@latysh-development/monolith 0.1.0-alpha.0 → 0.1.0-alpha.1

package/dist/durable/fs-store.js

@@ -36,7 +36,7 @@ import { dirname, join } from 'path';
 import { sha256Hex } from './canonical.js';
 import { LogCorruptError, PruneAttemptLimitError, PruneDecisionCorruptError, RetentionRefusedError, StoreIoError, StoreProtocolError, StoreSecurityError, TaskPrunedError, TombstoneCommittedError, } from './errors.js';
 import { MAX_REGISTER_BYTES, MAX_WRITE_RESOLVE, PROTOCOL_MARKER_FILE, STAGING_RE, TOMBSTONE_FILE, decisionFile, derivePruneState, encodeDecision, encodePrepare, encodeTombstone, parseDecision, parsePrepare, parseTombstoneFile, prepareFile, sameTombstone, } from './register.js';
-import { tombstoneProblem } from './prune-check.js';
+import { committedProblem, tombstoneProblem } from './prune-check.js';
 import { takeFsSeams } from './seams.js';
 import { MAX_EVENT_BYTES, ID_PATTERN, parseEvent, serializeEvent } from './log.js';
 import { MAX_PRUNE_ATTEMPTS } from './types.js';
@@ -48,6 +48,8 @@ const SEGMENT_NAME = /^S(\d{9})-(\d{9})\.jsonl$/;
 const REF_NAME = /^[A-Za-z0-9][A-Za-z0-9_-]{0,63}\.json$/;
 const TMP_NAME = STAGING_RE;
 const TOMBSTONE_NAME = TOMBSTONE_FILE;
+/** how often the audit of a committed prune looks at a log with a gap and no tombstone before it refuses (I-1). */
+const AUDIT_PASSES = 3;
 const MAX_TOMBSTONE_BYTES = 4096;
 const READ_ATTEMPTS = 8;
 export class AppendOutcomeUnknownError extends StoreIoError {
@@ -470,7 +472,7 @@ export class FsEventStore {
             case 'missing':
                 return new PruneDecisionCorruptError(taskId, 'task-dir-missing');
             case 'unreadable':
-                return new StoreIoError(`the prune state of task "${taskId}" cannot be read now (${st.reason ?? 'unknown'}); nothing was changed. Try again.`);
+                return new StoreIoError(`the prune state of task "${taskId}" cannot be read now (${st.reason ?? 'unknown'}); this refusal removes and undoes nothing. Try again.`);
             case 'committed':
                 return new TaskPrunedError(taskId);
             default:
@@ -670,8 +672,106 @@ export class FsEventStore {
         }
         if (committed === null)
             throw new StoreIoError(`the prune state of task "${taskId}" kept changing; try again.`);
+        this.auditCommitted(taskId, committed);
         return this.rollForward(taskId, committed);
     }
+    /**
+     * The events (and covered segment lines) still on disk with `seq <= upTo`, each verified on its own; no gap is an error,
+     * because a roll-forward that was interrupted leaves gaps. A segment wins over a loose copy of the same slot (the reader's
+     * rule). Anything that cannot be read safely or does not verify throws: the audit then refuses instead of guessing.
+     */
+    survivingEvents(taskId, upTo) {
+        const bySeq = new Map();
+        // ORDER MATTERS (F-1), the same as in `readLogImpl`: loose files first, segments second. Compaction publishes a segment
+        // BEFORE it removes the loose files it covers and nothing but the roll-forward of a prune ever removes a segment (and that
+        // publishes the tombstone first, which `auditCommitted` reads afterwards). So a slot that is missing from the loose
+        // files, or whose file vanishes before it is read, was removed after its segment was published, and the segment is in
+        // the listing taken afterwards. The other order cannot see a segment that is published between the two listings.
+        const eventEntries = this.listDir(this.eventsDir(taskId)) ?? [];
+        this.seams.auditHook?.('listed');
+        for (const e of eventEntries) {
+            const m = EVENT_NAME.exec(e.name);
+            if (!m || !e.isFile() || Number(m[1]) > upTo)
+                continue; // only regular event files are ever read, and nothing past the head is evidence
+            const seq = Number(m[1]);
+            const content = this.readManaged(join(this.eventsDir(taskId), e.name), `event ${e.name}`, MAX_EVENT_BYTES + 4096, taskId);
+            if (content === null)
+                continue; // removed meanwhile: a compaction published its segment first, and it is listed below
+            const ev = parseEvent(content.trim(), taskId, seq);
+            if (ev.seq !== seq)
+                throw new LogCorruptError(taskId, seq, `file ${e.name} holds event ${ev.seq}`);
+            bySeq.set(seq, ev);
+        }
+        const segs = [];
+        for (const e of this.listDir(this.segmentsDir(taskId)) ?? []) {
+            const m = SEGMENT_NAME.exec(e.name);
+            if (m && e.isFile() && Number(m[1]) <= upTo)
+                segs.push({ name: e.name, from: Number(m[1]), to: Number(m[2]) });
+        }
+        for (const g of segs) {
+            const content = this.readManaged(join(this.segmentsDir(taskId), g.name), `segment ${g.name}`, MAX_SEGMENT_BYTES, taskId);
+            if (content === null)
+                continue;
+            const lines = content.split('\n').filter((l) => l.length > 0);
+            if (lines.length !== g.to - g.from + 1)
+                throw new LogCorruptError(taskId, g.from, `segment ${g.name} holds ${lines.length} events, its name says ${g.to - g.from + 1}`);
+            lines.forEach((line, i) => {
+                const ev = parseEvent(line, taskId, g.from + i);
+                if (ev.seq !== g.from + i)
+                    throw new LogCorruptError(taskId, ev.seq, `segment ${g.name} is not contiguous`);
+                if (ev.seq <= upTo)
+                    bySeq.set(ev.seq, ev);
+            });
+        }
+        return [...bySeq.values()].sort((a, b) => a.seq - b.seq);
+    }
+    /**
+     * O-1: a committed register is not self-proving (its checksum is unkeyed), so the data still on disk must not contradict
+     * it before anything is unlinked. See `committedProblem` for what a partly removed log can and cannot prove. Reads only.
+     *
+     * I-1: the data is read FIRST and `tombstone.json` AFTER it. The roll-forward publishes the tombstone before its first
+     * unlink and nothing ever removes it, so a tombstone that is still absent after the data was read proves that no unlink
+     * had begun when the data was read (it was absent at every earlier moment too): a gap in the data is then not a removal
+     * but a torn observation or real damage. The loose files are read before the segments are listed (see `survivingEvents`), so a
+     * compaction that moves events into a segment meanwhile does not tear the observation. Read the
+     * other way round, a concurrent pruner that publishes the tombstone and removes events between the two reads is taken
+     * for damage. A gap seen without a tombstone is still looked at again a few times before it is refused (a defence in depth,
+     * not what F-1 relies on). No lock: a pruner that races this audit only ever turns the verdict
+     * from "the whole log must be there" into "a part may be gone", and the roll-forward still checks the tombstone it finds.
+     */
+    auditCommitted(taskId, tombstone) {
+        let problem = null;
+        for (let pass = 0; pass < AUDIT_PASSES; pass++) {
+            let events = null;
+            try {
+                events = this.survivingEvents(taskId, tombstone.headSeq);
+            }
+            catch (err) {
+                if (!(err instanceof LogCorruptError))
+                    throw err;
+                problem = err.message; // an event that does not verify on its own does not heal
+                break;
+            }
+            this.seams.auditHook?.('surveyed');
+            const published = this.registerIO(taskId).tombstone();
+            if (published.k === 'ioerr')
+                throw new StoreIoError(`cannot read tombstone.json of task "${taskId}": ${published.reason}; this call removed no task data. Try again.`);
+            const deletionStarted = published.k !== 'absent'; // the roll-forward publishes it before its first unlink
+            try {
+                problem = committedProblem(taskId, events, tombstone, deletionStarted);
+            }
+            catch (err) {
+                if (!(err instanceof LogCorruptError))
+                    throw err;
+                problem = err.message;
+                break;
+            }
+            if (problem === null || deletionStarted)
+                break; // with a tombstone the verdict is already the lenient one
+        }
+        if (problem !== null)
+            throw new PruneDecisionCorruptError(taskId, 'commit-audit', null, null, false, problem);
+    }
     /**
      * Prune cleanup (class C, section 30.3): only for a verified, consistent `COMMITTED`. Publishes `tombstone.json` from the
      * commit, then removes the data of the task. It never touches the register, `tombstone.json` or the task directory,
@@ -703,7 +803,7 @@ export class FsEventStore {
                     continue;
                 }
                 try {
-                    fs.unlinkSync(join(dir, e.name));
+                    (this.seams.removeFile ?? fs.unlinkSync)(join(dir, e.name));
                     removed++;
                 }
                 catch (err) {

