@namzu/sdk 43.0.0 → 44.1.0

package/dist/store/session-log/memory.js

@@ -0,0 +1,78 @@
+import { SessionLogConflictError, SessionLogCore, } from './core.js';
+import { InMemorySessionLeaseStore } from './lease.js';
+import { InMemorySpillStore } from './spill.js';
+/**
+ * A session log held in process: the same bytes, chain, turn rules, lease and
+ * spills as the disk log, so the conformance suite holds both to one
+ * contract. An in-memory session keeps its whole log, lease and spills in
+ * this process and loses them with it.
+ */
+/** A log's bytes in memory. Exposed so a test can tear or corrupt them. */
+export class InMemoryLogMedium {
+    #bytes = Buffer.alloc(0);
+    async size() {
+        return this.#bytes.byteLength;
+    }
+    async read(offset, length) {
+        return Uint8Array.prototype.slice.call(this.#bytes, offset, offset + length);
+    }
+    async *stream(offset) {
+        if (offset < this.#bytes.byteLength) {
+            yield Uint8Array.prototype.slice.call(this.#bytes, offset);
+        }
+    }
+    async append(bytes, expectedOffset) {
+        if (this.#bytes.byteLength !== expectedOffset) {
+            throw new SessionLogConflictError(`The log is ${this.#bytes.byteLength} bytes; this writer verified it at ${expectedOffset}.`);
+        }
+        this.#bytes = Buffer.concat([this.#bytes, bytes]);
+    }
+    async truncate(size, expectedSize) {
+        if (this.#bytes.byteLength !== expectedSize) {
+            throw new SessionLogConflictError(`The log is ${this.#bytes.byteLength} bytes, not the ${expectedSize} measured before repairing its tail.`);
+        }
+        this.#bytes = this.#bytes.subarray(0, size);
+    }
+    /** A copy of the log's bytes. */
+    bytes() {
+        return Buffer.from(this.#bytes);
+    }
+    /** Replace the log's bytes wholesale (tests: tear a tail, flip a byte). */
+    overwrite(bytes) {
+        this.#bytes = Buffer.from(bytes);
+    }
+}
+export class InMemorySessionLog extends SessionLogCore {
+    medium;
+    leaseStore;
+    spillStore;
+    #options;
+    constructor(options) {
+        const medium = options.medium ?? new InMemoryLogMedium();
+        const leases = options.leases ?? new InMemorySessionLeaseStore();
+        const spills = options.spills ?? new InMemorySpillStore();
+        super({
+            sessionId: options.sessionId,
+            medium,
+            leases,
+            spills,
+            now: options.now,
+            spillAboveBytes: options.spillAboveBytes,
+            sync: 'none',
+        });
+        this.medium = medium;
+        this.leaseStore = leases;
+        this.spillStore = spills;
+        this.#options = options;
+    }
+    /** Another instance over the same log, lease and spills: what a second process would open. */
+    reopen() {
+        return new InMemorySessionLog({
+            ...this.#options,
+            medium: this.medium,
+            leases: this.leaseStore,
+            spills: this.spillStore,
+        });
+    }
+}
+//# sourceMappingURL=memory.js.map

package/dist/store/session-log/memory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory.js","sourceRoot":"","sources":["../../../src/store/session-log/memory.ts"],"names":[],"mappings":"AACA,OAAO,EAEN,uBAAuB,EACvB,cAAc,GAEd,MAAM,WAAW,CAAA;AAClB,OAAO,EAAE,yBAAyB,EAA0B,MAAM,YAAY,CAAA;AAC9E,OAAO,EAAE,kBAAkB,EAAmB,MAAM,YAAY,CAAA;AAEhE;;;;;GAKG;AAEH,2EAA2E;AAC3E,MAAM,OAAO,iBAAiB;IAC7B,MAAM,GAAW,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IAEhC,KAAK,CAAC,IAAI;QACT,OAAO,IAAI,CAAC,MAAM,CAAC,UAAU,CAAA;IAC9B,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,MAAc,EAAE,MAAc;QACxC,OAAO,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAAA;IAC7E,CAAC;IAED,KAAK,CAAC,CAAC,MAAM,CAAC,MAAc;QAC3B,IAAI,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YACrC,MAAM,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAC3D,CAAC;IACF,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAiB,EAAE,cAAsB;QACrD,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,KAAK,cAAc,EAAE,CAAC;YAC/C,MAAM,IAAI,uBAAuB,CAChC,cAAc,IAAI,CAAC,MAAM,CAAC,UAAU,sCAAsC,cAAc,GAAG,CAC3F,CAAA;QACF,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAA;IAClD,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,IAAY,EAAE,YAAoB;QAChD,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,KAAK,YAAY,EAAE,CAAC;YAC7C,MAAM,IAAI,uBAAuB,CAChC,cAAc,IAAI,CAAC,MAAM,CAAC,UAAU,mBAAmB,YAAY,sCAAsC,CACzG,CAAA;QACF,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,CAAA;IAC5C,CAAC;IAED,iCAAiC;IACjC,KAAK;QACJ,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IAChC,CAAC;IAED,2EAA2E;IAC3E,SAAS,CAAC,KAAiB;QAC1B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACjC,CAAC;CACD;AAcD,MAAM,OAAO,kBAAmB,SAAQ,cAAc;IAC5C,MAAM,CAAmB;IACzB,UAAU,CAAmB;IAC7B,UAAU,CAAY;IACtB,QAAQ,CAA2B;IAE5C,YAAY,OAAkC;QAC7C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,IAAI,iBAAiB,EAAE,CAAA;QACxD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,IAAI,yBAAyB,EAAE,CAAA;QAChE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,IAAI,kBAAkB,EAAE,CAAA;QACzD,KAAK,CAAC;YACL,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,MAAM;YACN,MAAM;YACN,MAAM;YACN,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,eAAe,EAAE,OAAO,CAAC,eAAe;YACxC,IAAI,EAAE,MAAM;SACZ,CAAC,CAAA;QACF,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QACpB,IAAI,CAAC,UAAU,GAAG,MAAM,CAAA;QACxB,IAAI,CAAC,UAAU,GAAG,MAAM,CAAA;QACxB,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAA;IACxB,CAAC;IAED,8FAA8F;IAC9F,MAAM;QACL,OAAO,IAAI,kBAAkB,CAAC;YAC7B,GAAG,IAAI,CAAC,QAAQ;YAChB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,MAAM,EAAE,IAAI,CAAC,UAAU;YACvB,MAAM,EAAE,IAAI,CAAC,UAAU;SACvB,CAAC,CAAA;IACH,CAAC;CACD"}

