@guided-context-ledger/core 0.1.0

package/LICENSE

@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2026 The Guided Context Ledger Authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/NOTICE

@@ -0,0 +1,10 @@
+Guided Context Ledger (GCL)
+Copyright 2026 The Guided Context Ledger Authors
+
+This product includes software developed for the Guided Context Ledger project.
+
+Licensed under the Apache License, Version 2.0. See the LICENSE file.
+
+The knowledge layer is aligned with the Open Knowledge Format (OKF),
+introduced by Google Cloud (2026). OKF is credited as the origin of that
+format; GCL claims no authorship of it.

package/README.md

@@ -0,0 +1,24 @@
+# @guided-context-ledger/core
+
+Transport-agnostic core runtime for the **Guided Context Ledger (GCL)** — the auditable provenance layer for multi-agent work.
+
+This package is the engine, with no transport or MCP dependency. It gives you:
+
+- **Workspace I/O** — read/write a plain-Markdown workspace (`Workspace`).
+- **The append-only coordination trail** — events, claims, leases, `orient`/`needs_me`, task pool projections (`EventLog`).
+- **The content-addressed revision ledger** — `HEAD`, CAS advance, hash-linked revisions with declared-vs-derived provenance (`GclLedger`).
+
+It is the shared substrate the reference connector is built on. Bring your own transport (MCP, HTTP, CLI) on top of it.
+
+```bash
+npm install @guided-context-ledger/core
+```
+
+```ts
+import { Workspace, EventLog, GclLedger } from "@guided-context-ledger/core";
+```
+
+For the protocol itself, the starter workspace, and a runnable MCP connector, see the monorepo:
+**https://github.com/guided-context-ledger/guided-context-ledger**
+
+Apache-2.0. Pre-1.0 alpha — interfaces may change between minor releases (see the repo `CHANGELOG.md`).

package/dist/events.d.ts

@@ -0,0 +1,430 @@
+export declare const EVENT_TYPES: readonly ["message", "ack", "handoff", "conflict", "claim", "task", "task_state", "task_authorization", "task_condition"];
+export type EventType = (typeof EVENT_TYPES)[number];
+/** Lifecycle states a `claim` event can assert over a work item. Ratified: the GCL coordination spec (codex). */
+export declare const CLAIM_STATUSES: readonly ["claimed", "released", "completed"];
+export type ClaimStatus = (typeof CLAIM_STATUSES)[number];
+/**
+ * Truth lifecycle a `task_state` event asserts over a task. Distinct from claim ownership (§2.3).
+ * Both values are TERMINAL and IMMUTABLE: once a task is completed or cancelled its truth is settled
+ * for good. There is deliberately no `reopened` — reopening a closed task retroactively mutates a
+ * recorded completion, which is tampering with the append-only truth trail (Kyle, 2026-06-19). Forward
+ * work is a NEW successor task that references the original (see SUCCESSION_RELATIONS), yielding a
+ * visible lineage chain instead of a muddied open/close/open history.
+ */
+export declare const TASK_STATUSES: readonly ["completed", "cancelled"];
+export type TaskStatus = (typeof TASK_STATUSES)[number];
+/**
+ * How a successor task relates to the original it supersedes (forward work after a terminal close,
+ * GCL-State-Model §"Task re-opening"). The relation tells an observer WHY a closed task reappeared:
+ *  - `continuation` — a clean follow-on; the original finished and this carries it forward.
+ *  - `redo`         — the original regressed or proved insufficient; redo the work.
+ *  - `correction`   — the original was closed in error or is disputed; this corrects the record.
+ * Carried on the SUCCESSOR's creation event via `succeeds` (the original task_id) + `succession`.
+ */
+export declare const SUCCESSION_RELATIONS: readonly ["continuation", "redo", "correction"];
+export type SuccessionRelation = (typeof SUCCESSION_RELATIONS)[number];
+/**
+ * Conditions an item can carry (GCL-State-Model §"The dimensions" axis 3). FACTS ONLY — the system
+ * reports facts, the human assigns meaning (facts-vs-meaning, locked). Conditions STACK and each carries
+ * an inspectable reason. They are orthogonal to lifecycle (an in-progress task can become blocked/stale).
