@gitroll/tacitt-cli 0.1.0 → 0.3.0

package/dist/{src-BngGpFKd.mjs → src-CPbdnGrk.mjs}

@@ -1,6 +1,6 @@
-import { Bn as validatePlan, Cn as sessionNonce, Dn as entityDictionaryVersion, En as cleanupImplementationVersion, Fn as frameRecords, Gn as detectStatic, H as codePointLength, Hn as defaultLimits, Ht as ApplicationError, In as retainedMainTextNodes, Jn as jsonSpans, Jt as reviewFamilies, Ln as validateProfile, Nn as nativeText, On as nativeParserVersion, Pn as transformRecords, Qt as sourceSnapshotId, Sn as createReplacementKey, Tn as parseNativeRecord, Un as recordPointerLimits, V as bDigest, Wn as resolveLimits, Wt as safeCode, Xn as createEntityMatcher, Xt as sourceKey, Yn as agentContextLocation, an as withMandatoryCustomTerms, c as textDigest, cn as mainReviewRole, dn as renderNative, fn as createSessionPreparation, gn as createDetectionSummary, in as nativeSourceIdentitySchema, ir as isProcessingCode, j as bDuplicateShift, jn as nativeField, k as bBindingCap, kn as redactionImplementationVersion, ln as reviewRoles, nr as ProcessingError, o as reviewDigest, on as processNativeRecord, pn as bindInspection, qt as familySelected, rr as fail$1, sn as projectNativeReviewInput, tr as defaultDetectionLimits, un as createSentenceContext, vn as walkNativeFields, wn as projectNativeRecord, x as createBAnalysisUnits, zn as buildPlan } from "./locate-Bn32k2se.mjs";
-import { t as createZstdFrameCheck } from "./frame-D1j9R8xX.mjs";
-import { Fn as bWordBounded, I as sourceIdentityEvidence, L as withSourceEvidence, Mn as bExceptionRanges, Pt as metadataProcessingVersion, R as agentSetupKey, Yr as sourceChangePolicy, Zr as approvedTreatmentSchema, at as defaultAgentSetupInclusion, dr as resolveSourceSelection, it as classifyAgentSetup, jn as bContainment, ni as staticCatalogRef } from "./src-CPPjOyHZ.mjs";
+import { Bn as validatePlan, Cn as sessionNonce, Dn as entityDictionaryVersion, En as cleanupImplementationVersion, Fn as frameRecords, Gn as detectStatic, H as codePointLength, Hn as defaultLimits, Ht as ApplicationError, In as retainedMainTextNodes, Jn as jsonSpans, Jt as reviewFamilies, Ln as validateProfile, Nn as nativeText, On as nativeParserVersion, Pn as transformRecords, Qt as sourceSnapshotId, Sn as createReplacementKey, Tn as parseNativeRecord, Un as recordPointerLimits, V as bDigest, Wn as resolveLimits, Wt as safeCode, Xn as createEntityMatcher, Xt as sourceKey, Yn as agentContextLocation, an as withMandatoryCustomTerms, c as textDigest, cn as mainReviewRole, dn as renderNative, fn as createSessionPreparation, gn as createDetectionSummary, in as nativeSourceIdentitySchema, ir as isProcessingCode, j as bDuplicateShift, jn as nativeField, k as bBindingCap, kn as redactionImplementationVersion, ln as reviewRoles, nr as ProcessingError, o as reviewDigest, on as processNativeRecord, pn as bindInspection, qt as familySelected, rr as fail$1, sn as projectNativeReviewInput, tr as defaultDetectionLimits, un as createSentenceContext, vn as walkNativeFields, wn as projectNativeRecord, x as createBAnalysisUnits, zn as buildPlan } from "./locate-U3-nkird.mjs";
+import { t as createZstdFrameCheck } from "./frame-waS5FnN5.mjs";
+import { Bn as bWordBounded, F as withSourceEvidence, I as agentSetupKey, In as bContainment, Ln as bExceptionRanges, Nt as metadataProcessingVersion, P as sourceIdentityEvidence, gr as resolveSourceSelection, ii as approvedTreatmentSchema, it as defaultAgentSetupInclusion, li as staticCatalogRef, ni as sourceChangePolicy, rt as classifyAgentSetup } from "./src-B4R5XMEP.mjs";
 import { constants } from "node:fs";
 import { link, lstat, mkdir, open, readFile, readdir, realpath, rm, rmdir, stat, unlink } from "node:fs/promises";
 import { execFile, fork, spawn } from "node:child_process";
@@ -678,10 +678,16 @@ const chooseFinal = async (directory, start = 0) => {
 	}
 	return fail("ARTIFACT_LIMIT");
 };
-const createTemporary = async (options) => {
+/**
+* `onPath` receives the temporary path before the file exists, so an owner that stops this
+* process mid-call can remove it. On Windows the privacy checks after creation take ACL helper
+* round trips, so a name reported only afterwards could leave an unreported file.