package/dist/store/session-log/spill.d.ts

@@ -0,0 +1,109 @@
+/**
+ * Content too large for one record, written beside the log before the record
+ * that names it.
+ *
+ * A record is capped at `SESSION_RECORD_MAX_BYTES`. A body above the cap goes
+ * to `<session-id>/tool-results/<name>.txt`, with a manifest at
+ * `<name>.txt.manifest.json`, and the record carries a {@link SpillRef}: both
+ * paths relative to the session directory, the body's byte length and its
+ * SHA-256.
+ *
+ * ## Ordering
+ *
+ * The body is written to a private temporary name, fsynced, and published by
+ * `link` (which refuses to replace an existing name); the manifest the same
+ * way; then the directory is fsynced. Only after all of that does the caller
+ * append the record. So a record never exists without its spill: a crash
+ * before the append leaves an unreferenced spill, which costs space and
+ * nothing else; a crash after it leaves a record whose spill is already on
+ * stable storage.
+ *
+ * ## No clobbering
+ *
+ * A spill name is derived from a stable key (a tool call id, a message id),
+ * so two writes can name the same file. `link` makes the first one win. A
+ * second write with the same bytes adopts the existing file; one with
+ * different bytes is refused, because replacing the file would silently
+ * change what an earlier record's hash vouches for.
+ *
+ * The durable-write helpers below are copied from `utils/atomic-write.ts`
+ * (the fsync-then-rename ordering, the directory fsync, the per-attempt
+ * temporary name), so this module does not depend on a file the cutover
+ * rewrites.
+ */
+/** The spill as a record names it. Paths are relative to the session directory. */
+export interface SpillRef {
+    readonly path: string;
+    readonly manifest: string;
+    readonly bytes: number;
+    readonly sha256: string;
+}
+/** The manifest written beside a spilled body. */
+export interface SpillManifest {
+    readonly v: 1;
+    readonly kind: 'spill';
+    /** What the body holds: a serialised message, a compaction summary, or plain text. */
+    readonly content: 'message' | 'messages' | 'text';
+    /** The key the name was derived from (a tool call id or a message id). */
+    readonly key: string;
+    readonly bytes: number;
+    readonly sha256: string;
+    readonly createdAt: string;
+}
+/** The directory, inside a session directory, that holds spills. */
+export declare const SPILL_DIR = "tool-results";
+/** A spill that is missing, a different length, or a different hash than its record says. */
+export declare class SpillIntegrityError extends Error {
+    readonly path: string;
+    readonly name = "SpillIntegrityError";
+    constructor(path: string, message: string, options?: ErrorOptions);
+}
+export declare function sha256Hex(value: string | Uint8Array): string;
+/** The file name a key spills to: `<sha256(key)>.txt`, the same rule as `SessionPaths.toolResultFile`. */
+export declare function spillFileName(key: string): string;
+/** A sidecar name private to one write: pid, a counter and random bytes. */
+export declare function temporaryPathFor(filePath: string): string;
+/**
+ * Make the entries of `directory` survive a power loss. Throws on POSIX when
+ * the sync fails; does nothing on Windows, where a directory cannot be opened
+ * for fsync and NTFS journals its metadata.
+ */
+export declare function syncDirectory(directory: string): Promise<void>;
+/** Rename, retrying briefly while Windows reports the target contended. */
+export declare function renameWithRetry(from: string, to: string): Promise<void>;
+/**
+ * Write `content` to a private temporary file and fsync it. The caller
+ * publishes it (rename or link) and removes it on failure.
+ */
+export declare function writeSyncedTemporary(target: string, content: string): Promise<string>;
+/**
+ * Publish `content` at `target` atomically and durably, replacing whatever is
+ * there: fsynced body, rename, fsynced directory.
+ */
+export declare function durableReplaceFile(target: string, content: string): Promise<void>;
+/** Where spills are kept. The disk log uses files; the in-memory log a map. */
+export interface SpillStore {
+    write(key: string, content: SpillManifest['content'], text: string): Promise<SpillRef>;
+    read(ref: SpillRef): Promise<string>;
+}
+/**
+ * Spills on disk, under `<sessionDir>/tool-results/`.
+ *
+ * `write` resolves only once the body, the manifest and the directory entries
+ * naming them are fsynced, which is what lets the caller append the record
+ * next.
+ */
+export declare class DiskSpillStore implements SpillStore {
+    readonly sessionDir: string;
+    private readonly now;
+    constructor(sessionDir: string, now?: () => number);
+    write(key: string, content: SpillManifest['content'], text: string): Promise<SpillRef>;
+    read(ref: SpillRef): Promise<string>;
+}
+/** Spills held in process, for `InMemorySessionLog`. Same naming and checks as the disk store. */
+export declare class InMemorySpillStore implements SpillStore {
+    #private;
+    write(key: string, _content: SpillManifest['content'], text: string): Promise<SpillRef>;
+    read(ref: SpillRef): Promise<string>;
+}
+//# sourceMappingURL=spill.d.ts.map

