@hearsay-tools/squawk 0.0.0-stage → 0.17.0-pr3058.5683

package/dist/workflows/run/queued-revival.js

@@ -0,0 +1,124 @@
+import { atTaskHead, atContinue } from './launch-read-resolver.js';
+import { queuedStartAt } from '../run-scheduling.js';
+import { stepKind } from '../types.js';
+/** Save restart evidence before queue admission or the next startup await. */
+export function checkpointRestartContext(context, host, run, queuedStepId) {
+    const message = atContinue.checkpoint(run) ?? (queuedStepId ? {
+        ...host.toQueuedMessage(run.id, []), id: queuedStepId, text: 'Continue.', origin: 'lifecycle',
+    } : undefined);
+    if (!message)
+        return run;
+    const updated = context.store.updateRun(run.id, { continuationMessage: {
+            ...message,
+            ...(message.origin === 'lifecycle' && message.text === host.restartContinuationPrompt ? { text: 'Continue.' } : {}),
+            resumeContext: { ...message.resumeContext, restarted: true },
+        } }) ?? run;
+    context.store.flush();
+    return updated;
+}
+/**
+ * Rebuild executable state for a durable queued record. Shared by recovery and the watchdog;
+ * reconstruct jobs or continuations before pumping.
+ */
+export async function reviveQueuedRun(context, host, run, reason) {
+    if (host.isActive(run.id) || host.workerExecutionStopped(run.id))
+        return;
+    const queuedContinuation = [...run.steps]
+        .reverse()
+        .find((step) => step.status === 'pending' && host.isSyntheticContinuation(run, step));
+    const sessionStep = queuedContinuation
+        ? [...run.steps].reverse().find((step) => step.id !== queuedContinuation.id && step.sessionId)
+        : undefined;
+    if (queuedContinuation && sessionStep?.sessionId) {
+        reviveQueuedContinuation(context, host, run, reason, queuedContinuation.id, sessionStep);
+        return;
+    }
+    if (run.delegation?.role === 'worker') {
+        reviveQueuedWorker(context, host, run, reason);
+        return;
+    }
+    const workflow = await host.reviveWorkflow(run);
+    if (!workflow) {
+        host.move(run.id, 'fail-start', { error: 'interrupted — workflow definition not recoverable after a restart' });
+        context.store.appendEvent(run.id, {
+            type: 'lifecycle',
+            message: `${reason} — workflow definition not recoverable, task failed`,
+        });
+        return;
+    }
+    host.enqueueJob(run.id, {
+        workflow,
+        startAt: queuedStartAt(run, workflow),
+        // Rehydrate again at dequeue so edits and stacked messages keep their admission-time reads.
+        input: host.hydrateQueuedInput(run.id, atTaskHead.recoveryInput(run)),
+    });
+    context.store.appendEvent(run.id, { type: 'lifecycle', message: `${reason} — task re-queued` });
+}
+export function reviveQueuedContinuation(context, host, run, reason, queuedStepId, sessionStep) {
+    if (reason === 'cezar restarted')
+        run = host.checkpointRestartContext(run, queuedStepId);
+    const { backend, sessionBackend, sameAccount, recoveredSessionId } = queuedResumeSession(context, host, run, sessionStep);
+    if (atContinue.isPrintTransport(sessionStep) && sessionBackend === backend && sameAccount && !recoveredSessionId) {
+        const error = 'Cursor print session identity lacks a matching recorded session event';
+        const finishedAt = new Date().toISOString();
+        context.store.updateStep(run.id, queuedStepId, { status: 'failed', error, finishedAt });
+        host.move(run.id, 'fail-start', { error, finishedAt });
+        return;
+    }
+    host.enqueueContinuation(run.id, {
+        stepId: queuedStepId,
+        sessionId: recoveredSessionId,
+        backend,
+        prompt: atContinue.prompt(run, host.restartContinuationPrompt),
+        images: [],
+        lineJoinedAt: Date.now(),
+    });
+    context.store.appendEvent(run.id, {
+        type: 'lifecycle',
+        message: `${reason} — interrupted continuation re-queued`,
+    });
+}
+/** Match the pinned execution account before considering a persisted session resumable. */
+export function queuedResumeSession(context, host, run, sessionStep) {
+    return atTaskHead.queuedResumeSession(context, host, run, sessionStep);
+}
+export function reviveQueuedWorker(context, host, run, reason) {
+    try {
+        const job = host.ownedJob(run);
+        // Use the privately bound workflow, and the same durable pending-step
+        // cursor as root recovery. A queued tail must not replay a failed source.
+        host.enqueueJob(run.id, atTaskHead.resumedJob(run, job));
+        context.store.appendEvent(run.id, { type: 'lifecycle', message: `${reason} — owned task re-queued` });
+    }
+    catch (error) {
+        host.move(run.id, 'fail-start', { error: String(error) });
+    }
+}
+/** True when the interrupted run has no session to continue and goes back to the queue. */
+export function requeueInterruptedRun(context, host, run, interruptedStepId) {
+    const interruptedIndex = atTaskHead.interruptedIndex(run, interruptedStepId);
+    const interruptedDef = atTaskHead.interruptedDefinition(run, interruptedIndex);
+    // Worktree setup (hearsay-tools/cezarion#917) interrupted before any agent session: there is no session to
+    // continue, so start the workflow over. `execute` sees setup still `running` and reruns it.
+    if (atTaskHead.storedWorkflow(run) && run.worktreeSetup?.status === 'running' && !run.steps.some(step => step.sessionId)) {
+        host.move(run.id, 'requeue', { error: undefined, finishedAt: undefined });
+        context.store.flush();
+        host.enqueueJob(run.id, { workflow: atTaskHead.storedWorkflow(run), startAt: 0, input: atTaskHead.recoveryInput(run) });
+        return true;
+    }
+    if (atTaskHead.storedWorkflow(run) && interruptedDef && stepKind(interruptedDef) === 'check') {
+        context.store.updateStep(run.id, interruptedDef.id, { status: 'pending', error: undefined, finishedAt: undefined });
+        host.move(run.id, 'requeue', { error: undefined, finishedAt: undefined });
+        context.store.flush();
+        host.enqueueJob(run.id, {
+            workflow: atTaskHead.storedWorkflow(run),
+            startAt: interruptedIndex,
+            input: atTaskHead.recoveryInput(run),
+        });
+        return true;
+    }
+    return false;
+}
+/** The persisted definition when it looks sane, else the catalog by name. */
+export const reviveWorkflow = atTaskHead.reviveWorkflow;
+//# sourceMappingURL=queued-revival.js.map

