@tangle-network/agent-runtime 4.0.0 → 6.0.1

package/dist/{run-cancellation-CGgk54Md.js.map → run-cancellation-BCuu6khW.js.map}

@@ -1 +1 @@
-{"version":3,"file":"run-cancellation-CGgk54Md.js","names":[],"sources":["../src/runtime/supervise/coordination-log.ts","../src/runtime/supervise/supervise-identity.ts","../src/runtime/supervise/run-cancellation.ts"],"sourcesContent":["/**\n * Durable side-log for coordination evidence the spawn journal does not own: questions, analyst\n * findings, answer decisions, authorized continuation receipts, delivery-attempt markers, and\n * delivery outcomes. A durable run\n * (`supervise({ runDir })`) appends them as they publish and loads them on resume, so a restarted\n * coordinator retains the exact evidence produced by prior processes.\n *\n * Answer down-events also fold status on load: a question answered before the crash reloads as\n * `answered`, not as a re-blocking `open`. Settled events are skipped (the spawn journal is their\n * ledger). A receipt followed by an attempt but no outcome proves the process died in the delivery\n * window; that outcome remains unknown and no prior instruction is auto-delivered.\n *\n * JSONL, one fsynced record per event, keyed by `runId` — several runs may share one log file\n * exactly as they share one spawn-journal file.\n *\n * @experimental\n */\n\nimport { appendCommittedJsonLine, readCommittedJsonLines } from '../../durable/jsonl-file'\nimport { captureRunWriteContext } from '../../durable/run-fence'\nimport type {\n  AnalystFindingEvent,\n  DefinedAnalystRecord,\n} from '../../mcp/tools/coordination-analysts'\nimport type { CoordinationEvent } from '../../mcp/tools/coordination-events'\nimport type { ContinuationInstruction } from '../../mcp/tools/coordination-messages'\nimport type {\n  QuestionEscalationRecord,\n  QuestionRecord,\n} from '../../mcp/tools/coordination-questions'\nimport type { BusRecord } from './event-bus'\nimport type { PeerMailEvent } from './peer-mail'\n\n/** Stable identity of the supervisor that owns one coordination stream. High-level supervision\n * derives it from the exact root/child execution identity plus its parent assignment. */\nexport type CoordinationOwnerId = string\n\n/** Durable delivery evidence retained in commit order. An attempt without a later event carrying\n * the same `receiptId` has an unknown outcome after a crash and is never replayed. */\nexport type CoordinationDeliveryEvidence = Extract<\n  CoordinationEvent,\n  { readonly type: 'delivery-attempt' | 'steer' | 'answer' }\n>\n\n/** Coordination evidence loaded from prior processes of one durable supervised run. */\nexport interface PriorCoordination {\n  /** The owner filter used for this replay. Omitted only for the compatibility all-owner read. */\n  readonly ownerId?: CoordinationOwnerId\n  /** Every question the prior process raised, with answer-status folded in, raise order. */\n  readonly questions: ReadonlyArray<QuestionRecord>\n  /** Every analyst finding the prior process published, publish order. */\n  readonly findings: ReadonlyArray<AnalystFindingEvent>\n  /** Every `ask_parent` escalation the prior process made, raise order. An undelivered one names a\n   * question the run raised that nothing above it received — retained so a resuming operator sees\n   * it, never auto-redelivered. */\n  readonly escalations: ReadonlyArray<QuestionEscalationRecord>\n  /** Every lens the prior process DEFINED at run time, definition order. The exact authored bytes\n   * and their digest, so an invented lens can be re-registered and any finding it produced can be\n   * traced to the words that produced it. Re-registration is the owner's decision, never automatic:\n   * the registry may have changed between processes. */\n  readonly analystDefinitions: ReadonlyArray<DefinedAnalystRecord>\n  /** Every authorized continuation, in commit order. These are evidence, never replayed to a new\n   * worker automatically. */\n  readonly continuations: ReadonlyArray<ContinuationInstruction>\n  /** Delivery intent and result records in commit order, linked to receipts by `receiptId`. */\n  readonly deliveryEvidence: ReadonlyArray<CoordinationDeliveryEvidence>\n  /** Every peer-mail attempt the prior process made, delivered and refused alike, in commit order.\n   * Evidence of what siblings told each other; never replayed into a new worker's inbox. */\n  readonly mail: ReadonlyArray<PeerMailEvent>\n  /** Exact source-bus stamps in durable append order. Bus `seq` restarts with each process; append\n   * order remains the cross-process replay order. */\n  readonly records: ReadonlyArray<BusRecord<CoordinationEvent>>\n}\n\n/** The durable coordination side-log seam. `append` records one bus event (kinds it does not\n *  persist are ignored); `load` replays a run's prior records folded into `PriorCoordination`. */\nexport interface CoordinationLog {\n  append(\n    runId: string,\n    record: BusRecord<CoordinationEvent>,\n    ownerId?: CoordinationOwnerId,\n  ): Promise<void>\n  load(runId: string, ownerId?: CoordinationOwnerId): Promise<PriorCoordination>\n}\n\ntype CoordinationLogRecord = {\n  readonly runId: string\n  readonly ownerId?: CoordinationOwnerId\n  readonly seq: number\n  readonly at: number\n  readonly priority: number\n  readonly event: CoordinationEvent\n}\n\ntype LegacyCoordinationLogRecord = {\n  readonly runId: string\n  readonly ownerId?: CoordinationOwnerId\n  readonly at: string\n  readonly event: CoordinationEvent\n}\n\n/** Persist prior context plus exact continuation authorization, attempt, and result evidence.\n * Settlements have their own journal. */\nfunction persisted(event: CoordinationEvent): boolean {\n  return event.type !== 'settled'\n}\n\n/** FS-backed `CoordinationLog`: append-only JSONL, fsynced per record. */\nexport class FileCoordinationLog implements CoordinationLog {\n  private readonly writeContext = captureRunWriteContext()\n  private appendTail: Promise<void> = Promise.resolve()\n\n  constructor(private readonly path: string) {}\n\n  async append(\n    runId: string,\n    record: BusRecord<CoordinationEvent>,\n    ownerId?: CoordinationOwnerId,\n  ): Promise<void> {\n    if (!persisted(record.event)) return\n    const append = this.appendTail.then(() =>\n      this.writeContext(() => this.appendRecord(runId, record, ownerId)),\n    )\n    this.appendTail = append.catch(() => undefined)\n    return append\n  }\n\n  private async appendRecord(\n    runId: string,\n    busRecord: BusRecord<CoordinationEvent>,\n    ownerId?: CoordinationOwnerId,\n  ): Promise<void> {\n    const fs = await import('node:fs/promises')\n    const { dirname } = await import('node:path')\n    await fs.mkdir(dirname(this.path), { recursive: true })\n    const record: CoordinationLogRecord = {\n      runId,\n      ...(ownerId !