@nodetool-ai/reliability-harness 0.8.1

package/dist/core/golden.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"golden.js","sourceRoot":"","sources":["../../src/core/golden.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,kBAAkB,EAA4B,MAAM,gBAAgB,CAAC;AAC9E,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAkBnD,uEAAuE;AACvE,MAAM,oBAAoB,GAAG,EAAE,CAAC;AAEhC;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAiB;IACjD,MAAM,OAAO,GAA4B,EAAE,CAAC;IAC5C,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClC,IAAI,KAAK,CAAC,SAAS,KAAK,kBAAkB;YAAE,SAAS;QACrD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAkC,CAAC;QACzD,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,eAAe;YAAE,SAAS;QAClD,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;QACpC,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,SAAS;QACvC,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,aAAa,CAC3B,MAAiB,EACjB,UAAU,GAAwB,kBAAkB,CAAC,MAAM,CAAC;IAE5D,OAAO,UAAU,CAAC,MAAM;SACrB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,KAAK,kBAAkB,CAAC;SACzD,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,cAAc,CACrB,QAAiB,EACjB,MAAiB;IAEjB,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACzC,MAAM,cAAc,GAAG,CAAC,QAAQ,IAAI,EAAE,CAA4B,CAAC;IACnE,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC;QACnB,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC;QAC9B,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;KACvB,CAAC,CAAC;IACH,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAC1C,MAAM,IAAI,GAAG,eAAe,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC;QAClD,MAAM,GAAG,GAAG,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACzC,IAAI,IAAI,KAAK,GAAG;YAAE,SAAS;QAC3B,IAAI,CAAC,CAAC,GAAG,IAAI,cAAc,CAAC,EAAE,CAAC;YAC7B,QAAQ,CAAC,IAAI,CAAC,sBAAsB,GAAG,MAAM,GAAG,EAAE,CAAC,CAAC;QACtD,CAAC;aAAM,IAAI,CAAC,CAAC,GAAG,IAAI,MAAM,CAAC,EAAE,CAAC;YAC5B,QAAQ,CAAC,IAAI,CAAC,mBAAmB,GAAG,eAAe,IAAI,GAAG,CAAC,CAAC;QAC9D,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,IAAI,CAAC,WAAW,GAAG,eAAe,IAAI,SAAS,GAAG,EAAE,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,SAAS,CAAC,OAAoC;IACrD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC3C,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,UAAU,GAAG,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAClD,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACxC,IAAI,KAAK;YAAE,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;;YAC7B,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAS,kBAAkB,CACzB,QAAiB,EACjB,MAAiB,EACjB,UAA+B;IAE/B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,OAAO,CAAC,kEAAkE,CAAC,CAAC;IAC9E,CAAC;IACD,MAAM,MAAM,GAAG,SAAS,CAAC,QAA8B,CAAC,CAAC;IACzD,MAAM,MAAM,GAAG,SAAS,CAAC,aAAa,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CACzB,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAC9C,CAAC,IAAI,EAAE,CAAC;IAET,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QACvC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QACtC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3D,IAAI,QAAQ,CAAC,MAAM,IAAI,oBAAoB,EAAE,CAAC;gBAC5C,QAAQ,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;gBACnD,OAAO,QAAQ,CAAC;YAClB,CAAC;YACD,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;gBAAE,SAAS;YACjC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;gBAC1B,QAAQ,CAAC,IAAI,CAAC,GAAG,OAAO,IAAI,CAAC,iBAAiB,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC1D,CAAC;iBAAM,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;gBAChC,QAAQ,CAAC,IAAI,CAAC,GAAG,OAAO,IAAI,CAAC,cAAc,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACxD,CAAC;iBAAM,CAAC;gBACN,QAAQ,CAAC,IAAI,CAAC,GAAG,OAAO,IAAI,CAAC,eAAe,IAAI,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACxE,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,YAAY,CAC1B,OAAgB,EAChB,MAAiB,EACjB,OAAO,GAA0C,EAAE;IAEnD,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,QAAQ,CAAC;IACxC,MAAM,MAAM,GAAG,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC;IAC3C,MAAM,OAAO,GAAwB,EAAE,CAAC;IAExC,MAAM,UAAU,GACd,MAAM,CAAC,MAAM,GAAG,CAAC;QACf,CAAC,CAAC,gCAAgC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QACrD,CAAC,CAAC,SAAS,CAAC;IAEhB,yDAAyD;IACzD,MAAM,UAAU,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAE9E,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;QACvB,OAAO,CAAC,IAAI,CACV,UAAU;YACR,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAE;YAC/D,CAAC,CAAC;gBACE,IAAI,EAAE,SAAS;gBACf,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;aAC3D,CACN,CAAC;IACJ,CAAC;IAED,IAAI,UAAU,CAAC,WAAW,EAAE,CAAC;QAC3B,OAAO,CAAC,IAAI,CACV,UAAU;YACR,CAAC,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAE;YACnE,CAAC,CAAC;gBACE,IAAI,EAAE,aAAa;gBACnB,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE,kBAAkB,CAC1B,OAAO,CAAC,QAAQ,CAAC,WAAW,EAC5B,MAAM,EACN,UAAW,CACZ;aACF,CACN,CAAC;IACJ,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/core/invariants/index.d.ts

