AACzF,4FAA4F;AAC5F,gCAAgC;AAChC,EAAE;AACF,6FAA6F;AAC7F,2FAA2F;AAC3F,wFAAwF;AACxF,6FAA6F;AAC7F,2FAA2F;AAC3F,0FAA0F;AAC1F,6DAA6D;AAC7D,EAAE;AACF,oFAAoF;AACpF,2FAA2F;AAC3F,0FAA0F;AAC1F,kDAAkD;AAClD,EAAE;AACF,yFAAyF;AACzF,8FAA8F;AAC9F,4EAA4E;AAE5E,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAE3D;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,CAAC;AAEvC,kGAAkG;AAClG,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC;AAE3C,8FAA8F;AAC9F,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAEtC,MAAM,OAAO,eAAgB,SAAQ,KAAK;CAAG;AAc7C;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAIpC;IACC,OAAO,SAAS,CACd,SAAS,CAAC;QACR,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,QAAQ,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE;QACjD,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,IAAI;KAC3B,CAAC,CACH,CAAC;AACJ,CAAC;AAuDD;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,KAG5B;IACC,OAAO,SAAS,CACd,SAAS,CAAC;QACR,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,MAAM,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;aAC9B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;aACtD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;KACpE,CAAC,CACH,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,CAAc,EAAE,CAAc;IAChE,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAA6B,EAAE,CAAC;QAC3D,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,kFAAkF;AAClF,iBAAiB;AACjB,kFAAkF;AAElF;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,iBAAiB,CAAC,UAAkB,EAAE,WAA+B,EAAE,IAAY;IACjG,OAAO,GAAG,UAAU,IAAI,WAAW,IAAI,UAAU,IAAI,IAAI,EAAE,CAAC;AAC9D,CAAC;AAyMD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,aAAa,CAAC,KAAoB;IAChD,MAAM,KAAK,GAAG,CAAC,GAAG,KAAe,EAAU,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7F,8FAA8F;IAC9F,6FAA6F;IAC7F,kDAAkD;IAClD,MAAM,UAAU,GACd,KAAK,CAAC,UAAU,KAAK,SAAS,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS;QAC/D,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,UAAU,IAAI,EAAE,EAAE,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IACtE,OAAO,SAAS,CACd,KAAK,CACH,iBAAiB,EACjB,KAAK,CAAC,sBAAsB,EAC5B,KAAK,CAAC,aAAa,EACnB,KAAK,CAAC,KAAK,EACX,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,EACtB,SAAS,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,EAC9B,SAAS,CAAC,KAAK,CAAC,gBAAgB,IAAI,IAAI,CAAC,EACzC,SAAS,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,EAChF,SAAS,CAAC,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC,EACvC,KAAK,CAAC,aAAa,EACnB,KAAK,CAAC,aAAa,EACnB,KAAK,CAAC,KAAK,EACX,SAAS,CAAC,CAAC,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC,IAAI,EAAE,CAAC,CAC1C,GAAG,UAAU,CACf,CAAC;AACJ,CAAC;AAkBD;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,eAAe,CAAC,KAAiB,EAAE,aAAgC;IACjF,IAAI,KAAK,CAAC,cAAc,KAAK,oBAAoB,EAAE,CAAC;QAClD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,aAAa,KAAK,CAAC,cAAc,mBAAmB,oBAAoB,EAAE,EAAE,CAAC;IACrI,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChE,0FAA0F;QAC1F,uFAAuF;QACvF,oDAAoD;QACpD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAAC;IACzF,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;QACzC,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;YACf,6DAA6D;YAC7D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,EAAE,MAAM,EAAE,iCAAiC,CAAC,CAAC,WAAW,GAAG,EAAE,CAAC;QACpH,CAAC;QACD,IAAI,GAAG,KAAK,CAAC,CAAC,gBAAgB,EAAE,CAAC;YAC/B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,2BAA2B,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,WAAW,iDAAiD,EAAE,CAAC;QACxI,CAAC;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,kFAAkF;AAClF,qBAAqB;AACrB,kFAAkF;AAElF,6FAA6F;AAC7F,oFAAoF;AACpF,EAAE;AACF,gGAAgG;AAChG,6FAA6F;AAC7F,gDAAgD;AAChD,MAAM,WAAW,GAAG,eAAe,CAAC;AAEpC,SAAS,YAAY,CAAI,IAAY;IACnC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3C,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC3C,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAM,CAAC;IAC/B,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