+*/
+const createTemporary = async (options, onPath) => {
 	const directory = await outputDirectory(options);
 	const finalPath = await chooseFinal(directory);
 	const tempPath = join(directory, `.sess-pilot-${randomUUID()}.part`);
+	onPath?.(tempPath);
 	const handle = await openPrivateFile(tempPath, constants.O_CREAT | constants.O_EXCL | constants.O_RDWR | constants.O_NOFOLLOW, 384);
 	try {
 		const value = await handle.stat({ bigint: true });
@@ -729,6 +735,13 @@ const removeSpools = async (directory, temporary) => {
 		else if (!name.endsWith(".parallel") && value.isFile()) await unlink(path);
 	}
 };
+/**
+* Removes the `<temp>.<uuid>.<kind>` spools beside each temporary file a stopped packaging child
+* named (ADR 0228); the child's own cleanup never ran. Other named files are left to their owner.
+*/
+const removeNamedTemporarySpools = async (paths) => {
+	for (const path of paths) if (/\.sess-pilot-[a-f0-9-]{36}\.part$/.test(basename(path))) await removeSpools(dirname(path), { tempPath: path });
+};
 //#endregion
 //#region packages/artifact/src/file/reader.ts
 var FileReader = class extends Reader {
@@ -3294,6 +3307,7 @@ async function createSessionArchiveSpool(temporary, signal, options = {}) {
 	checkAbort(signal);
 	const path = options.directory === void 0 ? `${temporary.tempPath}.${randomUUID()}.session` : `${options.directory}/${randomUUID()}.session`;
 	let handle;
+	if (options.keepPath === true) options.onPath?.(path);
 	try {
 		handle = await (options.directory === void 0 ? openPrivateFile : open)(path, constants.O_CREAT | constants.O_EXCL | constants.O_RDWR | constants.O_NOFOLLOW, 384);
 		if (options.keepPath !== true) await unlink(path);
@@ -4025,7 +4039,7 @@ function nativeIdentityKey(value) {
 		]
 	]);
 }
-async function prepareSources(request, owner, metadata, collect) {
+async function prepareSources(request, owner, metadata, collect, onImages) {
 	if (request.sources.length === 0 || request.sources.length > 1e4) fail("ARTIFACT_EMPTY_SCOPE");
 	requireCurrentCleanup(request.treatment.cleanup);
 	const snapshots = /* @__PURE__ */ new Map();
@@ -4050,6 +4064,7 @@ async function prepareSources(request, owner, metadata, collect) {
 				inspector.inspect(root);
 				collect?.(root);
 				const selection = retain(root);
+				if (selection.images) onImages?.(selection.images);
 				prepareOriginals(root, selection, adapter.annotations(root, nativeOptions, selection), owner.preparation, owner.limits, owner.signal);
 				ordinal += 1;
 			}
@@ -4913,7 +4928,10 @@ async function prepareConfiguredSession(request) {
 		const metadata = metadataRoot(request, owner.limits);
 		const gitIdentity = await prepareGit(request, owner.signal, owner.preparation);
 		const agentSetup = request.collectAgentSetup ? createAgentSetupCollector(request) : void 0;
-		const snapshots = await prepareSources(request, owner, metadata, agentSetup?.add);
+		let images = 0;
+		const snapshots = await prepareSources(request, owner, metadata, agentSetup?.add, (count) => {
+			images += count;
+		});
 		owner.seal();
 		guardSourceIdentities(request, owner);
 		const finished = /* @__PURE__ */ new Set();
@@ -4977,7 +4995,8 @@ async function prepareConfiguredSession(request) {
 						metadata: processedMetadata.text,
 						...processedMetadata.masks === void 0 ? {} : { metadataMasks: processedMetadata.masks },
 						sources: Object.freeze(sources),
-						agentSetup: Object.freeze(setup)
+						agentSetup: Object.freeze(setup),
+						images
 					});
 					await owner.close();
 					completion = result;
@@ -8991,17 +9010,16 @@ async function privateJourneyDirectory(path) {
 //#region packages/artifact/src/configured/journey/output.ts
 /**
 * The same checked private publication used for bases, with a fresh immutable output ID.
-* `onPath` names each file this call may leave behind: a temporary file once created, a published
-* one before it is linked, so a packaging worker's owner can remove them when it stops the worker
-* mid-write (ADR 0181).
+* `onPath` names each file this call may leave behind: a temporary file before it is created, a
+* published one before it is linked, so a packaging worker's owner can remove them when it stops
+* the worker mid-write (ADR 0181).