package/dist/workflows/run/queued-revival.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"queued-revival.js","sourceRoot":"","sources":["../../../src/workflows/run/queued-revival.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAGnE,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAErD,OAAO,EAAE,QAAQ,EAAoB,MAAM,aAAa,CAAC;AAuBzD,8EAA8E;AAC9E,MAAM,UAAU,wBAAwB,CAAC,OAAyB,EAAE,IAAuB,EAAE,GAAc,EAAE,YAAqB;IAChI,MAAM,OAAO,GAAG,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;QAC5D,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,WAAoB;KACvG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACf,IAAI,CAAC,OAAO;QAAE,OAAO,GAAG,CAAC;IACzB,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,mBAAmB,EAAE;YACrE,GAAG,OAAO;YACV,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,WAAW,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI,CAAC,yBAAyB,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnH,aAAa,EAAE,EAAE,GAAG,OAAO,CAAC,aAAa,EAAE,SAAS,EAAE,IAAI,EAAE;SAC7D,EAAE,CAAC,IAAI,GAAG,CAAC;IACZ,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACtB,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,OAAyB,EAAE,IAAuB,EAAE,GAAc,EAAE,MAAc;IACtH,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,EAAE,CAAC;QAAE,OAAO;IACzE,MAAM,kBAAkB,GAAG,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC;SACtC,OAAO,EAAE;SACT,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,uBAAuB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;IACxF,MAAM,WAAW,GAAG,kBAAkB;QACpC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,kBAAkB,CAAC,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC;QAC9F,CAAC,CAAC,SAAS,CAAC;IACd,IAAI,kBAAkB,IAAI,WAAW,EAAE,SAAS,EAAE,CAAC;QACjD,wBAAwB,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,kBAAkB,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;QACzF,OAAO;IACT,CAAC;IACD,IAAI,GAAG,CAAC,UAAU,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtC,kBAAkB,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QAC/C,OAAO;IACT,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;IAChD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,mEAAmE,EAAE,CAAC,CAAC;QAChH,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,EAAE;YAChC,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,GAAG,MAAM,qDAAqD;SACxE,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,EAAE;QACtB,QAAQ;QACR,OAAO,EAAE,aAAa,CAAC,GAAG,EAAE,QAAQ,CAAC;QACrC,4FAA4F;QAC5F,KAAK,EAAE,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,EAAE,EAAE,UAAU,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;KACtE,CAAC,CAAC;IACH,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,MAAM,mBAAmB,EAAE,CAAC,CAAC;AAClG,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,OAAyB,EAAE,IAAuB,EAAE,GAAc,EAAE,MAAc,EAAE,YAAoB,EAAE,WAAuC;IACxL,IAAI,MAAM,KAAK,iBAAiB;QAAE,GAAG,GAAG,IAAI,CAAC,wBAAwB,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IACzF,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,kBAAkB,EAAE,GAAG,mBAAmB,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;IAC1H,IAAI,UAAU,CAAC,gBAAgB,CAAC,WAAW,CAAC,IAAI,cAAc,KAAK,OAAO,IAAI,WAAW,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACjH,MAAM,KAAK,GAAG,uEAAuE,CAAC;QACtF,MAAM,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC5C,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,EAAE,YAAY,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QACxF,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QACvD,OAAO;IACT,CAAC;IACD,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,EAAE,EAAE;QAC/B,MAAM,EAAE,YAAY;QACpB,SAAS,EAAE,kBAAkB;QAC7B,OAAO;QACP,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,yBAAyB,CAAC;QAC9D,MAAM,EAAE,EAAE;QACV,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE;KACzB,CAAC,CAAC;IACH,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,EAAE;QAChC,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,GAAG,MAAM,uCAAuC;KAC1D,CAAC,CAAC;AACL,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,mBAAmB,CAAC,OAAyB,EAAE,IAAuB,EAAE,GAAc,EAAE,WAAuC;IAC7I,OAAO,UAAU,CAAC,mBAAmB,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAyB,EAAE,IAAuB,EAAE,GAAc,EAAE,MAAc;IACnH,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC/B,sEAAsE;QACtE,0EAA0E;QAC1E,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,EAAE,UAAU,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;QACzD,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,MAAM,yBAAyB,EAAE,CAAC,CAAC;IACxG,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC5D,CAAC;AACH,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,qBAAqB,CAAC,OAAyB,EAAE,IAAuB,EAAE,GAAc,EAAE,iBAA6C;IACrJ,MAAM,gBAAgB,GAAG,UAAU,CAAC,gBAAgB,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;IAC7E,MAAM,cAAc,GAAG,UAAU,CAAC,qBAAqB,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;IAC/E,2GAA2G;IAC3G,4FAA4F;IAC5F,IAAI,UAAU,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,aAAa,EAAE,MAAM,KAAK,SAAS,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACzH,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;QAC1E,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,UAAU,CAAC,cAAc,CAAC,GAAG,CAAE,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACzH,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,UAAU,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,cAAc,IAAI,QAAQ,CAAC,cAAc,CAAC,KAAK,OAAO,EAAE,CAAC;QAC7F,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,EAAE,cAAc,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;QACpH,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;QAC1E,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,EAAE;YACtB,QAAQ,EAAE,UAAU,CAAC,cAAc,CAAC,GAAG,CAAE;YACzC,OAAO,EAAE,gBAAgB;YACzB,KAAK,EAAE,UAAU,CAAC,aAAa,CAAC,GAAG,CAAC;SACrC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,6EAA6E;AAC7E,MAAM,CAAC,MAAM,cAAc,GAAG,UAAU,CAAC,cAAc,CAAC"}

