@sema-agent/core 7.7.0 → 7.9.0

package/dist/core/runner/runtask.d.ts

@@ -56,6 +56,9 @@ export declare class Runner implements RunnerSelfSeat {
      *  never a wrong destroy. */
     private readonly locallyClaimedTokens;
     private static readonly PARENT_CONSTRAINT_REGISTRY_CAP;
+    /** The lanes' LIVE view of `deps` ({@link RunnerDepsSeat}): a getter, never a captured object, because
+     *  `swapModels` replaces the object and a rung reading after its own await must see the replacement. */
+    private readonly depsSeat;
     constructor(deps: RunnerDeps);
     /** design/73 §1 v1 — fire `RunnerDeps.onTaskOutcome` through the single swallow-guarded chokepoint
      *  ({@link emitTaskOutcome}: mechanical-tier only, throwing sink never breaks the caller). Public so
@@ -227,6 +230,23 @@ export declare class Runner implements RunnerSelfSeat {
      *  authority, so constraint substitution here is outside the enforced threat model (the count check
      *  catches shape MISTAKES, not a untrusted trusted caller). */
     internals?: RunInternals): Promise<TaskStream>;
+    /**
+     * design/393 S3 — the resume decision ladder after admission (E3–E10), driving the eight `resume-*` lanes in
+     * the order the one-function ladder had: the review / park twins, the approval twin and its bindings, the
+     * checkpoint screen, the internals-and-config rungs (whose one window await is taken HERE, where the ladder
+     * took it), then the three async rungs after it — apply, preflight, claim — each entering the next in its own last
+     * continuation, and the post-claim hand-off to the resumed leg. Every rung throws its typed refusal pre-CAS;
+     * the first `return` is the leg's stream.
+     */
+    private resumeLadder;
+    /**
+     * design/393 S3 — the ladder's POST-CLAIM rung (E11), the driver's own: the post-consume hook, the answering
+     * face minted from the decide's answer, the resumed leg's spec (identity continuity, the existing-session
+     * requirement, the stripped pre-aborted preempt signal), the reopen compensation and the execution-record
+     * verb bound to the row, the two post-CAS abort re-checks, and the hand-off to `runTaskStream` with the plain
+     * twin. Entered in the claim rung's last continuation, so its first statement runs on the tick the win was read.
+     */
+    private resumeHandoff;
     /**
      * design/45 resume step: with the harness idle and the branch rewound to the suspension leaf, resolve
      * the gated tool call and close the rest of the suspended batch, all by appending `toolResult`s to the