+ *  - `overdue`      — DERIVED fact: now is past `due_date` (zero-threshold, no "soon" opinion).
+ *  - `stale`        — DERIVED fact: no qualifying/semantic-transition activity within the cadence window.
+ *  - `pending`      — DECLARED: a decision/input is awaited but a path forward exists (the ball is in
+ *                     someone's court who CAN act). Author-set; no auto-derivation mechanism in v0.
+ *  - `blocked`      — DECLARED: a hard stop (missing parts/upstream/broken) — cannot proceed regardless.
+ *                     Author-set; no auto-derivation mechanism in v0.
+ *  - `undetermined` — honest fallback: a determination was expected but inputs are missing (e.g. no
+ *                     `due_date` → can't assess overdue). Distinct from *clear*; quiet, not an alarm.
+ * v0 auto-emits only the two purely-derived facts (`overdue`, `stale`); `pending`/`blocked` await a
+ * declaration mechanism and `undetermined` is emitted only where a determination is genuinely expected.
+ */
+export declare const TASK_CONDITIONS: readonly ["pending", "blocked", "overdue", "stale", "undetermined"];
+export type TaskCondition = (typeof TASK_CONDITIONS)[number];
+/**
+ * The DECLARED conditions — the author-set subset of the conditions axis (the rest are derived facts).
+ * `pending` (a decision/input is awaited but a path forward exists) vs `blocked` (a hard stop). Declared
+ * via a `task_condition` event, not derived, because intent isn't computable from timestamps.
+ */
+export declare const DECLARABLE_CONDITIONS: readonly ["pending", "blocked"];
+export type DeclarableCondition = (typeof DECLARABLE_CONDITIONS)[number];
+/** A `task_condition` event either asserts a condition (`set`) or retracts a specific prior assertion (`cleared`). */
+export declare const CONDITION_STATES: readonly ["set", "cleared"];
+export type ConditionState = (typeof CONDITION_STATES)[number];
+/**
+ * One ACTIVE declared-condition assertion on a task (a `set` not yet `cleared`). Assertion identity is the
+ * `set` event's id, so clearing one actor's blocker can't erase another's independent blocker (codex
+ * the GCL coordination spec). Each carries its own author + reason.
+ */
+export interface DeclaredCondition {
+    assertion_id: string;
+    condition: DeclarableCondition;
+    reason: string;
+    actor: string;
+    since: string;
+}
+/** A condition fact plus the inspectable reason behind it (reasons render in the surface, not just provenance). */
+export interface ConditionFlag {
+    condition: TaskCondition;
+    reason: string;
+}
+/** A `task_authorization` event's assertion. `approved` makes a task claim-eligible; `revoked` withdraws it. */
+export declare const TASK_AUTHORIZATIONS: readonly ["approved", "revoked"];
+export type TaskAuthorization = (typeof TASK_AUTHORIZATIONS)[number];
+/**
+ * Workspace pull policy — gates autonomous CLAIM eligibility over the pool, never visibility.
+ * Default `human_directed` (unassigned-by-default; Kyle #239 / codex #242). A default, not a constant.