package/dist/workflows/run/readonly-collections.d.ts

@@ -0,0 +1,24 @@
+/** A stable live facade. Its callback receives the facade, never the backing map. */
+export declare class ReadonlyMapView<K, V> implements ReadonlyMap<K, V> {
+    #private;
+    constructor(map: Map<K, V>);
+    get size(): number;
+    get(key: K): V | undefined;
+    has(key: K): boolean;
+    entries(): MapIterator<[K, V]>;
+    keys(): MapIterator<K>;
+    values(): MapIterator<V>;
+    [Symbol.iterator](): MapIterator<[K, V]>;
+    forEach(callback: (value: V, key: K, map: ReadonlyMap<K, V>) => void, thisArg?: unknown): void;
+}
+export declare class ReadonlySetView<T> implements ReadonlySet<T> {
+    #private;
+    constructor(set: Set<T>);
+    get size(): number;
+    has(value: T): boolean;
+    entries(): SetIterator<[T, T]>;
+    keys(): SetIterator<T>;
+    values(): SetIterator<T>;
+    [Symbol.iterator](): SetIterator<T>;
+    forEach(callback: (value: T, key: T, set: ReadonlySet<T>) => void, thisArg?: unknown): void;
+}

package/dist/workflows/run/readonly-collections.js

@@ -0,0 +1,33 @@
+/** A stable live facade. Its callback receives the facade, never the backing map. */
+export class ReadonlyMapView {
+    #map;
+    constructor(map) { this.#map = map; Object.freeze(this); }
+    get size() { return this.#map.size; }
+    get(key) { return this.#map.get(key); }
+    has(key) { return this.#map.has(key); }
+    entries() { return this.#map.entries(); }
+    keys() { return this.#map.keys(); }
+    values() { return this.#map.values(); }
+    [Symbol.iterator]() { return this.entries(); }
+    forEach(callback, thisArg) {
+        this.#map.forEach((value, key) => callback.call(thisArg, value, key, this));
+    }
+}
+export class ReadonlySetView {
+    #set;
+    constructor(set) { this.#set = set; Object.freeze(this); }
+    get size() { return this.#set.size; }
+    has(value) { return this.#set.has(value); }
+    entries() { return this.#set.entries(); }
+    keys() { return this.#set.keys(); }
+    values() { return this.#set.values(); }
+    [Symbol.iterator]() { return this.values(); }
+    forEach(callback, thisArg) {
+        this.#set.forEach((value) => callback.call(thisArg, value, value, this));
+    }
+}
+for (const type of [ReadonlyMapView, ReadonlySetView]) {
+    Object.freeze(type.prototype);
+    Object.freeze(type);
+}
+//# sourceMappingURL=readonly-collections.js.map

package/dist/workflows/run/readonly-collections.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"readonly-collections.js","sourceRoot":"","sources":["../../../src/workflows/run/readonly-collections.ts"],"names":[],"mappings":"AAAA,qFAAqF;AACrF,MAAM,OAAO,eAAe;IAC1B,IAAI,CAAY;IAChB,YAAY,GAAc,IAAI,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACrE,IAAI,IAAI,KAAa,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7C,GAAG,CAAC,GAAM,IAAmB,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACzD,GAAG,CAAC,GAAM,IAAa,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACnD,OAAO,KAA0B,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAC9D,IAAI,KAAqB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACnD,MAAM,KAAqB,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACvD,CAAC,MAAM,CAAC,QAAQ,CAAC,KAA0B,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACnE,OAAO,CAAC,QAA4D,EAAE,OAAiB;QACrF,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;IAC9E,CAAC;CACF;AAED,MAAM,OAAO,eAAe;IAC1B,IAAI,CAAS;IACb,YAAY,GAAW,IAAI,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClE,IAAI,IAAI,KAAa,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7C,GAAG,CAAC,KAAQ,IAAa,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACvD,OAAO,KAA0B,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAC9D,IAAI,KAAqB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACnD,MAAM,KAAqB,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACvD,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAqB,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC7D,OAAO,CAAC,QAAyD,EAAE,OAAiB;QAClF,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;IAC3E,CAAC;CACF;AAED,KAAK,MAAM,IAAI,IAAI,CAAC,eAAe,EAAE,eAAe,CAAC,EAAE,CAAC;IACtD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC9B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AACtB,CAAC"}