@@ -0,0 +1,32 @@
+/**
+ * §6 invariant modules (docs/RELIABILITY_ARCHITECTURE.md §6, §12; task C3).
+ *
+ * Each module is a pure `(record: RunRecord) => Violation[]`. This barrel is
+ * exported on its own — not yet re-exported from the harness's main
+ * `src/index.ts` — because C4 wires the main barrel; importing from
+ * `@nodetool-ai/reliability-harness/core/invariants` (or this file's
+ * relative path within the package) works today.
+ */
+export * from "./types.js";
+export * from "./status-sets.js";
+export * from "./lifecycle.js";
+export * from "./terminal-uniqueness.js";
+export * from "./leaks.js";
+export * from "./state-machine.js";
+export * from "./protocol-validity.js";
+import type { InvariantCheck } from "./types.js";
+/**
+ * Every invariant module keyed by the family name journeys declare in
+ * `journey.json`'s `assertions.invariants` (§4). C4's runner is expected to
+ * look names up here rather than importing each module by hand.
+ *
+ * `lifecycle-pairing` and `cleanup-leaks` are aliases for `lifecycle` and
+ * `leaks`: the seed journeys under `reliability/journeys/*.json` (C1/C2) were
+ * authored against §6's prose section headers ("Lifecycle", "Cleanup and
+ * leaks") rather than this module's own key names, and the manifest schema
+ * (`core/journey.ts`) only checks that `invariants` is a non-empty array of
+ * strings, not that each name resolves — so both spellings need to resolve
+ * for those journeys' declared invariants to actually run under `compare.ts`.
+ */
+export declare const INVARIANT_CHECKS: Readonly<Record<string, InvariantCheck>>;
+//# sourceMappingURL=index.d.ts.map

package/dist/core/invariants/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/invariants/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,cAAc,YAAY,CAAC;AAC3B,cAAc,kBAAkB,CAAC;AACjC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,0BAA0B,CAAC;AACzC,cAAc,YAAY,CAAC;AAC3B,cAAc,oBAAoB,CAAC;AACnC,cAAc,wBAAwB,CAAC;AAOvC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEjD;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,gBAAgB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAQrE,CAAC"}

package/dist/core/invariants/index.js

@@ -0,0 +1,44 @@
+/**
+ * §6 invariant modules (docs/RELIABILITY_ARCHITECTURE.md §6, §12; task C3).
+ *
+ * Each module is a pure `(record: RunRecord) => Violation[]`. This barrel is
+ * exported on its own — not yet re-exported from the harness's main
+ * `src/index.ts` — because C4 wires the main barrel; importing from
+ * `@nodetool-ai/reliability-harness/core/invariants` (or this file's
+ * relative path within the package) works today.
+ */
+export * from "./types.js";
+export * from "./status-sets.js";
+export * from "./lifecycle.js";
+export * from "./terminal-uniqueness.js";
+export * from "./leaks.js";
+export * from "./state-machine.js";
+export * from "./protocol-validity.js";
+import { checkLifecycle } from "./lifecycle.js";
+import { checkTerminalUniqueness } from "./terminal-uniqueness.js";
+import { checkLeaks } from "./leaks.js";
+import { checkStateMachine } from "./state-machine.js";
+import { checkProtocolValidity } from "./protocol-validity.js";
+/**
+ * Every invariant module keyed by the family name journeys declare in
+ * `journey.json`'s `assertions.invariants` (§4). C4's runner is expected to
+ * look names up here rather than importing each module by hand.
+ *
+ * `lifecycle-pairing` and `cleanup-leaks` are aliases for `lifecycle` and
+ * `leaks`: the seed journeys under `reliability/journeys/*.json` (C1/C2) were
+ * authored against §6's prose section headers ("Lifecycle", "Cleanup and
+ * leaks") rather than this module's own key names, and the manifest schema
+ * (`core/journey.ts`) only checks that `invariants` is a non-empty array of
+ * strings, not that each name resolves — so both spellings need to resolve
+ * for those journeys' declared invariants to actually run under `compare.ts`.
+ */
+export const INVARIANT_CHECKS = {
+    lifecycle: checkLifecycle,
+    "lifecycle-pairing": checkLifecycle,
+    "terminal-uniqueness": checkTerminalUniqueness,
+    leaks: checkLeaks,
+    "cleanup-leaks": checkLeaks,
+    "state-machine": checkStateMachine,
+    "protocol-validity": checkProtocolValidity
+};
+//# sourceMappingURL=index.js.map

package/dist/core/invariants/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/core/invariants/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,cAAc,YAAY,CAAC;AAC3B,cAAc,kBAAkB,CAAC;AACjC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,0BAA0B,CAAC;AACzC,cAAc,YAAY,CAAC;AAC3B,cAAc,oBAAoB,CAAC;AACnC,cAAc,wBAAwB,CAAC;AAEvC,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AACnE,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAG/D;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAA6C;IACxE,SAAS,EAAE,cAAc;IACzB,mBAAmB,EAAE,cAAc;IACnC,qBAAqB,EAAE,uBAAuB;IAC9C,KAAK,EAAE,UAAU;IACjB,eAAe,EAAE,UAAU;IAC3B,eAAe,EAAE,iBAAiB;IAClC,mBAAmB,EAAE,qBAAqB;CAC3C,CAAC"}

package/dist/core/invariants/leaks.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Leak-accounting invariants (docs/RELIABILITY_ARCHITECTURE.md §6 "Cleanup
+ * and leaks"): after the run, zero live actors, zero pending control
+ * responses, zero timers beyond the trigger timeout, zero pending Python
+ * bridge requests, and WS slot accounting (`activeJobs`/`startingJobs`) back
+ * to empty; and no growth in these counters across repeated journey
+ * iterations (leak journeys run N=20 and compare).
+ *
+ * Operates on `RunRecord.resourceCounters` (additive over C1's shape, see
+ * `record.ts`). A journey that declares this invariant but whose record
+ * carries no post-run snapshot fails on that: the check measured nothing, and
+ * "nothing measured" must not read as "no leaks". Drivers that can't
+ * instrument the counters should not declare `cleanup-leaks` for the surfaces
+ * they cover.
+ */
+import type { RunRecord } from "../record.js";
+import type { Violation } from "./types.js";
+declare const COUNTER_FIELDS: readonly ["liveActors", "pendingControlResponses", "pendingTimers", "pythonBridgePendingRequests", "activeJobs", "startingJobs"];
+type CounterField = (typeof COUNTER_FIELDS)[number];
+export declare function checkLeaks(record: RunRecord): Violation[];
+export type { CounterField };
+//# sourceMappingURL=leaks.d.ts.map