+ */
+export declare const TASK_PULL_POLICIES: readonly ["human_directed", "proactive_until_stale", "proactive"];
+export type TaskPullPolicy = (typeof TASK_PULL_POLICIES)[number];
+export declare const DEFAULT_TASK_PULL_POLICY: TaskPullPolicy;
+/** Optional scope envelope on a task. v0 matches project/space; principal_scope is opaque (OI-001 deferred). */
+export interface TaskScope {
+    project?: string;
+    space?: string;
+    principal_scope?: string;
+}
+/** Default lease window for a claim with no explicit lease_expires_at (interactive coordination work). */
+export declare const DEFAULT_LEASE_MS: number;
+export declare class EventError extends Error {
+    readonly code: string;
+    constructor(message: string, code: string);
+}
+export interface AgentEvent {
+    seq: number;
+    event_id: string;
+    thread: string;
+    actor: string;
+    type: EventType;
+    parent_event_id: string | null;
+    created_at: string;
+    body: string;
+    /** Coordination actor ids this event is directed at (NOT humans/principals). Empty = unaddressed. */
+    addressed_to: string[];
+    /** Whether an addressee owes a causal response. Defaults by type when unstated (see RESPONSE_REQUIRED_BY_TYPE). */
+    requires_response: boolean;
+    /** For type=claim only: the lifecycle assertion. null for non-claim events. */
+    claim_status: ClaimStatus | null;
+    /** For type=claim only: ISO-8601 lease end, or null for an indefinite hold. */
+    lease_expires_at: string | null;
+    /** For type=task only: short title (the body carries the full description). null otherwise. */
+    task_title: string | null;
+    /** For type=task only: capabilities a claimant needs. [] = any capable reasoner. */
+    requires: string[];
+    /** For type=task only: optional role hint. null otherwise. */
+    role: string | null;
+    /** For type=task only: optional scope envelope (project/space/principal_scope). null otherwise. */
+    scope: TaskScope | null;
+    /** For type=task only: the task_id this one supersedes (forward work after a terminal close). null otherwise. */
+    succeeds: string | null;
+    /** For type=task only: how this task relates to the one it `succeeds`. Required iff `succeeds` is set. null otherwise. */
+    succession: SuccessionRelation | null;
+    /** For type=task only: optional raw start date (ISO-8601 / any Date-parseable string). Stored verbatim; null otherwise. */
+    start_date: string | null;
+    /** For type=task only: optional raw due date. `overdue`/`days_remaining` derive from it; null = no deadline (clear, not undetermined). */
+    due_date: string | null;
+    /** For type=task_state only: the truth transition. null otherwise. */
+    task_status: TaskStatus | null;
+    /** For type=task_condition only: the declared condition (pending|blocked). null otherwise. */
+    condition: DeclarableCondition | null;
+    /** For type=task_condition only: set (assert) or cleared (retract a prior assertion). null otherwise. */
+    condition_state: ConditionState | null;
+    /** For type=task_authorization only: the assignment assertion. null otherwise. */
+    authorization: TaskAuthorization | null;
+    /** For type=task_state / task_authorization: optional human-readable reason. null otherwise. */
+    reason: string | null;
+    /** For type=task_state: optional refs to the produced result (paths/event ids). [] otherwise. */
+    result_refs: string[];
+}
+/** Optional structured addressing / claim payload for an appended event. */
+export interface AppendOptions {
+    /** Coordination actor ids this event is directed at. Use even for one recipient. */
+    addressedTo?: string[];
+    /** Override the type-derived default for whether the addressee owes a response. */
+    requiresResponse?: boolean;
+    /** For type=claim: the lifecycle assertion (claimed|released|completed). Required when type=claim. */
+    claimStatus?: ClaimStatus;
+    /**
+     * For type=claim with claimStatus=claimed: ISO-8601 lease end. Omitted → server stamps
+     * created_at + DEFAULT_LEASE_MS. Pass null explicitly for an indefinite hold (no expiry).