package/dist/workflows/run/repo-root-lease.d.ts

@@ -0,0 +1,34 @@
+import type { ActiveRun } from '../active-run.ts';
+import type { RunModuleContext } from './types.ts';
+interface RepoRootLeaseHost {
+    park(runId: string): void;
+    unpark(runId: string): void;
+    releaseSlot(): void;
+}
+export declare class RepoRootLease {
+    private readonly context;
+    private readonly host;
+    /**
+     * Runs normally isolate in worktrees and may execute in parallel. When that
+     * isolation is unavailable (or explicitly disabled), access to `repoRoot` is
+     * serialized by default so two agents cannot edit/revert the same files
+     * (#438). `CEZ_DISABLE_REPO_LOCK=1` deliberately bypasses this safety lease.
+     */
+    private repoRootTail;
+    constructor(context: RunModuleContext, host: RepoRootLeaseHost);
+    /**
+     * Acquire the exclusive repository-root lease. A waiter releases scheduling capacity but stays
+     * running in the store. Hold the lease across idle turns; false means cancellation before
+     * acquisition and forbids tree access.
+     */
+    acquireRepoRoot(runId: string, state: ActiveRun): Promise<boolean>;
+}
+/**
+ * Explicitly opt out of the repository-root lease for runs that execute in the
+ * current checkout. This covers explicit worktree opt-out, non-Git degradation,
+ * and continuations whose worktree cannot be restored (spec 006 hardening, #438).
+ * This is intentionally unsafe: concurrent agents may overwrite each other's
+ * files or Git state. Isolated worktree runs are unaffected.
+ */
+export declare function repositoryRootLockDisabled(env?: NodeJS.ProcessEnv): boolean;
+export {};

package/dist/workflows/run/repo-root-lease.js

@@ -0,0 +1,71 @@
+import { productEnv } from '../../core/product-env.js';
+export class RepoRootLease {
+    context;
+    host;
+    /**
+     * Runs normally isolate in worktrees and may execute in parallel. When that
+     * isolation is unavailable (or explicitly disabled), access to `repoRoot` is
+     * serialized by default so two agents cannot edit/revert the same files
+     * (#438). `CEZ_DISABLE_REPO_LOCK=1` deliberately bypasses this safety lease.
+     */
+    repoRootTail = Promise.resolve();
+    constructor(context, host) {
+        this.context = context;
+        this.host = host;
+    }
+    /**
+     * Acquire the exclusive repository-root lease. A waiter releases scheduling capacity but stays
+     * running in the store. Hold the lease across idle turns; false means cancellation before
+     * acquisition and forbids tree access.
+     */
+    async acquireRepoRoot(runId, state) {
+        // `cancel()` can land between the run going `running` and reaching here,
+        // while `interrupt` is still the default no-op — never enter the chain.
+        if (state.liveSession.cancelled)
+            return false;
+        const previous = this.repoRootTail;
+        let release = () => undefined;
+        this.repoRootTail = new Promise((resolve) => {
+            release = resolve;
+        });
+        // Until `previous` resolves this run does not own the tree yet, so a drop
+        // during the wait must not hand the tree to the next waiter — chain our
+        // release behind `previous` instead of resolving the tail early.
+        state.liveSession.retainRepoRootRelease(() => {
+            void previous.then(release);
+        });
+        let abort = () => undefined;
+        const cancelled = new Promise((resolve) => {
+            abort = resolve;
+        });
+        const parked = state.liveSession.interrupt;
+        state.liveSession.installInterrupt(() => {
+            parked();
+            abort();
+        });
+        this.host.park(runId);
+        this.host.releaseSlot();
+        try {
+            await Promise.race([previous, cancelled]);
+        }
+        finally {
+            state.liveSession.installInterrupt(parked);
+            this.host.unpark(runId);
+        }
+        if (state.liveSession.cancelled)
+            return false;
+        state.liveSession.retainRepoRootRelease(release);
+        return true;
+    }
+}
+/**
+ * Explicitly opt out of the repository-root lease for runs that execute in the
+ * current checkout. This covers explicit worktree opt-out, non-Git degradation,
+ * and continuations whose worktree cannot be restored (spec 006 hardening, #438).
+ * This is intentionally unsafe: concurrent agents may overwrite each other's
+ * files or Git state. Isolated worktree runs are unaffected.
+ */
+export function repositoryRootLockDisabled(env = process.env) {
+    return productEnv('DISABLE_REPO_LOCK', env) === '1';
+}
+//# sourceMappingURL=repo-root-lease.js.map

package/dist/workflows/run/repo-root-lease.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repo-root-lease.js","sourceRoot":"","sources":["../../../src/workflows/run/repo-root-lease.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAUvD,MAAM,OAAO,aAAa;IASK,OAAO;IAAqC,IAAI;IAR7E;;;;;OAKG;IACK,YAAY,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;IAExD,YAA6B,OAAyB,EAAmB,IAAuB;uBAAnE,OAAO;oBAAqC,IAAI;IAAsB,CAAC;IAEpG;;;;OAIG;IACH,KAAK,CAAC,eAAe,CAAC,KAAa,EAAE,KAAgB;QACnD,yEAAyE;QACzE,wEAAwE;QACxE,IAAI,KAAK,CAAC,WAAW,CAAC,SAAS;YAAE,OAAO,KAAK,CAAC;QAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC;QACnC,IAAI,OAAO,GAAe,GAAG,EAAE,CAAC,SAAS,CAAC;QAC1C,IAAI,CAAC,YAAY,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAChD,OAAO,GAAG,OAAO,CAAC;QACpB,CAAC,CAAC,CAAC;QACH,0EAA0E;QAC1E,wEAAwE;QACxE,iEAAiE;QACjE,KAAK,CAAC,WAAW,CAAC,qBAAqB,CAAC,GAAG,EAAE;YAC3C,KAAK,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC9B,CAAC,CAAC,CAAC;QACH,IAAI,KAAK,GAAe,GAAG,EAAE,CAAC,SAAS,CAAC;QACxC,MAAM,SAAS,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAC9C,KAAK,GAAG,OAAO,CAAC;QAClB,CAAC,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,KAAK,CAAC,WAAW,CAAC,SAAS,CAAC;QAC3C,KAAK,CAAC,WAAW,CAAC,gBAAgB,CAAC,GAAG,EAAE;YACtC,MAAM,EAAE,CAAC;YACT,KAAK,EAAE,CAAC;QACV,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtB,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;QAC5C,CAAC;gBAAS,CAAC;YACT,KAAK,CAAC,WAAW,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;YAC3C,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC;QACD,IAAI,KAAK,CAAC,WAAW,CAAC,SAAS;YAAE,OAAO,KAAK,CAAC;QAC9C,KAAK,CAAC,WAAW,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC;QACjD,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,UAAU,0BAA0B,CAAC,GAAG,GAAsB,OAAO,CAAC,GAAG;IAC7E,OAAO,UAAU,CAAC,mBAAmB,EAAE,GAAG,CAAC,KAAK,GAAG,CAAC;AACtD,CAAC"}