== undefined ? { ownerId } : {}),\n      ...busRecord,\n    }\n    await appendCommittedJsonLine(this.path, record)\n  }\n\n  async load(runId: string, ownerId?: CoordinationOwnerId): Promise<PriorCoordination> {\n    return foldCoordinationRecords(\n      readCommittedJsonLines<CoordinationLogRecord | LegacyCoordinationLogRecord>(this.path, {\n        allowMissing: true,\n      }),\n      runId,\n      ownerId,\n    )\n  }\n}\n\n/** @internal Shared replay semantics for file and SQL coordination evidence. */\nexport async function foldCoordinationRecords(\n  source:\n    | Iterable<CoordinationLogRecord | LegacyCoordinationLogRecord>\n    | AsyncIterable<CoordinationLogRecord | LegacyCoordinationLogRecord>,\n  runId: string,\n  ownerId?: CoordinationOwnerId,\n): Promise<PriorCoordination> {\n  const byId = new Map<string, QuestionRecord>()\n  const findings: AnalystFindingEvent[] = []\n  const escalations: QuestionEscalationRecord[] = []\n  const analystDefinitions: DefinedAnalystRecord[] = []\n  const continuations: ContinuationInstruction[] = []\n  const deliveryEvidence: CoordinationDeliveryEvidence[] = []\n  const mail: PeerMailEvent[] = []\n  const records: BusRecord<CoordinationEvent>[] = []\n  let legacySeq = 0\n  for await (const stored of source) {\n    if (stored.runId !== runId) continue\n    // Omitting ownerId preserves the historical all-run read for direct consumers. Runtime always\n    // supplies one, so root and nested supervisors never receive one another's evidence.\n    if (ownerId !== undefined && stored.ownerId !== ownerId) continue\n    const record: BusRecord<CoordinationEvent> =\n      'seq' in stored\n        ? {\n            seq: stored.seq,\n            at: stored.at,\n            priority: stored.priority,\n            event: stored.event,\n          }\n        : {\n            seq: legacySeq++,\n            at: Date.parse(stored.at),\n            priority: 0,\n            event: stored.event,\n          }\n    records.push(record)\n    const ev = record.event\n    if (ev.type === 'delivery-attempt' || ev.type === 'steer' || ev.type === 'answer') {\n      deliveryEvidence.push(ev)\n    }\n    if (ev.type === 'question') {\n      byId.set(ev.question.id, ev.question)\n    } else if (ev.type === 'finding') {\n      findings.push(ev.finding)\n    } else if (ev.type === 'answer') {\n      // Only accepted delivery resolves a blocking question. Authorization and an attempted\n      // refusal remain evidence, but cannot turn \"worker never received the answer\" into answered\n      // state on replay. `by` is not on the wire; prior-run is the honest attribution.\n      const prior = byId.get(ev.questionId)\n      if (prior && ev.down.delivered) {\n        byId.set(ev.questionId, {\n          ...prior,\n          status: 'answered',\n          decision: { kind: 'answer', answer: ev.down.instruction, by: 'prior-run' },\n        })\n      }\n    } else if (ev.type === 'instruction') {\n      continuations.push(ev.instruction)\n    } else if (ev.type === 'mail') {\n      mail.push(ev.mail)\n    } else if (ev.type === 'escalation') {\n      escalations.push(ev.escalation)\n    } else if (ev.type === 'analyst-defined') {\n      analystDefinitions.push(ev.analyst)\n    }\n  }\n  return {\n    ...(ownerId !== undefined ? { ownerId } : {}),\n    questions: [...byId.values()],\n    findings,\n    escalations,\n    analystDefinitions,\n    continuations,\n    deliveryEvidence,\n    mail,\n    records,\n  }\n}\n","import { randomUUID } from 'node:crypto'\nimport { resolve } from 'node:path'\nimport {\n  type AgentProfile,\n  agentProfileSchema,\n  canonicalCandidateDigest,\n  type Sha256Digest,\n} from '@tangle-network/agent-interface'\nimport { ValidationError } from '../../errors'\nimport type { WorkerSpawnContext } from '../../mcp/tools/coordination-contracts'\nimport type { CoordinationEvent } from '../../mcp/tools/coordination-events'\nimport { deriveNodeExecutionIdentity } from './scope'\nimport { detachedSnapshot } from './snapshot'\nimport type { SupervisorNodeContext } from './supervisor-agent'\nimport type { AgentExecutionRef, NodeExecutionIdentity } from './types'\n\nexport function externalExecutionId(kind: string, identity: unknown): string {\n  const digest = canonicalCandidateDigest({ kind, identity })\n  return `${kind}-${digest.slice('sha256:'.length)}`\n}\n\nexport function freezeDetached<T>(value: T): T {\n  return detachedSnapshot(value, 'supervise')\n}\n\nexport function freezeDetachedProfile(value: unknown): AgentProfile {\n  return freezeDetached(agentProfileSchema.parse(value))\n}\n\nexport function canonicalExecution(\n  profile: AgentProfile,\n  task: unknown,\n  rawExecution: AgentExecutionRef | undefined,\n  context: string,\n): { readonly identity: NodeExecutionIdentity; readonly ref?: AgentExecutionRef } {\n  const execution = rawExecution === undefined ? undefined : freezeDetached(rawExecution)\n  if (execution !== undefined) {\n    if (typeof execution !== 'object' || execution === null || Array.isArray(execution)) {\n      throw new ValidationError(`${context}: execution must be an object`)\n    }\n    const unknown = Object.keys(execution).filter(\n      (key) => key !== 'candidateDigest' && key !== 'correlation',\n    )\n    if (unknown.length > 0) {\n      throw new ValidationError(`${context}: unknown execution fields: ${unknown.join(', ')}`)\n    }\n  }\n  const identity = deriveNodeExecutionIdentity({ profile, execution }, task)\n  if (!identity?.profileDigest || !identity.taskDigest) {\n    throw new ValidationError(\n      `${context}: profile and task must be finite, acyclic canonical JSON for durable identity`,\n    )\n  }\n  const ref: AgentExecutionRef | undefined =\n    identity.candidateDigest || identity.correlation\n      ? Object.freeze({\n          ...(identity.candidateDigest ? { candidateDigest: identity.candidateDigest } : {}),\n          ...(identity.correlation ? { correlation: identity.correlation } : {}),\n        })\n      : undefined\n  return { identity, ...(ref ? { ref } : {}) }\n}\n\nexport function rootCoordinationOwner(identity: NodeExecutionIdentity): string {\n  return canonicalCandidateDigest({ kind: 'supervisor-root', identity })\n}\n\nexport function childCoordinationOwner(\n  parentOwnerId: string,\n  identity: NodeExecutionIdentity,\n  context: WorkerSpawnContext,\n  depth: number,\n): string {\n  return canonicalCandidateDigest({\n    kind: 'supervisor-child',\n    parentOwnerId,\n    identity,\n    assignment: {\n      id: context.assignmentId,\n      label: context.label,\n      key: context.key ?? null,\n      depth,\n    },\n  })\n}\n\nexport function supervisionRunNamespace(runDir: string | undefined, runId: string): string {\n  return canonicalCandidateDigest(\n    runDir === undefined\n      ? { kind: 'supervise-ephemeral-run', runId, nonce: randomUUID() }\n      : { kind: 'supervise-durable-run', runId, runDir: resolve(runDir) },\n  )\n}\n\nexport function workerAssignmentNamespace(\n  runNamespace: string,\n  parentOwnerId: string,\n  assignmentId: string,\n): string {\n  return canonicalCandidateDigest({\n    kind: 'supervise-worker-assignment',\n    runNamespace,\n    parentOwnerId,\n    assignmentId,\n  })\n}\n\n/** Hash only durable