@smthrs/control 0.0.0-stage → 1.0.0-rc.4

package/dist/cjs/ControlFacts.js

@@ -0,0 +1,261 @@
+"use strict";
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key2 of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key2) && key2 !== except)
+        __defProp(to, key2, { get: () => from[key2], enumerable: !(desc = __getOwnPropDesc(from, key2)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var ControlFacts_exports = {};
+__export(ControlFacts_exports, {
+  ApprovalDecisionFact: () => ApprovalDecisionFact,
+  ApprovalRequestFact: () => ApprovalRequestFact,
+  GuardIncident: () => GuardIncident,
+  LifecycleProvenance: () => LifecycleProvenance,
+  RunFact: () => RunFact,
+  approvalDecisionFact: () => approvalDecisionFact,
+  commitApprovalRequest: () => commitApprovalRequest,
+  commitRun: () => commitRun,
+  fold: () => fold,
+  runFact: () => runFact,
+  version: () => version
+});
+module.exports = __toCommonJS(ControlFacts_exports);
+var import_journal = require("@smthrs/journal");
+var import_effect = require("effect");
+var ControlSchema = __toESM(require("./ControlSchema.js"), 1);
+const version = 1;
+const RunFact = import_effect.Schema.Struct({
+  factVersion: import_effect.Schema.Literal(version),
+  baseline: import_effect.Schema.Literals(["created", "legacy"]),
+  run: ControlSchema.RunSummary
+});
+const runFact = (run, baseline = "legacy") => {
+  if (run.executionObservation !== void 0 || run.executionView !== void 0) {
+    throw new Error("A control fact cannot persist an executor observation");
+  }
+  return import_effect.Schema.decodeUnknownSync(RunFact)({ factVersion: version, baseline, run: structuredClone(run) });
+};
+const GuardIncident = import_effect.Schema.Struct({
+  classification: import_effect.Schema.Literals(["Runaway", "Stuck"]),
+  source: import_effect.Schema.Literals(["tokens", "usd", "latency", "model-call", "tool-call", "cell"]),
+  message: import_effect.Schema.String,
+  used: import_effect.Schema.optional(import_effect.Schema.Number),
+  reserved: import_effect.Schema.optional(import_effect.Schema.Number),
+  max: import_effect.Schema.optional(import_effect.Schema.Number),
+  next: import_effect.Schema.optional(import_effect.Schema.Number),
+  allowance: import_effect.Schema.optional(import_effect.Schema.Number),
+  subject: import_effect.Schema.optional(import_effect.Schema.String)
+});
+const ApprovalRequestFact = import_effect.Schema.Struct({
+  factVersion: import_effect.Schema.Literal(version),
+  runId: import_effect.Schema.String,
+  requestId: import_effect.Schema.String,
+  question: import_effect.Schema.String,
+  payload: ControlSchema.ApprovalPayload,
+  incident: import_effect.Schema.optional(GuardIncident)
+});
+const ApprovalDecisionFact = import_effect.Schema.Struct({
+  factVersion: import_effect.Schema.Literal(version),
+  tokenId: import_effect.Schema.String,
+  approvalTarget: ControlSchema.ApprovalTarget
+});
+const approvalDecisionFact = (tokenId, approvalTarget) => import_effect.Schema.decodeUnknownSync(ApprovalDecisionFact)({
+  factVersion: version,
+  tokenId,
+  approvalTarget: structuredClone(approvalTarget)
+});
+const commitRun = (journal, change, sourceId, eventType, detail = {}, baseline = "legacy") => journal.transact(import_effect.Effect.gen(function* () {
+  const run = yield* change;
+  yield* journal.emitDurableUnfenced(
+    new import_journal.JournalEvent.Input({
+      runId: import_journal.JournalEvent.RunId.make(run.runId),
+      sourceId: import_journal.JournalEvent.SourceId.make(sourceId),
+      eventType,
+      payload: JSON.parse(
+        JSON.stringify({ ...detail, runId: run.runId, status: run.status, ...runFact(run, baseline) })
+      )
+    })
+  );
+  return run;
+}));
+const commitApprovalRequest = (journal, runtime, input, sourceId) => import_effect.Effect.suspend(() => {
+  const fact = import_effect.Schema.decodeUnknownSync(ApprovalRequestFact)({ ...structuredClone(input), factVersion: version });
+  const target = fact.payload.target;
+  if (target._tag !== "Node" || target.runId !== fact.runId || target.requestId !== fact.requestId) {
+    return import_effect.Effect.fail(
+      new import_journal.Journal.JournalError({
+        code: "invalid_event",
+        message: "Approval request identity does not match its target"
+      })
+    );
+  }
+  return journal.transact(import_effect.Effect.gen(function* () {
+    const token = yield* runtime.registerApproval(target);
+    if (token._tag === "Pending") {
+      yield* journal.emitDurableUnfenced(
