@sensigo/realm 0.37.0 → 0.39.0

package/dist/store/seal-integrity.js

@@ -0,0 +1,249 @@
+import { SEAL_ARMS } from '../types/run-record.js';
+import { WorkflowError } from '../types/workflow-error.js';
+import { armToPhase, classifyForCoherence } from '../engine/eligibility.js';
+/**
+ * The four seal-integrity clauses plus the `SEAL_COHERENT` check (issue #367, design rev 3 §6-L2).
+ * Call from every store write tail that persists `next` over `stored`. Throws on violation;
+ * returns on every honest write — including the entire pre-#367 legacy population within a
+ * single-version fleet (the mixed-fleet caveat is a named residual, not a solved case).
+ */
+export function assertSealIntegrity(stored, next) {
+    // Clause 1 — STATE_SEAL_UNSTAMPED (forward, TRANSITION-scoped): a fresh seal must name its arm.
+    // Legacy terminal records re-written while terminal are exempt (stored is already terminal).
+    if (stored.terminal_state !== true &&
+        next.terminal_state === true &&
+        next.sealed_by === undefined) {
+        throw new WorkflowError(`Run '${next.id}' sealed without sealed_by — every fresh seal (non-terminal → terminal ` +
+            `write) must name its seal arm`, {
+            code: 'STATE_SEAL_UNSTAMPED',
+            category: 'STATE',
+            agentAction: 'report_to_user',
+            retryable: false,
+            details: { runId: next.id },
+        });
+    }
+    // Clause 2 — STATE_SEAL_ORPHANED (reverse, TRANSITION-scoped): a terminal -> live transition
+    // that RETAINS the stamp is an in-version stripper bug, caught the moment it happens. The
+    // unconditional form is rejected: it would wedge every old-binary-resume orphan on every
+    // subsequent write; those orphans instead derive live and self-heal at the next settle.
+    if (stored.terminal_state === true &&
+        next.terminal_state !== true &&
+        next.sealed_by !== undefined) {
+        throw new WorkflowError(`Run '${next.id}' carries sealed_by on a non-terminal write — a resume/strip path failed ` +
+            `to remove it in the same write`, {
+            code: 'STATE_SEAL_ORPHANED',
+            category: 'STATE',
+            agentAction: 'report_to_user',
+            retryable: false,
+            details: { runId: next.id, arm: next.sealed_by.arm },
+        });
+    }
+    // Clause 3 — STATE_SEAL_ERASED (cross-time): a stored stamp must survive every terminal
+    // rewrite, or a field-enumerating rewriter drains the stamped population back to prose
+    // silently. Zero legacy cost by construction — no pre-#367 stored record carries sealed_by.
+    if (stored.sealed_by !== undefined &&
+        next.terminal_state === true &&
+        next.sealed_by === undefined) {
+        throw new WorkflowError(`Run '${next.id}' terminal rewrite drops sealed_by (was '${stored.sealed_by.arm}') — ` +
+            `stamps are erase-proof while terminal`, {
+            code: 'STATE_SEAL_ERASED',
+            category: 'STATE',
+            agentAction: 'report_to_user',
+            retryable: false,
+            details: { runId: next.id, erased_arm: stored.sealed_by.arm },
+        });
+    }
+    // Clause 4 — STATE_SEAL_UNKNOWN_ARM: an arm outside SEAL_ARMS never persists through this
+    // store (the read side falls through to the classifier; the write side is loud).
+    if (next.sealed_by !== undefined &&
+        !SEAL_ARMS.includes(next.sealed_by.arm)) {
+        throw new WorkflowError(`Run '${next.id}' carries unknown seal arm '${next.sealed_by.arm}' — not in SEAL_ARMS`, {
+            code: 'STATE_SEAL_UNKNOWN_ARM',
+            category: 'STATE',
+            agentAction: 'report_to_user',
+            retryable: false,
+            details: { runId: next.id, arm: next.sealed_by.arm },
+        });
+    }
+    // Clause 6 — STATE_SEAL_REWRITTEN: a stored arm may not be CHANGED while the run stays terminal,
+    // EXCEPT by an adjudication write carrying truthful provenance. Executed before this clause
+    // existed: a plain `update()` flipped `complete` to `gate_resolution_complete`, dropped the
+    // `classified` marker and reset the retention clock, all silently — the re-attribution this
+    // design exists to end, live at its own boundary.
+    //
+    // The adjudication key is published as a day-one contract rather than added later, because the
+    // law that ships with the major says arm changes are refused; amending it afterwards would
+    // loosen a published guarantee under external implementers.
+    //
+    // A RULING SUPERSEDES THE RECORD'S OWN PROSE. The key opens this clause AND exempts the
+    // coherence audit below — permanently, on any write of a seal that carries a ruling, not just on
+    // the write that records it. The earlier reading (key opens clause 6 only; the verb co-rewrites
+    // prose for cross-phase rulings) was reversed on executed evidence: a truthful same-arm
+    // acknowledgment on a scarred record — the commonest parked case — was refused as incoherent, so
+    // the channel built for closing parked records could not touch its main customer.
+    //
+    // The prose is never rewritten to match a ruling. It is historical evidence of what the engine
+    // said at the time; the ruling resolves the disagreement without falsifying the record.
+    // Rule 3 lives OUTSIDE the both-terminal guard below, and that placement is the point: a FRESH
+    // seal is a non-terminal -> terminal write, so a rule scoped to both-terminal would never see the
+    // fabrication it exists to refuse. (It did not, until the cell for it reddened.)
+    if (next.terminal_state === true &&
+        stored.sealed_by === undefined &&
+        next.sealed_by?.adjudicated !== undefined) {
+        // Two scopes, and BOTH are load-bearing:
+        //
+        // `previous_arm: null` is the ONLY truthful provenance for a first stamp — there was no prior
+        // arm, and saying so is the operator's honest claim when they place a record the classifier
+        // refused to place. Any non-null claim here is a fabrication.
+        //
+        // And it is lawful only on a record that was ALREADY TERMINAL — the parked-legacy population.
+        // A live run reaching its first seal cannot have been ruled on — nothing had happened yet to
+        // rule on. Without this half, `null` would legalise adjudication provenance on every fresh
+        // seal in the engine.
+        const claimed = next.sealed_by.adjudicated.previous_arm;
+        if (claimed !== null || stored.terminal_state !== true) {
+            throw new WorkflowError(claimed !== null
+                ? `Run '${next.id}' claims adjudication from '${claimed}' on a record that had no seal ` +
+                    `arm — a first stamp's only truthful provenance is previous_arm: null`
+                : `Run '${next.id}' carries adjudication provenance on a LIVE run's first seal — only ` +
+                    `an already-terminal record can have been ruled on`, {
+                code: 'STATE_SEAL_REWRITTEN',
+                category: 'STATE',
+                agentAction: 'report_to_user',
+                retryable: false,
+                details: { runId: next.id, claimed_previous_arm: claimed },
+            });
+        }
+    }
+    if (stored.terminal_state === true && next.terminal_state === true) {
+        const storedArm = stored.sealed_by?.arm;
+        const nextSeal = next.sealed_by;
+        const adjudication = nextSeal?.adjudicated;
+        const storedAdjudication = stored.sealed_by?.adjudicated;
+        // A ruling is NEW-OR-CHANGED when any of its fields differ from the stored one; an untouched
+        // record spreading its own provenance forward is not making a claim.
+        //
+        // FIELD-WISE, not by serialised bytes: a store whose round trip reorders JSON keys — Postgres
+        // `jsonb` does exactly this, and it is a consumer on the punch list — would otherwise see an
+        // honest spread as a fresh claim and refuse it. A ruling's identity is what it says, not the
+        // byte order it came back in.
+        const provenanceIsNew = adjudication !== undefined &&
+            (storedAdjudication === undefined ||
+                adjudication.by !== storedAdjudication.by ||
+                adjudication.at !== storedAdjudication.at ||
+                adjudication.previous_arm !== storedAdjudication.previous_arm ||
+                adjudication.reason !== storedAdjudication.reason);
+        // (Rule 3 — no fabricated first-seal adjudication — is hoisted above; see its comment.)
+        // Rule 2 — truthfulness binds EVERY provenance write, same-arm included. Without this, a
+        // same-arm write could mint provenance naming any arm at all, and the "chain is one-step
+        // walkable" guarantee that justifies the single slot would be worthless.
+        if (storedArm !== undefined && provenanceIsNew && adjudication.previous_arm !== storedArm) {
+            throw new WorkflowError(`Run '${next.id}' claims adjudication from '${adjudication.previous_arm}' but the stored ` +
+                `arm is '${storedArm}' — a seal rewrite is lawful only with TRUTHFUL provenance`, {
+                code: 'STATE_SEAL_REWRITTEN',
+                category: 'STATE',
+                agentAction: 'report_to_user',
+                retryable: false,
+                details: {
+                    runId: next.id,
+                    stored_arm: storedArm,
+                    claimed_previous_arm: adjudication.previous_arm,
+                    ...(nextSeal !== undefined ? { next_arm: nextSeal.arm } : {}),
+                },
+            });
+        }
+        // Rule 4 — provenance is erase-proof while terminal, for the same reason the arm is: a ruling
+        // that can be quietly dropped is a ruling nobody can rely on afterwards.
+        if (storedAdjudication !== undefined && nextSeal !== undefined && adjudication === undefined) {
+            throw new WorkflowError(`Run '${next.id}' drops its adjudication provenance (ruled by ` +
+                `'${storedAdjudication.by}') — a recorded ruling is erase-proof while terminal`, {
+                code: 'STATE_SEAL_REWRITTEN',
+                category: 'STATE',
+                agentAction: 'report_to_user',
+                retryable: false,
+                details: { runId: next.id, erased_ruling_by: storedAdjudication.by },
+            });
+        }
+        // Rule 1 — the arm changed. Lawful only with truthful provenance, which rule 2 has already
+        // verified; anything else is the silent rewrite.
+        //
+        // (Rev 1 of this clause also carried a "stored had none, or differs" conjunct here. It is
+        // DELETED deliberately: once rule 2 binds every provenance write, the state it guarded is
+        // unreachable in any lawful history, and the conjunct was comparator-ambiguous dead code.
+        // Recorded so nobody re-adds it looking at the flip case alone.)
+        if (storedArm !== undefined && nextSeal !== undefined && nextSeal.arm !== storedArm) {
+            // Riding a PRIOR ruling's provenance is a rewrite, not an adjudication. Without this, a
+            // write could flip the arm while spreading the stored ruling forward untouched and pass
+            // every other rule — and once the coherence audit stops blocking such a write (it is exempt
+            // now, by design), nothing else would. A genuine ruling mints fresh provenance, which rule 2
+            // has already checked for truthfulness. Honest spreads never change the arm, so no lawful
+            // path is affected.
+            if (adjudication !== undefined && !provenanceIsNew) {
+                throw new WorkflowError(`Run '${next.id}' changes its seal arm ('${storedArm}' -> '${nextSeal.arm}') while ` +
+                    `carrying a PRIOR ruling unchanged — an arm change must carry a NEW ruling; riding a ` +
+                    `prior ruling's provenance is a rewrite`, {
+                    code: 'STATE_SEAL_REWRITTEN',
+                    category: 'STATE',
+                    agentAction: 'report_to_user',
+                    retryable: false,
+                    details: { runId: next.id, stored_arm: storedArm, next_arm: nextSeal.arm },
+                });
+            }
+            if (adjudication === undefined) {
+                throw new WorkflowError(`Run '${next.id}' rewrites its seal arm ('${storedArm}' -> '${nextSeal.arm}') — a ` +
+                    `recorded seal is immutable while the run is terminal, except by an adjudication ` +
+                    `write carrying truthful provenance`, {
+                    code: 'STATE_SEAL_REWRITTEN',
+                    category: 'STATE',
+                    agentAction: 'report_to_user',
+                    retryable: false,
+                    details: { runId: next.id, stored_arm: storedArm, next_arm: nextSeal.arm },
+                });
+            }
+        }
+    }
+    // SEAL_COHERENT — on any terminal write carrying a stamp: the record's OWN markers/prose,
+    // classified as if unstamped, must agree with the arm AT PHASE LEVEL (the classifier
+    // legitimately cannot tell `complete` from `gate_resolution_complete` — that granularity is
+    // exactly what the arm adds). This catches the old-binary re-seal channel, where a stale arm is
+    // preserved by spread over a record whose prose now says otherwise, at the next new-binary
+    // write. An unclassifiable record passes — never guess.
+    //
+    // The comparator is `classifyForCoherence`, NOT the full classifier: it omits the
+    // abandoned-marker branch, the sole measured false-positive source (a record legitimately
+    // carrying `abandoned_at` from an earlier life would contradict an honest arm). The
+    // aborted-marker branch stays live, because the reason-less `guard_abort` re-seal is
+    // marker-only-visible and would otherwise go uncaught. Named blindness: a stale arm on a record
+    // carrying `abandoned_at` is invisible here — that is BOTH abandon-class arms,
+    // `abandon_requested` AND `cleanup_sweep`. Their observer is the migrate sweep's incoherent
+    // bucket in a later PR, which uses the FULL classifier.
+    //
+    // EXEMPTION (issue #367 part 4): a seal carrying an adjudication is skipped entirely. This audit
+    // exists to catch SILENT drift — a stale arm riding a spread, a mis-stamped writer. A ruling is
+    // the opposite of silent: loud, attributed, and erase-proof while terminal. It is PERMANENT
+    // rather than scoped to the ruling write, because a ruled-but-scarred record has to stay
+    // writable afterwards; exempting only the ruling write would wedge the record one write later.
+    //
+    // NAMED BLINDNESS, beside the abandoned-marker one: prose drift on an already-adjudicated record
+    // is unwatched here AND at the migrate audit, which short-circuits ruled records too. Accepted —
+    // the ruling supersedes prose by contract, and store-level tampering is outside this threat
+    // model. A fabricated ruling is not silent: it names who made it and when.
+    if (next.terminal_state === true &&
+        next.sealed_by !== undefined &&
+        next.sealed_by.adjudicated === undefined) {
+        const { sealed_by: _stamp, ...sansStamp } = next;
+        const classified = classifyForCoherence(sansStamp);
+        if (classified !== undefined && armToPhase(classified) !== armToPhase(next.sealed_by.arm)) {
+            throw new WorkflowError(`Run '${next.id}' seal arm '${next.sealed_by.arm}' (phase ` +
+                `'${armToPhase(next.sealed_by.arm)}') disagrees with the record's own markers/prose ` +
+                `(classify: '${classified}', phase '${armToPhase(classified)}') — stale or mis-stamped arm`, {
+                code: 'STATE_SEAL_INCOHERENT',
+                category: 'STATE',
+                agentAction: 'report_to_user',
+                retryable: false,
+                details: { runId: next.id, arm: next.sealed_by.arm, classified_arm: classified },
+            });
+        }
+    }
+}
+//# sourceMappingURL=seal-integrity.js.map

