@sublang/playbook 0.8.0 → 1.0.0

package/reference/sdlc/code.playbook/code.playbook.js

@@ -11,12 +11,40 @@
 //                alias's first alternative)
 // Boss event:    free-text judge classification
 // Adjudication:  LLM-judge per state
-// Contract:      PlayerResult / PlaybookPorts / PlaybookRuntime imported
-//                and re-exported from @sublang/playbook/runtime
+// Contract:      PlayerResult / PlaybookPorts / PlaybookSession /
+//                PlaybookRuntime imported and re-exported from
+//                @sublang/playbook/runtime
 //                (slc/link.md §Output, DR-004 Addendum A4)
+import PQueue from 'p-queue';
 import { createActor, fromPromise } from 'xstate';
+import { assertPlaybookRuntimeSnapshot, combineAbortSignals, createNestedPlaybookBridge, detachPersistedMachineSnapshot, normalizeError, normalizePlaybookSnapshot, snapshotJsonValue, snapshotPlaybookSession, validatePlayerResult, waitForPlaybookQuiescence, } from '../../../src/xstate-runtime.js';
 import { codingMachine, } from './code.fsm.js';
 import { enumerateAwaitBossReply, enumerateCaptainStates, enumerateRootEvents, } from './code.fsm.introspect.js';
+function snapshotCodePlaybookOptions(value) {
+    const captured = snapshotJsonValue(value, 'CODE runtime options');
+    if (captured === null ||
+        typeof captured !== 'object' ||
+        Array.isArray(captured)) {
+        throw new TypeError('CODE runtime options must be an object');
+    }
+    const record = captured;
+    const allowed = new Set([
+        'intent',
+        'irNumber',
+        'coderPlayer',
+        'reviewerPlayer',
+        'committerPlayer',
+    ]);
+    for (const [key, option] of Object.entries(record)) {
+        if (!allowed.has(key)) {
+            throw new TypeError(`CODE runtime options.${key} is not declared`);
+        }
+        if (typeof option !== 'string') {
+            throw new TypeError(`CODE runtime options.${key} must be a string`);
+        }
+    }
+    return captured;
+}
 const BOSS_REPLY_ERRORS = {
     missingQuestion: "needsBossReply outcome missing 'question' field",
     unregisteredState: (stateId) => `state ${stateId} declared needsBossReply but is not registered as resumable`,
@@ -36,49 +64,61 @@ const VERBATIM_PAYLOAD_FIELDS = new Set([
 function normalizeErrorCompact(err) {
     if (err === undefined || err === null)
         return undefined;
-    if (err instanceof Error) {
-        return { name: err.name, message: err.message };
-    }
-    if (typeof err === 'object') {
-        const o = err;
-        if (typeof o.message === 'string') {
-            return {
-                name: typeof o.name === 'string' ? o.name : 'Error',
-                message: o.message,
-            };
-        }
-    }
-    return { name: 'Error', message: String(err) };
+    const normalized = normalizeError(err);
+    return { name: normalized.name, message: normalized.message };
 }
 // Normalize an unknown error value to the full `{ name, message, stack }`
 // shape used by telemetry emissions. Returns `undefined` for nullish
 // input. `stack` is omitted when not available on the source value.
 function normalizeErrorFull(err) {
-    const compact = normalizeErrorCompact(err);
-    if (compact === undefined)
+    if (err === undefined || err === null)
         return undefined;
-    if (err instanceof Error) {
-        return err.stack !== undefined ? { ...compact, stack: err.stack } : compact;
-    }
-    if (typeof err === 'object' && err !== null) {
-        const stack = err.stack;
-        if (typeof stack === 'string') {
-            return { ...compact, stack };
-        }
-    }
-    return compact;
+    return normalizeError(err);
+}
+function isAbortFailure(error, signal) {
+    return (signal.aborted &&
+        (error === signal.reason || normalizeError(error).name === 'AbortError'));
 }
 // Normalize any `error` field inside a telemetry event so failed
 // transitions don't leak raw Error instances through the channel.
 function normalizeEventForTelemetry(event) {
-    if (event === null || typeof event !== 'object' || Array.isArray(event)) {
-        return event;
-    }
-    const e = event;
-    if (!('error' in e))
-        return event;
-    const normalized = normalizeErrorFull(e.error);
-    return { ...e, error: normalized };
+    if (event === undefined)
+        return undefined;
+    return normalizeEventValue(event, 'FSM event', new Set());
+}
+function normalizeEventValue(value, path, ancestors) {
+    if (Array.isArray(value))
+        return snapshotJsonValue(value, path);
+    if (value === null || typeof value !== 'object') {
+        return snapshotJsonValue(value, path);
+    }
+    if (ancestors.has(value)) {
+        throw new TypeError(`${path} must not contain a JSON cycle`);
+    }
+    const prototype = Object.getPrototypeOf(value);
+    if (prototype !== Object.prototype && prototype !== null) {
+        return snapshotJsonValue(value, path);
+    }
+    if (Object.getOwnPropertySymbols(value).length > 0) {
+        return snapshotJsonValue(value, path);
+    }
+    const nextAncestors = new Set(ancestors).add(value);
+    const normalized = {};
+    for (const [key, descriptor] of Object.entries(Object.getOwnPropertyDescriptors(value))) {
+        if (!descriptor.enumerable) {
+            throw new TypeError(`${path}.${key} must be an enumerable JSON property`);
+        }
+        if (!Object.prototype.hasOwnProperty.call(descriptor, 'value')) {
+            throw new TypeError(`${path}.${key} must be a JSON data property`);
+        }
+        if (descriptor.value === undefined)
+            continue;
+        normalized[key] =
+            key === 'error'
+                ? snapshotJsonValue(normalizeError(descriptor.value), `${path}.error`)
+                : normalizeEventValue(descriptor.value, `${path}.${key}`, nextAncestors);
+    }
+    return snapshotJsonValue(normalized, path);
 }
 // Internal capabilities (DR-004 §10). Each ships with its final
 // signature; behavior lands in the per-capability task noted by the
@@ -131,8 +171,9 @@ function composePlayerPrompt(input) {
 // Non-composite: Coder→'coder', Reviewer→'reviewer'. The composite
 // Committer (= Coder | Reviewer per code.gears.md) resolves to the
 // configured alias when present: `input.committerPlayer`, the
-// validated `captain.options.code.committer` (PBRT-8 / PBRT-30),
-// already a baked player id ('coder' / 'reviewer'). Absent a
+// validated `captain.options.playbooks.code.options.committer`
+// (PBRT-8 / PBRT-30), already a baked player id ('coder' / 'reviewer').
+// Absent a
 // configured alias it falls back to the DR-004 §2 baked binding by
 // populated <playerName>Player field: prefer `coderPlayer` (CODE-18
 // wires only coderPlayer; CODE-19 wires both so coderPlayer still wins
@@ -168,9 +209,11 @@ function resolvePlayerId(input) {
 // object once the chosen guard is one of the input.result keys.
 // Adjudicator failures (malformed JSON, missing/unknown guard) are
 // control-plane errors and propagate via throw per slc/link.md.