package/dist/store/session-log/spill.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"spill.d.ts","sourceRoot":"","sources":["../../../src/store/session-log/spill.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,mFAAmF;AACnF,MAAM,WAAW,QAAQ;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CACvB;AAED,kDAAkD;AAClD,MAAM,WAAW,aAAa;IAC7B,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAA;IACb,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;IACtB,sFAAsF;IACtF,QAAQ,CAAC,OAAO,EAAE,SAAS,GAAG,UAAU,GAAG,MAAM,CAAA;IACjD,0EAA0E;IAC1E,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC1B;AAED,oEAAoE;AACpE,eAAO,MAAM,SAAS,iBAAiB,CAAA;AAEvC,6FAA6F;AAC7F,qBAAa,mBAAoB,SAAQ,KAAK;IAG5C,QAAQ,CAAC,IAAI,EAAE,MAAM;IAFtB,SAAkB,IAAI,yBAAwB;gBAEpC,IAAI,EAAE,MAAM,EACrB,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,YAAY;CAIvB;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,GAAG,MAAM,CAE5D;AAED,0GAA0G;AAC1G,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAGjD;AAMD,4EAA4E;AAC5E,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAGzD;AAED;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAQpE;AAKD,2EAA2E;AAC3E,wBAAsB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAW7E;AAED;;;GAGG;AACH,wBAAsB,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAe3F;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CASvF;AAsBD,+EAA+E;AAC/E,MAAM,WAAW,UAAU;IAC1B,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IACtF,IAAI,CAAC,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;CACpC;AA2BD;;;;;;GAMG;AACH,qBAAa,cAAe,YAAW,UAAU;IAE/C,QAAQ,CAAC,UAAU,EAAE,MAAM;IAC3B,OAAO,CAAC,QAAQ,CAAC,GAAG;gBADX,UAAU,EAAE,MAAM,EACV,GAAG,GAAE,MAAM,MAAiB;IAGxC,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IAsCtF,IAAI,CAAC,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC;CAc1C;AAED,kGAAkG;AAClG,qBAAa,kBAAmB,YAAW,UAAU;;IAG9C,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IAmBvF,IAAI,CAAC,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC;CAO1C"}

