@sensigo/realm 0.38.0 → 0.40.0

package/dist/engine/run-health.d.ts

@@ -13,7 +13,7 @@ export declare const DEFAULT_IDLE_THRESHOLD_MS: number;
  * renders from.
  */
 export interface RunHealthFinding {
-    kind: 'never_claimed_idle' | 'stale_claim' | 'wedged_gate_sibling' | 'capability_block' | 'terminal_pending_finalizer' | 'terminal_with_stale_gate' | 'gate_corruption' | 'resolved_gate_with_eligible_guard' | 'completed_with_failed_steps' | 'gate_expired_awaiting_drive' | 'structured_output_downgraded';
+    kind: 'never_claimed_idle' | 'drive_failing' | 'stale_claim' | 'wedged_gate_sibling' | 'capability_block' | 'terminal_pending_finalizer' | 'terminal_with_stale_gate' | 'gate_corruption' | 'resolved_gate_with_eligible_guard' | 'completed_with_failed_steps' | 'gate_expired_awaiting_drive' | 'structured_output_downgraded';
     /** The affected step, when the finding is step-scoped. Absent for `never_claimed_idle` — a
      *  run-level observation (no step is claimed at all). */
     step?: string;

package/dist/engine/run-health.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"run-health.d.ts","sourceRoot":"","sources":["../../src/engine/run-health.ts"],"names":[],"mappings":"AAuFA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAK1E;;;;;;GAMG;AACH,eAAO,MAAM,yBAAyB,QAAsB,CAAC;AAE7D;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EACA,oBAAoB,GACpB,aAAa,GACb,qBAAqB,GACrB,kBAAkB,GAClB,4BAA4B,GAE5B,0BAA0B,GAC1B,iBAAiB,GACjB,mCAAmC,GAGnC,6BAA6B,GAM7B,6BAA6B,GAQ7B,8BAA8B,CAAC;IACnC;6DACyD;IACzD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;yCAEqC;IACrC,MAAM,EAAE,MAAM,CAAC;IACf;;;;4DAIwD;IACxD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;kDAC8C;IAC9C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;mEAG+D;IAC/D,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAoHD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,SAAS,EACd,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,IAAI,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,kBAAkB,CAAA;CAAE,GAC/E,gBAAgB,EAAE,CAwKpB"}
+{"version":3,"file":"run-health.d.ts","sourceRoot":"","sources":["../../src/engine/run-health.ts"],"names":[],"mappings":"AA2FA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAK1E;;;;;;GAMG;AACH,eAAO,MAAM,yBAAyB,QAAsB,CAAC;AAE7D;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EACA,oBAAoB,GACpB,eAAe,GACf,aAAa,GACb,qBAAqB,GACrB,kBAAkB,GAClB,4BAA4B,GAE5B,0BAA0B,GAC1B,iBAAiB,GACjB,mCAAmC,GAGnC,6BAA6B,GAM7B,6BAA6B,GAQ7B,8BAA8B,CAAC;IACnC;6DACyD;IACzD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;yCAEqC;IACrC,MAAM,EAAE,MAAM,CAAC;IACf;;;;4DAIwD;IACxD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;kDAC8C;IAC9C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;mEAG+D;IAC/D,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAyMD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,SAAS,EACd,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,IAAI,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,kBAAkB,CAAA;CAAE,GAC/E,gBAAgB,EAAE,CA8KpB"}

package/dist/engine/run-health.js

@@ -122,6 +122,89 @@ function findStructuredOutputDowngrades(run) {
         evidence: { steps },
     };
 }
+/**
+ * `drive_failing` (issue #401) — the run's last recorded drive attempt failed, and nothing has
+ * happened since.
+ *
+ * WHY THE LAST-EVENT TEST. A drive failure is only news while it is still the latest thing that
+ * happened to the run. If a sibling step settled afterwards, or a gate opened, the run moved on and
+ * the failure is history — reporting it then would train an operator to ignore the finding, which
+ * is how a watchdog dies. So the entry must be strictly newer than every other timestamped event,
+ * floored at `created_at` so a fresh run with no evidence still fires (max of an empty set is
+ * negative infinity, and without the floor a stale entry predating the run would fire too).
+ *
+ * The settled-step guard is the second half of the same idea: if the step the failure names has
+ * since landed in completed/failed/skipped, the drive that failed was retried and resolved.
+ *
+ * Record-only by construction — no definition, no I/O — so `list --stuck`, which passes neither,
+ * gets this finding for free.
+ */
+function findDriveFailing(run, now) {
+    const field = run.drive_failures;
+    const lastEntry = field?.entries[field.entries.length - 1];
+    if (field === undefined || lastEntry === undefined)
+        return undefined;
+    if (run.terminal_state)
+        return undefined;
+    const lastAt = new Date(lastEntry.at).getTime();
+    const floor = new Date(run.created_at).getTime();
+    const gateOpened = run.pending_gate !== undefined ? new Date(run.pending_gate.opened_at).getTime() : -Infinity;
+    const lastEvidence = run.evidence.reduce((max, snap) => Math.max(max, new Date(snap.completed_at).getTime()), -Infinity);
+    // NOTE the `<=`, and what it costs: a run created and failed inside the SAME MILLISECOND is
+    // not reported, because its failure does not sort after its own creation instant. Real drives
+    // spend far longer than a millisecond reaching a provider, so this is invisible in practice —
+    // but an in-memory test that creates and fails in one tick will see no finding and should
+    // separate the two rather than conclude the predicate is broken.
+    if (lastAt <= Math.max(gateOpened, lastEvidence, floor))
+        return undefined;
+    const settled = new Set([...run.completed_steps, ...run.failed_steps, ...run.skipped_steps]);
+    if (settled.has(lastEntry.step))
+        return undefined;
+    const ago = formatAgo(now.getTime() - lastAt);
+    // The total suffix appears ONLY when the ring has rolled — otherwise it would repeat a number
+    // the entries themselves already carry.
+    const rolled = field.total > field.entries.length;
+    const suffix = rolled ? `; ${String(field.total)} failures since ${field.first_failed_at}` : '';
+    return {
+        kind: 'drive_failing',
+        step: lastEntry.step,
+        reason: `the last drive attempt failed ${ago} (${lastEntry.error_class}): ${lastEntry.message}${suffix}`,
+        evidence: {
+            step: lastEntry.step,
+            error_class: lastEntry.error_class,
+            at: lastEntry.at,
+            total: field.total,
+            first_failed_at: field.first_failed_at,
+            // The discriminators reach the operator only if they travel — an operator debugging a
+            // 429 storm needs the status and the Retry-After, not just "api_status".
+            ...(lastEntry.last_observed_status !== undefined
+                ? { last_observed_status: lastEntry.last_observed_status }
+                : {}),
+            ...(lastEntry.retry_after_observed_ms !== undefined
+                ? { retry_after_observed_ms: lastEntry.retry_after_observed_ms }
+                : {}),
+            ...(lastEntry.declared_per_attempt_ms !== undefined
+                ? { declared_per_attempt_ms: lastEntry.declared_per_attempt_ms }
+                : {}),
+            ...(lastEntry.derived_ceiling_ms !== undefined
+                ? { derived_ceiling_ms: lastEntry.derived_ceiling_ms }
+                : {}),
+        },
+    };
+}
+/** Renders an elapsed span the way an operator reads it: "12s ago", "4m ago", "3h ago". */
+function formatAgo(ms) {
+    const s = Math.max(0, Math.floor(ms / 1000));
+    if (s < 60)
+        return `${String(s)}s ago`;
+    const m = Math.floor(s / 60);
+    if (m < 60)
+        return `${String(m)}m ago`;
+    const h = Math.floor(m / 60);
+    if (h < 24)
+        return `${String(h)}h ago`;
+    return `${String(Math.floor(h / 24))}d ago`;
+}
 /**
  * Classifies a run's health into zero or more typed findings. Pure, read-only, definition-
  * optional, `now`-injectable. See the module doc above for the full branch-conditioning table
@@ -231,6 +314,12 @@ export function classifyRunHealth(run, opts) {
     const structuredOutputDowngrade = findStructuredOutputDowngrades(run);
     if (structuredOutputDowngrade !== undefined)
         findings.push(structuredOutputDowngrade);
+    // issue #401: drive_failing — the run's last drive attempt failed and nothing has happened
+    // since. Deliberately NOT exclusive with `never_claimed_idle`: from 24h onward a
+    // failed-then-silent run legitimately trips both, and suppressing either would hide a fact.
