@pqpo/pragma 0.1.0-next.10 → 0.1.0-next.12

package/dist/cli.js

@@ -82528,6 +82528,130 @@ var init_redaction = __esm({
   }
 });
 
+// packages/local-host/dist/mission-event-projector.js
+import { createHash as createHash17 } from "node:crypto";
+function createLocalHostMissionEventProjector(options2) {
+  const redactor = options2.redactor ?? createRunRedactor();
+  const knownEventIds = new Set(options2.knownEventIds ?? []);
+  let queued = Promise.resolve();
+  let failed = false;
+  let failure3;
+  const appendOne = async (event, publish) => {
+    const redacted = redactEvent(event, redactor);
+    if (!isObjectData(event.data)) {
+      if (publish) {
+        options2.onEvent?.({ ...redacted, replayable: false, cursor: void 0 });
+      }
+      return;
+    }
+    if (event.eventId !== void 0 && knownEventIds.has(event.eventId))
+      return;
+    if (event.eventId !== void 0) {
+      const snapshot = await options2.mission.controller.readSnapshot({
+        missionId: options2.missionId
+      });
+      if (snapshot.events.some((candidate) => candidate.eventId === event.eventId)) {
+        knownEventIds.add(event.eventId);
+        return;
+      }
+    }
+    const committed = await options2.mission.append(options2.missionId, options2.guard, event.type, redactEventData(event.data, redactor), event.eventId);
+    if (event.eventId !== void 0)
+      knownEventIds.add(event.eventId);
+    if (publish) {
+      options2.onEvent?.({ ...redacted, replayable: true, cursor: committed.cursor });
+    }
+  };
+  const flush = async () => {
+    await queued;
+    if (failed)
+      throw failure3;
+  };
+  return {
+    enqueue(event) {
+      queued = queued.then(async () => await appendOne(event, true)).catch((error52) => {
+        failed ||= true;
+        failure3 ??= error52;
+      });
+    },
+    async append(event) {
+      await flush();
+      await appendOne(event, false);
+    },
+    flush,
+    async appendTerminal(terminal) {
+      await flush();
+      const redacted = redactTerminal(terminal, redactor);
+      const type = `run.${redacted.status}`;
+      const snapshot = await options2.mission.controller.readSnapshot({
+        missionId: options2.missionId
+      });
+      if (snapshot.events.some((event) => event.type === type && event.data["executionId"] === redacted.executionId)) {
+        return redacted;
+      }
+      await appendOne({
+        type,
+        data: terminalData(redacted),
+        eventId: terminalEventId(redacted.executionId, type)
+      }, false);
+      return redacted;
+    }
+  };
+}
+function isObjectData(value2) {
+  return typeof value2 === "object" && value2 !== null && !Array.isArray(value2);
+}
+function redactEvent(event, redactor) {
+  return { ...event, data: redactor.redactJson(event.data) };
+}
+function redactEventData(value2, redactor) {
+  return redactor.redactJson(value2);
+}
+function redactTerminal(terminal, redactor) {
+  return {
+    ...terminal,
+    ...terminal.result === void 0 ? {} : { result: redactor.redactJson(terminal.result) },
+    ...terminal.interaction === void 0 ? {} : { interaction: redactInteraction(terminal.interaction, redactor) },
+    ...terminal.error === void 0 ? {} : {
+      error: {
+        ...terminal.error,
+        message: redactor.redactText(terminal.error.message),
+        ...terminal.error.details === void 0 ? {} : {
+          details: redactor.redactJson(terminal.error.details)
+        }
+      }
+    }
+  };
+}
+function terminalData(terminal) {
+  return {
+    executionId: terminal.executionId,
+    ...terminal.result === void 0 ? {} : { result: terminal.result },
+    ...terminal.interaction === void 0 ? {} : { interaction: terminal.interaction },
+    ...terminal.usage === void 0 ? {} : { usage: terminal.usage },
+    ...terminal.error === void 0 ? {} : { error: terminal.error }
+  };
+}
+function terminalEventId(executionId, type) {
+  const hex3 = createHash17("sha256").update(`pragma.local-host/mission-terminal\0${executionId}\0${type}`).digest("hex").slice(0, 32);
+  const chars = hex3.split("");
+  chars[12] = "5";
+  chars[16] = ["8", "9", "a", "b"][Number.parseInt(chars[16] ?? "8", 16) % 4] ?? "8";
+  return `${chars.slice(0, 8).join("")}-${chars.slice(8, 12).join("")}-${chars.slice(12, 16).join("")}-${chars.slice(16, 20).join("")}-${chars.slice(20, 32).join("")}`;
+}
+function redactInteraction(interaction, redactor) {
+  return {
+    ...interaction,
+    interaction: redactor.redactJson(interaction.interaction)
+  };
+}
+var init_mission_event_projector = __esm({
+  "packages/local-host/dist/mission-event-projector.js"() {
+    "use strict";
+    init_redaction();
+  }
+});
+
 // packages/local-host/dist/run.js
 import { randomUUID as randomUUID24 } from "node:crypto";
 function createLocalHostRunApplication(options2) {
@@ -82645,29 +82769,17 @@ function createLocalHostRunApplication(options2) {
     const pendingHumanEvents = [];
     let humanProcessing = Promise.resolve();
     let humanFailure;
-    let eventProjection = Promise.resolve();
-    let eventProjectionFailure;
     let missionStarted = existingEvents.some((event) => event.type === "run.started");
     const pendingProjectionEvents = [];
-    const publishEvent = (event) => {
-      presentation.onEvent?.(redactEvent(event, redactor));
-    };
-    const projectEvent = (event) => {
-      if (typeof event.data !== "object" || event.data === null || Array.isArray(event.data)) {
-        publishEvent({ ...redactEvent(event, redactor), replayable: false, cursor: void 0 });
-        return;
-      }
-      eventProjection = eventProjection.then(async () => {
-        const committed = await options2.mission.append(reservation.missionId, guard, event.type, redactEventData(event.data, redactor), event.eventId);
-        publishEvent({
-          ...redactEvent(event, redactor),
-          replayable: true,
-          cursor: committed.cursor
-        });
-      }).catch((error52) => {
-        eventProjectionFailure ??= error52;
-      });
-    };
+    const eventProjector = createLocalHostMissionEventProjector({