package/dist/store/session-log/spill.js

@@ -0,0 +1,223 @@
+import { createHash, randomBytes } from 'node:crypto';
+import { link, mkdir, open, readFile, rename, unlink } from 'node:fs/promises';
+import { dirname, isAbsolute, join, normalize, sep } from 'node:path';
+/** The directory, inside a session directory, that holds spills. */
+export const SPILL_DIR = 'tool-results';
+/** A spill that is missing, a different length, or a different hash than its record says. */
+export class SpillIntegrityError extends Error {
+    path;
+    name = 'SpillIntegrityError';
+    constructor(path, message, options) {
+        super(message, options);
+        this.path = path;
+    }
+}
+export function sha256Hex(value) {
+    return createHash('sha256').update(value).digest('hex');
+}
+/** The file name a key spills to: `<sha256(key)>.txt`, the same rule as `SessionPaths.toolResultFile`. */
+export function spillFileName(key) {
+    if (key.length === 0)
+        throw new Error('A spill key is required.');
+    return `${sha256Hex(key)}.txt`;
+}
+// ─── durable-write helpers (copied from utils/atomic-write.ts) ────────────
+let counter = 0;
+/** A sidecar name private to one write: pid, a counter and random bytes. */
+export function temporaryPathFor(filePath) {
+    counter = (counter + 1) % Number.MAX_SAFE_INTEGER;
+    return `${filePath}.${process.pid}.${counter}.${randomBytes(4).toString('hex')}.tmp`;
+}
+/**
+ * Make the entries of `directory` survive a power loss. Throws on POSIX when
+ * the sync fails; does nothing on Windows, where a directory cannot be opened
+ * for fsync and NTFS journals its metadata.
+ */
+export async function syncDirectory(directory) {
+    if (process.platform === 'win32')
+        return;
+    const handle = await open(directory, 'r');
+    try {
+        await handle.sync();
+    }
+    finally {
+        await handle.close();
+    }
+}
+const CONTENDED = new Set(['EPERM', 'EACCES', 'EBUSY']);
+const RENAME_ATTEMPTS = 5;
+/** Rename, retrying briefly while Windows reports the target contended. */
+export async function renameWithRetry(from, to) {
+    for (let attempt = 1;; attempt++) {
+        try {
+            await rename(from, to);
+            return;
+        }
+        catch (err) {
+            const code = err.code ?? '';
+            if (!CONTENDED.has(code) || attempt >= RENAME_ATTEMPTS)
+                throw err;
+            await new Promise((resolve) => setTimeout(resolve, attempt));
+        }
+    }
+}
+/**
+ * Write `content` to a private temporary file and fsync it. The caller
+ * publishes it (rename or link) and removes it on failure.
+ */
+export async function writeSyncedTemporary(target, content) {
+    const temporary = temporaryPathFor(target);
+    let handle;
+    try {
+        handle = await open(temporary, 'wx', 0o600);
+        await handle.writeFile(content, 'utf-8');
+        await handle.sync();
+        await handle.close();
+        handle = undefined;
+        return temporary;
+    }
+    catch (err) {
+        await handle?.close().catch(() => undefined);
+        await unlink(temporary).catch(() => undefined);
+        throw err;
+    }
+}
+/**
+ * Publish `content` at `target` atomically and durably, replacing whatever is
+ * there: fsynced body, rename, fsynced directory.
+ */
+export async function durableReplaceFile(target, content) {
+    const temporary = await writeSyncedTemporary(target, content);
+    try {
+        await renameWithRetry(temporary, target);
+    }
+    catch (err) {
+        await unlink(temporary).catch(() => undefined);
+        throw err;
+    }
+    await syncDirectory(dirname(target));
+}
+/**
+ * Publish `content` at `target` only if nothing is there. Returns `false`
+ * when the name already exists (the caller decides whether that is a reuse
+ * or a conflict); the file that is there is untouched.
+ */
+async function durableCreateFile(target, content) {
+    const temporary = await writeSyncedTemporary(target, content);
+    try {
+        await link(temporary, target);
+        return true;
+    }
+    catch (err) {
+        if (err.code === 'EEXIST')
+            return false;
+        throw err;
+    }
+    finally {
+        await unlink(temporary).catch(() => undefined);
+    }
+}
+function checkRelative(path) {
+    const normal = normalize(path);
+    if (isAbsolute(normal) || normal.startsWith('..') || !normal.startsWith(`${SPILL_DIR}${sep}`)) {