coordination meaning. Bus sequence/timestamp are delivery metadata and a\n * resumed projection's marker describes the reader, not the original settlement. */\nexport function coordinationEventId(\n  context: SupervisorNodeContext,\n  event: CoordinationEvent,\n): Sha256Digest {\n  const durableEvent =\n    event.type === 'settled' && event.worker.resumed === true\n      ? (() => {\n          const { resumed: _resumed, ...worker } = event.worker\n          return { type: 'settled' as const, worker }\n        })()\n      : event\n  return canonicalCandidateDigest({\n    kind: 'supervise-coordination-event',\n    runNamespace: context.runNamespace,\n    ownerId: context.ownerId,\n    event: detachedSnapshot(durableEvent, 'supervise coordination event identity'),\n  })\n}\n","import { existsSync, mkdirSync, readFileSync, watch } from 'node:fs'\nimport { join } from 'node:path'\nimport type { RetainedRunEffect } from '../retained-run-types'\nimport { assertNoSymlinkDescendant, writeAtomicDurableFile } from './durable-file'\nimport { appendWorkerControlEvent, workerCancellationsDir } from './run-layout'\n\n/** Apply a durable request through the run's existing abort controller. */\nexport function applyRunCancellation(\n  dir: string,\n  abortRun: (reason: string, request?: RunCancelRequest) => void,\n  now: () => string,\n  path: 'observer' | 'turn-boundary' | 'fallback' = 'turn-boundary',\n): RunCancellation | undefined {\n  const request = readRunCancelRequest(dir)\n  if (request === undefined) return undefined\n  const prior = readRunCancellation(dir, request.operationId)\n  // A request acknowledged only as `cancel_requested` is still owed by this run: the process\n  // that issued the abort died before the run settled. Abort again; the record stands.\n  if (prior?.effect === 'cancel_requested') {\n    abortRun(request.reason ?? 'run cancel requested', request)\n  }\n  if (prior !== undefined) return prior\n  abortRun(request.reason ?? 'run cancel requested', request)\n  const observedAt = now()\n  const appliedAfterMs = Math.max(0, Date.parse(observedAt) - Date.parse(request.at))\n  const record: RunCancellation = {\n    operationId: request.operationId,\n    effect: 'cancel_requested',\n    path,\n    appliedAfterMs,\n    ...(request.deadlineMs === undefined\n      ? {}\n      : { deadlineExceeded: appliedAfterMs > request.deadlineMs }),\n    requestedAt: request.at,\n    observedAt,\n    ...(request.reason === undefined ? {} : { reason: request.reason }),\n    ...(request.operator === undefined ? {} : { operator: request.operator }),\n    detail: 'root abort issued to the whole run; termination not yet proven',\n  }\n  writeRunCancellation(dir, record)\n  return record\n}\n\n/** External drivers may remain silent indefinitely, so turn boundaries cannot observe control. */\nexport function watchRunCancellation(\n  dir: string,\n  abortRun: (reason: string, request?: RunCancelRequest) => void,\n  createWatch: typeof watch = watch,\n) {\n  mkdirSync(workerCancellationsDir(dir), { recursive: true })\n  let active = true\n  let failure: unknown\n  // One observer aborts its run once: a request this process already applied, or one a dead\n  // process acknowledged, is not re-issued on every poll.\n  let aborted = false\n  const abortOnce = (reason: string, request?: RunCancelRequest): void => {\n    if (aborted) return\n    aborted = true\n    abortRun(reason, request)\n  }\n  const check = (path: 'observer' | 'fallback' = 'observer'): void => {\n    if (failure !== undefined) throw failure\n    if (active) applyRunCancellation(dir, abortOnce, () => new Date().toISOString(), path)\n  }\n  const fail = (error: unknown): void => {\n    if (!active) return\n    failure = error\n    abortRun(`durable run cancellation observer failed: ${String(error)}`)\n  }\n  // The watcher is an optimization over the poll loop below (instant pickup instead of ≤100 ms).\n  // Creating it can fail for reasons that say NOTHING about this run: the host's inotify budget is\n  // exhausted (EMFILE — a shared box with many agents held ~110 of the 128 default user instances\n  // when this was measured), or the kernel caps watches (ENOSPC). Degrading to poll-only keeps\n  // every durable behavior; failing the run would make a neighboring process's resource use kill\n  // runs that never touched the limit. Any other creation error still fails loudly.\n  let watcher: ReturnType<typeof watch> | undefined\n  try {\n    watcher = createWatch(workerCancellationsDir(dir), (_event, filename) => {\n      if (!active || (filename !== null && filename !== 'run.request.json')) return\n      try {\n        check()\n      } catch (error) {\n        fail(error)\n      }\n    })\n  } catch (error) {\n    const code = (error as NodeJS.ErrnoException).code\n    if (code !== 'EMFILE' && code !== 'ENOSPC') throw error\n  }\n  watcher?.on('error', fail)\n  // Filesystem notifications are advisory. Scan the same durable inbox when one is dropped —\n  // and carry the whole observer alone whenever the watcher above could not be created.\n  const fallback = setInterval(() => {\n    try {\n      check('fallback')\n    } catch (error) {\n      fail(error)\n    }\n  }, 100)\n  fallback.unref()\n  return {\n    check,\n    close(): void {\n      active = false\n      watcher?.close()\n      clearInterval(fallback)\n    },\n  }\n}\n\n/** One durable run-scoped cancel request: cancel the WHOLE run, not one worker. */\nexport interface RunCancelRequest {\n  /** Caller-minted stable operation identifier — the idempotency key of the whole operation. */\n  readonly operationId: string\n  /** ISO timestamp of the write. */\n  readonly at: string\n  /** Who asked — 'human', a brain label, a tool name. Provenance, not authorization. */\n  readonly source: string\n  /** Requested observation target, measured by the acknowledgement's deadlineExceeded field.\n   * The observer always cascades eagerly. This does not guarantee scheduler latency or cleanup. */\n  readonly deadlineMs?: number\n  /** Who stops the run. `cancelRun` requires it on every new request; it is optional here only\n   *  so a request written before that rule still reads. The settle record carries it. */\n  readonly operator?: string\n  readonly reason?: string\n}\n\n/**\n * The durable acknowledgement state for the run-scoped cancel operation, keyed by `operationId`.\n * The runtime is the ONLY writer; {@link cancelRun} only reads it.\n *\n * `effect` is the same {@link RetainedRunEffect} vocabulary the worker-scoped and retained-run\n * paths use, so the runtime has one spelling of the four cancellation states:\n *  - `'unknown'`          — no runtime has answered yet. Never a success.\n *  - `'cancel_requested'` — the root manager issued the run's cascading abort; the run's terminal\n *                           state is not yet observed.\n *  - `'cancelled'`        — the run reached its terminal cancelled state with confirmed teardown.