@inixiative/foundry-core 0.1.0 → 0.3.0

package/src/delivery-evidence.ts

@@ -1,85 +1,236 @@
 /** Portable SHA-256 for public evidence, shared by Bun and the historical browser.
  * This is an integrity join, not a signature or native delivery acknowledgment. */
 export function evidenceDigest(text: string): string {
-  const input = new TextEncoder().encode(text), bytes = new Uint8Array(Math.ceil((input.length + 9) / 64) * 64);
-  bytes.set(input); bytes[input.length] = 128;
-  const view = new DataView(bytes.buffer), bits = input.length * 8;
-  view.setUint32(bytes.length - 8, Math.floor(bits / 4294967296)); view.setUint32(bytes.length - 4, bits >>> 0);
-  const h = [0x6a09e667,0xbb67ae85,0x3c6ef372,0xa54ff53a,0x510e527f,0x9b05688c,0x1f83d9ab,0x5be0cd19];
-  const k = [0x428a2f98,0x71374491,0xb5c0fbcf,0xe9b5dba5,0x3956c25b,0x59f111f1,0x923f82a4,0xab1c5ed5,0xd807aa98,0x12835b01,0x243185be,0x550c7dc3,0x72be5d74,0x80deb1fe,0x9bdc06a7,0xc19bf174,0xe49b69c1,0xefbe4786,0x0fc19dc6,0x240ca1cc,0x2de92c6f,0x4a7484aa,0x5cb0a9dc,0x76f988da,0x983e5152,0xa831c66d,0xb00327c8,0xbf597fc7,0xc6e00bf3,0xd5a79147,0x06ca6351,0x14292967,0x27b70a85,0x2e1b2138,0x4d2c6dfc,0x53380d13,0x650a7354,0x766a0abb,0x81c2c92e,0x92722c85,0xa2bfe8a1,0xa81a664b,0xc24b8b70,0xc76c51a3,0xd192e819,0xd6990624,0xf40e3585,0x106aa070,0x19a4c116,0x1e376c08,0x2748774c,0x34b0bcb5,0x391c0cb3,0x4ed8aa4a,0x5b9cca4f,0x682e6ff3,0x748f82ee,0x78a5636f,0x84c87814,0x8cc70208,0x90befffa,0xa4506ceb,0xbef9a3f7,0xc67178f2];
-  const rr = (v: number, n: number) => (v >>> n) | (v << (32 - n)), w = new Uint32Array(64);
+  const input = new TextEncoder().encode(text),
+    bytes = new Uint8Array(Math.ceil((input.length + 9) / 64) * 64);
+  bytes.set(input);
+  bytes[input.length] = 128;
+  const view = new DataView(bytes.buffer),
+    bits = input.length * 8;
+  view.setUint32(bytes.length - 8, Math.floor(bits / 4294967296));
+  view.setUint32(bytes.length - 4, bits >>> 0);
+  const h = [
+    0x6a09e667, 0xbb67ae85, 0x3c6ef372, 0xa54ff53a, 0x510e527f, 0x9b05688c, 0x1f83d9ab, 0x5be0cd19,
+  ];
+  const k = [
+    0x428a2f98, 0x71374491, 0xb5c0fbcf, 0xe9b5dba5, 0x3956c25b, 0x59f111f1, 0x923f82a4, 0xab1c5ed5,
+    0xd807aa98, 0x12835b01, 0x243185be, 0x550c7dc3, 0x72be5d74, 0x80deb1fe, 0x9bdc06a7, 0xc19bf174,