package/dist/durable/prune-check.d.ts

@@ -14,4 +14,21 @@ export declare function tombstoneFor(state: TaskState, prunedAt: string): Tombst
  * clock and is not compared.
  */
 export declare function tombstoneProblem(taskId: string, events: readonly TaskEvent[], t: Tombstone): string | null;
+/**
+ * Why a COMMITTED prune must not be rolled forward over the data that is still on disk, or `null` when it may.
+ * `events` are the surviving events with `seq <= t.headSeq`, each verified on its own (`parseEvent`), at most one per seq.
+ * Events beyond the committed head are stragglers of appends that lost against the commit (G2 reports them as pruned but
+ * leaves the file): they are deleted with the rest and are not evidence either way.
+ *
+ * What the data can prove depends on whether the roll-forward has begun. It publishes `tombstone.json` BEFORE its first
+ * unlink, so a log with a part missing and no `tombstone.json` was not removed by a roll-forward:
+ *  - `deletionStarted` is false: nothing may be missing. The whole prefix `1..headSeq` must be there and is judged exactly
+ *    like a prepare (`tombstoneProblem`: a finished task with the tombstone's head). A register forged for an active task,
+ *    or one that names a head the log does not have, is caught here, before the first unlink;
+ *  - `deletionStarted` is true: a roll-forward deletes in directory order, so any part of the log may be gone and no check
+ *    may demand the whole of it. The head slot, if it survives, must be the head the commit names; a complete prefix is
+ *    judged as above; a partial one has nothing that contradicts the commit, and a part cannot prove the rest.
+ * Throws `LogCorruptError` when a complete prefix does not verify.
+ */
+export declare function committedProblem(taskId: string, events: readonly TaskEvent[], t: Tombstone, deletionStarted: boolean): string | null;
 //# sourceMappingURL=prune-check.d.ts.map

package/dist/durable/prune-check.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"prune-check.d.ts","sourceRoot":"","sources":["../../src/durable/prune-check.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,OAAO,EAAc,KAAK,SAAS,EAAE,KAAK,SAAS,EAAE,KAAK,SAAS,EAAE,MAAM,YAAY,CAAC;AAExF,gGAAgG;AAChG,wBAAgB,eAAe,CAAC,KAAK,EAAE,SAAS,GAAG,MAAM,CAGxD;AAED,qFAAqF;AACrF,wBAAgB,YAAY,CAAC,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,GAAG,SAAS,CAK1E;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,SAAS,EAAE,EAAE,CAAC,EAAE,SAAS,GAAG,MAAM,GAAG,IAAI,CAW1G"}
+{"version":3,"file":"prune-check.d.ts","sourceRoot":"","sources":["../../src/durable/prune-check.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,OAAO,EAAc,KAAK,SAAS,EAAE,KAAK,SAAS,EAAE,KAAK,SAAS,EAAE,MAAM,YAAY,CAAC;AAExF,gGAAgG;AAChG,wBAAgB,eAAe,CAAC,KAAK,EAAE,SAAS,GAAG,MAAM,CAGxD;AAED,qFAAqF;AACrF,wBAAgB,YAAY,CAAC,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,GAAG,SAAS,CAK1E;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,SAAS,EAAE,EAAE,CAAC,EAAE,SAAS,GAAG,MAAM,GAAG,IAAI,CAW1G;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,SAAS,EAAE,EAAE,CAAC,EAAE,SAAS,EAAE,eAAe,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAOpI"}

package/dist/durable/prune-check.js

@@ -43,3 +43,30 @@ export function tombstoneProblem(taskId, events, t) {
         return 'the tombstone outcome digest is not the digest of the final outcome';
     return null;
 }
+/**
+ * Why a COMMITTED prune must not be rolled forward over the data that is still on disk, or `null` when it may.
+ * `events` are the surviving events with `seq <= t.headSeq`, each verified on its own (`parseEvent`), at most one per seq.
+ * Events beyond the committed head are stragglers of appends that lost against the commit (G2 reports them as pruned but
+ * leaves the file): they are deleted with the rest and are not evidence either way.
+ *
+ * What the data can prove depends on whether the roll-forward has begun. It publishes `tombstone.json` BEFORE its first
+ * unlink, so a log with a part missing and no `tombstone.json` was not removed by a roll-forward:
+ *  - `deletionStarted` is false: nothing may be missing. The whole prefix `1..headSeq` must be there and is judged exactly
+ *    like a prepare (`tombstoneProblem`: a finished task with the tombstone's head). A register forged for an active task,
+ *    or one that names a head the log does not have, is caught here, before the first unlink;
+ *  - `deletionStarted` is true: a roll-forward deletes in directory order, so any part of the log may be gone and no check
+ *    may demand the whole of it. The head slot, if it survives, must be the head the commit names; a complete prefix is
+ *    judged as above; a partial one has nothing that contradicts the commit, and a part cannot prove the rest.
+ * Throws `LogCorruptError` when a complete prefix does not verify.
+ */
+export function committedProblem(taskId, events, t, deletionStarted) {
+    if (events.length === 0)
+        return deletionStarted ? null : 'the log has no readable events, yet no removal was started';
+    const head = events.find((e) => e.seq === t.headSeq);
+    if (head && head.hash !== t.headHash)
+        return `the surviving event ${t.headSeq} is not the head hash the commit names`;
+    const whole = events.length === t.headSeq && events.every((e, i) => e.seq === i + 1);
+    if (!whole)
+        return deletionStarted ? null : `events of the log are missing (${events.length} of ${t.headSeq} found), yet no removal was started`;
+    return tombstoneProblem(taskId, events, t);
+}