+    const driveFailing = findDriveFailing(run, now);
+    if (driveFailing !== undefined)
+        findings.push(driveFailing);
     // issue #291: gate_expired_awaiting_drive — record-fields-only (never the definition), fires
     // for BOTH an enactable gate AND a finding-only one (expires_at present, on_expiry absent) —
     // the finding-only payload names its own disposition as 'finding_only' rather than omitting

package/dist/engine/run-health.js.map

@@ -1 +1 @@
-{"version":3,"file":"run-health.js","sourceRoot":"","sources":["../../src/engine/run-health.ts"],"names":[],"mappings":"AAyFA,OAAO,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,0BAA0B,EAAE,MAAM,iBAAiB,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAE7F;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAyD7D;;;;;;;;;;GAUG;AACH,SAAS,kBAAkB,CAAC,GAAc;IACxC,IAAI,GAAG,CAAC,YAAY,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACrD,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC;IACxC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;QAC9D,IAAI,KAAK,CAAC,OAAO,KAAK,MAAM,IAAI,KAAK,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;YACvD,OAAO;gBACL,IAAI,EAAE,iBAAiB;gBACvB,IAAI;gBACJ,MAAM,EACJ,kFAAkF;oBAClF,yBAAyB;gBAC3B,QAAQ,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE;aAC9B,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AACH,SAAS,8BAA8B,CAAC,GAAc;IACpD,MAAM,aAAa,GAAG,IAAI,GAAG,EAAuB,CAAC;IACrD,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,KAAK,CAAC,WAAW,EAAE,iBAAiB,CAAC;QAClD,IAAI,IAAI,KAAK,SAAS;YAAE,SAAS;QACjC,IAAI,IAAI,CAAC,gBAAgB,KAAK,SAAS,IAAI,IAAI,CAAC,gBAAgB,KAAK,gBAAgB,EAAE,CAAC;YACtF,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;YACtE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YACnC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC5C,CAAC;QACD,qFAAqF;QACrF,4FAA4F;QAC5F,2FAA2F;QAC3F,kFAAkF;QAClF,4FAA4F;QAC5F,wFAAwF;QACxF,EAAE;QACF,6FAA6F;QAC7F,yFAAyF;QACzF,wFAAwF;QACxF,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE,EAAE,CAAC;YAC/C,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,qBAAqB,CAAC;gBAAE,SAAS;YACpE,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;YACtE,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;YAC7C,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IACD,IAAI,aAAa,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAE/C,MAAM,KAAK,GAAG,CAAC,GAAG,aAAa,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;QACnE,IAAI;QACJ,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC;KACtB,CAAC,CAAC,CAAC;IACJ,MAAM,aAAa,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC7E,OAAO;QACL,IAAI,EAAE,8BAA8B;QACpC,MAAM,EACJ,GAAG,KAAK,CAAC,MAAM,iEAAiE;YAChF,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,mEAAmE;QACjG,QAAQ,EAAE,EAAE,KAAK,EAAE;KACpB,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAC/B,GAAc,EACd,IAAgF;IAEhF,MAAM,GAAG,GAAG,IAAI,EAAE,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;IAEpC,+FAA+F;IAC/F,gGAAgG;IAChG,yFAAyF;IACzF,kEAAkE;IAClE,IAAI,GAAG,CAAC,cAAc,EAAE,CAAC;QACvB,MAAM,eAAe,GAAuB,EAAE,CAAC;QAC/C,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,EAAE,CAAC,EAAE,CAAC;YACvE,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;gBAAE,SAAS;YACzC,MAAM,QAAQ,GAAG,KAAK,CAAC,WAAW,KAAK,SAAS,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS,CAAC;YACvF,MAAM,YAAY,GAAG,QAAQ,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,cAAe,CAAC,CAAC,OAAO,EAAE,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;YAC5F,MAAM,MAAM,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,YAAY,CAAC;YAC1F,eAAe,CAAC,IAAI,CAAC;gBACnB,IAAI,EAAE,4BAA4B;gBAClC,IAAI,EAAE,IAAI;gBACV,MAAM;gBACN,QAAQ,EAAE;oBACR,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,GAAG,CAAC,KAAK,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACxF;aACF,CAAC,CAAC;QACL,CAAC;QACD,wFAAwF;QACxF,8FAA8F;QAC9F,0EAA0E;QAC1E,IAAI,GAAG,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YACnC,eAAe,CAAC,IAAI,CAAC;gBACnB,IAAI,EAAE,0BAA0B;gBAChC,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,SAAS;gBAChC,MAAM,EACJ,sFAAsF;gBACxF,QAAQ,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,YAAY,CAAC,OAAO,EAAE;aAChD,CAAC,CAAC;QACL,CAAC;QACD,qFAAqF;QACrF,kCAAkC;QAClC,MAAM,sBAAsB,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;QACvD,IAAI,sBAAsB,KAAK,SAAS;YAAE,eAAe,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACvF,+FAA+F;QAC/F,0FAA0F;QAC1F,sFAAsF;QACtF,IAAI,cAAc,CAAC,GAAG,CAAC,KAAK,WAAW,IAAI,GAAG,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvE,eAAe,CAAC,IAAI,CAAC;gBACnB,IAAI,EAAE,6BAA6B;gBACnC,MAAM,EACJ,kBAAkB,GAAG,CAAC,YAAY,CAAC,MAAM,oBAAoB,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;oBAC3F,sFAAsF;oBACtF,gDAAgD;gBAClD,QAAQ,EAAE,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE;aAC7C,CAAC,CAAC;QACL,CAAC;QACD,6FAA6F;QAC7F,6FAA6F;QAC7F,2FAA2F;QAC3F,sFAAsF;QACtF,MAAM,iBAAiB,GAAG,8BAA8B,CAAC,GAAG,CAAC,CAAC;QAC9D,IAAI,iBAAiB,KAAK,SAAS;YAAE,eAAe,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC7E,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,eAAe,CAAC;QACvD,uFAAuF;QACvF,8FAA8F;QAC9F,uBAAuB;QACvB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,eAAe,GAAG,IAAI,EAAE,eAAe,IAAI,yBAAyB,CAAC;IAC3E,MAAM,QAAQ,GAAuB,EAAE,CAAC;IAExC,gFAAgF;IAChF,KAAK,MAAM,CAAC,IAAI,wBAAwB,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;QACnD,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS;YAAE,SAAS;QACpC,IAAI,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,YAAY,EAAE,SAAS;YAAE,SAAS,CAAC,uCAAuC;QAC7F,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,GAAG,CAAC,SAAS,KAAK,cAAc,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,aAAa;YAC9E,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,MAAM,EAAE,CAAC,CAAC,KAAK;YACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE;SACnD,CAAC,CAAC;IACL,CAAC;IAED,6FAA6F;IAC7F,6EAA6E;IAC7E,KAAK,MAAM,CAAC,IAAI,0BAA0B,CAAC,GAAG,CAAC,EAAE,CAAC;QAChD,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,kBAAkB;YACxB,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,MAAM,EAAE,CAAC,CAAC,IAAI;YACd,KAAK,EAAE,CAAC,CAAC,EAAE;YACX,QAAQ,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;SACvD,CAAC,CAAC;IACL,CAAC;IAED,gGAAgG;IAChG,+FAA+F;IAC/F,MAAM,cAAc,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