+    0xe49b69c1, 0xefbe4786, 0x0fc19dc6, 0x240ca1cc, 0x2de92c6f, 0x4a7484aa, 0x5cb0a9dc, 0x76f988da,
+    0x983e5152, 0xa831c66d, 0xb00327c8, 0xbf597fc7, 0xc6e00bf3, 0xd5a79147, 0x06ca6351, 0x14292967,
+    0x27b70a85, 0x2e1b2138, 0x4d2c6dfc, 0x53380d13, 0x650a7354, 0x766a0abb, 0x81c2c92e, 0x92722c85,
+    0xa2bfe8a1, 0xa81a664b, 0xc24b8b70, 0xc76c51a3, 0xd192e819, 0xd6990624, 0xf40e3585, 0x106aa070,
+    0x19a4c116, 0x1e376c08, 0x2748774c, 0x34b0bcb5, 0x391c0cb3, 0x4ed8aa4a, 0x5b9cca4f, 0x682e6ff3,
+    0x748f82ee, 0x78a5636f, 0x84c87814, 0x8cc70208, 0x90befffa, 0xa4506ceb, 0xbef9a3f7, 0xc67178f2,
+  ];
+  const rr = (v: number, n: number) => (v >>> n) | (v << (32 - n)),
+    w = new Uint32Array(64);
   for (let offset = 0; offset < bytes.length; offset += 64) {
     for (let i = 0; i < 16; i++) w[i] = view.getUint32(offset + 4 * i);
-    for (let i = 16; i < 64; i++) { const x=w[i-15]!, y=w[i-2]!; w[i]=w[i-16]!+(rr(x,7)^rr(x,18)^(x>>>3))+w[i-7]!+(rr(y,17)^rr(y,19)^(y>>>10)); }
-    let [a,b,c,d,e,f,g,j] = h as [number,number,number,number,number,number,number,number];
-    for (let i=0;i<64;i++) { const t=(j+(rr(e,6)^rr(e,11)^rr(e,25))+((e&f)^(~e&g))+k[i]!+w[i]!)|0;
-      const u=((rr(a,2)^rr(a,13)^rr(a,22))+((a&b)^(a&c)^(b&c)))|0; j=g;g=f;f=e;e=(d+t)|0;d=c;c=b;b=a;a=(t+u)|0; }
-    [a,b,c,d,e,f,g,j].forEach((v,i)=>{h[i]=(h[i]!+v)>>>0;});
+    for (let i = 16; i < 64; i++) {
+      const x = w[i - 15]!,
+        y = w[i - 2]!;
+      w[i] =
+        w[i - 16]! +
+        (rr(x, 7) ^ rr(x, 18) ^ (x >>> 3)) +
+        w[i - 7]! +
+        (rr(y, 17) ^ rr(y, 19) ^ (y >>> 10));
+    }
+    let [a, b, c, d, e, f, g, j] = h as [
+      number,
+      number,
+      number,
+      number,
+      number,
+      number,
+      number,
+      number,
+    ];
+    for (let i = 0; i < 64; i++) {
+      const t = (j + (rr(e, 6) ^ rr(e, 11) ^ rr(e, 25)) + ((e & f) ^ (~e & g)) + k[i]! + w[i]!) | 0;
+      const u = ((rr(a, 2) ^ rr(a, 13) ^ rr(a, 22)) + ((a & b) ^ (a & c) ^ (b & c))) | 0;
+      j = g;
+      g = f;
+      f = e;
+      e = (d + t) | 0;
+      d = c;
+      c = b;
+      b = a;
+      a = (t + u) | 0;
+    }
+    [a, b, c, d, e, f, g, j].forEach((v, i) => {
+      h[i] = (h[i]! + v) >>> 0;
+    });
   }
-  return h.map(v=>v.toString(16).padStart(8,"0")).join("");
+  return h.map((v) => v.toString(16).padStart(8, '0')).join('');
 }
 