+        throw new SpillIntegrityError(path, `A spill path must stay inside ${SPILL_DIR}/: ${path}`);
+    }
+    return normal;
+}
+function verify(ref, text) {
+    const bytes = Buffer.byteLength(text, 'utf8');
+    if (bytes !== ref.bytes) {
+        throw new SpillIntegrityError(ref.path, `Spill ${ref.path} is ${bytes} bytes; its record says ${ref.bytes}. Refusing rather than reading content the log cannot vouch for.`);
+    }
+    if (sha256Hex(text) !== ref.sha256) {
+        throw new SpillIntegrityError(ref.path, `Spill ${ref.path} does not match the SHA-256 its record carries. Refusing rather than reading content the log cannot vouch for.`);
+    }
+    return text;
+}
+/**
+ * Spills on disk, under `<sessionDir>/tool-results/`.
+ *
+ * `write` resolves only once the body, the manifest and the directory entries
+ * naming them are fsynced, which is what lets the caller append the record
+ * next.
+ */
+export class DiskSpillStore {
+    sessionDir;
+    now;
+    constructor(sessionDir, now = Date.now) {
+        this.sessionDir = sessionDir;
+        this.now = now;
+    }
+    async write(key, content, text) {
+        const dir = join(this.sessionDir, SPILL_DIR);
+        await mkdir(dir, { recursive: true });
+        const name = spillFileName(key);
+        const ref = {
+            path: `${SPILL_DIR}/${name}`,
+            manifest: `${SPILL_DIR}/${name}.manifest.json`,
+            bytes: Buffer.byteLength(text, 'utf8'),
+            sha256: sha256Hex(text),
+        };
+        const body = join(dir, name);
+        if (!(await durableCreateFile(body, text))) {
+            // Adopt an identical earlier spill; refuse to replace a different one.
+            const existing = await readFile(body, 'utf8');
+            if (sha256Hex(existing) !== ref.sha256) {
+                throw new SpillIntegrityError(ref.path, `Spill ${ref.path} already exists with different content. Refusing to replace it: an earlier record's hash vouches for the bytes that are there.`);
+            }
+        }
+        const manifest = {
+            v: 1,
+            kind: 'spill',
+            content,
+            key,
+            bytes: ref.bytes,
+            sha256: ref.sha256,
+            createdAt: new Date(this.now()).toISOString(),
+        };
+        // A manifest that already exists describes the same bytes (the body
+        // check above established that), so it is kept as it is.
+        await durableCreateFile(join(dir, `${name}.manifest.json`), `${JSON.stringify(manifest)}\n`);
+        // The links that name both files, before any record points at them.
+        await syncDirectory(dir);
+        return ref;
+    }
+    async read(ref) {
+        const path = join(this.sessionDir, checkRelative(ref.path));
+        let text;
+        try {
+            text = await readFile(path, 'utf8');
+        }
+        catch (error) {
+            throw new SpillIntegrityError(ref.path, `Spill ${ref.path} cannot be read (${error.code ?? 'error'}). Refusing rather than folding a message the log cannot vouch for.`, { cause: error });
+        }
+        return verify(ref, text);
+    }
+}
+/** Spills held in process, for `InMemorySessionLog`. Same naming and checks as the disk store. */
+export class InMemorySpillStore {
+    #files = new Map();
+    async write(key, _content, text) {
+        const name = spillFileName(key);
+        const ref = {
+            path: `${SPILL_DIR}/${name}`,
+            manifest: `${SPILL_DIR}/${name}.manifest.json`,
+            bytes: Buffer.byteLength(text, 'utf8'),
+            sha256: sha256Hex(text),
+        };
+        const existing = this.#files.get(ref.path);
+        if (existing !== undefined && sha256Hex(existing) !== ref.sha256) {
+            throw new SpillIntegrityError(ref.path, `Spill ${ref.path} already exists with different content. Refusing to replace it: an earlier record's hash vouches for the bytes that are there.`);
+        }
+        this.#files.set(ref.path, text);
+        return ref;
+    }
+    async read(ref) {
+        const text = this.#files.get(checkRelative(ref.path).split(sep).join('/'));
+        if (text === undefined) {
+            throw new SpillIntegrityError(ref.path, `Spill ${ref.path} does not exist.`);
+        }
+        return verify(ref, text);
+    }
+}
+//# sourceMappingURL=spill.js.map

