@jinn-network/client 0.1.9 → 0.2.0-canary.344e61e2

package/dist/harnesses/engine/backfill-failed-deliveries.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backfill-failed-deliveries.js","sourceRoot":"","sources":["../../../src/harnesses/engine/backfill-failed-deliveries.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAIH,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE1C;;;;;;;;GAQG;AACH,MAAM,kCAAkC,GAAG,4BAA4B,CAAC;AAmBxE,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,IAAkC;IAElC,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,GAAG,KAAK,EAAE,GAAG,IAAI,CAAC;IAC3D,MAAM,MAAM,GAAmC,EAAE,YAAY,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAE7F,MAAM,UAAU,GAAG,WAAW,CAAC,UAAU,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IAC/D,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,IAAI,CAAC,GAAG,CAAC,aAAa,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,QAAQ,CAAC,kCAAkC,CAAC,EAAE,CAAC;YAC1F,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;gBAClB,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,MAAM,EAAE,yEAAyE;aAClF,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC;YACxB,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC,CAAC;YACxF,SAAS;QACX,CAAC;QAED,IAAI,OAAO,CAAC;QACZ,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,YAAY,CAAC,qBAAqB,CAAC;gBACjD,IAAI,EAAE,GAAG,CAAC,cAA+B;aAC1C,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;gBACjB,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACxD,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACjC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;gBAClB,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,MAAM,EAAE,uCAAuC,OAAO,CAAC,MAAM,GAAG;aACjE,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,qBAAqB,EAAE,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC;YACjG,SAAS;QACX,CAAC;QAED,MAAM,KAAK,GAAG,WAAW,CAAC,0BAA0B,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACpE,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,qBAAqB,EAAE,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC;QACnG,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,gCAAgC,EAAE,CAAC,CAAC;QAC9F,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/harnesses/engine/canonical-json.d.ts

@@ -1 +1,2 @@
-export declare function canonicalJson(value: unknown): string;
+/** Compatibility export for the core-owned canonical JSON implementation. */
+export { canonicalJson } from '../../vendor/@jinn-network/core/dist/index.js';

package/dist/harnesses/engine/canonical-json.js

@@ -1,68 +1,3 @@
-/**
- * Canonical JSON serialisation — RFC 8785 JCS.
- *
- * Uses the `canonicalize` npm package (≈30 LOC, zero deps) so third-party
- * verifiers can reproduce our signing input with any standard JCS library.
- *
- * Rules per RFC 8785:
- * - Object keys sorted lexicographically by UTF-16 code-unit order.
- * - No insignificant whitespace.
- * - I-JSON number formatting per ECMAScript `Number.prototype.toString(10)`
- *   (integer-preferred; scientific notation when |x| ≥ 1e21 or |x| < 5e-7;
- *   -0 serialises as 0).
- * - String escape rules per JSON spec (control chars as \\uXXXX; only ", \
- *   and control chars must be escaped).
- * - `undefined` values in objects are dropped (matches JSON.stringify).
- * - `NaN` / `Infinity` serialise to `null` (matches JSON.stringify).
- *
- * BigInt is **not** supported — JCS is a canonicalization of standard JSON,
- * which has no BigInt type. Callers must convert BigInt to string or number
- * before calling. Passing BigInt throws.
- *
- * Used for manifest signing: produce a deterministic byte string that two
- * independent parties can reproduce from the same object graph.
- */
-// canonicalize v3 is ESM-only (no CJS entry); the client is `"type": "module"`
-// so a native ESM default import is the correct interop (replaces the v2-era
-// createRequire shim). v3 is packaging-only vs v2 — its RFC 8785 output is
-// byte-identical, so existing content hashes / manifest signatures are stable.
-import canonicalize from 'canonicalize';
-/**
- * Recursively replace NaN / ±Infinity with null so that canonicalize does not
- * throw — matching the JSON.stringify behaviour that the rest of the codebase
- * expects. BigInt is intentionally left unhandled so that canonicalize throws
- * a clear error when a caller passes one.
- */
-function coerceNonFinite(value) {
-    if (typeof value === 'number' && !isFinite(value))
-        return null;
-    if (Array.isArray(value))
-        return value.map(coerceNonFinite);
-    if (value !== null && typeof value === 'object') {
-        // Preserve toJSON() — canonicalize would otherwise call it itself;
-        // by pre-processing we must not strip it. Invoke it here and recurse
-        // on its return value so NaN/Infinity inside toJSON results are still
-        // coerced.