 */
 async function writeLogicalJourneyOutput(request, signal, onPath) {
 	const directory = await privateJourneyDirectory(request.directory);
 	const primary = await createTemporary({
 		outputDir: directory,
 		keepTemp: false
-	});
-	onPath?.(primary.temporary.tempPath);
+	}, onPath);
 	let companion;
 	let masks;
 	const cleanup = createCleanup(), linked = [];
@@ -9011,15 +9029,11 @@ async function writeLogicalJourneyOutput(request, signal, onPath) {
 		companion = await createTemporary({
 			outputDir: directory,
 			keepTemp: false
-		});
-		onPath?.(companion.temporary.tempPath);
-		if (request.maskEvidence) {
-			masks = await createTemporary({
-				outputDir: directory,
-				keepTemp: false
-			});
-			onPath?.(masks.temporary.tempPath);
-		}
+		}, onPath);
+		if (request.maskEvidence) masks = await createTemporary({
+			outputDir: directory,
+			keepTemp: false
+		}, onPath);
 		const written = await rewriteConfiguredOutput({
 			...request,
 			bundleId,
@@ -9295,6 +9309,14 @@ function isResult(value) {
 		};
 		return file("primary") && file("ledger") && typeof pieces === "object" && pieces !== null && Array.isArray(Reflect.get(pieces, "entries")) && Array.isArray(Reflect.get(pieces, "maskEntries")) && Array.isArray(Reflect.get(value, "tokens")) && typeof Reflect.get(value, "tokensComplete") === "boolean";
 	}
+	if (Reflect.get(value, "kind") === "journey-base") {
+		const base = Reflect.get(value, "base");
+		const file = (key) => {
+			const item = typeof base === "object" && base !== null ? Reflect.get(base, key) : void 0;
+			return typeof item === "object" && item !== null && typeof Reflect.get(item, "path") === "string";
+		};
+		return typeof base === "object" && base !== null && Reflect.get(base, "kind") === "base" && typeof Reflect.get(base, "bundleId") === "string" && file("primary") && file("companion") && file("maskLedger") && Array.isArray(Reflect.get(base, "sessions")) && Array.isArray(Reflect.get(base, "sourceBindings"));
+	}
 	if (Reflect.get(value, "kind") === "journey-output") {
 		const output = Reflect.get(value, "output");
 		return typeof output === "object" && output !== null && typeof Reflect.get(output, "bundleId") === "string" && typeof Reflect.get(output, "primary") === "object" && typeof Reflect.get(output, "companion") === "object" && Array.isArray(Reflect.get(value, "tokens")) && typeof Reflect.get(value, "tokensComplete") === "boolean";
@@ -9315,6 +9337,8 @@ function isWorkerMessage(value) {
 	if (kind === "worker-error") return code === "ARTIFACT_WORKER_MEMORY" || code === "ARTIFACT_PROCESSING_FAILED";
 	return kind === "error" && typeof code === "string" && code.length > 0 && (sourceId === void 0 || typeof sourceId === "string");
 }
+/** How long a stopped controller may take to end its Worker and flush its messages (ADR 0219). */
+const stopGraceMs = 2e3;
 /** One active request per process; IPC backpressure never causes a resend or another queue. */
 function createSessionProcess(workerUrl, heapMb, onMessage, onFailure) {
 	const options = {
@@ -9349,7 +9373,7 @@ function createSessionProcess(workerUrl, heapMb, onMessage, onFailure) {
 		closed.then(() => onFailure(memoryFailure ? "ARTIFACT_WORKER_MEMORY" : "ARTIFACT_PROCESSING_FAILED"));
 	};
 	child.on("message", (message) => {
-		if (!closing) onMessage(message);
+		if (!closing || Reflect.get(Object(message), "kind") === "spool") onMessage(message);
 	});
 	child.on("error", fail);
 	child.on("disconnect", fail);
@@ -9371,7 +9395,20 @@ function createSessionProcess(workerUrl, heapMb, onMessage, onFailure) {
 		async close() {
 			if (!closing) {
 				closing = true;
-				if (child.exitCode === null && child.signalCode === null) child.kill("SIGKILL");
+				if (child.exitCode === null && child.signalCode === null) {
+					const kill = () => {
+						if (child.exitCode === null && child.signalCode === null) child.kill("SIGKILL");
+					};
+					const timer = setTimeout(kill, stopGraceMs);
+					try {
+						if (child.connected) child.send({ kind: "stop" }, (error) => error && kill());
+						else kill();
+					} catch {
+						kill();
+					}
+					await closed;
+					clearTimeout(timer);
+				}
 			}
 			await closed;
 		}
@@ -9406,6 +9443,34 @@ function sessionWorkerFailure(error) {
 function requestKind(task) {
 	return typeof task.message === "object" && task.message !== null ? Reflect.get(task.message, "kind") : void 0;
 }
+/**
+* Files one job may name: a journey output its three final files and three temporary files
+* (ADR 0181), an output shard its two archives and a shard readback none (ADR 0199).
+*/
+/**
+* A journey output or base names its three final files and three temporary files (ADR 0181,
+* ADR 0228); an output shard its two archives and a shard readback none (ADR 0199).