+        new import_journal.JournalEvent.Input({
+          runId: import_journal.JournalEvent.RunId.make(fact.runId),
+          sourceId: import_journal.JournalEvent.SourceId.make(sourceId),
+          eventType: "control.approval.requested",
+          payload: JSON.parse(JSON.stringify(fact))
+        })
+      );
+    }
+    return token;
+  }));
+});
+const LifecycleProvenance = import_effect.Schema.Struct({
+  control: import_effect.Schema.Literals(["events", "legacy-snapshot", "unverified-snapshot"]),
+  execution: import_effect.Schema.Literals(["control", "engine-observed", "engine-missing"]),
+  baseline: import_effect.Schema.optional(import_effect.Schema.Literals(["created", "legacy"])),
+  fromSequence: import_effect.Schema.optional(import_effect.Schema.Number),
+  throughSequence: import_effect.Schema.optional(import_effect.Schema.Number)
+});
+const record = (value) => value !== null && typeof value === "object" && !Array.isArray(value) ? value : {};
+const string = (value) => typeof value === "string" ? value : void 0;
+const key = (runId, requestId) => JSON.stringify([runId, requestId]);
+const lifecycleKinds = /* @__PURE__ */ new Set([
+  "control.run.accepted",
+  "control.run.running",
+  "control.run.pending",
+  "control.run.parked",
+  "control.run.waiting-approval",
+  "control.run.completed",
+  "control.run.failed",
+  "control.run.cancelled",
+  "control.run.resume",
+  "control.run.claimed",
+  "control.steer.woke"
+]);
+const consistentStatus = (kind, run) => {
+  if (kind === "control.run.pending") return run.status === "accepted";
+  if (kind === "control.run.resume" || kind === "control.run.claimed" || kind === "control.steer.woke") return true;
+  return kind === `control.run.${run.status}`;
+};
+const coordinationFields = [
+  "runId",
+  "flowId",
+  "createdAt",
+  "updatedAt",
+  "planId",
+  "planDigest",
+  "ownerId",
+  "parkedBy"
+];
+const fold = (events, snapshot, observedApprovals = []) => {
+  let latest;
+  let first;
+  let uncovered = false;
+  const requests = /* @__PURE__ */ new Map();
+  for (const row of observedApprovals) {
+    if (snapshot !== void 0 && row.runId !== snapshot.runId) continue;
+    const target = row.payload.target;
+    if (target._tag !== "Node" || target.runId !== row.runId || target.requestId !== row.requestId) continue;
+    requests.set(key(row.runId, row.requestId), { row: { ...row, status: "pending" }, versioned: true });
+  }
+  const decisions = /* @__PURE__ */ new Map();
+  for (const event of events) {
+    if (snapshot !== void 0 && event.runId !== snapshot.runId) continue;
+    const payload = record(event.payload);
+    if (lifecycleKinds.has(event.kind) || payload.factVersion !== void 0 && event.kind.startsWith("control.run.")) {
+      if (import_effect.Schema.is(RunFact)(payload) && payload.run.runId === event.runId && payload.run.executionObservation === void 0 && payload.run.executionView === void 0 && consistentStatus(event.kind, payload.run)) {
+        latest = { fact: payload, sequence: event.sequence };
+        first ??= { baseline: payload.baseline, sequence: event.sequence };
+        if (uncovered) first = { baseline: "legacy", sequence: event.sequence };
+        uncovered = false;
+      } else if (payload.factVersion !== void 0 || latest !== void 0) uncovered = true;
+    }
+    if (event.kind === "control.approval.requested") {
+      const versioned = payload.factVersion !== void 0;
+      if (versioned && !import_effect.Schema.is(ApprovalRequestFact)(payload)) continue;
+      const runId = string(payload.runId) ?? event.runId;
+      const requestId = string(payload.requestId);
+      if (runId === void 0 || requestId === void 0 || event.runId !== runId || payload.payload === void 0) continue;
+      const submitted = payload.payload;
+      if (versioned && (submitted.target._tag !== "Node" || submitted.target.runId !== runId || submitted.target.requestId !== requestId)) continue;
+      const identity = key(runId, requestId);
+      if (requests.has(identity)) continue;
+      const decision = decisions.get(identity);
+      requests.set(identity, {
+        versioned,
+        row: {
+          runId,
+          requestId,
+          title: string(payload.question) ?? `Approval needed \u2014 ${requestId}`,
+          request: event.payload,
+          payload: submitted,
+          requestedAt: typeof payload.at === "number" && Number.isFinite(payload.at) ? payload.at : event.occurredAt,