-export interface DeliveryOwner { threadId: string; messageId: string; projectId?: string }
+export interface DeliveryOwner {
+  threadId: string;
+  messageId: string;
+  projectId?: string;
+}
 export interface ProviderBoundaryReceipt {
-  schema: 1; owner: DeliveryOwner; assemblyHash: string; messagesHash: string;
+  schema: 1;
+  owner: DeliveryOwner;
+  assemblyHash: string;
+  messagesHash: string;
   /** Exactly one initial system message starts with the assembled context. */
   systemMessageIndex: number;
 }
 // Fixed top-level field order over the preserved serialization, never the current cache.
 export function assemblyDigest(i: any): string {
-  return evidenceDigest(JSON.stringify([i.threadId,i.projectId ?? null,i.messageId,i.executorContext,i.userMessage,
-    i.layers,i.blocks,i.decoration]));
+  return evidenceDigest(
+    JSON.stringify([
+      i.threadId,
+      i.projectId ?? null,
+      i.messageId,
+      i.executorContext,
+      i.userMessage,
+      i.layers,
+      i.blocks,
+      i.decoration,
+    ]),
+  );
 }
 export function boundaryReceipt(i: any, owner: DeliveryOwner): ProviderBoundaryReceipt {
-  const matches = i.providerMessages.flatMap((m: any, n: number) => m.role === "system" && typeof m.content === "string"
-    && typeof i.executorContext === "string" && i.executorContext.length > 0
-    && (m.content === i.executorContext || m.content.startsWith(i.executorContext + "\n\n")) ? [n] : []);
-  return { schema: 1, owner: { ...owner }, assemblyHash: assemblyDigest(i),
-    messagesHash: evidenceDigest(JSON.stringify(i.providerMessages)), systemMessageIndex: matches.length === 1 ? matches[0] : -1 };
+  const matches = i.providerMessages.flatMap((m: any, n: number) =>
+    m.role === 'system' &&
+    typeof m.content === 'string' &&
+    typeof i.executorContext === 'string' &&
+    i.executorContext.length > 0 &&
+    (m.content === i.executorContext || m.content.startsWith(i.executorContext + '\n\n'))
+      ? [n]
+      : [],
+  );
+  return {
+    schema: 1,
+    owner: { ...owner },
+    assemblyHash: assemblyDigest(i),
+    messagesHash: evidenceDigest(JSON.stringify(i.providerMessages)),
+    systemMessageIndex: matches.length === 1 ? matches[0] : -1,
+  };
 }
 export interface ExpertDeliveryProof {
-  domain: string; layerId: string; assessedRevision: number; deliveredRevision: number;
-  deliveredHash: string; relation: "assessed" | "advanced"; content: string;
+  domain: string;
+  layerId: string;
+  assessedRevision: number;
+  deliveredRevision: number;
+  deliveredHash: string;
+  relation: 'assessed' | 'advanced';
+  content: string;
 }
 /** One validation contract used by inspection, the runner and the copy-only audit. */
-export function verifyExpertDelivery(i: any, delivery: any, domain: string, expected: DeliveryOwner): ExpertDeliveryProof {
-  const fail = () => { throw Error("Recorded expert delivery invalid"); };
+export function verifyExpertDelivery(
+  i: any,
+  delivery: any,
+  domain: string,
+  expected: DeliveryOwner,
+): ExpertDeliveryProof {
+  const fail = () => {
+    throw Error('Recorded expert delivery invalid');
+  };
   const one = (rows: any, predicate: (row: any) => boolean): any => {
-    if (!Array.isArray(rows)) return fail(); const found = rows.filter(predicate); return found.length === 1 ? found[0] : fail();
+    if (!Array.isArray(rows)) return fail();
+    const found = rows.filter(predicate);
+    return found.length === 1 ? found[0] : fail();
   };
-  const owner = (x: any) => x?.threadId === expected.threadId && x?.projectId === expected.projectId;
+  const owner = (x: any) =>
+    x?.threadId === expected.threadId && x?.projectId === expected.projectId;
   const receipt = i?.providerBoundary;
-  if (!expected.threadId || !expected.messageId || !owner(i) || i.messageId !== expected.messageId
-    || !owner(i.decoration?.input?.currentMessage) || i.decoration.input.currentMessage.messageId !== expected.messageId
-    || receipt?.schema !== 1 || !owner(receipt.owner) || receipt.owner.messageId !== expected.messageId
-    || receipt.assemblyHash !== assemblyDigest(i) || !Array.isArray(i.providerMessages)
-    || receipt.messagesHash !== evidenceDigest(JSON.stringify(i.providerMessages))) fail();
+  if (
+    !expected.threadId ||
+    !expected.messageId ||
+    !owner(i) ||
+    i.messageId !== expected.messageId ||
+    !owner(i.decoration?.input?.currentMessage) ||
+    i.decoration.input.currentMessage.messageId !== expected.messageId ||
+    receipt?.schema !== 1 ||
+    !owner(receipt.owner) ||
+    receipt.owner.messageId !== expected.messageId ||
+    receipt.assemblyHash !== assemblyDigest(i) ||
+    !Array.isArray(i.providerMessages) ||
+    receipt.messagesHash !== evidenceDigest(JSON.stringify(i.providerMessages))
+  )
+    fail();
   const system = i.providerMessages[receipt.systemMessageIndex];
