@knpkv/herdr-work 0.3.0 → 0.5.0

package/README.md

@@ -4,7 +4,101 @@ Durable fleet work checkpoints and the Rly departure-board projection used by th
 
 Each `WorkGoalCheckpoint` stores a complete, Schema-decoded goal state at its exact durable timestamp. `projectWorkSnapshots` selects the latest recorded checkpoint at now, 24 hours, 7 days, and 30 days. A goal does not appear before its creation checkpoint, and missing history is never synthesized.
 
-`WorkStore` persists events in SQLite. Recording the exact same checkpoint again is an idempotent replay; reusing an event ID or goal timestamp with changed content returns `WorkCheckpointConflictError`. `makeWorkService` is the small runtime interface for recording checkpoints and reading all four snapshots.
+`WorkGoal.goalFamily` records a goal as either the canonical member of a family or a superseded member pointing to that canonical goal. Superseded goals leave the active projection only after their durable relation checkpoint. Earlier snapshots still show their previous state, blockers, reviews, and activity. A relation cannot be removed or retargeted, and a superseded goal cannot precede its canonical member.
+
+`WorkStore` persists events in SQLite. Recording the exact same checkpoint again is an idempotent replay; reusing an event ID or goal timestamp with changed content returns `WorkCheckpointConflictError`. `makeWorkService` is the small runtime interface for recording checkpoints, reading the current durable lane claim, and reading all four snapshots. A default snapshot atomically reads history with the coordinator-owned agent-binding boundary and observes the later of that logical time and the current clock, so same-tick coordinator checkpoints remain visible without letting an ordinary future checkpoint shift every window; an explicit observation timestamp preserves historical reads. An unknown lane returns `Option.none()`; a stored claim is Schema-decoded and its revision is checked against the durable row.
+
+The store preserves safe caller-owned state-directory modes, but rejects
+group- or world-writable POSIX directories and substituted database paths before
+opening the authority database.
+
+`WorkStore.appendMany` validates a whole checkpoint batch before one SQLite
+transaction. Reusing its transaction ID with the same batch replays it. A
+changed event with an existing event ID or goal/timestamp returns
+`WorkCheckpointConflictError`; a different batch that passes those checkpoint
+identity checks returns `WorkTransactionConflictError`. `claim` is a durable
+compare-and-set lane claim containing the canonical worktree, branch, exact
+head, owner, parent, phase, authoritative goal ID, operation ID, and expected
+revision. The operation ID replays only its exact committed claim; changed
+content conflicts. Its replay ledger is bounded to 16,384 operations and 2 MiB
+of encoded records while retaining accepted operation identities. A partial
+unique index transactionally permits only one non-shipped lane per goal.
+`activeGoalClaim` reads that authority directly.
+
+`bindAgent` is the replay-safe worker-start operation. Its typed request is
+keyed by dispatch request ID and carries the exact lane plus expected revision.
+One SQLite transaction compare-and-sets that lane, stores the full
+`AgentWorkerIdentity`, derives the canonical `AgentConnectTarget`, and appends
+the matching goal checkpoint. Exact replay returns the original binding after
+restart; changed worker content returns `WorkAgentBindingConflictError`.
+Missing, stale, shipped, or terminal goal authority fails without a partial
+lane, checkpoint, or binding write.
+
+`handoff` stores a compact, credential-free decision record keyed by coordinator
+session ID for later recovery under a 16,384-row and 2 MiB encoded-byte ledger.
+It includes the active goal and lane, dispatch IDs, blocker details, evidence
+references, and a nonempty credential-free context delta bounded to 4,096
+characters. A new v2 handoff captures the active lane's exact expected revision
+and rejects a stale revision with `WorkDecisionRevisionConflictError`; exact
+replay remains available after that lane advances.
+Both the previous pre-session table and v1 records already stored in the current
+table migrate explicitly: their bounded summary becomes the v2 context delta.
+Migration requires exactly one persisted dispatch binding and keeps that
+binding's expected revision; an unbound v1 handoff cannot borrow the current
+lane revision, and the persisted lane head cannot trail the binding's activated
+revision. The complete `WorkAgentBinding` record must decode and match its
+indexed dispatch, lane, revision, worker, and host, plus its exact immutable
+lane-operation and checkpoint ledger companions, before migration uses that
+authority. A dispatch lineage may remain a strict subset of the decision's
+complete dispatch IDs, while the dispatch and coordinator-metadata lineage
+replicas must agree exactly. Missing lanes, bindings, dispatch replicas, or
+coordinator metadata, malformed records that claim the v1 contract, and contradictory replicas, fail startup with a named
+`WorkStoreError`; no context or revision authority is invented.
+Coordinator-backed migration and current v2 readback additionally require a complete bounded lifecycle,
+the exact running checkpoint, status/tail agreement, a matching handoff goal, and
+a schema-valid Sol route whose metadata agrees with the persisted routed
+discriminator. A Sol route also requires a persisted `agent.delegate` command in
+`review` or `work` mode; the command, route, and Work link are one authority
+binding. A non-null Sol link must remain in lineage and identify an exact
+terminally failed Luna parent with its own complete lifecycle. Duplicate
+pre-session dispatch replicas fail closed. Current v2 readback also decodes the
+authoritative lane claim, requires its goal to remain fixed, requires an exact
+immutable operation-ledger replica, and rejects a lane head older than the
+activated binding; at the binding revision the whole claim must still be exact.
+Luna metadata must retain a null Work link and does not consume the bounded
+Work-decision scan; malformed or non-null Luna links fail closed. Every modern
+dispatch/metadata pair must bind its persisted activity key and command to the
+exact route, routed discriminator, and Work-link form; routed metadata without
+its dispatch fails closed, and every modern routed dispatch must retain exactly one metadata row. Standalone Work
+databases with no coordinator tables remain valid; a partial coordinator table set fails before
+either v1 migration or v2 handoff readback. The SQL adapter creates or upgrades
+Work tables in that same fail-closed transaction and ignores unrelated legacy
+binding or null-route orphan metadata rows. Current v2 dispatch and metadata
+replicas must decode and agree exactly with the authoritative decision handoff;
+dispatch lineage may remain a strict subset of the decision's dispatch set.
+Changed content for the same session
+conflicts, and `coordinatorHandoff` proves restart readback without retaining an
+unbounded transcript. Replay aliases retain fixed-size canonical SHA-256
+identities under a bounded ledger, and lane claims validate Git branch refs
+before persisting their authority.
+
+`makeSqliteWorkBridge`, exported from the headless `@knpkv/herdr-work/sql`
+subpath, provides the SQLite-specific dispatch binding used by a coordinator's
+transaction. It inserts the decoded Work handoff and its
+bounded dispatch lineage together, and verifies exact replay without repairing
+an incomplete dispatch, including the referenced decision row. Every lineage
+request must appear in the handoff's dispatch IDs. New bindings require the
+handoff's active, non-shipped lane, authoritative goal, and accepted expected revision; exact
+binding replay remains available after the lane advances. The coordinator must call it inside the same
+transaction as acceptance; `WorkStore.decisions` then recovers the handoff from
+the same database. The server-private durable `AgentWorkerIdentity` record stays
+behind the Work service boundary. Its derived, normalized client-visible
+`AgentConnectTarget` excludes provider credentials and private locators and may
+cross only the authenticated Work UI boundary; neither form may be emitted on
+unauthenticated or public surfaces.
+The same bridge exposes the transaction-owned agent-binding primitive used by
+the coordinator's durable `workerStarted` boundary; callers cannot repair a
+previously partial activation during replay.
 