;IAC/C,IAAI,cAAc,KAAK,SAAS;QAAE,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAEhE,yFAAyF;IACzF,gGAAgG;IAChG,+FAA+F;IAC/F,wFAAwF;IACxF,MAAM,yBAAyB,GAAG,8BAA8B,CAAC,GAAG,CAAC,CAAC;IACtE,IAAI,yBAAyB,KAAK,SAAS;QAAE,QAAQ,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IAEtF,6FAA6F;IAC7F,6FAA6F;IAC7F,4FAA4F;IAC5F,0FAA0F;IAC1F,+FAA+F;IAC/F,oDAAoD;IACpD,IACE,GAAG,CAAC,YAAY,KAAK,SAAS;QAC9B,GAAG,CAAC,YAAY,CAAC,UAAU,KAAK,SAAS;QACzC,GAAG,CAAC,OAAO,EAAE,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,EAChE,CAAC;QACD,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC;QAClF,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,6BAA6B;YACnC,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,SAAS;YAChC,MAAM,EACJ,GAAG,CAAC,YAAY,CAAC,SAAS,KAAK,SAAS;gBACtC,CAAC,CAAC,qDAAqD,GAAG,CAAC,YAAY,CAAC,SAAS,EAAE;gBACnF,CAAC,CAAC,gFAAgF;YACtF,QAAQ,EAAE;gBACR,OAAO,EAAE,GAAG,CAAC,YAAY,CAAC,OAAO;gBACjC,UAAU,EAAE,GAAG,CAAC,YAAY,CAAC,UAAU;gBACvC,UAAU,EAAE,SAAS;gBACrB,WAAW,EAAE,GAAG,CAAC,YAAY,CAAC,SAAS,IAAI,cAAc;aAC1D;SACF,CAAC,CAAC;IACL,CAAC;IAED,+FAA+F;IAC/F,0FAA0F;IAC1F,gFAAgF;IAChF,IAAI,IAAI,EAAE,UAAU,KAAK,SAAS,EAAE,CAAC;QACnC,KAAK,MAAM,SAAS,IAAI,sBAAsB,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,EAAE,CAAC;YACrE,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,mCAAmC;gBACzC,IAAI,EAAE,SAAS;gBACf,MAAM,EAAE,yBAAyB,SAAS,yBAAyB;aACpE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,+FAA+F;IAC/F,4BAA4B;IAC5B,IACE,GAAG,CAAC,SAAS,KAAK,SAAS;QAC3B,GAAG,CAAC,iBAAiB,CAAC,MAAM,KAAK,CAAC;QAClC,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,IAAI,eAAe,EACrE,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,oBAAoB;YAC1B,MAAM,EAAE,mCAAmC;YAC3C,KAAK,EAAE,GAAG,CAAC,UAAU;YACrB,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;YAC3D,QAAQ,EAAE;gBACR,iBAAiB,EAAE,eAAe;gBAClC,GAAG,CAAC,IAAI,EAAE,UAAU,KAAK,SAAS;oBAChC,CAAC,CAAC,EAAE,cAAc,EAAE,iBAAiB,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,EAAE;oBAC7D,CAAC,CAAC,EAAE,CAAC;aACR;SACF,CAAC,CAAC;IACL,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}
+{"version":3,"file":"run-health.js","sourceRoot":"","sources":["../../src/engine/run-health.ts"],"names":[],"mappings":"AA6FA,OAAO,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,0BAA0B,EAAE,MAAM,iBAAiB,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAE7F;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AA0D7D;;;;;;;;;;GAUG;AACH,SAAS,kBAAkB,CAAC,GAAc;IACxC,IAAI,GAAG,CAAC,YAAY,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACrD,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC;IACxC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;QAC9D,IAAI,KAAK,CAAC,OAAO,KAAK,MAAM,IAAI,KAAK,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;YACvD,OAAO;gBACL,IAAI,EAAE,iBAAiB;gBACvB,IAAI;gBACJ,MAAM,EACJ,kFAAkF;oBAClF,yBAAyB;gBAC3B,QAAQ,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE;aAC9B,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AACH,SAAS,8BAA8B,CAAC,GAAc;IACpD,MAAM,aAAa,GAAG,IAAI,GAAG,EAAuB,CAAC;IACrD,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,KAAK,CAAC,WAAW,EAAE,iBAAiB,CAAC;QAClD,IAAI,IAAI,KAAK,SAAS;YAAE,SAAS;QACjC,IAAI,IAAI,CAAC,gBAAgB,KAAK,SAAS,IAAI,IAAI,CAAC,gBAAgB,KAAK,gBAAgB,EAAE,CAAC;YACtF,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;YACtE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YACnC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC5C,CAAC;QACD,qFAAqF;QACrF,4FAA4F;QAC5F,2FAA2F;QAC3F,kFAAkF;QAClF,4FAA4F;QAC5F,wFAAwF;QACxF,EAAE;QACF,6FAA6F;QAC7F,yFAAyF;QACzF,wFAAwF;QACxF,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE,EAAE,CAAC;YAC/C,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,qBAAqB,CAAC;gBAAE,SAAS;YACpE,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;YACtE,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;YAC7C,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IACD,IAAI,aAAa,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAE/C,MAAM,KAAK,GAAG,CAAC,GAAG,aAAa,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;QACnE,IAAI;QACJ,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC;KACtB,CAAC,CAAC,CAAC;IACJ,MAAM,aAAa,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC7E,OAAO;QACL,IAAI,EAAE,8BAA8B;QACpC,MAAM,EACJ,GAAG,KAAK,CAAC,MAAM,iEAAiE;YAChF,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,mEAAmE;QACjG,QAAQ,EAAE,EAAE,KAAK,EAAE;KACpB,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,SAAS,gBAAgB,CAAC,GAAc,EAAE,GAAS;IACjD,MAAM,KAAK,GAAG,GAAG,CAAC,cAAc,CAAC;IACjC,MAAM,SAAS,GAAG,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC3D,IAAI,KAAK,KAAK,SAAS,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACrE,IAAI,GAAG,CAAC,cAAc;QAAE,OAAO,SAAS,CAAC;IAEzC,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IAChD,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC;IACjD,MAAM,UAAU,GACd,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC9F,MAAM,YAAY,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CACtC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC,EACnE,CAAC,QAAQ,CACV,CAAC;IACF,4FAA4F;IAC5F,8FAA8F;IAC9F,8FAA8F;IAC9F,0FAA0F;IAC1F,iEAAiE;IACjE,IAAI,MAAM,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,YAAY,EAAE,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAE1E,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,eAAe,EAAE,GAAG,GAAG,CAAC,YAAY,EAAE,GAAG,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC;IAC7F,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAElD,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,CAAC;IAC9C,8FAA8F;IAC9F,wCAAwC;IACxC,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;IAClD,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,mBAAmB,KAAK,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAChG,OAAO;QACL,IAAI,EAAE,eAAe;QACrB,IAAI,EAAE,SAAS,CAAC,IAAI;QACpB,MAAM,EAAE,iCAAiC,GAAG,KAAK,SAAS,CAAC,WAAW,MAAM,SAAS,CAAC,OAAO,GAAG,MAAM,EAAE;QACxG,QAAQ,EAAE;YACR,IAAI,EAAE,SAAS,CAAC,IAAI;YACpB,WAAW,EAAE,SAAS,CAAC,WAAW;YAClC,EAAE,EAAE,SAAS,CAAC,EAAE;YAChB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,sFAAsF;YACtF,yEAAyE;YACzE,GAAG,CAAC,SAAS,CAAC,oBAAoB,KAAK,SAAS;gBAC9C,CAAC,CAAC,EAAE,oBAAoB,EAAE,SAAS,CAAC,oBAAoB,EAAE;gBAC1D,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,SAAS