-  if (!Number.isSafeInteger(receipt.systemMessageIndex) || system?.role !== "system" || typeof system.content !== "string"
-    || !i.executorContext || !(system.content === i.executorContext || system.content.startsWith(i.executorContext + "\n\n"))) fail();
-  const p = one(i.decoration?.participants, p => p?.id === domain), id = `thread-knowledge:${domain}`;
-  const e = one(delivery?.layers, e => e?.id === id), l = one(i.layers, l => l?.id === id);
+  if (
+    !Number.isSafeInteger(receipt.systemMessageIndex) ||
+    system?.role !== 'system' ||
+    typeof system.content !== 'string' ||
+    !i.executorContext ||
+    !(system.content === i.executorContext || system.content.startsWith(i.executorContext + '\n\n'))
+  )
+    fail();
+  const p = one(i.decoration?.participants, (p) => p?.id === domain),
+    id = `thread-knowledge:${domain}`;
+  const e = one(delivery?.layers, (e) => e?.id === id),
+    l = one(i.layers, (l) => l?.id === id);
   if (new Set(delivery.layers.map((row: any) => row?.id)).size !== delivery.layers.length) fail();
   for (const row of delivery.layers.filter((x: any) => x?.domain === domain && x.id !== id)) {
-    const cache = one(i.layers, l => l?.id === row.id);
-    if (!owner(cache) || !owner(row) || cache.included !== true || row.assessedRevision !== undefined
-      || row.relation !== undefined || row.assessedHash !== p.provenance?.cacheHash
-      || row.deliveredHash !== cache.hash || row.drift !== (row.assessedHash !== row.deliveredHash)) fail();
+    const cache = one(i.layers, (l) => l?.id === row.id);
+    if (
+      !owner(cache) ||
+      !owner(row) ||
+      cache.included !== true ||
+      row.assessedRevision !== undefined ||
+      row.relation !== undefined ||
+      row.assessedHash !== p.provenance?.cacheHash ||
+      row.deliveredHash !== cache.hash ||
+      row.drift !== (row.assessedHash !== row.deliveredHash)
+    )
+      fail();
   }
-  if (delivery.layers.filter((e: any) => e?.domain === domain && e?.assessedRevision !== undefined).length !== 1) fail();
-  const v=l.version, ar=p.provenance?.threadKnowledgeRevision, ah=p.provenance?.threadKnowledgeHash, r=e.deliveredRevision;
-  if (!owner(l) || l.included !== true || l.segment !== "thread-knowledge" || l.definitionId !== id
-    || !owner(v) || v?.domain !== domain || e.domain !== domain || !owner(e)
-    || !Number.isSafeInteger(ar) || ar < 0 || !Number.isSafeInteger(r) || r < 0
-    || e.assessedRevision !== ar || e.assessedHash !== ah || typeof ah !== "string"
-    || typeof p.segments?.threadKnowledge !== "string" || typeof l.content !== "string"
-    || e.deliveredHash !== l.hash || v.hash !== l.hash || v.revision !== r
-    || e.drift !== (e.assessedHash !== e.deliveredHash)
-    || (e.relation === "assessed" ? r !== ar || ah !== l.hash : e.relation === "advanced" ? r <= ar : true)) fail();
-  const b = one(i.blocks, b => b?.source === id && b.kind === "thread-knowledge");
-  if (b.text !== l.content || b.hash !== l.hash || b.id !== `thread-knowledge:${id}:${l.hash}`) fail();
+  if (
+    delivery.layers.filter((e: any) => e?.domain === domain && e?.assessedRevision !== undefined)
+      .length !== 1
+  )
+    fail();
+  const v = l.version,
+    ar = p.provenance?.threadKnowledgeRevision,
+    ah = p.provenance?.threadKnowledgeHash,
+    r = e.deliveredRevision;
+  if (
+    !owner(l) ||
+    l.included !== true ||
+    l.segment !== 'thread-knowledge' ||
+    l.definitionId !== id ||
+    !owner(v) ||
+    v?.domain !== domain ||
+    e.domain !== domain ||
+    !owner(e) ||
+    !Number.isSafeInteger(ar) ||
+    ar < 0 ||
+    !Number.isSafeInteger(r) ||
+    r < 0 ||
+    e.assessedRevision !== ar ||
+    e.assessedHash !== ah ||
+    typeof ah !== 'string' ||
+    typeof p.segments?.threadKnowledge !== 'string' ||
+    typeof l.content !== 'string' ||
+    e.deliveredHash !== l.hash ||
+    v.hash !== l.hash ||
+    v.revision !== r ||
+    e.drift !== (e.assessedHash !== e.deliveredHash) ||
+    (e.relation === 'assessed'
+      ? r !== ar || ah !== l.hash
+      : e.relation === 'advanced'
+        ? r <= ar
+        : true)
+  )
+    fail();
+  const b = one(i.blocks, (b) => b?.source === id && b.kind === 'thread-knowledge');
+  if (b.text !== l.content || b.hash !== l.hash || b.id !== `thread-knowledge:${id}:${l.hash}`)
+    fail();
   // Intended assembled block, not a matching quotation in the user message.
-  const body = i.blocks.map((b: any) => b.text).join("\n\n");
+  const body = i.blocks.map((b: any) => b.text).join('\n\n');
   if (body !== i.executorContext) fail();
-  return { domain, layerId:id, assessedRevision:ar, deliveredRevision:r, deliveredHash:l.hash, relation:e.relation, content:l.content };
+  return {
+    domain,
+    layerId: id,
+    assessedRevision: ar,
+    deliveredRevision: r,
+    deliveredHash: l.hash,
+    relation: e.relation,
+    content: l.content,
+  };
 }