package/dist/store/seal-integrity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seal-integrity.js","sourceRoot":"","sources":["../../src/store/seal-integrity.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,UAAU,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAE5E;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAiB,EAAE,IAAe;IACpE,gGAAgG;IAChG,6FAA6F;IAC7F,IACE,MAAM,CAAC,cAAc,KAAK,IAAI;QAC9B,IAAI,CAAC,cAAc,KAAK,IAAI;QAC5B,IAAI,CAAC,SAAS,KAAK,SAAS,EAC5B,CAAC;QACD,MAAM,IAAI,aAAa,CACrB,QAAQ,IAAI,CAAC,EAAE,yEAAyE;YACtF,+BAA+B,EACjC;YACE,IAAI,EAAE,sBAAsB;YAC5B,QAAQ,EAAE,OAAO;YACjB,WAAW,EAAE,gBAAgB;YAC7B,SAAS,EAAE,KAAK;YAChB,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE;SAC5B,CACF,CAAC;IACJ,CAAC;IACD,6FAA6F;IAC7F,0FAA0F;IAC1F,yFAAyF;IACzF,wFAAwF;IACxF,IACE,MAAM,CAAC,cAAc,KAAK,IAAI;QAC9B,IAAI,CAAC,cAAc,KAAK,IAAI;QAC5B,IAAI,CAAC,SAAS,KAAK,SAAS,EAC5B,CAAC;QACD,MAAM,IAAI,aAAa,CACrB,QAAQ,IAAI,CAAC,EAAE,2EAA2E;YACxF,gCAAgC,EAClC;YACE,IAAI,EAAE,qBAAqB;YAC3B,QAAQ,EAAE,OAAO;YACjB,WAAW,EAAE,gBAAgB;YAC7B,SAAS,EAAE,KAAK;YAChB,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE;SACrD,CACF,CAAC;IACJ,CAAC;IACD,wFAAwF;IACxF,uFAAuF;IACvF,4FAA4F;IAC5F,IACE,MAAM,CAAC,SAAS,KAAK,SAAS;QAC9B,IAAI,CAAC,cAAc,KAAK,IAAI;QAC5B,IAAI,CAAC,SAAS,KAAK,SAAS,EAC5B,CAAC;QACD,MAAM,IAAI,aAAa,CACrB,QAAQ,IAAI,CAAC,EAAE,4CAA4C,MAAM,CAAC,SAAS,CAAC,GAAG,OAAO;YACpF,uCAAuC,EACzC;YACE,IAAI,EAAE,mBAAmB;YACzB,QAAQ,EAAE,OAAO;YACjB,WAAW,EAAE,gBAAgB;YAC7B,SAAS,EAAE,KAAK;YAChB,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE;SAC9D,CACF,CAAC;IACJ,CAAC;IACD,0FAA0F;IAC1F,iFAAiF;IACjF,IACE,IAAI,CAAC,SAAS,KAAK,SAAS;QAC5B,CAAE,SAA+B,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAC9D,CAAC;QACD,MAAM,IAAI,aAAa,CACrB,QAAQ,IAAI,CAAC,EAAE,+BAA+B,IAAI,CAAC,SAAS,CAAC,GAAG,sBAAsB,EACtF;YACE,IAAI,EAAE,wBAAwB;YAC9B,QAAQ,EAAE,OAAO;YACjB,WAAW,EAAE,gBAAgB;YAC7B,SAAS,EAAE,KAAK;YAChB,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE;SACrD,CACF,CAAC;IACJ,CAAC;IACD,iGAAiG;IACjG,4FAA4F;IAC5F,4FAA4F;IAC5F,4FAA4F;IAC5F,kDAAkD;IAClD,EAAE;IACF,+FAA+F;IAC/F,2FAA2F;IAC3F,4DAA4D;IAC5D,EAAE;IACF,wFAAwF;IACxF,iGAAiG;IACjG,gGAAgG;IAChG,wFAAwF;IACxF,iGAAiG;IACjG,kFAAkF;IAClF,EAAE;IACF,+FAA+F;IAC/F,wFAAwF;IACxF,+FAA+F;IAC/F,kGAAkG;IAClG,iFAAiF;IACjF,IACE,IAAI,CAAC,cAAc,KAAK,IAAI;QAC5B,MAAM,CAAC,SAAS,KAAK,SAAS;QAC9B,IAAI,CAAC,SAAS,EAAE,WAAW,KAAK,SAAS,EACzC,CAAC;QACD,yCAAyC;QACzC,EAAE;QACF,8FAA8F;QAC9F,4FAA4F;QAC5F,8DAA8D;QAC9D,EAAE;QACF,8FAA8F;QAC9F,6FAA6F;QAC7F,2FAA2F;QAC3F,sBAAsB;QACtB,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,YAAY,CAAC;QACxD,IAAI,OAAO,KAAK,IAAI,IAAI,MAAM,CAAC,cAAc,KAAK,IAAI,EAAE,CAAC;YACvD,MAAM,IAAI,aAAa,CACrB,OAAO,KAAK,IAAI;gBACd,CAAC,CAAC,QAAQ,IAAI,CAAC,EAAE,+BAA+B,OAAO,iCAAiC;oBACpF,sEAAsE;gBAC1E,CAAC,CAAC,QAAQ,IAAI,CAAC,EAAE,sEAAsE;oBACnF,mDAAmD,EACzD;gBACE,IAAI,EAAE,sBAAsB;gBAC5B,QAAQ,EAAE,OAAO;gBACjB,WAAW,EAAE,gBAAgB;gBAC7B,SAAS,EAAE,KAAK;gBAChB,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,oBAAoB,EAAE,OAAO,EAAE;aAC3D,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,cAAc,KAAK,IAAI,IAAI,IAAI,CAAC,cAAc,KAAK,IAAI,EAAE,CAAC;QACnE,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,EAAE,GAAG,CAAC;QACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC;QAChC,MAAM,YAAY,GAAG,QAAQ,EAAE,WAAW,CAAC;QAC3C,MAAM,kBAAkB,GAAG,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC;QACzD,6FAA6F;QAC7F,qEAAqE;QACrE,EAAE;QACF,8FAA8F;QAC9F,6FAA6F;QAC7F,6FAA6F;QAC7F,8BAA8B;QAC9B,MAAM,eAAe,GACnB,YAAY,KAAK,SAAS;YAC1B,CAAC,kBAAkB,KAAK,SAAS;gBAC/B,YAAY,CAAC,EAAE,KAAK,kBAAkB,CAAC,EAAE;gBACzC,YAAY,CAAC,EAAE,KAAK,kBAAkB,CAAC,EAAE;gBACzC,YAAY,CAAC,YAAY,KAAK,kBAAkB,CAAC,YAAY;gBAC7D,YAAY,CAAC,MAAM,KAAK,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAEvD,wFAAwF;QACxF,yFAAyF;QACzF,yFAAyF;QACzF,yEAAyE;QACzE,IAAI,SAAS,KAAK,SAAS,IAAI,eAAe,IAAI,YAAY,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YAC1F,MAAM,IAAI,aAAa,CACrB,QAAQ,IAAI,CAAC,EAAE,+BAA+B,YAAY,CAAC,YAAY,mBAAmB;gBACxF,WAAW,SAAS,4DAA4D,EAClF;gBACE,IAAI,EAAE,sBAAsB;gBAC5B,QAAQ,EAAE,OAAO;gBACjB,WAAW,EAAE,gBAAgB;gBAC7B,SAAS,EAAE,KAAK;gBAChB,OAAO,EAAE;oBACP,KAAK,EAAE,IAAI,CAAC,EAAE;oBACd,UAAU,EAAE,SAAS;oBACrB,oBAAoB,EAAE,YAAY,CAAC,YAAY;oBAC/C,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC9D;aACF,CACF,CAAC;QACJ,CAAC;QACD,8FAA8F;QAC9F,yEAAyE;QACzE,IAAI,kBAAkB,KAAK,SAAS,IAAI,QAAQ,KAAK,SAAS,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;YAC7F,MAAM,IAAI,aAAa,CACrB,QAAQ,IAAI,CAAC,EAAE,gDAAgD;gBAC7D,IAAI,kBAAkB,CAAC,EAAE,sDAAsD,EACjF;gBACE,IAAI,EAAE,sBAAsB;gBAC5B,QAAQ,EAAE,OAAO;gBACjB,WAAW,EAAE,gBAAgB;gBAC7B,SAAS,EAAE,KAAK;gBAChB,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,gBAAgB,EAAE,kBAAkB,CAAC,EAAE,EAAE;aACrE,CACF,CAAC;QACJ,CAAC;QACD,2FAA2F;QAC3F,iDAAiD;QACjD,EAAE;QACF,0FAA0F;QAC1F,0FAA0F;QAC1F,0FAA0F;QAC1F,iEAAiE;QACjE,IAAI,SAAS,KAAK,SAAS,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YACpF,wFAAwF;YACxF,wFAAwF;YACxF,4FAA4F;YAC5F,6FAA6F;YAC7F,0FAA0F;YAC1F,oBAAoB;YACpB,IAAI,YAAY,KAAK,SAAS,IAAI,CAAC,eAAe,EAAE,CAAC;gBACnD,MAAM,IAAI,aAAa,CACrB,QAAQ,IAAI,CAAC,EAAE,4BAA4B,SAAS,SAAS,QAAQ,CAAC,GAAG,WAAW;oBAClF,sFAAsF;oBACtF,wCAAwC,EAC1C;oBACE,IAAI,EAAE,sBAAsB;oBAC5B,QAAQ,EAAE,OAAO;oBACjB,WAAW,EAAE,gBAAgB;oBAC7B,SAAS,EAAE,KAAK;oBAChB,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAC,GAAG,EAAE;iBAC3E,CACF,CAAC;YACJ,CAAC;YACD,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;gBAC/B,MAAM,IAAI,aAAa,CACrB,QAAQ,IAAI,CAAC,EAAE,6BAA6B,SAAS,SAAS,QAAQ,CAAC,GAAG,SAAS;oBACjF,kFAAkF;oBAClF,oCAAoC,EACtC;oBACE,IAAI,EAAE,sBAAsB;oBAC5B,QAAQ,EAAE,OAAO;oBACjB,WAAW,EAAE,gBAAgB;oBAC7B,SAAS,EAAE,KAAK;oBAChB,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAC,GAAG,EAAE;iBAC3E,CACF,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IACD,0FAA0F;IAC1F,qFAAqF;IACrF,4FAA4F;IAC5F,gGAAgG;IAChG,2FAA2F;IAC3F,wDAAwD;IACxD,EAAE;IACF,kFAAkF;IAClF,0FAA0F;IAC1F,oFAAoF;IACpF,qFAAqF;IACrF,gGAAgG;IAChG,+EAA+E;IAC/E,4FAA4F;IAC5F,wDAAwD;IACxD,EAAE;IACF,iGAAiG;IACjG,gGAAgG;IAChG,4FAA4F;IAC5F,yFAAyF;IACzF,+FAA+F;IAC/F,EAAE;IACF,iGAAiG;IACjG,iGAAiG;IACjG,4FAA4F;IAC5F,2EAA2E;IAC3E,IACE,IAAI,CAAC,cAAc,KAAK,IAAI;QAC5B,IAAI,CAAC,SAAS,KAAK,SAAS;QAC5B,IAAI,CAAC,SAAS,CAAC,WAAW,KAAK,SAAS,EACxC,CAAC;QACD,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,SAAS,EAAE,GAAG,IAAI,CAAC;QACjD,MAAM,UAAU,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;QACnD,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,CAAC,UAAU,CAAC,KAAK,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1F,MAAM,IAAI,aAAa,CACrB,QAAQ,IAAI,CAAC,EAAE,eAAe,IAAI,CAAC,SAAS,CAAC,GAAG,WAAW;gBACzD,IAAI,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,mDAAmD;gBACrF,eAAe,UAAU,aAAa,UAAU,CAAC,UAAU,CAAC,+BAA+B,EAC7F;gBACE,IAAI,EAAE,uBAAuB;gBAC7B,QAAQ,EAAE,OAAO;gBACjB,WAAW,EAAE,gBAAgB;gBAC7B,SAAS,EAAE,KAAK;gBAChB,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,cAAc,EAAE,UAAU,EAAE;aACjF,CACF,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/store/store-interface.d.ts