+*/
+function spoolLimit(task) {
+	const kind = requestKind(task);
+	return kind === "journey-output" || kind === "journey-base" ? 6 : kind === "journey-output-shard" ? 2 : kind === "journey-output-verify" ? 0 : 4;
+}
+const factsName = /^(.+)\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\.facts$/;
+/**
+* Best-effort removal of a stopped job's files: its named spools and the facts files created
+* beside them (`<spool>.<uuid>.facts`), which are unlinked once open but can keep their name
+* when the process stops in between; on Windows that spans two ACL helper round trips.
+*/
+async function removeStoppedSpools(paths) {
+	for (const [directory, spools] of Map.groupBy(paths, (path) => dirname(path))) {
+		for (const path of spools) await unlink(path).catch(() => {});
+		const names = new Set(spools.map((path) => basename(path)));
+		for (const entry of await readdir(directory).catch(() => [])) {
+			const spool = factsName.exec(entry)?.[1];
+			if (spool !== void 0 && names.has(spool)) await unlink(join(directory, entry)).catch(() => {});
+		}
+	}
+}
 /** Best-effort removal of a worker spool that no longer has an owner. */
 function removeSpool(path) {
 	if (path === void 0) return;
@@ -9479,7 +9544,7 @@ function createSessionWorkerPool(url, size, heapMb = workerHeapMb) {
 		stopping = Promise.all(slots.map(async (slot) => {
 			try {
 				await slot.process.close();
-				for (const path of slot.task?.spoolPaths ?? []) await unlink(path).catch(() => {});
+				if (slot.task) await removeStoppedSpools(slot.task.spoolPaths);
 			} finally {
 				slot.task?.reject(blame(slot));
 				slot.task = void 0;
@@ -9494,8 +9559,11 @@ function createSessionWorkerPool(url, size, heapMb = workerHeapMb) {
 	};
 	const onAbort = () => stop(/* @__PURE__ */ new Error("ARTIFACT_ABORTED"));
 	const receive = (slot, message) => {
-		if (closed) return;
 		const task = slot.task;
+		if (closed) {
+			if (task && isWorkerMessage(message) && message.kind === "spool" && (task.spoolPaths.has(message.path) || task.spoolPaths.size < spoolLimit(task))) task.spoolPaths.add(message.path);
+			return;
+		}
 		if (!isWorkerMessage(message)) {
 			failPool(/* @__PURE__ */ new Error("ARTIFACT_PROCESSING_FAILED"), slot);
 			return;
@@ -9511,9 +9579,7 @@ function createSessionWorkerPool(url, size, heapMb = workerHeapMb) {
 		try {
 			if (message.kind === "source") task.onSourceProgress?.(message.bytes);
 			else if (message.kind === "spool") {
-				const kind = requestKind(task);
-				const spoolLimit = kind === "journey-output" ? 6 : kind === "journey-output-shard" ? 2 : kind === "journey-output-verify" ? 0 : 4;
-				if (!task.spoolPaths.has(message.path) && task.spoolPaths.size >= spoolLimit) {
+				if (!task.spoolPaths.has(message.path) && task.spoolPaths.size >= spoolLimit(task)) {
 					failPool(/* @__PURE__ */ new Error("ARTIFACT_PROCESSING_FAILED"), slot);
 					return;
 				}
@@ -9521,7 +9587,7 @@ function createSessionWorkerPool(url, size, heapMb = workerHeapMb) {
 				task.onSpool?.(message.path);
 			} else if (message.kind === "result") {
 				const requestedKind = requestKind(task);
-				if ((requestedKind === "render" || requestedKind === "capture" || requestedKind === "scan" || requestedKind === "journey-output" || requestedKind === "journey-output-shard" || requestedKind === "journey-output-verify") && message.result.kind !== requestedKind) {
+				if ((requestedKind === "render" || requestedKind === "capture" || requestedKind === "scan" || requestedKind === "journey-output" || requestedKind === "journey-output-shard" || requestedKind === "journey-output-verify" || requestedKind === "journey-base") && message.result.kind !== requestedKind) {
 					failPool(/* @__PURE__ */ new Error("ARTIFACT_PROCESSING_FAILED"), slot);
 					return;
 				}
@@ -9537,6 +9603,15 @@ function createSessionWorkerPool(url, size, heapMb = workerHeapMb) {
 					settle(slot, void 0, message.result);
 					return;
 				}
+				if (message.result.kind === "journey-base") {
+					const { primary, companion, maskLedger } = message.result.base;
+					if (!task.spoolPaths.has(primary.path) || !task.spoolPaths.has(companion.path) || !task.spoolPaths.has(maskLedger.path)) {
+						failPool(/* @__PURE__ */ new Error("ARTIFACT_PROCESSING_FAILED"), slot);
+						return;
+					}
+					settle(slot, void 0, message.result);
+					return;
+				}
 				if (message.result.kind === "journey-output") {