-async function adjudicate(input, finalText, ports, signal) {
+async function adjudicate(input, finalText, ports, signal, boundary) {
     const prompt = buildJudgePrompt(input, finalText);
-    const raw = await ports.callJudge(prompt, signal);
+    const raw = boundary
+        ? await boundary.callJudge('player-output-adjudication', input.stateId, prompt, signal)
+        : await ports.callJudge(prompt, signal);
     const parsed = parseJudgeJson(raw);
     if (typeof parsed !== 'object' || parsed === null || Array.isArray(parsed)) {
         throw new Error('adjudicate: judge response is not a JSON object');
@@ -383,19 +426,22 @@ function dropTrailingComma(out) {
 // classifier is state-aware so awaitBossReply can distinguish a direct
 // answer (BOSS_REPLY) from a fresh directive that abandons the pending
 // question through the FSM's existing transitions.
-async function classifyBossText(text, ports, signal, snapshotOrState) {
+async function classifyBossText(text, ports, signal, snapshotOrState, boundary) {
     const trimmed = text.trim();
     if (trimmed === '')
         return undefined;
-    return classifyWithLlm(text, ports, signal, snapshotOrState);
+    return classifyWithLlm(text, ports, signal, snapshotOrState, boundary);
 }
 const rootEvents = enumerateRootEvents(codingMachine);
 const bossInterruptTargets = rootEvents.bossInterruptTargetDescriptions;
 const bossInterruptTargetIds = new Set(bossInterruptTargets.map((target) => target.stateId));
-async function classifyWithLlm(text, ports, signal, snapshotOrState) {
+async function classifyWithLlm(text, ports, signal, snapshotOrState, boundary) {
     const state = classifierState(snapshotOrState);
     const prompt = buildClassifierPrompt(text, state);
-    const raw = await ports.callJudge(prompt, signal);
+    const stateId = typeof state.value === 'string' ? state.value : undefined;
+    const raw = boundary
+        ? await boundary.callJudge('boss-input-classification', stateId, prompt, signal)
+        : await ports.callJudge(prompt, signal);
     let parsed;
     try {
         parsed = parseJudgeJson(raw);
@@ -478,7 +524,26 @@ async function classifyWithLlm(text, ports, signal, snapshotOrState) {
                 await ports.emitStatus('Classifier omitted answer for BOSS_REPLY');
                 return undefined;
             }
-            return { type: 'BOSS_REPLY', answer: payload.answer };
+            const pending = pendingBossQuestionFromContext(state.context);
+            if (!pending) {
+                await ports.emitStatus('Classifier returned BOSS_REPLY without a pending question');
+                return undefined;
+            }
+            if (payload.questionId !== undefined &&
+                typeof payload.questionId !== 'string') {
+                await ports.emitStatus('Classifier supplied a non-string questionId for BOSS_REPLY');
+                return undefined;
+            }
+            if (typeof payload.questionId === 'string' &&
+                payload.questionId !== pending.questionId) {
+                await ports.emitStatus(`Classifier supplied unknown questionId for BOSS_REPLY: ${payload.questionId}`);
+                return undefined;
+            }
+            return {
+                type: 'BOSS_REPLY',
+                answer: payload.answer,
+                questionId: pending.questionId,
+            };
         }
         default:
             await ports.emitStatus(`Classifier returned unknown event type: ${eventType}`);
@@ -502,7 +567,9 @@ function classifierState(snapshotOrState) {
     return { value: snapshotOrState, context: {} };
 }
 function buildClassifierPrompt(text, state) {
-    const currentState = typeof state.value === 'string' ? state.value : 'unknown';
+    const currentState = typeof state.value === 'string'
+        ? state.value
+        : JSON.stringify(state.value ?? null);
     const pendingBossQuestion = pendingBossQuestionFromContext(state.context);
     const lines = [
         'Classify the following Boss message into exactly one of these events.',
@@ -512,14 +579,14 @@ function buildClassifierPrompt(text, state) {
         `Current state: ${currentState}`,
     ];
     if (pendingBossQuestion !== undefined) {
-        lines.push(`Pending Boss question: ${pendingBossQuestion.question}`, `Pending resume state: ${pendingBossQuestion.resumeStateId}`);
+        lines.push(`Pending question id: ${pendingBossQuestion.questionId}`, `Pending asking player: ${pendingBossQuestion.player}`, `Pending Boss question: ${pendingBossQuestion.question}`);
     }
     lines.push('', 'Events:', '- START_CODING: payload { intent: "<free-form goal>" }', '- CONTINUE_IR: payload { irNumber: "<number>" }', '- SUMMARIZE_IR: payload { irNumber: "<number>" }', '- BOSS_INTERRUPT: payload { targetId: "<stateId>", intent?: "<free-form goal>", irNumber?: "<number>" }', '  targetId must be one of these jumpable states:');
     for (const target of bossInterruptTargets) {
         lines.push(`  - ${target.stateId}: ${target.description}`);
     }
     if (currentState === 'awaitBossReply') {
-        lines.push('- BOSS_REPLY: payload { answer: "<verbatim Boss answer>" }');
+        lines.push('- BOSS_REPLY: payload { answer: "<verbatim Boss answer>", questionId?: "<pending question id>" }');
     }
     else {
         lines.push('- BOSS_REPLY: valid only when Current state is awaitBossReply');
@@ -527,35 +594,45 @@ function buildClassifierPrompt(text, state) {
     lines.push('', 'Boss message:', '```', text, '```');
     return lines.join('\n');
 }
-// Captain-actor bridge — DR-004 §7. One PromiseActorLogic that the
-// codingMachine invokes from every captain-invoking state. Per turn:
+// Delegated-player actor bridge — DR-004 §7. One PromiseActorLogic that the
+// codingMachine invokes from every player-invoking state. Per turn:
 // resolve playerId, compose the player prompt, await
 // ports.callPlayer, adjudicate the finalText. PlayerResult status of
 // 'aborted' or 'error' throws so XState routes via onError → #failed
 // (the single fail-stop sink for both Captain errors and player
-// failures).
+// failures). Captain remains the orchestrator and adjudicator; it is not
+// encoded as the delegated FSM actor.
 //
 // `getActiveSignal` is the runtime's hook for flowing the Boss's
 // `handleBossInput.signal` into the host port calls — fromPromise
 // hands the bridge XState's actor-scoped signal, which only fires
 // on actor.stop(), not on Boss abort. When omitted (e.g. direct
 // captainBridge tests), the bridge falls back to XState's signal.
-function captainBridge(ports, getActiveSignal) {
+function captainBridge(ports, getActiveSignal, boundary, onControlPlaneError) {
     return fromPromise(async ({ input, signal }) => {
-        const activeSignal = getActiveSignal?.() ?? signal;
+        const activeSignal = combineAbortSignals(signal, getActiveSignal?.());
         const playerId = resolvePlayerId(input);
         const prompt = composePlayerPrompt(input);
-        const result = await ports.callPlayer(playerId, prompt, activeSignal);
+        const result = boundary
+            ? await boundary.callPlayer(input, playerId, prompt, activeSignal)
+            : await ports.callPlayer(playerId, prompt, activeSignal, {
+                resume: false,
+            });
         if (result.status !== 'ok') {
-            throw new Error(result.error ??
-                `captainBridge: callPlayer status "${result.status}"`);
+            throw new Error(result.error ?? `captainBridge: callPlayer status "${result.status}"`);
         }
         if (result.finalText === undefined) {
             throw new Error('captainBridge: callPlayer returned status=ok with no finalText');
         }
-        const output = await adjudicate(input, result.finalText, ports, activeSignal);
-        validateBossReplyOutput(input, output);
-        return output;
+        try {
+            const output = await adjudicate(input, result.finalText, ports, activeSignal, boundary);
+            validateBossReplyOutput(input, output);
+            return output;
+        }
+        catch (error) {
+            onControlPlaneError?.(error);
+            throw error;
+        }
     });
 }
 // Captain pane display — PBRT-3 / PBRT-14.