+     */
+    leaseExpiresAt?: string | null;
+    /** For type=task: short title (body carries the description). */
+    taskTitle?: string;
+    /** For type=task: capabilities a claimant needs (`[]`/omitted = any capable reasoner). */
+    requires?: string[];
+    /** For type=task: optional role hint. */
+    role?: string;
+    /** For type=task: optional scope envelope. */
+    scope?: TaskScope;
+    /** For type=task: the task_id this task supersedes (forward work after a terminal close). Pair with `succession`. */
+    succeeds?: string;
+    /** For type=task: how this task relates to the one it `succeeds` (continuation|redo|correction). Required iff `succeeds` is set. */
+    succession?: SuccessionRelation;
+    /** For type=task: optional raw start date (any Date-parseable string), stored verbatim. */
+    startDate?: string;
+    /** For type=task: optional raw due date (any Date-parseable string). Drives derived `overdue`/`days_remaining`. */
+    dueDate?: string;
+    /** For type=task_state: the truth transition (completed|cancelled — both terminal/immutable). Required when type=task_state. */
+    taskStatus?: TaskStatus;
+    /** For type=task_condition with conditionState=set: the declared condition (pending|blocked). Required on a `set`. */
+    condition?: DeclarableCondition;
+    /** For type=task_condition: `set` (parent=task) asserts; `cleared` (parent=the set assertion) retracts it. Required. */
+    conditionState?: ConditionState;
+    /** For type=task_authorization: the assignment assertion (approved|revoked). Required when type=task_authorization. */
+    authorization?: TaskAuthorization;
+    /** For type=task_state / task_authorization / task_condition: optional human-readable reason (required on a condition `set`). */
+    reason?: string;
+    /** For type=task_state: optional refs to the produced result. */
+    resultRefs?: string[];
+}
+export declare class EventLog {
+    readonly root: string;
+    readonly dir: string;
+    constructor(workspaceRoot: string);
+    private threadFile;
+    /** The workspace root must already exist — we never silently create it. */
+    private assertRoot;
+    private acquireLock;
+    private releaseLock;
+    private countLines;
+    /**
+     * Append one event. Server-stamps created_at. Returns the assigned seq
+     * (line ordinal) and a stable event_id. Cross-process safe via the lockfile.
+     */
+    append(thread: string, actor: string, body: string, type?: EventType, parentEventId?: string | null, opts?: AppendOptions): Promise<{
+        seq: number;
+        event_id: string;
+        created_at: string;
+    }>;
+    private parseLine;
+    private readRaw;
+    /**
+     * Read events with seq > afterSeq (the cursor → only deltas). If waitMs > 0
+     * and there are no new events, long-poll: re-check until new events arrive or
+     * the wait elapses (collapses idle polling into one call). Pass `actor` to
+     * record presence (so peers can tell you are alive even while only reading).
+     */
+    read(thread: string, afterSeq?: number, waitMs?: number, actor?: string): Promise<{
+        events: AgentEvent[];
+        latest_seq: number;
+        corrupt: number;
+        presence: Record<string, string>;
+    }>;
+    /** Advisory last-active map; last-write-wins (races tolerable, parse errors reset). */
+    private touchPresence;
+    private readPresence;
+    /** List thread ids that have an event log. */
+    listThreads(): Promise<string[]>;
+    /**
+     * Cross-thread overview for `orient`: per-thread cursor state relative to
+     * `actor` (deterministic, no inference). `unread` = events after the actor's
+     * own last post; `needs_me` flags threads whose latest event is from someone
+     * else and is unread by the actor. Records presence for the actor.
+     */
+    overview(actor?: string): Promise<{
+        threads: ThreadOverview[];
+        open_for_me: OpenForMeItem[];
+        presence: Record<string, string>;
+    }>;
+    /**
+     * Cross-thread causal responses to an owed event — the addresser-side "answered in …" projection
+     * (the GCL coordination spec). Walks the GLOBAL causal DAG from `eventRef` across all threads and returns each
+     * non-`claim` descendant response, flagging the ones that landed in a different thread so a connector can
+     * render "answered in <thread>". A `claim` is excluded for the same reason discharge excludes it (taking
+     * work ≠ answering). Optionally filter to one actor's responses. Pure read-time projection, zero mutation.
+     */
+    causalResponses(eventRef: string, opts?: {
+        byActor?: string;
+    }): Promise<CausalResponse[]>;
+    /**
+     * Project a SINGLE task's full state by id (truth, ownership, lineage, ignored terminal attempts).
+     * Closed tasks leave the open pool but remain inspectable here — this is the read path that makes the
+     * append-only invariant explainable: a later terminal attempt is ignored, not invisible (the GCL coordination spec).
+     */
+    projectTask(thread: string, taskId: string, now?: number): Promise<TaskProjection | null>;
+    /**
+     * Capability-routed pool of unassigned open tasks across all threads (the GCL coordination spec–#244).
+     * Visibility is unconditional; per-row `eligibility` reflects whether the active `policy`
+     * lets THIS actor claim now. Live-claimed (assigned) tasks are excluded — they are
+     * in-progress, not pool work; terminal tasks leave the pool but remain in history.