@@ -1,4 +1,4 @@
-import type { RunRecord } from '../types/run-record.js';
+import type { RunRecord, SealedBy } from '../types/run-record.js';
 import type { WorkflowDefinition } from '../types/workflow-definition.js';
 import type { SettlementDelta, SettlementResult } from '../types/settlement.js';
 /**
@@ -43,7 +43,7 @@ import type { SettlementDelta, SettlementResult } from '../types/settlement.js';
  *    bumping it forces every full-set-declaring store's own fidelity TCK to grow two new cases at
  *    the SAME compile, so a store cannot silently drift out of sync with what settleStep needs.
  */
-export type LoadBearingRunRecordField = 'capability_blocks' | 'workflow_context_snapshots' | 'extension_identity' | 'validation_rejections' | 'defaulted_steps' | 'settled' | 'finalizer_ledger';
+export type LoadBearingRunRecordField = 'capability_blocks' | 'workflow_context_snapshots' | 'extension_identity' | 'validation_rejections' | 'defaulted_steps' | 'settled' | 'finalizer_ledger' | 'sealed_by';
 export interface CreateRunOptions {
     workflowId: string;
     workflowVersion: number;
@@ -178,5 +178,50 @@ export interface RunStore {
     settleStep?(runId: string, delta: SettlementDelta, definition: WorkflowDefinition, options?: {
         now?: Date;
     }): Promise<SettlementResult>;
+    /**
+     * Issue #367 (part 3): write a `sealed_by` stamp onto an ALREADY-TERMINAL record — the migration
+     * vehicle's only write verb. Optional and dormant, exactly like {@link RunStore.settleStep}: a
+     * store that does not declare it is refused by `realm run migrate --stamp-seals`, with a pointer
+     * to its own tooling, rather than silently doing nothing.
+     *
+     * Four checks, in this order:
+     *
+     * 1. `expectedVersion` must match the stored version, or it THROWS `STATE_SNAPSHOT_MISMATCH` —
+     *    `update()`-parity. A version move means someone else wrote while the sweep was reading, and
+     *    the sweep's classification was made against a record that no longer exists.
+     * 2. An already-stamped record RETURNS `{stamped: false, reason: 'already_stamped'}`.
+     * 3. A non-terminal record RETURNS `{stamped: false, reason: 'not_terminal'}`.
+     * 4. Anything else is a real write, and the store's own seal-integrity boundary runs on it like
+     *    on any other tail — so an incoherent stamp is refused there too.
+     *
+     * **Predicate refusals RETURN; infra THROWS** — the same rule stated for `settleStep` above. A
+     * record that is already stamped is not an exceptional condition.
+     *
+     * **`updated_at` is BYTE-PRESERVED, and `version` is bumped.** That split is the whole reason
+     * this verb exists instead of a plain `update()`. The two clocks have disjoint consumers:
+     * `version` is read only by the CAS protocol, `updated_at` only by retention, sorting and
+     * display. Preserving BOTH makes the stamp silently erasable — a writer holding a pre-stamp
+     * snapshot passes the CAS and wipes it (executed). Preserving NEITHER resets the retention
+     * clock on every record it touches, which is precisely the harm `gc --heal` causes and this
+     * vehicle exists to avoid. Stamping is not activity.
+     *
+     * `run_phase` is re-derived in the same write, like every other write tail. For the startup-death
+     * population whose derived phase MOVED with #367, that is the clock-preserving materialisation
+     * `--heal` cannot do.
+     */
+    stampSeal?(runId: string, sealedBy: SealedBy, expectedVersion: number): Promise<StampSealResult>;
 }
+/**
+ * Issue #367 (part 3): the outcome of a {@link RunStore.stampSeal} attempt. Both refusal reasons
+ * are PREDICATE outcomes, returned rather than thrown, and both carry the record as it stands so
+ * the caller can report on it without a second read.
+ */
+export type StampSealResult = {
+    stamped: true;
+    run: RunRecord;
+} | {
+    stamped: false;
+    reason: 'already_stamped' | 'not_terminal';
+    run: RunRecord;
+};
 //# sourceMappingURL=store-interface.d.ts.map