+      missionId: reservation.missionId,
+      guard,
+      mission: options2.mission,
+      redactor,
+      onEvent: presentation.onEvent,
+      knownEventIds: existingEvents.map((event) => event.eventId)
+    });
+    const projectEvent = (event) => eventProjector.enqueue(event);
     const processHumanInteraction = (interaction) => {
       humanProcessing = humanProcessing.then(async () => {
         const decision = await presentation.onHumanInteraction?.(interaction);
@@ -82793,20 +82905,10 @@ function createLocalHostRunApplication(options2) {
     });
     const outcome = handle.result.then(async (terminal) => {
       try {
-        await eventProjection;
-        if (eventProjectionFailure !== void 0)
-          throw eventProjectionFailure;
         await humanProcessing;
         if (humanFailure !== void 0)
           throw humanFailure;
-        const safeTerminal = redactTerminal(terminal, redactor);
-        await options2.mission.append(reservation.missionId, guard, `run.${safeTerminal.status}`, {
-          executionId: safeTerminal.executionId,
-          ...safeTerminal.result === void 0 ? {} : { result: safeTerminal.result },
-          ...safeTerminal.interaction === void 0 ? {} : { interaction: safeTerminal.interaction },
-          ...safeTerminal.usage === void 0 ? {} : { usage: safeTerminal.usage },
-          ...safeTerminal.error === void 0 ? {} : { error: safeTerminal.error }
-        });
+        const safeTerminal = await eventProjector.appendTerminal(terminal);
         return {
           ...safeTerminal,
           missionId: reservation.missionId,
@@ -82872,41 +82974,6 @@ function createLocalHostRunApplication(options2) {
     }
   };
 }
-function redactEvent(event, redactor) {
-  if (redactor === void 0)
-    return event;
-  return { ...event, data: redactor.redactJson(event.data) };
-}
-function redactEventData(value2, redactor) {
-  const redacted = redactor?.redactJson(value2) ?? value2;
-  return redacted;
-}
-function redactTerminal(terminal, redactor) {
-  if (redactor === void 0)
-    return terminal;
-  return {
-    ...terminal,
-    ...terminal.result === void 0 ? {} : { result: redactor.redactJson(terminal.result) },
-    ...terminal.interaction === void 0 ? {} : { interaction: redactInteraction(terminal.interaction, redactor) },
-    ...terminal.error === void 0 ? {} : {
-      error: {
-        ...terminal.error,
-        message: redactor.redactText(terminal.error.message),
-        ...terminal.error.details === void 0 ? {} : {
-          details: redactor.redactJson(terminal.error.details)
-        }
-      }
-    }
-  };
-}
-function redactInteraction(interaction, redactor) {
-  if (redactor === void 0)
-    return interaction;
-  return {
-    ...interaction,
-    interaction: redactor.redactJson(interaction.interaction)
-  };
-}
 function createControllerRunMissionPort(controller, options2 = {}) {
   const ownerScope = options2.ownerScope ?? createMissionOwnerScope({
     controller,
@@ -83188,6 +83255,7 @@ var init_run = __esm({
     init_owner_scope();
     init_run_payload();
     init_redaction();
+    init_mission_event_projector();
     MISSION_EVENT_ID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/iu;
   }
 });
@@ -83700,6 +83768,7 @@ function createLocalHostCoreMissionControlAdapter(options2) {
   });
   const recoveredOwners = /* @__PURE__ */ new Map();
   const settlementTasks = /* @__PURE__ */ new Map();
+  const redactor = options2.redactor ?? createRunRedactor();
   const createApp = (hostContextBindings) => options2.app ?? createPragma({
     pragmaHome: options2.pragmaHome,
     runtimes: options2.runtimes,
@@ -83773,7 +83842,7 @@ function createLocalHostCoreMissionControlAdapter(options2) {
   const recoverMission = async (missionId) => {
     await recover(missionId);
   };
-  const settleRecoveredOwner = async (missionId) => {
+  const settleRecoveredOwner = async (missionId, guard) => {
     if (options2.releaseMissionOwner === void 0)
       return;
     await unrefDelay(25);
@@ -83794,6 +83863,14 @@ function createLocalHostCoreMissionControlAdapter(options2) {
           await unrefDelay(100);
           continue;
         }
+        await projectRecoveredOwner({
+          missionId,
+          guard,
+          executionIds: state2.executionIds,
+          executions,
+          mission: options2.mission,
+          redactor
+        });
         const checkpointed = state2.lastStatus === "waiting" || prompts.some((prompt) => prompt.status === "queued");
         if (checkpointed)
           await owner.session.releaseAfterHumanCheckpoint();
@@ -83808,6 +83885,14 @@ function createLocalHostCoreMissionControlAdapter(options2) {
             continue;
           }
         }
+        await projectRecoveredOwner({
+          missionId,
+          guard,
+          executionIds: [missionId],
+          executions,
+          mission: options2.mission,
+          redactor
+        });
       }
       if (recoveredOwners.get(missionId) === owner)
         recoveredOwners.delete(missionId);
@@ -83815,12 +83900,12 @@ function createLocalHostCoreMissionControlAdapter(options2) {
       return;
     }
   };
-  const scheduleRecoveredOwnerSettlement = (missionId) => {
+  const scheduleRecoveredOwnerSettlement = (missionId, guard) => {
     if (options2.releaseMissionOwner === void 0 || !recoveredOwners.has(missionId))
       return;
     if (settlementTasks.has(missionId))
       return;
-    const task = settleRecoveredOwner(missionId).finally(() => {
+    const task = settleRecoveredOwner(missionId, guard).finally(() => {
       if (settlementTasks.get(missionId) === task)
         settlementTasks.delete(missionId);
     });
@@ -83970,10 +84055,19 @@ function createLocalHostCoreMissionControlAdapter(options2) {
       }
       recoveredOwners.delete(missionId);
     },
-    releaseAfterHumanCheckpoint: async (missionId) => {
+    releaseAfterHumanCheckpoint: async (missionId, guard) => {
       const owner = recoveredOwners.get(missionId);
       if (owner === void 0)
         return;