+          status: decision !== void 0 && (decision.digest === void 0 || decision.digest === record(record(submitted).target).digest) ? decision.status : "pending"
+        }
+      });
+    }
+    if (event.kind === "control.approval.approved" || event.kind === "control.approval.denied") {
+      const status = event.kind === "control.approval.approved" ? "approved" : "denied";
+      let identity;
+      let digest;
+      if (payload.factVersion !== void 0) {
+        if (!import_effect.Schema.is(ApprovalDecisionFact)(payload) || payload.approvalTarget._tag !== "Node" || payload.approvalTarget.runId !== event.runId || payload.tokenId !== payload.approvalTarget.requestId) continue;
+        identity = key(payload.approvalTarget.runId, payload.approvalTarget.requestId);
+        digest = payload.approvalTarget.digest;
+      } else {
+        const tokenId = string(payload.tokenId) ?? string(payload.requestId);
+        if (tokenId !== void 0 && event.runId !== void 0) identity = key(event.runId, tokenId);
+        else {
+          identity = [...requests].find(
+            ([, request2]) => !request2.versioned && request2.row.status === "pending" && request2.row.runId === event.runId
+          )?.[0];
+        }
+      }
+      if (identity === void 0 || decisions.has(identity)) continue;
+      const request = requests.get(identity);
+      if (request !== void 0 && digest !== void 0 && record(record(request.row.payload).target).digest !== digest) continue;
+      decisions.set(identity, { status, ...digest === void 0 ? {} : { digest } });
+      if (request !== void 0) requests.set(identity, { ...request, row: { ...request.row, status } });
+    }
+  }
+  const matches = !uncovered && latest !== void 0 && (snapshot === void 0 || coordinationFields.every((field) => latest.fact.run[field] === snapshot[field]) && (snapshot.executionObservation === "observed" || latest.fact.run.status === snapshot.status));
+  const run = snapshot === void 0 ? uncovered ? void 0 : latest?.fact.run : matches ? {
+    ...snapshot,
+    ...latest.fact.run,
+    ...snapshot.executionObservation === "observed" ? {
+      status: snapshot.status,
+      waitingReason: snapshot.waitingReason,
+      parentRunId: snapshot.parentRunId,
+      lineageId: snapshot.lineageId,
+      roundOrdinal: snapshot.roundOrdinal,
+      pendingWaits: snapshot.pendingWaits
+    } : {}
+  } : snapshot;
+  return {
+    run,
+    provenance: {
+      control: uncovered ? "unverified-snapshot" : latest === void 0 ? "legacy-snapshot" : matches ? "events" : "unverified-snapshot",
+      execution: snapshot?.executionObservation === "observed" ? "engine-observed" : snapshot?.executionObservation === "missing" ? "engine-missing" : "control",
+      ...first === void 0 ? {} : { baseline: first.baseline, fromSequence: first.sequence },
+      ...latest === void 0 ? {} : { throughSequence: latest.sequence }
+    },
+    approvals: [...requests.values()].map(({ row }) => row)
+  };
+};
+//# sourceMappingURL=ControlFacts.js.map

package/dist/cjs/ControlFacts.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/ControlFacts.ts"],
+  "sourcesContent": ["/**\n * Versioned control lifecycle facts and their shared read projection.\n * @since 1.0.0\n */\n\nimport { Journal, JournalEvent } from \"@smthrs/journal\"\nimport { Effect, Schema } from \"effect\"\nimport type * as ControlRuntime from \"./ControlRuntime.ts\"\nimport * as ControlSchema from \"./ControlSchema.ts\"\n\n/** This is the control producer contract, independent of the harness journal format.\n * @category facts\n * @since 1.0.0\n */\nexport const version = 1\n\n/** A committed control snapshot. A baseline claims no history before its sequence.\n * @category facts\n * @since 1.0.0\n */\nexport const RunFact = Schema.Struct({\n  factVersion: Schema.Literal(version),\n  baseline: Schema.Literals([\"created\", \"legacy\"]),\n  run: ControlSchema.RunSummary\n})\n\n/** Capture the exact result of a fenced write, inside its journal transaction.\n * @category facts\n * @since 1.0.0\n */\nexport const runFact = (\n  run: ControlSchema.RunSummary,\n  baseline: \"created\" | \"legacy\" = \"legacy\"\n): typeof RunFact.Type => {\n  if (run.executionObservation !== undefined || run.executionView !== undefined) {\n    throw new Error(\"A control fact cannot persist an executor observation\")\n  }\n  return Schema.decodeUnknownSync(RunFact)({ factVersion: version, baseline, run: structuredClone(run) })\n}\n\n/** The exact facts of the guard that parked a run, frozen when it tripped.