 `WorkBoard` renders these persisted outbound-link forms:
 
@@ -13,3 +107,7 @@ Each `WorkGoalCheckpoint` stores a complete, Schema-decoded goal state at its ex
 - `WorkReview.url` — review destination.
 
 Every URL uses the credential-free HTTP(S) `LinkUrl` boundary. Provider credentials and private locators never enter these persisted or browser-visible links.
+
+`WorkBoard` accepts `externalLinks="enabled"` by default. With `externalLinks="disabled"`, it keeps recorded approval, review, and Connect targets visible as metadata without rendering outbound links for read-only LAN Work.
+
+The board shows ten goals initially, filters them by durable status, and reveals ten more per request. A selected or deep-linked goal stays in the active bounded page. Goal details and shipment evidence open on selection and return focus to the selected row when closed. When `navigation` is present, filters, reveal, and close use same-origin links so server-rendered Work remains operable without JavaScript. `WorkNavigationSelection.goalId` may carry an opaque board-state token longer than a persisted `WorkGoalId`; transport callers must decode the selection before validating a goal identity. On narrow screens, rows keep status, title, and summary visible while the detail view owns the remaining metadata.

package/dist/agent-binding.d.ts

@@ -0,0 +1,4 @@
+import { WorkAgentBinding, type WorkAgentBindingRequest, type WorkGoalCheckpoint, type WorkLaneClaimed } from "./model.js";
+/** Builds the single checkpoint and lane revision committed when a worker starts. */
+export declare const makeWorkAgentBinding: (request: WorkAgentBindingRequest, currentLane: WorkLaneClaimed, currentCheckpoint: WorkGoalCheckpoint, occurredAt: number) => WorkAgentBinding;
+//# sourceMappingURL=agent-binding.d.ts.map

package/dist/agent-binding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-binding.d.ts","sourceRoot":"","sources":["../src/agent-binding.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,gBAAgB,EAChB,KAAK,uBAAuB,EAC5B,KAAK,kBAAkB,EACvB,KAAK,eAAe,EACrB,MAAM,YAAY,CAAA;AAEnB,qFAAqF;AACrF,eAAO,MAAM,oBAAoB,YACtB,uBAAuB,eACnB,eAAe,qBACT,kBAAkB,cACzB,MAAM,KACjB,gBAqBC,CAAA"}

package/dist/agent-binding.js

@@ -0,0 +1,26 @@
+import { agentConnectTarget } from "@knpkv/herdr-fleet/model";
+import { Schema } from "effect";
+import { WorkAgentBinding } from "./model.js";
+/** Builds the single checkpoint and lane revision committed when a worker starts. */
+export const makeWorkAgentBinding = (request, currentLane, currentCheckpoint, occurredAt) => Schema.decodeUnknownSync(WorkAgentBinding)({
+    version: "herdr.work.agent-binding.v1",
+    request,
+    lane: {
+        ...currentLane,
+        operationId: request.dispatchRequestId,
+        expectedRevision: request.expectedRevision,
+        revision: request.expectedRevision + 1
+    },
+    checkpoint: {
+        eventId: request.dispatchRequestId,
+        goal: {
+            ...currentCheckpoint.goal,
+            agentHierarchy: { agent: request.worker },
+            connectTarget: agentConnectTarget(request.worker),
+            updatedAt: occurredAt
+        },
+        occurredAt,
+        version: "herdr.work.event.v1"
+    }
+});
+//# sourceMappingURL=agent-binding.js.map

package/dist/agent-binding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-binding.js","sourceRoot":"","sources":["../src/agent-binding.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAA;AAC7D,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAC/B,OAAO,EACL,gBAAgB,EAIjB,MAAM,YAAY,CAAA;AAEnB,qFAAqF;AACrF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAClC,OAAgC,EAChC,WAA4B,EAC5B,iBAAqC,EACrC,UAAkB,EACA,EAAE,CACpB,MAAM,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,CAAC;IACzC,OAAO,EAAE,6BAA6B;IACtC,OAAO;IACP,IAAI,EAAE;QACJ,GAAG,WAAW;QACd,WAAW,EAAE,OAAO,CAAC,iBAAiB;QACtC,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;QAC1C,QAAQ,EAAE,OAAO,CAAC,gBAAgB,GAAG,CAAC;KACvC;IACD,UAAU,EAAE;QACV,OAAO,EAAE,OAAO,CAAC,iBAAiB;QAClC,IAAI,EAAE;YACJ,GAAG,iBAAiB,CAAC,IAAI;YACzB,cAAc,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE;YACzC,aAAa,EAAE,kBAAkB,CAAC,OAAO,CAAC,MAAM,CAAC;YACjD,SAAS,EAAE,UAAU;SACtB;QACD,UAAU;QACV,OAAO,EAAE,qBAAqB;KAC/B;CACF,CAAC,CAAA"}