package/dist/store/store-interface.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"store-interface.d.ts","sourceRoot":"","sources":["../../src/store/store-interface.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAC1E,OAAO,KAAK,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAEhF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AACH,MAAM,MAAM,yBAAyB,GACjC,mBAAmB,GACnB,4BAA4B,GAC5B,oBAAoB,GACpB,uBAAuB,GACvB,iBAAiB,GACjB,SAAS,GACT,kBAAkB,CAAC;AAEvB,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,gIAAgI;IAChI,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,sEAAsE;IACtE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;;OAOG;IACH,eAAe,CAAC,EAAE,OAAO,GAAG,QAAQ,GAAG,iBAAiB,GAAG,OAAO,CAAC;IACnE;;;;OAIG;IACH,WAAW,CAAC,EAAE,cAAc,GAAG,MAAM,CAAC;CACvC;AAED,MAAM,WAAW,QAAQ;IACvB;;;;;;;OAOG;IACH,cAAc,EAAE,OAAO,CAAC;IAExB;;;;;;;;;;;;;;;OAeG;IACH,QAAQ,CAAC,wBAAwB,CAAC,EAAE,WAAW,CAAC,yBAAyB,CAAC,CAAC;IAE3E;;;;;;;;;;;OAWG;IACH,MAAM,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC;QAAE,GAAG,EAAE,SAAS,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAEjF,sFAAsF;IACtF,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAEvC;;;;OAIG;IACH,MAAM,CAAC,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAE9C,+DAA+D;IAC/D,IAAI,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IAEhD;;;;;;;;;;;;;;;;;;OAkBG;IACH,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,kBAAkB,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAE/F;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAiCG;IACH,UAAU,CAAC,CACT,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,eAAe,EACtB,UAAU,EAAE,kBAAkB,EAC9B,OAAO,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,IAAI,CAAA;KAAE,GACvB,OAAO,CAAC,gBAAgB,CAAC,CAAC;CAC9B"}
+{"version":3,"file":"store-interface.d.ts","sourceRoot":"","sources":["../../src/store/store-interface.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAC1E,OAAO,KAAK,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAEhF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AACH,MAAM,MAAM,yBAAyB,GACjC,mBAAmB,GACnB,4BAA4B,GAC5B,oBAAoB,GACpB,uBAAuB,GACvB,iBAAiB,GACjB,SAAS,GACT,kBAAkB,GAIlB,WAAW,CAAC;AAEhB,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,gIAAgI;IAChI,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,sEAAsE;IACtE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;;OAOG;IACH,eAAe,CAAC,EAAE,OAAO,GAAG,QAAQ,GAAG,iBAAiB,GAAG,OAAO,CAAC;IACnE;;;;OAIG;IACH,WAAW,CAAC,EAAE,cAAc,GAAG,MAAM,CAAC;CACvC;AAED,MAAM,WAAW,QAAQ;IACvB;;;;;;;OAOG;IACH,cAAc,EAAE,OAAO,CAAC;IAExB;;;;;;;;;;;;;;;OAeG;IACH,QAAQ,CAAC,wBAAwB,CAAC,EAAE,WAAW,CAAC,yBAAyB,CAAC,CAAC;IAE3E;;;;;;;;;;;OAWG;IACH,MAAM,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC;QAAE,GAAG,EAAE,SAAS,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAEjF,sFAAsF;IACtF,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAEvC;;;;OAIG;IACH,MAAM,CAAC,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAE9C,+DAA+D;IAC/D,IAAI,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IAEhD;;;;;;;;;;;;;;;;;;OAkBG;IACH,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,kBAAkB,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAE/F;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAiCG;IACH,UAAU,CAAC,CACT,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,eAAe,EACtB,UAAU,EAAE,kBAAkB,EAC9B,OAAO,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,IAAI,CAAA;KAAE,GACvB,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAE7B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA8BG;IACH,SAAS,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;CAClG;AAED;;;;GAIG;AACH,MAAM,MAAM,eAAe,GACvB;IAAE,OAAO,EAAE,IAAI,CAAC;IAAC,GAAG,EAAE,SAAS,CAAA;CAAE,GACjC;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,iBAAiB,GAAG,cAAc,CAAC;IAAC,GAAG,EAAE,SAAS,CAAA;CAAE,CAAC"}

package/dist/types/run-record.d.ts

@@ -576,6 +576,92 @@ export type SkipDetail = {
     kind: 'gate_expired';
     gate_id: string;
 };
+/**
+ * Issue #367: the closed, runtime-visible seal-arm vocabulary — the source of truth for
+ * {@link SealArm} (the `VALID_PHASES` pattern: the const array is the runtime enumeration, the
+ * type derives from it). One value per terminal seal-site function-branch in the 21-path census.
+ *
+ * APPEND-ONLY (the Tekton lesson, design rev 3 §3): an arm's meaning never changes; changed seal
+ * behaviour mints a NEW arm. That rule is what keeps every stored `sealed_by.arm` decodable
+ * forever, and what makes a future #378 resolution land as a mapping/arm ADDITION rather than as
+ * a rewrite of stored records.
+ */
+export declare const SEAL_ARMS: readonly ["complete", "gate_resolution_complete", "guard_pass_complete", "gate_expiry_default", "step_failure", "guard_resolution_error", "spawn_failure", "extensions_load_failure", "handler_abort", "guard_abort", "gate_expiry_abort", "abandon_requested", "cleanup_sweep"];
+/**
+ * Issue #367: the MECHANICAL identity of the code edge that sealed a run. Never a judgement about
+ * whether the run was good or bad: `arm -> RunPhase` and `arm -> outcome` are engine-owned total
+ * functions over this value (`eligibility.ts`) — changing either changes a JUDGEMENT; it never
+ * moves a stored record.
+ */
+export type SealArm = (typeof SEAL_ARMS)[number];
+/**
+ * Issue #367: who sealed this run — the recorded FACT `deriveRunPhase` prefers over every marker
+ * and over the terminal-reason prose.
+ */
+export interface SealedBy {
+    arm: SealArm;
+    /**
+     * The step whose settlement closed the run. ABSENT (never an `''` sentinel — a fabricated value
+     * violates the false-attestation doctrine) for the run-scoped arms (`abandon_requested`,
+     * `cleanup_sweep`, `spawn_failure`, `extensions_load_failure`) and for any stamp whose step is
+     * unknowable.
+     */
+    step?: string;
+    /**
+     * Provenance: set by the MIGRATE VEHICLE only (`realm run migrate --stamp-seals`), NEVER by a
+     * seal-site writer — a classifier-minted stamp must stay distinguishable from a writer-asserted
+     * one forever. Absent on every fresh seal; present on every record the vehicle stamped.
+     */
+    classified?: true;
+    /**
+     * Issue #367: the record of a HUMAN RULING on this run's arm — and the only lawful way an arm
+     * changes while the run is terminal. Every other rewrite is refused (`STATE_SEAL_REWRITTEN`),
+     * because re-attributing what sealed a run is the silent re-attribution this design exists to
+     * end.
+     *
+     * This provenance IS the key that opens that refusal, so it is held to the same standard as the
+     * fact it explains: `previous_arm` must truthfully name the arm being overwritten, and a write
+     * whose `previous_arm` lies is refused exactly as hard as one carrying no provenance at all.
+     *
+     * A truthful SAME-arm adjudication is lawful and meaningful — it is the "I looked at this and
+     * ruled it stays as it is" acknowledgment, which is how a parked record that turns out to be
+     * correctly stamped gets closed out rather than re-examined forever.
+     *
+     * **A ruling SUPERSEDES the record's own prose.** The coherence audit exists to catch SILENT
+     * drift; a ruling is none of those things — it is loud, attributed, and erase-proof while
+     * terminal — so a seal carrying one is exempt from that audit permanently, not just on the write
+     * that records it. The prose is NEVER rewritten to match: it is historical evidence of what the
+     * engine said at the time, and the ruling resolves the disagreement without falsifying it.
+     *
+     * ONE SLOT, and the loss is deliberate: a second ruling overwrites the first. The chain stays
+     * one-step-walkable because `previous_arm` is enforced truthful, and a full ruling history is
+     * machinery with no customer today. Like the arm itself, this field is erase-proof WHILE
+     * TERMINAL — and that scope is the whole claim: resuming a run lawfully voids the seal, and the
+     * ruling goes with it, because the sealed state it ruled on no longer exists. Resume discloses
+     * that rather than doing it silently.
+     *
+     * Nothing in the engine writes it. The operator verb that will is boarded on #367; this contract
+     * ships with the major so that law never has to be loosened afterwards.
+     */
+    adjudicated?: {
+        /** Who ruled — the operator identity as given. Never fabricated, never defaulted. */
+        by: string;
+        /** ISO-8601 timestamp of the ruling. */
+        at: string;
+        /**
+         * The arm this ruling overwrote, enforced truthful at the store boundary.
+         *
+         * `null` is the truthful statement "no arm existed before this ruling" — an operator's FIRST
+         * stamp of a parked record the classifier refused to place. It is not a wildcard: `null` on a
+         * record that HAD an arm is a lie, and the boundary refuses it exactly like any other lie. It
+         * is lawful only on a record that was ALREADY terminal; a live run's first seal can never have
+         * been adjudicated.
+         */
+        previous_arm: SealArm | null;
+        /** The operator's stated reason, verbatim. */
+        reason?: string;
+    };
+}
 export interface RunRecord {
     id: string;
     workflow_id: string;
@@ -623,7 +709,10 @@ export interface RunRecord {
     capability_blocks?: Record<string, CapabilityBlock>;
     /**
      * Derived convenience field — set by the engine on every write, read by CLI and get_run_state.
-     * Always computable from the four step sets, terminal_state, and pending_gate.
+     * NEVER an input to control flow: re-derive with `deriveRunPhase` rather than reading this
+     * (issue #279's PHASE_IS_GENERATED law; a persisted value can be stale).
+     * Issue #367: the derivation's FIRST input is now `sealed_by.arm`; the four step sets,
+     * `terminal_state`, `pending_gate` and the markers serve the legacy population beneath it.
      */
     run_phase: RunPhase;
     version: number;
@@ -656,12 +745,38 @@ export interface RunRecord {
     created_at: string;
     updated_at: string;
     terminal_state: boolean;
+    /**
+     * The run's one-line cause, as a HUMAN SENTENCE — rendered from what the sealing writer knew,
+     * for an operator to read. Issue #367: on records carrying {@link RunRecord.sealed_by} it is no
+     * longer a machine oracle; `deriveRunPhase` reads the arm. It stays the oracle for the legacy
+     * population only, via `classifyLegacySeal`, and every new consumer should key on the arm.
+     * Multi-failure runs list every failed step (issue #373).
+     */
     terminal_reason?: string;
+    /**
+     * Issue #367: which arm of the engine sealed this run — the recorded fact `deriveRunPhase`
+     * derives from FIRST, ahead of the markers and the terminal-reason prose (which are asserted
+     * congruent, not consulted, once a stamp exists). FLAT OPTIONAL: written in the SAME object
+     * literal as the `terminal_state: true` flip by every seal site; stripped in the same write by
+     * every resume/re-drive path; enforced at the store boundary (`assertSealIntegrity` — see the
+     * `STATE_SEAL_*` codes), never by the type system (a deleted writer stamp is 0 type errors —
+     * the dead-end class two earlier revisions died on). Absent on every record written before
+     * #367 — `classifyLegacySeal` is the permanent read oracle for those, so correctness never
+     * depends on a migration having run.
+     *
+     * The vocabulary is APPEND-ONLY (see {@link SEAL_ARMS}).
+     *
+     * NOT the finalizer-selection variable: `deriveEffectiveTriggers` remains `mintOutcome`-driven
+     * and the two may diverge by design.
+     */
+    sealed_by?: SealedBy;
     pending_gate?: PendingGate;
     /**
-     * Set by the engine when a guard step fires. Contains the name of the guard step
-     * that caused the abort and its evaluated conditions. Used by deriveRunPhase
-     * and surfaced by get_run_state.
+     * Set by the engine when a guard step fires. Contains the name of the guard step that caused
+     * the abort and its evaluated conditions, and is surfaced by get_run_state. Issue #367: it is
+     * ASSERTED CONGRUENT with `sealed_by` by the transforms (`SEAL_MARKERS_AGREE`) rather than read
+     * by `deriveRunPhase` — on a stamped record the arm derives the phase; on the legacy population
+     * this marker is still a derivation input via `classifyLegacySeal` and the ladder beneath it.
      */
     aborted_at?: {
         step_id: string;
@@ -674,8 +789,10 @@ export interface RunRecord {
     };
     /**
      * ISO timestamp set when a run is explicitly abandoned via `abandon_run` / `realm run abandon` /
-     * `realm run cleanup`. Authoritative for `deriveRunPhase`: its presence makes `abandoned` the
-     * derived phase regardless of `failed_steps` / `terminal_reason` (mirrors `aborted_at`).
+     * `realm run cleanup`. Issue #367: ASSERTED CONGRUENT with `sealed_by` by the transforms
+     * (`SEAL_MARKERS_AGREE`), not read by `deriveRunPhase` on a stamped record — the arm derives
+     * there. On the legacy population its presence still makes `abandoned` the derived phase
+     * regardless of `failed_steps` / `terminal_reason` (mirrors `aborted_at`).
      */
     abandoned_at?: string;
     /**