+      const executionIds = owner.kind === "session" ? (await owner.session.getState()).executionIds : [missionId];
+      await projectRecoveredOwner({
+        missionId,
+        guard,
+        executionIds,
+        executions,
+        mission: options2.mission,
+        redactor
+      });
       if (owner.kind === "session") {
         await owner.session.releaseAfterHumanCheckpoint();
       }
@@ -83987,9 +84081,9 @@ function createLocalHostCoreMissionControlAdapter(options2) {
           result: await applyCoreMissionCommand({ command, executions, recover })
         };
       },
-      afterOutcome({ command }) {
+      afterOutcome({ command, guard }) {
         if (recoveredOwners.has(command.missionId)) {
-          scheduleRecoveredOwnerSettlement(command.missionId);
+          scheduleRecoveredOwnerSettlement(command.missionId, guard);
         } else {
           scheduleUnbackedMissionOwnerSettlement(command.missionId);
         }
@@ -84240,6 +84334,79 @@ async function applyFlowResponse(execution, executions, command) {
   await execution.respondToHumanInteraction(interactionId, toCoreResponse(envelope.interaction, response), { requestId: command.request.requestId });
   return { missionId: command.missionId, executionId: execution.executionId, interactionId };
 }
+async function projectRecoveredOwner(options2) {
+  const snapshot = await options2.mission.controller.readSnapshot({
+    missionId: options2.missionId
+  });
+  const knownEventIds = new Set(snapshot.events.map((event) => event.eventId));
+  const projector = createLocalHostMissionEventProjector({
+    missionId: options2.missionId,
+    guard: options2.guard,
+    mission: options2.mission,
+    redactor: options2.redactor,
+    knownEventIds
+  });
+  for (const executionId of new Set(options2.executionIds)) {
+    const events = await options2.executions.readEvents(executionId);
+    const pending = /* @__PURE__ */ new Map();
+    const mappedEvents = events.map((event) => mapExecutionEvent(event, options2.missionId, executionId, pending));
+    let lastKnownIndex = -1;
+    events.forEach((event, index3) => {
+      if (knownEventIds.has(event.eventId))
+        lastKnownIndex = index3;
+    });
+    for (const event of mappedEvents.slice(lastKnownIndex + 1)) {
+      await projector.append(event);
+    }
+    const terminal = await terminalFromRecoveredExecution({
+      executions: options2.executions,
+      executionId,
+      missionId: options2.missionId,
+      pending
+    });
+    if (terminal !== void 0)
+      await projector.appendTerminal(terminal);
+  }
+  await projector.flush();
+}
+async function terminalFromRecoveredExecution(options2) {
+  const execution = await options2.executions.get(options2.executionId);
+  if (execution === void 0)
+    return void 0;
+  if (execution.status === "waiting") {
+    const interaction = await readPendingInteraction(options2.executions, options2.executionId, options2.missionId, options2.pending);
+    return interaction === void 0 ? void 0 : {
+      status: "input_required",
+      executionId: options2.executionId,
+      interaction,
+      ...execution.usage === void 0 ? {} : { usage: execution.usage }
+    };
+  }
+  if (execution.status === "succeeded") {
+    return {
+      status: "succeeded",
+      executionId: options2.executionId,
+      result: toJsonValue2(execution.output === void 0 ? void 0 : unwrapInvocationOutput(execution.output)),
+      ...execution.usage === void 0 ? {} : { usage: execution.usage }
+    };
+  }
+  if (execution.status === "failed") {
+    return {
+      status: "failed",
+      executionId: options2.executionId,
+      error: executionError(execution.error),
+      ...execution.usage === void 0 ? {} : { usage: execution.usage }
+    };
+  }
+  if (execution.status === "cancelled" || execution.status === "interrupted") {
+    return {
+      status: "interrupted",
+      executionId: options2.executionId,
+      ...execution.usage === void 0 ? {} : { usage: execution.usage }
+    };
+  }
+  return void 0;
+}
 async function readActiveExpertTarget(sessions, missionId) {
   const state2 = await sessions.get(missionId);
   if (state2?.activeExecutionId === void 0)
@@ -84286,7 +84453,8 @@ async function waitForExecution(executions, input) {
         return {
           executionId: execution.executionId,
           status: execution.status,
-          interaction: JsonValueSchema.parse(interaction)
+          interaction: JsonValueSchema.parse(interaction),
+          ...execution.usage === void 0 ? {} : { usage: execution.usage }
         };
       }
     }
@@ -84295,17 +84463,23 @@ async function waitForExecution(executions, input) {
         return {
           executionId: execution.executionId,
           status: execution.status,
-          result: toJsonValue2(execution.output)
+          result: toJsonValue2(execution.output === void 0 ? void 0 : unwrapInvocationOutput(execution.output)),
+          ...execution.usage === void 0 ? {} : { usage: execution.usage }
         };
       }
       if (execution.status === "failed") {
         return {
           executionId: execution.executionId,
           status: execution.status,
-          error: executionError(execution.error)
+          error: executionError(execution.error),
+          ...execution.usage === void 0 ? {} : { usage: execution.usage }
         };
       }
-      return { executionId: execution.executionId, status: execution.status };
+      return {
+        executionId: execution.executionId,
+        status: execution.status,
+        ...execution.usage === void 0 ? {} : { usage: execution.usage }
+      };
     }
     await delay3(pollIntervalMs);
   }
@@ -84322,6 +84496,8 @@ function executionError(value2) {
   });
 }
 function toJsonValue2(value2) {
+  if (value2 === void 0)
+    return null;
   const parsed = JsonValueSchema.safeParse(value2);
   return parsed.success ? parsed.data : String(value2);
 }
@@ -84399,6 +84575,8 @@ var init_core_control_adapter = __esm({
     init_integration();
     init_pinned_binding();
     init_core_run();
+    init_mission_event_projector();
+    init_redaction();
   }
 });
 