package/dist/store/session-log/spill.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"spill.js","sourceRoot":"","sources":["../../../src/store/session-log/spill.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACrD,OAAO,EAAmB,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AAC/F,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,WAAW,CAAA;AAyDrE,oEAAoE;AACpE,MAAM,CAAC,MAAM,SAAS,GAAG,cAAc,CAAA;AAEvC,6FAA6F;AAC7F,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAGnC;IAFQ,IAAI,GAAG,qBAAqB,CAAA;IAC9C,YACU,IAAY,EACrB,OAAe,EACf,OAAsB;QAEtB,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QAJd,SAAI,GAAJ,IAAI,CAAQ;IAKtB,CAAC;CACD;AAED,MAAM,UAAU,SAAS,CAAC,KAA0B;IACnD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACxD,CAAC;AAED,0GAA0G;AAC1G,MAAM,UAAU,aAAa,CAAC,GAAW;IACxC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAA;IACjE,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,MAAM,CAAA;AAC/B,CAAC;AAED,6EAA6E;AAE7E,IAAI,OAAO,GAAG,CAAC,CAAA;AAEf,4EAA4E;AAC5E,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAChD,OAAO,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,gBAAgB,CAAA;IACjD,OAAO,GAAG,QAAQ,IAAI,OAAO,CAAC,GAAG,IAAI,OAAO,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAA;AACrF,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,SAAiB;IACpD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAM;IACxC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,CAAA;IACzC,IAAI,CAAC;QACJ,MAAM,MAAM,CAAC,IAAI,EAAE,CAAA;IACpB,CAAC;YAAS,CAAC;QACV,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;IACrB,CAAC;AACF,CAAC;AAED,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAA;AACvD,MAAM,eAAe,GAAG,CAAC,CAAA;AAEzB,2EAA2E;AAC3E,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAY,EAAE,EAAU;IAC7D,KAAK,IAAI,OAAO,GAAG,CAAC,GAAI,OAAO,EAAE,EAAE,CAAC;QACnC,IAAI,CAAC;YACJ,MAAM,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;YACtB,OAAM;QACP,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,MAAM,IAAI,GAAI,GAA6B,CAAC,IAAI,IAAI,EAAE,CAAA;YACtD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,OAAO,IAAI,eAAe;gBAAE,MAAM,GAAG,CAAA;YACjE,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAA;QAC7D,CAAC;IACF,CAAC;AACF,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,MAAc,EAAE,OAAe;IACzE,MAAM,SAAS,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAA;IAC1C,IAAI,MAA8B,CAAA;IAClC,IAAI,CAAC;QACJ,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,CAAA;QAC3C,MAAM,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QACxC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAA;QACnB,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;QACpB,MAAM,GAAG,SAAS,CAAA;QAClB,OAAO,SAAS,CAAA;IACjB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,MAAM,MAAM,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QAC5C,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QAC9C,MAAM,GAAG,CAAA;IACV,CAAC;AACF,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,MAAc,EAAE,OAAe;IACvE,MAAM,SAAS,GAAG,MAAM,oBAAoB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC7D,IAAI,CAAC;QACJ,MAAM,eAAe,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;IACzC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QAC9C,MAAM,GAAG,CAAA;IACV,CAAC;IACD,MAAM,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAA;AACrC,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,iBAAiB,CAAC,MAAc,EAAE,OAAe;IAC/D,MAAM,SAAS,GAAG,MAAM,oBAAoB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC7D,IAAI,CAAC;QACJ,MAAM,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;QAC7B,OAAO,IAAI,CAAA;IACZ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAA;QAClE,MAAM,GAAG,CAAA;IACV,CAAC;YAAS,CAAC;QACV,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;IAC/C,CAAC;AACF,CAAC;AAUD,SAAS,aAAa,CAAC,IAAY;IAClC,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAA;IAC9B,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,SAAS,GAAG,GAAG,EAAE,CAAC,EAAE,CAAC;QAC/F,MAAM,IAAI,mBAAmB,CAAC,IAAI,EAAE,iCAAiC,SAAS,MAAM,IAAI,EAAE,CAAC,CAAA;IAC5F,CAAC;IACD,OAAO,MAAM,CAAA;AACd,CAAC;AAED,SAAS,MAAM,CAAC,GAAa,EAAE,IAAY;IAC1C,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IAC7C,IAAI,KAAK,KAAK,GAAG,CAAC,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,mBAAmB,CAC5B,GAAG,CAAC,IAAI,EACR,SAAS,GAAG,CAAC,IAAI,OAAO,KAAK,2BAA2B,GAAG,CAAC,KAAK,kEAAkE,CACnI,CAAA;IACF,CAAC;IACD,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC;QACpC,MAAM,IAAI,mBAAmB,CAC5B,GAAG,CAAC,IAAI,EACR,SAAS,GAAG,CAAC,IAAI,gHAAgH,CACjI,CAAA;IACF,CAAC;IACD,OAAO,IAAI,CAAA;AACZ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,OAAO,cAAc;IAEhB;IACQ;IAFlB,YACU,UAAkB,EACV,MAAoB,IAAI,CAAC,GAAG;QADpC,eAAU,GAAV,UAAU,CAAQ;QACV,QAAG,GAAH,GAAG,CAAyB;IAC3C,CAAC;IAEJ,KAAK,CAAC,KAAK,CAAC,GAAW,EAAE,OAAiC,EAAE,IAAY;QACvE,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAA;QAC5C,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACrC,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,CAAA;QAC/B,MAAM,GAAG,GAAa;YACrB,IAAI,EAAE,GAAG,SAAS,IAAI,IAAI,EAAE;YAC5B,QAAQ,EAAE,GAAG,SAAS,IAAI,IAAI,gBAAgB;YAC9C,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC;YACtC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC;SACvB,CAAA;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;QAC5B,IAAI,CAAC,CAAC,MAAM,iBAAiB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;YAC5C,uEAAuE;YACvE,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;YAC7C,IAAI,SAAS,CAAC,QAAQ,CAAC,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC;gBACxC,MAAM,IAAI,mBAAmB,CAC5B,GAAG,CAAC,IAAI,EACR,SAAS,GAAG,CAAC,IAAI,gIAAgI,CACjJ,CAAA;YACF,CAAC;QACF,CAAC;QACD,MAAM,QAAQ,GAAkB;YAC/B,CAAC,EAAE,CAAC;YACJ,IAAI,EAAE,OAAO;YACb,OAAO;YACP,GAAG;YACH,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE;SAC7C,CAAA;QACD,oEAAoE;QACpE,yDAAyD;QACzD,MAAM,iBAAiB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,gBAAgB,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;QAC5F,oEAAoE;QACpE,MAAM,aAAa,CAAC,GAAG,CAAC,CAAA;QACxB,OAAO,GAAG,CAAA;IACX,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,GAAa;QACvB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAA;QAC3D,IAAI,IAAY,CAAA;QAChB,IAAI,CAAC;YACJ,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;QACpC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,IAAI,mBAAmB,CAC5B,GAAG,CAAC,IAAI,EACR,SAAS,GAAG,CAAC,IAAI,oBAAqB,KAA+B,CAAC,IAAI,IAAI,OAAO,qEAAqE,EAC1J,EAAE,KAAK,EAAE,KAAK,EAAE,CAChB,CAAA;QACF,CAAC;QACD,OAAO,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;IACzB,CAAC;CACD;AAED,kGAAkG;AAClG,MAAM,OAAO,kBAAkB;IACrB,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAA;IAE3C,KAAK,CAAC,KAAK,CAAC,GAAW,EAAE,QAAkC,EAAE,IAAY;QACxE,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,CAAA;QAC/B,MAAM,GAAG,GAAa;YACrB,IAAI,EAAE,GAAG,SAAS,IAAI,IAAI,EAAE;YAC5B,QAAQ,EAAE,GAAG,SAAS,IAAI,IAAI,gBAAgB;YAC9C,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC;YACtC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC;SACvB,CAAA;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAC1C,IAAI,QAAQ,KAAK,SAAS,IAAI,SAAS,CAAC,QAAQ,CAAC,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC;YAClE,MAAM,IAAI,mBAAmB,CAC5B,GAAG,CAAC,IAAI,EACR,SAAS,GAAG,CAAC,IAAI,gIAAgI,CACjJ,CAAA;QACF,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;QAC/B,OAAO,GAAG,CAAA;IACX,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,GAAa;QACvB,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;QAC1E,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,mBAAmB,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,GAAG,CAAC,IAAI,kBAAkB,CAAC,CAAA;QAC7E,CAAC;QACD,OAAO,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;IACzB,CAAC;CACD"}