package/dist/types/run-record.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"run-record.d.ts","sourceRoot":"","sources":["../../src/types/run-record.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACtE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAE5D;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC,GAAG,SAAS,CAAC;CACrE;AAED;;;GAGG;AACH,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC,CAAC;CACzD;AAED,0EAA0E;AAC1E,MAAM,WAAW,yBAAyB;IACxC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,gCAAgC,EAAE,MAAM,CAAC;IACzC,0BAA0B,EAAE,MAAM,CAAC;IACnC,SAAS,EAAE,OAAO,CAAC;IACnB,iBAAiB,CAAC,EAAE,aAAa,GAAG,YAAY,CAAC;IACjD,4EAA4E;IAC5E,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,mGAAmG;IACnG,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,gHAAgH;IAChH,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B;;;;;;;;;;;;;;;OAeG;IACH,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC;;;;;;;;OAQG;IACH,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC;;;;;;;OAOG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAC;CAClC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,WAAW,oBAAoB;IACnC;0EACsE;IACtE,SAAS,EAAE,IAAI,CAAC;IAChB;;;;yFAIqF;IACrF,IAAI,CAAC,EAAE,OAAO,CAAC;IACf;;;;;;;;;;gCAU4B;IAC5B,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAgCG;IACH,gBAAgB,CAAC,EACb,iBAAiB,GACjB,qBAAqB,GACrB,qBAAqB,GACrB,qBAAqB,GACrB,sBAAsB,GACtB,2BAA2B,GAC3B,gBAAgB,GAChB,iBAAiB,CAAC;IACtB;wGACoG;IACpG,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,EAAE,WAAW,GAAG,QAAQ,GAAG,kBAAkB,GAAG,UAAU,MAAM,EAAE,CAAC;IAC5E;;8FAE0F;IAC1F,kBAAkB,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACrC;;;;;;;;;;;;;;;;;;OAkBG;IACH,SAAS,CAAC,EAAE;QACV,KAAK,EAAE,KAAK,CAAC;YACX,wEAAwE;YACxE,IAAI,EAAE,MAAM,CAAC;YACb,0FAA0F;YAC1F,gBAAgB,EAAE,IAAI,CAAC;YACvB;;gGAEoF;YACpF,WAAW,EAAE,OAAO,CAAC;YACrB;;;;;;;;;;;;;;;;;;;;;;;;;;;eA2BG;YACH,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;YACnB;;kDAEsC;YACtC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;SACpB,CAAC,CAAC;QACH;;;;WAIG;QACH,mBAAmB,CAAC,EAAE;YACpB,6EAA6E;YAC7E,MAAM,EAAE,MAAM,CAAC;YACf;uFAC2E;YAC3E,WAAW,CAAC,EAAE,MAAM,CAAC;YACrB;;yFAE6E;YAC7E,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;YAC1B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;YACzB;2EAC+D;YAC/D,wBAAwB,EAAE,MAAM,CAAC;SAClC,CAAC;KACH,CAAC;CACH;AAED,yFAAyF;AACzF,MAAM,WAAW,eAAe;IAC9B,8EAA8E;IAC9E,oBAAoB,EAAE,MAAM,CAAC;IAC7B,+FAA+F;IAC/F,kBAAkB,EAAE,KAAK,CAAC;QACxB,UAAU,EAAE,MAAM,CAAC;QACnB,MAAM,EAAE,OAAO,CAAC;QAChB,cAAc,EAAE,OAAO,CAAC;KACzB,CAAC,CAAC;IACH;;;;;;;;OAQG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B;;;;;;OAMG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B;kGAC8F;IAC9F,iBAAiB,CAAC,EAAE,oBAAoB,CAAC;CAC1C;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC,MAAM,EAAE,SAAS,GAAG,OAAO,GAAG,SAAS,GAAG,WAAW,CAAC;IACtD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,qGAAqG;IACrG,IAAI,CAAC,EAAE,WAAW,GAAG,eAAe,CAAC;IACrC;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;;;OAMG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;;OAKG;IACH,UAAU,CAAC,EAAE,iBAAiB,GAAG,eAAe,CAAC;IACjD,uEAAuE;IACvE,WAAW,CAAC,EAAE,eAAe,CAAC;IAC9B,6DAA6D;IAC7D,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gGAAgG;IAChG,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,oDAAoD;IACpD,UAAU,CAAC,EAAE,cAAc,EAAE,CAAC;IAC9B;;;OAGG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC1C;;;;OAIG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;OAIG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB;;;;OAIG;IACH,KAAK,CAAC,EAAE,UAAU,EAAE,CAAC;IACrB;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,aAAa,CAAC,EAAE,yBAAyB,CAAC;IAC1C;;;;;;;;;;;;OAYG;IACH,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC;;;;;OAKG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;;;OAOG;IACH,YAAY,CAAC,EAAE,UAAU,GAAG,eAAe,CAAC;CAC7C;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,iFAAiF;IACjF,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;OAIG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7C;;;;;;;;;;OAUG;IACH;sFACkF;IAClF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;yFACqF;IACrF,SAAS,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC;IACvC,0FAA0F;IAC1F,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;sGAEkG;IAClG,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;+FAC2F;IAC3F,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;GAGG;AACH,MAAM,MAAM,QAAQ,GAClB,SAAS,GAAG,cAAc,GAAG,WAAW,GAAG,QAAQ,GAAG,WAAW,GAAG,SAAS,CAAC;AAEhF,sEAAsE;AACtE,MAAM,WAAW,uBAAuB;IACtC,+CAA+C;IAC/C,WAAW,EAAE,MAAM,CAAC;IACpB,oEAAoE;IACpE,OAAO,EAAE,MAAM,CAAC;IAChB,+EAA+E;IAC/E,YAAY,EAAE,MAAM,CAAC;IACrB,iDAAiD;IACjD,SAAS,EAAE,MAAM,CAAC;IAClB,mFAAmF;IACnF,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B;;;;;;;OAOG;IACH,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB;;;;;;;OAOG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE;QAAE,IAAI,EAAE,SAAS,GAAG,SAAS,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3D,mGAAmG;IACnG,IAAI,EAAE,MAAM,CAAC;IACb,uCAAuC;IACvC,EAAE,EAAE,MAAM,CAAC;CACZ;AAED;;;;GAIG;AACH,MAAM,MAAM,UAAU,GAClB;IACE,IAAI,EAAE,YAAY,CAAC;IACnB,8EAA8E;IAC9E,UAAU,EAAE,MAAM,CAAC;IACnB,oFAAoF;IACpF,MAAM,EAAE,KAAK,CAAC;QACZ,IAAI,EAAE,MAAM,CAAC;QACb,6FAA6F;QAC7F,WAAW,EAAE,OAAO,CAAC;QACrB,oGAAoG;QACpG,cAAc,CAAC,EAAE,OAAO,CAAC;QACzB,MAAM,EAAE,OAAO,CAAC;KACjB,CAAC,CAAC;CACJ,GACD;IACE,IAAI,EAAE,4BAA4B,CAAC;IACnC,IAAI,EAAE,WAAW,CAAC;IAClB,0EAA0E;IAC1E,aAAa,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,WAAW,GAAG,QAAQ,GAAG,SAAS,CAAA;KAAE,CAAC,CAAC;CAClF,GACD;IAAE,IAAI,EAAE,eAAe,CAAA;CAAE,GACzB;IAAE,IAAI,EAAE,aAAa,CAAA;CAAE;AACzB;;;;;;;;GAQG;GACD;IACE,IAAI,EAAE,yBAAyB,CAAC;IAChC;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AACH;;;;;;;;;GASG;GACD;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAE9C,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,CAAC;IACzB;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;OAIG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IAGzB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,sFAAsF;IACtF,aAAa,EAAE,MAAM,EAAE,CAAC;IAExB;;;;;;OAMG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAE1C;;;;;;;;OAQG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAErC;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAEpD;;;OAGG;IACH,SAAS,EAAE,QAAQ,CAAC;IAEpB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,QAAQ,EAAE,gBAAgB,EAAE,CAAC;IAC7B;;;OAGG;IACH,0BAA0B,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;IACrE;;;;;;OAMG;IACH,kBAAkB,CAAC,EAAE,sBAAsB,EAAE,CAAC;IAC9C;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,OAAO,CAAC;IACxB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,YAAY,CAAC,EAAE,WAAW,CAAC;IAC3B;;;;OAIG;IACH,UAAU,CAAC,EAAE;QACX,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,CAAC,EAAE,KAAK,CAAC;YAAE,SAAS,EAAE,MAAM,CAAC;YAAC,cAAc,EAAE,OAAO,CAAC;YAAC,MAAM,EAAE,OAAO,CAAA;SAAE,CAAC,CAAC;QACpF,aAAa,CAAC,EAAE,MAAM,CAAC;KACxB,CAAC;IACF;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;;;;;;;;OAWG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/C;;;;;;;;;OASG;IACH,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2BG;IACH,OAAO,CAAC,EAAE,MAAM,CACd,MAAM,EACN;QACE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QACrB,OAAO,EAAE,UAAU,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;QAC/C,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB;;;;;;WAMG;QACH,WAAW,CAAC,EAAE,SAAS,CAAC;KACzB,CACF,CAAC;IACF;;;;;;;;;;;;;;OAcG;IACH,gBAAgB,CAAC,EAAE,MAAM,CACvB,MAAM,EACN;QACE,MAAM,EAAE,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,QAAQ,CAAC;QACtD,IAAI,EAAE,MAAM,CAAC;QACb,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CACF,CAAC;CACH"}