@@ -564,7 +641,7 @@ function captainBridge(ports, getActiveSignal) {
 // glance:
 //   (no glyph)  bare FSM event type — host renders as captain speech
 //               (e.g., `captain> START_CODING`)
-//   ⤷           captain-invoking state entry: `<Player>: <label>`
+//   ⤷           player-invoking state entry: `<Player>: <label>`
 //   →           transition guard outcome (`· field=N` tallies
 //               appended); the host presenter owns any visual
 //               nesting under the preceding ⤷ entry
@@ -601,17 +678,13 @@ const stateMetadata = (() => {
     for (const s of enumerateCaptainStates(codingMachine)) {
         const label = STATE_LABELS[s.stateId];
         if (!label) {
-            throw new Error(`code.playbook.ts: STATE_LABELS missing entry for captain-invoking state '${s.stateId}'`);
+            throw new Error(`code.playbook.ts: STATE_LABELS missing entry for player-invoking state '${s.stateId}'`);
         }
         const input = s.getInput({});
         m.set(s.stateId, { player: input.player, sourceItem: s.sourceItem, label });
     }
     return m;
 })();
-const stateIdBySourceItem = new Map([...stateMetadata.entries()].map(([stateId, meta]) => [
-    meta.sourceItem,
-    stateId,
-]));
 const registeredResumableStateIds = new Set(enumerateAwaitBossReply(codingMachine).bossReplyTransitions.map((transition) => transition.target));
 function validateBossReplyOutput(input, output) {
     if (output.guard !== 'needsBossReply')
@@ -619,9 +692,9 @@ function validateBossReplyOutput(input, output) {
     if (typeof output.question !== 'string') {
         throw new Error(BOSS_REPLY_ERRORS.missingQuestion);
     }
-    const stateId = stateIdBySourceItem.get(input.sourceItem);
-    if (stateId === undefined || !registeredResumableStateIds.has(stateId)) {
-        throw new Error(BOSS_REPLY_ERRORS.unregisteredState(stateId ?? input.sourceItem));
+    const stateId = input.stateId;
+    if (!registeredResumableStateIds.has(stateId)) {
+        throw new Error(BOSS_REPLY_ERRORS.unregisteredState(stateId));
     }
 }
 const QUIESCENT_STATES = new Set([
@@ -634,11 +707,8 @@ const QUIESCENT_STATES = new Set([
 // pane per PBRT-3: the readline returning to its `boss>` prompt is
 // the implicit "turn over" signal, so a `◆ ready` / `◆ done`
 // tombstone is redundant.
-const SUPPRESSED_ENTRY_STATES = new Set([
-    'ready',
-    'done',
-]);
-// Captain-pane surface (PBRT-3): every captain-invoking state plus
+const SUPPRESSED_ENTRY_STATES = new Set(['ready', 'done']);
+// Captain-pane surface (PBRT-3): every player-invoking state plus
 // the quiescent states whose entry still carries information
 // (failure with `lastError`, awaitBossReply with the pending
 // question). `ready` and `done` flow through the inspect handler
@@ -655,12 +725,14 @@ function pendingBossQuestionFromContext(context) {
     }
     const candidate = pending;
     if (typeof candidate.resumeStateId !== 'string' ||
+        typeof candidate.questionId !== 'string' ||
         typeof candidate.sourceItem !== 'string' ||
         typeof candidate.player !== 'string' ||
         typeof candidate.question !== 'string') {
         return undefined;
     }
     return {
+        questionId: candidate.questionId,
         resumeStateId: candidate.resumeStateId,
         sourceItem: candidate.sourceItem,
         player: candidate.player,
@@ -725,9 +797,9 @@ function formatClassification(eventType) {
 }
 function stateTelemetryPayload(from, to, event, context) {
     const payload = {
-        from,
+        from: from ?? null,
         to,
-        event: normalizeEventForTelemetry(event),
+        event: normalizeEventForTelemetry(event) ?? null,
     };
     if (to === 'awaitBossReply') {
         const pendingBossQuestion = pendingBossQuestionFromContext(context);
@@ -743,6 +815,27 @@ function stateTelemetryPayload(from, to, event, context) {
     }
     return payload;
 }
+function structuredStateTelemetryPayload(previousState, state, event, context) {
+    const payload = {
+        from: previousState?.value ?? null,
+        to: state.value,
+        event: normalizeEventForTelemetry(event) ?? null,
+        previousState: previousState ?? null,
+        state,
+    };
+    if (state.stateId === 'awaitBossReply') {
+        const pendingBossQuestion = pendingBossQuestionFromContext(context);
+        if (pendingBossQuestion !== undefined) {
+            payload.pendingBossQuestion = pendingBossQuestion;
+        }
+    }
+    if (state.stateId === 'failed') {
+        const lastError = normalizeErrorFull(context.lastError);
+        if (lastError !== undefined)
+            payload.lastError = lastError;
+    }
+    return snapshotJsonValue(payload, 'FSM telemetry payload');
+}
 // Internal export surface for tests. Not part of the stable public API;
 // the leading underscore signals "subject to change." Each member is
 // referenced here so `noUnusedLocals` stays clean while later tasks
@@ -768,163 +861,978 @@ export const _internal = {
     VERBATIM_PAYLOAD_FIELDS,
 };
 export default function createPlaybookRuntime(options) {
+    const boundOptions = snapshotCodePlaybookOptions(options);
     let actor;
+    let session;
+    let initialized = false;
+    let initInFlight;
+    let disposalPromise;
+    let disposed = false;
     let savedPorts;
+    let runtimePorts;
     // The Boss's per-turn AbortSignal, surfaced to captainBridge so
     // ports.callPlayer / callJudge see the right cancellation source.
     // null between turns; set by handleBossInput.
     let activeSignal;
+    let activeTurnId;
+    let controlPlaneError;
     // Previous root-machine state for the inspect-driven telemetry /
     // status emitter. undefined before the first inspect firing.
     let priorState;
-    // Emission queue. slc/link.md says emissions "shall be ordered,
-    // awaited, and never-dropped"; subscribe/inspect callbacks are
-    // synchronous and can't await, so each emit is enqueued and a
-    // single drainer processes them sequentially.
-    const emitQueue = [];
-    let drainer;
-    function enqueueEmit(fn) {
-        emitQueue.push(fn);
-        if (!drainer) {
-            drainer = (async () => {
-                while (emitQueue.length > 0) {
+    let suppressInspectionEmissions = false;
+    let traceSequence = 0;
+    let turnSequence = 0;
+    let judgeCallSequence = 0;
+    let playerCallSequence = 0;
+    let playbookCallSequence = 0;
+    const playerResumeTokens = new Map();
+    const activePlayerIds = new Set();
+    const playbookCallTurnIds = new Map();
+    const judgeQueue = new PQueue({ concurrency: 1 });
+    const emissionQueue = new PQueue({ concurrency: 1 });
+    const activeEmissionCalls = new Set();
+    // All trace, state-telemetry, and status work shares this one queue.
+    // Inspection callbacks enqueue a complete ordered batch synchronously;
+    // imperative boundaries await their queued work directly.