package/dist/core/invariants/leaks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"leaks.d.ts","sourceRoot":"","sources":["../../../src/core/invariants/leaks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,KAAK,EAA2B,SAAS,EAAE,MAAM,cAAc,CAAC;AACvE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAE5C,QAAA,MAAM,cAAc,kIAO2C,CAAC;AAEhE,KAAK,YAAY,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpD,wBAAgB,UAAU,CAAC,MAAM,EAAE,SAAS,GAAG,SAAS,EAAE,CAmDzD;AAED,YAAY,EAAE,YAAY,EAAE,CAAC"}

package/dist/core/invariants/leaks.js

@@ -0,0 +1,55 @@
+const COUNTER_FIELDS = [
+    "liveActors",
+    "pendingControlResponses",
+    "pendingTimers",
+    "pythonBridgePendingRequests",
+    "activeJobs",
+    "startingJobs"
+];
+export function checkLeaks(record) {
+    const snapshots = record.resourceCounters ?? [];
+    const violations = [];
+    const afterSnapshots = snapshots.filter((s) => s.at === "after");
+    if (afterSnapshots.length === 0) {
+        return [
+            {
+                invariant: "leaks.not-instrumented",
+                message: `surface "${record.surface}" produced no post-run resource-counter ` +
+                    "snapshot, so the cleanup-leaks invariant asserted nothing — " +
+                    "instrument the driver (RunRecord.resourceCounters) or stop " +
+                    "declaring cleanup-leaks for this surface",
+                details: { surface: record.surface, snapshots: snapshots.length }
+            }
+        ];
+    }
+    afterSnapshots.forEach((snapshot, snapshotIndex) => {
+        for (const field of COUNTER_FIELDS) {
+            const value = snapshot[field];
+            if (value !== 0) {
+                violations.push({
+                    invariant: `leaks.${field}-nonzero`,
+                    message: `resource counter "${field}" is ${value} (expected 0) in post-run snapshot #${snapshotIndex}`,
+                    details: { field, value, snapshotIndex }
+                });
+            }
+        }
+    });
+    // "No growth in open handles across repeated journey iterations": each
+    // field's post-run value must never exceed the previous iteration's.
+    for (const field of COUNTER_FIELDS) {
+        for (let i = 1; i < afterSnapshots.length; i++) {
+            const previous = afterSnapshots[i - 1][field];
+            const current = afterSnapshots[i][field];
+            if (current > previous) {
+                violations.push({
+                    invariant: `leaks.${field}-growth`,
+                    message: `resource counter "${field}" grew from ${previous} to ${current} ` +
+                        `between post-run snapshots #${i - 1} and #${i}`,
+                    details: { field, previous, current, snapshotIndex: i }
+                });
+            }
+        }
+    }
+    return violations;
+}
+//# sourceMappingURL=leaks.js.map

package/dist/core/invariants/leaks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"leaks.js","sourceRoot":"","sources":["../../../src/core/invariants/leaks.ts"],"names":[],"mappings":"AAkBA,MAAM,cAAc,GAAG;IACrB,YAAY;IACZ,yBAAyB;IACzB,eAAe;IACf,6BAA6B;IAC7B,YAAY;IACZ,cAAc;CAC+C,CAAC;AAIhE,MAAM,UAAU,UAAU,CAAC,MAAiB;IAC1C,MAAM,SAAS,GAAG,MAAM,CAAC,gBAAgB,IAAI,EAAE,CAAC;IAChD,MAAM,UAAU,GAAgB,EAAE,CAAC;IACnC,MAAM,cAAc,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,CAAC;IAEjE,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChC,OAAO;YACL;gBACE,SAAS,EAAE,wBAAwB;gBACnC,OAAO,EACL,YAAY,MAAM,CAAC,OAAO,0CAA0C;oBACpE,8DAA8D;oBAC9D,6DAA6D;oBAC7D,0CAA0C;gBAC5C,OAAO,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC,MAAM,EAAE;aAClE;SACF,CAAC;IACJ,CAAC;IAED,cAAc,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,aAAa,EAAE,EAAE;QACjD,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE,CAAC;YACnC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC9B,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;gBAChB,UAAU,CAAC,IAAI,CAAC;oBACd,SAAS,EAAE,SAAS,KAAK,UAAU;oBACnC,OAAO,EAAE,qBAAqB,KAAK,QAAQ,KAAK,uCAAuC,aAAa,EAAE;oBACtG,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE;iBACzC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,uEAAuE;IACvE,qEAAqE;IACrE,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE,CAAC;QACnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,cAAc,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC/C,MAAM,QAAQ,GAAG,cAAc,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YAC9C,MAAM,OAAO,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YACzC,IAAI,OAAO,GAAG,QAAQ,EAAE,CAAC;gBACvB,UAAU,CAAC,IAAI,CAAC;oBACd,SAAS,EAAE,SAAS,KAAK,SAAS;oBAClC,OAAO,EACL,qBAAqB,KAAK,eAAe,QAAQ,OAAO,OAAO,GAAG;wBAClE,+BAA+B,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE;oBAClD,OAAO,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,EAAE;iBACxD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC"}

package/dist/core/invariants/lifecycle.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Lifecycle invariants (docs/RELIABILITY_ARCHITECTURE.md §6 "Lifecycle").
+ *
+ * - Every `node_update running` is eventually paired with exactly one
+ *   terminal `node_update` (`completed`/`error`/`cancelled`/`suspended`) for
+ *   that invocation — a node can run more than once in a record (loops,
+ *   re-entrant control events), so pairing is tracked as a per-node stack,
+ *   not a single flag.
+ * - No node is left `running` after the `job_update` terminal.
+ *
+ * `terminal-uniqueness.ts` covers the job-level "exactly one terminal
+ * `job_update`" and precedence rules — kept separate so each §6 bullet has
+ * its own attributable module, per the task's "may fold into lifecycle if
+ * cleaner, but keep the checks individually attributable" note.
+ */
+import type { RunRecord } from "../record.js";
+import type { Violation } from "./types.js";
+export declare function checkLifecycle(record: RunRecord): Violation[];
+//# sourceMappingURL=lifecycle.d.ts.map