+{"version":3,"file":"run-record.d.ts","sourceRoot":"","sources":["../../src/types/run-record.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACtE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAE5D;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC,GAAG,SAAS,CAAC;CACrE;AAED;;;GAGG;AACH,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC,CAAC;CACzD;AAED,0EAA0E;AAC1E,MAAM,WAAW,yBAAyB;IACxC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,gCAAgC,EAAE,MAAM,CAAC;IACzC,0BAA0B,EAAE,MAAM,CAAC;IACnC,SAAS,EAAE,OAAO,CAAC;IACnB,iBAAiB,CAAC,EAAE,aAAa,GAAG,YAAY,CAAC;IACjD,4EAA4E;IAC5E,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,mGAAmG;IACnG,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,gHAAgH;IAChH,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B;;;;;;;;;;;;;;;OAeG;IACH,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC;;;;;;;;OAQG;IACH,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC;;;;;;;OAOG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAC;CAClC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,WAAW,oBAAoB;IACnC;0EACsE;IACtE,SAAS,EAAE,IAAI,CAAC;IAChB;;;;yFAIqF;IACrF,IAAI,CAAC,EAAE,OAAO,CAAC;IACf;;;;;;;;;;gCAU4B;IAC5B,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAgCG;IACH,gBAAgB,CAAC,EACb,iBAAiB,GACjB,qBAAqB,GACrB,qBAAqB,GACrB,qBAAqB,GACrB,sBAAsB,GACtB,2BAA2B,GAC3B,gBAAgB,GAChB,iBAAiB,CAAC;IACtB;wGACoG;IACpG,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,EAAE,WAAW,GAAG,QAAQ,GAAG,kBAAkB,GAAG,UAAU,MAAM,EAAE,CAAC;IAC5E;;8FAE0F;IAC1F,kBAAkB,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACrC;;;;;;;;;;;;;;;;;;OAkBG;IACH,SAAS,CAAC,EAAE;QACV,KAAK,EAAE,KAAK,CAAC;YACX,wEAAwE;YACxE,IAAI,EAAE,MAAM,CAAC;YACb,0FAA0F;YAC1F,gBAAgB,EAAE,IAAI,CAAC;YACvB;;gGAEoF;YACpF,WAAW,EAAE,OAAO,CAAC;YACrB;;;;;;;;;;;;;;;;;;;;;;;;;;;eA2BG;YACH,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;YACnB;;kDAEsC;YACtC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;SACpB,CAAC,CAAC;QACH;;;;WAIG;QACH,mBAAmB,CAAC,EAAE;YACpB,6EAA6E;YAC7E,MAAM,EAAE,MAAM,CAAC;YACf;uFAC2E;YAC3E,WAAW,CAAC,EAAE,MAAM,CAAC;YACrB;;yFAE6E;YAC7E,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;YAC1B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;YACzB;2EAC+D;YAC/D,wBAAwB,EAAE,MAAM,CAAC;SAClC,CAAC;KACH,CAAC;CACH;AAED,yFAAyF;AACzF,MAAM,WAAW,eAAe;IAC9B,8EAA8E;IAC9E,oBAAoB,EAAE,MAAM,CAAC;IAC7B,+FAA+F;IAC/F,kBAAkB,EAAE,KAAK,CAAC;QACxB,UAAU,EAAE,MAAM,CAAC;QACnB,MAAM,EAAE,OAAO,CAAC;QAChB,cAAc,EAAE,OAAO,CAAC;KACzB,CAAC,CAAC;IACH;;;;;;;;OAQG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B;;;;;;OAMG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B;kGAC8F;IAC9F,iBAAiB,CAAC,EAAE,oBAAoB,CAAC;CAC1C;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC,MAAM,EAAE,SAAS,GAAG,OAAO,GAAG,SAAS,GAAG,WAAW,CAAC;IACtD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,qGAAqG;IACrG,IAAI,CAAC,EAAE,WAAW,GAAG,eAAe,CAAC;IACrC;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;;;OAMG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;;OAKG;IACH,UAAU,CAAC,EAAE,iBAAiB,GAAG,eAAe,CAAC;IACjD,uEAAuE;IACvE,WAAW,CAAC,EAAE,eAAe,CAAC;IAC9B,6DAA6D;IAC7D,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gGAAgG;IAChG,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,oDAAoD;IACpD,UAAU,CAAC,EAAE,cAAc,EAAE,CAAC;IAC9B;;;OAGG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC1C;;;;OAIG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;OAIG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB;;;;OAIG;IACH,KAAK,CAAC,EAAE,UAAU,EAAE,CAAC;IACrB;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,aAAa,CAAC,EAAE,yBAAyB,CAAC;IAC1C;;;;;;;;;;;;OAYG;IACH,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC;;;;;OAKG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;;;OAOG;IACH,YAAY,CAAC,EAAE,UAAU,GAAG,eAAe,CAAC;CAC7C;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,iFAAiF;IACjF,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;OAIG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7C;;;;;;;;;;OAUG;IACH;sFACkF;IAClF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;yFACqF;IACrF,SAAS,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC;IACvC,0FAA0F;IAC1F,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;sGAEkG;IAClG,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;+FAC2F;IAC3F,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;GAGG;AACH,MAAM,MAAM,QAAQ,GAClB,SAAS,GAAG,cAAc,GAAG,WAAW,GAAG,QAAQ,GAAG,WAAW,GAAG,SAAS,CAAC;AAEhF,sEAAsE;AACtE,MAAM,WAAW,uBAAuB;IACtC,+CAA+C;IAC/C,WAAW,EAAE,MAAM,CAAC;IACpB,oEAAoE;IACpE,OAAO,EAAE,MAAM,CAAC;IAChB,+EAA+E;IAC/E,YAAY,EAAE,MAAM,CAAC;IACrB,iDAAiD;IACjD,SAAS,EAAE,MAAM,CAAC;IAClB,mFAAmF;IACnF,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B;;;;;;;OAOG;IACH,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB;;;;;;;OAOG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE;QAAE,IAAI,EAAE,SAAS,GAAG,SAAS,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3D,mGAAmG;IACnG,IAAI,EAAE,MAAM,CAAC;IACb,uCAAuC;IACvC,EAAE,EAAE,MAAM,CAAC;CACZ;AAED;;;;GAIG;AACH,MAAM,MAAM,UAAU,GAClB;IACE,IAAI,EAAE,YAAY,CAAC;IACnB,8EAA8E;IAC9E,UAAU,EAAE,MAAM,CAAC;IACnB,oFAAoF;IACpF,MAAM,EAAE,KAAK,CAAC;QACZ,IAAI,EAAE,MAAM,CAAC;QACb,6FAA6F;QAC7F,WAAW,EAAE,OAAO,CAAC;QACrB,oGAAoG;QACpG,cAAc,CAAC,EAAE,OAAO,CAAC;QACzB,MAAM,EAAE,OAAO,CAAC;KACjB,CAAC,CAAC;CACJ,GACD;IACE,IAAI,EAAE,4BAA4B,CAAC;IACnC,IAAI,EAAE,WAAW,CAAC;IAClB,0EAA0E;IAC1E,aAAa,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,WAAW,GAAG,QAAQ,GAAG,SAAS,CAAA;KAAE,CAAC,CAAC;CAClF,GACD;IAAE,IAAI,EAAE,eAAe,CAAA;CAAE,GACzB;IAAE,IAAI,EAAE,aAAa,CAAA;CAAE;AACzB;;;;;;;;GAQG;GACD;IACE,IAAI,EAAE,yBAAyB,CAAC;IAChC;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AACH;;;;;;;;;GASG;GACD;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAE9C;;;;;;;;;GASG;AACH,eAAO,MAAM,SAAS,kRAcZ,CAAC;AAEX;;;;;GAKG;AACH,MAAM,MAAM,OAAO,GAAG,CAAC,OAAO,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC;AAEjD;;;GAGG;AACH,MAAM,WAAW,QAAQ;IACvB,GAAG,EAAE,OAAO,CAAC;IACb;;;;;OAKG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;OAIG;IACH,UAAU,CAAC,EAAE,IAAI,CAAC;IAClB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA6BG;IACH,WAAW,CAAC,EAAE;QACZ,qFAAqF;QACrF,EAAE,EAAE,MAAM,CAAC;QACX,wCAAwC;QACxC,EAAE,EAAE,MAAM,CAAC;QACX;;;;;;;;WAQG;QACH,YAAY,EAAE,OAAO,GAAG,IAAI,CAAC;QAC7B,8CAA8C;QAC9C,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC;CACH;AAED,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,CAAC;IACzB;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;OAIG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IAGzB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,sFAAsF;IACtF,aAAa,EAAE,MAAM,EAAE,CAAC;IAExB;;;;;;OAMG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAE1C;;;;;;;;OAQG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAErC;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAEpD;;;;;;OAMG;IACH,SAAS,EAAE,QAAQ,CAAC;IAEpB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,QAAQ,EAAE,gBAAgB,EAAE,CAAC;IAC7B;;;OAGG;IACH,0BAA0B,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;IACrE;;;;;;OAMG;IACH,kBAAkB,CAAC,EAAE,sBAAsB,EAAE,CAAC;IAC9C;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,OAAO,CAAC;IACxB;;;;;;OAMG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;;;;;;;;;;;OAeG;IACH,SAAS,CAAC,EAAE,QAAQ,CAAC;IACrB,YAAY,CAAC,EAAE,WAAW,CAAC;IAC3B;;;;;;OAMG;IACH,UAAU,CAAC,EAAE;QACX,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,CAAC,EAAE,KAAK,CAAC;YAAE,SAAS,EAAE,MAAM,CAAC;YAAC,cAAc,EAAE,OAAO,CAAC;YAAC,MAAM,EAAE,OAAO,CAAA;SAAE,CAAC,CAAC;QACpF,aAAa,CAAC,EAAE,MAAM,CAAC;KACxB,CAAC;IACF;;;;;;OAMG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;;;;;;;;OAWG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/C;;;;;;;;;OASG;IACH,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2BG;IACH,OAAO,CAAC,EAAE,MAAM,CACd,MAAM,EACN;QACE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QACrB,OAAO,EAAE,UAAU,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;QAC/C,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB;;;;;;WAMG;QACH,WAAW,CAAC,EAAE,SAAS,CAAC;KACzB,CACF,CAAC;IACF;;;;;;;;;;;;;;OAcG;IACH,gBAAgB,CAAC,EAAE,MAAM,CACvB,MAAM,EACN;QACE,MAAM,EAAE,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,QAAQ,CAAC;QACtD,IAAI,EAAE,MAAM,CAAC;QACb,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CACF,CAAC;CACH"}