package/dist/errors.d.ts

@@ -1,4 +1,10 @@
 import { Schema } from "effect";
+declare const WorkRecoveryContextError_base: Schema.Class<WorkRecoveryContextError, Schema.TaggedStruct<"WorkRecoveryContextError", {
+    readonly goalId: Schema.String;
+    readonly reason: Schema.Literals<readonly ["invalid_goal_id", "missing_goal"]>;
+}>, import("effect/Cause").YieldableError>;
+export declare class WorkRecoveryContextError extends WorkRecoveryContextError_base {
+}
 declare const WorkProjectionError_base: Schema.Class<WorkProjectionError, Schema.TaggedStruct<"WorkProjectionError", {
     readonly cause: Schema.Defect;
     readonly detail: Schema.String;
@@ -19,5 +25,140 @@ declare const WorkCheckpointConflictError_base: Schema.Class<WorkCheckpointConfl
 }>, import("effect/Cause").YieldableError>;
 export declare class WorkCheckpointConflictError extends WorkCheckpointConflictError_base {
 }
+declare const WorkTransactionConflictError_base: Schema.Class<WorkTransactionConflictError, Schema.TaggedStruct<"WorkTransactionConflictError", {
+    readonly transactionId: Schema.String;
+}>, import("effect/Cause").YieldableError>;
+export declare class WorkTransactionConflictError extends WorkTransactionConflictError_base {
+}
+declare const WorkLaneClaimConflictError_base: Schema.Class<WorkLaneClaimConflictError, Schema.TaggedStruct<"WorkLaneClaimConflictError", {
+    readonly laneId: Schema.String;
+    readonly expectedRevision: Schema.Number;
+    readonly actualRevision: Schema.Number;
+}>, import("effect/Cause").YieldableError>;
+export declare class WorkLaneClaimConflictError extends WorkLaneClaimConflictError_base {
+}
+declare const WorkLaneOperationConflictError_base: Schema.Class<WorkLaneOperationConflictError, Schema.TaggedStruct<"WorkLaneOperationConflictError", {
+    readonly operationId: Schema.String;
+}>, import("effect/Cause").YieldableError>;
+export declare class WorkLaneOperationConflictError extends WorkLaneOperationConflictError_base {
+}
+declare const WorkLaneGoalConflictError_base: Schema.Class<WorkLaneGoalConflictError, Schema.TaggedStruct<"WorkLaneGoalConflictError", {
+    readonly goalId: Schema.String;
+    readonly laneId: Schema.String;
+    readonly activeLaneId: Schema.String;
+}>, import("effect/Cause").YieldableError>;
+export declare class WorkLaneGoalConflictError extends WorkLaneGoalConflictError_base {
+}
+declare const WorkDecisionHandoffConflictError_base: Schema.Class<WorkDecisionHandoffConflictError, Schema.TaggedStruct<"WorkDecisionHandoffConflictError", {
+    readonly handoffId: Schema.String;
+}>, import("effect/Cause").YieldableError>;
+export declare class WorkDecisionHandoffConflictError extends WorkDecisionHandoffConflictError_base {
+}
+declare const WorkDecisionAuthorityConflictError_base: Schema.Class<WorkDecisionAuthorityConflictError, Schema.TaggedStruct<"WorkDecisionAuthorityConflictError", {
+    readonly goalId: Schema.String;
+    readonly laneId: Schema.String;
+}>, import("effect/Cause").YieldableError>;
+export declare class WorkDecisionAuthorityConflictError extends WorkDecisionAuthorityConflictError_base {
+}
+declare const WorkDecisionRevisionConflictError_base: Schema.Class<WorkDecisionRevisionConflictError, Schema.TaggedStruct<"WorkDecisionRevisionConflictError", {
+    readonly laneId: Schema.String;
+    readonly expectedRevision: Schema.Number;
+    readonly actualRevision: Schema.Number;
+}>, import("effect/Cause").YieldableError>;
+export declare class WorkDecisionRevisionConflictError extends WorkDecisionRevisionConflictError_base {
+}
+declare const WorkCoordinatorHandoffConflictError_base: Schema.Class<WorkCoordinatorHandoffConflictError, Schema.TaggedStruct<"WorkCoordinatorHandoffConflictError", {
+    readonly sessionId: Schema.String;
+}>, import("effect/Cause").YieldableError>;
+export declare class WorkCoordinatorHandoffConflictError extends WorkCoordinatorHandoffConflictError_base {
+}
+declare const WorkDispatchHandoffConflictError_base: Schema.Class<WorkDispatchHandoffConflictError, Schema.TaggedStruct<"WorkDispatchHandoffConflictError", {
+    readonly dispatchRequestId: Schema.String;
+    readonly handoffId: Schema.String;
+}>, import("effect/Cause").YieldableError>;
+export declare class WorkDispatchHandoffConflictError extends WorkDispatchHandoffConflictError_base {
+}
+declare const WorkAgentBindingConflictError_base: Schema.Class<WorkAgentBindingConflictError, Schema.TaggedStruct<"WorkAgentBindingConflictError", {
+    readonly dispatchRequestId: Schema.String;
+}>, import("effect/Cause").YieldableError>;
+export declare class WorkAgentBindingConflictError extends WorkAgentBindingConflictError_base {
+}
+declare const WorkAgentBindingAuthorityError_base: Schema.Class<WorkAgentBindingAuthorityError, Schema.TaggedStruct<"WorkAgentBindingAuthorityError", {
+    readonly laneId: Schema.String;
+    readonly expectedRevision: Schema.Number;
+    readonly actualRevision: Schema.Number;
+    readonly reason: Schema.Literals<readonly ["missing_lane", "stale_revision", "shipped_lane", "missing_goal", "terminal_goal"]>;
+}>, import("effect/Cause").YieldableError>;
+export declare class WorkAgentBindingAuthorityError extends WorkAgentBindingAuthorityError_base {
+}
+declare const WorkPullRequestLinkError_base: Schema.Class<WorkPullRequestLinkError, Schema.TaggedStruct<"WorkPullRequestLinkError", {
+    readonly goalId: Schema.String;