package/dist/durable/runtime.d.ts

@@ -270,7 +270,9 @@ export declare class DurableTasks {
      *  - `live`     it exists and carries no tombstone.
      *  - `pending`  a tombstone exists, but the prune is unfinished and may still be rolled back, or cannot be examined.
      *               This is a transient state. It is never a reason to cancel anybody.
-     *  - `gone`     it never existed, or its removal has started or finished: the prune is committed and irreversible.
+     *  - `gone`     its removal has started or finished: the prune is committed and irreversible.
+     *  - `missing`  its directory is not there and no prune accounts for it (ADR-018 D2). Absence is not proof of a
+     *               committed prune, so, like `pending`, it blocks execution and is never a reason to cancel anybody.
      *
      * Why the tombstone alone proves nothing: a pruner publishes it BEFORE it looks for referrers, and a stopped
      * (SIGSTOP) or killed pruner leaves it behind with all data in place. Only the data decides:
@@ -282,8 +284,8 @@ export declare class DurableTasks {
      */
     private requirementState;
     /**
-     * The first task an ACTIVE task requires (`parentTaskId`, `dependsOn`) that is gone, else the first whose prune is
-     * pending, else `null`. This — not the presence of `task.created` in the log — is what permits execution. Why it
+     * The first task an ACTIVE task requires (`parentTaskId`, `dependsOn`) that is gone, else the first that is missing,
+     * else the first whose prune is pending, else `null`. This — not the presence of `task.created` in the log — is what permits execution. Why it
      * is safe without any clock: a pruner publishes its tombstone and only then looks for referrers; this check runs
      * after the task's `task.created` is published. So either the tombstone is visible here, or the pruner sees the
      * task and backs off. Once the check has passed, no prune of the required task can succeed while this task is active.