\n *\n * `Runaway` is a run spending past an approved ceiling (`tokens`, `usd`,\n * `latency`). `Stuck` is one operation that ran past its time limit\n * (`model-call`, `tool-call`, `cell`). Every number is in the source's unit,\n * tokens, dollars, or milliseconds: `used`, `reserved`, `max`, and `next` are\n * a budget's spend, held forecast, ceiling, and refused call; `max` is a\n * timeout's limit.\n * `allowance` is what Continue authorizes: the raised ceiling for a budget,\n * one more run of `max` for a timeout. `subject` names the operation a\n * timeout interrupted.\n * @category facts\n * @since 1.0.0\n */\nexport const GuardIncident = Schema.Struct({\n  classification: Schema.Literals([\"Runaway\", \"Stuck\"]),\n  source: Schema.Literals([\"tokens\", \"usd\", \"latency\", \"model-call\", \"tool-call\", \"cell\"]),\n  message: Schema.String,\n  used: Schema.optional(Schema.Number),\n  reserved: Schema.optional(Schema.Number),\n  max: Schema.optional(Schema.Number),\n  next: Schema.optional(Schema.Number),\n  allowance: Schema.optional(Schema.Number),\n  subject: Schema.optional(Schema.String)\n})\n\n/** The identity-bearing request admitted with its approval token.\n *\n * `incident` is present on a request a guard made, so a restarted host reads\n * the facts the park was made on rather than measuring them again.\n * @category facts\n * @since 1.0.0\n */\nexport const ApprovalRequestFact = Schema.Struct({\n  factVersion: Schema.Literal(version),\n  runId: Schema.String,\n  requestId: Schema.String,\n  question: Schema.String,\n  payload: ControlSchema.ApprovalPayload,\n  incident: Schema.optional(GuardIncident)\n})\n\n/** The exact target a committed decision resolves; old target-tag fields remain readable.\n * @category facts\n * @since 1.0.0\n */\nexport const ApprovalDecisionFact = Schema.Struct({\n  factVersion: Schema.Literal(version),\n  tokenId: Schema.String,\n  approvalTarget: ControlSchema.ApprovalTarget\n})\n\n/** Capture and validate the target the decision writer has actually resolved.\n * @category facts\n * @since 1.0.0\n */\nexport const approvalDecisionFact = (\n  tokenId: string,\n  approvalTarget: ControlSchema.ApprovalTarget\n): typeof ApprovalDecisionFact.Type =>\n  Schema.decodeUnknownSync(ApprovalDecisionFact)({\n    factVersion: version,\n    tokenId,\n    approvalTarget: structuredClone(approvalTarget)\n  })\n\n/** Commit a fenced control write and the exact resulting lifecycle fact together.\n * @category facts\n * @since 1.0.0\n */\nexport const commitRun = <E, R>(\n  journal: Journal.Service,\n  change: Effect.Effect<ControlSchema.RunSummary, E, R>,\n  sourceId: string,\n  eventType: string,\n  detail: Readonly<Record<string, unknown>> = {},\n  baseline: \"created\" | \"legacy\" = \"legacy\"\n) =>\n  journal.transact(Effect.gen(function*() {\n    const run = yield* change\n    yield* journal.emitDurableUnfenced(\n      new JournalEvent.Input({\n        runId: JournalEvent.RunId.make(run.runId),\n        sourceId: JournalEvent.SourceId.make(sourceId),\n        eventType,\n        payload: JSON.parse(\n          JSON.stringify({ ...detail, runId: run.runId, status: run.status, ...runFact(run, baseline) })\n        )\n      })\n    )\n    return run\n  }))\n\n/** The token and submit-ready request have one durable admission boundary.\n * @category facts\n * @since 1.0.0\n */\nexport const commitApprovalRequest = (\n  journal: Journal.Service,\n  runtime: Pick<ControlRuntime.Service, \"registerApproval\">,\n  input: Omit<typeof ApprovalRequestFact.Type, \"factVersion\">,\n  sourceId: string\n) =>\n  Effect.suspend(() => {\n    const fact = Schema.decodeUnknownSync(ApprovalRequestFact)({ ...structuredClone(input), factVersion: version })\n    const target = fact.payload.target\n    if (target._tag !== \"Node\" || target.runId !== fact.runId || target.requestId !== fact.requestId) {\n      return Effect.fail(\n        new Journal.JournalError({\n          code: \"invalid_event\",\n          message: \"Approval request identity does not match its target\"\n        })\n      )\n    }\n    return journal.transact(Effect.gen(function*() {\n      const token = yield* runtime.registerApproval(target)\n      if (token._tag === \"Pending\") {\n        yield* journal.emitDurableUnfenced(\n          new JournalEvent.Input({\n            runId: JournalEvent.RunId.make(fact.runId),\n            sourceId: JournalEvent.SourceId.make(sourceId),\n            eventType: \"control.approval.requested\",\n            payload: JSON.parse(JSON.stringify(fact))\n          })\n        )\n      }\n      return token\n    }))\n  })\n\n/** Honest coverage of the displayed lifecycle; engine rows are a separate authority.