-        const toJson = value.toJSON;
-        if (typeof toJson === 'function') {
-            return coerceNonFinite(toJson.call(value));
-        }
-        const out = {};
-        for (const [k, v] of Object.entries(value))
-            out[k] = coerceNonFinite(v);
-        return out;
-    }
-    return value;
-}
-export function canonicalJson(value) {
-    const coerced = coerceNonFinite(value);
-    const result = canonicalize(coerced);
-    if (result === undefined) {
-        // canonicalize returns undefined for top-level undefined input (matches
-        // JSON.stringify). Match Jinn's previous behaviour: emit "null" so the
-        // return type is always a string.
-        return 'null';
-    }
-    return result;
-}
+/** Compatibility export for the core-owned canonical JSON implementation. */
+export { canonicalJson } from '../../vendor/@jinn-network/core/dist/index.js';
 //# sourceMappingURL=canonical-json.js.map

package/dist/harnesses/engine/canonical-json.js.map

@@ -1 +1 @@
-{"version":3,"file":"canonical-json.js","sourceRoot":"","sources":["../../../src/harnesses/engine/canonical-json.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,+EAA+E;AAC/E,6EAA6E;AAC7E,2EAA2E;AAC3E,+EAA+E;AAC/E,OAAO,YAAY,MAAM,cAAc,CAAC;AAExC;;;;;GAKG;AACH,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC5D,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,mEAAmE;QACnE,qEAAqE;QACrE,sEAAsE;QACtE,WAAW;QACX,MAAM,MAAM,GAAI,KAAoC,CAAC,MAAM,CAAC;QAC5D,IAAI,OAAO,MAAM,KAAK,UAAU,EAAE,CAAC;YACjC,OAAO,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAC7C,CAAC;QACD,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,GAAG,CAAC,CAAC,CAAC,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC;QACxE,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IAEvC,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IACrC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,wEAAwE;QACxE,uEAAuE;QACvE,kCAAkC;QAClC,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"canonical-json.js","sourceRoot":"","sources":["../../../src/harnesses/engine/canonical-json.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/harnesses/engine/corpus-knowledge.d.ts

@@ -0,0 +1,67 @@
+/**
+ * Corpus knowledge autoload (#1393).
+ *
+ * Pure retrieval + ranking: query the corpus for prior *solution* records of
+ * the given solverType and shape the top few into a payload the engine can
+ * inject into task.context.corpusKnowledge before harness spawn.
+ *
+ * Reuses handleSearchRecords (client/src/mcp/search-records.ts) so the result
+ * set is exactly what the MCP tools would return: local envelope projections,
+ * locally served/cached artifact rows, and (when a corpus is configured)
+ * network manifests. Works corpus-null — the store-only path is the e2e
+ * configuration and the mainnet default until an indexer is wired.
+ *
+ * Contract: loadCorpusKnowledge NEVER throws and is bounded by timeoutMs.
+ * On failure or timeout it logs one warning and returns null — corpus
+ * problems must never block the claim/solve path (AC3 of #1393).
+ *
+ * RecordSummary.scoreMetadata is passed through verbatim as the future
+ * verdict-aware ranking seam (#1396).
+ */
+import { type ArtifactDescriptor, type ReadOnlyCorpus } from '../../mcp/search-records.js';
+import type { Store } from '../../store/store.js';
+export interface CorpusKnowledgeArtifactRef {
+    sha256: string;
+    artifactType: string;
+    /** Self-describing acquisition recipe: MCP acquire_artifact arguments. */
+    acquisition?: ArtifactDescriptor['acquisition'];
+}
+export interface CorpusKnowledgeRecordRef {
+    recordRef: string;
+    envelopeCid: string;
+    evidenceTier: string;
+    generatedAt?: number;
+    artifacts: CorpusKnowledgeArtifactRef[];
+    /** Score/verdict fields surfaced by search (seam for #1396). */
+    scoreMetadata?: Record<string, unknown>;
+}
+export interface CorpusKnowledgePayload {
+    version: 1;
+    solverType: string;
+    retrievedAt: number;
+    guidance: string;
+    records: CorpusKnowledgeRecordRef[];
+}
+export interface LoadCorpusKnowledgeOptions {
+    corpus: ReadOnlyCorpus | null;
+    store: Store;
+    solverType: string;
+    /** Records to inject. Default 3. */
+    limit?: number;
+    /**
+     * Records to fetch (and rank) before slicing to `limit`. Default 200 —
+     * large enough that an active solverType's older attested/committed
+     * records aren't truncated out of the ranking pool by recency alone
+     * (#1393 review finding 2). Also bounds queryEnvelopeProjections (cap
+     * 1000) and the local served/cached artifact join (cap 500).