 					if (!task.spoolPaths.has(message.result.output.primary.path) || !task.spoolPaths.has(message.result.output.companion.path)) {
 						failPool(/* @__PURE__ */ new Error("ARTIFACT_PROCESSING_FAILED"), slot);
@@ -10944,25 +11019,18 @@ async function runConfiguredSessionJob(job, processing, signal, onSourceProgress
 	let processingMs = 0;
 	const spoolOptions = {
 		keepPath: true,
+		...onSpool === void 0 ? {} : { onPath: onSpool },
 		...job.spoolDirectory === void 0 ? {} : { directory: job.spoolDirectory }
 	};
 	const spool = await createSessionArchiveSpool(job.temporary, signal, spoolOptions);
-	onSpool?.(spool.path);
 	let companion;
 	let maskSpool;
 	let reviewSpool;
 	let session;
 	try {
 		companion = await createSessionArchiveSpool(job.temporary, signal, spoolOptions);
-		onSpool?.(companion.path);
-		if (job.captureMasks) {
-			maskSpool = await createSessionArchiveSpool(job.temporary, signal, spoolOptions);
-			onSpool?.(maskSpool.path);
-		}
-		if (job.captureReview) {
-			reviewSpool = await createSessionArchiveSpool(job.temporary, signal, spoolOptions);
-			onSpool?.(reviewSpool.path);
-		}
+		if (job.captureMasks) maskSpool = await createSessionArchiveSpool(job.temporary, signal, spoolOptions);
+		if (job.captureReview) reviewSpool = await createSessionArchiveSpool(job.temporary, signal, spoolOptions);
 		const readPass = /* @__PURE__ */ new Map();
 		const captures = new Map((job.captures ?? []).map((capture) => [capture.partId, capture]));
 		session = await prepareConfiguredSession({
@@ -11039,7 +11107,8 @@ async function runConfiguredSessionJob(job, processing, signal, onSourceProgress
 			metadata: completed.metadata,
 			parts,
 			entries,
-			agentSetup: completed.agentSetup
+			agentSetup: completed.agentSetup,
+			images: completed.images
 		};
 	} catch (error) {
 		cleanup.failed(error);
@@ -14677,13 +14746,18 @@ async function writePrivateReviewPayload(request, signal) {
 }
 //#endregion
 //#region packages/artifact/src/configured/journey/base.ts
-/** Publish an immutable, private base pair for review/resume without a public collection index. */
-async function writeLogicalJourneyBase(request, hooks) {
+/**
+* Publish an immutable, private base pair for review/resume without a public collection index.
+* `onPath` names each file this call may leave behind: a temporary file before it is created, a
+* published one before it is linked, so a packaging worker's owner can remove them when it stops
+* the worker mid-write (ADR 0228). Session spools live under `<temporary>.<uuid>.parallel`.
+*/
+async function writeLogicalJourneyBase(request, hooks, onPath) {
 	const directory = await privateJourneyDirectory(request.directory);
 	const primary = await createTemporary({
 		outputDir: directory,
 		keepTemp: false
-	});
+	}, onPath);
 	const cleanup = createCleanup();
 	let companion;
 	let masks;
@@ -14704,15 +14778,15 @@ async function writeLogicalJourneyBase(request, hooks) {
 		companion = await createTemporary({
 			outputDir: directory,
 			keepTemp: false
-		});
+		}, onPath);
 		masks = await createTemporary({
 			outputDir: directory,
 			keepTemp: false
-		});
+		}, onPath);
 		if (request.captureReview) review = await createTemporary({
 			outputDir: directory,
 			keepTemp: false
-		});
+		}, onPath);
 		const written = await writeLogicalWorkBundle({
 			production: request.production,
 			work: request.work,
@@ -14728,15 +14802,19 @@ async function writeLogicalJourneyBase(request, hooks) {
 		const primaryPath = join(directory, `${bundleId}.primary.zip`);
 		const companionPath = join(directory, `${bundleId}.companion.zip`);
 		const maskPath = join(directory, `${bundleId}.private-masks.zip`);
+		onPath?.(primaryPath);
 		await link(primary.temporary.tempPath, primaryPath);
 		linked.push(primaryPath);
+		onPath?.(companionPath);
 		await link(companion.temporary.tempPath, companionPath);
 		linked.push(companionPath);
+		onPath?.(maskPath);
 		await link(masks.temporary.tempPath, maskPath);
 		linked.push(maskPath);
 		if (!identityMatches(await lstat(primaryPath, { bigint: true }), primary.temporary.identity) || !identityMatches(await lstat(companionPath, { bigint: true }), companion.temporary.identity) || !identityMatches(await lstat(maskPath, { bigint: true }), masks.temporary.identity)) fail("ARTIFACT_IDENTITY_MISMATCH");
 		const reviewPath = join(directory, `${bundleId}.private-review.zip`);