\n * @category facts\n * @since 1.0.0\n */\nexport const LifecycleProvenance = Schema.Struct({\n  control: Schema.Literals([\"events\", \"legacy-snapshot\", \"unverified-snapshot\"]),\n  execution: Schema.Literals([\"control\", \"engine-observed\", \"engine-missing\"]),\n  baseline: Schema.optional(Schema.Literals([\"created\", \"legacy\"])),\n  fromSequence: Schema.optional(Schema.Number),\n  throughSequence: Schema.optional(Schema.Number)\n})\n\n/** Submit-ready approval state derived solely from admitted facts.\n * @category facts\n * @since 1.0.0\n */\nexport interface Approval {\n  readonly runId: string\n  readonly waitRunId?: string | undefined\n  readonly questionProvenance?: \"events\" | \"legacy-observation\" | \"unverified-observation\" | undefined\n  readonly requestId: string\n  readonly title: string\n  readonly request: ControlSchema.ControlEvent[\"payload\"]\n  readonly payload: ControlSchema.ApprovalPayload\n  readonly requestedAt: number\n  readonly status: \"pending\" | \"approved\" | \"denied\"\n}\n\nconst record = (value: unknown): Record<string, unknown> =>\n  value !== null && typeof value === \"object\" && !Array.isArray(value) ? value as Record<string, unknown> : {}\nconst string = (value: unknown): string | undefined => typeof value === \"string\" ? value : undefined\nconst key = (runId: string, requestId: string): string => JSON.stringify([runId, requestId])\nconst lifecycleKinds = new Set([\n  \"control.run.accepted\",\n  \"control.run.running\",\n  \"control.run.pending\",\n  \"control.run.parked\",\n  \"control.run.waiting-approval\",\n  \"control.run.completed\",\n  \"control.run.failed\",\n  \"control.run.cancelled\",\n  \"control.run.resume\",\n  \"control.run.claimed\",\n  \"control.steer.woke\"\n])\nconst consistentStatus = (kind: string, run: ControlSchema.RunSummary): boolean => {\n  if (kind === \"control.run.pending\") return run.status === \"accepted\"\n  if (kind === \"control.run.resume\" || kind === \"control.run.claimed\" || kind === \"control.steer.woke\") return true\n  return kind === `control.run.${run.status}`\n}\nconst coordinationFields = [\n  \"runId\",\n  \"flowId\",\n  \"createdAt\",\n  \"updatedAt\",\n  \"planId\",\n  \"planDigest\",\n  \"ownerId\",\n  \"parkedBy\"\n] as const\n\n/**\n * One fold for gateway snapshots and subscriptions. Current writers are strict;\n * legacy unnamed decisions may close only a legacy request in the same run.\n * Observed human waits may seed the approval projection without claiming a\n * journaled request. They still require an exact named decision, and share the\n * same digest binding as admitted requests.\n * Duplicate requests never reopen decisions, and a new-style unknown identity\n * never consumes another gate. Snapshot fallback is explicitly unverified.\n * @category facts\n * @since 1.0.0\n */\nexport const fold = (\n  events: ReadonlyArray<ControlSchema.ControlEvent>,\n  snapshot?: ControlSchema.RunSummary,\n  observedApprovals: ReadonlyArray<Approval> = []\n): {\n  readonly run: ControlSchema.RunSummary | undefined\n  readonly provenance: typeof LifecycleProvenance.Type\n  readonly approvals: ReadonlyArray<Approval>\n} => {\n  let latest: { readonly fact: typeof RunFact.Type; readonly sequence: number } | undefined\n  let first: { readonly baseline: \"created\" | \"legacy\"; readonly sequence: number } | undefined\n  let uncovered = false\n  const requests = new Map<string, { readonly row: Approval; readonly versioned: boolean }>()\n  for (const row of observedApprovals) {\n    if (snapshot !== undefined && row.runId !== snapshot.runId) continue\n    const target = row.payload.target\n    if (target._tag !== \"Node\" || target.runId !== row.runId || target.requestId !== row.requestId) continue\n    requests.set(key(row.runId, row.requestId), { row: { ...row, status: \"pending\" }, versioned: true })\n  }\n  const decisions = new Map<string, { readonly status: \"approved\" | \"denied\"; readonly digest?: string }>()\n  for (const event of events) {\n    if (snapshot !== undefined && event.runId !== snapshot.runId) continue\n    const payload = record(event.payload)\n    if (lifecycleKinds.has(event.kind) || payload.factVersion !== undefined && event.kind.startsWith(\"control.run.\")) {\n      if (\n        Schema.is(RunFact)(payload) && payload.run.runId === event.runId &&\n        payload.run.executionObservation === undefined && payload.run.executionView === undefined &&\n        consistentStatus(event.kind, payload.run)\n      ) {\n        latest = { fact: payload, sequence: event.sequence }\n        first ??