+    readonly laneId: Schema.String;
+    readonly reason: Schema.Literals<readonly ["missing_provenance", "missing_goal", "missing_lane", "missing_binding", "stale_revision", "head_mismatch", "owner_mismatch", "session_mismatch", "identity_mismatch", "terminal_goal", "operation_conflict", "ambiguous_binding"]>;
+}>, import("effect/Cause").YieldableError>;
+export declare class WorkPullRequestLinkError extends WorkPullRequestLinkError_base {
+}
+declare const WorkAdmissionConflictError_base: Schema.Class<WorkAdmissionConflictError, Schema.TaggedStruct<"WorkAdmissionConflictError", {
+    readonly goalId: Schema.String;
+    readonly laneId: Schema.String;
+    readonly reason: Schema.String;
+}>, import("effect/Cause").YieldableError>;
+export declare class WorkAdmissionConflictError extends WorkAdmissionConflictError_base {
+}
+declare const WorkGoalOwnerMismatchError_base: Schema.Class<WorkGoalOwnerMismatchError, Schema.TaggedStruct<"WorkGoalOwnerMismatchError", {
+    readonly goalId: Schema.String;
+    readonly laneId: Schema.NullOr<Schema.String>;
+    readonly expectedOwner: Schema.Struct<{
+        readonly id: Schema.String;
+        readonly name: Schema.String;
+    }>;
+    readonly actualOwner: Schema.Struct<{
+        readonly id: Schema.String;
+        readonly name: Schema.String;
+    }>;
+}>, import("effect/Cause").YieldableError>;
+/** The goal, or its active lane when `laneId` is set, is not owned by the approved source owner. */
+export declare class WorkGoalOwnerMismatchError extends WorkGoalOwnerMismatchError_base {
+}
+declare const WorkGoalRevisionConflictError_base: Schema.Class<WorkGoalRevisionConflictError, Schema.TaggedStruct<"WorkGoalRevisionConflictError", {
+    readonly goalId: Schema.String;
+    readonly expectedEventId: Schema.String;
+    readonly expectedUpdatedAt: Schema.Number;
+    readonly actualEventId: Schema.NullOr<Schema.String>;
+    readonly actualUpdatedAt: Schema.NullOr<Schema.Number>;
+}>, import("effect/Cause").YieldableError>;
+/** The goal's durable head is not the approved expected event; `actual*` is null when the goal is absent. */
+export declare class WorkGoalRevisionConflictError extends WorkGoalRevisionConflictError_base {
+}
+declare const WorkGoalReassignmentConflictError_base: Schema.Class<WorkGoalReassignmentConflictError, Schema.TaggedStruct<"WorkGoalReassignmentConflictError", {
+    readonly approvalJobId: Schema.String;
+    readonly reason: Schema.Literals<readonly ["payload_mismatch", "identifier_in_use"]>;
+}>, import("effect/Cause").YieldableError>;
+/** The approval job id already names a different reassignment or another durable record. */
+export declare class WorkGoalReassignmentConflictError extends WorkGoalReassignmentConflictError_base {
+}
+declare const WorkGoalBindingRequiresAgentError_base: Schema.Class<WorkGoalBindingRequiresAgentError, Schema.TaggedStruct<"WorkGoalBindingRequiresAgentError", {
+    readonly goalId: Schema.String;
+    readonly laneId: Schema.String;
+    readonly dispatchRequestId: Schema.String;
+}>, import("effect/Cause").YieldableError>;
+/** The goal's active lane has a started-worker binding, so a reassignment must name the agent that takes it over. */
+export declare class WorkGoalBindingRequiresAgentError extends WorkGoalBindingRequiresAgentError_base {
+}
+declare const WorkGoalAgentTargetConflictError_base: Schema.Class<WorkGoalAgentTargetConflictError, Schema.TaggedStruct<"WorkGoalAgentTargetConflictError", {
+    readonly goalId: Schema.String;
+    readonly agentId: Schema.String;
+    readonly reason: Schema.Literals<readonly ["keep_existing_target", "held_by_other_goal", "held_by_other_lane"]>;
+    readonly holderId: Schema.String;
+}>, import("effect/Cause").YieldableError>;
+/**
+ * The requested agent target cannot be written. `keep_existing_target`: keeping
+ * would leave the previous owner's agent on the goal (`holderId` is that goal).
+ * `held_by_other_goal` / `held_by_other_lane`: the new agent is already the
+ * current target of another goal, or the authoritative binding of another
+ * goal's lane (`holderId` is that goal or lane).
+ */
+export declare class WorkGoalAgentTargetConflictError extends WorkGoalAgentTargetConflictError_base {
+}
 export {};
 //# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;;;;;;AAE/B,qBAAa,mBAAoB,SAAQ,wBAaxC;CAAG;;;;;AAEJ,qBAAa,cAAe,SAAQ,mBAGnC;CAAG;;;;;;AAEJ,qBAAa,2BAA4B,SAAQ,gCAOhD;CAAG"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;;;;;AAE/B,qBAAa,wBAAyB,SAAQ,6BAM7C;CAAG;;;;;;AAEJ,qBAAa,mBAAoB,SAAQ,wBAaxC;CAAG;;;;;AAEJ,qBAAa,cAAe,SAAQ,mBAGnC;CAAG;;;;;;AAEJ,qBAAa,2BAA4B,SAAQ,gCAOhD;CAAG;;;;AAEJ,qBAAa,4BAA6B,SAAQ,iCAGjD;CAAG;;;;;;AAEJ,qBAAa,0BAA2B,SAAQ,+BAO/C;CAAG;;;;AAEJ,qBAAa,8BAA+B,SAAQ,mCAGnD;CAAG;;;;;;AAEJ,qBAAa,yBAA0B,SAAQ,8BAG9C;CAAG;;;;AAEJ,qBAAa,gCAAiC,SAAQ,qCAGrD;CAAG;;;;;AAEJ,qBAAa,kCAAmC,SAAQ,uCAGvD;CAAG;;;;;;AAEJ,qBAAa,iCAAkC,SAAQ,sCAGtD;CAAG;;;;AAEJ,qBAAa,mCAAoC,SAAQ,wCAGxD;CAAG;;;;;AAEJ,qBAAa,gCAAiC,SAAQ,qCAGrD;CAAG;;;;AAEJ,qBAAa,6BAA8B,SAAQ,kCAGlD;CAAG;;;;;;;AAEJ,qBAAa,8BAA+B,SAAQ,mCAQnD;CAAG;;;;;;AAEJ,qBAAa,wBAAyB,SAAQ,6BAoB7C;CAAG;;;;;;AAEJ,qBAAa,0BAA2B,SAAQ,+BAG/C;CAAG;;;;;;;;;;;;;AAEJ,oGAAoG;AACpG,qBAAa,0BAA2B,SAAQ,+BAQ/C;CAAG;;;;;;;;AAEJ,6GAA6G;AAC7G,qBAAa,6BAA8B,SAAQ,kCASlD;CAAG;;;;;AAEJ,4FAA4F;AAC5F,qBAAa,iCAAkC,SAAQ,sCAMtD;CAAG;;;;;;AAEJ,qHAAqH;AACrH,qBAAa,iCAAkC,SAAQ,sCAGtD;CAAG;;;;;;;AAEJ;;;;;;GAMG;AACH,qBAAa,gCAAiC,SAAQ,qCAQrD;CAAG"}