,CAAC,uBAAuB,KAAK,SAAS;gBACjD,CAAC,CAAC,EAAE,uBAAuB,EAAE,SAAS,CAAC,uBAAuB,EAAE;gBAChE,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,SAAS,CAAC,uBAAuB,KAAK,SAAS;gBACjD,CAAC,CAAC,EAAE,uBAAuB,EAAE,SAAS,CAAC,uBAAuB,EAAE;gBAChE,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,SAAS,CAAC,kBAAkB,KAAK,SAAS;gBAC5C,CAAC,CAAC,EAAE,kBAAkB,EAAE,SAAS,CAAC,kBAAkB,EAAE;gBACtD,CAAC,CAAC,EAAE,CAAC;SACR;KACF,CAAC;AACJ,CAAC;AAED,2FAA2F;AAC3F,SAAS,SAAS,CAAC,EAAU;IAC3B,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;IAC7C,IAAI,CAAC,GAAG,EAAE;QAAE,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;IACvC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IAC7B,IAAI,CAAC,GAAG,EAAE;QAAE,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;IACvC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IAC7B,IAAI,CAAC,GAAG,EAAE;QAAE,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;IACvC,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC;AAC9C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAC/B,GAAc,EACd,IAAgF;IAEhF,MAAM,GAAG,GAAG,IAAI,EAAE,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;IAEpC,+FAA+F;IAC/F,gGAAgG;IAChG,yFAAyF;IACzF,kEAAkE;IAClE,IAAI,GAAG,CAAC,cAAc,EAAE,CAAC;QACvB,MAAM,eAAe,GAAuB,EAAE,CAAC;QAC/C,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,EAAE,CAAC,EAAE,CAAC;YACvE,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;gBAAE,SAAS;YACzC,MAAM,QAAQ,GAAG,KAAK,CAAC,WAAW,KAAK,SAAS,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS,CAAC;YACvF,MAAM,YAAY,GAAG,QAAQ,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,cAAe,CAAC,CAAC,OAAO,EAAE,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;YAC5F,MAAM,MAAM,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,YAAY,CAAC;YAC1F,eAAe,CAAC,IAAI,CAAC;gBACnB,IAAI,EAAE,4BAA4B;gBAClC,IAAI,EAAE,IAAI;gBACV,MAAM;gBACN,QAAQ,EAAE;oBACR,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,GAAG,CAAC,KAAK,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACxF;aACF,CAAC,CAAC;QACL,CAAC;QACD,wFAAwF;QACxF,8FAA8F;QAC9F,0EAA0E;QAC1E,IAAI,GAAG,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YACnC,eAAe,CAAC,IAAI,CAAC;gBACnB,IAAI,EAAE,0BAA0B;gBAChC,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,SAAS;gBAChC,MAAM,EACJ,sFAAsF;gBACxF,QAAQ,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,YAAY,CAAC,OAAO,EAAE;aAChD,CAAC,CAAC;QACL,CAAC;QACD,qFAAqF;QACrF,kCAAkC;QAClC,MAAM,sBAAsB,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;QACvD,IAAI,sBAAsB,KAAK,SAAS;YAAE,eAAe,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACvF,+FAA+F;QAC/F,0FAA0F;QAC1F,sFAAsF;QACtF,IAAI,cAAc,CAAC,GAAG,CAAC,KAAK,WAAW,IAAI,GAAG,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvE,eAAe,CAAC,IAAI,CAAC;gBACnB,IAAI,EAAE,6BAA6B;gBACnC,MAAM,EACJ,kBAAkB,GAAG,CAAC,YAAY,CAAC,MAAM,oBAAoB,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;oBAC3F,sFAAsF;oBACtF,gDAAgD;gBAClD,QAAQ,EAAE,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE;aAC7C,CAAC,CAAC;QACL,CAAC;QACD,6FAA6F;QAC7F,6FAA6F;QAC7F,2FAA2F;QAC3F,sFAAsF;QACtF,MAAM,iBAAiB,GAAG,8BAA8B,CAAC,GAAG,CAAC,CAAC;QAC9D,IAAI,iBAAiB,KAAK,SAAS;YAAE,eAAe,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC7E,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,eAAe,CAAC;QACvD,uFAAuF;QACvF,8FAA8F;QAC9F,uBAAuB;QACvB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,eAAe,GAAG,IAAI,EAAE,eAAe,IAAI,yBAAyB,CAAC;IAC3E,MAAM,QAAQ,GAAuB,EAAE,CAAC;IAExC,gFAAgF;IAChF,KAAK,MAAM,CAAC,IAAI,wBAAwB,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;QACnD,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS;YAAE,SAAS;QACpC,IAAI,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,YAAY,EAAE,SAAS;YAAE,SAAS,CAAC,uCAAuC;QAC7F,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,GAAG,CAAC,SAAS,KAAK,cAAc,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,aAAa;YAC9E,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,MAAM,EAAE,CAAC,CAAC,KAAK;YACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE;SACnD,CAAC,CAAC;IACL,CAAC;IAED,6FAA6F;IAC7F,6EAA6E;IAC7E,KAAK,MAAM,CAAC,IAAI,0BAA0B,CAAC,GAAG,CAAC,EAAE,CAAC;QAChD,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,kBAAkB;YACxB,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,MAAM,EAAE,CAAC,CAAC,IAAI;YACd,KAAK,EAAE,CAAC,CAAC,EAAE;YACX,QAAQ,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;SACvD,CAAC,CAAC;IACL,CAAC;IAED,gGAAgG;IAChG,+FAA+F;IAC/F,MAAM,cAAc,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;IAC/C,IAAI,cAAc,KAAK,SAAS;QAAE,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAEhE,yFAAyF;IACzF,gGAAgG;IAChG,+FAA+F;IAC/F,wFAAwF;IACxF,MAAM,yBAAyB,GAAG,8BAA8B,CAAC,GAAG,CAAC,CAAC;IACtE,IAAI,yBAAyB,KAAK,SAAS;QAAE,QAAQ,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IAEtF,2FAA2F;IAC3F,iFAAiF;IACjF,4FAA4F;IAC5F,MAAM,YAAY,GAAG,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAChD,IAAI,YAAY,KAAK,SAAS;QAAE,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAE5D,6FAA6F;IAC7F,6FAA6F;IAC7F,4FAA4F;IAC5F,0FAA0F;IAC1F,+FAA+F;IAC/F,oDAAoD;IACpD,IACE,GAAG,CAAC,YAAY,KAAK,SAAS;QAC9B,GAAG,CAAC,YAAY,CAAC,UAAU,KAAK,SAAS;QACzC,GAAG,CAAC,OAAO,EAAE,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,EAChE,CAAC;QACD,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC;QAClF,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,6BAA6B;YACnC,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,SAAS;YAChC,MAAM,EACJ,GAAG,CAAC,YAAY,CAAC,SAAS,KAAK,SAAS;gBACtC,CAAC,CAAC,qDAAqD,GAAG,CAAC,YAAY,CAAC,SAAS,EAAE;gBACnF,CAAC,CAAC,gFAAgF;YACtF,QAAQ,EAAE;gBACR,OAAO,EAAE,GAAG,CAAC,YAAY,CAAC,OAAO;gBACjC,UAAU,EAAE,GAAG,CAAC,YAAY,CAAC,UAAU;gBACvC,UAAU,EAAE,SAAS;gBACrB,WAAW,EAAE,GAAG,CAAC,YAAY,CAAC,SAAS,IAAI,cAAc;aAC1D;SACF,CAAC,CAAC;IACL,CAAC;IAED,+FAA+F;IAC/F,0FAA0F;IAC1F,gFAAgF;IAChF,IAAI,IAAI,EAAE,UAAU,KAAK,SAAS,EAAE,CAAC;QACnC,KAAK,MAAM,SAAS,IAAI,sBAAsB,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,EAAE,CAAC;YACrE,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,mCAAmC;gBACzC,IAAI,EAAE,SAAS;gBACf,MAAM,EAAE,yBAAyB,SAAS,yBAAyB;aACpE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,+FAA+F;IAC/F,4BAA4B;IAC5B,IACE,GAAG,CAAC,SAAS,KAAK,SAAS;QAC3B,GAAG,CAAC,iBAAiB,CAAC,MAAM,KAAK,CAAC;QAClC,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,IAAI,eAAe,EACrE,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,oBAAoB;YAC1B,MAAM,EAAE,mCAAmC;YAC3C,KAAK,EAAE,GAAG,CAAC,UAAU;YACrB,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;YAC3D,QAAQ,EAAE;gBACR,iBAAiB,EAAE,eAAe;gBAClC,GAAG,CAAC,IAAI,EAAE,UAAU,KAAK,SAAS;oBAChC,CAAC,CAAC,EAAE,cAAc,EAAE,iBAAiB,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,EAAE;oBAC7D,CAAC,CAAC,EAAE,CAAC;aACR;SACF,CAAC,CAAC;IACL,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/engine/settlement.d.ts