 		if (review) {
+			onPath?.(reviewPath);
 			await link(review.temporary.tempPath, reviewPath);
 			linked.push(reviewPath);
 			if (!identityMatches(await lstat(reviewPath, { bigint: true }), review.temporary.identity)) fail("ARTIFACT_IDENTITY_MISMATCH");
@@ -15087,16 +15165,14 @@ async function writeOutputShard(request, signal, onPath) {
 		const output = await createTemporary({
 			outputDir: directory,
 			keepTemp: false
-		});
-		onPath?.(output.temporary.tempPath);
+		}, onPath);
 		created.push(output.temporary.tempPath);
 		handles.push(output.handle);
 		sink = fileWriter(output.handle, signal);
 		const ledger = await createTemporary({
 			outputDir: directory,
 			keepTemp: false
-		});
-		onPath?.(ledger.temporary.tempPath);
+		}, onPath);
 		created.push(ledger.temporary.tempPath);
 		handles.push(ledger.handle);
 		masks = await createFinalMaskWriter({
@@ -15179,11 +15255,12 @@ function protectedRanges(field, host, ranges) {
 */
 async function runConfiguredScanJob(job, processing, signal, onSourceProgress, onSpool) {
 	const directory = await privateJourneyDirectory(job.directory);
-	const fields = await openRowFile(join(directory, `${randomUUID()}.scan.jsonl`), signal);
+	const fieldsPath = join(directory, `${randomUUID()}.scan.jsonl`);
+	onSpool?.(fieldsPath);
+	const fields = await openRowFile(fieldsPath, signal);
 	const cleanup = createCleanup();
 	let success = false;
 	try {
-		onSpool?.(fields.path);
 		const captures = new Map(job.captures.map((capture) => [capture.partId, capture]));
 		if (captures.size !== job.captures.length || job.sources.some((source) => !captures.has(source.source.id))) fail("ARTIFACT_SOURCE_CHANGED");
 		if (job.sources.length === 0 || job.sources.length > 1e4) fail("ARTIFACT_EMPTY_SCOPE");
@@ -16413,4 +16490,4 @@ async function verifyPreparedSessionSources(prepared, input, signal) {
 	}
 }
 //#endregion
-export { exclusiveLock as $, runConfiguredSessionJob as A, writeLogicalJourneyOutput as B, readConfiguredSearchFields as C, captureLogicalJourneySources as D, prepareCollectionProduction as E, sessionWorkerFailure as F, staticMaskCategory as G, readLogicalJourneyFinalMasks as H, privateCollectionDirectory as I, createConfiguredPreviewStream as J, readWorkspacePair as K, defaultParallelism as L, parseCollectionWorkspaceSummary as M, createSharedSessionPool as N, capturedJourneyScope as O, SessionWorkerError as P, safeError as Q, gitSeedsProvider as R, readOriginalSearchFields as S, checkReusableBundle as T, readConfiguredOutputInfo as U, privateJourneyDirectory as V, processJourneyMetadataFields as W, createTemporary as X, createInspectionProcessor as Y, createCleanup as Z, readStaticSessionMasks as _, scanReviewFields as a, windowsAclCodes as at, writePrivateReviewPayload as b, readSessionScanRecords as c, verifyOutputShard as d, makePrivateDirectory as et, writeOutputShard as f, processJourneyMetadata as g, readCapturedOriginalRows as h, buildWorkScanBatches as i, isWindowsAclFailure as it, readCollectionIndex as j, renderJobDigest as k, scanPreparedSession as l, captureConfiguredSessionJob as m, verifyPreparedSessionSources as n, restrictToOwner as nt, createWorkPieces as o, openConfiguredUpload as p, listAgentSetup as q, prepareSessionScans as r, windowsOwnerOnly as rt, readSessionScanFields as s, preparedScanConfiguration as t, openPrivateFile as tt, runConfiguredScanJob as u, staticSessionJobs as v, createCollectionArtifacts as w, readPrivateReviewPayload as x, writeLogicalJourneyBase as y, parallelismLimits as z };
+export { safeError as $, runConfiguredSessionJob as A, writeLogicalJourneyOutput as B, readConfiguredSearchFields as C, captureLogicalJourneySources as D, prepareCollectionProduction as E, sessionWorkerFailure as F, staticMaskCategory as G, readLogicalJourneyFinalMasks as H, privateCollectionDirectory as I, createConfiguredPreviewStream as J, readWorkspacePair as K, defaultParallelism as L, parseCollectionWorkspaceSummary as M, createSharedSessionPool as N, capturedJourneyScope as O, SessionWorkerError as P, createCleanup as Q, gitSeedsProvider as R, readOriginalSearchFields as S, checkReusableBundle as T, readConfiguredOutputInfo as U, privateJourneyDirectory as V, processJourneyMetadataFields as W, createTemporary as X, createInspectionProcessor as Y, removeNamedTemporarySpools as Z, readStaticSessionMasks as _, scanReviewFields as a, isWindowsAclFailure