= { baseline: payload.baseline, sequence: event.sequence }\n        // This full snapshot establishes a new baseline after a gap; the\n        // earlier prefix can no longer be claimed as continuously covered.\n        if (uncovered) first = { baseline: \"legacy\", sequence: event.sequence }\n        uncovered = false\n      } else if (payload.factVersion !== undefined || latest !== undefined) uncovered = true\n    }\n    if (event.kind === \"control.approval.requested\") {\n      const versioned = payload.factVersion !== undefined\n      if (versioned && !Schema.is(ApprovalRequestFact)(payload)) continue\n      const runId = string(payload.runId) ?? event.runId\n      const requestId = string(payload.requestId)\n      if (\n        runId === undefined || requestId === undefined || event.runId !== runId ||\n        payload.payload === undefined\n      ) continue\n      // Historical payloads were open JSON. Preserve their read-only display;\n      // only the versioned contract can establish exact target correspondence.\n      const submitted = payload.payload as ControlSchema.ApprovalPayload\n      if (\n        versioned &&\n        (submitted.target._tag !== \"Node\" || submitted.target.runId !== runId ||\n          submitted.target.requestId !== requestId)\n      ) continue\n      const identity = key(runId, requestId)\n      if (requests.has(identity)) continue\n      const decision = decisions.get(identity)\n      requests.set(identity, {\n        versioned,\n        row: {\n          runId,\n          requestId,\n          title: string(payload.question) ?? `Approval needed \u2014 ${requestId}`,\n          request: event.payload,\n          payload: submitted,\n          requestedAt: typeof payload.at === \"number\" && Number.isFinite(payload.at) ? payload.at : event.occurredAt,\n          status: decision !== undefined &&\n              (decision.digest === undefined || decision.digest === record(record(submitted).target).digest)\n            ? decision.status :\n            \"pending\"\n        }\n      })\n    }\n    if (event.kind === \"control.approval.approved\" || event.kind === \"control.approval.denied\") {\n      const status = event.kind === \"control.approval.approved\" ? \"approved\" : \"denied\"\n      let identity: string | undefined\n      let digest: string | undefined\n      if (payload.factVersion !== undefined) {\n        if (\n          !Schema.is(ApprovalDecisionFact)(payload) || payload.approvalTarget._tag !== \"Node\" ||\n          payload.approvalTarget.runId !== event.runId || payload.tokenId !== payload.approvalTarget.requestId\n        ) continue\n        identity = key(payload.approvalTarget.runId, payload.approvalTarget.requestId)\n        digest = payload.approvalTarget.digest\n      } else {\n        const tokenId = string(payload.tokenId) ?? string(payload.requestId)\n        if (tokenId !== undefined && event.runId !== undefined) identity = key(event.runId, tokenId)\n        else {identity = [...requests].find(([, request]) =>\n            !request.versioned && request.row.status === \"pending\" &&\n            request.row.runId === event.runId\n          )?.[0]}\n      }\n      if (identity === undefined || decisions.has(identity)) continue\n      const request = requests.get(identity)\n      if (\n        request !== undefined && digest !== undefined && record(record(request.row.payload).target).digest !== digest\n      ) continue\n      decisions.set(identity, { status, ...(digest === undefined ? {} : { digest }) })\n      if (request !== undefined) requests.set(identity, { ...request, row: { ...request.row, status } })\n    }\n  }\n  const matches = !uncovered && latest !== undefined && (snapshot === undefined ||\n    coordinationFields.every((field) => latest.fact.run[field] === snapshot[field]) &&\n      (snapshot.executionObservation === \"observed\" || latest.fact.run.status === snapshot.status))\n  const run = snapshot === undefined ? uncovered ? undefined : latest?.fact.run : matches\n    ? {\n      ...snapshot,\n      ...latest!.fact.run,\n      ...(snapshot.executionObservation === \"observed\" ?