package/dist/core/invariants/lifecycle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lifecycle.d.ts","sourceRoot":"","sources":["../../../src/core/invariants/lifecycle.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAG5C,wBAAgB,cAAc,CAAC,MAAM,EAAE,SAAS,GAAG,SAAS,EAAE,CAgG7D"}

package/dist/core/invariants/lifecycle.js

@@ -0,0 +1,95 @@
+import { NODE_TERMINAL_STATUSES, JOB_TERMINAL_STATUSES, asString } from "./status-sets.js";
+export function checkLifecycle(record) {
+    const violations = [];
+    /** node id -> stack of frame indices of unmatched "running" node_updates. */
+    const runningStack = new Map();
+    let jobTerminalIndex;
+    record.frames.forEach((frame, index) => {
+        const message = frame.message;
+        const type = asString(message, "type");
+        if (type === "job_update") {
+            const status = asString(message, "status");
+            if (jobTerminalIndex === undefined &&
+                status !== undefined &&
+                JOB_TERMINAL_STATUSES.has(status)) {
+                jobTerminalIndex = index;
+            }
+            return;
+        }
+        if (type !== "node_update")
+            return;
+        const nodeId = asString(message, "node_id");
+        const status = asString(message, "status");
+        if (!nodeId || !status)
+            return;
+        if (status === "running") {
+            const stack = runningStack.get(nodeId) ?? [];
+            stack.push(index);
+            runningStack.set(nodeId, stack);
+            return;
+        }
+        if (NODE_TERMINAL_STATUSES.has(status)) {
+            const stack = runningStack.get(nodeId);
+            if (!stack || stack.length === 0) {
+                violations.push({
+                    invariant: "lifecycle.terminal-without-running",
+                    message: `node_update terminal ("${status}") for node "${nodeId}" has no ` +
+                        "matching running node_update for its invocation",
+                    frameIndex: index,
+                    nodeId
+                });
+                return;
+            }
+            stack.pop();
+        }
+    });
+    // Any invocation still unmatched by the end of the record.
+    for (const [nodeId, stack] of runningStack) {
+        if (stack.length === 0)
+            continue;
+        violations.push({
+            invariant: "lifecycle.unmatched-running",
+            message: `node "${nodeId}" has ${stack.length} running node_update(s) with ` +
+                "no terminal pairing by the end of the record",
+            nodeId,
+            frameIndex: stack[stack.length - 1],
+            details: { unmatchedCount: stack.length, frameIndices: stack }
+        });
+    }
+    // "No node left running after job terminal": replay node_update
+    // running/terminal pairing only up to the terminal job_update frame, and
+    // flag any node whose running count is still open at that point.
+    if (jobTerminalIndex !== undefined) {
+        const openAtTerminal = new Map();
+        for (let i = 0; i <= jobTerminalIndex; i++) {
+            const message = record.frames[i].message;
+            if (asString(message, "type") !== "node_update")
+                continue;
+            const nodeId = asString(message, "node_id");
+            const status = asString(message, "status");
+            if (!nodeId || !status)
+                continue;
+            if (status === "running") {
+                openAtTerminal.set(nodeId, (openAtTerminal.get(nodeId) ?? 0) + 1);
+            }
+            else if (NODE_TERMINAL_STATUSES.has(status)) {
+                const current = openAtTerminal.get(nodeId) ?? 0;
+                if (current > 0)
+                    openAtTerminal.set(nodeId, current - 1);
+            }
+        }
+        for (const [nodeId, openCount] of openAtTerminal) {
+            if (openCount <= 0)
+                continue;
+            violations.push({
+                invariant: "lifecycle.running-after-job-terminal",
+                message: `node "${nodeId}" is still "running" at the job_update terminal (frame ${jobTerminalIndex})`,
+                nodeId,
+                frameIndex: jobTerminalIndex,
+                details: { openCount }
+            });
+        }
+    }
+    return violations;
+}
+//# sourceMappingURL=lifecycle.js.map

package/dist/core/invariants/lifecycle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lifecycle.js","sourceRoot":"","sources":["../../../src/core/invariants/lifecycle.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE3F,MAAM,UAAU,cAAc,CAAC,MAAiB;IAC9C,MAAM,UAAU,GAAgB,EAAE,CAAC;IACnC,6EAA6E;IAC7E,MAAM,YAAY,GAAG,IAAI,GAAG,EAAoB,CAAC;IACjD,IAAI,gBAAoC,CAAC;IAEzC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QACrC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAkC,CAAC;QACzD,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAEvC,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;YAC1B,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YAC3C,IACE,gBAAgB,KAAK,SAAS;gBAC9B,MAAM,KAAK,SAAS;gBACpB,qBAAqB,CAAC,GAAG,CAAC,MAAM,CAAC,EACjC,CAAC;gBACD,gBAAgB,GAAG,KAAK,CAAC;YAC3B,CAAC;YACD,OAAO;QACT,CAAC;QAED,IAAI,IAAI,KAAK,aAAa;YAAE,OAAO;QACnC,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC3C,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM;YAAE,OAAO;QAE/B,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YAC7C,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAClB,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YAChC,OAAO;QACT,CAAC;QAED,IAAI,sBAAsB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACvC,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACvC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACjC,UAAU,CAAC,IAAI,CAAC;oBACd,SAAS,EAAE,oCAAoC;oBAC/C,OAAO,EACL,0BAA0B,MAAM,gBAAgB,MAAM,WAAW;wBACjE,iDAAiD;oBACnD,UAAU,EAAE,KAAK;oBACjB,MAAM;iBACP,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,KAAK,CAAC,GAAG,EAAE,CAAC;QACd,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,2DAA2D;IAC3D,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,YAAY,EAAE,CAAC;QAC3C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACjC,UAAU,CAAC,IAAI,CAAC;YACd,SAAS,EAAE,6BAA6B;YACxC,OAAO,EACL,SAAS,MAAM,SAAS,KAAK,CAAC,MAAM,+BAA+B;gBACnE,8CAA8C;YAChD,MAAM;YACN,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;YACnC,OAAO,EAAE,EAAE,cAAc,EAAE,KAAK,CAAC,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE;SAC/D,CAAC,CAAC;IACL,CAAC;IAED,gEAAgE;IAChE,yEAAyE;IACzE,iEAAiE;IACjE,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;QACnC,MAAM,cAAc,GAAG,IAAI,GAAG,EAAkB,CAAC;QACjD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,gBAAgB,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3C,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAkC,CAAC;YACpE,IAAI,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,aAAa;gBAAE,SAAS;YAC1D,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YAC5C,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YAC3C,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM;gBAAE,SAAS;YACjC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,cAAc,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACpE,CAAC;iBAAM,IAAI,sBAAsB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC9C,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBAChD,IAAI,OAAO,GAAG,CAAC;oBAAE,cAAc,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC;YAC3D,CAAC;QACH,CAAC;QACD,KAAK,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,cAAc,EAAE,CAAC;YACjD,IAAI,SAAS,IAAI,CAAC;gBAAE,SAAS;YAC7B,UAAU,CAAC,IAAI,CAAC;gBACd,SAAS,EAAE,sCAAsC;gBACjD,OAAO,EAAE,SAAS,MAAM,0DAA0D,gBAAgB,GAAG;gBACrG,MAAM;gBACN,UAAU,EAAE,gBAAgB;gBAC5B,OAAO,EAAE,EAAE,SAAS,EAAE;aACvB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC"}