@@ -1,4 +1,4 @@
-import type { RunRecord } from '../types/run-record.js';
+import type { RunRecord, EvidenceSnapshot } from '../types/run-record.js';
 import type { WorkflowDefinition, FinalizerTrigger } from '../types/workflow-definition.js';
 import type { SettlementDelta, SettlementResult, SettleStepOutcome } from '../types/settlement.js';
 /**
@@ -27,22 +27,77 @@ export declare function selectFinalizers(definition: WorkflowDefinition, settled
 /**
  * Derives the full set of finalizer triggers a terminal `outcome` satisfies for `record` (issue
  * #302, design record §Mechanics-1): `{outcome}` — always — plus `'completed_with_failed_steps'`
- * when `outcome === 'complete' ∧ record.failed_steps.length > 0` (a "mixed complete" seal — the
- * SAME class #304's `completed_with_failed_steps` run-health finding already surfaces at read
- * time; this is the mint-time trigger, sharing that one predicate).
+ * when `outcome === 'complete' ∧ record.failed_steps.length > 0` (a "mixed complete" seal).
+ *
+ * TWO SURFACES, ONE SHAPE, TWO MOMENTS. #304's `completed_with_failed_steps` run-health finding
+ * tests the same SHAPE (completed ∧ non-empty `failed_steps`), but it tests it at READ time on
+ * the final record, whereas this function is evaluated at MINT time, inside
+ * `applyTerminalPostconditions`, before any finalizer has run. There is no shared function and no
+ * shared evaluation point — only a shared shape.
+ *
+ * The moment is what separates them, on a real population: a finalizer's OWN failure joins
+ * `failed_steps` after the seal minted (see the failed arm below, where `delta.finalizer` is
+ * appended), so a run that completes CLEAN and whose finalizer then fails is seen by the
+ * read-time finding and was never seen by this trigger — the record it read had an empty
+ * `failed_steps`. The divergence runs one way only: `failed_steps` only grows, so everything this
+ * trigger fires on the finding also reports, and the finding additionally reports post-mint
+ * finalizer self-failures. Tracked at #374 (P5); this comment describes what the code does today
+ * and does not prejudge what that issue decides.
  *
  * Uniform across epochs (design record M1, deliberate): a second-epoch complete seal whose ONLY
  * `failed_steps` scar is a PRIOR epoch's finalizer self-failure (unresumable, so it never leaves
  * `failed_steps`) still fires this trigger — no exclusion of finalizer-declared step names. The
  * alternative (excluding finalizer names from the predicate) buys mint-time purity at the cost of
- * diverging from the read-time #304 finding's own uniform predicate; this design keeps ONE
- * predicate for both surfaces, deliberately.
+ * making the two surfaces disagree about a shape they can both see, which is a second divergence
+ * on top of the one above.
  *
  * Pure; this ONE function is the seam a future authorable tolerance threshold (SFN-style: fire
  * only when `failed_steps.length` exceeds some declared N) would extend — banked, not built
  * (design record R2).
  */
 export declare function deriveEffectiveTriggers(outcome: SettleStepOutcome, record: Pick<RunRecord, 'failed_steps'>): ReadonlySet<FinalizerTrigger>;
+/**
+ * Renders the run-level cause for a run with MORE THAN ONE distinct failed step (issue #373).
+ *
+ * PRECONDITION — callers gate on `new Set(failedSteps).size > 1`. That gate is about which
+ * sentence SHAPE a call site wants, not about grammar safety: the single-failure sentence is each
+ * call site's own template (`Step 'a' failed: …`, `Guard step 'g' failed: …`), left where it is so
+ * there is exactly one spelling of each. Output below is grammatical at any count.
+ *
+ * The defect it fixes: `failed_steps` is append-ordered by settlement commit, so naming one step
+ * as THE cause named whichever failure settled LAST — and under true concurrency the lock race
+ * decided the culprit. The sentence below is order-independent by construction:
+ *
+ * - **dedup, then sort lexically.** A domain step cannot appear twice today, but the post-seal
+ *   finalizer append across resume epochs has never been executed for duplication — dedup makes
+ *   the count honest either way. Sorting is the order rule (Tekton `sort.Strings`, rustc
+ *   `error_codes.sort()`); array order IS settle order, the instability this fix exists to kill.
+ * - **count first, no culprit, terminating verb.** The count is the one fact true regardless of
+ *   order.
+ * - **a missing message yields a bare step name.** Never fabricated — the string `undefined` must
+ *   not be constructible here.
+ */
+export declare function renderFailCause(failedSteps: readonly string[], messages: ReadonlyMap<string, string>): string;
+/**
+ * Last-`error`-snapshot-per-step, in one linear pass — the same last-per-step idiom
+ * `buildSettlementNamespace` already ships. `EvidenceSnapshot.error` is stored VERBATIM by
+ * `captureEvidence`, so these are the real per-step messages, not a reconstruction.
+ *
+ * A step can hold several error snapshots (retries, resume epochs); the LAST one is the message
+ * that describes the failure the record currently carries.
+ */
+export declare function failureMessagesFromEvidence(evidence: readonly EvidenceSnapshot[]): Map<string, string>;
+/**
+ * The evidence walk plus the call site's OWN in-hand message for its own step.
+ *
+ * At the guard sites the overlay is now DEFENSIVE, not load-bearing (issue #373 correction): the
+ * guard's evidence `error` carries the unresolvable path itself, so the path survives the evidence
+ * walk and the post-drain re-render alike. It is kept against caller-shaped evidence that might
+ * arrive without it.
+ *
+ * `undefined` never clobbers an evidence message.