+     * Returns the full structured rows + total count — the discoverability anchor: a caller
+     * MUST NOT hide rows beyond this without surfacing the count and an expand path (AC n).
+     */
+    taskPool(opts?: TaskPoolOptions): Promise<{
+        open_pool: TaskRow[];
+        total_eligible: number;
+        staleness_assessment: StalenessAssessment;
+    }>;
+}
+/** Projected ownership of a work item, folded from its claim events at read time. */
+export interface ClaimState {
+    /** Current owner actor, or null if unclaimed / released / completed. */
+    owner: string | null;
+    /** The owner's lease end (ISO-8601), or null for an indefinite hold. */
+    expires: string | null;
+    /** True when an owner holds the item but the lease has lapsed vs the read clock — re-claimable. */
+    stale: boolean;
+    /** Latest lifecycle status seen for the item (claimed while owned; released/completed when freed). */
+    status: ClaimStatus | null;
+}
+export type TaskTruth = "open" | "completed" | "cancelled";
+/** Why a still-open task is flagged for human attention. Derived only — never an event/terminal state (§2.6). */
+export type StaleReason = "unclaimed_age_exceeded" | "verification_pending_age_exceeded" | "no_capable_route" | "creator_unavailable";
+/** Whether the orienting actor may claim a pool task right now, under the active policy. */
+export type TaskEligibility = "claimable_now" | "needs_authorization";
+/**
+ * A terminal `task_state` event that arrived AFTER the task's truth was already settled — ignored by
+ * first-terminal-wins, but never invisible: retained here with provenance so a connector can explain the
+ * conflict ("X tried to mark this cancelled, but it was already completed"). The first terminal stays
+ * authoritative; these supersede nothing (the GCL coordination spec, codex's naming).
+ */
+export interface TerminalAttempt {
+    event_id: string;
+    actor: string;
+    attempted_status: TaskStatus;
+    at: string;
+    reason: "already_terminal";
+    /** The winning terminal event that had already settled the truth — the provenance edge that makes the
+     * conflict self-explaining ("ignored because settled_by_event_id closed it first"). Part of the
+     * explanation contract, not cosmetic (codex the GCL coordination spec). */
+    settled_by_event_id: string;
+}
+export interface TaskProjection {
+    task_id: string;
+    thread: string;
+    creation: AgentEvent;
+    truth: TaskTruth;
+    /** Ownership was `completed` but truth never closed → work done, acceptance pending (§2.3). */
+    verification_pending: boolean;
+    ownership: ClaimState;
+    /** Latest task_authorization: approved (and not later revoked). */
+    authorized: boolean;
+    /** Later terminal task_state events ignored by first-terminal-wins — retained, never silently dropped. */
+    ignored_terminal_attempts: TerminalAttempt[];
+    /** ACTIVE declared conditions (pending/blocked `set` and not yet `cleared`), each with its own author + reason. */
+    declared_conditions: DeclaredCondition[];
+    created_at: string;
+    last_activity_at: string;
+}
+/** One structured `open_pool` row (codex #243). Grouping/sorting is the client's view choice. */
+export interface TaskRow {
+    task_id: string;
+    thread: string;
+    title: string;
+    requires: string[];
+    role: string | null;
+    scope: TaskScope | null;
+    /** Lineage: the task_id this one supersedes (forward work after a terminal close), or null. */
+    succeeds: string | null;
+    /** Lineage: how this task relates to the one it `succeeds` (continuation|redo|correction), or null. */
+    succession: SuccessionRelation | null;
+    truth: TaskTruth;
+    verification_pending: boolean;
+    authorized: boolean;
+    /** Eligibility UNDER THE ACTIVE POLICY — visibility is unconditional, claimability is gated. */
+    eligibility: TaskEligibility;
+    /** Hygiene flags (§2.6); presence never changes claimability or hides the row. */
+    stale_reasons: StaleReason[];
+    /** Derived condition FACTS (overdue/stale, each with a reason); facts-vs-meaning — shown, never blended into a score. */
+    conditions: ConditionFlag[];
+    /** Raw temporal facts (sparse). null = no such date recorded. */
+    start_date: string | null;
+    due_date: string | null;
+    /** Computed view of `due_date` vs now in whole days (negative = past due); null when no due_date. */
+    days_remaining: number | null;
+    /** Computed view: whole days since the last qualifying activity. */
+    days_since_activity: number;
+    /** Routing metadata only — never ownership (codex #242). */
+    addressed_to: string[];
+    created_at: string;
+    last_activity_at: string;
+    age_seconds: number;
+}
+/**
+ * Pool-wide staleness COVERAGE — reported once at the aggregate boundary, not per row (codex
+ * the GCL coordination spec). `undetermined` here means the pool was assessed for staleness but no cadence policy
+ * was supplied, so the dimension is honestly unknown for every open task — a "set a cadence" hygiene signal
+ * that keeps the corpus from turning yellow row-by-row. `assessed` means a policy was in force.