package/dist/core/invariants/protocol-validity.d.ts

@@ -0,0 +1,4 @@
+import type { RunRecord } from "../record.js";
+import type { Violation } from "./types.js";
+export declare function checkProtocolValidity(record: RunRecord): Violation[];
+//# sourceMappingURL=protocol-validity.d.ts.map

package/dist/core/invariants/protocol-validity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol-validity.d.ts","sourceRoot":"","sources":["../../../src/core/invariants/protocol-validity.ts"],"names":[],"mappings":"AA6BA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAsH5C,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,SAAS,GAAG,SAAS,EAAE,CAWpE"}

package/dist/core/invariants/protocol-validity.js

@@ -0,0 +1,131 @@
+/**
+ * Protocol-correctness invariants (docs/RELIABILITY_ARCHITECTURE.md §6
+ * "Protocol correctness"): every frame crossing every boundary validates
+ * against the generated Zod schema, in both directions.
+ *
+ * `server_to_client` frames validate against `processingMessageSchemas`
+ * (`@nodetool-ai/protocol`'s `messages.ts`, B1) for a `ProcessingMessage`
+ * `type`, or `outboundControlMessageSchemas` for the handful of recognized
+ * non-`ProcessingMessage` outbound shapes (`pong`, `rpc_response`,
+ * `system_stats`, `resource_change`). A frame whose `type` matches neither —
+ * or that has no `type` at all — is the ad hoc, type-less reply class
+ * `ws-commands.ts` documents as intentionally outside any schema (e.g.
+ * `{ error: "invalid_command" }`) and is left unvalidated, exactly as the WS
+ * runner's own outbound validation gate does.
+ *
+ * `client_to_server` frames validate against `webSocketCommandEnvelopeSchema`
+ * (and, when the command is a known `UnifiedCommandType`, that command's
+ * `commandDataSchemas` entry too) when the frame carries a `command`
+ * envelope, or `controlMessageInSchemas` for the un-enveloped control frames
+ * (`ping`, `client_tools_manifest`, `tool_result`, …).
+ */
+import { processingMessageSchemas, outboundControlMessageSchemas, webSocketCommandEnvelopeSchema, controlMessageInSchemas, commandDataSchemas } from "@nodetool-ai/protocol";
+function messageType(message) {
+    const type = message["type"];
+    return typeof type === "string" ? type : undefined;
+}
+function issuesToString(issues) {
+    return issues
+        .map((issue) => `${issue.path.join(".")}: ${issue.message}`)
+        .join("; ");
+}
+function checkServerToClient(message, frameIndex) {
+    const type = messageType(message);
+    if (type !== undefined && type in processingMessageSchemas) {
+        const schema = processingMessageSchemas[type];
+        const result = schema.safeParse(message);
+        if (result.success)
+            return [];
+        return [
+            {
+                invariant: "protocol-validity.server-to-client-schema",
+                message: `server_to_client frame of type "${type}" failed processingMessageSchema validation: ${issuesToString(result.error.issues)}`,
+                frameIndex,
+                details: { type, issues: result.error.issues }
+            }
+        ];
+    }
+    if (type !== undefined && type in outboundControlMessageSchemas) {
+        const schema = outboundControlMessageSchemas[type];
+        const result = schema.safeParse(message);
+        if (result.success)
+            return [];
+        return [
+            {
+                invariant: "protocol-validity.server-to-client-schema",
+                message: `server_to_client frame of type "${type}" failed its outbound control schema: ${issuesToString(result.error.issues)}`,
+                frameIndex,
+                details: { type, issues: result.error.issues }
+            }
+        ];
+    }
+    // Untyped, or a `type` neither schema map recognizes: the documented
+    // ad hoc reply class — not validated.
+    return [];
+}
+function checkClientToServer(message, frameIndex) {
+    if (typeof message["command"] === "string") {
+        const envelopeResult = webSocketCommandEnvelopeSchema.safeParse(message);
+        if (!envelopeResult.success) {
+            return [
+                {
+                    invariant: "protocol-validity.client-to-server-envelope",
+                    message: `client_to_server command frame failed webSocketCommandEnvelopeSchema: ${issuesToString(envelopeResult.error.issues)}`,
+                    frameIndex,
+                    details: { issues: envelopeResult.error.issues }
+                }
+            ];
+        }
+        const command = message["command"];
+        const dataSchema = Object.prototype.hasOwnProperty.call(commandDataSchemas, command)
+            ? commandDataSchemas[command]
+            : undefined;
+        if (dataSchema) {
+            const data = message["data"] ?? {};
+            const dataResult = dataSchema.safeParse(data);
+            if (!dataResult.success) {
+                return [
+                    {
+                        invariant: "protocol-validity.client-to-server-data",
+                        message: `command "${command}" data failed its schema: ${issuesToString(dataResult.error.issues)}`,
+                        frameIndex,
+                        details: { command, issues: dataResult.error.issues }
+                    }
+                ];
+            }
+        }
+        return [];
+    }
+    const type = messageType(message);
+    if (type !== undefined && type in controlMessageInSchemas) {
+        const schema = controlMessageInSchemas[type];
+        const result = schema.safeParse(message);
+        if (result.success)
+            return [];
+        return [
+            {
+                invariant: "protocol-validity.client-to-server-control",
+                message: `client_to_server control frame of type "${type}" failed its schema: ${issuesToString(result.error.issues)}`,
+                frameIndex,
+                details: { type, issues: result.error.issues }
+            }
+        ];
+    }
+    // No `command` envelope and no recognized control `type` — nothing to
+    // validate against.
+    return [];
+}
+export function checkProtocolValidity(record) {
+    const violations = [];
+    record.frames.forEach((frame, index) => {
+        const message = frame.message;
+        if (frame.direction === "server_to_client") {
+            violations.push(...checkServerToClient(message, index));
+        }
+        else {
+            violations.push(...checkClientToServer(message, index));
+        }
+    });
+    return violations;
+}
+//# sourceMappingURL=protocol-validity.js.map