package/src/event-stream.ts

@@ -1,12 +1,12 @@
-import type { LifecycleEvent } from "./cache-lifecycle";
-import type { Dispatch } from "./thread";
-import type { Signal } from "./signal";
-import type { DispatchContext } from "./middleware";
-import type { ActionPrompt } from "./action-prompt";
+import type { ActionPrompt } from './action-prompt';
+import type { LifecycleEvent } from './cache-lifecycle';
+import type { DispatchContext } from './middleware';
+import type { Signal } from './signal';
+import type { Dispatch } from './thread';
 
 /** Session lifecycle events (minimal type for event stream). */
 export interface SessionEvent {
-  readonly type: "thread:added" | "thread:removed" | "thread:spawned";
+  readonly type: 'thread:added' | 'thread:removed' | 'thread:spawned';
   readonly threadId: string;
   readonly parentId?: string;
   readonly timestamp: number;
@@ -16,14 +16,28 @@ export interface SessionEvent {
  * Every observable event in the system, tagged by origin.
  */
 export type StreamEvent =
-  | { kind: "journal"; threadId: string; turnId: string | null; projectId?: string; timestamp: number; scope?: "phase" | "learning"; outcome?: "durable" | "failed" }
-  | { kind: "layer"; threadId: string; event: LifecycleEvent }
-  | { kind: "dispatch"; threadId: string; dispatch: Dispatch }
-  | { kind: "signal"; threadId: string; signal: Signal }
-  | { kind: "prompt"; threadId: string; prompt: ActionPrompt }
-  | { kind: "session"; event: SessionEvent }
-  | { kind: "middleware"; threadId: string; phase: "before" | "after"; context: DispatchContext }
-  | { kind: "error"; source: string; message: string; severity: "error" | "warn"; timestamp: number };
+  | {
+      kind: 'journal';
+      threadId: string;
+      turnId: string | null;
+      projectId?: string;
+      timestamp: number;
+      scope?: 'phase' | 'learning';
+      outcome?: 'durable' | 'failed';
+    }
+  | { kind: 'layer'; threadId: string; event: LifecycleEvent }
+  | { kind: 'dispatch'; threadId: string; dispatch: Dispatch }
+  | { kind: 'signal'; threadId: string; signal: Signal }
+  | { kind: 'prompt'; threadId: string; prompt: ActionPrompt }
+  | { kind: 'session'; event: SessionEvent }
+  | { kind: 'middleware'; threadId: string; phase: 'before' | 'after'; context: DispatchContext }
+  | {
+      kind: 'error';
+      source: string;
+      message: string;
+      severity: 'error' | 'warn';
+      timestamp: number;
+    };
 