+    let emissionFailure;
+    function enqueueEmission(fn) {
+        const queued = emissionQueue.add(fn).then(() => undefined);
+        activeEmissionCalls.add(queued);
+        void queued.then(() => activeEmissionCalls.delete(queued), (error) => {
+            activeEmissionCalls.delete(queued);
+            emissionFailure ??= error;
+        });
+        return queued;
+    }
+    async function drainEmissions() {
+        while (true) {
+            const active = [...activeEmissionCalls];
+            if (active.length > 0)
+                await Promise.allSettled(active);
+            await emissionQueue.onIdle();
+            if (activeEmissionCalls.size === 0 &&
+                emissionQueue.size === 0 &&
+                emissionQueue.pending === 0) {
+                break;
+            }
+        }
+        if (emissionFailure !== undefined) {
+            const error = emissionFailure;
+            emissionFailure = undefined;
+            throw error;
+        }
+    }
+    function requireSession() {
+        if (!session) {
+            throw new Error('createPlaybookRuntime: init must be called first');
+        }
+        return session;
+    }
+    function requireHostPorts() {
+        if (!savedPorts) {
+            throw new Error('createPlaybookRuntime: init must be called first');
+        }
+        return savedPorts;
+    }
+    function createTraceEvent(type, payload, position = {}) {
+        const currentSession = requireSession();
+        const safePayload = snapshotJsonValue(payload, `trace ${type} payload`);
+        return {
+            schemaVersion: 2,
+            sessionId: currentSession.sessionId,
+            playbookId: currentSession.playbookId,
+            rootSessionId: currentSession.rootSessionId,
+            ...(currentSession.parentSessionId !== undefined
+                ? { parentSessionId: currentSession.parentSessionId }
+                : {}),
+            ...(currentSession.parentCallId !== undefined
+                ? { parentCallId: currentSession.parentCallId }
+                : {}),
+            depth: currentSession.depth,
+            sequence: ++traceSequence,
+            timestamp: Date.now(),
+            type,
+            ...(position.turnId !== undefined ? { turnId: position.turnId } : {}),
+            ...(position.callId !== undefined ? { callId: position.callId } : {}),
+            payload: safePayload,
+        };
+    }
+    function emitTrace(type, payload, position = {}) {
+        const currentSession = requireSession();
+        const event = createTraceEvent(type, payload, position);
+        return enqueueEmission(() => currentSession.ports.emitTelemetry({
+            topic: 'playbook.trace',
+            payload: event,
+        }));
+    }
+    function stateIdentity(stateId) {
+        return stateId === undefined ? {} : { stateId };
+    }
+    function currentState() {
+        if (!actor) {
+            throw new Error('createPlaybookRuntime: actor is not initialized');
+        }
+        return normalizePlaybookSnapshot(actor.getSnapshot(), {
+            pendingCall: nestedBridge.getPendingCall(),
+        });
+    }
+    function stateTracePayload(state = currentState()) {
+        return {
+            state,
+            ...stateIdentity(state.stateId),
+        };
+    }
+    function createRuntimePorts(hostPorts) {
+        return {
+            callPlayer: (playerId, prompt, signal, callOptions) => hostPorts.callPlayer(playerId, prompt, signal, callOptions),
+            callCaptain: (prompt, signal, callOptions) => hostPorts.callCaptain(prompt, signal, callOptions),
+            callJudge: (prompt, signal) => hostPorts.callJudge(prompt, signal),
+            callPlaybook: (request, signal) => hostPorts.callPlaybook(request, signal),
+            emitStatus: (message, data) => {
+                const descriptor = actor ? currentState() : undefined;
+                const safeData = data === undefined
+                    ? undefined
+                    : snapshotJsonValue(data, 'status data');
+                const trace = createTraceEvent('status.emitted', {
+                    message,
+                    ...(safeData !== undefined ? { data: safeData } : {}),
+                    ...(descriptor !== undefined
+                        ? {
+                            state: descriptor,
+                            ...stateIdentity(descriptor.stateId),
+                        }
+                        : {}),
+                }, activeTurnId !== undefined ? { turnId: activeTurnId } : {});
+                return enqueueEmission(async () => {
+                    await hostPorts.emitTelemetry({
+                        topic: 'playbook.trace',
+                        payload: trace,
+                    });
+                    await hostPorts.emitStatus(message, safeData);
+                });
+            },
+            emitTelemetry: (event) => {
+                if (typeof event.topic !== 'string' || event.topic.length === 0) {
+                    throw new TypeError('telemetry topic must be a non-empty string');
+                }
+                const payload = snapshotJsonValue(event.payload, 'telemetry payload');
+                return enqueueEmission(() => hostPorts.emitTelemetry({ topic: event.topic, payload }));
+            },
+        };
+    }
+    async function emitCallStarted(startedType, finishedType, identity, position) {
+        try {
+            await emitTrace(startedType, identity, position);
+        }
+        catch (error) {
+            controlPlaneError ??= error;
+            try {
+                await emitTrace(finishedType, { ...identity, status: 'error', error: normalizeError(error) }, position);
+            }
+            catch {
+                // Preserve the start failure after one best-effort finish attempt.
+            }
+            throw error;
+        }
+    }
+    const boundary = {
+        async callPlayer(input, playerId, prompt, signal) {
+            // State-entry telemetry/status must precede the call they describe.
+            await drainEmissions();
+            const turnId = activeTurnId;
+            const callId = `player-${++playerCallSequence}`;
+            const stateId = input.stateId;
+            const resume = playerResumeTokens.get(playerId) ?? false;
+            const identity = {
+                purpose: 'captain',
+                ...stateIdentity(stateId),
+                sourceItem: input.sourceItem,
+                playerId,
+                resume,
+            };
+            if (activePlayerIds.has(playerId)) {
+                const error = new Error(`simultaneous calls to resolved player ${playerId} are not allowed`);
+                await emitCallStarted('player.call.started', 'player.call.finished', { ...identity, prompt }, {
+                    ...(turnId !== undefined ? { turnId } : {}),
+                    callId,
+                });
+                await emitTrace('player.call.finished', { ...identity, status: 'error', error: normalizeError(error) }, {
+                    ...(turnId !== undefined ? { turnId } : {}),
+                    callId,
+                });
+                throw error;
+            }
+            activePlayerIds.add(playerId);
+            try {
+                await emitTrace('player.call.started', { ...identity, prompt }, {
+                    ...(turnId !== undefined ? { turnId } : {}),
+                    callId,
+                });
+                let rawResult;
+                try {
+                    rawResult = await requireHostPorts().callPlayer(playerId, prompt, signal, { resume });
+                    // A host promise is not required to honor cancellation. Do not let
+                    // a late result mutate continuity or publish a successful finish.
+                    signal.throwIfAborted();
+                }
+                catch (error) {
+                    if (!signal.aborted)
+                        controlPlaneError ??= error;
                     try {
-                        await emitQueue.shift()();
+                        await emitTrace('player.call.finished', {
+                            ...identity,
+                            status: signal.aborted ? 'aborted' : 'error',
+                            error: normalizeError(error),
+                        }, {
+                            ...(turnId !== undefined ? { turnId } : {}),
+                            callId,
+                        });
                     }
                     catch {
-                        // Suppress host-side emission errors; the control plane
-                        // surfaces real failures via handleBossInput throws.
+                        // The original non-abort port rejection remains authoritative.
                     }
+                    // A thrown port call carries no authoritative result, so the
+                    // prior token remains available for a later explicit resume.