+ */
+export declare function failureMessagesWithOverlay(evidence: readonly EvidenceSnapshot[], step: string, inHand: string | undefined): Map<string, string>;
 /**
  * Applies one {@link SettlementDelta} against `fresh` — pure, synchronous, no I/O, no registry
  * (design record §7 CS-purity: `options` carries VALUES only). `definition` is passed per call

package/dist/engine/settlement.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"settlement.d.ts","sourceRoot":"","sources":["../../src/engine/settlement.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,SAAS,EAAoB,MAAM,wBAAwB,CAAC;AAC1E,OAAO,KAAK,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAC5F,OAAO,KAAK,EACV,eAAe,EACf,gBAAgB,EAEhB,iBAAiB,EAQlB,MAAM,wBAAwB,CAAC;AA4GhC;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,gBAAgB,CAC9B,UAAU,EAAE,kBAAkB,EAC9B,gBAAgB,EAAE,WAAW,CAAC,MAAM,CAAC,EACrC,OAAO,EAAE,iBAAiB,GAAG,WAAW,CAAC,gBAAgB,CAAC,GACzD,MAAM,EAAE,CAoBV;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,iBAAiB,EAC1B,MAAM,EAAE,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,GACtC,WAAW,CAAC,gBAAgB,CAAC,CAM/B;AA8/BD;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAC7B,KAAK,EAAE,SAAS,EAChB,KAAK,EAAE,eAAe,EACtB,UAAU,EAAE,kBAAkB,EAC9B,OAAO,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,IAAI,CAAA;CAAE,GACvB,gBAAgB,CAoBlB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,yBAAyB,QAIE,CAAC"}
+{"version":3,"file":"settlement.d.ts","sourceRoot":"","sources":["../../src/engine/settlement.ts"],"names":[],"mappings":"AAyBA,OAAO,KAAK,EAAE,SAAS,EAAW,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AACnF,OAAO,KAAK,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAC5F,OAAO,KAAK,EACV,eAAe,EACf,gBAAgB,EAEhB,iBAAiB,EAQlB,MAAM,wBAAwB,CAAC;AA8GhC;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,gBAAgB,CAC9B,UAAU,EAAE,kBAAkB,EAC9B,gBAAgB,EAAE,WAAW,CAAC,MAAM,CAAC,EACrC,OAAO,EAAE,iBAAiB,GAAG,WAAW,CAAC,gBAAgB,CAAC,GACzD,MAAM,EAAE,CAoBV;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,iBAAiB,EAC1B,MAAM,EAAE,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,GACtC,WAAW,CAAC,gBAAgB,CAAC,CAM/B;AAoQD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,eAAe,CAC7B,WAAW,EAAE,SAAS,MAAM,EAAE,EAC9B,QAAQ,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,GACpC,MAAM,CAmBR;AAED;;;;;;;GAOG;AACH,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,SAAS,gBAAgB,EAAE,GACpC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAMrB;AAED;;;;;;;;;GASG;AACH,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,SAAS,gBAAgB,EAAE,EACrC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,GAAG,SAAS,GACzB,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAIrB;AA21BD;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAC7B,KAAK,EAAE,SAAS,EAChB,KAAK,EAAE,eAAe,EACtB,UAAU,EAAE,kBAAkB,EAC9B,OAAO,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,IAAI,CAAA;CAAE,GACvB,gBAAgB,CAoBlB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,yBAAyB,QAIE,CAAC"}

package/dist/engine/settlement.js

@@ -1,4 +1,4 @@
-import { deriveRunPhase, isWorkflowComplete, findEligibleSteps, findEligibleGuardSteps, propagateSkips, } from './eligibility.js';
+import { assertSealMarkersAgree, assertSealOutcomeCoherent, deriveRunPhase, isWorkflowComplete, findEligibleSteps, findEligibleGuardSteps, propagateSkips, } from './eligibility.js';
 import { deriveDefaultedSteps } from './defaulted-steps.js';
 import { captureEvidence } from '../evidence/snapshot.js';
 import { omitClaim } from './claim-liveness.js';
@@ -132,16 +132,29 @@ export function selectFinalizers(definition, settledStepNames, outcome) {
 /**
  * Derives the full set of finalizer triggers a terminal `outcome` satisfies for `record` (issue
  * #302, design record §Mechanics-1): `{outcome}` — always — plus `'completed_with_failed_steps'`
- * when `outcome === 'complete' ∧ record.failed_steps.length > 0` (a "mixed complete" seal — the
- * SAME class #304's `completed_with_failed_steps` run-health finding already surfaces at read
- * time; this is the mint-time trigger, sharing that one predicate).
+ * when `outcome === 'complete' ∧ record.failed_steps.length > 0` (a "mixed complete" seal).
+ *
+ * TWO SURFACES, ONE SHAPE, TWO MOMENTS. #304's `completed_with_failed_steps` run-health finding
+ * tests the same SHAPE (completed ∧ non-empty `failed_steps`), but it tests it at READ time on
+ * the final record, whereas this function is evaluated at MINT time, inside
+ * `applyTerminalPostconditions`, before any finalizer has run. There is no shared function and no
+ * shared evaluation point — only a shared shape.
+ *
+ * The moment is what separates them, on a real population: a finalizer's OWN failure joins
+ * `failed_steps` after the seal minted (see the failed arm below, where `delta.finalizer` is
+ * appended), so a run that completes CLEAN and whose finalizer then fails is seen by the
+ * read-time finding and was never seen by this trigger — the record it read had an empty
+ * `failed_steps`. The divergence runs one way only: `failed_steps` only grows, so everything this
+ * trigger fires on the finding also reports, and the finding additionally reports post-mint
+ * finalizer self-failures. Tracked at #374 (P5); this comment describes what the code does today
+ * and does not prejudge what that issue decides.
  *
  * Uniform across epochs (design record M1, deliberate): a second-epoch complete seal whose ONLY
  * `failed_steps` scar is a PRIOR epoch's finalizer self-failure (unresumable, so it never leaves
  * `failed_steps`) still fires this trigger — no exclusion of finalizer-declared step names. The
  * alternative (excluding finalizer names from the predicate) buys mint-time purity at the cost of
- * diverging from the read-time #304 finding's own uniform predicate; this design keeps ONE
- * predicate for both surfaces, deliberately.
+ * making the two surfaces disagree about a shape they can both see, which is a second divergence
+ * on top of the one above.
  *
  * Pure; this ONE function is the seam a future authorable tolerance threshold (SFN-style: fire
  * only when `failed_steps.length` exceeds some declared N) would extend — banked, not built
@@ -204,13 +217,28 @@ function mintFresh(record, definition, outcome) {
  * simply the post-write value, read back explicitly (not assumed) so a future caller that ever
  * violates that precondition fails loudly via a wrong `transitioned` value rather than silently.
  */
-function applyTerminalPostconditions(record, definition, mintOutcome, stampDefaulted) {
+function applyTerminalPostconditions(record, definition, mintOutcome, stampDefaulted, 
+/**
+ * issue #367: the ARM this settlement branch seals with — per-branch knowledge that exists
+ * exactly once, at the seal site, at seal time (re-inferring it later is lossy in principle:
+ * `guard_abort` and `handler_abort` differ only by writer-owned prose). Stamped IFF this apply
+ * TRANSITIONED; the eight call sites in this file are the whole settlement-transform writer
+ * census. A stale prior seal never survives a non-terminal fork — see the strip below.
+ */
+seal) {
     const transitioned = record.terminal_state === true;
-    let sealed = record;
+    // issue #367: strip any stale prior seal FIRST, so a non-terminal fork can never carry one out.
+    const { sealed_by: _priorSeal, ...base } = record;
+    let sealed = transitioned
+        ? {
+            ...base,
+            sealed_by: { arm: seal.arm, ...(seal.step !== undefined ? { step: seal.step } : {}) },
+        }
+        : base;
     if (transitioned) {
         // On terminal false→true edge: mintFresh (§4.1), same atomic write.