\n        {\n          status: snapshot.status,\n          waitingReason: snapshot.waitingReason,\n          parentRunId: snapshot.parentRunId,\n          lineageId: snapshot.lineageId,\n          roundOrdinal: snapshot.roundOrdinal,\n          pendingWaits: snapshot.pendingWaits\n        } :\n        {})\n    }\n    : snapshot\n  return {\n    run,\n    provenance: {\n      control: uncovered\n        ? \"unverified-snapshot\"\n        : latest === undefined\n        ? \"legacy-snapshot\"\n        : matches\n        ? \"events\"\n        : \"unverified-snapshot\",\n      execution: snapshot?.executionObservation === \"observed\" ?\n        \"engine-observed\"\n        : snapshot?.executionObservation === \"missing\"\n        ? \"engine-missing\"\n        : \"control\",\n      ...(first === undefined ? {} : { baseline: first.baseline, fromSequence: first.sequence }),\n      ...(latest === undefined ? {} : { throughSequence: latest.sequence })\n    },\n    approvals: [...requests.values()].map(({ row }) => row)\n  }\n}\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAKA,qBAAsC;AACtC,oBAA+B;AAE/B,oBAA+B;AAMxB,MAAM,UAAU;AAMhB,MAAM,UAAU,qBAAO,OAAO;AAAA,EACnC,aAAa,qBAAO,QAAQ,OAAO;AAAA,EACnC,UAAU,qBAAO,SAAS,CAAC,WAAW,QAAQ,CAAC;AAAA,EAC/C,KAAK,cAAc;AACrB,CAAC;AAMM,MAAM,UAAU,CACrB,KACA,WAAiC,aACT;AACxB,MAAI,IAAI,yBAAyB,UAAa,IAAI,kBAAkB,QAAW;AAC7E,UAAM,IAAI,MAAM,uDAAuD;AAAA,EACzE;AACA,SAAO,qBAAO,kBAAkB,OAAO,EAAE,EAAE,aAAa,SAAS,UAAU,KAAK,gBAAgB,GAAG,EAAE,CAAC;AACxG;AAgBO,MAAM,gBAAgB,qBAAO,OAAO;AAAA,EACzC,gBAAgB,qBAAO,SAAS,CAAC,WAAW,OAAO,CAAC;AAAA,EACpD,QAAQ,qBAAO,SAAS,CAAC,UAAU,OAAO,WAAW,cAAc,aAAa,MAAM,CAAC;AAAA,EACvF,SAAS,qBAAO;AAAA,EAChB,MAAM,qBAAO,SAAS,qBAAO,MAAM;AAAA,EACnC,UAAU,qBAAO,SAAS,qBAAO,MAAM;AAAA,EACvC,KAAK,qBAAO,SAAS,qBAAO,MAAM;AAAA,EAClC,MAAM,qBAAO,SAAS,qBAAO,MAAM;AAAA,EACnC,WAAW,qBAAO,SAAS,qBAAO,MAAM;AAAA,EACxC,SAAS,qBAAO,SAAS,qBAAO,MAAM;AACxC,CAAC;AASM,MAAM,sBAAsB,qBAAO,OAAO;AAAA,EAC/C,aAAa,qBAAO,QAAQ,OAAO;AAAA,EACnC,OAAO,qBAAO;AAAA,EACd,WAAW,qBAAO;AAAA,EAClB,UAAU,qBAAO;AAAA,EACjB,SAAS,cAAc;AAAA,EACvB,UAAU,qBAAO,SAAS,aAAa;AACzC,CAAC;AAMM,MAAM,uBAAuB,qBAAO,OAAO;AAAA,EAChD,aAAa,qBAAO,QAAQ,OAAO;AAAA,EACnC,SAAS,qBAAO;AAAA,EAChB,gBAAgB,cAAc;AAChC,CAAC;AAMM,MAAM,uBAAuB,CAClC,SACA,mBAEA,qBAAO,kBAAkB,oBAAoB,EAAE;AAAA,EAC7C,aAAa;AAAA,EACb;AAAA,EACA,gBAAgB,gBAAgB,cAAc;AAChD,CAAC;AAMI,MAAM,YAAY,CACvB,SACA,QACA,UACA,WACA,SAA4C,CAAC,GAC7C,WAAiC,aAEjC,QAAQ,SAAS,qBAAO,IAAI,aAAY;AACtC,QAAM,MAAM,OAAO;AACnB,SAAO,QAAQ;AAAA,IACb,IAAI,4BAAa,MAAM;AAAA,MACrB,OAAO,4BAAa,MAAM,KAAK,IAAI,KAAK;AAAA,MACxC,UAAU,4BAAa,SAAS,KAAK,QAAQ;AAAA,MAC7C;AAAA,MACA,SAAS,KAAK;AAAA,QACZ,KAAK,UAAU,EAAE,GAAG,QAAQ,OAAO,IAAI,OAAO,QAAQ,IAAI,QAAQ,GAAG,QAAQ,KAAK,QAAQ,EAAE,CAAC;AAAA,MAC/F;AAAA,IACF,CAAC;AAAA,EACH;AACA,SAAO;AACT,CAAC,CAAC;AAMG,MAAM,wBAAwB,CACnC,SACA,SACA,OACA,aAEA,qBAAO,QAAQ,MAAM;AACnB,QAAM,OAAO,qBAAO,kBAAkB,mBAAmB,EAAE,EAAE,GAAG,gBAAgB,KAAK,GAAG,aAAa,QAAQ,CAAC;AAC9G,QAAM,SAAS,KAAK,QAAQ;AAC5B,MAAI,OAAO,SAAS,UAAU,OAAO,UAAU,KAAK,SAAS,OAAO,cAAc,KAAK,WAAW;AAChG,WAAO,qBAAO;AAAA,MACZ,IAAI,uBAAQ,aAAa;AAAA,QACvB,MAAM;AAAA,QACN,SAAS;AAAA,MACX,CAAC;AAAA,IACH;AAAA,EACF;AACA,SAAO,QAAQ,SAAS,qBAAO,IAAI,aAAY;AAC7C,UAAM,QAAQ,OAAO,QAAQ,iBAAiB,MAAM;AACpD,QAAI,MAAM,SAAS,WAAW;AAC5B,aAAO,QAAQ;AAAA,QACb,IAAI,4BAAa,MAAM;AAAA,UACrB,OAAO,4BAAa,MAAM,KAAK,KAAK,KAAK;AAAA,UACzC,UAAU,4BAAa,SAAS,KAAK,QAAQ;AAAA,UAC7C,WAAW;AAAA,UACX,SAAS,KAAK,MAAM,KAAK,UAAU,IAAI,CAAC;AAAA,QAC1C,CAAC;AAAA,MACH;AAAA,IACF;AACA,WAAO;AAAA,EACT,CAAC,CAAC;AACJ,CAAC;AAMI,MAAM,sBAAsB,qBAAO,OAAO;AAAA,EAC/C,SAAS,qBAAO,SAAS,CAAC,UAAU,mBAAmB,qBAAqB,CAAC;AAAA,EAC7E,WAAW,qBAAO,SAAS,CAAC,WAAW,mBAAmB,gBAAgB,CAAC;AAAA,EAC3E,UAAU,qBAAO,SAAS,qBAAO,SAAS,CAAC,WAAW,QAAQ,CAAC,CAAC;AAAA,EAChE,cAAc,qBAAO,SAAS,qBAAO,MAAM;AAAA,EAC3C,iBAAiB,qBAAO,SAAS,qBAAO,MAAM;AAChD,CAAC;AAkBD,MAAM,SAAS,CAAC,UACd,UAAU,QAAQ,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAI,QAAmC,CAAC;AAC7G,MAAM,SAAS,CAAC,UAAuC,OAAO,UAAU,WAAW,QAAQ;AAC3F,MAAM,MAAM,CAAC,OAAe,cAA8B,KAAK,UAAU,CAAC,OAAO,SAAS,CAAC;AAC3F,MAAM,iBAAiB,oBAAI,IAAI;AAAA,EAC7B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AACD,MAAM,mBAAmB,CAAC,MAAc,QAA2C;AACjF,MAAI,SAAS,sBAAuB,QAAO,IAAI,WAAW;AAC1D,MAAI,SAAS,wBAAwB,SAAS,yBAAyB,SAAS,qBAAsB,QAAO;AAC7G,SAAO,SAAS,eAAe,IAAI,MAAM;AAC3C;AACA,MAAM,qBAAqB;AAAA,EACzB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAaO,MAAM,OAAO,CAClB,QACA,UACA,oBAA6C,CAAC,MAK3C;AACH,MAAI;AACJ,MAAI;AACJ,MAAI,YAAY;AAChB,QAAM,WAAW,oBAAI,IAAqE;AAC1F,aAAW,OAAO,mBAAmB;AACnC,QAAI,aAAa,UAAa,IAAI,UAAU,SAAS,MAAO;AAC5D,UAAM,SAAS,IAAI,QAAQ;AAC3B,QAAI,OAAO,SAAS,UAAU,OAAO,UAAU,IAAI,SAAS,OAAO,cAAc,IAAI,UAAW;AAChG,aAAS,IAAI,IAAI,IAAI,OAAO,IAAI,SAAS,GAAG,EAAE,KAAK,EAAE,GAAG,KAAK,QAAQ,UAAU,GAAG,WAAW,KAAK,CAAC;AAAA,EACrG;AACA,QAAM,YAAY,oBAAI,IAAkF;AACxG,aAAW,SAAS,QAAQ;AAC1B,QAAI,aAAa,UAAa,MAAM,UAAU,SAAS,MAAO;AAC9D,UAAM,UAAU,OAAO,MAAM,OAAO;AACpC,QAAI,eAAe,IAAI,MAAM,IAAI,KAAK,QAAQ,gBAAgB,UAAa,MAAM,KAAK,WAAW,cAAc,GAAG;AAChH,UACE,qBAAO,GAAG,OAAO,EAAE,OAAO,KAAK,QAAQ,IAAI,UAAU,MAAM,SAC3D,QAAQ,IAAI,yBAAyB,UAAa,QAAQ,IAAI,kBAAkB,UAChF,iBAAiB,MAAM,MAAM,QAAQ,GAAG,GACxC;AACA,iBAAS,EAAE,MAAM,SAAS,UAAU,MAAM,SAAS;AACnD,kBAAU,EAAE,UAAU,QAAQ,UAAU,UAAU,MAAM,SAAS;AAGjE,YAAI,UAAW,SAAQ,EAAE,UAAU,UAAU,UAAU,MAAM,SAAS;AACtE,oBAAY;AAAA,MACd,WAAW,QAAQ,gBAAgB,UAAa,WAAW,OAAW,aAAY;AAAA,IACpF;AACA,QAAI,MAAM,SAAS,8BAA8B;AAC/C,YAAM,YAAY,QAAQ,gBAAgB;AAC1C,UAAI,aAAa,CAAC,qBAAO,GAAG,mBAAmB,EAAE,OAAO,EAAG;AAC3D,YAAM,QAAQ,OAAO,QAAQ,KAAK,KAAK,MAAM;AAC7C,YAAM,YAAY,OAAO,QAAQ,SAAS;AAC1C,UACE,UAAU,UAAa,cAAc,UAAa,MAAM,UAAU,SAClE,QAAQ,YAAY,OACpB;AAGF,YAAM,YAAY,QAAQ;AAC1B,UACE,cACC,UAAU,OAAO,SAAS,UAAU,UAAU,OAAO,UAAU,SAC9D,UAAU,OAAO,cAAc,WACjC;AACF,YAAM,WAAW,IAAI,OAAO,SAAS;AACrC,UAAI,SAAS,IAAI,QAAQ,EAAG;AAC5B,YAAM,WAAW,UAAU,IAAI,QAAQ;AACvC,eAAS,IAAI,UAAU;AAAA,QACrB;AAAA,QACA,KAAK;AAAA,UACH;AAAA,UACA;AAAA,UACA,OAAO,OAAO,QAAQ,QAAQ,KAAK,0BAAqB,SAAS;AAAA,UACjE,SAAS,MAAM;AAAA,UACf,SAAS;AAAA,UACT,aAAa,OAAO,QAAQ,OAAO,YAAY,OAAO,SAAS,QAAQ,EAAE,IAAI,QAAQ,KAAK,MAAM;AAAA,UAChG,QAAQ,aAAa,WAChB,SAAS,WAAW,UAAa,SAAS,WAAW,OAAO,OAAO,SAAS,EAAE,MAAM,EAAE,UACvF,SAAS,SACX;AAAA,QACJ;AAAA,MACF,CAAC;AAAA,IACH;AACA,QAAI,MAAM,SAAS,+BAA+B,MAAM,SAAS,2BAA2B;AAC1F,YAAM,SAAS,MAAM,SAAS,8BAA8B,aAAa;AACzE,UAAI;AACJ,UAAI;AACJ,UAAI,QAAQ,gBAAgB,QAAW;AACrC,YACE,CAAC,qBAAO,GAAG,oBAAoB,EAAE,OAAO,KAAK,QAAQ,eAAe,SAAS,UAC7E,QAAQ,eAAe,UAAU,MAAM,SAAS,QAAQ,YAAY,QAAQ,eAAe,UAC3F;AACF,mBAAW,IAAI,QAAQ,eAAe,OAAO,QAAQ,eAAe,SAAS;AAC7E,iBAAS,QAAQ,eAAe;AAAA,MAClC,OAAO;AACL,cAAM,UAAU,OAAO,QAAQ,OAAO,KAAK,OAAO,QAAQ,SAAS;AACnE,YAAI,YAAY,UAAa,MAAM,UAAU,OAAW,YAAW,IAAI,MAAM,OAAO,OAAO;AAAA,aACtF;AAAC,qBAAW,CAAC,GAAG,QAAQ,EAAE;AAAA,YAAK,CAAC,CAAC,EAAEA,QAAO,MAC3C,CAACA,SAAQ,aAAaA,SAAQ,IAAI,WAAW,aAC7CA,SAAQ,IAAI,UAAU,MAAM;AAAA,UAC9B,IAAI,CAAC;AAAA,QAAC;AAAA,MACV;AACA,UAAI,aAAa,UAAa,UAAU,IAAI,QAAQ,EAAG;AACvD,YAAM,UAAU,SAAS,IAAI,QAAQ;AACrC,UACE,YAAY,UAAa,WAAW,UAAa,OAAO,OAAO,QAAQ,IAAI,OAAO,EAAE,MAAM,EAAE,WAAW,OACvG;AACF,gBAAU,IAAI,UAAU,EAAE,QAAQ,GAAI,WAAW,SAAY,CAAC,IAAI,EAAE,OAAO,EAAG,CAAC;AAC/E,UAAI,YAAY,OAAW,UAAS,IAAI,UAAU,EAAE,GAAG,SAAS,KAAK,EAAE,GAAG,QAAQ,KAAK,OAAO,EAAE,CAAC;AAAA,IACnG;AAAA,EACF;AACA,QAAM,UAAU,CAAC,aAAa,WAAW,WAAc,aAAa,UAClE,mBAAmB,MAAM,CAAC,UAAU,OAAO,KAAK,IAAI,KAAK,MAAM,SAAS,KAAK,CAAC,MAC3E,SAAS,yBAAyB,cAAc,OAAO,KAAK,IAAI,WAAW,SAAS;AACzF,QAAM,MAAM,aAAa,SAAY,YAAY,SAAY,QAAQ,KAAK,MAAM,UAC5E;AAAA,IACA,GAAG;AAAA,IACH,GAAG,OAAQ,KAAK;AAAA,IAChB,GAAI,SAAS,yBAAyB,aACpC;AAAA,MACE,QAAQ,SAAS;AAAA,MACjB,eAAe,SAAS;AAAA,MACxB,aAAa,SAAS;AAAA,MACtB,WAAW,SAAS;AAAA,MACpB,cAAc,SAAS;AAAA,MACvB,cAAc,SAAS;AAAA,IACzB,IACA,CAAC;AAAA,EACL,IACE;AACJ,SAAO;AAAA,IACL;AAAA,IACA,YAAY;AAAA,MACV,SAAS,YACL,wBACA,WAAW,SACX,oBACA,UACA,WACA;AAAA,MACJ,WAAW,UAAU,yBAAyB,aAC5C,oBACE,UAAU,yBAAyB,YACnC,mBACA;AAAA,MACJ,GAAI,UAAU,SAAY,CAAC,IAAI,EAAE,UAAU,MAAM,UAAU,cAAc,MAAM,SAAS;AAAA,MACxF,GAAI,WAAW,SAAY,CAAC,IAAI,EAAE,iBAAiB,OAAO,SAAS;AAAA,IACrE;AAAA,IACA,WAAW,CAAC,GAAG,SAAS,OAAO,CAAC,EAAE,IAAI,CAAC,EAAE,IAAI,MAAM,GAAG;AAAA,EACxD;AACF;",
+  "names": ["request"]
+}

package/dist/cjs/ControlLive.d.ts

@@ -0,0 +1,23 @@
+/**
+ * In-process Control implementation over `ControlRuntime`, the flow
+ * registry, and the append-only journal.
+ *
+ * @since 0.1.0
+ */
+import { Journal } from "@smthrs/journal";
+import { NotificationQueue } from "@smthrs/notifications";
+import { Registry } from "@smthrs/registry";
+import { Layer } from "effect";
+import { Control } from "./Control.ts";
+import { ControlRuntime } from "./ControlRuntime.ts";
+/**
+ * Live in-process Control layer.
+ *
+ * Writes delegate to `ControlRuntime`; journal events are observational
+ * records. `watch` only replays and follows committed journal entries.
+ *
+ * @category layers
+ * @since 0.1.0
+ */
+export declare const layer: Layer.Layer<Control, never, ControlRuntime | Journal.Journal | NotificationQueue.NotificationQueue | Registry.Registry>;
+//# sourceMappingURL=ControlLive.d.ts.map

package/dist/cjs/ControlLive.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ControlLive.d.ts","sourceRoot":"","sources":["../../src/ControlLive.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,EAAE,OAAO,EAAgB,MAAM,iBAAiB,CAAA;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAA;AAEzD,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAE3C,OAAO,EAAiC,KAAK,EAAqC,MAAM,QAAQ,CAAA;AAEhG,OAAO,EAEL,OAAO,EAOR,MAAM,cAAc,CAAA;AAoBrB,OAAO,EAAE,cAAc,EAAoE,MAAM,qBAAqB,CAAA;AA6RtH;;;;;;;;GAQG;AACH,eAAO,MAAM,KAAK,EAAE,KAAK,CAAC,KAAK,CAC7B,OAAO,EACP,KAAK,EACL,cAAc,GAAG,OAAO,CAAC,OAAO,GAAG,iBAAiB,CAAC,iBAAiB,GAAG,QAAQ,CAAC,QAAQ,CAwvD3F,CAAA"}