package/dist/workflows/run/resolved-wait-input-batch.d.ts

@@ -0,0 +1,7 @@
+import type { AgentInput } from '../../contract/index.js';
+import type { RunRecord } from '../../runs/store.ts';
+import { resolvedWaits, waitResultText } from '../waits.ts';
+export declare function resolvedWaitInputBatch(run: RunRecord, resolved: ReturnType<typeof resolvedWaits>, queue: AgentInput[], format: (input: AgentInput) => string, options: Parameters<typeof waitResultText>[1]): {
+    text: string;
+    inputIds: string[];
+} | undefined;

package/dist/workflows/run/resolved-wait-input-batch.js

@@ -0,0 +1,23 @@
+import { agentInputBatch } from '../../delegation/input.js';
+import { waitInputId, waitResultText } from '../waits.js';
+export function resolvedWaitInputBatch(run, resolved, queue, format, options) {
+    // One wake turn delivers every resolved wait, oldest first, then the conversation input
+    // that would lead the next batch (hearsay-tools/cezarion#1233).
+    const results = resolved.flatMap(wait => {
+        const input = run.agentInputs?.find(entry => entry.id === waitInputId(wait) && !entry.deliveredAt);
+        if (!input)
+            return [];
+        const result = waitResultText(wait, options);
+        // An upgraded wait whose wake is a queued message (`wakeInputId`) delivers that message
+        // with its receipt; only a lifecycle input is replaced by the result.
+        return [{ id: input.id, text: input.source === 'lifecycle' ? format({ ...input, text: result })
+                    : `${format(input)}\n\n${result}` }];
+    });
+    if (!results.length)
+        return undefined;
+    const conversation = agentInputBatch(queue, input => format(input));
+    const following = conversation?.inputs.every(input => input.conversation) ? conversation.inputs : [];
+    const text = [...results.map(result => result.text), ...following.map(input => format(input))].join('\n\n');
+    return { text, inputIds: [...results, ...following].map(input => input.id) };
+}
+//# sourceMappingURL=resolved-wait-input-batch.js.map

package/dist/workflows/run/resolved-wait-input-batch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolved-wait-input-batch.js","sourceRoot":"","sources":["../../../src/workflows/run/resolved-wait-input-batch.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAAiB,WAAW,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAEzE,MAAM,UAAU,sBAAsB,CACpC,GAAc,EACd,QAA0C,EAC1C,KAAmB,EACnB,MAAqC,EACrC,OAA6C;IAE7C,wFAAwF;IACxF,gEAAgE;IAChE,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;QACtC,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACnG,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,CAAC;QACtB,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC7C,wFAAwF;QACxF,sEAAsE;QACtE,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;oBAC7F,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,MAAM,EAAE,EAAE,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IACtC,MAAM,YAAY,GAAG,eAAe,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACpE,MAAM,SAAS,GAAG,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IACrG,MAAM,IAAI,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5G,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,GAAG,OAAO,EAAE,GAAG,SAAS,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;AAC/E,CAAC"}

package/dist/workflows/run/run-cancel.d.ts

@@ -0,0 +1,36 @@
+import type { WaitEngine } from './wait-engine.ts';
+import type { WorkerStopResult, WorkerWait } from '../../contract/index.js';
+import type { RunRecord, RunStore } from '../../runs/store.ts';
+import type { ActiveRun } from '../active-run.ts';
+import type { RunExitId } from '../../runs/run-exits.ts';
+import type { RunModuleContext } from './types.ts';
+import type { RunLine } from './run-line.ts';
+import type { WorkerExecutions } from './worker-executions.ts';
+import type { TurnNudges } from './turn-nudges.ts';
+interface RunCancelHost {
+    waitEngine: WaitEngine;
+    active: Map<string, ActiveRun>;
+    cancel(id: string): boolean;
+    isActive(id: string): boolean;
+    cancelAutoResume(id: string): boolean;
+    rootFinishRequested(id: string): boolean;
+    historyDeletionPending(id: string): boolean;
+    move(id: string, exit: RunExitId, patch?: Omit<Parameters<RunStore['updateRun']>[1], 'status'>): RunRecord | undefined;
+}
+export declare class RunCancel {
+    private readonly context;
+    private readonly line;
+    private readonly workerExecutions;
+    private readonly waitEngine;
+    private readonly turnNudges;
+    private readonly host;
+    constructor(context: RunModuleContext, line: RunLine, workerExecutions: WorkerExecutions, waitEngine: WaitEngine, turnNudges: TurnNudges, host: RunCancelHost);
+    cancel(runId: string): boolean;
+    private cancelActiveRun;
+    private cancelWorkerExecution;
+    private cancelQueuedRun;
+    private cancelRunWithoutSession;
+    requestWorkerStop(runId: string): WorkerStopResult;
+    cancelWorkerWait(parentId: string, waitId: string): WorkerWait;
+}
+export {};