+                    throw error;
                 }
-                drainer = undefined;
-            })();
-        }
+                let result;
+                try {
+                    result = validatePlayerResult(rawResult);
+                }
+                catch (error) {
+                    if (!signal.aborted)
+                        controlPlaneError ??= error;
+                    try {
+                        await emitTrace('player.call.finished', { ...identity, status: 'error', error: normalizeError(error) }, {
+                            ...(turnId !== undefined ? { turnId } : {}),
+                            callId,
+                        });
+                    }
+                    catch {
+                        // The malformed host result remains authoritative.
+                    }
+                    throw error;
+                }
+                if (typeof result.resumeToken === 'string' &&
+                    result.resumeToken.trim().length > 0) {
+                    playerResumeTokens.set(playerId, result.resumeToken);
+                }
+                else {
+                    playerResumeTokens.delete(playerId);
+                }
+                await emitTrace('player.call.finished', {
+                    ...identity,
+                    status: result.status,
+                    ...(result.finalText !== undefined
+                        ? { finalText: result.finalText }
+                        : {}),
+                    ...(result.error !== undefined
+                        ? { error: normalizeError(result.error) }
+                        : {}),
+                    ...(result.resumeToken !== undefined
+                        ? { resumeToken: result.resumeToken }
+                        : {}),
+                }, {
+                    ...(turnId !== undefined ? { turnId } : {}),
+                    callId,
+                });
+                return result;
+            }
+            finally {
+                activePlayerIds.delete(playerId);
+            }
+        },
+        async callJudge(purpose, stateId, prompt, signal) {
+            return judgeQueue.add(async () => {
+                signal.throwIfAborted();
+                // A transition/status queued synchronously by XState must reach
+                // the host before the judge call that follows it.
+                await drainEmissions();
+                signal.throwIfAborted();
+                const turnId = activeTurnId;
+                const callId = `judge-${++judgeCallSequence}`;
+                const identity = { purpose, ...stateIdentity(stateId) };
+                await emitCallStarted('judge.call.started', 'judge.call.finished', { ...identity, prompt }, {
+                    ...(turnId !== undefined ? { turnId } : {}),
+                    callId,
+                });
+                let reply;
+                try {
+                    reply = await requireHostPorts().callJudge(prompt, signal);
+                    signal.throwIfAborted();
+                }
+                catch (error) {
+                    if (!isAbortFailure(error, signal)) {
+                        controlPlaneError ??= error;
+                    }
+                    await emitTrace('judge.call.finished', {
+                        ...identity,
+                        status: signal.aborted ? 'aborted' : 'error',
+                        error: normalizeError(error),
+                    }, {
+                        ...(turnId !== undefined ? { turnId } : {}),
+                        callId,
+                    });
+                    throw error;
+                }
+                if (typeof reply !== 'string') {
+                    const error = new TypeError('judge reply must be a string');
+                    controlPlaneError ??= error;
+                    await emitTrace('judge.call.finished', { ...identity, status: 'error', error: normalizeError(error) }, {
+                        ...(turnId !== undefined ? { turnId } : {}),
+                        callId,
+                    });
+                    throw error;
+                }
+                // Keep the success finish outside the port-call catch. If a
+                // telemetry sink records this boundary and then rejects, that sink
+                // failure must not synthesize a second, contradictory finish.
+                await emitTrace('judge.call.finished', { ...identity, status: 'ok', reply }, {
+                    ...(turnId !== undefined ? { turnId } : {}),
+                    callId,
+                });
+                return reply;
+            });
+        },
+    };
+    const nestedBridge = createNestedPlaybookBridge({
+        nextCallId: () => `playbook-${++playbookCallSequence}`,
+        getBoundarySignal: () => activeSignal,
+        callPlaybook: (request, signal) => requireHostPorts().callPlaybook(request, signal),
+        emitStarted: async (event) => {
+            playbookCallTurnIds.set(event.callId, activeTurnId);
+            await emitTrace('playbook.call.started', {
+                stateId: event.stateId,
+                playbookId: event.playbookId,
+                text: event.text,
+            }, {
+                ...(activeTurnId !== undefined ? { turnId: activeTurnId } : {}),
+                callId: event.callId,
+            });
+        },
+        emitFinished: async (event) => {
+            const turnId = playbookCallTurnIds.get(event.callId);
+            try {
+                await emitTrace('playbook.call.finished', {
+                    stateId: event.stateId,
+                    playbookId: event.playbookId,
+                    text: event.text,
+                    result: event.result,
+                }, {
+                    ...(turnId !== undefined ? { turnId } : {}),
+                    callId: event.callId,
+                });
+            }
+            finally {
+                playbookCallTurnIds.delete(event.callId);
+            }
+        },
+        drain: drainEmissions,
+        bindResumeSignal: (signal) => {
+            activeSignal = signal;
+        },
+        onControlPlaneError: (error) => {
+            if (!activeSignal?.aborted)
+                controlPlaneError ??= error;
+        },
+        onBackgroundError: (error) => {
+            emissionFailure ??= error;
+        },
+    });
+    function tracePositionForActiveTurn() {
+        return activeTurnId === undefined ? {} : { turnId: activeTurnId };
     }
-    function drainEmissions() {
-        return drainer ?? Promise.resolve();
+    function enqueueTransitionEmission(payload, state, statuses, position) {
+        const currentSession = requireSession();
+        const transitionTrace = createTraceEvent('fsm.transition', payload, position);
+        const statusEmissions = statuses.map(({ message, data }) => ({
+            message,
+            data,
+            trace: createTraceEvent('status.emitted', {
+                message,
+                ...(data === undefined ? {} : { data }),
+                state,
+                ...stateIdentity(state.stateId),
+            }, position),
+        }));
+        void enqueueEmission(async () => {
+            await currentSession.ports.emitTelemetry({
+                topic: 'playbook.trace',
+                payload: transitionTrace,
+            });
+            await currentSession.ports.emitTelemetry({
+                topic: 'playbook.fsm.state',
+                payload,
+            });
+            for (const status of statusEmissions) {
+                await currentSession.ports.emitTelemetry({
+                    topic: 'playbook.trace',
+                    payload: status.trace,
+                });
+                await currentSession.ports.emitStatus(status.message, status.data);
+            }
+        }).catch(() => undefined);
+    }
+    function latchInspectionError(error) {
+        if (activeSignal !== undefined)
+            controlPlaneError ??= error;
+        else
+            emissionFailure ??= error;
     }
-    function buildActor(ports) {
+    function buildActor(ports, machineSnapshot) {
         priorState = undefined;
-        return createActor(codingMachine.provide({
-            actors: { captain: captainBridge(ports, () => activeSignal) },
+        let builtActor;
+        builtActor = createActor(codingMachine.provide({
+            actors: {
+                player: captainBridge(ports, () => activeSignal, boundary, (error) => {
+                    if (!activeSignal?.aborted)
+                        controlPlaneError ??= error;
+                }),
+            },
         }), {
-            input: options,
+            input: boundOptions,
+            // DR-014 §1: a restore rehydrates the persisted machine snapshot;
+            // XState derives context/value from it and ignores `input` then.
+            ...(machineSnapshot === undefined
+                ? {}
+                : {
+                    snapshot: machineSnapshot,
+                }),
             inspect: (inspectionEvent) => {
                 if (inspectionEvent.type !== '@xstate.snapshot')
                     return;
-                const snap = inspectionEvent.snapshot;
-                // Filter out captain sub-actor (fromPromise) snapshots —
-                // only the root codingMachine snapshot has a string value.