package/dist/errors.js

@@ -1,4 +1,9 @@
 import { Schema } from "effect";
+export class WorkRecoveryContextError extends Schema.TaggedError()("WorkRecoveryContextError", {
+    goalId: Schema.String,
+    reason: Schema.Literals(["invalid_goal_id", "missing_goal"])
+}) {
+}
 export class WorkProjectionError extends Schema.TaggedError()("WorkProjectionError", {
     cause: Schema.Defect(),
     detail: Schema.String,
@@ -19,4 +24,96 @@ export class WorkCheckpointConflictError extends Schema.TaggedError()("WorkCheck
     occurredAt: Schema.Number
 }) {
 }
+export class WorkTransactionConflictError extends Schema.TaggedError()("WorkTransactionConflictError", { transactionId: Schema.String }) {
+}
+export class WorkLaneClaimConflictError extends Schema.TaggedError()("WorkLaneClaimConflictError", {
+    laneId: Schema.String,
+    expectedRevision: Schema.Number,
+    actualRevision: Schema.Number
+}) {
+}
+export class WorkLaneOperationConflictError extends Schema.TaggedError()("WorkLaneOperationConflictError", { operationId: Schema.String }) {
+}
+export class WorkLaneGoalConflictError extends Schema.TaggedError()("WorkLaneGoalConflictError", { goalId: Schema.String, laneId: Schema.String, activeLaneId: Schema.String }) {
+}
+export class WorkDecisionHandoffConflictError extends Schema.TaggedError()("WorkDecisionHandoffConflictError", { handoffId: Schema.String }) {
+}
+export class WorkDecisionAuthorityConflictError extends Schema.TaggedError()("WorkDecisionAuthorityConflictError", { goalId: Schema.String, laneId: Schema.String }) {
+}
+export class WorkDecisionRevisionConflictError extends Schema.TaggedError()("WorkDecisionRevisionConflictError", { laneId: Schema.String, expectedRevision: Schema.Number, actualRevision: Schema.Number }) {
+}
+export class WorkCoordinatorHandoffConflictError extends Schema.TaggedError()("WorkCoordinatorHandoffConflictError", { sessionId: Schema.String }) {
+}
+export class WorkDispatchHandoffConflictError extends Schema.TaggedError()("WorkDispatchHandoffConflictError", { dispatchRequestId: Schema.String, handoffId: Schema.String }) {
+}
+export class WorkAgentBindingConflictError extends Schema.TaggedError()("WorkAgentBindingConflictError", { dispatchRequestId: Schema.String }) {
+}
+export class WorkAgentBindingAuthorityError extends Schema.TaggedError()("WorkAgentBindingAuthorityError", {
+    laneId: Schema.String,
+    expectedRevision: Schema.Number,
+    actualRevision: Schema.Number,
+    reason: Schema.Literals(["missing_lane", "stale_revision", "shipped_lane", "missing_goal", "terminal_goal"])
+}) {
+}
+export class WorkPullRequestLinkError extends Schema.TaggedError()("WorkPullRequestLinkError", {
+    goalId: Schema.String,
+    laneId: Schema.String,
+    reason: Schema.Literals([
+        "missing_provenance",
+        "missing_goal",
+        "missing_lane",
+        "missing_binding",
+        "stale_revision",
+        "head_mismatch",
+        "owner_mismatch",
+        "session_mismatch",
+        "identity_mismatch",
+        "terminal_goal",
+        "operation_conflict",
+        "ambiguous_binding"
+    ])
+}) {
+}
+export class WorkAdmissionConflictError extends Schema.TaggedError()("WorkAdmissionConflictError", { goalId: Schema.String, laneId: Schema.String, reason: Schema.String }) {
+}
+/** The goal, or its active lane when `laneId` is set, is not owned by the approved source owner. */
+export class WorkGoalOwnerMismatchError extends Schema.TaggedError()("WorkGoalOwnerMismatchError", {
+    goalId: Schema.String,
+    laneId: Schema.NullOr(Schema.String),
+    expectedOwner: Schema.Struct({ id: Schema.String, name: Schema.String }),
+    actualOwner: Schema.Struct({ id: Schema.String, name: Schema.String })
+}) {
+}
+/** The goal's durable head is not the approved expected event; `actual*` is null when the goal is absent. */
+export class WorkGoalRevisionConflictError extends Schema.TaggedError()("WorkGoalRevisionConflictError", {
+    goalId: Schema.String,
+    expectedEventId: Schema.String,
+    expectedUpdatedAt: Schema.Number,
+    actualEventId: Schema.NullOr(Schema.String),
+    actualUpdatedAt: Schema.NullOr(Schema.Number)
+}) {
+}
+/** The approval job id already names a different reassignment or another durable record. */
+export class WorkGoalReassignmentConflictError extends Schema.TaggedError()("WorkGoalReassignmentConflictError", {
+    approvalJobId: Schema.String,
+    reason: Schema.Literals(["payload_mismatch", "identifier_in_use"])
+}) {
+}
+/** The goal's active lane has a started-worker binding, so a reassignment must name the agent that takes it over. */
+export class WorkGoalBindingRequiresAgentError extends Schema.TaggedError()("WorkGoalBindingRequiresAgentError", { goalId: Schema.String, laneId: Schema.String, dispatchRequestId: Schema.String }) {
+}
+/**
+ * The requested agent target cannot be written. `keep_existing_target`: keeping
+ * would leave the previous owner's agent on the goal (`holderId` is that goal).
+ * `held_by_other_goal` / `held_by_other_lane`: the new agent is already the
+ * current target of another goal, or the authoritative binding of another
+ * goal's lane (`holderId` is that goal or lane).
+ */