+     */
+    searchLimit?: number;
+    /** Hard bound on the whole lookup. Default 10_000 ms. */
+    timeoutMs?: number;
+    log?: (msg: string) => void;
+}
+/** Reconstruct a payload from already-resolved record refs (#1393 review
+ * finding 3 — RUNNING retries/recovery re-drives reuse this instead of
+ * re-querying the corpus). */
+export declare function buildCorpusKnowledgePayload(solverType: string, records: CorpusKnowledgeRecordRef[]): CorpusKnowledgePayload;
+export declare function loadCorpusKnowledge(opts: LoadCorpusKnowledgeOptions): Promise<CorpusKnowledgePayload | null>;

package/dist/harnesses/engine/corpus-knowledge.js

@@ -0,0 +1,194 @@
+/**
+ * Corpus knowledge autoload (#1393).
+ *
+ * Pure retrieval + ranking: query the corpus for prior *solution* records of
+ * the given solverType and shape the top few into a payload the engine can
+ * inject into task.context.corpusKnowledge before harness spawn.
+ *
+ * Reuses handleSearchRecords (client/src/mcp/search-records.ts) so the result
+ * set is exactly what the MCP tools would return: local envelope projections,
+ * locally served/cached artifact rows, and (when a corpus is configured)
+ * network manifests. Works corpus-null — the store-only path is the e2e
+ * configuration and the mainnet default until an indexer is wired.
+ *
+ * Contract: loadCorpusKnowledge NEVER throws and is bounded by timeoutMs.
+ * On failure or timeout it logs one warning and returns null — corpus
+ * problems must never block the claim/solve path (AC3 of #1393).
+ *
+ * RecordSummary.scoreMetadata is passed through verbatim as the future
+ * verdict-aware ranking seam (#1396).
+ */
+import { handleSearchRecords, } from '../../mcp/search-records.js';
+const CORPUS_KNOWLEDGE_GUIDANCE = 'Prior solution records for this solverType, ranked by evidence tier then recency. '
+    + 'Full artifact content is acquirable via the MCP tools: inspect_record (pass the '
+    + 'envelopeCid) and acquire_artifact (pass each artifact\'s acquisition arguments).';
+const DEFAULT_SEARCH_LIMIT = 200;
+const TIER_WEIGHT = {
+    attested: 3,
+    committed: 2,
+    'self-signed': 1,
+    unknown: 1,
+};
+function tierWeight(record) {
+    return TIER_WEIGHT[record.envelopeRef?.evidenceTier ?? 'unknown'] ?? 1;
+}
+function recency(record) {
+    return record.generatedAt ?? record.envelopeRef?.publishedAt ?? 0;
+}
+/** Reconstruct a payload from already-resolved record refs (#1393 review
+ * finding 3 — RUNNING retries/recovery re-drives reuse this instead of
+ * re-querying the corpus). */
+export function buildCorpusKnowledgePayload(solverType, records) {
+    return {
+        version: 1,
+        solverType,
+        retrievedAt: Date.now(),
+        guidance: CORPUS_KNOWLEDGE_GUIDANCE,
+        records,
+    };
+}
+function artifactRefFromRow(row) {
+    const ref = { sha256: row.sha256, artifactType: row.artifactType };
+    if (row.source === 'network' && row.sourceEndpoint) {
+        ref.acquisition = {
+            tool: 'acquire_artifact',
+            arguments: {
+                sha256: row.sha256,
+                access: { endpoint: row.sourceEndpoint, priceUsdc: row.paidAmountUsdc ?? '0' },
+                artifactType: row.artifactType,
+            },
+        };
+    }
+    return ref;
+}
+/**
+ * Search with a store-only fallback (#1393 review finding 4). A hung or
+ * failing network corpus must not deny local knowledge that IS available.
+ *
+ * ReadOnlyCorpus.query() takes no AbortSignal, so a timed-out corpus.query
+ * call cannot be cancelled — it keeps running in the background until it
+ * settles on its own. We attach real (no-op-on-arrival) resolve/reject
+ * handlers to it via `.then` rather than leaving it a bare `Promise.race`
+ * loser, so Node never reports it as an unhandled rejection and it never
+ * produces a second, duplicate log line when it eventually settles.