 /**
  * Unified event stream across all threads and sessions.
@@ -56,7 +70,7 @@ export class EventStream {
       try {
         listener(event);
       } catch (err) {
-        console.warn("[EventStream] listener error:", (err as Error).message ?? err);
+        console.warn('[EventStream] listener error:', (err as Error).message ?? err);
       }
     }
   }
@@ -72,7 +86,7 @@ export class EventStream {
 
   /** Get recent events, optionally filtered by kind and/or thread. */
   recent(opts?: {
-    kind?: StreamEvent["kind"];
+    kind?: StreamEvent['kind'];
     threadId?: string;
     limit?: number;
   }): ReadonlyArray<StreamEvent> {
@@ -84,8 +98,8 @@ export class EventStream {
 
     if (opts?.threadId) {
       events = events.filter((e) => {
-        if (e.kind === "session") return true; // session events are global
-        return "threadId" in e && e.threadId === opts.threadId;
+        if (e.kind === 'session') return true; // session events are global
+        return 'threadId' in e && e.threadId === opts.threadId;
       });
     }
 
@@ -94,8 +108,8 @@ export class EventStream {
   }
 
   /** Push an error event — surfaced as a toast in the viewer UI. */
-  pushError(source: string, message: string, severity: "error" | "warn" = "error"): void {
-    this.push({ kind: "error", source, message, severity, timestamp: Date.now() });
+  pushError(source: string, message: string, severity: 'error' | 'warn' = 'error'): void {
+    this.push({ kind: 'error', source, message, severity, timestamp: Date.now() });
   }
 
   /** Clear history. */

package/src/executor.ts

@@ -1,10 +1,10 @@
-import { computeHash, REQUIRED_CONTEXT_BLOCKED } from "./context-layer";
-import { BaseAgent, type AgentConfig, type ExecutionResult } from "./base-agent";
-import type { AssembledContext, ContextStack, LayerFilter } from "./context-stack";
-import { buildInjectionArtifact, type InjectionArtifact, type MessageDecoration } from "./messages";
-import type { LLMMessage } from "./types";
-import type { ToolCallObservation } from "./tools";
-import type { NativeEvidence, NativeObservation } from "./native-evidence";
+import { type AgentConfig, BaseAgent, type ExecutionResult } from './base-agent';
+import { computeHash, REQUIRED_CONTEXT_BLOCKED } from './context-layer';
+import type { AssembledContext, ContextStack, LayerFilter } from './context-stack';
+import { buildInjectionArtifact, type InjectionArtifact, type MessageDecoration } from './messages';
+import type { NativeEvidence, NativeObservation } from './native-evidence';
+import type { ToolCallObservation } from './tools';
+import type { LLMMessage } from './types';
 
 /** Runtime metadata passed to executor handlers at dispatch time. */
 export interface ExecuteMeta {
@@ -44,21 +44,17 @@ export interface ExecuteMeta {
 export type ExecuteHandler<TPayload, TResult> = (
   context: string,
   payload: TPayload,
-  meta?: ExecuteMeta
+  meta?: ExecuteMeta,
 ) => Promise<TResult>;
 
-export interface ExecutorConfig<TPayload = unknown, TResult = unknown>
-  extends AgentConfig {
+export interface ExecutorConfig<TPayload = unknown, TResult = unknown> extends AgentConfig {
   handler: ExecuteHandler<TPayload, TResult>;
 }
 