@@ -94050,7 +94228,7 @@ var init_registries2 = __esm({
 });
 
 // packages/interpreter/dist/runtime/resource-adapters.js
-import { createHash as createHash17 } from "node:crypto";
+import { createHash as createHash18 } from "node:crypto";
 import { lstat as lstat2, readFile as readFile11, readdir as readdir8, realpath as realpath2 } from "node:fs/promises";
 import { isAbsolute as isAbsolute4, relative as relative4, resolve as resolve7 } from "node:path";
 function createDefaultPragmaResourceAdapterRegistry() {
@@ -94457,7 +94635,7 @@ function diagnostic(code, message) {
   return { severity: "error", code, message, path: [] };
 }
 function sha2563(value2) {
-  return createHash17("sha256").update(value2).digest("hex");
+  return createHash18("sha256").update(value2).digest("hex");
 }
 function stableStringify6(value2) {
   if (Array.isArray(value2))
@@ -94756,9 +94934,9 @@ var init_flow_values = __esm({
 });
 
 // packages/interpreter/dist/compiler/compiler-hash.js
-import { createHash as createHash18 } from "node:crypto";
+import { createHash as createHash19 } from "node:crypto";
 function sha2564(value2) {
-  return createHash18("sha256").update(value2).digest("hex");
+  return createHash19("sha256").update(value2).digest("hex");
 }
 function stableStringify7(value2) {
   if (Array.isArray(value2))
@@ -102882,14 +103060,14 @@ var init_builtin_generated = __esm({
 });
 
 // packages/built-in-agents/dist/builtin.js
-import { createHash as createHash19 } from "node:crypto";
+import { createHash as createHash20 } from "node:crypto";
 import { access, mkdir as mkdir14, writeFile as writeFile10 } from "node:fs/promises";
 import { dirname as dirname13, join as join13 } from "node:path";
 function builtInAgentResource(ref) {
   return PragmaExpertResourceSchema.parse(parsePragmaYaml(BUILT_IN_AGENT_FILES[BUILT_IN_AGENT_PATHS[ref]]));
 }
 function builtInAgentFingerprint(ref, expertResource, additionalResources = []) {
-  const hash3 = createHash19("sha256");
+  const hash3 = createHash20("sha256");
   hash3.update(ref);
   hash3.update("\0");
   for (const [path15, source] of builtInAgentSourceEntries(ref, expertResource, additionalResources)) {
@@ -102960,7 +103138,7 @@ async function exists2(path15) {
   }
 }
 function builtInAgentAdapterHost(environmentId, projectRoot, tools, external) {
-  const fingerprint = createHash19("sha256").update(JSON.stringify(tools.map((tool) => ({
+  const fingerprint = createHash20("sha256").update(JSON.stringify(tools.map((tool) => ({
     name: tool.name,
     inputSchema: tool.inputSchema,
     approval: tool.approval?.mode
@@ -106487,7 +106665,7 @@ var init_runtime_environment = __esm({
 });
 