+ */
+async function searchWithTimeoutAndFallback(corpus, store, solverType, searchLimit, timeoutMs, log) {
+    const args = { solverType, role: 'solution', limit: searchLimit };
+    try {
+        return await withTimeout(handleSearchRecords(corpus, store, args), timeoutMs);
+    }
+    catch (err) {
+        const reason = err instanceof Error ? err.message : String(err);
+        if (!corpus) {
+            log(`[corpus-knowledge] lookup failed for solverType=${solverType}: ${reason}`);
+            return null;
+        }
+        log(`[corpus-knowledge] network corpus failed for solverType=${solverType} (${reason}); `
+            + 'falling back to store-only knowledge');
+        try {
+            // corpus: null skips the network branch inside handleSearchRecords
+            // entirely, so this retry is local-only and cannot itself hang.
+            return await handleSearchRecords(null, store, args);
+        }
+        catch (fallbackErr) {
+            log(`[corpus-knowledge] store-only fallback also failed for solverType=${solverType}: `
+                + `${fallbackErr instanceof Error ? fallbackErr.message : String(fallbackErr)}`);
+            return null;
+        }
+    }
+}
+function withTimeout(promise, timeoutMs) {
+    return new Promise((resolve, reject) => {
+        const timer = setTimeout(() => reject(new Error(`corpus knowledge lookup timed out after ${timeoutMs}ms`)), timeoutMs);
+        promise.then((value) => { clearTimeout(timer); resolve(value); }, (err) => { clearTimeout(timer); reject(err); });
+    });
+}
+export async function loadCorpusKnowledge(opts) {
+    const limit = opts.limit ?? 3;
+    const searchLimit = opts.searchLimit ?? DEFAULT_SEARCH_LIMIT;
+    const timeoutMs = opts.timeoutMs ?? 10_000;
+    const log = opts.log ?? ((msg) => console.warn(msg));
+    try {
+        const result = await searchWithTimeoutAndFallback(opts.corpus, opts.store, opts.solverType, searchLimit, timeoutMs, log);
+        if (!result)
+            return null;
+        // Index artifact refs by envelopeCid across ALL returned records: local
+        // served/cached rows carry the sha256s but no solverType/role; projection
+        // records carry solverType/role/tier but no artifact refs. The join key
+        // is the envelope CID (backfilled onto served_artifacts by pack()).
+        const artifactsByCid = new Map();
+        for (const record of result.records) {
+            const cid = record.envelopeRef?.cid;
+            if (!cid)
+                continue;
+            for (const artifact of record.artifactRefs) {
+                const list = artifactsByCid.get(cid) ?? [];
+                if (!list.some((existing) => existing.sha256 === artifact.sha256)) {
+                    list.push({
+                        sha256: artifact.sha256,
+                        artifactType: artifact.artifactType,
+                        ...(artifact.acquisition ? { acquisition: artifact.acquisition } : {}),
+                    });
+                }
+                artifactsByCid.set(cid, list);
+            }
+        }
+        // Candidates: solution records for this solverType with an envelope CID
+        // (no CID → nothing to dedupe on or reference downstream). First record
+        // per CID wins (projection ordering puts local knowledge first).
+        const byCid = new Map();
+        for (const record of result.records) {
+            const cid = record.envelopeRef?.cid;
+            if (!cid)
+                continue;
+            if (record.solverType !== opts.solverType)
+                continue;
+            if (record.role !== 'solution')
+                continue;
+            if (!byCid.has(cid))
+                byCid.set(cid, record);
+        }
+        const ranked = [...byCid.entries()]
+            .sort(([, a], [, b]) => {
+            const tierDelta = tierWeight(b) - tierWeight(a);
+            if (tierDelta !== 0)
+                return tierDelta;
+            return recency(b) - recency(a);
+        })
+            .slice(0, limit);
+        if (ranked.length === 0)
+            return null;
+        // Backfill artifact refs for exactly the ranked CIDs by a direct,
+        // non-windowed store lookup (#1393 review finding 2). The `local` join
+        // inside handleSearchRecords only covers the searchLimit most-recent
+        // served/cached rows of ANY type — on a real store, a top-ranked record's
+        // artifact can fall outside that window even though it's a top-3 result.
+        // This backfill is deterministic regardless of store size because it's
+        // scoped to the few (≤limit) CIDs we're actually about to inject.