,eAAe,CAAC,IAAI,IAAI,oBAAoB,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACtG,CAAC;AACH,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,qBAAqB,CAAC,UAAkB;IACtD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;IACjD,OAAO;QACL,IAAI,CAAC,MAAM;YACT,sFAAsF;YACtF,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC;gBAAE,OAAO,SAAS,CAAC;YACxD,OAAO,YAAY,CAAgB,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC;QACvE,CAAC;QACD,KAAK,CAAC,EAAE;YACN,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,MAAM,OAAO,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;QACvE,CAAC;QACD,MAAM,CAAC,MAAM;YACX,uFAAuF;YACvF,oEAAoE;YACpE,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC;gBAAE,OAAO;YAC9C,IAAI,CAAC;gBAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;QACnG,CAAC;KACF,CAAC;AACJ,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,gBAAgB,CAAC,UAAkB;IACjD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAC3C,OAAO;QACL,GAAG,CAAC,SAAS;YACX,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC;gBAAE,OAAO,SAAS,CAAC;YACxD,OAAO,YAAY,CAAa,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,OAAO,CAAC,CAAC,CAAC;QACvE,CAAC;QACD,GAAG,CAAC,KAAK;YACP,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,SAAS,OAAO,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QAChF,CAAC;KACF,CAAC;AACJ,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,2BAA2B;IACzC,MAAM,CAAC,GAAG,IAAI,GAAG,EAAkB,CAAC;IACpC,OAAO;QACL,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE;YACX,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACtB,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAmB,CAAC;QAC5E,CAAC;QACD,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACxD,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;KAClC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB;IACpC,MAAM,CAAC,GAAG,IAAI,GAAG,EAAkB,CAAC;IACpC,OAAO;QACL,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE;YACT,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACrB,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAgB,CAAC;QACzE,CAAC;QACD,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;KACvD,CAAC;AACJ,CAAC"}
+{"version":3,"file":"reuse.js","sourceRoot":"","sources":["../../src/reuse.ts"],"names":[],"mappings":"AAAA,mDAAmD;AACnD,EAAE;AACF,0FAA0F;AAC1F,6FAA6F;AAC7F,wFAAwF;AACxF,2FAA2F;AAC3F,yFAAyF;AACzF,4FAA4F;AAC5F,gCAAgC;AAChC,EAAE;AACF,6FAA6F;AAC7F,2FAA2F;AAC3F,wFAAwF;AACxF,6FAA6F;AAC7F,2FAA2F;AAC3F,0FAA0F;AAC1F,6DAA6D;AAC7D,EAAE;AACF,oFAAoF;AACpF,2FAA2F;AAC3F,0FAA0F;AAC1F,kDAAkD;AAClD,EAAE;AACF,yFAAyF;AACzF,8FAA8F;AAC9F,4EAA4E;AAE5E,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAE3D;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,CAAC;AAEvC,kGAAkG;AAClG,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC;AAE3C,8FAA8F;AAC9F,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAEtC,MAAM,OAAO,eAAgB,SAAQ,KAAK;CAAG;AAc7C;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAIpC;IACC,OAAO,SAAS,CACd,SAAS,CAAC;QACR,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,QAAQ,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE;QACjD,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,IAAI;KAC3B,CAAC,CACH,CAAC;AACJ,CAAC;AA6DD;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,KAG5B;IACC,OAAO,SAAS,CACd,SAAS,CAAC;QACR,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,MAAM,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;aAC9B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;aACtD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;KACpE,CAAC,CACH,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,mBAAmB,CACjC,CAAc,EACd,CAAc,EACd,OAAqC,EAAE;IAEvC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAA6B,EAAE,CAAC;QAC3D,IAAI,CAAC,KAAK,eAAe,IAAI,IAAI,CAAC,cAAc;YAAE,SAAS;QAC3D,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,kFAAkF;AAClF,iBAAiB;AACjB,kFAAkF;AAElF;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,iBAAiB,CAAC,UAAkB,EAAE,WAA+B,EAAE,IAAY;IACjG,OAAO,GAAG,UAAU,SAAS,WAAW,IAAI,UAAU,SAAS,IAAI,EAAE,CAAC;AACxE,CAAC;AAkND;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,aAAa,CAAC,KAAoB;IAChD,MAAM,KAAK,GAAG,CAAC,GAAG,KAAe,EAAU,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7F,8FAA8F;IAC9F,6FAA6F;IAC7F,kDAAkD;IAClD,MAAM,UAAU,GACd,KAAK,CAAC,UAAU,KAAK,SAAS,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS;QAC/D,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,UAAU,IAAI,EAAE,EAAE,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IACtE,OAAO,SAAS,CACd,KAAK,CACH,iBAAiB,EACjB,KAAK,CAAC,sBAAsB,EAC5B,KAAK,CAAC,aAAa,EACnB,KAAK,CAAC,KAAK,EACX,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,EACtB,SAAS,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,EAC9B,SAAS,CAAC,KAAK,CAAC,gBAAgB,IAAI,IAAI,CAAC,EACzC,SAAS,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,EAChF,SAAS,CAAC,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC,EACvC,KAAK,CAAC,aAAa,EACnB,KAAK,CAAC,aAAa,EACnB,KAAK,CAAC,KAAK,EACX,SAAS,CAAC,CAAC,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC,IAAI,EAAE,CAAC,CAC1C,GAAG,UAAU,CACf,CAAC;AACJ,CAAC;AAkBD;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,eAAe,CAAC,KAAiB,EAAE,aAAgC;IACjF,IAAI,KAAK,CAAC,cAAc,KAAK,oBAAoB,EAAE,CAAC;QAClD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,aAAa,KAAK,CAAC,cAAc,mBAAmB,oBAAoB,EAAE,EAAE,CAAC;IACrI,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChE,0FAA0F;QAC1F,uFAAuF;QACvF,oDAAoD;QACpD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAAC;IACzF,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;QACzC,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;YACf,6DAA6D;YAC7D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,EAAE,MAAM,EAAE,iCAAiC,CAAC,CAAC,WAAW,GAAG,EAAE,CAAC;QACpH,CAAC;QACD,IAAI,GAAG,KAAK,CAAC,CAAC,gBAAgB,EAAE,CAAC;YAC/B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,2BAA2B,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,WAAW,iDAAiD,EAAE,CAAC;QACxI,CAAC;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,kFAAkF;AAClF,qBAAqB;AACrB,kFAAkF;AAElF,6FAA6F;AAC7F,oFAAoF;AACpF,EAAE;AACF,gGAAgG;AAChG,6FAA6F;AAC7F,gDAAgD;AAChD,MAAM,WAAW,GAAG,eAAe,CAAC;AAEpC,SAAS,YAAY,CAAI,IAAY;IACnC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3C,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC3C,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAM,CAAC;IAC/B,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,eAAe,CAAC,IAAI,IAAI,oBAAoB,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACtG,CAAC;AACH,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,qBAAqB,CAAC,UAAkB;IACtD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;IACjD,OAAO;QACL,IAAI,CAAC,MAAM;YACT,sFAAsF;YACtF,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC;gBAAE,OAAO,SAAS,CAAC;YACxD,OAAO,YAAY,CAAgB,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC;QACvE,CAAC;QACD,KAAK,CAAC,EAAE;YACN,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,MAAM,OAAO,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;QACvE,CAAC;QACD,MAAM,CAAC,MAAM;YACX,uFAAuF;YACvF,oEAAoE;YACpE,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC;gBAAE,OAAO;YAC9C,IAAI,CAAC;gBAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;QACnG,CAAC;KACF,CAAC;AACJ,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,gBAAgB,CAAC,UAAkB;IACjD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAC3C,OAAO;QACL,GAAG,CAAC,SAAS;YACX,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC;gBAAE,OAAO,SAAS,CAAC;YACxD,OAAO,YAAY,CAAa,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,OAAO,CAAC,CAAC,CAAC;QACvE,CAAC;QACD,GAAG,CAAC,KAAK;YACP,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,SAAS,OAAO,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QAChF,CAAC;KACF,CAAC;AACJ,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,2BAA2B;IACzC,MAAM,CAAC,GAAG,IAAI,GAAG,EAAkB,CAAC;IACpC,OAAO;QACL,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE;YACX,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACtB,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAmB,CAAC;QAC5E,CAAC;QACD,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACxD,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;KAClC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB;IACpC,MAAM,CAAC,GAAG,IAAI,GAAG,EAAkB,CAAC;IACpC,OAAO;QACL,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE;YACT,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACrB,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAgB,CAAC;QACzE,CAAC;QACD,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;KACvD,CAAC;AACJ,CAAC"}

package/dist/src/runtime.d.ts

@@ -1,10 +1,12 @@
 import type { Standard, Agent, Chair } from "./composition.js";
 import { type ToolProviderRegistry } from "./tool_providers.js";
 import { type Realization } from "./venue_realize.js";
+import type { VenueRealizer, CredentialResolver } from "./venue_realizer.js";
 import type { Venue } from "./chart.js";
 export declare const CORE_TO_PRIMITIVE: Record<string, Agent["primitives"][number]>;
 import { type CheckpointStore, type ReuseStore, type PriorBudgetState } from "./reuse.js";
 import type { OutputStore, OutputRecord } from "./outputs.js";
+import { type GigConformanceResult } from "./gig_conformance.js";
 import { type Ledger, type GigUsage } from "./ledger.js";
 import type { Depth } from "./pricing.js";
 import type { SkillRecord, EvalRecord } from "./loader.js";
@@ -22,6 +24,11 @@ export interface AgentInvocationContext {
     depth?: Depth | undefined;
     realization?: Realization | undefined;
     venue?: Venue | undefined;
+    substrateMcpConfigs?: Readonly<Record<string, unknown>> | undefined;
+    seatExec?: {
+        container: string;
+        workspace: string;
+    } | undefined;
     turn_budget?: number | undefined;
     turn_reserve?: number | undefined;
 }
@@ -67,6 +74,19 @@ export type GigProgressEvent = {
     role: string;
     agent: string;
     missing: string[];
+} | {
+    type: "lineage_adoption";
+    phase: string;
+    role: string;
+    /** true only when the verdict passed, was signed, and named a record. */
+    adopt: boolean;
+    /** content_sha of the lineage-record the institution would be grounded in. */
+    record_ref?: string;
+    /** WHICH institution it grounds. Absent on a refusal. */
+    institution_slug?: string;
+    approved_by?: string;
+    /** every applicable refusal, not just the first — see lineageAdoption. */
+    refusals?: string[];
 } | {
     type: "agent_event";
     phase: string;
@@ -230,6 +250,19 @@ export interface RunDeps {
      * away; noticing a silent $6 is not.
      */
     resume_from?: string | undefined;
+    /**
+     * #20 — the caller supplied NO --input on this (resume) dispatch. Default-false semantics:
+     * absent or false means "a value WAS supplied" (even an explicit `{}`); true means "the caller
+     * stated no payload at all". It exists for the same reason `depth?: Depth | undefined` does —
+     * an omitted value must be distinguishable from a stated one. The dispatch payload is never
+     * carried in a checkpoint (only its hash is; see src/reuse.ts RunIdentity.gig_input_sha), so an
+     * omitted --input cannot be reconstructed. Instead, on a resume whose every remaining chair is
+     * human, the gate INHERITS the checkpoint's recorded gig_input_sha rather than refusing on the
+     * drift to sha256('{}'). A SUPPLIED value is never inherited, so a disagreeing --input still
+     * gates; and while any remaining chair is a MODEL chair the gate is unchanged. worker.ts passes
+     * the real claim input and never sets this, so the gate stays fully active for worker runs.
+     */
+    gig_input_omitted?: boolean | undefined;
     /**
      * The chair-level reuse cache. Presence IS the opt-in — the runtime never constructs one —
      * and it enables BOTH reads and writes.