package/dist/durable/runtime.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../src/durable/runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAIH,OAAO,EAAuC,KAAK,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAChF,OAAO,EAAuC,KAAK,aAAa,EAAE,KAAK,UAAU,EAAE,KAAK,WAAW,EAAE,MAAM,aAAa,CAAC;AAyBzH,OAAO,EAAiB,KAAK,iBAAiB,EAAE,KAAK,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAE7F,OAAO,EAKL,KAAK,eAAe,EACpB,KAAK,WAAW,EAChB,KAAK,WAAW,EAGhB,KAAK,UAAU,EAIf,KAAK,aAAa,EAClB,KAAK,eAAe,EACpB,KAAK,SAAS,EACd,KAAK,SAAS,EACd,KAAK,UAAU,EACf,KAAK,SAAS,EACf,MAAM,YAAY,CAAC;AAGpB,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,UAAU,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,qEAAqE;IACrE,KAAK,CAAC,EAAE,MAAM,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,6FAA6F;IAC7F,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;OAIG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,iEAAiE;AACjE,MAAM,WAAW,KAAK;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,eAAe;IAC9B,yFAAyF;IACzF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACjC;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,UAAU,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAED,MAAM,MAAM,cAAc,GACtB;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE;AACpE,6DAA6D;GAC3D;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE;AACrE,8GAA8G;GAC5G;IACE,IAAI,EAAE,UAAU,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,qHAAqH;IACrH,GAAG,EAAE,MAAM,CAAC;IACZ;;;OAGG;IACH,QAAQ,EAAE,OAAO,CAAC;CACnB,GACD;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,aAAa,GAAG,aAAa,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC1E;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,iBAAiB,GAAG,cAAc,GAAG,eAAe,GAAG,WAAW,CAAA;CAAE,CAAC;AAErG,MAAM,WAAW,aAAa,CAAC,CAAC,SAAS,IAAI;IAC3C,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB;;;OAGG;IACH,SAAS,CAAC,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,OAAO,CAAC;QAAE,MAAM,EAAE,WAAW,CAAC;QAAC,MAAM,EAAE,CAAC,CAAA;KAAE,GAAG;QAAE,MAAM,EAAE,cAAc,CAAA;KAAE,CAAC,CAAC;IAC9G;;;;;OAKG;IACH,aAAa,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,cAAc,GAAG,SAAS,CAAC;IAC7D;;;OAGG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,aAAa,CAAC,CAAC;IAC9B,MAAM,EAAE,CAAC,CAAC;IACV,kFAAkF;IAClF,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,YAAY;IAC3B,aAAa,EAAE,CAAC,CAAC;IACjB,gBAAgB,EAAE,MAAM,CAAC;IACzB,IAAI,EAAE;QACJ,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,IAAI,GAAG,IAAI,CAAC;QAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;QAC5F,SAAS,EAAE,MAAM,EAAE,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAAC,MAAM,EAAE,UAAU,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;KAC7G,CAAC;IACF,UAAU,EAAE,UAAU,CAAC;IACvB,IAAI,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC;IAC7B,SAAS,EAAE,SAAS,CAAC,WAAW,CAAC,CAAC;IAClC,WAAW,EAAE,eAAe,EAAE,CAAC;IAC/B,YAAY,EAAE,SAAS,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;IAClD,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3C,qFAAqF;IACrF,SAAS,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,WAAW,EAAE,CAAA;KAAE,CAAC,CAAC;IAChF,QAAQ,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;IACrG,iBAAiB,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,MAAM,EAAE,UAAU,GAAG,QAAQ,GAAG,IAAI,CAAC;IACrC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,WAAW,EAAE,eAAe,EAAE,CAAC;CAChC;AAED,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,iBAAiB,EAAE,CAAC;IAC/B,OAAO,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,OAAO,GAAG,SAAS,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACjF;AA6BD,2GAA2G;AAC3G,wBAAgB,UAAU,IAAI,MAAM,CAEnC;AAoBD,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAYpG;AAED,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAa;IACnC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAa;IACjC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAe;IACrC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;IACxC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAS;IACzC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAS;IAC1C,+FAA+F;IAC/F,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAgC;IACtD,4GAA4G;IAC5G,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAmD;gBAEhE,IAAI,EAAE,mBAAmB;IAYrC,OAAO,CAAC,QAAQ;IAahB,kGAAkG;YACpF,OAAO;YA8BP,QAAQ;IAUtB;;;;OAIG;YACW,MAAM;IAsCpB;;;OAGG;IACH,OAAO,CAAC,aAAa;IAMrB;;;;OAIG;IACH,OAAO,CAAC,QAAQ;IAWhB;;;;OAIG;YACW,cAAc;IAUtB,UAAU,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAC;QAAC,KAAK,EAAE,SAAS,CAAA;KAAE,CAAC;IAyDzG;;;OAGG;YACW,eAAe;IAc7B;;;;;;;OAOG;YACW,wBAAwB;IAStC;;;;;;;;;;;;;;OAcG;YACW,gBAAgB;IAyB9B;;;;;;OAMG;YACW,mBAAmB;IAWjC;;;;;OAKG;YACW,UAAU;IAUxB;;;OAGG;YACW,cAAc;IA6BtB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAIlD,+CAA+C;IACzC,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAM3D,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,SAAS,CAAC;QAAC,MAAM,EAAE,SAAS,EAAE,CAAC;QAAC,WAAW,EAAE,eAAe,EAAE,CAAA;KAAE,CAAC;IAK1G,SAAS,CAAC,MAAM,GAAE;QAAE,MAAM,CAAC,EAAE,UAAU,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAO,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IA2BtH;;;;OAIG;IACG,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,KAAK,CAAC;IA4BtF,OAAO,CAAC,WAAW;IAOnB,qCAAqC;IACrC,OAAO,CAAC,MAAM;IAUR,SAAS,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ1D,mGAAmG;IAC7F,OAAO,CAAC,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC;IAgBhC,WAAW,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAmB9H,wEAAwE;IAClE,YAAY,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAevE,QAAQ,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAWvE,2EAA2E;IACrE,cAAc,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAgBzH;;;;;OAKG;IACG,gBAAgB,CACpB,CAAC,EAAE,KAAK,EACR,CAAC,EAAE;QACD,GAAG,EAAE,MAAM,CAAC;QACZ,SAAS,EAAE,MAAM,CAAC;QAClB,KAAK,EAAE,OAAO,CAAC;QACf,WAAW,CAAC,EAAE,WAAW,CAAC;QAC1B,QAAQ,CAAC,EAAE,KAAK,CAAC;YAAE,GAAG,EAAE,MAAM,CAAC;YAAC,IAAI,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QACjD;;;;WAIG;QACH,SAAS,CAAC,EAAE,OAAO,CAAC;KACrB,GACA,OAAO,CAAC,IAAI,CAAC;IA6BV,iBAAiB,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAS7E;;;OAGG;IACG,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAiBjG;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACG,SAAS,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;YAqBjH,aAAa;IA+D3B;;;;;;OAMG;IACG,aAAa,CACjB,CAAC,EAAE,KAAK,EACR,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,CAAC;QAAC,UAAU,CAAC,EAAE,IAAI,GAAG,MAAM,CAAA;KAAE,GACvG,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;IA6BhE;;;;;;;;OAQG;IACG,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE;QAAE,cAAc,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,cAAc,CAAC;IA8C1H,gGAAgG;IAC1F,cAAc,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IA4BpF,QAAQ,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAKnD,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAMpE,sFAAsF;IAChF,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAYrE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,GAAE,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,GAAG;QAAE,GAAG,CAAC,EAAE,IAAI,CAAA;KAAO,GAAG,OAAO,CAAC,UAAU,CAAC;IAKzG;;;;OAIG;YACW,gBAAgB;IAkB9B,qGAAqG;IAC/F,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,GAAE,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,GAAG;QAAE,GAAG,CAAC,EAAE,IAAI,CAAA;KAAO,GAAG,OAAO,CAAC,YAAY,CAAC;IA+BjH,OAAO,CAAC,KAAK;IAgBb;;;;OAIG;IACG,aAAa,CAAC,IAAI,GAAE;QAAE,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,SAAS,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAA;KAAO,GAAG,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;QAAC,OAAO,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;IAuB7L,4FAA4F;IACtF,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IAqBtD;;;OAGG;IACG,aAAa,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAyB1E,+FAA+F;IACzF,cAAc,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC;IAoBvE;;;;OAIG;IACG,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE;QAAE,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC;IA0B5E;;;;OAIG;IACG,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,eAAe,EAAE,qBAAqB,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC;IAkCzG,4GAA4G;YAC9F,oBAAoB;CAWnC"}