package/dist/core/invariants/protocol-validity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol-validity.js","sourceRoot":"","sources":["../../../src/core/invariants/protocol-validity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EACL,wBAAwB,EACxB,6BAA6B,EAC7B,8BAA8B,EAC9B,uBAAuB,EACvB,kBAAkB,EAEnB,MAAM,uBAAuB,CAAC;AAI/B,SAAS,WAAW,CAAC,OAAgC;IACnD,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7B,OAAO,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AACrD,CAAC;AAED,SAAS,cAAc,CAAC,MAAkD;IACxE,OAAO,MAAM;SACV,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;SAC3D,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,SAAS,mBAAmB,CAC1B,OAAgC,EAChC,UAAkB;IAElB,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IAElC,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,IAAI,wBAAwB,EAAE,CAAC;QAC3D,MAAM,MAAM,GACV,wBAAwB,CAAC,IAA6C,CAAC,CAAC;QAC1E,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACzC,IAAI,MAAM,CAAC,OAAO;YAAE,OAAO,EAAE,CAAC;QAC9B,OAAO;YACL;gBACE,SAAS,EAAE,2CAA2C;gBACtD,OAAO,EAAE,mCAAmC,IAAI,gDAAgD,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE;gBACrI,UAAU;gBACV,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE;aAC/C;SACF,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,IAAI,6BAA6B,EAAE,CAAC;QAChE,MAAM,MAAM,GACV,6BAA6B,CAC3B,IAAkD,CACnD,CAAC;QACJ,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACzC,IAAI,MAAM,CAAC,OAAO;YAAE,OAAO,EAAE,CAAC;QAC9B,OAAO;YACL;gBACE,SAAS,EAAE,2CAA2C;gBACtD,OAAO,EAAE,mCAAmC,IAAI,yCAAyC,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE;gBAC9H,UAAU;gBACV,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE;aAC/C;SACF,CAAC;IACJ,CAAC;IAED,qEAAqE;IACrE,sCAAsC;IACtC,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,mBAAmB,CAC1B,OAAgC,EAChC,UAAkB;IAElB,IAAI,OAAO,OAAO,CAAC,SAAS,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC3C,MAAM,cAAc,GAAG,8BAA8B,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACzE,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC;YAC5B,OAAO;gBACL;oBACE,SAAS,EAAE,6CAA6C;oBACxD,OAAO,EAAE,yEAAyE,cAAc,CAAC,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE;oBAC/H,UAAU;oBACV,OAAO,EAAE,EAAE,MAAM,EAAE,cAAc,CAAC,KAAK,CAAC,MAAM,EAAE;iBACjD;aACF,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAAW,CAAC;QAC7C,MAAM,UAAU,GAAG,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CACrD,kBAAkB,EAClB,OAAO,CACR;YACC,CAAC,CAAC,kBAAkB,CAAC,OAA6B,CAAC;YACnD,CAAC,CAAC,SAAS,CAAC;QACd,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,IAAI,GAAI,OAAO,CAAC,MAAM,CAAyC,IAAI,EAAE,CAAC;YAC5E,MAAM,UAAU,GAAG,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAC9C,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;gBACxB,OAAO;oBACL;wBACE,SAAS,EAAE,yCAAyC;wBACpD,OAAO,EAAE,YAAY,OAAO,6BAA6B,cAAc,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE;wBAClG,UAAU;wBACV,OAAO,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE;qBACtD;iBACF,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IAClC,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,IAAI,uBAAuB,EAAE,CAAC;QAC1D,MAAM,MAAM,GACV,uBAAuB,CAAC,IAA4C,CAAC,CAAC;QACxE,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACzC,IAAI,MAAM,CAAC,OAAO;YAAE,OAAO,EAAE,CAAC;QAC9B,OAAO;YACL;gBACE,SAAS,EAAE,4CAA4C;gBACvD,OAAO,EAAE,2CAA2C,IAAI,wBAAwB,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE;gBACrH,UAAU;gBACV,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE;aAC/C;SACF,CAAC;IACJ,CAAC;IAED,sEAAsE;IACtE,oBAAoB;IACpB,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,MAAiB;IACrD,MAAM,UAAU,GAAgB,EAAE,CAAC;IACnC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QACrC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAkC,CAAC;QACzD,IAAI,KAAK,CAAC,SAAS,KAAK,kBAAkB,EAAE,CAAC;YAC3C,UAAU,CAAC,IAAI,CAAC,GAAG,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;QAC1D,CAAC;aAAM,CAAC;YACN,UAAU,CAAC,IAAI,CAAC,GAAG,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC,CAAC,CAAC;IACH,OAAO,UAAU,CAAC;AACpB,CAAC"}