package/dist/workflows/run/run-cancel.js

@@ -0,0 +1,130 @@
+import { WAIT_KINDS } from './wait-kinds.js';
+import { workerWaitEntryToLegacy, isUsageLimitHold } from '../../contract/index.js';
+import { DelegationPolicyError } from '../../delegation/policy.js';
+import { clearIdleTimer } from './input-timers.js';
+import { WAITS_DISCARDED_NOTE, REFUSAL_DISCARDED_NOTE } from './constants.js';
+/** The cancellation event of a run Stop takes out of the line. */
+const CANCELLED_WHILE_QUEUED = 'cancelled while queued';
+export class RunCancel {
+    context;
+    line;
+    workerExecutions;
+    waitEngine;
+    turnNudges;
+    host;
+    constructor(context, line, workerExecutions, waitEngine, turnNudges, host) {
+        this.context = context;
+        this.line = line;
+        this.workerExecutions = workerExecutions;
+        this.waitEngine = waitEngine;
+        this.turnNudges = turnNudges;
+        this.host = host;
+    }
+    cancel(runId) {
+        // Another process's run (#779, plan step 3): only its owner can stop it.
+        if (this.context.store.writeRefusal(runId))
+            return false;
+        this.cancelWorkerExecution(runId);
+        const hadWaits = !!this.context.store.getRun(runId)?.waits?.length;
+        this.waitEngine.cancelAll(runId);
+        const retiredRefusal = this.turnNudges.retireCompletionRefusal(runId);
+        const cancelledFinish = !!this.context.store.move(runId, 'cancel-root');
+        // Still waiting in the queue: just drop it there.
+        const queuedAt = this.line.indexOf(runId);
+        if (queuedAt >= 0) {
+            this.cancelQueuedRun(runId, queuedAt);
+            return true;
+        }
+        const state = this.host.active.get(runId);
+        if (!state)
+            return this.cancelRunWithoutSession(runId, hadWaits, retiredRefusal, cancelledFinish);
+        this.cancelActiveRun(runId, state);
+        return true;
+    }
+    cancelActiveRun(runId, state) {
+        state.liveSession.cancel();
+        this.context.store.updateRun(runId, { stopping: true });
+        this.context.store.flush();
+        state.liveSession.revokeCiTools?.();
+        state.liveSession.clearCiRevoker();
+        state.liveSession.revokeDelegation?.();
+        state.liveSession.clearDelegationRevoker();
+        clearIdleTimer(state);
+        state.liveSession.interrupt();
+    }
+    cancelWorkerExecution(runId) {
+        if (this.context.store.getRun(runId)?.delegation?.role === 'worker') {
+            const proof = this.context.store.readWorkerExecution(runId);
+            // The first cancel write names the cancellation's one event, a queued worker's too (B12).
+            this.context.store.move(runId, 'stop-worker', {}, this.line.indexOf(runId) >= 0 ? { event: CANCELLED_WHILE_QUEUED } : {});
+            this.workerExecutions.markStopped(runId);
+            if (!this.workerExecutions.has(runId) && !this.host.active.has(runId) && !this.line.hasStarting(runId) && proof?.phase === 'queued') {
+                this.context.store.commitWorkerExecutionComplete(runId, proof.generation);
+            }
+        }
+    }
+    cancelQueuedRun(runId, queuedAt) {
+        this.line.takeAt(queuedAt);
+        this.line.takePending(runId);
+        // The exit writes the cancellation's one lifecycle event; a queued run's says so (B12).
+        this.context.store.move(runId, 'cancel', {}, { event: CANCELLED_WHILE_QUEUED });
+        this.context.store.flush();
+        if (this.workerExecutions.admitted(runId) === false)
+            void this.workerExecutions.finishWorkerExecution(runId);
+    }
+    cancelRunWithoutSession(runId, hadWaits, retiredRefusal, cancelledFinish) {
+        if (this.line.hasStarting(runId)) {
+            this.context.store.updateRun(runId, { stopping: true });
+            this.context.store.flush();
+            return true;
+        }
+        if (cancelledFinish)
+            return true;
+        const run = this.context.store.getRun(runId);
+        // Stop on a failed run that held wait results discards them, and the automatic resume that
+        // would start a session on it later; the run stays failed. A usage-limit hold is that failed
+        // run waiting for its resume (hearsay-tools/cezarion#1236), and settles failed the same way.
+        if ((hadWaits || retiredRefusal) && (run?.status === 'failed' || isUsageLimitHold(run ?? {}))) {
+            this.context.store.appendEvent(runId, { type: 'note', message: hadWaits ? WAITS_DISCARDED_NOTE : REFUSAL_DISCARDED_NOTE });
+            this.host.cancelAutoResume(runId);
+            this.context.store.flush();
+            return true;
+        }
+        if (run && (run.delegation || hadWaits) && ['queued', 'running', 'waiting'].includes(run.status)) {
+            this.host.move(runId, 'cancel');
+            return true;
+        }
+        return false;
+    }
+    requestWorkerStop(runId) {
+        if (this.context.store.getRun(runId)?.delegation?.role !== 'worker')
+            throw new Error('Worker not found');
+        if (!this.workerExecutions.has(runId) && !this.host.isActive(runId) && ['done', 'failed', 'cancelled', 'review'].includes(this.context.store.getRun(runId).status) && this.context.store.readWorkerExecution(runId)?.phase === 'complete')
+            return { workerId: runId, state: 'terminated' };
+        this.host.cancel(runId);
+        return { workerId: runId, state: !this.workerExecutions.has(runId) && this.context.store.readWorkerExecution(runId)?.phase === 'complete' ? 'terminated' : 'stopping' };
+    }
+    cancelWorkerWait(parentId, waitId) {
+        const run = this.context.store.getRun(parentId);
+        if (!run?.delegation || run.delegation.role === 'invalid')
+            throw new DelegationPolicyError('denied_scope', 'Worker scope denied');
+        const entry = WAIT_KINDS.worker.select(run.waits ?? []).find((wait) => wait.id === waitId && WAIT_KINDS.worker.hasDeadline(wait));
+        if (!entry) {
+            const settled = WAIT_KINDS.worker.select(run.lastWaits ?? []).filter((wait) => wait.id === waitId && WAIT_KINDS.worker.hasDeadline(wait)).at(-1);
+            if (settled)
+                return workerWaitEntryToLegacy(settled);
+            throw new DelegationPolicyError('incompatible_state', 'Worker wait is no longer current');
+        }
+        if (entry.phase !== 'open')
+            return workerWaitEntryToLegacy(entry);
+        if (this.context.disposed() || !['queued', 'running', 'waiting'].includes(run.status) || this.host.rootFinishRequested(parentId) || this.host.historyDeletionPending(parentId)) {
+            throw new DelegationPolicyError('incompatible_state', 'Parent cannot cancel a worker wait');
+        }
+        const settled = this.host.waitEngine.cancel(parentId, [waitId]);
+        const cancelled = WAIT_KINDS.worker.select(settled).find((wait) => wait.id === waitId && WAIT_KINDS.worker.hasDeadline(wait));
+        if (!cancelled)
+            throw new DelegationPolicyError('incompatible_state', 'Worker wait is no longer current');
+        return workerWaitEntryToLegacy(cancelled);
+    }
+}
+//# sourceMappingURL=run-cancel.js.map