-                if (typeof snap.value !== 'string')
+                if (inspectionEvent.actorRef !== builtActor)
                     return;
-                const to = snap.value;
-                if (priorState === to)
+                if (suppressInspectionEmissions)
                     return;
-                const from = priorState;
-                priorState = to;
-                // Telemetry on every transition (PBRT-14).
-                const context = snap.context ?? {};
-                enqueueEmit(() => ports.emitTelemetry({
-                    topic: 'playbook.fsm.state',
-                    payload: stateTelemetryPayload(from, to, inspectionEvent.event, context),
-                }));
-                // Captain pane (PBRT-3 / PBRT-14): show the transition
-                // guard first (when this is an actor-done transition with
-                // a known guard), then the new state entry, then any
-                // context riders the entering state cares about. Terminal
-                // entry to `failed` carries `lastError` as the data arg.
-                if (!CAPTAIN_PANE_STATES.has(to))
-                    return;
-                const transitionLine = formatTransition(inspectionEvent.event);
-                if (transitionLine !== undefined) {
-                    enqueueEmit(() => ports.emitStatus(transitionLine));
-                }
-                // awaitBossReply surfaces two lines per PBRT-3 / PBRT-14: the
-                // full player question as captain speech, then the rider-less
-                // routing marker. The full-question telemetry rides
-                // stateTelemetryPayload above.
-                if (to === 'awaitBossReply') {
-                    const questionLine = formatAwaitBossReplyQuestion(context);
-                    const markerLine = formatAwaitBossReplyMarker(context);
-                    enqueueEmit(() => ports.emitStatus(questionLine));
-                    enqueueEmit(() => ports.emitStatus(markerLine));
-                    return;
-                }
-                const entryLine = formatStateEntry(to);
-                if (entryLine === undefined)
-                    return;
-                if (to === 'failed') {
-                    const lastError = snap.context
-                        ?.lastError;
-                    const data = { lastError: normalizeErrorCompact(lastError) };
-                    enqueueEmit(() => ports.emitStatus(entryLine, data));
+                try {
+                    const snap = inspectionEvent.snapshot;
+                    const state = normalizePlaybookSnapshot(snap);
+                    const to = state.stateId;
+                    if (to === undefined) {
+                        throw new Error('CODE root snapshot must expose exactly one playbook state id');
+                    }
+                    const previousState = priorState;
+                    const context = snap.context;
+                    const payload = structuredStateTelemetryPayload(previousState, state, inspectionEvent.event, context);
+                    const statuses = [];
+                    if (CAPTAIN_PANE_STATES.has(to)) {
+                        const transitionLine = formatTransition(inspectionEvent.event);
+                        if (transitionLine !== undefined) {
+                            statuses.push({ message: transitionLine });
+                        }
+                        if (to === 'awaitBossReply') {
+                            statuses.push({ message: formatAwaitBossReplyQuestion(context) }, { message: formatAwaitBossReplyMarker(context) });
+                        }
+                        else {
+                            const entryLine = formatStateEntry(to);
+                            if (entryLine !== undefined) {
+                                const lastError = to === 'failed'
+                                    ? normalizeErrorCompact(snap.context.lastError)
+                                    : undefined;
+                                statuses.push({
+                                    message: entryLine,
+                                    ...(lastError === undefined
+                                        ? {}
+                                        : {
+                                            data: snapshotJsonValue({ lastError }, 'failed status data'),
+                                        }),
+                                });
+                            }
+                        }
+                    }
+                    enqueueTransitionEmission(payload, state, statuses, tracePositionForActiveTurn());
+                    priorState = state;
                 }
-                else {
-                    enqueueEmit(() => ports.emitStatus(entryLine));
+                catch (error) {
+                    latchInspectionError(error);
                 }
             },
         });
+        return builtActor;
     }
-    const runtime = {
-        async init(ports) {
-            savedPorts = ports;
-            actor = buildActor(ports);
-            actor.start();
+    function runResultFor(outcome, error) {
+        const state = currentState();
+        if (outcome === 'quiescent' || outcome === 'no-action') {
+            return { outcome, state };
+        }
+        if (outcome === 'suspended') {
+            const pendingCall = nestedBridge.getPendingCall();
+            if (!pendingCall) {
+                throw new Error('suspended runtime has no pending playbook call');
+            }
+            return { outcome, state, pendingCall };
+        }
+        if (outcome === 'terminal') {
+            const output = actor?.getSnapshot()
+                ?.output;
+            if (output !== undefined) {
+                return {
+                    outcome,
+                    state,
+                    output: snapshotJsonValue(output, 'terminal playbook output'),
+                };
+            }
+            return { outcome, state };
+        }
+        const failure = error ??
+            (outcome === 'failed'
+                ? actor?.getSnapshot()
+                    ?.context?.lastError
+                : outcome === 'aborted'
+                    ? activeSignal?.reason
+                    : undefined);
+        return {
+            outcome,
+            state,
+            ...(failure !== undefined ? { error: normalizeError(failure) } : {}),
+        };
+    }
+    function settledOutcome(signal) {
+        if (nestedBridge.getPendingCall())
+            return 'suspended';
+        if (signal.aborted)
+            return 'aborted';
+        const state = currentState();
+        if (state.status === 'error') {
+            const actorError = actor?.getSnapshot()?.error;
+            throw actorError ?? new Error('CODE actor entered error status');
+        }
+        if (state.status === 'done')
+            return 'terminal';
+        if (state.stateId === 'failed')
+            return 'failed';
+        return 'quiescent';
+    }
+    function settlementTracePayload(result) {
+        return {
+            ...result,
+            ...stateIdentity(result.state.stateId),
+        };
+    }
+    // Shared failed-start cleanup for init and restore: stop the actor,
+    // abort/drain nested and host work, optionally emit one best-effort
+    // session.disposed boundary, and unbind every closure field so dispose
+    // stays callable. The caller rethrows its original failure. A restore
+    // failure skips the disposal trace — the parked session was never
+    // re-bound in this process, so its persisted snapshot stays
+    // authoritative (DR-014 §2).
+    async function cleanupFailedStart(cause, options) {
+        let finalState;
+        if (options.emitDisposal && actor) {
+            try {
+                finalState = currentState();
+            }
+            catch {
+                // A state that cannot even normalize has no disposal descriptor.
+            }
+        }
+        suppressInspectionEmissions = true;
+        try {
+            actor?.stop();
+        }
+        catch {
+            // Preserve the original startup failure.
+        }
+        try {
+            await nestedBridge.abortPending(cause);
+        }
+        catch {
+            // Preserve the original startup failure.
+        }
+        try {
+            await judgeQueue.onIdle();
             await drainEmissions();
+        }
+        catch {
+            // Preserve the original startup failure.
+        }
+        if (options.emitDisposal) {
+            try {
+                await emitTrace('session.disposed', finalState === undefined
+                    ? {}
+                    : {
+                        state: finalState,
+                        ...stateIdentity(finalState.stateId),
+                    });
+                await drainEmissions();
+            }
+            catch {
+                // The session-start error remains authoritative.