@@ -277,6 +310,44 @@ export interface RunDeps {
      *  any class present but NOT declared by the venue's `credential_surface` is a breach that fails
      *  the gig closed. Absent = none present (deny-by-default: an empty surface admits nothing). */
     credentialsPresent?: string[] | undefined;
+    /**
+     * The SUBSTRATE seam (substrate → dispatch wiring). When supplied AND the resolved venue declares
+     * `mcp_servers`, runGig realizes the substrate (a real room) alongside the policy `realization`:
+     * it calls `venueRealizer.realize(venue, credentialResolver, { gigId })`, threads the returned
+     * handle's `mcpServerConfigs` onto every chair's `AgentInvocationContext.substrateMcpConfigs` so
+     * the spawn reaches the servers running inside the room, and tears the handle down in the same
+     * finally block that tears down the policy realization.
+     *
+     * ABSENT = the substrate is skipped entirely: a venue-named gig still runs the policy gauntlet and
+     * confines its chairs by construction, exactly as before this wire existed — the room is opt-in on
+     * the deployment supplying an implementation, never mandatory. The engine ships the interface
+     * (src/venue_realizer.ts); the deployment supplies `dockerComposeRealizer()`/`localProcessRealizer()`
+     * and tests supply the daemon-free substitute (a realizer with an injected `run` seam).
+     */
+    venueRealizer?: VenueRealizer | undefined;
+    /**
+     * How the substrate realizer binds credentials into the room. Passed as the required positional
+     * `credentialResolver` argument to `venueRealizer.realize()`. Absent → `async () => ({})`, an empty
+     * resolver: the interface is satisfied without a new mandatory field, and a class the resolver does
+     * not supply reaches the room as an empty secret that fails at the service that reads it — the
+     * direction a missing credential should fail. The deployment supplies the real resolver.
+     */
+    credentialResolver?: CredentialResolver | undefined;
+    /**
+     * The repository this RUN operates on — the SUBJECT of work, named by the RUN and NEVER by the
+     * venue. A venue is one AT-REST room and is one-to-MANY against repositories: one room serves many
+     * repositories, so pinning the repository on the venue would mint a venue per repository. When
+     * supplied AND the resolved venue has a realizer, it is threaded into the substrate realizer as
+     * `RealizeOpts.repoUrl`, so the realized room's workspace is populated (through src/workspace.ts
+     * `prepareWorkspace`, the SAME mechanism the drain uses) with a clone of THIS repository — and two
+     * concurrent code-editing gigs against the same room get DISJOINT trees.
+     *
+     * The source is EXPLICIT: a dispatch field on the server path, the claim's governed `repo_url`
+     * column on the drain path. It is never process.cwd() and never an ambient host path — inferring the
+     * operator's own checkout is exactly the isolation failure an explicit source forecloses. ABSENT =
+     * the room declines to populate (an empty read-only workspace) and no git credential is minted.
+     */
+    repoUrl?: string | undefined;
 }
 /**
  * Per-gig cost-budget input. Honors budget-state.json schema (PR #56). Only
@@ -472,6 +543,17 @@ export interface GigResult {
     movement_id?: string;
     genome_hash: string;
     run_fingerprint: string;
+    /**
+     * The gig-close CONFORMANCE classification — does this sealed run fit its own construction? A
+     * pure, deterministic verdict over (the standard, the sealed set) along two axes, FIT (every
+     * chair's declared output_contract is satisfied) and TIMING (every record's engine-stamped
+     * input_shas respect the declared edges). It is a CLASSIFIER that routes review, not a gate:
+     * present as a PROPERTY of the run beside `run_fingerprint`, deliberately NOT folded into it (a
+     * run containing its own grade would be self-referential) and never sealed as an output INSIDE
+     * the gig it grades. Present only on the completion path — an `awaiting_approval` return is a
+     * distinct shape whose INCOMPLETE verdict is the classifier's job to state when it is called.
+     */
+    conformance?: GigConformanceResult;
     /**
      * Records this run CONSUMED but did not produce — an earlier movement's sealed outputs, carried
      * in over a chart edge. Present only when seeds were actually read, so its absence is the claim