@rulvar/executor 1.112.0 → 1.113.0

package/dist/index.d.ts

@@ -273,8 +273,17 @@ interface CorruptLedgerLine {
 }
 /** A torn fragment the writer quarantined while repairing a tail (RV502). */
 interface TornLedgerArtifact {
-  /** The raw torn bytes, preserved verbatim. */
+  /**
+  * The torn fragment as a LOSSY string: invalid UTF-8 bytes decode to
+  * U+FFFD, so two different byte tails can read identically here.
+  * Kept for compatibility with rows written before RV707; use
+  * `bytesBase64` for the exact bytes.
+  */
   bytes: string;
+  /** The exact torn bytes, base64 (RV707); absent on rows written before it. */
+  bytesBase64?: string;
+  /** sha256 (hex) of the exact torn bytes (RV707); absent on legacy rows. */
+  sha256?: string;
   /** Wall-clock ms when the writer quarantined the fragment. */
   recoveredAt: number;
 }

package/dist/index.js

@@ -612,6 +612,9 @@ function containerExecutor(options) {
 * durability wraps the seam over its own fsync or database write.
 */
 const wallClock = Date.now.bind(globalThis);
+/** Strict decode (RV607/RV707): invalid UTF-8 is damage, never a
+* replacement character that forges a key or a parseable fragment. */
+const decodeStrict = (bytes) => new TextDecoder("utf-8", { fatal: true }).decode(bytes);
 /** How stale a repair lock's mtime must be before a writer may presume
 * its holder crashed and steal it. Repairs take milliseconds; ten
 * seconds is a crash verdict, not a performance budget. */
@@ -671,10 +674,10 @@ async function repairUnderLock(path, now) {
 			}
 			if (raw.length === 0 || raw[raw.length - 1] === 10) return;
 			const boundary = raw.lastIndexOf(10) + 1;
-			const fragment = raw.subarray(boundary).toString("utf8");
+			const fragment = raw.subarray(boundary);
 			let parseable = true;
 			try {
-				JSON.parse(fragment);
+				JSON.parse(decodeStrict(fragment));
 			} catch {
 				parseable = false;
 			}
@@ -686,7 +689,9 @@ async function repairUnderLock(path, now) {
 			await truncate(path, boundary);
 			await appendFile(path, `${JSON.stringify({
 				phase: "torn",
-				bytes: fragment,
+				bytes: fragment.toString("utf8"),
+				bytesBase64: fragment.toString("base64"),
+				sha256: createHash("sha256").update(fragment).digest("hex"),
 				recoveredAt: now()
 			})}\n`, "utf8");
 			return;
@@ -775,9 +780,6 @@ var LedgerCorruptionError = class extends Error {
 		this.lines = lines;
 	}
 };
-/** Strict per-line decode (RV607): invalid UTF-8 is damage, never a
-* replacement character that forges a key. */
-const decodeStrict = (bytes) => new TextDecoder("utf-8", { fatal: true }).decode(bytes);
 const isRecordObject = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
 const hasIntentShape = (value) => typeof value.idempotencyKey === "string" && typeof value.runId === "string" && typeof value.spanId === "string" && typeof value.tool === "string" && typeof value.argsHash === "string" && typeof value.executor === "string" && typeof value.workdir === "string" && typeof value.startedAt === "number" && (value.attemptId === void 0 || typeof value.attemptId === "string");
 const OUTCOME_CLASSES = /* @__PURE__ */ new Set([
@@ -798,7 +800,7 @@ function asLedgerLine(parsed) {
 	if (!isRecordObject(parsed)) return void 0;
 	if (parsed.phase === "intent") return hasIntentShape(parsed) ? parsed : void 0;
 	if (parsed.phase === "outcome") return hasIntentShape(parsed) && typeof parsed.durationMs === "number" && OUTCOME_CLASSES.has(parsed.outcome) && (typeof parsed.exitCode === "number" || parsed.exitCode === null) && (typeof parsed.signal === "string" || parsed.signal === null) ? parsed : void 0;
-	if (parsed.phase === "torn") return typeof parsed.bytes === "string" && typeof parsed.recoveredAt === "number" ? parsed : void 0;
+	if (parsed.phase === "torn") return typeof parsed.bytes === "string" && typeof parsed.recoveredAt === "number" && (parsed.bytesBase64 === void 0 || typeof parsed.bytesBase64 === "string") && (parsed.sha256 === void 0 || typeof parsed.sha256 === "string") ? parsed : void 0;
 }
 /**
 * Scans a JSONL ledger file into intents, outcomes, and the orphaned
@@ -867,6 +869,8 @@ async function loadEffectLedger(path, options) {
 			outcomes.push(rest);
 		} else tornArtifacts.push({
 			bytes: entry.bytes,
+			...entry.bytesBase64 === void 0 ? {} : { bytesBase64: entry.bytesBase64 },
+			...entry.sha256 === void 0 ? {} : { sha256: entry.sha256 },
 			recoveredAt: entry.recoveredAt
 		});
 	}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rulvar/executor",
-  "version": "1.112.0",
+  "version": "1.113.0",
   "description": "Rulvar isolated tool executors: reference ToolExecutorProvider adapters that run tool work out of process (subprocess and container) so hostile or model-generated scripts cannot reach host capabilities.",
   "type": "module",
   "license": "Apache-2.0",
@@ -22,13 +22,13 @@
     "access": "public"
   },
   "dependencies": {
-    "@rulvar/core": "1.112.0"
+    "@rulvar/core": "1.113.0"
   },
   "devDependencies": {
     "@types/node": "^22.20.1",
     "tsdown": "^0.22.14",
     "typescript": "~6.0.3",
-    "@rulvar/testing": "1.112.0"
+    "@rulvar/testing": "1.113.0"
   },
   "repository": {
     "type": "git",