+        const rankedCids = ranked.map(([cid]) => cid);
+        for (const row of opts.store.getArtifactsByEnvelopeCids(rankedCids)) {
+            const cid = row.envelopeCid;
+            if (!cid)
+                continue;
+            const list = artifactsByCid.get(cid) ?? [];
+            if (!list.some((existing) => existing.sha256 === row.sha256)) {
+                list.push(artifactRefFromRow(row));
+            }
+            artifactsByCid.set(cid, list);
+        }
+        return buildCorpusKnowledgePayload(opts.solverType, ranked.map(([cid, record]) => ({
+            recordRef: record.recordRef,
+            envelopeCid: cid,
+            evidenceTier: record.envelopeRef?.evidenceTier ?? 'unknown',
+            ...(record.generatedAt !== undefined ? { generatedAt: record.generatedAt } : {}),
+            artifacts: artifactsByCid.get(cid) ?? [],
+            ...(record.scoreMetadata ? { scoreMetadata: record.scoreMetadata } : {}),
+        })));
+    }
+    catch (err) {
+        log(`[corpus-knowledge] lookup failed for solverType=${opts.solverType}: `
+            + `${err instanceof Error ? err.message : String(err)}`);
+        return null;
+    }
+}
+//# sourceMappingURL=corpus-knowledge.js.map

package/dist/harnesses/engine/corpus-knowledge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"corpus-knowledge.js","sourceRoot":"","sources":["../../../src/harnesses/engine/corpus-knowledge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EACL,mBAAmB,GAKpB,MAAM,6BAA6B,CAAC;AA+CrC,MAAM,yBAAyB,GAC7B,oFAAoF;MAClF,kFAAkF;MAClF,kFAAkF,CAAC;AAEvF,MAAM,oBAAoB,GAAG,GAAG,CAAC;AAEjC,MAAM,WAAW,GAA2B;IAC1C,QAAQ,EAAE,CAAC;IACX,SAAS,EAAE,CAAC;IACZ,aAAa,EAAE,CAAC;IAChB,OAAO,EAAE,CAAC;CACX,CAAC;AAEF,SAAS,UAAU,CAAC,MAAqB;IACvC,OAAO,WAAW,CAAC,MAAM,CAAC,WAAW,EAAE,YAAY,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,OAAO,CAAC,MAAqB;IACpC,OAAO,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,WAAW,EAAE,WAAW,IAAI,CAAC,CAAC;AACpE,CAAC;AAED;;8BAE8B;AAC9B,MAAM,UAAU,2BAA2B,CACzC,UAAkB,EAClB,OAAmC;IAEnC,OAAO;QACL,OAAO,EAAE,CAAC;QACV,UAAU;QACV,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE;QACvB,QAAQ,EAAE,yBAAyB;QACnC,OAAO;KACR,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,GAM3B;IACC,MAAM,GAAG,GAA+B,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE,CAAC;IAC/F,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,GAAG,CAAC,cAAc,EAAE,CAAC;QACnD,GAAG,CAAC,WAAW,GAAG;YAChB,IAAI,EAAE,kBAAkB;YACxB,SAAS,EAAE;gBACT,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,MAAM,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,cAAc,EAAE,SAAS,EAAE,GAAG,CAAC,cAAc,IAAI,GAAG,EAAE;gBAC9E,YAAY,EAAE,GAAG,CAAC,YAAY;aAC/B;SACF,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;;GAUG;AACH,KAAK,UAAU,4BAA4B,CACzC,MAA6B,EAC7B,KAAY,EACZ,UAAkB,EAClB,WAAmB,EACnB,SAAiB,EACjB,GAA0B;IAE1B,MAAM,IAAI,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,UAAmB,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;IAC3E,IAAI,CAAC;QACH,OAAO,MAAM,WAAW,CAAC,mBAAmB,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,SAAS,CAAC,CAAC;IAChF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChE,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,GAAG,CAAC,mDAAmD,UAAU,KAAK,MAAM,EAAE,CAAC,CAAC;YAChF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,GAAG,CACD,2DAA2D,UAAU,KAAK,MAAM,KAAK;cACnF,sCAAsC,CACzC,CAAC;QACF,IAAI,CAAC;YACH,mEAAmE;YACnE,gEAAgE;YAChE,OAAO,MAAM,mBAAmB,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,WAAW,EAAE,CAAC;YACrB,GAAG,CACD,qEAAqE,UAAU,IAAI;kBACjF,GAAG,WAAW,YAAY,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAChF,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAI,OAAmB,EAAE,SAAiB;IAC5D,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACxC,MAAM,KAAK,GAAG,UAAU,CACtB,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,2CAA2C,SAAS,IAAI,CAAC,CAAC,EACjF,SAAS,CACV,CAAC;QACF,OAAO,CAAC,IAAI,CACV,CAAC,KAAK,EAAE,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EACnD,CAAC,GAAY,EAAE,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CACxD,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,IAAgC;IAEhC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;IAC9B,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,oBAAoB,CAAC;IAC7D,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC;IAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,GAAW,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAE7D,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,4BAA4B,CAC/C,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,UAAU,EACf,WAAW,EACX,SAAS,EACT,GAAG,CACJ,CAAC;QACF,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QAEzB,wEAAwE;QACxE,0EAA0E;QAC1E,wEAAwE;QACxE,oEAAoE;QACpE,MAAM,cAAc,GAAG,IAAI,GAAG,EAAwC,CAAC;QACvE,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACpC,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,EAAE,GAAG,CAAC;YACpC,IAAI,CAAC,GAAG;gBAAE,SAAS;YACnB,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;gBAC3C,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;gBAC3C,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;oBAClE,IAAI,CAAC,IAAI,CAAC;wBACR,MAAM,EAAE,QAAQ,CAAC,MAAM;wBACvB,YAAY,EAAE,QAAQ,CAAC,YAAY;wBACnC,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBACvE,CAAC,CAAC;gBACL,CAAC;gBACD,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;QAED,wEAAwE;QACxE,wEAAwE;QACxE,iEAAiE;QACjE,MAAM,KAAK,GAAG,IAAI,GAAG,EAAyB,CAAC;QAC/C,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACpC,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,EAAE,GAAG,CAAC;YACpC,IAAI,CAAC,GAAG;gBAAE,SAAS;YACnB,IAAI,MAAM,CAAC,UAAU,KAAK,IAAI,CAAC,UAAU;gBAAE,SAAS;YACpD,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU;gBAAE,SAAS;YACzC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC9C,CAAC;QAED,MAAM,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;aAChC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE;YACrB,MAAM,SAAS,GAAG,UAAU,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;YAChD,IAAI,SAAS,KAAK,CAAC;gBAAE,OAAO,SAAS,CAAC;YACtC,OAAO,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACjC,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAEnB,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAErC,kEAAkE;QAClE,uEAAuE;QACvE,qEAAqE;QACrE,0EAA0E;QAC1E,yEAAyE;QACzE,uEAAuE;QACvE,kEAAkE;QAClE,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;QAC9C,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,0BAA0B,CAAC,UAAU,CAAC,EAAE,CAAC;YACpE,MAAM,GAAG,GAAG,GAAG,CAAC,WAAW,CAAC;YAC5B,IAAI,CAAC,GAAG;gBAAE,SAAS;YACnB,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YAC3C,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC7D,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC;YACrC,CAAC;YACD,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAChC,CAAC;QAED,OAAO,2BAA2B,CAChC,IAAI,CAAC,UAAU,EACf,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;YAC7B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,WAAW,EAAE,GAAG;YAChB,YAAY,EAAE,MAAM,CAAC,WAAW,EAAE,YAAY,IAAI,SAAS;YAC3D,GAAG,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChF,SAAS,EAAE,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE;YACxC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzE,CAAC,CAAC,CACJ,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CACD,mDAAmD,IAAI,CAAC,UAAU,IAAI;cACpE,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACxD,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/harnesses/engine/engine.d.ts

@@ -10,18 +10,31 @@ import { TaskRunPersistence, type PersistedTaskRun, type PersistedTaskRunInput }
 import type { Store } from '../../store/store.js';
 import { type ReapWorkDirsReport } from './work-dir-reaper.js';
 import { type PackagingDeps } from './packaging.js';
+import type { ReadOnlyCorpus } from '../../mcp/search-records.js';
 import { type EnvelopeAssemblyDeps } from './envelope-assembly.js';
 import { type DeliveryDeps } from './delivery.js';
 import type { Harness, HarnessContext, RuntimePlugin } from '../types.js';
 import type { IdentityPublisher, ReputationRegistryClient, ResolvedAgent } from '../../erc8004/index.js';
 import type { Task } from '../../types/task.js';
 import { TrajectoryCollector } from '../../trajectory/index.js';
+import { type ScrubPipeline } from '@jinn-network/core/scrub';
 import type { SolverNetManifestV1 } from '../../vendor/@jinn-network/sdk/dist/solvernets/index.js';
 import { type FreezeViolation } from '../../daemon/freeze-fence.js';
 export declare class NotImplementedError extends Error {
     readonly transitionName: string;
     constructor(transitionName: string);
 }
+/**
+ * A task cannot leave DISCOVERED until its canonical TaskCreated block has a
+ * valid timestamp. Exhausting the bounded lookup is recoverable: a later
+ * engine pass can query a healthy/caught-up RPC and continue the same row.