+            }
+        }
+        playerResumeTokens.clear();
+        activePlayerIds.clear();
+        playbookCallTurnIds.clear();
+        activeEmissionCalls.clear();
+        emissionQueue.clear();
+        judgeQueue.clear();
+        actor = undefined;
+        session = undefined;
+        savedPorts = undefined;
+        runtimePorts = undefined;
+        activeSignal = undefined;
+        activeTurnId = undefined;
+        controlPlaneError = undefined;
+        emissionFailure = undefined;
+        priorState = undefined;
+        suppressInspectionEmissions = false;
+        initialized = false;
+        traceSequence = 0;
+        turnSequence = 0;
+        judgeCallSequence = 0;
+        playerCallSequence = 0;
+        playbookCallSequence = 0;
+    }
+    const runtime = {
+        async init(nextSession) {
+            if (initialized || disposed || disposalPromise !== undefined) {
+                throw new Error('createPlaybookRuntime.init: already initialized');
+            }
+            const boundSession = snapshotPlaybookSession(nextSession);
+            initialized = true;
+            let finishInitialization;
+            const initialization = new Promise((resolve) => {
+                finishInitialization = resolve;
+            });
+            initInFlight = initialization;
+            const initTask = (async () => {
+                session = boundSession;
+                savedPorts = boundSession.ports;
+                runtimePorts = createRuntimePorts(boundSession.ports);
+                suppressInspectionEmissions = false;
+                actor = buildActor(runtimePorts);
+                await emitTrace('session.started', stateTracePayload());
+                actor.start();
+                await drainEmissions();
+            })();
+            try {
+                await initTask;
+            }
+            catch (error) {
+                await cleanupFailedStart(error, { emitDisposal: true });
+                throw error;
+            }
+            finally {
+                finishInitialization();
+                if (initInFlight === initialization)
+                    initInFlight = undefined;
+            }
+        },
+        // DR-014 §1 / PBRT-45: JSON-safe capture of a parked session.
+        // Defined only at a safe capture point — initialized, not disposing
+        // or disposed, no active public boundary, no pending nested call,
+        // and the actor quiescent with status `active`.
+        exportSnapshot() {
+            if (!actor || !session || disposed || disposalPromise !== undefined) {
+                return undefined;
+            }
+            if (activeSignal !== undefined)
+                return undefined;
+            if (nestedBridge.getPendingCall())
+                return undefined;
+            const state = currentState();
+            if (state.status !== 'active' || !state.quiescent)
+                return undefined;
+            const machine = detachPersistedMachineSnapshot(actor.getPersistedSnapshot());
+            const context = actor.getSnapshot()
+                .context;
+            const pending = pendingBossQuestionFromContext(context ?? {});
+            return {
+                schemaVersion: 1,
+                playbookId: session.playbookId,
+                machine,
+                playerResumeTokens: Object.fromEntries(playerResumeTokens),
+                sequences: {
+                    trace: traceSequence,
+                    turn: turnSequence,
+                    judgeCall: judgeCallSequence,
+                    playerCall: playerCallSequence,
+                    playbookCall: playbookCallSequence,
+                },
+                state,
+                pendingBossQuestions: pending === undefined
+                    ? []
+                    : [
+                        {
+                            questionId: pending.questionId,
+                            player: pending.player,
+                            question: pending.question,
+                            sourceItem: pending.sourceItem,
+                        },
+                    ],
+            };
+        },
+        // DR-014 §1 / PBRT-45: alternative to `init` that rehydrates an
+        // exported snapshot under the same immutable session identity.
+        // Emits no `session.started`, transition trace, or human status —
+        // the session already started; the next public boundary continues
+        // the contiguous trace sequence.
+        async restore(nextSession, snapshot) {
+            if (initialized || disposed || disposalPromise !== undefined) {
+                throw new Error('createPlaybookRuntime.restore: already initialized');
+            }
+            const boundSession = snapshotPlaybookSession(nextSession);
+            const boundSnapshot = assertPlaybookRuntimeSnapshot(snapshot, boundSession.playbookId);
+            initialized = true;
+            let finishInitialization;
+            const initialization = new Promise((resolve) => {
+                finishInitialization = resolve;
+            });
+            initInFlight = initialization;
+            const initTask = (async () => {
+                session = boundSession;
+                savedPorts = boundSession.ports;
+                runtimePorts = createRuntimePorts(boundSession.ports);
+                traceSequence = boundSnapshot.sequences.trace;
+                turnSequence = boundSnapshot.sequences.turn;
+                judgeCallSequence = boundSnapshot.sequences.judgeCall;
+                playerCallSequence = boundSnapshot.sequences.playerCall;
+                playbookCallSequence = boundSnapshot.sequences.playbookCall;
+                playerResumeTokens.clear();
+                for (const [playerId, token] of Object.entries(boundSnapshot.playerResumeTokens)) {
+                    playerResumeTokens.set(playerId, token);
+                }
+                suppressInspectionEmissions = true;
+                actor = buildActor(runtimePorts, boundSnapshot.machine);
+                actor.start();
+                const restoredState = currentState();
+                if (restoredState.status !== 'active') {
+                    throw new Error(`createPlaybookRuntime.restore: restored actor status is ${restoredState.status}, expected active`);
+                }
+                suppressInspectionEmissions = false;
+                priorState = restoredState;
+                await drainEmissions();
+            })();
+            try {
+                await initTask;
+            }
+            catch (error) {
+                await cleanupFailedStart(error, { emitDisposal: false });
+                throw error;
+            }
+            finally {
+                finishInitialization();
+                if (initInFlight === initialization)
+                    initInFlight = undefined;
+            }
         },
         async handleBossInput({ text, signal, }) {
             if (!actor || !savedPorts) {
                 throw new Error('createPlaybookRuntime.handleBossInput: init must be called first');
             }
+            if (disposed || disposalPromise !== undefined) {
+                throw new Error('createPlaybookRuntime.handleBossInput: runtime is disposing or disposed');
+            }
+            if (activeSignal !== undefined) {
+                throw new Error('createPlaybookRuntime.handleBossInput: another runtime turn is active');
+            }
+            const turnId = ++turnSequence;
+            activeTurnId = turnId;
             activeSignal = signal;
+            controlPlaneError = undefined;
+            let result;
+            let operationError;
             try {
+                await emitTrace('boss.input.received', { text }, { turnId });
                 // 1. Classify non-empty text into an FSM event through the judge.
-                const event = await classifyBossText(text, savedPorts, signal, actor.getSnapshot());
+                const event = await classifyBossText(text, runtimePorts, signal, actor.getSnapshot(), boundary);
                 // Empty input, no-action classifier output, or invalid classifier
                 // output — nothing to send.
                 if (event === undefined) {
-                    await drainEmissions();
-                    return;
+                    result = runResultFor('no-action');
                 }
-                // 2. Captain-pane classification line (PBRT-14): the bare
-                //    FSM event type, emitted before the FSM advances so the
-                //    host can render it as captain speech (e.g.,
-                //    `captain> START_CODING`). Enqueued so it interleaves
-                //    cleanly with the inspect-driven transition emissions.
-                const echoPorts = savedPorts;
-                enqueueEmit(() => echoPorts.emitStatus(formatClassification(event.type)));
-                // 3. final state ('done') cannot accept new events — dispose
-                //    and reconstruct per DR-004 §5.
-                if (actor.getSnapshot().status === 'done') {
-                    actor.stop();
-                    actor = buildActor(savedPorts);
-                    actor.start();
+                else {
+                    // 2. Captain-pane classification line (PBRT-14): the bare
+                    //    FSM event type, emitted before the FSM advances.