+ */
+export interface StalenessAssessment {
+    status: "assessed" | "undetermined";
+    /** Present when `undetermined`: the machine reason a connector can label. */
+    reason?: "no_cadence_policy";
+    /** Present when `assessed`: the cadence window applied. */
+    cadence_ms?: number;
+}
+export interface TaskPoolOptions {
+    /** The orienting actor (for mine/eligibility framing). */
+    actor?: string;
+    /** The actor's capabilities; when given, only tasks whose `requires ⊆ capabilities` are in MY pool (AC d). */
+    capabilities?: string[];
+    /** Active pull policy. Default `human_directed` (unassigned-by-default). */
+    policy?: TaskPullPolicy;
+    /** Filter to a scope (project/space). principal_scope never gates in v0 (AC e). */
+    scope?: TaskScope;
+    /** Read clock; defaults to now. */
+    now?: number;
+    /** Age after which an unclaimed open task is flagged `unclaimed_age_exceeded`. */
+    staleUnclaimedMs?: number;
+    /** Age after which a verification_pending task is flagged `verification_pending_age_exceeded`. */
+    staleVerificationMs?: number;
+    /** Cadence window after which an open task with no qualifying activity derives the `stale` condition. */
+    staleCadenceMs?: number;
+}
+export interface ThreadOverview {
+    thread: string;
+    latest_seq: number;
+    my_last_seq: number;
+    unread: number;
+    last_event: {
+        seq: number;
+        actor: string;
+        type: EventType;
+        summary: string;
+    } | null;
+    needs_me: boolean;
+    /** Count of open responsibilities directed at the orienting actor in this thread. */
+    open_for_me: number;
+}
+/** One open responsibility directed at the orienting actor (an unanswered, response-requiring address). */
+export interface OpenForMeItem {
+    thread: string;
+    seq: number;
+    event_id: string;
+    /** Who addressed the actor (the event author). */
+    actor: string;
+    type: EventType;
+    summary: string;
+    /** structured = explicit addressed_to; heuristic = prose @mention bridge (lower confidence). */
+    source: "structured" | "heuristic";
+    /**
+     * Present when the item has been claimed. Items live-claimed by ANOTHER actor are suppressed
+     * (absent from open_for_me); this surfaces only items the actor owns (`mine: true`) or whose
+     * claim has gone stale (`stale: true`, re-claimable).
+     */
+    claim?: {
+        status: "claimed";
+        claimed_by: string;
+        /** ISO-8601 lease end, or null for an indefinite hold. */
+        expires: string | null;
+        /** True when the lease lapsed vs the read clock — re-claimable. */
+        stale: boolean;
+        /** True when the orienting actor is the owner. */
+        mine: boolean;
+    };
+    /**
+     * True when this owed event's own causal parent lives in ANOTHER thread — the discussion it belongs to
+     * spans threads. A coordination-integrity signal (not stale): it flags the "right thread name, wrong live
+     * discussion" split so a connector can surface "continued in …". Derived, never authored.
+     */
+    cross_thread?: boolean;
+}
+/** A causal response to an owed event, possibly in a different thread (the addresser-side "answered in …" view). */
+export interface CausalResponse {
+    event_id: string;
+    thread: string;
+    actor: string;
+    type: EventType;
+    /** True when the response landed in a different thread than the event it answers. */
+    cross_thread: boolean;
+}