\n *  - `'not_live'`         — the run was not live to cancel: it settled on its own despite the\n *                           request, or it ended before the request was applied.\n */\nexport interface RunCancellation {\n  /** Runtime path that issued the cascade. */\n  readonly path?: 'observer' | 'turn-boundary' | 'fallback'\n  /** Runtime clock elapsed between request timestamp and cascade application. */\n  readonly appliedAfterMs?: number\n  /** Whether application exceeded the requested deadlineMs; absent when no target was requested. */\n  readonly deadlineExceeded?: boolean\n  readonly operationId: string\n  readonly effect: RetainedRunEffect\n  /** ISO timestamp of the original request. */\n  readonly requestedAt: string\n  /** ISO timestamp of the runtime's most recent observation of this operation. */\n  readonly observedAt: string\n  /** The caller's reason, carried verbatim from the request. */\n  readonly reason?: string\n  /** The caller's operator identity, carried verbatim from the request. */\n  readonly operator?: string\n  /** The runtime's explanation of how it arrived at `effect`. */\n  readonly detail?: string\n}\n\n/** The run-scoped cancel request file of one run — one {@link RunCancelRequest}. */\nexport function runCancelRequestFile(eventDir: string): string {\n  return join(workerCancellationsDir(eventDir), 'run.request.json')\n}\n\n/** The run-scoped acknowledgement file of one run — one {@link RunCancellation}. */\nexport function runCancellationFile(eventDir: string): string {\n  return join(workerCancellationsDir(eventDir), 'run.json')\n}\n\n/** Read the run-scoped cancel request, or `undefined` when none was written. */\nexport function readRunCancelRequest(eventDir: string): RunCancelRequest | undefined {\n  const dir = workerCancellationsDir(eventDir)\n  const file = runCancelRequestFile(eventDir)\n  assertNoSymlinkDescendant(eventDir, dir, 'run cancel request')\n  assertNoSymlinkDescendant(eventDir, file, 'run cancel request')\n  if (!existsSync(file)) return undefined\n  const parsed = JSON.parse(readFileSync(file, 'utf8')) as Partial<RunCancelRequest>\n  if (!isRunCancelRequest(parsed)) {\n    throw new Error(`run cancel request '${file}' is not a complete RunCancelRequest`)\n  }\n  return parsed\n}\n\n/**\n * Read the acknowledgement for the run-scoped cancel operation. `undefined` when the runtime has\n * not answered. A record holding a DIFFERENT `operationId` belongs to another operation on the\n * same run — fail loud rather than answer for it.\n */\nexport function readRunCancellation(\n  eventDir: string,\n  operationId: string,\n): RunCancellation | undefined {\n  const dir = workerCancellationsDir(eventDir)\n  const file = runCancellationFile(eventDir)\n  assertNoSymlinkDescendant(eventDir, dir, 'run cancel acknowledgement')\n  assertNoSymlinkDescendant(eventDir, file, 'run cancel acknowledgement')\n  if (!existsSync(file)) return undefined\n  const parsed = JSON.parse(readFileSync(file, 'utf8')) as RunCancellation\n  if (parsed.operationId !== operationId) {\n    throw new Error(\n      `run cancel acknowledgement '${file}' holds operation '${parsed.operationId}', not ` +\n        `'${operationId}' — one run carries one run-scoped cancel operation`,\n    )\n  }\n  return parsed\n}\n\n/**\n * Durably write the run-scoped acknowledgement. The shared writer fsyncs the file and containing\n * directory, so a concurrent reader sees the prior complete record or the new complete record.\n *\n * @internal The runtime is the only intended writer; clients read via {@link readRunCancellation}\n * or {@link cancelRun}.\n */\nexport function writeRunCancellation(eventDir: string, record: RunCancellation): void {\n  const dir = workerCancellationsDir(eventDir)\n  assertNoSymlinkDescendant(eventDir, dir, 'run cancel acknowledgement')\n  mkdirSync(dir, { recursive: true })\n  assertNoSymlinkDescendant(eventDir, dir, 'run cancel acknowledgement')\n  const file = runCancellationFile(eventDir)\n  assertNoSymlinkDescendant(eventDir, file, 'run cancel acknowledgement')\n  writeAtomicDurableFile(file, `${JSON.stringify(record, null, 2)}\\n`, { mode: 0o600 })\n}\n\n/**\n * Request the cancellation of the WHOLE run, idempotently, and return the operation's current\n * durable state.\n *\n * The run-scoped twin of {@link cancelWorker}: write the request into the run's cancellation\n * directory, where the run's own root manager applies it — aborting the root through the one\n * cascade controller the run already has, so every live worker comes down with it. This function\n * never applies the cancellation itself; writing a request file is not an acknowledgement.\n *\n * Idempotency is a lookup: when an acknowledgement for `operationId` already exists it is returned\n * AS-IS and nothing is written. A retry that changes the source, reason, deadline, or operator\n * fails closed. A request the runtime has not answered yet returns `effect: 'unknown'` (never a\n * success); call again with the same `operationId` — or {@link readRunCancellation} — to read the\n * acknowledged result after a reconnect.\n *\n * A run carries ONE run-scoped operation: a second request under a different `operationId` throws\n * rather than silently replacing the pending one, because both would claim the same single abort.\n * Reopening a settled run (`supervisePursuit`'s `reopen`) moves that operation aside.\n *\n * A NEW request must name its `operator`, so every stop says who made it. A replay of a request\n * or acknowledgement written before that rule is answered as it was.\n */\nexport function cancelRun(\n  eventDir: string,\n  operationId: string,\n  options: {\n    readonly reason?: string\n    readonly source?: string\n    readonly deadlineMs?: number\n    readonly operator?: string\n  } = {},\n): RunCancellation {\n  if (\n    options.deadlineMs !== undefined &&\n    (!Number.isFinite(options.deadlineMs) || options.deadlineMs < 0)\n  ) {\n    throw new Error('cancelRun: deadlineMs must be a finite nonnegative number')\n  }\n  const opId = operationId.trim()\n  if (!opId) throw new Error('cancelRun: operationId is empty')\n  const pending = readRunCancelRequest(eventDir)\n  if (pending !== undefined && pending.operationId !== opId) {\n    throw new Error(\n      `cancelRun: run cancel '${pending.operationId}' is already pending for this run; ` +\n        `read it with readRunCancellation instead of issuing '${opId}'`,\n    )\n  }\n  const candidate = {\n    operationId: opId,\n    source: options.source ?? 'human',\n    ...(options.reason === undefined ? {} : { reason: options.reason }),\n    ...(options.deadlineMs === undefined ? {} : { deadlineMs: options.deadlineMs }),\n    ...(options.operator === undefined ? {} : { operator: options.operator }),\n  }\n  if (pending !== undefined) assertSameRunCancelRequest(pending, candidate)\n  const acknowledged = readRunCancellation(eventDir, opId)\n  if (acknowledged !== undefined) {\n    if (pending === undefined && options.source !