package/dist/core/invariants/state-machine.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Client state-machine conformance (docs/RELIABILITY_ARCHITECTURE.md §6
+ * "State transitions"): the client `WebSocketManager` transitions only along
+ * its declared state machine.
+ *
+ * `CLIENT_STATE_TRANSITIONS` below is a data copy of
+ * `web/src/lib/websocket/WebSocketManager.ts`'s `STATE_TRANSITIONS` table
+ * (~line 95) — the reliability harness package cannot depend on `web/`, so
+ * a real change to the client's state machine must be mirrored here too;
+ * `state-machine.test.ts` fixtures pin the exact transitions so a drift is
+ * at least visible in review even though nothing enforces the two files stay
+ * identical automatically.
+ *
+ * Operates on `RunRecord.transitions` (additive over C1's shape, see
+ * `record.ts`) — a driver that never touches a real client connection (e.g.
+ * the kernel driver) produces none, and this module reports no violations
+ * rather than treating absence itself as a violation.
+ */
+import type { RunRecord } from "../record.js";
+import type { Violation } from "./types.js";
+interface DeclaredTransition {
+    from: readonly string[];
+    to: string;
+}
+/** Mirrors `WebSocketManager.ts`'s `STATE_TRANSITIONS` exactly. */
+export declare const CLIENT_STATE_TRANSITIONS: Readonly<Record<string, DeclaredTransition>>;
+export declare function checkStateMachine(record: RunRecord): Violation[];
+export {};
+//# sourceMappingURL=state-machine.d.ts.map

package/dist/core/invariants/state-machine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"state-machine.d.ts","sourceRoot":"","sources":["../../../src/core/invariants/state-machine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,KAAK,EAAsB,SAAS,EAAE,MAAM,cAAc,CAAC;AAClE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAE5C,UAAU,kBAAkB;IAC1B,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACxB,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,mEAAmE;AACnE,eAAO,MAAM,wBAAwB,EAAE,QAAQ,CAC7C,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAiBnC,CAAC;AA+DF,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,SAAS,GAAG,SAAS,EAAE,CAWhE"}

package/dist/core/invariants/state-machine.js

@@ -0,0 +1,79 @@
+/** Mirrors `WebSocketManager.ts`'s `STATE_TRANSITIONS` exactly. */
+export const CLIENT_STATE_TRANSITIONS = {
+    connect: { from: ["disconnected", "failed"], to: "connecting" },
+    connected: { from: ["connecting", "reconnecting"], to: "connected" },
+    disconnect: {
+        from: ["connected", "connecting", "reconnecting"],
+        to: "disconnecting"
+    },
+    disconnected: {
+        from: ["disconnecting", "connecting", "connected", "reconnecting"],
+        to: "disconnected"
+    },
+    reconnect: { from: ["disconnected", "failed"], to: "reconnecting" },
+    failed: {
+        from: ["connecting", "reconnecting", "disconnected"],
+        to: "failed"
+    }
+};
+function checkOne(transition, index, priorTo) {
+    const violations = [];
+    const declared = CLIENT_STATE_TRANSITIONS[transition.action];
+    if (!declared) {
+        violations.push({
+            invariant: "state-machine.unknown-action",
+            message: `transition #${index} uses action "${transition.action}", which the declared state machine has no entry for`,
+            details: { index, action: transition.action }
+        });
+        return violations;
+    }
+    if (!declared.from.includes(transition.from)) {
+        violations.push({
+            invariant: "state-machine.invalid-from",
+            message: `action "${transition.action}" (transition #${index}) is not valid ` +
+                `from state "${transition.from}" — declared "from" states are: ` +
+                `${declared.from.join(", ")}`,
+            details: {
+                index,
+                action: transition.action,
+                from: transition.from,
+                declaredFrom: declared.from
+            }
+        });
+    }
+    if (declared.to !== transition.to) {
+        violations.push({
+            invariant: "state-machine.invalid-to",
+            message: `action "${transition.action}" (transition #${index}) declares "to": ` +
+                `"${declared.to}" but the record has "to": "${transition.to}"`,
+            details: {
+                index,
+                action: transition.action,
+                to: transition.to,
+                declaredTo: declared.to
+            }
+        });
+    }
+    if (priorTo !== undefined && priorTo !== transition.from) {
+        violations.push({
+            invariant: "state-machine.chain-gap",
+            message: `transition #${index} starts from "${transition.from}" but the ` +
+                `previous recorded transition ended in "${priorTo}"`,
+            details: { index, expectedFrom: priorTo, actualFrom: transition.from }
+        });
+    }
+    return violations;
+}
+export function checkStateMachine(record) {
+    const transitions = record.transitions;
+    if (!transitions || transitions.length === 0)
+        return [];
+    const violations = [];
+    let priorTo;
+    transitions.forEach((transition, index) => {
+        violations.push(...checkOne(transition, index, priorTo));
+        priorTo = transition.to;
+    });
+    return violations;
+}
+//# sourceMappingURL=state-machine.js.map