 // packages/local-host/dist/usage.js
-import { createHash as createHash20 } from "node:crypto";
+import { createHash as createHash21 } from "node:crypto";
 import { mkdir as mkdir16, readFile as readFile14, rename as rename10, writeFile as writeFile11 } from "node:fs/promises";
 import { dirname as dirname14 } from "node:path";
 function createLocalHostUsageSink(options2) {
@@ -106543,7 +106721,7 @@ function createLocalHostUsageSink(options2) {
   };
 }
 function observationSignature(observation) {
-  return createHash20("sha256").update(JSON.stringify({
+  return createHash21("sha256").update(JSON.stringify({
     observationId: observation.observationId,
     occurredAt: observation.occurredAt,
     executionId: observation.executionId,
@@ -106588,7 +106766,7 @@ var init_logger2 = __esm({
 });
 
 // packages/local-host/dist/project-revision.js
-import { createHash as createHash21, randomUUID as randomUUID25 } from "node:crypto";
+import { createHash as createHash22, randomUUID as randomUUID25 } from "node:crypto";
 import { mkdir as mkdir17, readFile as readFile15, readdir as readdir10, rename as rename11, rm as rm12, writeFile as writeFile12 } from "node:fs/promises";
 import { dirname as dirname15, isAbsolute as isAbsolute7, join as join16, relative as relative7, resolve as resolve10 } from "node:path";
 function createLocalHostProjectRevisionReader(options2) {
@@ -106806,7 +106984,7 @@ async function readTextFiles(rootDir, excludeCompilerViewMarker = false) {
   return files;
 }
 function createCompilerViewKey(input) {
-  return createHash21("sha256").update(JSON.stringify({
+  return createHash22("sha256").update(JSON.stringify({
     sourceSnapshotHash: input.sourceSnapshotHash,
     sourceProjectFingerprint: input.sourceProjectFingerprint,
     sourceCompilerVersion: input.sourceCompilerVersion,
@@ -107195,7 +107373,7 @@ var init_native_os_keychain = __esm({
 });
 
 // packages/local-host/dist/secrets/secret-store.js
-import { createCipheriv, createDecipheriv, createHash as createHash22, randomBytes as cryptoRandomBytes, randomUUID as randomUUID26, timingSafeEqual } from "node:crypto";
+import { createCipheriv, createDecipheriv, createHash as createHash23, randomBytes as cryptoRandomBytes, randomUUID as randomUUID26, timingSafeEqual } from "node:crypto";
 import { chmod as chmod2, mkdir as mkdir18, open as open5, readFile as readFile16, readdir as readdir11, rename as rename12, rm as rm13, stat as stat10 } from "node:fs/promises";
 import { dirname as dirname16, join as join17, resolve as resolve11 } from "node:path";
 function createSecretStore(options2) {
@@ -107632,7 +107810,7 @@ async function pathExists(path15) {
   }
 }
 function sha2565(value2) {
-  return createHash22("sha256").update(value2).digest("hex");
+  return createHash23("sha256").update(value2).digest("hex");
 }
 var SECRET_STORE_SERVICE, MASTER_KEY_SCHEMA, ENVELOPE_SCHEMA, REF_SCHEMA, STORE_SCHEMA, TombstoneSchema, SecretStoreError;
 var init_secret_store = __esm({
@@ -107910,6 +108088,7 @@ __export(dist_exports, {
   createLocalHostCoreMissionControlAdapter: () => createLocalHostCoreMissionControlAdapter,
   createLocalHostCoreStores: () => createLocalHostCoreStores,
   createLocalHostMissionBoardBindings: () => createLocalHostMissionBoardBindings,
+  createLocalHostMissionEventProjector: () => createLocalHostMissionEventProjector,
   createLocalHostProjectCatalog: () => createLocalHostProjectCatalog,
   createLocalHostProjectCatalogFromHome: () => createLocalHostProjectCatalogFromHome,
   createLocalHostProjectRevisionReader: () => createLocalHostProjectRevisionReader,
@@ -107944,11 +108123,13 @@ __export(dist_exports, {
   isTerminalMissionOperationState: () => isTerminalMissionOperationState,
   listLocalHostBuiltInExecutorDescriptors: () => listLocalHostBuiltInExecutorDescriptors,
   makeMissionEventCursor: () => makeMissionEventCursor,
+  mapExecutionEvent: () => mapExecutionEvent,
   normalizeMissionPrompt: () => normalizeMissionPrompt,
   parseMissionEventCursor: () => parseMissionEventCursor,
   parseMissionPinnedBindingData: () => parseMissionPinnedBindingData,
   planMissionRetention: () => planMissionRetention,
   readPendingInteraction: () => readPendingInteraction,
+  redactInteraction: () => redactInteraction,
   resolveLateBoundSecrets: () => resolveLateBoundSecrets,
   resolveMissionRetentionPolicy: () => resolveMissionRetentionPolicy,
   retentionReport: () => retentionReport,
@@ -107958,7 +108139,7 @@ __export(dist_exports, {
   toCoreResponse: () => toCoreResponse,
   unsupportedPinnedBindingError: () => unsupportedPinnedBindingError
 });
-import { createHash as createHash23 } from "node:crypto";
+import { createHash as createHash24 } from "node:crypto";
 import { basename as basename6, isAbsolute as isAbsolute8 } from "node:path";
 function createLocalHostRuntimeResolver(options2) {
   const delegate = createStaticRuntimeResolver(options2);
@@ -108070,7 +108251,7 @@ async function resolveWorkspace(requestedPath, filesystem) {
     requestedPath,
     canonicalPath,
     displayName: basename6(canonicalPath) || canonicalPath,
-    identityHash: `sha256:${createHash23("sha256").update(canonicalPath).digest("hex")}`,
+    identityHash: `sha256:${createHash24("sha256").update(canonicalPath).digest("hex")}`,
     access: { exists: true, readable: true, writable: true },
     source: "explicit"
   });
@@ -108107,6 +108288,7 @@ var init_dist13 = __esm({
     init_migrations();
     init_run_payload();
     init_run();
+    init_mission_event_projector();
     init_core_run();
     init_core_control_adapter();
     init_built_in_executors();
@@ -147555,7 +147737,7 @@ var require_websocket = __commonJS({
     var http3 = __require("http");
     var net = __require("net");
     var tls = __require("tls");
-    var { randomBytes: randomBytes7, createHash: createHash29 } = __require("crypto");
+    var { randomBytes: randomBytes7, createHash: createHash30 } = __require("crypto");
     var { Duplex, Readable: Readable4 } = __require("stream");
     var { URL: URL2 } = __require("url");
     var PerMessageDeflate2 = require_permessage_deflate();
@@ -148223,7 +148405,7 @@ var require_websocket = __commonJS({
           abortHandshake(websocket, socket, "Invalid Upgrade header");
           return;
         }
-        const digest = createHash29("sha1").update(key + GUID).digest("base64");
+        const digest = createHash30("sha1").update(key + GUID).digest("base64");
         if (res.headers["sec-websocket-accept"] !== digest) {
           abortHandshake(websocket, socket, "Invalid Sec-WebSocket-Accept header");
           return;
@@ -148592,7 +148774,7 @@ var require_websocket_server = __commonJS({
     var EventEmitter4 = __require("events");
     var http3 = __require("http");
     var { Duplex } = __require("stream");
-    var { createHash: createHash29 } = __require("crypto");
+    var { createHash: createHash30 } = __require("crypto");
     var extension2 = require_extension();
     var PerMessageDeflate2 = require_permessage_deflate();
     var subprotocol2 = require_subprotocol();
@@ -148899,7 +149081,7 @@ var require_websocket_server = __commonJS({
           );
         }
         if (this._state > RUNNING) return abortHandshake(socket, 503);
-        const digest = createHash29("sha1").update(key + GUID).digest("base64");
+        const digest = createHash30("sha1").update(key + GUID).digest("base64");
         const headers = [
           "HTTP/1.1 101 Switching Protocols",
           "Upgrade: websocket",
@@ -334322,7 +334504,7 @@ function errorMessage2(error52) {
 }
 