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../src/durable/runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAIH,OAAO,EAAuC,KAAK,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAChF,OAAO,EAAuC,KAAK,aAAa,EAAE,KAAK,UAAU,EAAE,KAAK,WAAW,EAAE,MAAM,aAAa,CAAC;AAyBzH,OAAO,EAAiB,KAAK,iBAAiB,EAAE,KAAK,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAE7F,OAAO,EAKL,KAAK,eAAe,EACpB,KAAK,WAAW,EAChB,KAAK,WAAW,EAGhB,KAAK,UAAU,EAIf,KAAK,aAAa,EAClB,KAAK,eAAe,EACpB,KAAK,SAAS,EACd,KAAK,SAAS,EACd,KAAK,UAAU,EACf,KAAK,SAAS,EACf,MAAM,YAAY,CAAC;AAGpB,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,UAAU,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,qEAAqE;IACrE,KAAK,CAAC,EAAE,MAAM,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,6FAA6F;IAC7F,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;OAIG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,iEAAiE;AACjE,MAAM,WAAW,KAAK;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,eAAe;IAC9B,yFAAyF;IACzF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACjC;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,UAAU,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAED,MAAM,MAAM,cAAc,GACtB;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE;AACpE,6DAA6D;GAC3D;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE;AACrE,8GAA8G;GAC5G;IACE,IAAI,EAAE,UAAU,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,qHAAqH;IACrH,GAAG,EAAE,MAAM,CAAC;IACZ;;;OAGG;IACH,QAAQ,EAAE,OAAO,CAAC;CACnB,GACD;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,aAAa,GAAG,aAAa,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC1E;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,iBAAiB,GAAG,cAAc,GAAG,eAAe,GAAG,WAAW,CAAA;CAAE,CAAC;AAErG,MAAM,WAAW,aAAa,CAAC,CAAC,SAAS,IAAI;IAC3C,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB;;;OAGG;IACH,SAAS,CAAC,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,OAAO,CAAC;QAAE,MAAM,EAAE,WAAW,CAAC;QAAC,MAAM,EAAE,CAAC,CAAA;KAAE,GAAG;QAAE,MAAM,EAAE,cAAc,CAAA;KAAE,CAAC,CAAC;IAC9G;;;;;OAKG;IACH,aAAa,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,cAAc,GAAG,SAAS,CAAC;IAC7D;;;OAGG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,aAAa,CAAC,CAAC;IAC9B,MAAM,EAAE,CAAC,CAAC;IACV,kFAAkF;IAClF,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,YAAY;IAC3B,aAAa,EAAE,CAAC,CAAC;IACjB,gBAAgB,EAAE,MAAM,CAAC;IACzB,IAAI,EAAE;QACJ,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,IAAI,GAAG,IAAI,CAAC;QAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;QAC5F,SAAS,EAAE,MAAM,EAAE,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAAC,MAAM,EAAE,UAAU,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;KAC7G,CAAC;IACF,UAAU,EAAE,UAAU,CAAC;IACvB,IAAI,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC;IAC7B,SAAS,EAAE,SAAS,CAAC,WAAW,CAAC,CAAC;IAClC,WAAW,EAAE,eAAe,EAAE,CAAC;IAC/B,YAAY,EAAE,SAAS,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;IAClD,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3C,qFAAqF;IACrF,SAAS,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,WAAW,EAAE,CAAA;KAAE,CAAC,CAAC;IAChF,QAAQ,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;IACrG,iBAAiB,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,MAAM,EAAE,UAAU,GAAG,QAAQ,GAAG,IAAI,CAAC;IACrC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,WAAW,EAAE,eAAe,EAAE,CAAC;CAChC;AAED,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,iBAAiB,EAAE,CAAC;IAC/B,OAAO,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,OAAO,GAAG,SAAS,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACjF;AA6BD,2GAA2G;AAC3G,wBAAgB,UAAU,IAAI,MAAM,CAEnC;AAoBD,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAYpG;AAED,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAa;IACnC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAa;IACjC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAe;IACrC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;IACxC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAS;IACzC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAS;IAC1C,+FAA+F;IAC/F,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAgC;IACtD,4GAA4G;IAC5G,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAmD;gBAEhE,IAAI,EAAE,mBAAmB;IAYrC,OAAO,CAAC,QAAQ;IAahB,kGAAkG;YACpF,OAAO;YA8BP,QAAQ;IAUtB;;;;OAIG;YACW,MAAM;IAsCpB;;;OAGG;IACH,OAAO,CAAC,aAAa;IAMrB;;;;OAIG;IACH,OAAO,CAAC,QAAQ;IAWhB;;;;OAIG;YACW,cAAc;IAUtB,UAAU,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAC;QAAC,KAAK,EAAE,SAAS,CAAA;KAAE,CAAC;IAyDzG;;;OAGG;YACW,eAAe;IAc7B;;;;;;;OAOG;YACW,wBAAwB;IAWtC;;;;;;;;;;;;;;;;OAgBG;YACW,gBAAgB;IAyB9B;;;;;;OAMG;YACW,mBAAmB;IAajC;;;;;OAKG;YACW,UAAU;IAUxB;;;OAGG;YACW,cAAc;IA6BtB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAIlD,+CAA+C;IACzC,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAM3D,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,SAAS,CAAC;QAAC,MAAM,EAAE,SAAS,EAAE,CAAC;QAAC,WAAW,EAAE,eAAe,EAAE,CAAA;KAAE,CAAC;IAK1G,SAAS,CAAC,MAAM,GAAE;QAAE,MAAM,CAAC,EAAE,UAAU,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAO,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IA2BtH;;;;OAIG;IACG,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,KAAK,CAAC;IA6BtF,OAAO,CAAC,WAAW;IAOnB,qCAAqC;IACrC,OAAO,CAAC,MAAM;IAUR,SAAS,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ1D,mGAAmG;IAC7F,OAAO,CAAC,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC;IAgBhC,WAAW,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAmB9H,wEAAwE;IAClE,YAAY,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAevE,QAAQ,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAWvE,2EAA2E;IACrE,cAAc,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAgBzH;;;;;OAKG;IACG,gBAAgB,CACpB,CAAC,EAAE,KAAK,EACR,CAAC,EAAE;QACD,GAAG,EAAE,MAAM,CAAC;QACZ,SAAS,EAAE,MAAM,CAAC;QAClB,KAAK,EAAE,OAAO,CAAC;QACf,WAAW,CAAC,EAAE,WAAW,CAAC;QAC1B,QAAQ,CAAC,EAAE,KAAK,CAAC;YAAE,GAAG,EAAE,MAAM,CAAC;YAAC,IAAI,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QACjD;;;;WAIG;QACH,SAAS,CAAC,EAAE,OAAO,CAAC;KACrB,GACA,OAAO,CAAC,IAAI,CAAC;IA6BV,iBAAiB,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAS7E;;;OAGG;IACG,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAiBjG;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACG,SAAS,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;YAqBjH,aAAa;IA+D3B;;;;;;OAMG;IACG,aAAa,CACjB,CAAC,EAAE,KAAK,EACR,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,CAAC;QAAC,UAAU,CAAC,EAAE,IAAI,GAAG,MAAM,CAAA;KAAE,GACvG,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;IA6BhE;;;;;;;;OAQG;IACG,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE;QAAE,cAAc,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,cAAc,CAAC;IA8C1H,gGAAgG;IAC1F,cAAc,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IA4BpF,QAAQ,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAKnD,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAMpE,sFAAsF;IAChF,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAYrE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,GAAE,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,GAAG;QAAE,GAAG,CAAC,EAAE,IAAI,CAAA;KAAO,GAAG,OAAO,CAAC,UAAU,CAAC;IAKzG;;;;OAIG;YACW,gBAAgB;IAyB9B,qGAAqG;IAC/F,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,GAAE,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,GAAG;QAAE,GAAG,CAAC,EAAE,IAAI,CAAA;KAAO,GAAG,OAAO,CAAC,YAAY,CAAC;IA+BjH,OAAO,CAAC,KAAK;IAgBb;;;;OAIG;IACG,aAAa,CAAC,IAAI,GAAE;QAAE,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,SAAS,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAA;KAAO,GAAG,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;QAAC,OAAO,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;IAuB7L,4FAA4F;IACtF,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IAqBtD;;;OAGG;IACG,aAAa,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAyB1E,+FAA+F;IACzF,cAAc,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC;IAoBvE;;;;OAIG;IACG,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE;QAAE,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC;IA0B5E;;;;OAIG;IACG,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,eAAe,EAAE,qBAAqB,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC;IAkCzG,4GAA4G;YAC9F,oBAAoB;CAWnC"}