 /**
  * An Executor takes context + payload, goes and does work, returns full results.
  */
-export class Executor<TPayload = unknown, TResult = unknown> extends BaseAgent<
-  TPayload,
-  TResult
-> {
+export class Executor<TPayload = unknown, TResult = unknown> extends BaseAgent<TPayload, TResult> {
   private _handler: ExecuteHandler<TPayload, TResult>;
 
   constructor(config: ExecutorConfig<TPayload, TResult>) {
@@ -73,7 +69,7 @@ export class Executor<TPayload = unknown, TResult = unknown> extends BaseAgent<
   async run(
     payload: TPayload,
     filterOverride?: LayerFilter,
-    meta?: ExecuteMeta
+    meta?: ExecuteMeta,
   ): Promise<ExecutionResult<TResult>> {
     // Decoration composed by pre-message middleware (parallel domain advice)
     // rides in on annotations and is appended after the assembled layers, so
@@ -83,37 +79,54 @@ export class Executor<TPayload = unknown, TResult = unknown> extends BaseAgent<
     const base = this.assembleContext(filterOverride);
     const blocks = decoration?.blocks.length ? [...base.blocks, ...decoration.blocks] : base.blocks;
     const assembled: AssembledContext = decoration?.blocks.length
-      ? { blocks, text: blocks.map((block) => block.text).join("\n\n") }
+      ? { blocks, text: blocks.map((block) => block.text).join('\n\n') }
       : base;
     const context = assembled.text;
     const contextHash = computeHash(context);
     const capturedAt = Date.now();
-    const included = new Set(assembled.blocks.map(block => block.id));
-    const layers = this._stack.layers.map(layer => ({
+    const included = new Set(assembled.blocks.map((block) => block.id));
+    const layers = this._stack.layers.map((layer) => ({
       ...layer.snapshotInstance(meta?.threadId),
       id: layer.id,
       prompt: layer.prompt,
-      sourceIds: layer.sources.map(source => source.id),
+      sourceIds: layer.sources.map((source) => source.id),
       included: included.has(layer.id),
     }));
-    const userMessage = typeof payload === "string" ? payload : JSON.stringify(payload);
+    const userMessage = typeof payload === 'string' ? payload : JSON.stringify(payload);
     const injection = buildInjectionArtifact({
       userMessage,
       assembled: base,
       decoration,
-      layerFreshness: Object.fromEntries(layers.map(layer => [layer.id, {
-        state: layer.state, lastWarmed: layer.lastWarmed,
-      }])),
+      layerFreshness: Object.fromEntries(
+        layers.map((layer) => [
+          layer.id,
+          {
+            state: layer.state,
+            lastWarmed: layer.lastWarmed,
+          },
+        ]),
+      ),
     });
     let providerMessages: LLMMessage[] | undefined;
     let providerBoundary: ProviderBoundaryReceipt | undefined;
-    const capture = (): InjectionArtifact => ({ ...injection, capturedAt, threadId: meta?.threadId,
-      projectId: meta?.projectId, messageId: meta?.messageId, providerBoundary,
-      executorContext: context, providerMessages, layers,
-      ...(plan !== undefined ? { plan } : {}) });
+    const capture = (): InjectionArtifact => ({
+      ...injection,
+      capturedAt,
+      threadId: meta?.threadId,
+      projectId: meta?.projectId,
+      messageId: meta?.messageId,
+      providerBoundary,
+      executorContext: context,
+      providerMessages,
+      layers,
+      ...(plan !== undefined ? { plan } : {}),
+    });
     const observe = (callback: () => void) => {
-      try { callback(); }
-      catch (error) { console.warn("[Executor] input evidence observer failed:", error); }
+      try {
+        callback();
+      } catch (error) {
+        console.warn('[Executor] input evidence observer failed:', error);
+      }
     };
     const record = () => observe(() => meta?.recordInjection?.(structuredClone(capture())));
     // These are in-memory preparation observations, not durable writes or
@@ -122,27 +135,43 @@ export class Executor<TPayload = unknown, TResult = unknown> extends BaseAgent<
     // Shared layers may finish a coalesced load for a later request. Preserve
     // the actual prepared evidence above, but never send it as this request's
     // selection. No retry/replay is implied by refusing this provider call.
-    const mismatched = layers.filter(layer => {
+    const mismatched = layers.filter((layer) => {
       if (!layer.included || !layer.selection) return false;