+export class WorkGoalAgentTargetConflictError extends Schema.TaggedError()("WorkGoalAgentTargetConflictError", {
+    goalId: Schema.String,
+    agentId: Schema.String,
+    reason: Schema.Literals(["keep_existing_target", "held_by_other_goal", "held_by_other_lane"]),
+    holderId: Schema.String
+}) {
+}
 //# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAE/B,MAAM,OAAO,mBAAoB,SAAQ,MAAM,CAAC,WAAW,EAAuB,CAChF,qBAAqB,EACrB;IACE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE;IACtB,MAAM,EAAE,MAAM,CAAC,MAAM;IACrB,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC;QACtB,WAAW;QACX,iBAAiB;QACjB,sBAAsB;QACtB,sBAAsB;QACtB,mBAAmB;KACpB,CAAC;CACH,CACF;CAAG;AAEJ,MAAM,OAAO,cAAe,SAAQ,MAAM,CAAC,WAAW,EAAkB,CACtE,gBAAgB,EAChB,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,CACrD;CAAG;AAEJ,MAAM,OAAO,2BAA4B,SAAQ,MAAM,CAAC,WAAW,EAA+B,CAChG,6BAA6B,EAC7B;IACE,OAAO,EAAE,MAAM,CAAC,MAAM;IACtB,MAAM,EAAE,MAAM,CAAC,MAAM;IACrB,UAAU,EAAE,MAAM,CAAC,MAAM;CAC1B,CACF;CAAG"}
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAE/B,MAAM,OAAO,wBAAyB,SAAQ,MAAM,CAAC,WAAW,EAA4B,CAC1F,0BAA0B,EAC1B;IACE,MAAM,EAAE,MAAM,CAAC,MAAM;IACrB,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,iBAAiB,EAAE,cAAc,CAAC,CAAC;CAC7D,CACF;CAAG;AAEJ,MAAM,OAAO,mBAAoB,SAAQ,MAAM,CAAC,WAAW,EAAuB,CAChF,qBAAqB,EACrB;IACE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE;IACtB,MAAM,EAAE,MAAM,CAAC,MAAM;IACrB,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC;QACtB,WAAW;QACX,iBAAiB;QACjB,sBAAsB;QACtB,sBAAsB;QACtB,mBAAmB;KACpB,CAAC;CACH,CACF;CAAG;AAEJ,MAAM,OAAO,cAAe,SAAQ,MAAM,CAAC,WAAW,EAAkB,CACtE,gBAAgB,EAChB,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,CACrD;CAAG;AAEJ,MAAM,OAAO,2BAA4B,SAAQ,MAAM,CAAC,WAAW,EAA+B,CAChG,6BAA6B,EAC7B;IACE,OAAO,EAAE,MAAM,CAAC,MAAM;IACtB,MAAM,EAAE,MAAM,CAAC,MAAM;IACrB,UAAU,EAAE,MAAM,CAAC,MAAM;CAC1B,CACF;CAAG;AAEJ,MAAM,OAAO,4BAA6B,SAAQ,MAAM,CAAC,WAAW,EAAgC,CAClG,8BAA8B,EAC9B,EAAE,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,CACjC;CAAG;AAEJ,MAAM,OAAO,0BAA2B,SAAQ,MAAM,CAAC,WAAW,EAA8B,CAC9F,4BAA4B,EAC5B;IACE,MAAM,EAAE,MAAM,CAAC,MAAM;IACrB,gBAAgB,EAAE,MAAM,CAAC,MAAM;IAC/B,cAAc,EAAE,MAAM,CAAC,MAAM;CAC9B,CACF;CAAG;AAEJ,MAAM,OAAO,8BAA+B,SAAQ,MAAM,CAAC,WAAW,EAAkC,CACtG,gCAAgC,EAChC,EAAE,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,CAC/B;CAAG;AAEJ,MAAM,OAAO,yBAA0B,SAAQ,MAAM,CAAC,WAAW,EAA6B,CAC5F,2BAA2B,EAC3B,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,CAC9E;CAAG;AAEJ,MAAM,OAAO,gCAAiC,SAAQ,MAAM,CAAC,WAAW,EAAoC,CAC1G,kCAAkC,EAClC,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,CAC7B;CAAG;AAEJ,MAAM,OAAO,kCAAmC,SAAQ,MAAM,CAAC,WAAW,EAAsC,CAC9G,oCAAoC,EACpC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CACjD;CAAG;AAEJ,MAAM,OAAO,iCAAkC,SAAQ,MAAM,CAAC,WAAW,EAAqC,CAC5G,mCAAmC,EACnC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,CAC1F;CAAG;AAEJ,MAAM,OAAO,mCAAoC,SAAQ,MAAM,CAAC,WAAW,EAAuC,CAChH,qCAAqC,EACrC,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,CAC7B;CAAG;AAEJ,MAAM,OAAO,gCAAiC,SAAQ,MAAM,CAAC,WAAW,EAAoC,CAC1G,kCAAkC,EAClC,EAAE,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,CAC/D;CAAG;AAEJ,MAAM,OAAO,6BAA8B,SAAQ,MAAM,CAAC,WAAW,EAAiC,CACpG,+BAA+B,EAC/B,EAAE,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,CACrC;CAAG;AAEJ,MAAM,OAAO,8BAA+B,SAAQ,MAAM,CAAC,WAAW,EAAkC,CACtG,gCAAgC,EAChC;IACE,MAAM,EAAE,MAAM,CAAC,MAAM;IACrB,gBAAgB,EAAE,MAAM,CAAC,MAAM;IAC/B,cAAc,EAAE,MAAM,CAAC,MAAM;IAC7B,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,cAAc,EAAE,gBAAgB,EAAE,cAAc,EAAE,cAAc,EAAE,eAAe,CAAC,CAAC;CAC7G,CACF;CAAG;AAEJ,MAAM,OAAO,wBAAyB,SAAQ,MAAM,CAAC,WAAW,EAA4B,CAC1F,0BAA0B,EAC1B;IACE,MAAM,EAAE,MAAM,CAAC,MAAM;IACrB,MAAM,EAAE,MAAM,CAAC,MAAM;IACrB,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC;QACtB,oBAAoB;QACpB,cAAc;QACd,cAAc;QACd,iBAAiB;QACjB,gBAAgB;QAChB,eAAe;QACf,gBAAgB;QAChB,kBAAkB;QAClB,mBAAmB;QACnB,eAAe;QACf,oBAAoB;QACpB,mBAAmB;KACpB,CAAC;CACH,CACF;CAAG;AAEJ,MAAM,OAAO,0BAA2B,SAAQ,MAAM,CAAC,WAAW,EAA8B,CAC9F,4BAA4B,EAC5B,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CACxE;CAAG;AAEJ,oGAAoG;AACpG,MAAM,OAAO,0BAA2B,SAAQ,MAAM,CAAC,WAAW,EAA8B,CAC9F,4BAA4B,EAC5B;IACE,MAAM,EAAE,MAAM,CAAC,MAAM;IACrB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;IACpC,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;IACxE,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;CACvE,CACF;CAAG;AAEJ,6GAA6G;AAC7G,MAAM,OAAO,6BAA8B,SAAQ,MAAM,CAAC,WAAW,EAAiC,CACpG,+BAA+B,EAC/B;IACE,MAAM,EAAE,MAAM,CAAC,MAAM;IACrB,eAAe,EAAE,MAAM,CAAC,MAAM;IAC9B,iBAAiB,EAAE,MAAM,CAAC,MAAM;IAChC,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;IAC3C,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;CAC9C,CACF;CAAG;AAEJ,4FAA4F;AAC5F,MAAM,OAAO,iCAAkC,SAAQ,MAAM,CAAC,WAAW,EAAqC,CAC5G,mCAAmC,EACnC;IACE,aAAa,EAAE,MAAM,CAAC,MAAM;IAC5B,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,kBAAkB,EAAE,mBAAmB,CAAC,CAAC;CACnE,CACF;CAAG;AAEJ,qHAAqH;AACrH,MAAM,OAAO,iCAAkC,SAAQ,MAAM,CAAC,WAAW,EAAqC,CAC5G,mCAAmC,EACnC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,CACnF;CAAG;AAEJ;;;;;;GAMG;AACH,MAAM,OAAO,gCAAiC,SAAQ,MAAM,CAAC,WAAW,EAAoC,CAC1G,kCAAkC,EAClC;IACE,MAAM,EAAE,MAAM,CAAC,MAAM;IACrB,OAAO,EAAE,MAAM,CAAC,MAAM;IACtB,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,sBAAsB,EAAE,oBAAoB,EAAE,oBAAoB,CAAC,CAAC;IAC7F,QAAQ,EAAE,MAAM,CAAC,MAAM;CACxB,CACF;CAAG"}