 // packages/runtime/antigravity/dist/managed-home.js
-import { createHash as createHash24, randomUUID as randomUUID27 } from "node:crypto";
+import { createHash as createHash25, randomUUID as randomUUID27 } from "node:crypto";
 import { constants as constants3 } from "node:fs";
 import { access as access2, chmod as chmod3, cp as cp2, mkdir as mkdir19, readFile as readFile18, readdir as readdir12, rename as rename13, rm as rm14, stat as stat13, writeFile as writeFile13 } from "node:fs/promises";
 import { basename as basename7, dirname as dirname18, isAbsolute as isAbsolute10, join as join20, posix as posix3, resolve as resolve13, win32 as win322 } from "node:path";
@@ -334591,7 +334773,7 @@ function readEnvironmentValue(environment, name, platform3) {
   return matched === void 0 ? void 0 : environment[matched];
 }
 function createManagedAntigravityIdentity(agentId, sessionDir) {
-  const namespace = createHash24("sha256").update("pragma.antigravity-managed-identity/v1\0").update(resolve13(sessionDir)).digest("hex").slice(0, MANAGED_NAMESPACE_CHARACTERS);
+  const namespace = createHash25("sha256").update("pragma.antigravity-managed-identity/v1\0").update(resolve13(sessionDir)).digest("hex").slice(0, MANAGED_NAMESPACE_CHARACTERS);
   return {
     namespace,
     agentName: managedAgentName(agentId, namespace),
@@ -334900,7 +335082,7 @@ function isReplaceError(error52) {
 
 // packages/runtime/antigravity/dist/models.js
 init_dist6();
-import { createHash as createHash25 } from "node:crypto";
+import { createHash as createHash26 } from "node:crypto";
 import { mkdir as mkdir20, mkdtemp as mkdtemp4, rm as rm15 } from "node:fs/promises";
 import { tmpdir as tmpdir3 } from "node:os";
 import { join as join21 } from "node:path";
@@ -335108,7 +335290,7 @@ function modelHasSelectionSuffix(value2) {
   return /\s+(?:(?:default|selected|current)|\[(?:default|selected|current)\]|\((?:default|selected|current)\))\s*$/i.test(value2);
 }
 function modelCatalogCacheKey(options2) {
-  return createHash25("sha256").update("pragma.antigravity-model-catalog/v1\0").update(resolveAntigravityExecutablePath(options2)).update("\0").update(options2.modelCatalogCacheRoot ?? "default").update("\0").update(options2.spawn === void 0 ? "native" : `custom:${spawnId2(options2.spawn)}`).update("\0").update(JSON.stringify(Object.entries(options2.env ?? {}).toSorted(([left], [right]) => left.localeCompare(right)))).digest("hex");
+  return createHash26("sha256").update("pragma.antigravity-model-catalog/v1\0").update(resolveAntigravityExecutablePath(options2)).update("\0").update(options2.modelCatalogCacheRoot ?? "default").update("\0").update(options2.spawn === void 0 ? "native" : `custom:${spawnId2(options2.spawn)}`).update("\0").update(JSON.stringify(Object.entries(options2.env ?? {}).toSorted(([left], [right]) => left.localeCompare(right)))).digest("hex");
 }
 function spawnId2(spawn13) {
   let id = spawnIds2.get(spawn13);
@@ -340107,7 +340289,7 @@ function readRecord4(value2) {
 