+ */
+export declare class TaskCreationTimestampUnavailableError extends Error {
+    readonly requestId: string;
+    readonly blockNumber: number;
+    readonly cause: unknown;
+    constructor(requestId: string, blockNumber: number, cause: unknown);
+}
 /**
  * Resolves a `Harness` for a given solverType (and optional role), or
  * returns `undefined` when nothing is registered/enabled.
@@ -70,6 +83,10 @@ export interface JoinedSolverNetsView {
     } | undefined;
     /** Enumerate all joined manifest CIDs (used for digest-based filtering). */
     manifestCids(): string[];
+    /** Add/replace one joined entry live (used by the hot-apply join applier, #1037). */
+    set(manifestCid: string, entry: {
+        roles: Array<'solver' | 'evaluator'>;
+    }): void;
 }
 /**
  * Build a `JoinedSolverNetsView` from the raw operator-config block.
@@ -82,6 +99,17 @@ export declare function joinedSolverNetsViewFromConfig(joined: Record<string, {
     manifestCid: string;
     roles: Array<'solver' | 'evaluator'>;
 }> | undefined): JoinedSolverNetsView | undefined;
+/**
+ * Mutable `JoinedSolverNetsView` for the running daemon. Unlike
+ * `joinedSolverNetsViewFromConfig` (boot snapshot), the applier
+ * (`daemon/join-applier.ts`, #1037) keeps a handle and calls `set()` when a
+ * join is hot-applied, so the engine's per-task eligibility check sees the new
+ * cid on its next call without a restart.
+ */
+export declare function createMutableJoinedSolverNetsView(initial: Record<string, {
+    manifestCid: string;
+    roles: Array<'solver' | 'evaluator'>;
+}> | undefined): JoinedSolverNetsView;
 /**
  * Resolves a launched SolverNet manifest by IPFS CID.
  *
@@ -140,6 +168,12 @@ export interface TaskEngineOptions {
      */
     implRegistry?: ImplRegistry;
     solverNetRegistry?: SolverNetRegistryLike;
+    /**
+     * Seller-side scrub pipeline applied to trajectory spans at emit time. When
+     * absent, the engine builds the default (openredaction + secretlint); supply
+     * one to add the ML PII detector.
+     */
+    scrubPipeline?: ScrubPipeline;
     /**
      * Per-launch operator eligibility filter (Task 28 of
      * `spec/2026-05-05-solvernet-creation-and-launch.md`).
@@ -158,6 +192,11 @@ export interface TaskEngineOptions {
      * SolverNet registry.
      */
     joinedSolverNets?: JoinedSolverNetsView;
+    /**
+     * Operator Safe address used for synthetic task claim filtering (§7).
+     * When set, `canAcceptTask` / `claim` reject mint-and-solve self-claims.
+     */
+    operatorSafeAddress?: `0x${string}`;
     /**
      * Resolves a launched SolverNet manifest by `solverNetManifestCid`.
      * Required for production wiring; tests that don't exercise schema
@@ -263,7 +302,46 @@ export interface TaskEngineOptions {
          */
         disabled?: boolean;
     };
+    /**
+     * Corpus knowledge autoload (#1393). Before each restoration harness
+     * spawn, the engine queries the corpus for prior solution records of the
+     * task's solverType and injects the top few into
+     * task.context.corpusKnowledge. The injection exists only in the in-memory
+     * ctx.task handed to the harness — unlike context.restorationResult (which
+     * the adapter attaches at task construction and which persists in
+     * task_payload), it is never persisted into the signed Task and never
+     * re-hashed. The durable record of what was injected is the run's
+     * consumed_refs_json column.
+     *
+     * - `corpus`: read-only corpus for network results; when absent/null the
+     *   lookup is store-only (local envelope projections + served artifacts).
+     * - `enabled`: opt-out; defaults to true (config: engine.knowledgeAutoload).
+     *
+     * Failures never block the solve path: the lookup is time-bounded and
+     * error-swallowing (loadCorpusKnowledge never throws).
+     */
+    knowledge?: {
+        corpus?: ReadOnlyCorpus | null;
+        enabled?: boolean;
+    };
+    /**
+     * Resolves the on-chain block timestamp for a task's creation block
+     * (#1827). Production wires this for every new task. It remains optional so
+     * historical/test callers can parse and exercise pre-field rows without
+     * fabricating a value.
+     *
+     * Returns `undefined` on a resolvable-but-unknown block. Undefined values
+     * and thrown transport errors are retried; a new envelope is never signed
+     * without the authoritative timestamp.