package/dist/goal-family.d.ts

@@ -0,0 +1,4 @@
+import { WorkProjectionError } from "./errors.js";
+import type { WorkGoalCheckpoint } from "./model.js";
+export declare const validateGoalFamilyHistory: (events: ReadonlyArray<WorkGoalCheckpoint>) => WorkProjectionError | undefined;
+//# sourceMappingURL=goal-family.d.ts.map

package/dist/goal-family.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"goal-family.d.ts","sourceRoot":"","sources":["../src/goal-family.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AACjD,OAAO,KAAK,EAAE,kBAAkB,EAAkB,MAAM,YAAY,CAAA;AAKpE,eAAO,MAAM,yBAAyB,WAC5B,aAAa,CAAC,kBAAkB,CAAC,KACxC,mBAAmB,GAAG,SAkCxB,CAAA"}

package/dist/goal-family.js

@@ -0,0 +1,32 @@
+import { WorkProjectionError } from "./errors.js";
+const inconsistency = (detail, cause) => new WorkProjectionError({ cause, detail, reason: "inconsistent_history" });
+export const validateGoalFamilyHistory = (events) => {
+    const familyByGoal = new Map();
+    const canonicalActivatedAt = new Map();
+    const ordered = events.toSorted((left, right) => left.occurredAt - right.occurredAt);
+    for (const event of ordered) {
+        const family = event.goal.goalFamily;
+        const previousFamily = familyByGoal.get(event.goal.id);
+        if (previousFamily !== undefined && (family === undefined ||
+            family.canonicalGoalId !== previousFamily.canonicalGoalId ||
+            family.role !== previousFamily.role)) {
+            return inconsistency(`goal ${event.goal.id} changed or removed its goal-family relation`, event);
+        }
+        if (family !== undefined) {
+            familyByGoal.set(event.goal.id, family);
+            if (family.role === "canonical" && !canonicalActivatedAt.has(event.goal.id)) {
+                canonicalActivatedAt.set(event.goal.id, event.occurredAt);
+            }
+        }
+    }
+    for (const event of ordered) {
+        const family = event.goal.goalFamily;
+        if (family?.role !== "superseded")
+            continue;
+        const canonicalAt = canonicalActivatedAt.get(family.canonicalGoalId);
+        if (canonicalAt === undefined || canonicalAt > event.occurredAt) {
+            return inconsistency(`goal ${event.goal.id} was superseded before canonical goal ${family.canonicalGoalId} was recorded`, event);
+        }
+    }
+};
+//# sourceMappingURL=goal-family.js.map

package/dist/goal-family.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"goal-family.js","sourceRoot":"","sources":["../src/goal-family.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AAGjD,MAAM,aAAa,GAAG,CAAC,MAAc,EAAE,KAAyB,EAAE,EAAE,CAClE,IAAI,mBAAmB,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC,CAAA;AAE5E,MAAM,CAAC,MAAM,yBAAyB,GAAG,CACvC,MAAyC,EACR,EAAE;IACnC,MAAM,YAAY,GAAG,IAAI,GAAG,EAA0B,CAAA;IACtD,MAAM,oBAAoB,GAAG,IAAI,GAAG,EAAkB,CAAA;IACtD,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC,CAAA;IACpF,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,UAAU,CAAA;QACpC,MAAM,cAAc,GAAG,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACtD,IACE,cAAc,KAAK,SAAS,IAAI,CAC9B,MAAM,KAAK,SAAS;YACpB,MAAM,CAAC,eAAe,KAAK,cAAc,CAAC,eAAe;YACzD,MAAM,CAAC,IAAI,KAAK,cAAc,CAAC,IAAI,CACpC,EACD,CAAC;YACD,OAAO,aAAa,CAAC,QAAQ,KAAK,CAAC,IAAI,CAAC,EAAE,8CAA8C,EAAE,KAAK,CAAC,CAAA;QAClG,CAAC;QACD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;YACvC,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;gBAC5E,oBAAoB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,UAAU,CAAC,CAAA;YAC3D,CAAC;QACH,CAAC;IACH,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,UAAU,CAAA;QACpC,IAAI,MAAM,EAAE,IAAI,KAAK,YAAY;YAAE,SAAQ;QAC3C,MAAM,WAAW,GAAG,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAA;QACpE,IAAI,WAAW,KAAK,SAAS,IAAI,WAAW,GAAG,KAAK,CAAC,UAAU,EAAE,CAAC;YAChE,OAAO,aAAa,CAClB,QAAQ,KAAK,CAAC,IAAI,CAAC,EAAE,yCAAyC,MAAM,CAAC,eAAe,eAAe,EACnG,KAAK,CACN,CAAA;QACH,CAAC;IACH,CAAC;AACH,CAAC,CAAA"}

package/dist/index.d.ts

@@ -1,7 +1,10 @@
+export * from "./agent-binding.js";
 export * from "./errors.js";
 export * from "./model.js";
+export * from "./navigation.js";
 export * from "./projection.js";
 export * from "./service.js";
-export * from "./store.js";
+export * from "./sql.js";
+export { WorkStore, type WorkStoreService } from "./store.js";
 export * from "./view.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAA;AAC3B,cAAc,YAAY,CAAA;AAC1B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,cAAc,CAAA;AAC5B,cAAc,YAAY,CAAA;AAC1B,cAAc,WAAW,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,oBAAoB,CAAA;AAClC,cAAc,aAAa,CAAA;AAC3B,cAAc,YAAY,CAAA;AAC1B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,cAAc,CAAA;AAC5B,cAAc,UAAU,CAAA;AACxB,OAAO,EAAE,SAAS,EAAE,KAAK,gBAAgB,EAAE,MAAM,YAAY,CAAA;AAC7D,cAAc,WAAW,CAAA"}

package/dist/index.js

@@ -1,7 +1,10 @@
+export * from "./agent-binding.js";
 export * from "./errors.js";
 export * from "./model.js";
+export * from "./navigation.js";
 export * from "./projection.js";
 export * from "./service.js";
-export * from "./store.js";
+export * from "./sql.js";
+export { WorkStore } from "./store.js";
 export * from "./view.js";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAA;AAC3B,cAAc,YAAY,CAAA;AAC1B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,cAAc,CAAA;AAC5B,cAAc,YAAY,CAAA;AAC1B,cAAc,WAAW,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,oBAAoB,CAAA;AAClC,cAAc,aAAa,CAAA;AAC3B,cAAc,YAAY,CAAA;AAC1B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,cAAc,CAAA;AAC5B,cAAc,UAAU,CAAA;AACxB,OAAO,EAAE,SAAS,EAAyB,MAAM,YAAY,CAAA;AAC7D,cAAc,WAAW,CAAA"}

package/dist/internal/agent-binding-admission.d.ts

@@ -0,0 +1,15 @@
+import { WorkProjectionError } from "../errors.js";
+import { type WorkGoalCheckpoint } from "../model.js";
+export declare const workAgentBindingLaneOperationMaxRecords = 16384;
+export declare const workAgentBindingLaneOperationMaxBytes: number;
+export declare const workAgentBindingSnapshotEnvelopeMaxBytes: number;
+export declare const workMaximumSnapshotBytesForHistory: (history: ReadonlyArray<WorkGoalCheckpoint>) => number;
+export declare const workAgentBindingMaximumSnapshotBytes: (history: ReadonlyArray<WorkGoalCheckpoint>, candidate: WorkGoalCheckpoint) => number;
+export declare const agentBindingAdmissionError: (input: {
+    readonly history: ReadonlyArray<WorkGoalCheckpoint>;
+    readonly candidate: WorkGoalCheckpoint;
+    readonly operationCount: number;
+    readonly operationBytes: number;
+    readonly candidateOperationBytes: number;
+}) => WorkProjectionError | undefined;
+//# sourceMappingURL=agent-binding-admission.d.ts.map