package/dist/workflows/run/run-cancel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-cancel.js","sourceRoot":"","sources":["../../../src/workflows/run/run-cancel.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAE7C,OAAO,EAAE,uBAAuB,EAAE,gBAAgB,EAAiC,MAAM,oCAAoC,CAAC;AAC9H,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAInE,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAiB9E,kEAAkE;AAClE,MAAM,sBAAsB,GAAG,wBAAwB,CAAC;AAExD,MAAM,OAAO,SAAS;IACS,OAAO;IAAqC,IAAI;IAC1D,gBAAgB;IAAqC,UAAU;IAC/D,UAAU;IAA+B,IAAI;IAFhE,YAA6B,OAAyB,EAAmB,IAAa,EACnE,gBAAkC,EAAmB,UAAsB,EAC3E,UAAsB,EAAmB,IAAmB;uBAFlD,OAAO;oBAAqC,IAAI;gCAC1D,gBAAgB;0BAAqC,UAAU;0BAC/D,UAAU;oBAA+B,IAAI;IAAkB,CAAC;IAEnF,MAAM,CAAC,KAAa;QAClB,yEAAyE;QACzE,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACzD,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,QAAQ,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC;QACnE,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACjC,MAAM,cAAc,GAAG,IAAI,CAAC,UAAU,CAAC,uBAAuB,CAAC,KAAK,CAAC,CAAC;QACtE,MAAM,eAAe,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;QACxE,kDAAkD;QAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,QAAQ,IAAI,CAAC,EAAE,CAAC;YAClB,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;YACtC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC,uBAAuB,CAAC,KAAK,EAAE,QAAQ,EAAE,cAAc,EAAE,eAAe,CAAC,CAAC;QAClG,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACnC,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,eAAe,CAAC,KAAa,EAAE,KAAgB;QACrD,KAAK,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QAC3B,KAAK,CAAC,WAAW,CAAC,aAAa,EAAE,EAAE,CAAC;QAAC,KAAK,CAAC,WAAW,CAAC,cAAc,EAAE,CAAC;QACxE,KAAK,CAAC,WAAW,CAAC,gBAAgB,EAAE,EAAE,CAAC;QAAC,KAAK,CAAC,WAAW,CAAC,sBAAsB,EAAE,CAAC;QACnF,cAAc,CAAC,KAAK,CAAC,CAAC;QACtB,KAAK,CAAC,WAAW,CAAC,SAAS,EAAE,CAAC;IAChC,CAAC;IAEO,qBAAqB,CAAC,KAAa;QACzC,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;YACpE,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;YAC5D,0FAA0F;YAC1F,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,aAAa,EAAE,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC1H,IAAI,CAAC,gBAAgB,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YACzC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,KAAK,EAAE,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACpI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,6BAA6B,CAAC,KAAK,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;YAC5E,CAAC;QACH,CAAC;IACH,CAAC;IAEO,eAAe,CAAC,KAAa,EAAE,QAAgB;QACrD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC3B,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QAC7B,wFAAwF;QACxF,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC;QAChF,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QAC3B,IAAI,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,KAAK;YAAE,KAAK,IAAI,CAAC,gBAAgB,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAC/G,CAAC;IAEO,uBAAuB,CAAC,KAAa,EAAE,QAAiB,EAAE,cAAuB,EAAE,eAAwB;QACjH,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;YACjC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;YACxD,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YAC3B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,eAAe;YAAE,OAAO,IAAI,CAAC;QACjC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC7C,2FAA2F;QAC3F,6FAA6F;QAC7F,6FAA6F;QAC7F,IAAI,CAAC,QAAQ,IAAI,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,KAAK,QAAQ,IAAI,gBAAgB,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;YAC9F,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,sBAAsB,EAAE,CAAC,CAAC;YAC3H,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;YAClC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YAC3B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,IAAI,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACjG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;YAChC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,iBAAiB,CAAC,KAAa;QAC7B,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,IAAI,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACzG,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAE,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,mBAAmB,CAAC,KAAK,CAAC,EAAE,KAAK,KAAK,UAAU;YAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;QAC5R,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACxB,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,mBAAmB,CAAC,KAAK,CAAC,EAAE,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC;IAC1K,CAAC;IAED,gBAAgB,CAAC,QAAgB,EAAE,MAAc;QAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAChD,IAAI,CAAC,GAAG,EAAE,UAAU,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,KAAK,SAAS;YAAE,MAAM,IAAI,qBAAqB,CAAC,cAAc,EAAE,qBAAqB,CAAC,CAAC;QAClI,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAoC,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,MAAM,IAAI,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;QACpK,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAoC,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,MAAM,IAAI,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YACnL,IAAI,OAAO;gBAAE,OAAO,uBAAuB,CAAC,OAAO,CAAC,CAAC;YACrD,MAAM,IAAI,qBAAqB,CAAC,oBAAoB,EAAE,kCAAkC,CAAC,CAAC;QAC5F,CAAC;QACD,IAAI,KAAK,CAAC,KAAK,KAAK,MAAM;YAAE,OAAO,uBAAuB,CAAC,KAAK,CAAC,CAAC;QAClE,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/K,MAAM,IAAI,qBAAqB,CAAC,oBAAoB,EAAE,oCAAoC,CAAC,CAAC;QAC9F,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;QAChE,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAoC,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,MAAM,IAAI,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;QAChK,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,qBAAqB,CAAC,oBAAoB,EAAE,kCAAkC,CAAC,CAAC;QAC1G,OAAO,uBAAuB,CAAC,SAAS,CAAC,CAAC;IAC5C,CAAC;CACF"}