as at, writePrivateReviewPayload as b, readSessionScanRecords as c, verifyOutputShard as d, exclusiveLock as et, writeOutputShard as f, processJourneyMetadata as g, readCapturedOriginalRows as h, buildWorkScanBatches as i, windowsOwnerOnly as it, readCollectionIndex as j, renderJobDigest as k, scanPreparedSession as l, captureConfiguredSessionJob as m, verifyPreparedSessionSources as n, openPrivateFile as nt, createWorkPieces as o, windowsAclCodes as ot, openConfiguredUpload as p, listAgentSetup as q, prepareSessionScans as r, restrictToOwner as rt, readSessionScanFields as s, preparedScanConfiguration as t, makePrivateDirectory as tt, runConfiguredScanJob as u, staticSessionJobs as v, createCollectionArtifacts as w, readPrivateReviewPayload as x, writeLogicalJourneyBase as y, parallelismLimits as z };

package/dist/{src-DynBRDBc.mjs → src-qoLRvX-A.mjs}

@@ -1,7 +1,7 @@
-import { An as nativeBoolean, Hn as defaultLimits, In as retainedMainTextNodes, Mn as nativeItems, Nn as nativeText, Qt as sourceSnapshotId, Tn as parseNativeRecord, Zt as observeSource, jn as nativeField, nr as ProcessingError, vn as walkNativeFields } from "./locate-Bn32k2se.mjs";
-import { Ft as nativeAdapterVersions, Kr as gitMetadataBudgetBytes, nt as reviewInventory } from "./src-CPPjOyHZ.mjs";
-import { a as isRecord, i as errorCode, n as checkDiscoveryAbort, o as unresolvedMetadata, r as discoveryBounds, t as DiscoveryWarnings } from "./model-7Nu7szNP.mjs";
-import { c as previewLimits, d as checkOpenSource, f as checkSource, h as openSource, i as pageFits, l as previewSourceVersion, m as noSymlinks, p as fileSnapshot, r as previewHeapLimits, s as previewMessageSchema, u as createZstdFrameCheck } from "./run-CCATsHS2.mjs";
+import { An as nativeBoolean, Hn as defaultLimits, In as retainedMainTextNodes, Mn as nativeItems, Nn as nativeText, Qt as sourceSnapshotId, Tn as parseNativeRecord, Zt as observeSource, jn as nativeField, nr as ProcessingError, vn as walkNativeFields } from "./locate-U3-nkird.mjs";
+import { $r as gitMetadataBudgetBytes, Pt as nativeAdapterVersions, tt as reviewInventory } from "./src-B4R5XMEP.mjs";
+import { a as isRecord, i as errorCode, n as checkDiscoveryAbort, o as unresolvedMetadata, r as discoveryBounds, t as DiscoveryWarnings } from "./model-BBAnsFAx.mjs";
+import { c as previewLimits, d as checkOpenSource, f as checkSource, h as openSource, i as pageFits, l as previewSourceVersion, m as noSymlinks, p as fileSnapshot, r as previewHeapLimits, s as previewMessageSchema, u as createZstdFrameCheck } from "./run-4G_CvdDj.mjs";
 import { a as titleHintLimits, n as titleHeapLimits, o as titleInputSchema, r as decodeTitleError, s as titleReplySchema } from "./heap-1FYhGds4.mjs";
 import { constants } from "node:fs";
 import { lstat, open, opendir, readFile, readdir, realpath, stat } from "node:fs/promises";
@@ -363,7 +363,8 @@ function interactionTime(value, harness) {
 			"permission-mode",
 			"pr-link",
 			"relocated",
-			"ai-title"
+			"ai-title",
+			"tools-used"
 		].includes(String(type))) return { kind: "unknown" };
 	} else if ([
 		"session_meta",
@@ -376,6 +377,7 @@ function interactionTime(value, harness) {
 	else if (type === "response_item" && isRecord(value["payload"])) {
 		const payload = value["payload"];
 		if (payload["type"] === "message" && payload["role"] === "developer") return { kind: "other" };
+		if (payload["type"] === "configuration_update") return { kind: "other" };
 		interaction = payload["type"] === "message" && [
 			"user",
 			"assistant",
@@ -666,7 +668,8 @@ const excludedRecords = /* @__PURE__ */ new Set([
 	"frame-link",
 	"artifact-autoreact-ledger",
 	"artifact-comment-monitor",
-	"worktree-state"
+	"worktree-state",
+	"tools-used"
 ]);
 /** Prove every conversational carrier, rather than trusting a deduplicated diagnostic node. */
 function claudeMainProseComplete(root, selection) {
@@ -838,6 +841,7 @@ function codexMainProseComplete(root, selection) {
 		const type = typeOf(node);
 		if (type === "message") return message(node);
 		if (type === "agent_message") return message(node, "assistant");
+		if (type === "configuration_update") return !selection.diagnostics.some((diagnostic) => diagnostic.code === "unsupported-native-shape" && diagnostic.nodeId === node.id);
 		return excludedItems.has(type ?? "");
 	};
 	const type = typeOf(root);
@@ -1315,7 +1319,8 @@ function codexItem(context, node) {