package/dist/durable/runtime.js

@@ -350,7 +350,10 @@ export class DurableTasks {
         if (!this.store.pinReference)
             return;
         for (const r of refs) {
-            if ((await this.requirementState(r, true)) !== 'gone')
+            const st = await this.requirementState(r, true);
+            if (st === 'missing')
+                throw new ValidationError(`referenced task "${r}" was not found while task "${taskId}" was being created; the new task is not run and is not cancelled (ADR-018 D2).`);
+            if (st !== 'gone')
                 continue;
             await this.quarantine(taskId, r);
             throw new ValidationError(`referenced task "${r}" was pruned while task "${taskId}" was being created; the new task was cancelled.`);
@@ -361,7 +364,9 @@ export class DurableTasks {
      *  - `live`     it exists and carries no tombstone.
      *  - `pending`  a tombstone exists, but the prune is unfinished and may still be rolled back, or cannot be examined.
      *               This is a transient state. It is never a reason to cancel anybody.
-     *  - `gone`     it never existed, or its removal has started or finished: the prune is committed and irreversible.
+     *  - `gone`     its removal has started or finished: the prune is committed and irreversible.
+     *  - `missing`  its directory is not there and no prune accounts for it (ADR-018 D2). Absence is not proof of a
+     *               committed prune, so, like `pending`, it blocks execution and is never a reason to cancel anybody.
      *
      * Why the tombstone alone proves nothing: a pruner publishes it BEFORE it looks for referrers, and a stopped
      * (SIGSTOP) or killed pruner leaves it behind with all data in place. Only the data decides:
@@ -379,7 +384,7 @@ export class DurableTasks {
             }
             catch (err) {
                 if (err instanceof TaskNotFoundError)
-                    return 'gone';
+                    return 'missing';
                 if (!(err instanceof TaskPrunedError))
                     throw err;
             }
@@ -405,8 +410,8 @@ export class DurableTasks {
         return 'pending';
     }
     /**
-     * The first task an ACTIVE task requires (`parentTaskId`, `dependsOn`) that is gone, else the first whose prune is
-     * pending, else `null`. This — not the presence of `task.created` in the log — is what permits execution. Why it
+     * The first task an ACTIVE task requires (`parentTaskId`, `dependsOn`) that is gone, else the first that is missing,
+     * else the first whose prune is pending, else `null`. This — not the presence of `task.created` in the log — is what permits execution. Why it
      * is safe without any clock: a pruner publishes its tombstone and only then looks for referrers; this check runs
      * after the task's `task.created` is published. So either the tombstone is visible here, or the pruner sees the
      * task and backs off. Once the check has passed, no prune of the required task can succeed while this task is active.
@@ -414,15 +419,18 @@ export class DurableTasks {
     async blockingRequirement(s, recover) {
         if (s.status !== 'active')
             return null;
+        let missing = null;
         let pending = null;
         for (const r of [...(s.parentTaskId ? [s.parentTaskId] : []), ...s.dependsOn]) {
             const st = await this.requirementState(r, recover);
             if (st === 'gone')
                 return { id: r, state: 'gone' };
+            if (st === 'missing' && missing === null)
+                missing = { id: r, state: 'missing' };
             if (st === 'pending' && pending === null)
                 pending = { id: r, state: 'pending' };
         }
-        return pending;
+        return missing ?? pending;
     }
     /**
      * Durable, idempotent cleanup of an orphan whose required task is GONE (never for a pending prune):
@@ -542,6 +550,8 @@ export class DurableTasks {
             await this.quarantine(taskId, blocked.id);
             throw new TaskOrphanedError(taskId, blocked.id);
         }
+        if (blocked?.state === 'missing')
+            throw new TaskOrphanedError(taskId, blocked.id); // refused, but nothing is cancelled (ADR-018 D2)
         if (blocked)
             throw new RequiredTaskPendingError(taskId, blocked.id); // fail closed, but not final: nothing is cancelled
         return this.mutate(taskId, (s) => {
@@ -1006,6 +1016,13 @@ export class DurableTasks {
                 reasons: [...a.reasons, { code: 'REQUIRED_TASK_PRUNE_PENDING', severity: 'recovery', detail: `the prune of required task "${blocked.id}" is not settled; the task is not run now and is not cancelled`, refs: [blocked.id] }],
             };
         }
+        if (blocked.state === 'missing') {
+            return {
+                ...a,
+                claimable: false,
+                reasons: [...a.reasons, { code: 'REQUIRED_TASK_GONE', severity: 'recovery', detail: `required task "${blocked.id}" was not found; the task is not run now and is not cancelled`, refs: [blocked.id] }],
+            };
+        }
         await this.quarantine(state.taskId, blocked.id);
         return {
             ...a,

package/dist/durable/seams.d.ts

@@ -25,6 +25,10 @@ export interface FsStoreSeams {
      * writer wins) over logs that are not prunable. Never a production setting.
      */
     skipPrunePrecondition?: boolean;
+    /** replaces `fs.unlinkSync` in the roll-forward of a committed prune, to stop it after a chosen number of removals. */
+    removeFile?: (abs: string) => void;
+    /** called by the audit of a committed prune: `listed` after the loose events were listed (nothing read yet, segments not yet listed), `surveyed` after it was read, before `tombstone.json` is. */
+    auditHook?: (point: 'listed' | 'surveyed') => void;
     /** simulate an I/O error on reading a file of the store: return an errno code (`'EIO'`) to fail with, or nothing. */
     readFault?: (abs: string) => string | null | undefined;
 }

package/dist/durable/seams.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"seams.d.ts","sourceRoot":"","sources":["../../src/durable/seams.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAE5C,MAAM,WAAW,YAAY;IAC3B,+CAA+C;IAC/C,GAAG,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IACrB,6EAA6E;IAC7E,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,SAAS,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3D,uFAAuF;IACvF,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACzC,4IAA4I;IAC5I,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,gFAAgF;IAChF,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,wHAAwH;IACxH,eAAe,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,MAAM,EAAE,CAAC;IAChE;;;OAGG;IACH,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,qHAAqH;IACrH,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;CACxD;AAED,MAAM,WAAW,gBAAgB;IAC/B,gFAAgF;IAChF,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAID,+EAA+E;AAC/E,wBAAgB,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY,GAAG,IAAI,CAAC;AAChE,wBAAgB,QAAQ,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,gBAAgB,GAAG,IAAI,CAAC;AAKxE,wBAAgB,WAAW,IAAI,YAAY,CAI1C;AAED,wBAAgB,eAAe,IAAI,gBAAgB,CAIlD"}
+{"version":3,"file":"seams.d.ts","sourceRoot":"","sources":["../../src/durable/seams.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAE5C,MAAM,WAAW,YAAY;IAC3B,+CAA+C;IAC/C,GAAG,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IACrB,6EAA6E;IAC7E,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,SAAS,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3D,uFAAuF;IACvF,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACzC,4IAA4I;IAC5I,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,gFAAgF;IAChF,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,wHAAwH;IACxH,eAAe,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,MAAM,EAAE,CAAC;IAChE;;;OAGG;IACH,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,uHAAuH;IACvH,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IACnC,mMAAmM;IACnM,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,QAAQ,GAAG,UAAU,KAAK,IAAI,CAAC;IACnD,qHAAqH;IACrH,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;CACxD;AAED,MAAM,WAAW,gBAAgB;IAC/B,gFAAgF;IAChF,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAID,+EAA+E;AAC/E,wBAAgB,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY,GAAG,IAAI,CAAC;AAChE,wBAAgB,QAAQ,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,gBAAgB,GAAG,IAAI,CAAC;AAKxE,wBAAgB,WAAW,IAAI,YAAY,CAI1C;AAED,wBAAgB,eAAe,IAAI,gBAAgB,CAIlD"}