package/dist/store/task/context.d.ts

@@ -0,0 +1,25 @@
+import type { TurnId } from '../../types/ids/index.js';
+import { type Task } from '../../types/task/index.js';
+/** The turn a task view is drawn for. */
+export interface TaskContextScope {
+    /** The turn being run. */
+    readonly turnId: TurnId;
+    /**
+     * When that turn started (epoch milliseconds). A resumed turn keeps the
+     * time it first started, so a task it closed before parking still counts.
+     */
+    readonly turnStartedAt: number;
+}
+/**
+ * The tasks a turn is shown (spec §4.5): every open task, whichever turn
+ * created it, and the tasks closed during this turn. A task closed in an
+ * earlier turn is left out — the list is durable per session, and without
+ * this every finished item of every earlier turn would be re-read into each
+ * new one.
+ *
+ * A task counts as closed in this turn when it reached a terminal status at
+ * or after `turnStartedAt`, or when this turn created it (it cannot have
+ * closed before it existed). Order is kept.
+ */
+export declare function selectTaskContext(tasks: readonly Task[], scope: TaskContextScope): Task[];
+//# sourceMappingURL=context.d.ts.map

package/dist/store/task/context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../../src/store/task/context.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAA;AACtD,OAAO,EAAE,KAAK,IAAI,EAAwB,MAAM,2BAA2B,CAAA;AAE3E,yCAAyC;AACzC,MAAM,WAAW,gBAAgB;IAChC,0BAA0B;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB;;;OAGG;IACH,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;CAC9B;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,SAAS,IAAI,EAAE,EAAE,KAAK,EAAE,gBAAgB,GAAG,IAAI,EAAE,CAOzF"}

package/dist/store/task/context.js

@@ -0,0 +1,18 @@
+import { isTerminalTaskStatus } from '../../types/task/index.js';
+/**
+ * The tasks a turn is shown (spec §4.5): every open task, whichever turn
+ * created it, and the tasks closed during this turn. A task closed in an
+ * earlier turn is left out — the list is durable per session, and without
+ * this every finished item of every earlier turn would be re-read into each
+ * new one.
+ *
+ * A task counts as closed in this turn when it reached a terminal status at
+ * or after `turnStartedAt`, or when this turn created it (it cannot have
+ * closed before it existed). Order is kept.
+ */
+export function selectTaskContext(tasks, scope) {
+    return tasks.filter((task) => !isTerminalTaskStatus(task.status) ||
+        task.turnId === scope.turnId ||
+        (task.completedAt !== undefined && task.completedAt >= scope.turnStartedAt));
+}
+//# sourceMappingURL=context.js.map

package/dist/store/task/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../../../src/store/task/context.ts"],"names":[],"mappings":"AACA,OAAO,EAAa,oBAAoB,EAAE,MAAM,2BAA2B,CAAA;AAa3E;;;;;;;;;;GAUG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAsB,EAAE,KAAuB;IAChF,OAAO,KAAK,CAAC,MAAM,CAClB,CAAC,IAAI,EAAE,EAAE,CACR,CAAC,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC;QAClC,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAC5B,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS,IAAI,IAAI,CAAC,WAAW,IAAI,KAAK,CAAC,aAAa,CAAC,CAC5E,CAAA;AACF,CAAC"}

package/dist/store/task/disk.d.ts

@@ -1,20 +1,37 @@
-import type { RunId, TaskId, TenantId } from '../../types/ids/index.js';
+import type { SessionLocator, SessionPaths } from '../../session/paths.js';
+import type { SessionId, TaskId, TenantId } from '../../types/ids/index.js';
 import type { CreateTaskParams, Task, TaskEventListener, TaskStatus, TaskStore, UpdateTaskParams } from '../../types/task/index.js';
 import { type Logger } from '../../utils/logger.js';
 export interface DiskTaskStoreConfig {
-    baseDir: string;
-    defaultRunId: RunId;
+    /** The project layout the session lives in. */
+    paths: SessionPaths;
+    /**
+     * The session whose tasks this store keeps, at `<session-id>/tasks/`.
+     * A child session names its ancestors, root first, as everywhere else in
+     * the layout.
+     */
+    session: SessionLocator;
+    /** Stamped on a task whose creator names no tenant. */
     tenantId?: TenantId;
     logger?: Logger;
 }
+/** A task was addressed to a session other than the one this store keeps. */
+export declare class TaskSessionMismatchError extends Error {
+    readonly name = "TaskSessionMismatchError";
+    readonly expected: SessionId;
+    readonly actual: SessionId;
+    constructor(expected: SessionId, actual: SessionId);
+}
 export declare class DiskTaskStore implements TaskStore {
-    private baseDir;
-    private defaultRunId;
-    private tenantId?;
+    private readonly paths;
+    private readonly session;
+    private readonly tenantId?;
     private log;
     private listeners;
     private locks;
     constructor(config: DiskTaskStoreConfig);
+    /** The session this store keeps the tasks of. */
+    get sessionId(): SessionId;
     private taskDir;
     private taskPath;
     private withLock;
@@ -30,33 +47,19 @@ export declare class DiskTaskStore implements TaskStore {
     get(id: TaskId): Promise<Task | undefined>;
     update(id: TaskId, updates: UpdateTaskParams): Promise<Task | undefined>;
     delete(id: TaskId): Promise<boolean>;
+    /**
+     * Every task of this store's session, oldest first. A `sessionId` filter
+     * naming a different session lists nothing: that session's tasks are in
+     * its own directory, not here.
+     */
     list(filter?: {
         status?: TaskStatus;
         owner?: string;
-        runId?: RunId;
+        sessionId?: SessionId;
     }): Promise<Task[]>;
     claim(id: TaskId, owner: string): Promise<Task | undefined>;
     block(blockerId: TaskId, blockedId: TaskId): Promise<void>;
     reset(): Promise<void>;
     private readTask;
-    /**
-     * Locate a task by id, whichever run wrote it.
-     *
-     * A task is written under `params.runId ?? defaultRunId` and this read
-     * only the default, so every lookup missed as soon as the two differed
-     * — the normal case rather than an edge one: the task tools are built
-     * with the LIVE run id while a long-lived host constructs the store
-     * once with a fixed default. `create` then succeeded, `list` succeeded
-     * (it takes the run id as a filter), and `update`, `delete`, `claim`
-     * and every dependency link answered "not found" for a task the caller
-     * could see. The in-memory store keys by task id alone, so nothing
-     * caught it.
-     *
-     * The default is tried first because it is right whenever the two
-     * agree, which keeps the common path one stat rather than a scan.
-     */
-    private findTask;
-    /** Run directories that exist on disk, or none when the tree is absent. */
-    private knownRunIds;
 }
 //# sourceMappingURL=disk.d.ts.map