 		"compaction",
 		"web_search_call",
 		"tool_search_call",
-		"tool_search_output"
+		"tool_search_output",
+		"configuration_update"
 	].includes(type ?? "")) {
 		context.claim(node, context.origin("unknown", "unknown", "unknown"));
 		return;
@@ -1368,7 +1373,10 @@ function codexItem(context, node) {
 		"execution",
 		"tools"
 	]);
-	else schemaKeys(context, node, common);
+	else if (type === "configuration_update") {
+		schemaKeys(context, node, [...common, "reasoning"]);
+		schemaKeys(context, nativeField(node, "reasoning"), ["effort"]);
+	} else schemaKeys(context, node, common);
 	protect(context, node, ["timestamp"], "timestamp");
 	if (type === "message" || type === "agent_message") codexMessage(context, node, type === "agent_message" ? nativeText(nativeField(node, "author")) : void 0);
 	else if ([
@@ -1833,6 +1841,7 @@ function withOutput(holder, tags, select) {
 var ClaudeSelection = class {
 	edits = [];
 	diagnostics = [];
+	images = 0;
 	/** Tags of the tool result being selected; set only while one result is processed. */
 	output;
 	diagnose(code, node) {
@@ -1910,10 +1919,15 @@ var ClaudeSelection = class {
 			};
 		}
 	}
+	/** Counts one model-facing image block; sidecar and request copies are not counted. */
+	image() {
+		this.images += 1;
+	}
 	result() {
 		return {
 			edits: this.edits,
-			diagnostics: this.diagnostics
+			diagnostics: this.diagnostics,
+			...this.images ? { images: this.images } : {}
 		};
 	}
 };
@@ -2144,6 +2158,7 @@ function outputMedia(body, selection) {
 }
 /** Readers check image blocks by type, media type and count; the encoded image is never read. */
 function imageBody(block, selection) {
+	selection.image();
 	selection.unread(() => mediaBody(block, selection));
 }
 function messageText(text, selection, worker, compact, user) {
@@ -2922,6 +2937,7 @@ function content(context, node, role, mode, userAttachments = false) {
 			"output_image",
 			"local_image"
 		].includes(type ?? "")) {
+			if (context.images !== void 0) context.images += 1;
 			const from = context.edits.length;
 			media(context, part);
 			unread(context, from);
@@ -3309,6 +3325,11 @@ function instructions(context, node) {
 function sessionContext(context, payload) {
 	for (const key of ["base_instructions", "developer_instructions"]) instructions(context, nativeField(payload, key));
 }
+/** A harness-authored settings change, such as a new reasoning effort, carries no prose. */
+function configurationUpdate(context, payload) {
+	const reasoning = nativeField(payload, "reasoning");
+	if (payload.kind !== "object" || payload.properties.some(({ key }) => key.value !== "type" && key.value !== "reasoning") || reasoning !== void 0 && (reasoning.kind !== "object" || reasoning.properties.some(({ value }) => value.kind === "array" || value.kind === "object"))) unsupported(context, payload);
+}
 function worldState(context, payload) {
 	const state = nativeField(payload, "state");
 	if (state?.kind !== "object") {
@@ -3529,6 +3550,7 @@ function nativeItem(context, node, calls) {
 		"text",
 		"encrypted_content"
 	]) selectText(context, nativeField(node, key), key === "encrypted_content" ? "ciphertext" : "compaction", "remove");
+	else if (type === "configuration_update") configurationUpdate(context, node);
 	else if (type !== "web_search_call" && type !== "tool_search_call") unsupported(context, node);
 }
 function createCodexRetention(options) {
@@ -3538,12 +3560,13 @@ function createCodexRetention(options) {
 	const inspector = codexSourceInspector();
 	return (root) => {
 		inspector.inspect(root);
+		const type = fieldText(root, "type");
 		const context = {
 			sourceRole,
 			edits: [],
-			diagnostics: []
+			diagnostics: [],
+			...type === "response_item" ? { images: 0 } : {}
 		};
-		const type = fieldText(root, "type");
 		const payload = nativeField(root, "payload");
 		if (type === "session_meta" && payload?.kind === "object") {
 			if (codexIdentity(root).role === "unknown") unsupported(context, payload);

package/dist/store-database-worker.mjs

@@ -1,4 +1,4 @@
-import { i as createExecutor, t as assertStoreHeap } from "./heap-tfU61Ehy.mjs";
+import { i as createExecutor, t as assertStoreHeap } from "./heap-eO_uWpD1.mjs";
 import { parentPort } from "node:worker_threads";
 //#region packages/local-host/src/store/worker/entry.ts
 if (!parentPort) throw new Error("STORE_WORKER_REQUIRED");