package/dist/durable/testing.js

@@ -5,8 +5,8 @@ import { FsEventStore } from './fs-store.js';
 import { MemoryEventStore } from './memory-store.js';
 import { handOver, takeFsSeams, takeMemorySeams } from './seams.js';
 export function createFsStoreWithSeams(opts) {
-    const { ops, beforePublish, afterListing, earlyPruneCheck, maxPruneAttempts, registerListing, skipPrunePrecondition, readFault, ...pub } = opts;
-    handOver('fs', { ops, beforePublish, afterListing, earlyPruneCheck, maxPruneAttempts, registerListing, skipPrunePrecondition, readFault });
+    const { ops, beforePublish, afterListing, earlyPruneCheck, maxPruneAttempts, registerListing, skipPrunePrecondition, readFault, removeFile, auditHook, ...pub } = opts;
+    handOver('fs', { ops, beforePublish, afterListing, earlyPruneCheck, maxPruneAttempts, registerListing, skipPrunePrecondition, readFault, removeFile, auditHook });
     try {
         return new FsEventStore(pub);
     }

package/dist/ideas/cli.d.ts

@@ -0,0 +1,33 @@
+/**
+ * `monolith idea ...` command handlers (IDEA-001A).
+ *
+ * Thin layer: strict flag parsing, store calls, output. No LLM, no network;
+ * `add` writes exactly one new file under `<monolithRoot>/memory/long-term/ideas/` and
+ * touches no other state (not `active.md`, not `state.json`); `list` and `show` write nothing.
+ */
+import type { Readable } from 'stream';
+interface AddFlags {
+    title?: string;
+    description?: string;
+    context?: string;
+    descriptionStdin?: boolean;
+}
+/** Strict: every flag needs a value, none may repeat, unknown flags and stray arguments are errors. */
+export declare function parseAddArgs(args: string[]): AddFlags;
+/**
+ * Read all of `input` as UTF-8, byte for byte (no trimming, BOM kept). Refuses
+ * more than STDIN_MAX_BYTES, invalid UTF-8 and a read error; nothing is
+ * interpreted. A terminal is refused instead of waiting for typed input.
+ */
+export declare function readStdinText(input?: Readable & {
+    isTTY?: boolean;
+}): Promise<string>;
+export declare function runIdeaAdd(args: string[], targetDir?: string, stdin?: Readable & {
+    isTTY?: boolean;
+}): Promise<void>;
+export declare function runIdeaList(args: string[], targetDir?: string): Promise<void>;
+export declare function runIdeaShow(args: string[], targetDir?: string): Promise<void>;
+/** Dispatcher used by the CLI entrypoint. */
+export declare function runIdeaCommand(args: string[], targetDir?: string): Promise<void>;
+export {};
+//# sourceMappingURL=cli.d.ts.map

package/dist/ideas/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../../src/ideas/cli.ts"],"names":[],"mappings":"AACA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAiBvC,UAAU,QAAQ;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAMD,uGAAuG;AACvG,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,QAAQ,CA4BrD;AAED;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,KAAK,GAAE,QAAQ,GAAG;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAkB,GAAG,OAAO,CAAC,MAAM,CAAC,CAyB1G;AAED,wBAAsB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,SAAS,SAAgB,EAAE,KAAK,GAAE,QAAQ,GAAG;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAYhJ;AAED,wBAAsB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,SAAS,SAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAqB1F;AAiBD,wBAAsB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,SAAS,SAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAG1F;AAED,6CAA6C;AAC7C,wBAAsB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,SAAS,SAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAe7F"}