+     */
+    blockTimestamp?: {
+        getBlockTimestamp(blockNumber: number): Promise<number | undefined>;
+        /** Configured URLs let the redactor also strip detached API-key material. */
+        configuredRpcUrls?: readonly string[];
+    };
 }
+/** Min interval between transient-RPC tick_error emits per requestId (#934). */
+export declare const TRANSIENT_TICK_ERROR_HEARTBEAT_MS: number;
 /** Per-task outcome from a recovery pass. */
 export interface RecoveryReport {
     requestId: string;
@@ -287,8 +365,11 @@ export declare class TaskEngine {
     protected readonly deliveryDeps: TaskEngineOptions['deliveryDeps'];
     protected readonly implRegistry: TaskEngineOptions['implRegistry'];
     protected readonly solverNetRegistry: TaskEngineOptions['solverNetRegistry'];
+    protected readonly scrubPipeline: ScrubPipeline;
     protected readonly joinedSolverNets: TaskEngineOptions['joinedSolverNets'];
+    protected readonly operatorSafeAddress: TaskEngineOptions['operatorSafeAddress'];
     protected readonly manifestResolver: TaskEngineOptions['manifestResolver'];
+    protected readonly blockTimestamp: TaskEngineOptions['blockTimestamp'];
     protected readonly identityPublisher: TaskEngineOptions['identityPublisher'];
     protected readonly reputationFeedback: TaskEngineOptions['reputationFeedback'];
     protected readonly operatorConfig: TaskEngineOptions['operatorConfig'];
@@ -307,6 +388,9 @@ export declare class TaskEngine {
     protected readonly trajectoryCollectors: Map<string, TrajectoryCollector>;
     private readonly trajectoryRefs;
     private readonly runtimePluginsByRequest;
+    private readonly consumedRefsByRequest;
+    /** requestId → epoch ms of last transient tick_error emit (#934) */
+    private readonly lastTransientTickErrorAt;
     private readonly processingRequestIds;
     /** Set by stop(); causes runTickLoop to exit at the next iteration. */
     private stopped;
@@ -317,6 +401,8 @@ export declare class TaskEngine {
         orphanMaxAgeMs: number;
         disabled: boolean;
     };
+    /** Corpus knowledge autoload options (#1393). */
+    protected readonly knowledge: TaskEngineOptions['knowledge'];
     constructor(opts: TaskEngineOptions);
     /**
      * Called when an task is observed from an on-chain event.
@@ -362,7 +448,8 @@ export declare class TaskEngine {
     }>;
     /**
      * Recover all in-flight tasks from persisted state.
-     * Called at daemon startup before beginning normal event processing.
+     * Started at daemon startup; runs concurrently with the daemon loops
+     * (#1422 — startup must not block on a recovered impl re-execution).
      * Returns a per-task report for each task attempted.
      */
     recoverInFlight(): Promise<RecoveryReport[]>;
@@ -411,6 +498,7 @@ export declare class TaskEngine {
      * the operator has an enabled, ready Harness and advances DISCOVERED → CLAIMED.
      */
     protected claim(task: PersistedTaskRun): Promise<void>;
+    private resolveTaskCreationTimestamp;
     releaseClaimedNotStarted(): Promise<string[]>;
     /**
      * Internal routing key alias for the daemon-internal `solverType`-keyed
@@ -580,11 +668,13 @@ export declare class TaskEngine {
      *   in the L2 fallback chain failed at once) on a task whose delivery window
      *   is still open: leave the row in its current in-flight state so the next
      *   tick re-drives it once the RPCs recover, and emit a `tick_error` (warn)
-     *   event instead of inflating the FAILED counter. Without this the daemon
-     *   stamped the row FAILED, dropping it from `getInFlight()` permanently, so
-     *   L2 work went silent until a manual restart (#912). Past-window transient
-     *   errors still terminalize to avoid churning on work that can no longer
-     *   settle.
+     *   on first occurrence plus every `TRANSIENT_TICK_ERROR_HEARTBEAT_MS`
+     *   thereafter for that requestId (#934) — not once per failing tick —
+     *   instead of inflating the FAILED counter. Without the leave-in-flight
+     *   path the daemon stamped the row FAILED, dropping it from
+     *   `getInFlight()` permanently, so L2 work went silent until a manual
+     *   restart (#912). Past-window transient errors still terminalize to avoid
+     *   churning on work that can no longer settle.
      * - Everything else: existing markFailed behaviour. When invoked from
      *   recovery, `contextLabel === 'recovery'` so the failure_reason
      *   carries the `recovery:` prefix the original code path used.