package/dist/workflows/run/run-finish.d.ts

@@ -0,0 +1,72 @@
+import type { WaitEngine } from './wait-engine.ts';
+import { type CezarDoneRequest, type CezarDoneAnswer } from '../../contract/index.js';
+import type { RunRecord, RunStore } from '../../runs/store.ts';
+import { type CompletionRefusal } from '../completion-policy.ts';
+import type { ActiveRun } from '../active-run.ts';
+import type { RunExitId, ExitCall } from '../../runs/run-exits.ts';
+import * as completionGateReads from './completion-gate.ts';
+import type { RunModuleContext, PendingContinuation } from './types.ts';
+import type { RunSettlement } from './run-settlement.ts';
+import type { TurnSettler } from './turn-settler.ts';
+import type { TurnNudges } from './turn-nudges.ts';
+import type { RunLine } from './run-line.ts';
+interface RunFinishHost {
+    move(id: string, exit: RunExitId, patch?: Omit<Parameters<RunStore['updateRun']>[1], 'status'>, call?: ExitCall): RunRecord | undefined;
+    dropActive(id: string): void;
+    waitEngine: WaitEngine;
+    reconcileWorkerWaits(id?: string): void;
+    executionBlockedByRootFinish(run: RunRecord): boolean;
+    hasUnansweredHumanAsk(id: string): boolean;
+}
+export declare class RunFinish {
+    private readonly context;
+    private readonly completionGateHost;
+    private readonly runSettlement;
+    private readonly turnSettler;
+    private readonly turnNudges;
+    private readonly line;
+    private readonly host;
+    constructor(context: RunModuleContext, completionGateHost: completionGateReads.CompletionGateHost, runSettlement: RunSettlement, turnSettler: TurnSettler, turnNudges: TurnNudges, line: RunLine, host: RunFinishHost);
+    /**
+     * `cezar_done` (hearsay-tools/cezarion#1234). Accepted, the run finishes at this turn's end
+     * through the done branch, which cancels every open wait; in a workflow step that is not the
+     * last, that branch completes the step and the next one starts (hearsay-tools/cezarion#1620), and
+     * the answer says which. Refused, the answer says what to do
+     * first. The gate is the completion gate, in order: the session, a root finish, the user's
+     * question, then for a root its workers' questions, live workers and uncollected results. The turn end re-checks it (`deferParentCompletion`).
+     */
+    acceptDone(runId: string, generation: string, request: CezarDoneRequest, signal?: AbortSignal): CezarDoneAnswer;
+    completionRefusal(runId: string): CompletionRefusal | undefined;
+    /** The read-only verdict and explicit Finish share this decision. Operational failures
+     * (for example a failed durable write) are still handled at execution time. */
+    private finishDecision;
+    deferParentCompletion(runId: string): boolean;
+    /** The completion gate for a root's done: `accept`; a refusal a live session takes as its turn
+     *  end's (`settleTurn`); or `held` when the gate settled it itself: a stopped root, a refusal
+     *  queued for a closed session, or a pending human question that parks for the user. */
+    completionGate(runId: string): 'accept' | 'held' | CompletionRefusal;
+    /** Only a root with workers keeps its pending question through completion
+     *  (hearsay-tools/cezarion#2784): every task is a root once provisioned. */
+    private familyQuestionPending;
+    /** Human Finish keeps the worker guarantees and bypasses request obligations only. */
+    private completionMayPass;
+    /** Finish can arrive during continuation preflight. Retain its accepted
+     * payload in the ordinary queue, releasing the slot without opening a session. */
+    holdContinuationForRootFinish(runId: string, continuation: PendingContinuation, state?: ActiveRun): boolean;
+    settleRequestedRootFinish(runId: string): Promise<void>;
+    private settleRequestedRootFinishWork;
+    /** Close the open session gracefully — the run then completes as `done`
+     *  (or rests at `review` when the worktree holds changes, spec 009).
+     *  On a run already resting at `review` (no session — the engine loop is
+     *  over), "Finish" is the third review exit: accept the changes without a
+     *  PR and flip straight to `done`. */
+    finish(runId: string): boolean;
+    /** Persist the human's authority before settling obligations or closing a live session. */
+    private acceptRootRequestFinish;
+    /** Finish ends the task, so an unanswered question is closed rather than left answerable on a
+     * finished run (hearsay-tools/cezarion#1260). A root with workers never gets here with one pending:
+     * its Finish is refused until the question is answered. Stop keeps the question, which a human may still
+     * answer to reopen the run (open-mercato/cezar#505). */
+    private closeQuestionOnFinish;
+}
+export {};