package/dist/ideas/cli.js

@@ -0,0 +1,158 @@
+/* eslint-disable no-console */
+/**
+ * `monolith idea ...` command handlers (IDEA-001A).
+ *
+ * Thin layer: strict flag parsing, store calls, output. No LLM, no network;
+ * `add` writes exactly one new file under `<monolithRoot>/memory/long-term/ideas/` and
+ * touches no other state (not `active.md`, not `state.json`); `list` and `show` write nothing.
+ */
+import { reportWriteWarning } from '../root/index.js';
+import { addIdea, getIdea, ideaStore, listIdeas } from './store.js';
+import { IDEA_LIMITS, IdeaError } from './types.js';
+const ADD_USAGE = 'Usage: monolith idea add --title "..." (--description "..." | --description-stdin) [--context "..."]';
+/** UTF-8 needs at most 4 bytes per UTF-16 code unit's worth of text; anything larger cannot fit the description limit. */
+const STDIN_MAX_BYTES = IDEA_LIMITS.description * 4;
+const LIST_USAGE = 'Usage: monolith idea list';
+const SHOW_USAGE = 'Usage: monolith idea show <id>';
+/** Escape control characters so project-controlled text cannot forge terminal output. */
+function printable(s) {
+    // eslint-disable-next-line no-control-regex
+    return s.replace(/[\u0000-\u0009\u000b-\u001f\u007f-\u009f\u2028\u2029]/g, (c) => `\\u${c.charCodeAt(0).toString(16).padStart(4, '0')}`);
+}
+const ADD_FLAGS = ['--title', '--description', '--context'];
+const STDIN_FLAG = '--description-stdin';
+const KNOWN_FLAGS = [...ADD_FLAGS, STDIN_FLAG];
+/** Strict: every flag needs a value, none may repeat, unknown flags and stray arguments are errors. */
+export function parseAddArgs(args) {
+    const out = {};
+    for (let i = 0; i < args.length; i++) {
+        const flag = args[i];
+        if (!KNOWN_FLAGS.includes(flag)) {
+            throw new IdeaError('IDEA_INVALID_INPUT', `Unexpected argument ${JSON.stringify(printable(flag))}.\n${ADD_USAGE}`);
+        }
+        if (flag === STDIN_FLAG) {
+            if (out.descriptionStdin)
+                throw new IdeaError('IDEA_INVALID_INPUT', `${flag} was given more than once.\n${ADD_USAGE}`);
+            out.descriptionStdin = true;
+            continue;
+        }
+        const key = flag.slice(2);
+        if (key in out)
+            throw new IdeaError('IDEA_INVALID_INPUT', `${flag} was given more than once.\n${ADD_USAGE}`);
+        const value = args[i + 1];
+        if (value === undefined || KNOWN_FLAGS.includes(value)) {
+            throw new IdeaError('IDEA_INVALID_INPUT', `${flag} needs a value.\n${ADD_USAGE}`);
+        }
+        out[key] = value;
+        i++;
+    }
+    if (out.descriptionStdin && out.description !== undefined) {
+        throw new IdeaError('IDEA_INVALID_INPUT', `--description and ${STDIN_FLAG} cannot be combined.\n${ADD_USAGE}`);
+    }
+    if (out.title === undefined || (out.description === undefined && !out.descriptionStdin)) {
+        throw new IdeaError('IDEA_INVALID_INPUT', `--title and --description (or ${STDIN_FLAG}) are required.\n${ADD_USAGE}`);
+    }
+    return out;
+}
+/**
+ * Read all of `input` as UTF-8, byte for byte (no trimming, BOM kept). Refuses
+ * more than STDIN_MAX_BYTES, invalid UTF-8 and a read error; nothing is
+ * interpreted. A terminal is refused instead of waiting for typed input.
+ */
+export async function readStdinText(input = process.stdin) {
+    if (input.isTTY) {
+        throw new IdeaError('IDEA_INVALID_INPUT', `${STDIN_FLAG} needs piped input, but stdin is a terminal.\n${ADD_USAGE}`);
+    }
+    const chunks = [];
+    let total = 0;
+    try {
+        for await (const chunk of input) {
+            const buf = typeof chunk === 'string' ? Buffer.from(chunk, 'utf8') : chunk;
+            total += buf.length;
+            if (total > STDIN_MAX_BYTES) {
+                input.destroy();
+                throw new IdeaError('IDEA_INVALID_INPUT', `stdin is too large (more than ${STDIN_MAX_BYTES} bytes); nothing was written.`);
+            }
+            chunks.push(buf);
+        }
+    }
+    catch (err) {
+        if (err instanceof IdeaError)
+            throw err;
+        throw new IdeaError('IDEA_INVALID_INPUT', `could not read stdin: ${err.message}; nothing was written.`, { cause: err });
+    }
+    try {
+        return new TextDecoder('utf-8', { fatal: true, ignoreBOM: true }).decode(Buffer.concat(chunks));
+    }
+    catch (err) {
+        throw new IdeaError('IDEA_INVALID_INPUT', 'stdin is not valid UTF-8; nothing was written.', { cause: err });
+    }
+}
+export async function runIdeaAdd(args, targetDir = process.cwd(), stdin = process.stdin) {
+    const flags = parseAddArgs(args);
+    const description = flags.descriptionStdin ? await readStdinText(stdin) : flags.description;
+    const store = ideaStore(targetDir);
+    const { idea, path } = addIdea(store, { title: flags.title, description, context: flags.context }, { onWarning: (w) => reportWriteWarning(w) });
+    console.log(`Saved ${idea.id} [${idea.status}]: ${printable(idea.title)}`);
+    console.log(`  file: ${path}`);
+    console.log('Current task and focus are unchanged. Recall with `monolith idea list` / `monolith idea show ' + idea.id + '`.');
+}
+export async function runIdeaList(args, targetDir = process.cwd()) {
+    if (args.length > 0)
+        throw new IdeaError('IDEA_INVALID_INPUT', `Unexpected argument ${JSON.stringify(printable(args[0]))}.\n${LIST_USAGE}`);
+    const entries = listIdeas(ideaStore(targetDir));
+    if (entries.length === 0) {
+        console.log('No ideas. Capture one with `monolith idea add --title "..." --description "..."`.');
+        return;
+    }
+    console.log(`Ideas (${entries.length}):`);
+    let unreadable = 0;
+    for (const e of entries) {
+        if (e.ok) {
+            console.log(`  ${e.idea.id}  [${e.idea.status}]  ${printable(e.idea.title)}`);
+        }
+        else {
+            unreadable++;
+            console.log(`  ${e.id}  [unreadable]  ${printable(e.reason)}`);
+        }
+    }
+    if (unreadable > 0) {
+        console.error(`${unreadable} idea file(s) could not be read; they were left untouched. Inspect them with \`monolith idea show <id>\`.`);
+        process.exitCode = 2;
+    }
+}
+function formatIdea(i) {
+    const lines = [
+        `  id:         ${i.id}`,
+        `  title:      ${printable(i.title)}`,
+        `  status:     ${i.status}`,
+        `  createdAt:  ${i.createdAt}`,
+    ];
+    if (i.tags !== undefined && i.tags.length > 0)
+        lines.push(`  tags:       ${i.tags.map(printable).join(', ')}`);
+    lines.push('  context:    ' + (i.context === undefined ? '(none)' : ''));
+    if (i.context !== undefined)
+        lines.push(...i.context.split('\n').map((l) => `    ${l}`));
+    lines.push('  description:');
+    lines.push(...i.description.split('\n').map((l) => `    ${l}`));
+    return lines.join('\n');
+}
+export async function runIdeaShow(args, targetDir = process.cwd()) {
+    if (args.length !== 1)
+        throw new IdeaError('IDEA_INVALID_INPUT', SHOW_USAGE);
+    console.log(formatIdea(getIdea(ideaStore(targetDir), args[0])));
+}
+/** Dispatcher used by the CLI entrypoint. */
+export async function runIdeaCommand(args, targetDir = process.cwd()) {
+    const [sub, ...rest] = args;
+    switch (sub) {
+        case 'add':
+            return runIdeaAdd(rest, targetDir);
+        case 'list':
+            return runIdeaList(rest, targetDir);
+        case 'show':
+            return runIdeaShow(rest, targetDir);
+        default:
+            throw new IdeaError('IDEA_INVALID_INPUT', `Unknown idea subcommand: ${sub === undefined ? '(none)' : JSON.stringify(printable(sub))}\n${ADD_USAGE}\n       ${LIST_USAGE.slice(7)}\n       ${SHOW_USAGE.slice(7)}`);
+    }
+}

package/dist/ideas/format.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Idea file format: Markdown with a small frontmatter block.
+ *
+ *   ---
+ *   type: idea
+ *   id: "IDEA-001"
+ *   title: "..."            (JSON string: any character survives a round trip)
+ *   status: inbox
+ *   createdAt: "2026-..."
+ *   context: "..."          (optional)
+ *   tags: ["a", "b"]        (optional)
+ *   ---
+ *
+ *   ## Description
+ *
+ *   <description, verbatim>
+ *
+ * Strings are written as JSON strings, which are also valid YAML double-quoted
+ * scalars, so ERG/Scriptorium read the file too. The reader additionally accepts
+ * a plain unquoted value, because a person edits these files by hand.
+ * The description is the body: no escaping, no trimming.
+ */
+import { type Idea, type NewIdea } from './types.js';
+export declare function isIdeaId(value: string): boolean;
+export declare function ideaNumber(id: string): number;
+export declare function formatIdeaId(n: number): string;
+/** `IDEA-007.md` -> `IDEA-007`; anything else (temp files, other documents) -> null. */
+export declare function ideaIdFromFileName(name: string): string | null;
+export declare function ideaFileName(id: string): string;
+/** Validates user input; returns it unchanged (content is never trimmed or rewritten). */
+export declare function validateNewIdea(input: NewIdea): NewIdea;
+export declare function serializeIdea(idea: Idea): string;
+/**
+ * Parse an idea file. `expectedId` is the id implied by the file name; a
+ * mismatch with the `id:` field is corruption, never silently "fixed".
+ */
+export declare function parseIdea(expectedId: string, text: string): Idea;
+//# sourceMappingURL=format.d.ts.map

package/dist/ideas/format.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"format.d.ts","sourceRoot":"","sources":["../../src/ideas/format.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAyC,KAAK,IAAI,EAAmB,KAAK,OAAO,EAAE,MAAM,YAAY,CAAC;AAS7G,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAE/C;AAED,wBAAgB,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAI7C;AAED,wBAAgB,YAAY,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAE9C;AAED,wFAAwF;AACxF,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAG9D;AAED,wBAAgB,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAG/C;AAaD,0FAA0F;AAC1F,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAmBvD;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM,CAahD;AAqBD;;;GAGG;AACH,wBAAgB,SAAS,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CA0DhE"}