== undefined) {\n      throw new Error(\n        `cancelRun: operation '${opId}' cannot verify source without its admitted request`,\n      )\n    }\n    assertRunCancellationMatchesCandidate(acknowledged, candidate)\n    return acknowledged\n  }\n  // A new request names who stops the run. A replay of a request written before this rule keeps\n  // its absent operator: it was admitted above against the file it replays.\n  if (pending === undefined && (options.operator === undefined || options.operator.trim() === '')) {\n    throw new Error('cancelRun: operator is required; name who stops the run')\n  }\n  const source = options.source ?? 'human'\n  const request: RunCancelRequest = pending ?? {\n    operationId: opId,\n    at: new Date().toISOString(),\n    source,\n    ...(options.reason === undefined ? {} : { reason: options.reason }),\n    ...(options.deadlineMs === undefined ? {} : { deadlineMs: options.deadlineMs }),\n    ...(options.operator === undefined ? {} : { operator: options.operator }),\n  }\n  if (pending === undefined) {\n    const dir = workerCancellationsDir(eventDir)\n    assertNoSymlinkDescendant(eventDir, dir, 'run cancel request')\n    mkdirSync(dir, { recursive: true })\n    assertNoSymlinkDescendant(eventDir, dir, 'run cancel request')\n    const file = runCancelRequestFile(eventDir)\n    assertNoSymlinkDescendant(eventDir, file, 'run cancel request')\n    writeAtomicDurableFile(file, `${JSON.stringify(request, null, 2)}\\n`, { mode: 0o600 })\n    appendWorkerControlEvent(eventDir, 'run', {\n      kind: 'run-cancel-request',\n      operationId: opId,\n      source,\n      queued: true,\n      ...(options.reason === undefined ? {} : { reason: options.reason }),\n      ...(options.deadlineMs === undefined ? {} : { deadlineMs: options.deadlineMs }),\n      ...(options.operator === undefined ? {} : { operator: options.operator }),\n    })\n  }\n  return {\n    operationId: opId,\n    effect: 'unknown',\n    requestedAt: request.at,\n    observedAt: request.at,\n    ...(request.reason === undefined ? {} : { reason: request.reason }),\n    ...(request.operator === undefined ? {} : { operator: request.operator }),\n    detail: 'request queued; no runtime acknowledger has answered yet',\n  }\n}\n\ntype RunCancelRequestCandidate = Omit<RunCancelRequest, 'at'>\n\nfunction assertSameRunCancelRequest(\n  existing: RunCancelRequest,\n  candidate: RunCancelRequestCandidate,\n): void {\n  if (existing.operationId !== candidate.operationId) {\n    throw new Error(`cancelRun: operation '${candidate.operationId}' has an id collision`)\n  }\n  if (existing.source !== candidate.source) {\n    throw new Error(\n      `cancelRun: operation '${candidate.operationId}' conflicts with its admitted request ` +\n        `(source '${existing.source}' != '${candidate.source}')`,\n    )\n  }\n  if (existing.deadlineMs !== candidate.deadlineMs) {\n    throw new Error(\n      `cancelRun: operation '${candidate.operationId}' conflicts with its admitted request (deadlineMs differs)`,\n    )\n  }\n  if (existing.reason !== candidate.reason) {\n    throw new Error(\n      `cancelRun: operation '${candidate.operationId}' conflicts with its admitted request ` +\n        `(reason differs)`,\n    )\n  }\n  if (existing.operator !== candidate.operator) {\n    throw new Error(\n      `cancelRun: operation '${candidate.operationId}' conflicts with its admitted request ` +\n        `(operator '${existing.operator}' != '${candidate.operator}')`,\n    )\n  }\n}\n\nfunction assertRunCancellationMatchesCandidate(\n  existing: RunCancellation,\n  candidate: RunCancelRequestCandidate,\n): void {\n  if (existing.reason !== candidate.reason) {\n    throw new Error(\n      `cancelRun: operation '${candidate.operationId}' conflicts with its acknowledgement ` +\n        `(reason differs)`,\n    )\n  }\n  // An acknowledgement written before acknowledgements carried the operator (0.251.0) names none\n  // even when its admitted request does. The request comparator has already held the candidate\n  // to that request, so a legacy record matches any candidate operator; a record that names one\n  // must name the same one.\n  if (existing.operator !== undefined && existing.operator !== candidate.operator) {\n    throw new Error(\n      `cancelRun: operation '${candidate.operationId}' conflicts with its acknowledgement ` +\n        `(operator '${existing.operator}' != '${candidate.operator}')`,\n    )\n  }\n}\n\nfunction isRunCancelRequest(value: Partial<RunCancelRequest>): value is RunCancelRequest {\n  return (\n    typeof value.operationId === 'string' &&\n    value.operationId.length > 0 &&\n    typeof value.at === 'string' &&\n    typeof value.source === 'string' &&\n    (value.deadlineMs === undefined ||\n      (Number.isFinite(value.deadlineMs) && value.deadlineMs >= 0)) &&\n    (value.reason === undefined || typeof value.reason === 'string') &&\n    (value.operator === undefined || typeof value.operator === 'string')\n  )\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuGA,SAAS,UAAU,OAAmC;CACpD,OAAO,MAAM,SAAS;AACxB;;AAGA,IAAa,sBAAb,MAA4D;CAI7B;CAH7B,eAAgC,uBAAuB;CACvD,aAAoC,QAAQ,QAAQ;CAEpD,YAAY,MAA+B;EAAd,KAAA,OAAA;CAAe;CAE5C,MAAM,OACJ,OACA,QACA,SACe;EACf,IAAI,CAAC,UAAU,OAAO,KAAK,GAAG;EAC9B,MAAM,SAAS,KAAK,WAAW,WAC7B,KAAK,mBAAmB,KAAK,aAAa,OAAO,QAAQ,OAAO,CAAC,CACnE;EACA,KAAK,aAAa,OAAO,YAAY,KAAA,CAAS;EAC9C,OAAO;CACT;CAEA,MAAc,aACZ,OACA,WACA,SACe;EACf,MAAM,KAAK,MAAM,OAAO;EACxB,MAAM,EAAE,YAAY,MAAM,OAAO;EACjC,MAAM,GAAG,MAAM,QAAQ,KAAK,IAAI,GAAG,EAAE,WAAW,KAAK,CAAC;EACtD,MAAM,SAAgC;GACpC;GACA,GAAI,YAAY,KAAA,IAAY,EAAE,QAAQ,IAAI,CAAC;GAC3C,GAAG;EACL;EACA,MAAM,wBAAwB,KAAK,MAAM,MAAM;CACjD;CAEA,MAAM,KAAK,OAAe,SAA2D;EACnF,OAAO,wBACL,uBAA4E,KAAK,MAAM,EACrF,cAAc,KAChB,CAAC,GACD,OACA,OACF;CACF;AACF;;AAGA,eAAsB,wBACpB,QAGA,OACA,SAC4B;CAC5B,MAAM,uBAAO,IAAI,IAA4B;CAC7C,MAAM,WAAkC,CAAC;CACzC,MAAM,cAA0C,CAAC;CACjD,MAAM,qBAA6C,CAAC;CACpD,MAAM,gBAA2C,CAAC;CAClD,MAAM,mBAAmD,CAAC;CAC1D,MAAM,OAAwB,CAAC;CAC/B,MAAM,UAA0C,CAAC;CACjD,IAAI,YAAY;CAChB,WAAW,MAAM,UAAU,QAAQ;EACjC,IAAI,OAAO,UAAU,OAAO;EAG5B,IAAI,YAAY,KAAA,KAAa,OAAO,YAAY,SAAS;EACzD,MAAM,SACJ,SAAS,SACL;GACE,KAAK,OAAO;GACZ,IAAI,OAAO;GACX,UAAU,OAAO;GACjB,OAAO,OAAO;EAChB,IACA;GACE,KAAK;GACL,IAAI,KAAK,MAAM,OAAO,EAAE;GACxB,UAAU;GACV,OAAO,OAAO;EAChB;EACN,QAAQ,KAAK,MAAM;EACnB,MAAM,KAAK,OAAO;EAClB,IAAI,GAAG,SAAS,sBAAsB,GAAG,SAAS,WAAW,GAAG,SAAS,UACvE,iBAAiB,KAAK,EAAE;EAE1B,IAAI,GAAG,SAAS,YACd,KAAK,IAAI,GAAG,SAAS,IAAI,GAAG,QAAQ;OAC/B,IAAI,GAAG,SAAS,WACrB,SAAS,KAAK,GAAG,OAAO;OACnB,IAAI,GAAG,SAAS,UAAU;GAI/B,MAAM,QAAQ,KAAK,IAAI,GAAG,UAAU;GACpC,IAAI,SAAS,GAAG,KAAK,WACnB,KAAK,IAAI,GAAG,YAAY;IACtB,GAAG;IACH,QAAQ;IACR,UAAU;KAAE,MAAM;KAAU,QAAQ,GAAG,KAAK;KAAa,IAAI;IAAY;GAC3E,CAAC;EAEL,OAAO,IAAI,GAAG,SAAS,eACrB,cAAc,KAAK,GAAG,WAAW;OAC5B,IAAI,GAAG,SAAS,QACrB,KAAK,KAAK,GAAG,IAAI;OACZ,IAAI,GAAG,SAAS,cACrB,YAAY,KAAK,GAAG,UAAU;OACzB,IAAI,GAAG,SAAS,mBACrB,mBAAmB,KAAK,GAAG,OAAO;CAEtC;CACA,OAAO;EACL,GAAI,YAAY,KAAA,IAAY,EAAE,QAAQ,IAAI,CAAC;EAC3C,WAAW,CAAC,GAAG,KAAK,OAAO,CAAC;EAC5B;EACA;EACA;EACA;EACA;EACA;EACA;CACF;AACF;;ACxNA,SAAgB,oBAAoB,MAAc,UAA2B;CAE3E,OAAO,GAAG,KAAK,GADA,yBAAyB;EAAE;EAAM;CAAS,CAClC,CAAC,CAAC,MAAM,CAAgB;AACjD;AAEA,SAAgB,eAAkB,OAAa;CAC7C,OAAO,iBAAiB,OAAO,WAAW;AAC5C;AAEA,SAAgB,sBAAsB,OAA8B;CAClE,OAAO,eAAe,mBAAmB,MAAM,KAAK,CAAC;AACvD;AAEA,SAAgB,mBACd,SACA,MACA,cACA,SACgF;CAChF,MAAM,YAAY,iBAAiB,KAAA,IAAY,KAAA,IAAY,eAAe,YAAY;CACtF,IAAI,cAAc,KAAA,GAAW;EAC3B,IAAI,OAAO,cAAc,YAAY,cAAc,QAAQ,MAAM,QAAQ,SAAS,GAChF,MAAM,IAAI,gBAAgB,GAAG,QAAQ,8BAA8B;EAErE,MAAM,UAAU,OAAO,KAAK,SAAS,CAAC,CAAC,QACpC,QAAQ,QAAQ,qBAAqB,QAAQ,aAChD;EACA,IAAI,QAAQ,SAAS,GACnB,MAAM,IAAI,gBAAgB,GAAG,QAAQ,8BAA8B,QAAQ,KAAK,IAAI,GAAG;CAE3F;CACA,MAAM,WAAW,4BAA4B;EAAE;EAAS;CAAU,GAAG,IAAI;CACzE,IAAI,CAAC,UAAU,iBAAiB,CAAC,SAAS,YACxC,MAAM,IAAI,gBACR,GAAG,QAAQ,+EACb;CAEF,MAAM,MACJ,SAAS,mBAAmB,SAAS,cACjC,OAAO,OAAO;EACZ,GAAI,SAAS,kBAAkB,EAAE,iBAAiB,SAAS,gBAAgB,IAAI,CAAC;EAChF,GAAI,SAAS,cAAc,EAAE,aAAa,SAAS,YAAY,IAAI,CAAC;CACtE,CAAC,IACD,KAAA;CACN,OAAO;EAAE;EAAU,GAAI,MAAM,EAAE,IAAI,IAAI,CAAC;CAAG;AAC7C;AAEA,SAAgB,sBAAsB,UAAyC;CAC7E,OAAO,yBAAyB;EAAE,MAAM;EAAmB;CAAS,CAAC;AACvE;AAEA,SAAgB,uBACd,eACA,UACA,SACA,OACQ;CACR,OAAO,yBAAyB;EAC9B,MAAM;EACN;EACA;EACA,YAAY;GACV,IAAI,QAAQ;GACZ,OAAO,QAAQ;GACf,KAAK,QAAQ,OAAO;GACpB;EACF;CACF,CAAC;AACH;AAEA,SAAgB,wBAAwB,QAA4B,OAAuB;CACzF,OAAO,yBACL,WAAW,KAAA,IACP;EAAE,MAAM;EAA2B;EAAO,OAAO,WAAW;CAAE,IAC9D;EAAE,MAAM;EAAyB;EAAO,QAAQ,QAAQ,MAAM;CAAE,CACtE;AACF;AAEA,SAAgB,0BACd,cACA,eACA,cACQ;CACR,OAAO,yBAAyB;EAC9B,MAAM;EACN;EACA;EACA;CACF,CAAC;AACH;;;AAIA,SAAgB,oBACd,SACA,OACc;CACd,MAAM,eACJ,MAAM,SAAS,aAAa,MAAM,OAAO,YAAY,cAC1C;EACL,MAAM,EAAE,SAAS,UAAU,GAAG,WAAW,MAAM;EAC/C,OAAO;GAAE,MAAM;GAAoB;EAAO;CAC5C,EAAA,CAAG,IACH;CACN,OAAO,yBAAyB;EAC9B,MAAM;EACN,cAAc,QAAQ;EACtB,SAAS,QAAQ;EACjB,OAAO,iBAAiB,cAAc,uCAAuC;CAC/E,CAAC;AACH;;;ACvHA,SAAgB,qBACd,KACA,UACA,KACA,OAAkD,iBACrB;CAC7B,MAAM,UAAU,qBAAqB,GAAG;CACxC,IAAI,YAAY,KAAA,GAAW,OAAO,KAAA;CAClC,MAAM,QAAQ,oBAAoB,KAAK,QAAQ,WAAW;CAG1D,IAAI,OAAO,WAAW,oBACpB,SAAS,QAAQ,UAAU,wBAAwB,OAAO;CAE5D,IAAI,UAAU,KAAA,GAAW,OAAO;CAChC,SAAS,QAAQ,UAAU,wBAAwB,OAAO;CAC1D,MAAM,aAAa,IAAI;CACvB,MAAM,iBAAiB,KAAK,IAAI,GAAG,KAAK,MAAM,UAAU,IAAI,KAAK,MAAM,QAAQ,EAAE,CAAC;CAClF,MAAM,SAA0B;EAC9B,aAAa,QAAQ;EACrB,QAAQ;EACR;EACA;EACA,GAAI,QAAQ,eAAe,KAAA,IACvB,CAAC,IACD,EAAE,kBAAkB,iBAAiB,QAAQ,WAAW;EAC5D,aAAa,QAAQ;EACrB;EACA,GAAI,QAAQ,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,QAAQ,OAAO;EACjE,GAAI,QAAQ,aAAa,KAAA,IAAY,CAAC,IAAI,EAAE,UAAU,QAAQ,SAAS;EACvE,QAAQ;CACV;CACA,qBAAqB,KAAK,MAAM;CAChC,OAAO;AACT;;AAGA,SAAgB,qBACd,KACA,UACA,cAA4B,OAC5B;CACA,UAAU,uBAAuB,GAAG,GAAG,EAAE,WAAW,KAAK,CAAC;CAC1D,IAAI,SAAS;CACb,IAAI;CAGJ,IAAI,UAAU;CACd,MAAM,aAAa,QAAgB,YAAqC;EACtE,IAAI,SAAS;EACb,UAAU;EACV,SAAS,QAAQ,OAAO;CAC1B;CACA,MAAM,SAAS,OAAgC,eAAqB;EAClE,IAAI,YAAY,KAAA,GAAW,MAAM;EACjC,IAAI,QAAQ,qBAAqB,KAAK,kCAAiB,IAAI,KAAK,EAAA,CAAE,YAAY,GAAG,IAAI;CACvF;CACA,MAAM,QAAQ,UAAyB;EACrC,IAAI,CAAC,QAAQ;EACb,UAAU;EACV,SAAS,6CAA6C,OAAO,KAAK,GAAG;CACvE;CAOA,IAAI;CACJ,IAAI;EACF,UAAU,YAAY,uBAAuB,GAAG,IAAI,QAAQ,aAAa;GACvE,IAAI,CAAC,UAAW,aAAa,QAAQ,aAAa,oBAAqB;GACvE,IAAI;IACF,MAAM;GACR,SAAS,OAAO;IACd,KAAK,KAAK;GACZ;EACF,CAAC;CACH,SAAS,OAAO;EACd,MAAM,OAAQ,MAAgC;EAC9C,IAAI,SAAS,YAAY,SAAS,UAAU,MAAM;CACpD;CACA,SAAS,GAAG,SAAS,IAAI;CAGzB,MAAM,WAAW,kBAAkB;EACjC,IAAI;GACF,MAAM,UAAU;EAClB,SAAS,OAAO;GACd,KAAK,KAAK;EACZ;CACF,GAAG,GAAG;CACN,SAAS,MAAM;CACf,OAAO;EACL;EACA,QAAc;GACZ,SAAS;GACT,SAAS,MAAM;GACf,cAAc,QAAQ;EACxB;CACF;AACF;;AAsDA,SAAgB,qBAAqB,UAA0B;CAC7D,OAAO,KAAK,uBAAuB,QAAQ,GAAG,kBAAkB;AAClE;;AAGA,SAAgB,oBAAoB,UAA0B;CAC5D,OAAO,KAAK,uBAAuB,QAAQ,GAAG,UAAU;AAC1D;;AAGA,SAAgB,qBAAqB,UAAgD;CACnF,MAAM,MAAM,uBAAuB,QAAQ;CAC3C,MAAM,OAAO,qBAAqB,QAAQ;CAC1C,0BAA0B,UAAU,KAAK,oBAAoB;CAC7D,0BAA0B,UAAU,MAAM,oBAAoB;CAC9D,IAAI,CAAC,WAAW,IAAI,GAAG,OAAO,KAAA;CAC9B,MAAM,SAAS,KAAK,MAAM,aAAa,MAAM,MAAM,CAAC;CACpD,IAAI,CAAC,mBAAmB,MAAM,GAC5B,MAAM,IAAI,MAAM,uBAAuB,KAAK,qCAAqC;CAEnF,OAAO;AACT;;;;;;AAOA,SAAgB,oBACd,UACA,aAC6B;CAC7B,MAAM,MAAM,uBAAuB,QAAQ;CAC3C,MAAM,OAAO,oBAAoB,QAAQ;CACzC,0BAA0B,UAAU,KAAK,4BAA4B;CACrE,0BAA0B,UAAU,MAAM,4BAA4B;CACtE,IAAI,CAAC,WAAW,IAAI,GAAG,OAAO,KAAA;CAC9B,MAAM,SAAS,KAAK,MAAM,aAAa,MAAM,MAAM,CAAC;CACpD,IAAI,OAAO,gBAAgB,aACzB,MAAM,IAAI,MACR,+BAA+B,KAAK,qBAAqB,OAAO,YAAY,UACtE,YAAY,oDACpB;CAEF,OAAO;AACT;;;;;;;;AASA,SAAgB,qBAAqB,UAAkB,QAA+B;CACpF,MAAM,MAAM,uBAAuB,QAAQ;CAC3C,0BAA0B,UAAU,KAAK,4BAA4B;CACrE,UAAU,KAAK,EAAE,WAAW,KAAK,CAAC;CAClC,0BAA0B,UAAU,KAAK,4BAA4B;CACrE,MAAM,OAAO,oBAAoB,QAAQ;CACzC,0BAA0B,UAAU,MAAM,4BAA4B;CACtE,uBAAuB,MAAM,GAAG,KAAK,UAAU,QAAQ,MAAM,CAAC,EAAE,KAAK,EAAE,MAAM,IAAM,CAAC;AACtF;;;;;;;;;;;;;;;;;;;;;;;AAwBA,SAAgB,UACd,UACA,aACA,UAKI,CAAC,GACY;CACjB,IACE,QAAQ,eAAe,KAAA,MACtB,CAAC,OAAO,SAAS,QAAQ,UAAU,KAAK,QAAQ,aAAa,IAE9D,MAAM,IAAI,MAAM,2DAA2D;CAE7E,MAAM,OAAO,YAAY,KAAK;CAC9B,IAAI,CAAC,MAAM,MAAM,IAAI,MAAM,iCAAiC;CAC5D,MAAM,UAAU,qBAAqB,QAAQ;CAC7C,IAAI,YAAY,KAAA,KAAa,QAAQ,gBAAgB,MACnD,MAAM,IAAI,MACR,0BAA0B,QAAQ,YAAY,0FACY,KAAK,EACjE;CAEF,MAAM,YAAY;EAChB,aAAa;EACb,QAAQ,QAAQ,UAAU;EAC1B,GAAI,QAAQ,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,QAAQ,OAAO;EACjE,GAAI,QAAQ,eAAe,KAAA,IAAY,CAAC,IAAI,EAAE,YAAY,QAAQ,WAAW;EAC7E,GAAI,QAAQ,aAAa,KAAA,IAAY,CAAC,IAAI,EAAE,UAAU,QAAQ,SAAS;CACzE;CACA,IAAI,YAAY,KAAA,GAAW,2BAA2B,SAAS,SAAS;CACxE,MAAM,eAAe,oBAAoB,UAAU,IAAI;CACvD,IAAI,iBAAiB,KAAA,GAAW;EAC9B,IAAI,YAAY,KAAA,KAAa,QAAQ,WAAW,KAAA,GAC9C,MAAM,IAAI,MACR,yBAAyB,KAAK,oDAChC;EAEF,sCAAsC,cAAc,SAAS;EAC7D,OAAO;CACT;CAGA,IAAI,YAAY,KAAA,MAAc,QAAQ,aAAa,KAAA,KAAa,QAAQ,SAAS,KAAK,MAAM,KAC1F,MAAM,IAAI,MAAM,yDAAyD;CAE3E,MAAM,SAAS,QAAQ,UAAU;CACjC,MAAM,UAA4B,WAAW;EAC3C,aAAa;EACb,qBAAI,IAAI,KAAK,EAAA,CAAE,YAAY;EAC3B;EACA,GAAI,QAAQ,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,QAAQ,OAAO;EACjE,GAAI,QAAQ,eAAe,KAAA,IAAY,CAAC,IAAI,EAAE,YAAY,QAAQ,WAAW;EAC7E,GAAI,QAAQ,aAAa,KAAA,IAAY,CAAC,IAAI,EAAE,UAAU,QAAQ,SAAS;CACzE;CACA,IAAI,YAAY,KAAA,GAAW;EACzB,MAAM,MAAM,uBAAuB,QAAQ;EAC3C,0BAA0B,UAAU,KAAK,oBAAoB;EAC7D,UAAU,KAAK,EAAE,WAAW,KAAK,CAAC;EAClC,0BAA0B,UAAU,KAAK,oBAAoB;EAC7D,MAAM,OAAO,qBAAqB,QAAQ;EAC1C,0BAA0B,UAAU,MAAM,oBAAoB;EAC9D,uBAAuB,MAAM,GAAG,KAAK,UAAU,SAAS,MAAM,CAAC,EAAE,KAAK,EAAE,MAAM,IAAM,CAAC;EACrF,yBAAyB,UAAU,OAAO;GACxC,MAAM;GACN,aAAa;GACb;GACA,QAAQ;GACR,GAAI,QAAQ,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,QAAQ,OAAO;GACjE,GAAI,QAAQ,eAAe,KAAA,IAAY,CAAC,IAAI,EAAE,YAAY,QAAQ,WAAW;GAC7E,GAAI,QAAQ,aAAa,KAAA,IAAY,CAAC,IAAI,EAAE,UAAU,QAAQ,SAAS;EACzE,CAAC;CACH;CACA,OAAO;EACL,aAAa;EACb,QAAQ;EACR,aAAa,QAAQ;EACrB,YAAY,QAAQ;EACpB,GAAI,QAAQ,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,QAAQ,OAAO;EACjE,GAAI,QAAQ,aAAa,KAAA,IAAY,CAAC,IAAI,EAAE,UAAU,QAAQ,SAAS;EACvE,QAAQ;CACV;AACF;AAIA,SAAS,2BACP,UACA,WACM;CACN,IAAI,SAAS,gBAAgB,UAAU,aACrC,MAAM,IAAI,MAAM,yBAAyB,UAAU,YAAY,sBAAsB;CAEvF,IAAI,SAAS,WAAW,UAAU,QAChC,MAAM,IAAI,MACR,yBAAyB,UAAU,YAAY,iDACjC,SAAS,OAAO,QAAQ,UAAU,OAAO,GACzD;CAEF,IAAI,SAAS,eAAe,UAAU,YACpC,MAAM,IAAI,MACR,yBAAyB,UAAU,YAAY,2DACjD;CAEF,IAAI,SAAS,WAAW,UAAU,QAChC,MAAM,IAAI,MACR,yBAAyB,UAAU,YAAY,uDAEjD;CAEF,IAAI,SAAS,aAAa,UAAU,UAClC,MAAM,IAAI,MACR,yBAAyB,UAAU,YAAY,mDAC/B,SAAS,SAAS,QAAQ,UAAU,SAAS,GAC/D;AAEJ;AAEA,SAAS,sCACP,UACA,WACM;CACN,IAAI,SAAS,WAAW,UAAU,QAChC,MAAM,IAAI,MACR,yBAAyB,UAAU,YAAY,sDAEjD;CAMF,IAAI,SAAS,aAAa,KAAA,KAAa,SAAS,aAAa,UAAU,UACrE,MAAM,IAAI,MACR,yBAAyB,UAAU,YAAY,kDAC/B,SAAS,SAAS,QAAQ,UAAU,SAAS,GAC/D;AAEJ;AAEA,SAAS,mBAAmB,OAA6D;CACvF,OACE,OAAO,MAAM,gBAAgB,YAC7B,MAAM,YAAY,SAAS,KAC3B,OAAO,MAAM,OAAO,YACpB,OAAO,MAAM,WAAW,aACvB,MAAM,eAAe,KAAA,KACnB,OAAO,SAAS,MAAM,UAAU,KAAK,MAAM,cAAc,OAC3D,MAAM,WAAW,KAAA,KAAa,OAAO,MAAM,WAAW,cACtD,MAAM,aAAa,KAAA,KAAa,OAAO,MAAM,aAAa;AAE/D"}