+                    await runtimePorts.emitStatus(formatClassification(event.type));
+                    // 3. A final actor cannot accept new events; reconstruct only after
+                    //    classification produced a real event.
+                    if (actor.getSnapshot().status === 'done') {
+                        actor.stop();
+                        actor = buildActor(runtimePorts);
+                        actor.start();
+                    }
+                    actor.send(event);
+                    await waitForPlaybookQuiescence(actor, {
+                        pendingCalls: nestedBridge,
+                    });
+                    if (controlPlaneError !== undefined)
+                        throw controlPlaneError;
+                    result = runResultFor(settledOutcome(signal));
                 }
-                // 4. Send the event.
-                actor.send(event);
-                // 5. Drive to quiescence. On signal-abort we take no FSM
-                //    action: the captain bridge's awaited callPlayer rejects
-                //    naturally, the bridge throws, XState routes through
-                //    onError → #failed, and this loop sees the quiescent
-                //    snapshot and returns (DR-004 §8 natural rejection).
-                await driveToQuiescence(actor);
-                // Drain transition emissions before returning so the Boss
-                // sees the final status line for this turn.
+            }
+            catch (error) {
+                operationError = error;
+            }
+            let drainError;
+            try {
                 await drainEmissions();
             }
-            finally {
-                activeSignal = undefined;
+            catch (error) {
+                drainError = error;
             }
+            const latchedControlError = controlPlaneError;
+            const primaryError = latchedControlError ?? drainError ?? operationError;
+            const abortError = latchedControlError === undefined &&
+                drainError === undefined &&
+                operationError !== undefined &&
+                isAbortFailure(operationError, signal);
+            const settlementResult = primaryError === undefined
+                ? (result ?? runResultFor('no-action'))
+                : runResultFor(abortError ? 'aborted' : 'failed', primaryError);
+            let settlementEmissionError;
+            try {
+                await emitTrace('boss.input.settled', settlementTracePayload(settlementResult), { turnId });
+            }
+            catch (error) {
+                settlementEmissionError = error;
+            }
+            try {
+                await drainEmissions();
+            }
+            catch (error) {
+                settlementEmissionError ??= error;
+            }
+            const failure = controlPlaneError ??
+                latchedControlError ??
+                drainError ??
+                (abortError
+                    ? (settlementEmissionError ?? operationError)
+                    : (operationError ?? settlementEmissionError));
+            activeSignal = undefined;
+            activeTurnId = undefined;
+            controlPlaneError = undefined;
+            if (failure !== undefined &&
+                !(abortError && settlementEmissionError === undefined)) {
+                throw failure;
+            }
+            return settlementResult;
         },
-        async dispose() {
-            if (actor) {
-                actor.stop();
-                actor = undefined;
+        async resumePlaybookCall(input) {
+            if (!actor || !savedPorts) {
+                throw new Error('createPlaybookRuntime.resumePlaybookCall: init must be called first');
             }
-            // Drain any in-flight emissions per slc/link.md §Session
-            // lifecycle ("stop the actor and drain pending port emissions").
-            await drainEmissions();
-            savedPorts = undefined;
+            if (disposed || disposalPromise !== undefined) {
+                throw new Error('createPlaybookRuntime.resumePlaybookCall: runtime is disposing or disposed');
+            }
+            if (activeSignal !== undefined) {
+                throw new Error('createPlaybookRuntime.resumePlaybookCall: another runtime turn is active');
+            }
+            activeTurnId = playbookCallTurnIds.get(input.callId);
+            activeSignal = input.signal;
+            controlPlaneError = undefined;
+            let result;
+            let operationError;
+            try {
+                await nestedBridge.resume(input);
+            }
+            catch (error) {
+                operationError = error;
+            }
+            try {
+                await waitForPlaybookQuiescence(actor, {
+                    pendingCalls: nestedBridge,
+                });
+                result = runResultFor(settledOutcome(input.signal));
+            }
+            catch (error) {
+                operationError ??= error;
+            }
+            let drainError;
+            try {
+                await drainEmissions();
+            }
+            catch (error) {
+                drainError = error;
+            }
+            const failure = controlPlaneError ?? drainError ?? operationError;
+            activeSignal = undefined;
+            activeTurnId = undefined;
+            controlPlaneError = undefined;
+            if (failure !== undefined)
+                throw failure;
+            if (result === undefined) {
+                throw new Error('playbook resume produced no runtime result');
+            }
+            return result;
+        },
+        dispose() {
+            if (disposalPromise !== undefined)
+                return disposalPromise;
+            if (disposed)
+                return Promise.resolve();
+            if (activeSignal !== undefined) {
+                return Promise.reject(new Error('createPlaybookRuntime.dispose: cannot dispose during an active runtime boundary'));
+            }
+            const task = (async () => {
+                const failures = [];
+                try {
+                    if (initInFlight !== undefined) {
+                        try {
+                            await initInFlight;
+                        }
+                        catch {
+                            // Dispose still releases whatever an unsuccessful init bound.
+                        }
+                    }
+                    const finalState = actor ? currentState() : undefined;
+                    // Stop the root before settling a suspended child. Its rejection
+                    // must not re-enter CODE and start fresh work during disposal.
+                    if (actor)
+                        actor.stop();
+                    try {
+                        await nestedBridge.dispose();
+                    }
+                    catch (error) {
+                        failures.push(error);
+                    }
+                    try {
+                        await drainEmissions();
+                    }
+                    catch (error) {
+                        failures.push(error);
+                    }
+                    if (session !== undefined) {
+                        try {
+                            await emitTrace('session.disposed', finalState === undefined
+                                ? {}
+                                : {
+                                    state: finalState,
+                                    ...stateIdentity(finalState.stateId),
+                                });
+                            await drainEmissions();
+                        }
+                        catch (error) {
+                            failures.push(error);
+                        }
+                    }
+                }
+                finally {
+                    playerResumeTokens.clear();
+                    activePlayerIds.clear();
+                    playbookCallTurnIds.clear();
+                    activeEmissionCalls.clear();
+                    emissionQueue.clear();
+                    judgeQueue.clear();
+                    actor = undefined;
+                    activeSignal = undefined;
+                    activeTurnId = undefined;
+                    controlPlaneError = undefined;
+                    emissionFailure = undefined;
+                    savedPorts = undefined;
+                    runtimePorts = undefined;
+                    session = undefined;
+                    disposed = true;
+                }
+                if (failures.length === 1)
+                    throw failures[0];
+                if (failures.length > 1) {
+                    throw new AggregateError(failures, 'playbook runtime disposal failed');
+                }
+            })();
+            disposalPromise = task;
+            return task;
         },
         // @internal — test-only escape hatch for inspecting the
         // underlying actor's snapshot. Most state assertions are now
@@ -935,24 +1843,12 @@ export default function createPlaybookRuntime(options) {
         _getActor() {
             return actor;
         },
+        _getBoundary() {
+            return boundary;
+        },
+        _getNestedBridge() {
+            return nestedBridge;
+        },
     };
     return runtime;
 }
-function driveToQuiescence(actor) {
-    return new Promise((resolve) => {
-        if (isQuiescent(actor.getSnapshot())) {
-            resolve();
-            return;
-        }
-        const sub = actor.subscribe((snap) => {
-            if (isQuiescent(snap)) {
-                sub.unsubscribe();
-                resolve();
-            }
-        });
-    });
-}
-function isQuiescent(snap) {
-    const v = snap.value;
-    return typeof v === 'string' && QUIESCENT_STATES.has(v);
-}