package/dist/types/run-record.js

@@ -1,2 +1,26 @@
-export {};
+/**
+ * Issue #367: the closed, runtime-visible seal-arm vocabulary — the source of truth for
+ * {@link SealArm} (the `VALID_PHASES` pattern: the const array is the runtime enumeration, the
+ * type derives from it). One value per terminal seal-site function-branch in the 21-path census.
+ *
+ * APPEND-ONLY (the Tekton lesson, design rev 3 §3): an arm's meaning never changes; changed seal
+ * behaviour mints a NEW arm. That rule is what keeps every stored `sealed_by.arm` decodable
+ * forever, and what makes a future #378 resolution land as a mapping/arm ADDITION rather than as
+ * a rewrite of stored records.
+ */
+export const SEAL_ARMS = [
+    'complete',
+    'gate_resolution_complete',
+    'guard_pass_complete',
+    'gate_expiry_default',
+    'step_failure',
+    'guard_resolution_error',
+    'spawn_failure',
+    'extensions_load_failure',
+    'handler_abort',
+    'guard_abort',
+    'gate_expiry_abort',
+    'abandon_requested',
+    'cleanup_sweep',
+];
 //# sourceMappingURL=run-record.js.map

package/dist/types/run-record.js.map

@@ -1 +1 @@
-{"version":3,"file":"run-record.js","sourceRoot":"","sources":["../../src/types/run-record.ts"],"names":[],"mappings":""}
+{"version":3,"file":"run-record.js","sourceRoot":"","sources":["../../src/types/run-record.ts"],"names":[],"mappings":"AAglBA;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG;IACvB,UAAU;IACV,0BAA0B;IAC1B,qBAAqB;IACrB,qBAAqB;IACrB,cAAc;IACd,wBAAwB;IACxB,eAAe;IACf,yBAAyB;IACzB,eAAe;IACf,aAAa;IACb,mBAAmB;IACnB,mBAAmB;IACnB,eAAe;CACP,CAAC"}

package/dist/types/workflow-error.d.ts

@@ -1,6 +1,6 @@
 export type ErrorCategory = 'NETWORK' | 'SERVICE' | 'STATE' | 'VALIDATION' | 'ENGINE' | 'RESOURCE';
 export type AgentAction = 'report_to_user' | 'provide_input' | 'resolve_precondition' | 'stop' | 'wait_for_human' | 'wait_and_proceed';
-export type ErrorCode = 'NETWORK_TIMEOUT' | 'NETWORK_UNREACHABLE' | 'NETWORK_DNS_FAILED' | 'NETWORK_CONNECTION_RESET' | 'SERVICE_HTTP_4XX' | 'SERVICE_HTTP_5XX' | 'SERVICE_RATE_LIMITED' | 'SERVICE_AUTH_FAILED' | 'SERVICE_NOT_FOUND' | 'SERVICE_RESPONSE_INVALID' | 'SERVICE_UNEXPECTED_REDIRECT' | 'STATE_BLOCKED' | 'STATE_PRECONDITION_FAILED' | 'STATE_RUN_NOT_FOUND' | 'STATE_WORKFLOW_NOT_FOUND' | 'STATE_RUN_TERMINAL' | 'STATE_SNAPSHOT_MISMATCH' | 'STATE_RUN_LOCKED' | 'STATE_RUN_BUSY' | 'STATE_TRANSITION_DENIED' | 'STATE_RUN_RESURRECTED' | 'STATE_LEGACY_FORMAT' | 'STATE_STEP_ALREADY_CLAIMED' | 'STATE_STEP_NOT_ELIGIBLE' | 'STATE_STEP_ALREADY_SETTLED' | 'STATE_CLAIM_LOST' | 'STATE_RUN_DIVERGED' | 'STATE_RUN_ALREADY_ACTIVE' | 'STATE_IDEMPOTENCY_KEY_USED' | 'RUN_ABORTING' | 'VALIDATION_INPUT_SCHEMA' | 'VALIDATION_OUTPUT_SCHEMA' | 'VALIDATION_TRACE_SCHEMA' | 'VALIDATION_EXHAUSTED' | 'VALIDATION_WORKFLOW_SCHEMA' | 'VALIDATION_HASH_MISMATCH' | 'VALIDATION_QUOTE_NOT_FOUND' | 'VALIDATION_FIELD_UNKNOWN' | 'VALIDATION_FIELD_EXCLUDED' | 'VALIDATION_EMPTY_VALUE' | 'VALIDATION_BATCH_TOO_LARGE' | 'VALIDATION_BATCH_ITEMS' | 'STEP_HANDLER_ERROR' | 'ENGINE_INTERNAL' | 'ENGINE_STORE_FAILED' | 'ENGINE_ARTIFACT_DELETE_FAILED' | 'ENGINE_ADAPTER_FAILED' | 'ENGINE_ADAPTER_NOT_REGISTERED' | 'ENGINE_PROCESSOR_FAILED' | 'ENGINE_HANDLER_FAILED' | 'ENGINE_HANDLER_NOT_REGISTERED' | 'ENGINE_STEP_FAILED' | 'ENGINE_GATE_OPEN_FAILED' | 'GATE_MESSAGE_UNRESOLVABLE' | 'FILTER_UNKNOWN' | 'ADAPTER_OP_UNSUPPORTED' | 'ADAPTER_VALIDATION_FAILED' | 'ADAPTER_REQUEST_FAILED' | 'STEP_TIMEOUT' | 'STEP_ABORTED' | 'STEP_RETRY_EXHAUSTED' | 'STATE_STEP_PENDING' | 'STEP_NOT_FOUND' | 'GUARD_RESOLUTION_ERROR' | 'INPUT_MAP_DEPTH_EXCEEDED' | 'RESOURCE_FETCH_FAILED' | 'RESOURCE_TOO_LARGE' | 'RESOURCE_FORMAT_INVALID' | 'RESOURCE_NOT_ACCESSIBLE' | 'BUFFER_FULL' | 'TRACE_CAPABILITY_INCONSISTENT' | 'MCP_CONNECTION_FAILED' | 'MCP_TOOL_NOT_FOUND' | 'MCP_TOOL_NAME_COLLISION';
+export type ErrorCode = 'NETWORK_TIMEOUT' | 'NETWORK_UNREACHABLE' | 'NETWORK_DNS_FAILED' | 'NETWORK_CONNECTION_RESET' | 'SERVICE_HTTP_4XX' | 'SERVICE_HTTP_5XX' | 'SERVICE_RATE_LIMITED' | 'SERVICE_AUTH_FAILED' | 'SERVICE_NOT_FOUND' | 'SERVICE_RESPONSE_INVALID' | 'SERVICE_UNEXPECTED_REDIRECT' | 'STATE_BLOCKED' | 'STATE_PRECONDITION_FAILED' | 'STATE_RUN_NOT_FOUND' | 'STATE_WORKFLOW_NOT_FOUND' | 'STATE_RUN_TERMINAL' | 'STATE_SNAPSHOT_MISMATCH' | 'STATE_RUN_LOCKED' | 'STATE_RUN_BUSY' | 'STATE_TRANSITION_DENIED' | 'STATE_RUN_RESURRECTED' | 'STATE_LEGACY_FORMAT' | 'STATE_STEP_ALREADY_CLAIMED' | 'STATE_STEP_NOT_ELIGIBLE' | 'STATE_STEP_ALREADY_SETTLED' | 'STATE_CLAIM_LOST' | 'STATE_RUN_DIVERGED' | 'STATE_RUN_ALREADY_ACTIVE' | 'STATE_IDEMPOTENCY_KEY_USED' | 'RUN_ABORTING' | 'VALIDATION_INPUT_SCHEMA' | 'VALIDATION_OUTPUT_SCHEMA' | 'VALIDATION_TRACE_SCHEMA' | 'VALIDATION_EXHAUSTED' | 'VALIDATION_WORKFLOW_SCHEMA' | 'VALIDATION_HASH_MISMATCH' | 'VALIDATION_QUOTE_NOT_FOUND' | 'VALIDATION_FIELD_UNKNOWN' | 'VALIDATION_FIELD_EXCLUDED' | 'VALIDATION_EMPTY_VALUE' | 'VALIDATION_BATCH_TOO_LARGE' | 'VALIDATION_BATCH_ITEMS' | 'STEP_HANDLER_ERROR' | 'ENGINE_INTERNAL' | 'ENGINE_STORE_FAILED' | 'ENGINE_ARTIFACT_DELETE_FAILED' | 'ENGINE_ADAPTER_FAILED' | 'ENGINE_ADAPTER_NOT_REGISTERED' | 'ENGINE_PROCESSOR_FAILED' | 'ENGINE_HANDLER_FAILED' | 'ENGINE_HANDLER_NOT_REGISTERED' | 'ENGINE_STEP_FAILED' | 'ENGINE_GATE_OPEN_FAILED' | 'GATE_MESSAGE_UNRESOLVABLE' | 'FILTER_UNKNOWN' | 'ADAPTER_OP_UNSUPPORTED' | 'ADAPTER_VALIDATION_FAILED' | 'ADAPTER_REQUEST_FAILED' | 'STEP_TIMEOUT' | 'STEP_ABORTED' | 'STEP_RETRY_EXHAUSTED' | 'STATE_STEP_PENDING' | 'STATE_SEAL_UNSTAMPED' | 'STATE_SEAL_ORPHANED' | 'STATE_SEAL_ERASED' | 'STATE_SEAL_UNKNOWN_ARM' | 'STATE_SEAL_INCOHERENT' | 'STATE_SEAL_REWRITTEN' | 'STEP_NOT_FOUND' | 'GUARD_RESOLUTION_ERROR' | 'INPUT_MAP_DEPTH_EXCEEDED' | 'INPUT_MAP_UNKNOWN_DIRECTIVE' | 'RESOURCE_FETCH_FAILED' | 'RESOURCE_TOO_LARGE' | 'RESOURCE_FORMAT_INVALID' | 'RESOURCE_NOT_ACCESSIBLE' | 'BUFFER_FULL' | 'TRACE_CAPABILITY_INCONSISTENT' | 'MCP_CONNECTION_FAILED' | 'MCP_TOOL_NOT_FOUND' | 'MCP_TOOL_NAME_COLLISION';
 export interface WorkflowErrorOptions {
     code: ErrorCode;
     category: ErrorCategory;