 // packages/runtime/codex/dist/codex-home.js
 init_dist6();
-import { createHash as createHash26, randomUUID as randomUUID32 } from "node:crypto";
+import { createHash as createHash27, randomUUID as randomUUID32 } from "node:crypto";
 import { lstat as lstat5, mkdir as mkdir25, readFile as readFile23, readlink, rename as rename14, rm as rm18, stat as stat18, symlink, writeFile as writeFile17 } from "node:fs/promises";
 import { dirname as dirname22, isAbsolute as isAbsolute15, join as join31, normalize, relative as relative10, resolve as resolve19, sep as sep4 } from "node:path";
 import { homedir as homedir8 } from "node:os";
@@ -340415,7 +340597,7 @@ async function syncModelsCache({ sourceHome, home, freshHome, configSnapshot, mo
   return seeded;
 }
 function fingerprintModelConfiguration(configSnapshot, modelCatalog) {
-  const hash3 = createHash26("sha256").update("pragma.codex-model-cache-binding/v1\0");
+  const hash3 = createHash27("sha256").update("pragma.codex-model-cache-binding/v1\0");
   for (const file2 of ["config.json", "config.toml"]) {
     const bytes = configSnapshot.values.get(file2);
     hash3.update(`${file2}\0`);
@@ -389778,7 +389960,7 @@ var ModelRuntime = class _ModelRuntime {
 };
 
 // node_modules/.pnpm/@earendil-works+pi-coding-agent@0.83.0_@modelcontextprotocol+sdk@1.30.0_@cfworker+json-_40ddb6b236cbde8a388a4228cb3c4733/node_modules/@earendil-works/pi-coding-agent/dist/core/package-manager.js
-import { createHash as createHash27 } from "node:crypto";
+import { createHash as createHash28 } from "node:crypto";
 import { chmodSync as chmodSync3, existsSync as existsSync13, mkdirSync as mkdirSync6, readdirSync as readdirSync9, readFileSync as readFileSync11, rmSync as rmSync2, statSync as statSync8, writeFileSync as writeFileSync6 } from "node:fs";
 import { homedir as homedir15 } from "node:os";
 import { basename as basename20, dirname as dirname37, join as join54, relative as relative14, resolve as resolve26, sep as sep11 } from "node:path";
@@ -394641,7 +394823,7 @@ var DefaultPackageManager = class {
   }
   getTemporaryDir(prefix, suffix) {
     const root = this.resolveManagedPath(getExtensionTempFolder(this.agentDir), prefix);
-    const hash3 = createHash27("sha256").update(`${prefix}-${suffix ?? ""}`).digest("hex").slice(0, 8);
+    const hash3 = createHash28("sha256").update(`${prefix}-${suffix ?? ""}`).digest("hex").slice(0, 8);
     return this.resolveManagedPath(root, hash3, suffix ?? "");
   }
   resolveManagedPath(root, ...parts) {
@@ -416317,7 +416499,7 @@ async function canUseQoderCliRuntime(options2 = {}) {
 
 // packages/runtime/qodercli/dist/models.js
 init_dist6();
-import { createHash as createHash28 } from "node:crypto";
+import { createHash as createHash29 } from "node:crypto";
 
 // node_modules/.pnpm/@qoder-ai+qoder-agent-sdk@1.0.16_@cfworker+json-schema@4.1.1_zod@4.4.3/node_modules/@qoder-ai/qoder-agent-sdk/dist/index.js
 import { spawn as Mr } from "child_process";
@@ -420615,7 +420797,7 @@ function createQoderCliModelDiscovery(options2) {
   };
 }
 function qoderModelCatalogCacheKey(options2) {
-  return createHash28("sha256").update("pragma.qoder-model-catalog/v1\0").update(resolveQoderCliExecutablePath(options2)).update("\0").update(options2.modelCatalogCacheRoot ?? "default").update("\0").update(JSON.stringify(options2.auth ?? { type: "qodercli" })).update("\0").update(JSON.stringify(Object.entries(options2.env ?? {}).toSorted(([left], [right]) => left.localeCompare(right)))).digest("hex");
+  return createHash29("sha256").update("pragma.qoder-model-catalog/v1\0").update(resolveQoderCliExecutablePath(options2)).update("\0").update(options2.modelCatalogCacheRoot ?? "default").update("\0").update(JSON.stringify(options2.auth ?? { type: "qodercli" })).update("\0").update(JSON.stringify(Object.entries(options2.env ?? {}).toSorted(([left], [right]) => left.localeCompare(right)))).digest("hex");
 }
 function notifyModelCatalogUpdated4(listener) {
   try {
@@ -421761,7 +421943,7 @@ init_dist13();
 init_integration();
 