-        const ledger = mintFresh(record, definition, mintOutcome);
-        sealed = { ...record, ...(ledger !== undefined ? { finalizer_ledger: ledger } : {}) };
+        const ledger = mintFresh(sealed, definition, mintOutcome);
+        sealed = { ...sealed, ...(ledger !== undefined ? { finalizer_ledger: ledger } : {}) };
         // defaulted_steps stamped IFF a COMPLETE-terminal edge (§4.2; the FM-5/#232 guard) — never on
         // a fail/abort seal, even one that terminalizes.
         if (stampDefaulted) {
@@ -218,6 +246,11 @@ function applyTerminalPostconditions(record, definition, mintOutcome, stampDefau
             if (defaultedSteps.length > 0)
                 sealed = { ...sealed, defaulted_steps: defaultedSteps };
         }
+        // issue #367: the two transform-scoped congruence assertions, on the record THIS function
+        // produces — never universal (a universal marker law reds the published TERMINAL_STATE_ONLY
+        // fixture by construction).
+        assertSealMarkersAgree(sealed);
+        assertSealOutcomeCoherent(sealed);
     }
     const withPhase = { ...sealed, run_phase: deriveRunPhase(sealed) };
     return { run: withPhase, transitioned };
@@ -323,7 +356,10 @@ function applyAbortEdge(fresh, withMembership, step, abort, definition, now) {
     // §4 shared postconditions: abort NEVER stamps defaulted_steps (the FM-5/#232 guard — only the
     // complete edge does); `transitioned` is always true here (isTerminal(fresh) was already
     // refused above, and `aborted.terminal_state` is unconditionally true).
-    const { run, transitioned } = applyTerminalPostconditions(aborted, definition, 'abort', false);
+    const { run, transitioned } = applyTerminalPostconditions(aborted, definition, 'abort', false, {
+        arm: 'handler_abort',
+        step,
+    });
     return {
         applied: true,
         run,
@@ -331,6 +367,94 @@ function applyAbortEdge(fresh, withMembership, step, abort, definition, now) {
         pendingFinalizers: pendingFinalizerNames(run.finalizer_ledger),
     };
 }
+// ---------------------------------------------------------------------------
+// The run's one-line fail cause (issue #373)
+// ---------------------------------------------------------------------------
+/** Per-message cap before the truncation marker — sized from a real-corpus measurement
+ *  (2026-08-20, n=31 evidence error messages from a live runsDir: p50=21, p95=248, max=254 — 19%
+ *  of real messages were truncated at the previous unanchored 120; 256 keeps the whole observed
+ *  distribution verbatim). Re-measure before changing; the 1024 sentence cap remains the global
+ *  bound. */
+const FAIL_CAUSE_MESSAGE_CAP = 256;
+/** Hard cap on the WHOLE sentence, marker included — the returned string is never longer than
+ *  this. (Tekton caps its joined validation detail at 1024 + `"..."`, i.e. 1027 out; realm's cap
+ *  is inclusive, so an overflowing sentence lands at exactly 1024.) */
+const FAIL_CAUSE_SENTENCE_CAP = 1024;
+/** ASCII, not `…` — the marker travels through logs, terminals and a Postgres text column. */
+const FAIL_CAUSE_TRUNCATION = '...';
+/**
+ * Renders the run-level cause for a run with MORE THAN ONE distinct failed step (issue #373).
+ *
+ * PRECONDITION — callers gate on `new Set(failedSteps).size > 1`. That gate is about which
+ * sentence SHAPE a call site wants, not about grammar safety: the single-failure sentence is each
+ * call site's own template (`Step 'a' failed: …`, `Guard step 'g' failed: …`), left where it is so
+ * there is exactly one spelling of each. Output below is grammatical at any count.
+ *
+ * The defect it fixes: `failed_steps` is append-ordered by settlement commit, so naming one step
+ * as THE cause named whichever failure settled LAST — and under true concurrency the lock race
+ * decided the culprit. The sentence below is order-independent by construction:
+ *
+ * - **dedup, then sort lexically.** A domain step cannot appear twice today, but the post-seal
+ *   finalizer append across resume epochs has never been executed for duplication — dedup makes
+ *   the count honest either way. Sorting is the order rule (Tekton `sort.Strings`, rustc
+ *   `error_codes.sort()`); array order IS settle order, the instability this fix exists to kill.
+ * - **count first, no culprit, terminating verb.** The count is the one fact true regardless of
+ *   order.
+ * - **a missing message yields a bare step name.** Never fabricated — the string `undefined` must
+ *   not be constructible here.
+ */
+export function renderFailCause(failedSteps, messages) {
+    const distinct = [...new Set(failedSteps)].sort();
+    const rendered = distinct.map((step) => {
+        const message = messages.get(step);
+        if (message === undefined)
+            return step;
+        const capped = message.length > FAIL_CAUSE_MESSAGE_CAP
+            ? message.slice(0, FAIL_CAUSE_MESSAGE_CAP) + FAIL_CAUSE_TRUNCATION
+            : message;
+        return `${step} ("${capped}")`;
+    });
+    // Grammatical across the WHOLE input domain, not just the domain the call sites use — a public
+    // export that can emit "1 steps failed" is wrong output, precondition or no precondition
+    // (ninja's own discipline: "subcommand failed" / "subcommands failed").
+    const sentence = `${distinct.length} step${distinct.length === 1 ? '' : 's'} failed: ${rendered.join(', ')}.`;
+    return sentence.length > FAIL_CAUSE_SENTENCE_CAP
+        ? sentence.slice(0, FAIL_CAUSE_SENTENCE_CAP - FAIL_CAUSE_TRUNCATION.length) +
+            FAIL_CAUSE_TRUNCATION
+        : sentence;
+}
+/**
+ * Last-`error`-snapshot-per-step, in one linear pass — the same last-per-step idiom
+ * `buildSettlementNamespace` already ships. `EvidenceSnapshot.error` is stored VERBATIM by
+ * `captureEvidence`, so these are the real per-step messages, not a reconstruction.
+ *
+ * A step can hold several error snapshots (retries, resume epochs); the LAST one is the message
+ * that describes the failure the record currently carries.
+ */
+export function failureMessagesFromEvidence(evidence) {
+    const messages = new Map();
+    for (const snapshot of evidence) {
+        if (snapshot.error !== undefined)
+            messages.set(snapshot.step_id, snapshot.error);
+    }
+    return messages;
+}
+/**
+ * The evidence walk plus the call site's OWN in-hand message for its own step.
+ *
+ * At the guard sites the overlay is now DEFENSIVE, not load-bearing (issue #373 correction): the
+ * guard's evidence `error` carries the unresolvable path itself, so the path survives the evidence
+ * walk and the post-drain re-render alike. It is kept against caller-shaped evidence that might
+ * arrive without it.
+ *
+ * `undefined` never clobbers an evidence message.
+ */
+export function failureMessagesWithOverlay(evidence, step, inHand) {
+    const messages = failureMessagesFromEvidence(evidence);
+    if (inHand !== undefined)
+        messages.set(step, inHand);
+    return messages;
+}
 /** complete / fail: the TWO-DISJUNCT `isComplete` predicate (execution-loop.ts :2579-2583 /
  *  :2237-2241 — named, not implied). */
 function applyCompleteOrFailEdge(withMembership, step, outcome, failureMessage, definition) {
@@ -344,20 +468,30 @@ function applyCompleteOrFailEdge(withMembership, step, outcome, failureMessage,
         (withSkipped.in_progress_steps.length === 0 &&
             findEligibleSteps(definition, withSkipped).length === 0 &&
             findEligibleGuardSteps(definition, withSkipped).length === 0);
+    // issue #373: with MORE THAN ONE distinct failure the run has no single culprit, and naming one
+    // named whichever settled last. At exactly one failure the sentence is unchanged — including the
+    // `?? 'unknown error'` fallback, which is this site's shape and stays this site's shape.