+{"version":3,"file":"run-cancellation-BCuu6khW.js","names":[],"sources":["../src/runtime/supervise/coordination-log.ts","../src/runtime/supervise/supervise-identity.ts","../src/runtime/supervise/run-cancellation.ts"],"sourcesContent":["/**\n * Durable side-log for coordination evidence the spawn journal does not own: questions, analyst\n * findings, answer decisions, authorized continuation receipts, delivery-attempt markers, and\n * delivery outcomes. A durable run\n * (`supervise({ runDir })`) appends them as they publish and loads them on resume, so a restarted\n * coordinator retains the exact evidence produced by prior processes.\n *\n * Answer down-events also fold status on load: a question answered before the crash reloads as\n * `answered`, not as a re-blocking `open`. Settled events are skipped (the spawn journal is their\n * ledger). A receipt followed by an attempt but no outcome proves the process died in the delivery\n * window; that outcome remains unknown and no prior instruction is auto-delivered.\n *\n * JSONL, one fsynced record per event, keyed by `runId` — several runs may share one log file\n * exactly as they share one spawn-journal file.\n *\n * @experimental\n */\n\nimport { appendCommittedJsonLine, readCommittedJsonLines } from '../../durable/jsonl-file'\nimport { captureRunWriteContext } from '../../durable/run-fence'\nimport type {\n  AnalystFindingEvent,\n  DefinedAnalystRecord,\n} from '../../mcp/tools/coordination-analysts'\nimport type { CoordinationEvent } from '../../mcp/tools/coordination-events'\nimport type { ContinuationInstruction } from '../../mcp/tools/coordination-messages'\nimport type {\n  QuestionEscalationRecord,\n  QuestionRecord,\n} from '../../mcp/tools/coordination-questions'\nimport type { BusRecord } from './event-bus'\nimport type { PeerMailEvent } from './peer-mail'\n\n/** Stable identity of the supervisor that owns one coordination stream. High-level supervision\n * derives it from the exact root/child execution identity plus its parent assignment. */\nexport type CoordinationOwnerId = string\n\n/** Durable delivery evidence retained in commit order. An attempt without a later event carrying\n * the same `receiptId` has an unknown outcome after a crash and is never replayed. */\nexport type CoordinationDeliveryEvidence = Extract<\n  CoordinationEvent,\n  { readonly type: 'delivery-attempt' | 'steer' | 'answer' }\n>\n\n/** Coordination evidence loaded from prior processes of one durable supervised run. */\nexport interface PriorCoordination {\n  /** The owner filter used for this replay. Omitted only for the compatibility all-owner read. */\n  readonly ownerId?: CoordinationOwnerId\n  /** Every question the prior process raised, with answer-status folded in, raise order. */\n  readonly questions: ReadonlyArray<QuestionRecord>\n  /** Every analyst finding the prior process published, publish order. */\n  readonly findings: ReadonlyArray<AnalystFindingEvent>\n  /** Every `ask_parent` escalation the prior process made, raise order. An undelivered one names a\n   * question the run raised that nothing above it received — retained so a resuming operator sees\n   * it, never auto-redelivered. */\n  readonly escalations: ReadonlyArray<QuestionEscalationRecord>\n  /** Every lens the prior process DEFINED at run time, definition order. The exact authored bytes\n   * and their digest, so an invented lens can be re-registered and any finding it produced can be\n   * traced to the words that produced it. Re-registration is the owner's decision, never automatic:\n   * the registry may have changed between processes. */\n  readonly analystDefinitions: ReadonlyArray<DefinedAnalystRecord>\n  /** Every authorized continuation, in commit order. These are evidence, never replayed to a new\n   * worker automatically. */\n  readonly continuations: ReadonlyArray<ContinuationInstruction>\n  /** Delivery intent and result records in commit order, linked to receipts by `receiptId`. */\n  readonly deliveryEvidence: ReadonlyArray<CoordinationDeliveryEvidence>\n  /** Every peer-mail attempt the prior process made, delivered and refused alike, in commit order.\n   * Evidence of what siblings told each other; never replayed into a new worker's inbox. */\n  readonly mail: ReadonlyArray<PeerMailEvent>\n  /** Exact source-bus stamps in durable append order. Bus `seq` restarts with each process; append\n   * order remains the cross-process replay order. */\n  readonly records: ReadonlyArray<BusRecord<CoordinationEvent>>\n}\n\n/** The durable coordination side-log seam. `append` records one bus event (kinds it does not\n *  persist are ignored); `load` replays a run's prior records folded into `PriorCoordination`. */\nexport interface CoordinationLog {\n  append(\n    runId: string,\n    record: BusRecord<CoordinationEvent>,\n    ownerId?: CoordinationOwnerId,\n  ): Promise<void>\n  load(runId: string, ownerId?: CoordinationOwnerId): Promise<PriorCoordination>\n}\n\ntype CoordinationLogRecord = {\n  readonly runId: string\n  readonly ownerId?: CoordinationOwnerId\n  readonly seq: number\n  readonly at: number\n  readonly priority: number\n  readonly event: CoordinationEvent\n}\n\ntype LegacyCoordinationLogRecord = {\n  readonly runId: string\n  readonly ownerId?: CoordinationOwnerId\n  readonly at: string\n  readonly event: CoordinationEvent\n}\n\n/** Persist prior context plus exact continuation authorization, attempt, and result evidence.\n * Settlements have their own journal. */\nfunction persisted(event: CoordinationEvent): boolean {\n  return event.type !== 'settled'\n}\n\n/** FS-backed `CoordinationLog`: append-only JSONL, fsynced per record. */\nexport class FileCoordinationLog implements CoordinationLog {\n  private readonly writeContext = captureRunWriteContext()\n  private appendTail: Promise<void> = Promise.resolve()\n\n  constructor(private readonly path: string) {}\n\n  async append(\n    runId: string,\n    record: BusRecord<CoordinationEvent>,\n    ownerId?: CoordinationOwnerId,\n  ): Promise<void> {\n    if (!persisted(record.event)) return\n    const append = this.appendTail.then(() =>\n      this.writeContext(() => this.appendRecord(runId, record, ownerId)),\n    )\n    this.appendTail = append.catch(() => undefined)\n    return append\n  }\n\n  private async appendRecord(\n    runId: string,\n    busRecord: BusRecord<CoordinationEvent>,\n    ownerId?: CoordinationOwnerId,\n  ): Promise<void> {\n    const fs = await import('node:fs/promises')\n    const { dirname } = await import('node:path')\n    await fs.mkdir(dirname(this.path), { recursive: true })\n    const record: CoordinationLogRecord = {\n      runId,\n      ...(ownerId !