package/dist/internal/agent-binding-admission.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-binding-admission.d.ts","sourceRoot":"","sources":["../../src/internal/agent-binding-admission.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAA;AAClD,OAAO,EAAE,KAAK,kBAAkB,EAAwB,MAAM,aAAa,CAAA;AAO3E,eAAO,MAAM,uCAAuC,QAAS,CAAA;AAC7D,eAAO,MAAM,qCAAqC,QAAkB,CAAA;AACpE,eAAO,MAAM,wCAAwC,QAMnD,CAAA;AAEF,eAAO,MAAM,kCAAkC,YACpC,aAAa,CAAC,kBAAkB,CAAC,KACzC,MAuCF,CAAA;AAED,eAAO,MAAM,oCAAoC,YACtC,aAAa,CAAC,kBAAkB,CAAC,aAC/B,kBAAkB,KAC5B,MAAqE,CAAA;AAExE,eAAO,MAAM,0BAA0B,UAAW;IAChD,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC,kBAAkB,CAAC,CAAA;IACnD,QAAQ,CAAC,SAAS,EAAE,kBAAkB,CAAA;IACtC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,uBAAuB,EAAE,MAAM,CAAA;CACzC,KAAG,mBAAmB,GAAG,SAkCzB,CAAA"}

package/dist/internal/agent-binding-admission.js

@@ -0,0 +1,92 @@
+import { fleetResponseBodyMaxBytes } from "@knpkv/herdr-fleet";
+import { WorkProjectionError } from "../errors.js";
+import { workHistoryMaxEvents } from "../model.js";
+import { workHistoryError } from "./history-validation.js";
+const encodedBytes = (value) => new TextEncoder().encode(JSON.stringify(value)).byteLength;
+const maximumTimestamp = 8_640_000_000_000_000;
+export const workAgentBindingLaneOperationMaxRecords = 16_384;
+export const workAgentBindingLaneOperationMaxBytes = 2 * 1024 * 1024;
+export const workAgentBindingSnapshotEnvelopeMaxBytes = encodedBytes({
+    observedAt: maximumTimestamp,
+    now: { window: "now", observedAt: maximumTimestamp, asOf: maximumTimestamp, goals: [], families: [] },
+    day: { window: "day", observedAt: maximumTimestamp, asOf: maximumTimestamp, goals: [], families: [] },
+    week: { window: "week", observedAt: maximumTimestamp, asOf: maximumTimestamp, goals: [], families: [] },
+    month: { window: "month", observedAt: maximumTimestamp, asOf: maximumTimestamp, goals: [], families: [] }
+});
+export const workMaximumSnapshotBytesForHistory = (history) => {
+    const maximumGoalBytes = new Map();
+    let encodedGoals = 0;
+    const latest = new Map();
+    for (const event of history) {
+        const { goal } = event;
+        const bytes = encodedBytes(goal);
+        const previous = maximumGoalBytes.get(goal.id);
+        if (previous === undefined) {
+            maximumGoalBytes.set(goal.id, bytes);
+            encodedGoals += bytes;
+        }
+        else if (bytes > previous) {
+            maximumGoalBytes.set(goal.id, bytes);
+            encodedGoals += bytes - previous;
+        }
+        const previousLatest = latest.get(goal.id);
+        if (previousLatest === undefined || previousLatest.occurredAt <= event.occurredAt) {
+            latest.set(goal.id, event);
+        }
+    }
+    const separators = Math.max(0, maximumGoalBytes.size - 1);
+    const supersededCounts = new Map();
+    for (const { goal } of latest.values()) {
+        if (goal.goalFamily?.role === "superseded") {
+            const count = supersededCounts.get(goal.goalFamily.canonicalGoalId) ?? 0;
+            supersededCounts.set(goal.goalFamily.canonicalGoalId, count + 1);
+        }
+    }
+    let canonicalBytesSum = 0;
+    let familyGroupsOverheadSum = 0;
+    for (const [canonicalGoalId, supersededCount] of supersededCounts) {
+        if (supersededCount > 0 && latest.get(canonicalGoalId)?.goal.goalFamily?.role === "canonical") {
+            canonicalBytesSum += maximumGoalBytes.get(canonicalGoalId) ?? 0;
+            familyGroupsOverheadSum += encodedBytes(canonicalGoalId) + 64;
+        }
+    }
+    const familiesPerWindowBytes = encodedGoals + canonicalBytesSum + familyGroupsOverheadSum + separators;
+    return workAgentBindingSnapshotEnvelopeMaxBytes +
+        4 * Math.max(encodedGoals + separators, familiesPerWindowBytes);
+};
+export const workAgentBindingMaximumSnapshotBytes = (history, candidate) => workMaximumSnapshotBytesForHistory([...history, candidate]);
+export const agentBindingAdmissionError = (input) => {
+    if (input.history.length >= workHistoryMaxEvents) {
+        return new WorkProjectionError({
+            cause: input.candidate,
+            detail: `work history cannot exceed ${workHistoryMaxEvents} checkpoints`,
+            reason: "capacity_exceeded"
+        });
+    }
+    const historyError = workHistoryError([...input.history, input.candidate]);
+    if (historyError !== undefined)
+        return historyError;
+    if (workAgentBindingMaximumSnapshotBytes(input.history, input.candidate) > fleetResponseBodyMaxBytes) {
+        return new WorkProjectionError({
+            cause: input.candidate,
+            detail: `work snapshots cannot exceed ${fleetResponseBodyMaxBytes} encoded bytes`,
+            reason: "capacity_exceeded"
+        });
+    }
+    if (input.operationCount >= workAgentBindingLaneOperationMaxRecords) {
+        return new WorkProjectionError({
+            cause: input.candidate,
+            detail: `work lane operation history cannot exceed ${workAgentBindingLaneOperationMaxRecords} operation IDs`,
+            reason: "capacity_exceeded"
+        });
+    }
+    if (input.operationBytes + input.candidateOperationBytes >
+        workAgentBindingLaneOperationMaxBytes) {
+        return new WorkProjectionError({
+            cause: input.candidate,
+            detail: `work lane operation history cannot exceed ${workAgentBindingLaneOperationMaxBytes} encoded bytes`,
+            reason: "capacity_exceeded"
+        });
+    }
+};
+//# sourceMappingURL=agent-binding-admission.js.map