package/dist/types/workflow-error.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"workflow-error.d.ts","sourceRoot":"","sources":["../../src/types/workflow-error.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,aAAa,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,GAAG,YAAY,GAAG,QAAQ,GAAG,UAAU,CAAC;AAEnG,MAAM,MAAM,WAAW,GACnB,gBAAgB,GAChB,eAAe,GACf,sBAAsB,GACtB,MAAM,GACN,gBAAgB,GAChB,kBAAkB,CAAC;AAEvB,MAAM,MAAM,SAAS,GAEjB,iBAAiB,GACjB,qBAAqB,GACrB,oBAAoB,GACpB,0BAA0B,GAE1B,kBAAkB,GAClB,kBAAkB,GAClB,sBAAsB,GACtB,qBAAqB,GACrB,mBAAmB,GACnB,0BAA0B,GAE1B,6BAA6B,GAE7B,eAAe,GACf,2BAA2B,GAC3B,qBAAqB,GACrB,0BAA0B,GAC1B,oBAAoB,GACpB,yBAAyB,GACzB,kBAAkB,GAIlB,gBAAgB,GAChB,yBAAyB,GAMzB,uBAAuB,GACvB,qBAAqB,GACrB,4BAA4B,GAC5B,yBAAyB,GAKzB,4BAA4B,GAG5B,kBAAkB,GAClB,oBAAoB,GACpB,0BAA0B,GAC1B,4BAA4B,GAC5B,cAAc,GAEd,yBAAyB,GACzB,0BAA0B,GAC1B,yBAAyB,GAIzB,sBAAsB,GACtB,4BAA4B,GAC5B,0BAA0B,GAC1B,4BAA4B,GAC5B,0BAA0B,GAC1B,2BAA2B,GAC3B,wBAAwB,GACxB,4BAA4B,GAC5B,wBAAwB,GACxB,oBAAoB,GAEpB,iBAAiB,GACjB,qBAAqB,GAIrB,+BAA+B,GAC/B,uBAAuB,GACvB,+BAA+B,GAC/B,yBAAyB,GACzB,uBAAuB,GACvB,+BAA+B,GAC/B,oBAAoB,GACpB,yBAAyB,GACzB,2BAA2B,GAC3B,gBAAgB,GAChB,wBAAwB,GACxB,2BAA2B,GAC3B,wBAAwB,GACxB,cAAc,GACd,cAAc,GACd,sBAAsB,GACtB,oBAAoB,GACpB,gBAAgB,GAChB,wBAAwB,GACxB,0BAA0B,GAE1B,uBAAuB,GACvB,oBAAoB,GACpB,yBAAyB,GACzB,yBAAyB,GAEzB,aAAa,GAMb,+BAA+B,GAE/B,uBAAuB,GACvB,oBAAoB,GACpB,yBAAyB,CAAC;AAE9B,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,SAAS,CAAC;IAChB,QAAQ,EAAE,aAAa,CAAC;IACxB,WAAW,EAAE,WAAW,CAAC;IACzB,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,qBAAa,aAAc,SAAQ,KAAK;IACtC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;IACjC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC1C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;gBAElB,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,oBAAoB;CAa3D"}
+{"version":3,"file":"workflow-error.d.ts","sourceRoot":"","sources":["../../src/types/workflow-error.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,aAAa,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,GAAG,YAAY,GAAG,QAAQ,GAAG,UAAU,CAAC;AAEnG,MAAM,MAAM,WAAW,GACnB,gBAAgB,GAChB,eAAe,GACf,sBAAsB,GACtB,MAAM,GACN,gBAAgB,GAChB,kBAAkB,CAAC;AAEvB,MAAM,MAAM,SAAS,GAEjB,iBAAiB,GACjB,qBAAqB,GACrB,oBAAoB,GACpB,0BAA0B,GAE1B,kBAAkB,GAClB,kBAAkB,GAClB,sBAAsB,GACtB,qBAAqB,GACrB,mBAAmB,GACnB,0BAA0B,GAE1B,6BAA6B,GAE7B,eAAe,GACf,2BAA2B,GAC3B,qBAAqB,GACrB,0BAA0B,GAC1B,oBAAoB,GACpB,yBAAyB,GACzB,kBAAkB,GAIlB,gBAAgB,GAChB,yBAAyB,GAMzB,uBAAuB,GACvB,qBAAqB,GACrB,4BAA4B,GAC5B,yBAAyB,GAKzB,4BAA4B,GAG5B,kBAAkB,GAClB,oBAAoB,GACpB,0BAA0B,GAC1B,4BAA4B,GAC5B,cAAc,GAEd,yBAAyB,GACzB,0BAA0B,GAC1B,yBAAyB,GAIzB,sBAAsB,GACtB,4BAA4B,GAC5B,0BAA0B,GAC1B,4BAA4B,GAC5B,0BAA0B,GAC1B,2BAA2B,GAC3B,wBAAwB,GACxB,4BAA4B,GAC5B,wBAAwB,GACxB,oBAAoB,GAEpB,iBAAiB,GACjB,qBAAqB,GAIrB,+BAA+B,GAC/B,uBAAuB,GACvB,+BAA+B,GAC/B,yBAAyB,GACzB,uBAAuB,GACvB,+BAA+B,GAC/B,oBAAoB,GACpB,yBAAyB,GACzB,2BAA2B,GAC3B,gBAAgB,GAChB,wBAAwB,GACxB,2BAA2B,GAC3B,wBAAwB,GACxB,cAAc,GACd,cAAc,GACd,sBAAsB,GACtB,oBAAoB,GAWpB,sBAAsB,GAItB,qBAAqB,GAIrB,mBAAmB,GAGnB,wBAAwB,GAQxB,uBAAuB,GAYvB,sBAAsB,GACtB,gBAAgB,GAChB,wBAAwB,GACxB,0BAA0B,GAK1B,6BAA6B,GAE7B,uBAAuB,GACvB,oBAAoB,GACpB,yBAAyB,GACzB,yBAAyB,GAEzB,aAAa,GAMb,+BAA+B,GAE/B,uBAAuB,GACvB,oBAAoB,GACpB,yBAAyB,CAAC;AAE9B,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,SAAS,CAAC;IAChB,QAAQ,EAAE,aAAa,CAAC;IACxB,WAAW,EAAE,WAAW,CAAC;IACzB,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,qBAAa,aAAc,SAAQ,KAAK;IACtC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;IACjC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC1C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;gBAElB,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,oBAAoB;CAa3D"}

package/dist/types/workflow-error.js.map

@@ -1 +1 @@
-{"version":3,"file":"workflow-error.js","sourceRoot":"","sources":["../../src/types/workflow-error.ts"],"names":[],"mappings":"AAAA,kEAAkE;AAqIlE,MAAM,OAAO,aAAc,SAAQ,KAAK;IAC7B,IAAI,CAAY;IAChB,QAAQ,CAAgB;IACxB,WAAW,CAAc;IACzB,SAAS,CAAU;IACnB,OAAO,CAA0B;IACjC,MAAM,CAAU;IAChB,SAAS,CAAS;IAClB,OAAO,CAAS;IAChB,WAAW,CAAU;IAE9B,YAAY,OAAe,EAAE,OAA6B;QACxD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;QAC5B,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QACzB,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QACjC,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QACvC,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;QACrC,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;YAAE,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC/D,IAAI,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC1C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,CAAC,CAAC;QACpC,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS;YAAE,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;IAChF,CAAC;CACF"}
+{"version":3,"file":"workflow-error.js","sourceRoot":"","sources":["../../src/types/workflow-error.ts"],"names":[],"mappings":"AAAA,kEAAkE;AAoLlE,MAAM,OAAO,aAAc,SAAQ,KAAK;IAC7B,IAAI,CAAY;IAChB,QAAQ,CAAgB;IACxB,WAAW,CAAc;IACzB,SAAS,CAAU;IACnB,OAAO,CAA0B;IACjC,MAAM,CAAU;IAChB,SAAS,CAAS;IAClB,OAAO,CAAS;IAChB,WAAW,CAAU;IAE9B,YAAY,OAAe,EAAE,OAA6B;QACxD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;QAC5B,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QACzB,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QACjC,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QACvC,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;QACrC,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;YAAE,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC/D,IAAI,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC1C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,CAAC,CAAC;QACpC,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS;YAAE,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;IAChF,CAAC;CACF"}