       const selectedFor = layer.selection.currentMessage;
       // Standalone legacy sources have no request-identity contract. A flow
       // plan does: even its unidentified loads must not replace identified work.
       if (!selectedFor && plan === undefined) return false;
       const expectedId = meta?.messageId && meta.threadId ? meta.messageId : undefined;
-      return selectedFor?.messageId !== expectedId || (selectedFor !== undefined &&
-        (selectedFor.threadId !== meta?.threadId || selectedFor.projectId !== meta?.projectId));
+      return (
+        selectedFor?.messageId !== expectedId ||
+        (selectedFor !== undefined &&
+          (selectedFor.threadId !== meta?.threadId || selectedFor.projectId !== meta?.projectId))
+      );
     });
     if (mismatched.length) {
-      throw new Error(`Memory selection changed before provider execution: logical message ownership differs for layer(s) ${mismatched.map(l => l.id).join(", ")}`);
+      throw new Error(
+        `Memory selection changed before provider execution: logical message ownership differs for layer(s) ${mismatched.map((l) => l.id).join(', ')}`,
+      );
     }
     // A selecting source that could not carry required context is a reason to
     // stop, not a note for the model. Refuse before any provider call; the
     // recorded artifact above keeps the conflict and record ids inspectable.
-    const blocked = layers.filter(layer => layer.included).flatMap(layer => (layer.selection?.sources ?? []).flatMap(source =>
-      source.report.conflicts.filter(conflict => conflict.kind === REQUIRED_CONTEXT_BLOCKED)
-        .map(conflict => `layer ${layer.id}, source ${source.sourceId}: ${conflict.ids.join(", ")}`)));
+    const blocked = layers
+      .filter((layer) => layer.included)
+      .flatMap((layer) =>
+        (layer.selection?.sources ?? []).flatMap((source) =>
+          source.report.conflicts
+            .filter((conflict) => conflict.kind === REQUIRED_CONTEXT_BLOCKED)
+            .map(
+              (conflict) =>
+                `layer ${layer.id}, source ${source.sourceId}: ${conflict.ids.join(', ')}`,
+            ),
+        ),
+      );
     if (blocked.length) {
-      throw new Error(`Required memory context blocked before provider execution: pinned records exceed the selection cap and no scoped retrieval is available (${blocked.join("; ")})`);
+      throw new Error(
+        `Required memory context blocked before provider execution: pinned records exceed the selection cap and no scoped retrieval is available (${blocked.join('; ')})`,
+      );
     }
     let output: TResult;
     let native: NativeEvidence | undefined;
@@ -150,14 +179,22 @@ export class Executor<TPayload = unknown, TResult = unknown> extends BaseAgent<
     try {
       output = await this._handler(context, payload, {
         ...meta,
-        recordNative: evidence => { if (recording) { native = evidence; observe(() => meta?.recordNative?.(evidence)); } },
-        recordProviderInput: messages => {
+        recordNative: (evidence) => {
+          if (recording) {
+            native = evidence;
+            observe(() => meta?.recordNative?.(evidence));
+          }
+        },
+        recordProviderInput: (messages) => {
           // The initial boundary input must not be replaced by tool followups.
           if (providerMessages === undefined) {
             providerMessages = structuredClone(messages);
-            if (meta?.threadId && meta.messageId) providerBoundary = boundaryReceipt(capture(), {
-              threadId: meta.threadId, messageId: meta.messageId, ...(meta.projectId ? { projectId: meta.projectId } : {}),
-            });
+            if (meta?.threadId && meta.messageId)
+              providerBoundary = boundaryReceipt(capture(), {
+                threadId: meta.threadId,
+                messageId: meta.messageId,
+                ...(meta.projectId ? { projectId: meta.projectId } : {}),
+              });
           }
           record();
           observe(() => meta?.recordProviderInput?.(structuredClone(messages)));
@@ -182,4 +219,5 @@ export class Executor<TPayload = unknown, TResult = unknown> extends BaseAgent<
     };
   }
 }
-import { boundaryReceipt, type ProviderBoundaryReceipt } from "./delivery-evidence";
+
+import { boundaryReceipt, type ProviderBoundaryReceipt } from './delivery-evidence';