+    const failCause = new Set(withSkipped.failed_steps).size > 1
+        ? renderFailCause(withSkipped.failed_steps, failureMessagesWithOverlay(withSkipped.evidence, step, failureMessage))
+        : `Step '${step}' failed: ${failureMessage ?? 'unknown error'}`;
     const draft = {
         ...withSkipped,
         terminal_state: isComplete,
         ...(isComplete
             ? {
                 terminal_reason: outcome === 'complete'
-                    ? 'Workflow completed.' // eligibility.ts:47 keys deriveRunPhase's 'completed' on this
-                    : `Step '${step}' failed: ${failureMessage ?? 'unknown error'}`,
+                    ? 'Workflow completed.' // the legacy-classifier leg keys 'completed' on this (#367)
+                    : failCause,
             }
             : {}),
     };
     // §4 shared postconditions: defaulted_steps stamps IFF this is a COMPLETE-terminal edge — never
     // on a fail seal, even one that terminalizes.
-    const { run, transitioned } = applyTerminalPostconditions(draft, definition, outcome, outcome === 'complete' && isComplete);
+    const { run, transitioned } = applyTerminalPostconditions(draft, definition, outcome, outcome === 'complete' && isComplete, 
+    // issue #367: validation exhaustion is deliberately NOT a distinct arm — a VALIDATION_EXHAUSTED
+    // fail seals 'step_failure' like any other; the distinction lives in defaulted_steps and the
+    // step diagnostics. Never re-introduce a failure-code ternary here.
+    { arm: outcome === 'complete' ? 'complete' : 'step_failure', step });
     return {
         applied: true,
         run,
@@ -533,10 +667,11 @@ now) {
         const draft = {
             ...withSkipped,
             terminal_state: isComplete,
-            // eligibility.ts:47 keys deriveRunPhase's 'completed' on this exact string.
+            // The legacy-classifier leg of deriveRunPhase keys 'completed' on this exact string —
+            // for the LEGACY population only; on a stamped record the arm derives (issue #367).
             ...(isComplete ? { terminal_reason: 'Workflow completed.' } : {}),
         };
-        const { run, transitioned } = applyTerminalPostconditions(draft, definition, 'complete', isComplete);
+        const { run, transitioned } = applyTerminalPostconditions(draft, definition, 'complete', isComplete, { arm: 'gate_resolution_complete', step: stepName });
         return {
             applied: true,
             run,
@@ -640,7 +775,7 @@ function applyExpireGate(fresh, delta, definition, now) {
             terminal_state: isComplete,
             ...(isComplete ? { terminal_reason: 'Workflow completed.' } : {}),
         };
-        const { run, transitioned } = applyTerminalPostconditions(draft, definition, 'complete', isComplete);
+        const { run, transitioned } = applyTerminalPostconditions(draft, definition, 'complete', isComplete, { arm: 'gate_expiry_default', step: stepName });
         return {
             applied: true,
             run,
@@ -698,7 +833,10 @@ function applyExpireGate(fresh, delta, definition, now) {
     };
     // §4 shared postconditions: abort NEVER stamps defaulted_steps (the FM-5/#232 guard);
     // `transitioned` is always true (isTerminal(fresh) already refused above).
-    const { run, transitioned } = applyTerminalPostconditions(aborted, definition, 'abort', false);
+    const { run, transitioned } = applyTerminalPostconditions(aborted, definition, 'abort', false, {
+        arm: 'gate_expiry_abort',
+        step: stepName,
+    });
     return {
         applied: true,
         run,
@@ -782,13 +920,25 @@ function applySettleGuard(fresh, delta, definition) {
             skipped_steps: propagated.skipped,
             skip_details: propagated.details,
         };
+        // issue #373: this site names the guard alone even when other steps had already failed
+        // (executed with failed_steps=["fail_a","g"]). At >1 distinct failure it renders the whole
+        // set; at exactly one the sentence below is byte-unchanged.
+        const guardPath = `unresolvable path '${resolutionError.unresolvable_path}'`;
         const draft = {
             ...withSkipped,
             terminal_state: true,
-            // execution-loop.ts:3671 parity.
-            terminal_reason: `Guard step '${step}' failed: unresolvable path '${resolutionError.unresolvable_path}'`,
+            // execution-loop.ts:4812 parity.
+            terminal_reason: new Set(withSkipped.failed_steps).size > 1
+                ? renderFailCause(withSkipped.failed_steps, 
+                // Defensive once evidence carries the path (issue #373 correction); kept against
+                // caller-shaped evidence that arrives without it.
+                failureMessagesWithOverlay(withSkipped.evidence, step, guardPath))
+                : `Guard step '${step}' failed: ${guardPath}`,
         };
-        const { run, transitioned } = applyTerminalPostconditions(draft, definition, 'fail', false);
+        const { run, transitioned } = applyTerminalPostconditions(draft, definition, 'fail', false, {
+            arm: 'guard_resolution_error',
+            step,
+        });
         return {
             applied: true,
             run,
@@ -820,7 +970,10 @@ function applySettleGuard(fresh, delta, definition) {
                 ...(abort.abort_message !== undefined ? { abort_message: abort.abort_message } : {}),
             },
         };
-        const { run, transitioned } = applyTerminalPostconditions(draft, definition, 'abort', false);
+        const { run, transitioned } = applyTerminalPostconditions(draft, definition, 'abort', false, {
+            arm: 'guard_abort',
+            step,
+        });
         return {
             applied: true,
             run,
@@ -847,11 +1000,11 @@ function applySettleGuard(fresh, delta, definition) {
     const draft = {
         ...withSkipped,
         terminal_state: isComplete,
-        // execution-loop.ts:3675-3705 parity; eligibility.ts:47 keys deriveRunPhase's 'completed' on
+        // execution-loop.ts:3675-3705 parity; the legacy-classifier leg keys 'completed' on
         // this exact string.
         ...(isComplete ? { terminal_reason: 'Workflow completed.' } : {}),
     };
-    const { run, transitioned } = applyTerminalPostconditions(draft, definition, 'complete', isComplete);
+    const { run, transitioned } = applyTerminalPostconditions(draft, definition, 'complete', isComplete, { arm: 'guard_pass_complete', step });
     return {
         applied: true,
         run,
@@ -999,9 +1152,21 @@ function applyMarkFinalizer(fresh, delta) {
             failed_steps: [...fresh.failed_steps, delta.finalizer],
             evidence: [...fresh.evidence, delta.evidence],
         };
+    const phase = deriveRunPhase(withLedgerAndEvidence);
+    // issue #373: the finalizer's OWN failure joins `failed_steps` here, AFTER the seal minted the
+    // sentence — which is how a sealed cause went stale and undercounted the record. Re-render from
+    // the grown record, but ONLY on the failed arm: on the completed arm nothing grew, and a
+    // re-render there would rebuild without the seal site's in-hand overlay (the guard sites' path
+    // text) and silently drop it.
+    const failedArmCause = delta.result !== 'completed' &&
+        phase === 'failed' &&
+        new Set(withLedgerAndEvidence.failed_steps).size > 1
+        ? renderFailCause(withLedgerAndEvidence.failed_steps, failureMessagesFromEvidence(withLedgerAndEvidence.evidence))
+        : undefined;
     const run = {
         ...withLedgerAndEvidence,
-        run_phase: deriveRunPhase(withLedgerAndEvidence),
+        run_phase: phase,
+        ...(failedArmCause !== undefined ? { terminal_reason: failedArmCause } : {}),
     };
     return {
         applied: true,