 // apps/cli/src/version.ts
-var CLI_VERSION = false ? "0.0.0" : "0.1.0-next.10";
+var CLI_VERSION = false ? "0.0.0" : "0.1.0-next.12";
 
 // apps/cli/src/composition/default.ts
 function createCliLocalHost(input = {}) {
@@ -421844,6 +422026,7 @@ function createProductionLocalHost() {
     createHostContextBindings: async ({ missionId }) => await createLocalHostMissionBoardBindings({ pragmaHome, missionId }),
     executors: resolveExecutor
   });
+  const missionPort = createControllerRunMissionPort(missionController, { ownerScope });
   const coreControl = createLocalHostCoreMissionControlAdapter({
     pragmaHome,
     runtimes: runtimeResolver,
@@ -421851,6 +422034,7 @@ function createProductionLocalHost() {
     loggerProvider,
     executions: executionStore,
     sessions: expertSessionStore,
+    mission: missionPort,
     createHostContextBindings: async ({ missionId }) => await createLocalHostMissionBoardBindings({ pragmaHome, missionId }),
     executors: resolveExecutor,
     resolveActiveOwner: executorPort.resolveActiveOwner,
@@ -421889,7 +422073,7 @@ function createProductionLocalHost() {
   });
   const run = createLocalHostRunApplication({
     executors: executorPort,
-    mission: createControllerRunMissionPort(missionController, { ownerScope }),
+    mission: missionPort,
     commandConsumer: coreControl.consumer
   });
   const application = createLocalHostApplication({
@@ -422153,8 +422337,13 @@ function assertAppliedOperation(operation, missionId) {
   throw resumeOperationError(operation.error, missionId);
 }
 async function releaseRecoveredOwner(options2) {
+  const guard = options2.ownerScope.currentGuard(options2.missionId);
+  if (guard === void 0) {
+    await options2.coreControl.release(options2.missionId);
+    return;
+  }
   try {
-    await options2.coreControl.releaseAfterHumanCheckpoint(options2.missionId);
+    await options2.coreControl.releaseAfterHumanCheckpoint(options2.missionId, guard);
   } catch (error52) {
     if (!(error52 instanceof Error) || !error52.message.includes("active execution")) throw error52;
     return;
@@ -422292,18 +422481,47 @@ async function listMissionSnapshots(controller, missionsPath) {
     if (isNodeError4(error52, "ENOENT")) return [];
     throw error52;
   }
+  const missionIds = [];
+  for (const entry of directories) {
+    if (!entry.isDirectory() || entry.name.startsWith(".")) continue;
+    if (!MissionIdSchema.safeParse(entry.name).success) continue;
+    const localHostPath = join76(missionsPath, entry.name, "local-host");
+    let localHostDirectory;
+    try {
+      localHostDirectory = await stat26(localHostPath);
+    } catch (error52) {
+      if (isNodeError4(error52, "ENOENT")) continue;
+      throw localHostStorageError(entry.name);
+    }
+    if (!localHostDirectory.isDirectory()) throw localHostStorageError(entry.name);
+    let aggregate;
+    try {
+      aggregate = await stat26(join76(localHostPath, "aggregate.json"));
+    } catch (error52) {
+      if (isNodeError4(error52, "ENOENT")) throw localHostStorageError(entry.name);
+      throw localHostStorageError(entry.name);
+    }
+    if (!aggregate.isFile()) throw localHostStorageError(entry.name);
+    missionIds.push(entry.name);
+  }
   const snapshots = await Promise.all(
-    directories.filter((entry) => entry.isDirectory() && !entry.name.startsWith(".")).map(async (entry) => {
-      const snapshot = await controller.readSnapshot({ missionId: entry.name });
+    missionIds.map(async (missionId) => {
+      let snapshot;
+      try {
+        snapshot = await controller.readSnapshot({ missionId });
+      } catch (error52) {
+        if (IntegrationErrorSchema.safeParse(error52).success) throw error52;
+        throw localHostStorageError(missionId);
+      }
       const created = snapshot.events.find((event) => event.type === "mission.created");
       if (created === void 0) return void 0;
       const latest = snapshot.events.at(-1);
       const status = missionStatus(snapshot.events.map((event) => event.type));
       const executor = created.data["executor"];
       return {
-        id: entry.name,
-        missionId: entry.name,
-        title: entry.name,
+        id: missionId,
+        missionId,
+        title: missionId,
         ...executor === void 0 ? {} : { executor },
         ...created.data["workspace"] === void 0 ? {} : { workspace: { canonicalPath: created.data["workspace"] } },
         status,
@@ -422323,6 +422541,14 @@ async function listMissionSnapshots(controller, missionsPath) {
     (left, right) => String(right["updatedAt"]).localeCompare(String(left["updatedAt"]))
   );
 }
+function localHostStorageError(missionId) {
+  return createIntegrationError({
+    code: "STORAGE_CORRUPTED",
+    category: "protocol",
+    message: "A Local Host Mission aggregate is corrupted.",
+    details: { missionId }
+  });
+}
 function missionStatus(eventTypes) {
   for (const type of eventTypes.toReversed()) {
     switch (type) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pqpo/pragma",
-  "version": "0.1.0-next.10",
+  "version": "0.1.0-next.12",
   "description": "Pragma command-line interface",
   "license": "SEE LICENSE IN LICENSE",
   "type": "module",