package/dist/core/invariants/state-machine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"state-machine.js","sourceRoot":"","sources":["../../../src/core/invariants/state-machine.ts"],"names":[],"mappings":"AA0BA,mEAAmE;AACnE,MAAM,CAAC,MAAM,wBAAwB,GAEjC;IACF,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,cAAc,EAAE,QAAQ,CAAC,EAAE,EAAE,EAAE,YAAY,EAAE;IAC/D,SAAS,EAAE,EAAE,IAAI,EAAE,CAAC,YAAY,EAAE,cAAc,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE;IACpE,UAAU,EAAE;QACV,IAAI,EAAE,CAAC,WAAW,EAAE,YAAY,EAAE,cAAc,CAAC;QACjD,EAAE,EAAE,eAAe;KACpB;IACD,YAAY,EAAE;QACZ,IAAI,EAAE,CAAC,eAAe,EAAE,YAAY,EAAE,WAAW,EAAE,cAAc,CAAC;QAClE,EAAE,EAAE,cAAc;KACnB;IACD,SAAS,EAAE,EAAE,IAAI,EAAE,CAAC,cAAc,EAAE,QAAQ,CAAC,EAAE,EAAE,EAAE,cAAc,EAAE;IACnE,MAAM,EAAE;QACN,IAAI,EAAE,CAAC,YAAY,EAAE,cAAc,EAAE,cAAc,CAAC;QACpD,EAAE,EAAE,QAAQ;KACb;CACF,CAAC;AAEF,SAAS,QAAQ,CACf,UAA8B,EAC9B,KAAa,EACb,OAA2B;IAE3B,MAAM,UAAU,GAAgB,EAAE,CAAC;IACnC,MAAM,QAAQ,GAAG,wBAAwB,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAE7D,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,UAAU,CAAC,IAAI,CAAC;YACd,SAAS,EAAE,8BAA8B;YACzC,OAAO,EAAE,eAAe,KAAK,iBAAiB,UAAU,CAAC,MAAM,sDAAsD;YACrH,OAAO,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE;SAC9C,CAAC,CAAC;QACH,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7C,UAAU,CAAC,IAAI,CAAC;YACd,SAAS,EAAE,4BAA4B;YACvC,OAAO,EACL,WAAW,UAAU,CAAC,MAAM,kBAAkB,KAAK,iBAAiB;gBACpE,eAAe,UAAU,CAAC,IAAI,kCAAkC;gBAChE,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YAC/B,OAAO,EAAE;gBACP,KAAK;gBACL,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,IAAI,EAAE,UAAU,CAAC,IAAI;gBACrB,YAAY,EAAE,QAAQ,CAAC,IAAI;aAC5B;SACF,CAAC,CAAC;IACL,CAAC;IAED,IAAI,QAAQ,CAAC,EAAE,KAAK,UAAU,CAAC,EAAE,EAAE,CAAC;QAClC,UAAU,CAAC,IAAI,CAAC;YACd,SAAS,EAAE,0BAA0B;YACrC,OAAO,EACL,WAAW,UAAU,CAAC,MAAM,kBAAkB,KAAK,mBAAmB;gBACtE,IAAI,QAAQ,CAAC,EAAE,+BAA+B,UAAU,CAAC,EAAE,GAAG;YAChE,OAAO,EAAE;gBACP,KAAK;gBACL,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,EAAE,EAAE,UAAU,CAAC,EAAE;gBACjB,UAAU,EAAE,QAAQ,CAAC,EAAE;aACxB;SACF,CAAC,CAAC;IACL,CAAC;IAED,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,UAAU,CAAC,IAAI,EAAE,CAAC;QACzD,UAAU,CAAC,IAAI,CAAC;YACd,SAAS,EAAE,yBAAyB;YACpC,OAAO,EACL,eAAe,KAAK,iBAAiB,UAAU,CAAC,IAAI,YAAY;gBAChE,0CAA0C,OAAO,GAAG;YACtD,OAAO,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,CAAC,IAAI,EAAE;SACvE,CAAC,CAAC;IACL,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAAiB;IACjD,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;IACvC,IAAI,CAAC,WAAW,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAExD,MAAM,UAAU,GAAgB,EAAE,CAAC;IACnC,IAAI,OAA2B,CAAC;IAChC,WAAW,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,EAAE;QACxC,UAAU,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,UAAU,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;QACzD,OAAO,GAAG,UAAU,CAAC,EAAE,CAAC;IAC1B,CAAC,CAAC,CAAC;IACH,OAAO,UAAU,CAAC;AACpB,CAAC"}

package/dist/core/invariants/status-sets.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Shared status vocabulary for the lifecycle/terminal-uniqueness invariants.
+ * Not itself a §6 family — just the constants both modules need to stay in
+ * sync on what counts as "terminal" for a node vs. a job.
+ */
+/**
+ * `node_update` statuses that end an invocation. The kernel actor
+ * (`packages/kernel/src/actor.ts`) emits `"completed"`, `"error"`, and
+ * `"suspended"` — no node-level `"cancelled"`, since a cancelled run
+ * interrupts actors rather than walking each one to a terminal status; a
+ * `"cancelled"` node status is accepted too, for surfaces/fakes that do emit
+ * one. `"warning"` and `"running"` are deliberately excluded: `"warning"` is
+ * a mid-run aside, not a terminal status.
+ */
+export declare const NODE_TERMINAL_STATUSES: ReadonlySet<string>;
+/** `job_update` statuses that end a run. `"running"`/`"queued"` are not terminal. */
+export declare const JOB_TERMINAL_STATUSES: ReadonlySet<string>;
+/**
+ * Terminal precedence, most to least important (`runner.ts:625`): cancel >
+ * suspend > failed > completed. Index doubles as precedence rank (lower
+ * wins).
+ */
+export declare const TERMINAL_PRECEDENCE: readonly string[];
+/** Normalizes a status to the `TERMINAL_PRECEDENCE` vocabulary (`"error"` reads as `"failed"`). */
+export declare function canonicalTerminalStatus(status: string): string;
+export declare function asString(message: Record<string, unknown> | undefined, key: string): string | undefined;
+//# sourceMappingURL=status-sets.d.ts.map

package/dist/core/invariants/status-sets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"status-sets.d.ts","sourceRoot":"","sources":["../../../src/core/invariants/status-sets.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;;;;;;;GAQG;AACH,eAAO,MAAM,sBAAsB,EAAE,WAAW,CAAC,MAAM,CAMrD,CAAC;AAEH,qFAAqF;AACrF,eAAO,MAAM,qBAAqB,EAAE,WAAW,CAAC,MAAM,CAKpD,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,EAAE,SAAS,MAAM,EAKhD,CAAC;AAEF,mGAAmG;AACnG,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAE9D;AAQD,wBAAgB,QAAQ,CACtB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,EAC5C,GAAG,EAAE,MAAM,GACV,MAAM,GAAG,SAAS,CAGpB"}