package/dist/store/task/disk.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"disk.d.ts","sourceRoot":"","sources":["../../../src/store/task/disk.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAA;AACvE,OAAO,KAAK,EACX,gBAAgB,EAChB,IAAI,EAEJ,iBAAiB,EACjB,UAAU,EACV,SAAS,EACT,gBAAgB,EAChB,MAAM,2BAA2B,CAAA;AAGlC,OAAO,EAAE,KAAK,MAAM,EAAiB,MAAM,uBAAuB,CAAA;AAgClE,MAAM,WAAW,mBAAmB;IACnC,OAAO,EAAE,MAAM,CAAA;IAEf,YAAY,EAAE,KAAK,CAAA;IAEnB,QAAQ,CAAC,EAAE,QAAQ,CAAA;IAEnB,MAAM,CAAC,EAAE,MAAM,CAAA;CACf;AAkBD,qBAAa,aAAc,YAAW,SAAS;IAC9C,OAAO,CAAC,OAAO,CAAQ;IACvB,OAAO,CAAC,YAAY,CAAO;IAC3B,OAAO,CAAC,QAAQ,CAAC,CAAU;IAC3B,OAAO,CAAC,GAAG,CAAQ;IACnB,OAAO,CAAC,SAAS,CAA0B;IAE3C,OAAO,CAAC,KAAK,CAAmC;gBAEpC,MAAM,EAAE,mBAAmB;IAOvC,OAAO,CAAC,OAAO;IAQf,OAAO,CAAC,QAAQ;YAKF,QAAQ;IA2BtB;;;;OAIG;YACW,SAAS;IAcvB,EAAE,CAAC,QAAQ,EAAE,iBAAiB,GAAG,MAAM,IAAI;IAO3C,OAAO,CAAC,IAAI;IAaN,MAAM,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;IAqD/C,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,SAAS,CAAC;IAI1C,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,GAAG,SAAS,CAAC;IAwCxE,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IA+DpC,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,UAAU,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,KAAK,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAwCtF,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,SAAS,CAAC;IAoB3D,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAuD1D,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;YAUd,QAAQ;IActB;;;;;;;;;;;;;;;OAeG;YACW,QAAQ;IAYtB,2EAA2E;YAC7D,WAAW;CAqBzB"}
+{"version":3,"file":"disk.d.ts","sourceRoot":"","sources":["../../../src/store/task/disk.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAA;AAC1E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAA;AAC3E,OAAO,KAAK,EACX,gBAAgB,EAChB,IAAI,EAEJ,iBAAiB,EACjB,UAAU,EACV,SAAS,EACT,gBAAgB,EAChB,MAAM,2BAA2B,CAAA;AAIlC,OAAO,EAAE,KAAK,MAAM,EAAiB,MAAM,uBAAuB,CAAA;AAsClE,MAAM,WAAW,mBAAmB;IACnC,+CAA+C;IAC/C,KAAK,EAAE,YAAY,CAAA;IAEnB;;;;OAIG;IACH,OAAO,EAAE,cAAc,CAAA;IAEvB,uDAAuD;IACvD,QAAQ,CAAC,EAAE,QAAQ,CAAA;IAEnB,MAAM,CAAC,EAAE,MAAM,CAAA;CACf;AAED,6EAA6E;AAC7E,qBAAa,wBAAyB,SAAQ,KAAK;IAClD,SAAkB,IAAI,8BAA6B;IACnD,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAA;IAC5B,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAA;gBAEd,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS;CAOlD;AAkBD,qBAAa,aAAc,YAAW,SAAS;IAC9C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAc;IACpC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAgB;IACxC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAU;IACpC,OAAO,CAAC,GAAG,CAAQ;IACnB,OAAO,CAAC,SAAS,CAA0B;IAE3C,OAAO,CAAC,KAAK,CAAmC;gBAEpC,MAAM,EAAE,mBAAmB;IAavC,iDAAiD;IACjD,IAAI,SAAS,IAAI,SAAS,CAEzB;IAED,OAAO,CAAC,OAAO;IAIf,OAAO,CAAC,QAAQ;YAIF,QAAQ;IA2BtB;;;;OAIG;YACW,SAAS;IAWvB,EAAE,CAAC,QAAQ,EAAE,iBAAiB,GAAG,MAAM,IAAI;IAO3C,OAAO,CAAC,IAAI;IAaN,MAAM,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;IAyD/C,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,SAAS,CAAC;IAI1C,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,GAAG,SAAS,CAAC;IAwCxE,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IA4D1C;;;;OAIG;IACG,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,UAAU,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,SAAS,CAAA;KAAE,GAAG,OAAO,CAC3F,IAAI,EAAE,CACN;IAwCK,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,SAAS,CAAC;IAiB3D,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAiD1D,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;YAUd,QAAQ;CAatB"}