== undefined ? { ownerId } : {}),\n      ...busRecord,\n    }\n    await appendCommittedJsonLine(this.path, record)\n  }\n\n  async load(runId: string, ownerId?: CoordinationOwnerId): Promise<PriorCoordination> {\n    return foldCoordinationRecords(\n      readCommittedJsonLines<CoordinationLogRecord | LegacyCoordinationLogRecord>(this.path, {\n        allowMissing: true,\n      }),\n      runId,\n      ownerId,\n    )\n  }\n}\n\n/** @internal Shared replay semantics for file and SQL coordination evidence. */\nexport async function foldCoordinationRecords(\n  source:\n    | Iterable<CoordinationLogRecord | LegacyCoordinationLogRecord>\n    | AsyncIterable<CoordinationLogRecord | LegacyCoordinationLogRecord>,\n  runId: string,\n  ownerId?: CoordinationOwnerId,\n): Promise<PriorCoordination> {\n  const byId = new Map<string, QuestionRecord>()\n  const findings: AnalystFindingEvent[] = []\n  const escalations: QuestionEscalationRecord[] = []\n  const analystDefinitions: DefinedAnalystRecord[] = []\n  const continuations: ContinuationInstruction[] = []\n  const deliveryEvidence: CoordinationDeliveryEvidence[] = []\n  const mail: PeerMailEvent[] = []\n  const records: BusRecord<CoordinationEvent>[] = []\n  let legacySeq = 0\n  for await (const stored of source) {\n    if (stored.runId !== runId) continue\n    // Omitting ownerId preserves the historical all-run read for direct consumers. Runtime always\n    // supplies one, so root and nested supervisors never receive one another's evidence.\n    if (ownerId !== undefined && stored.ownerId !== ownerId) continue\n    const record: BusRecord<CoordinationEvent> =\n      'seq' in stored\n        ? {\n            seq: stored.seq,\n            at: stored.at,\n            priority: stored.priority,\n            event: stored.event,\n          }\n        : {\n            seq: legacySeq++,\n            at: Date.parse(stored.at),\n            priority: 0,\n            event: stored.event,\n          }\n    records.push(record)\n    const ev = record.event\n    if (ev.type === 'delivery-attempt' || ev.type === 'steer' || ev.type === 'answer') {\n      deliveryEvidence.push(ev)\n    }\n    if (ev.type === 'question') {\n      byId.set(ev.question.id, ev.question)\n    } else if (ev.type === 'finding') {\n      findings.push(ev.finding)\n    } else if (ev.type === 'answer') {\n      // Only accepted delivery resolves a blocking question. Authorization and an attempted\n      // refusal remain evidence, but cannot turn \"worker never received the answer\" into answered\n      // state on replay. `by` is not on the wire; prior-run is the honest attribution.\n      const prior = byId.get(ev.questionId)\n      if (prior && ev.down.delivered) {\n        byId.set(ev.questionId, {\n          ...prior,\n          status: 'answered',\n          decision: { kind: 'answer', answer: ev.down.instruction, by: 'prior-run' },\n        })\n      }\n    } else if (ev.type === 'instruction') {\n      continuations.push(ev.instruction)\n    } else if (ev.type === 'mail') {\n      mail.push(ev.mail)\n    } else if (ev.type === 'escalation') {\n      escalations.push(ev.escalation)\n    } else if (ev.type === 'analyst-defined') {\n      analystDefinitions.push(ev.analyst)\n    }\n  }\n  return {\n    ...(ownerId !== undefined ? { ownerId } : {}),\n    questions: [...byId.values()],\n    findings,\n    escalations,\n    analystDefinitions,\n    continuations,\n    deliveryEvidence,\n    mail,\n    records,\n  }\n}\n","import { randomUUID } from 'node:crypto'\nimport { resolve } from 'node:path'\nimport {\n  type AgentProfile,\n  agentProfileSchema,\n  canonicalCandidateDigest,\n  type Sha256Digest,\n} from '@tangle-network/agent-interface'\nimport { ValidationError } from '../../errors'\nimport type { WorkerSpawnContext } from '../../mcp/tools/coordination-contracts'\nimport type { CoordinationEvent } from '../../mcp/tools/coordination-events'\nimport { deriveNodeExecutionIdentity } from './scope'\nimport { detachedSnapshot } from './snapshot'\nimport type { SupervisorNodeContext } from './supervisor-agent'\nimport type { AgentExecutionRef, NodeExecutionIdentity } from './types'\n\nexport function externalExecutionId(kind: string, identity: unknown): string {\n  const digest = canonicalCandidateDigest({ kind, identity })\n  return `${kind}-${digest.slice('sha256:'.length)}`\n}\n\nexport function freezeDetached<T>(value: T): T {\n  return detachedSnapshot(value, 'supervise')\n}\n\nexport function freezeDetachedProfile(value: unknown): AgentProfile {\n  return freezeDetached(agentProfileSchema.parse(value))\n}\n\nexport function canonicalExecution(\n  profile: AgentProfile,\n  task: unknown,\n  rawExecution: AgentExecutionRef | undefined,\n  context: string,\n): { readonly identity: NodeExecutionIdentity; readonly ref?: AgentExecutionRef } {\n  const execution = rawExecution === undefined ? undefined : freezeDetached(rawExecution)\n  if (execution !== undefined) {\n    if (typeof execution !== 'object' || execution === null || Array.isArray(execution)) {\n      throw new ValidationError(`${context}: execution must be an object`)\n    }\n    const unknown = Object.keys(execution).filter(\n      (key) => key !== 'candidateDigest' && key !== 'correlation',\n    )\n    if (unknown.length > 0) {\n      throw new ValidationError(`${context}: unknown execution fields: ${unknown.join(', ')}`)\n    }\n  }\n  const identity = deriveNodeExecutionIdentity({ profile, execution }, task)\n  if (!identity?.profileDigest || !identity.taskDigest) {\n    throw new ValidationError(\n      `${context}: profile and task must be finite, acyclic canonical JSON for durable identity`,\n    )\n  }\n  const ref: AgentExecutionRef | undefined =\n    identity.candidateDigest || identity.correlation\n      ? Object.freeze({\n          ...(identity.candidateDigest ? { candidateDigest: identity.candidateDigest } : {}),\n          ...(identity.correlation ? { correlation: identity.correlation } : {}),\n        })\n      : undefined\n  return { identity, ...(ref ? { ref } : {}) }\n}\n\nexport function rootCoordinationOwner(identity: NodeExecutionIdentity): string {\n  return canonicalCandidateDigest({ kind: 'supervisor-root', identity })\n}\n\nexport function childCoordinationOwner(\n  parentOwnerId: string,\n  identity: NodeExecutionIdentity,\n  context: WorkerSpawnContext,\n  depth: number,\n): string {\n  return canonicalCandidateDigest({\n    kind: 'supervisor-child',\n    parentOwnerId,\n    identity,\n    assignment: {\n      id: context.assignmentId,\n      label: context.label,\n      key: context.key ?? null,\n      depth,\n    },\n  })\n}\n\nexport function supervisionRunNamespace(runDir: string | undefined, runId: string): string {\n  return canonicalCandidateDigest(\n    runDir === undefined\n      ? { kind: 'supervise-ephemeral-run', runId, nonce: randomUUID() }\n      : { kind: 'supervise-durable-run', runId, runDir: resolve(runDir) },\n  )\n}\n\nexport function workerAssignmentNamespace(\n  runNamespace: string,\n  parentOwnerId: string,\n  assignmentId: string,\n): string {\n  return canonicalCandidateDigest({\n    kind: 'supervise-worker-assignment',\n    runNamespace,\n    parentOwnerId,\n    assignmentId,\n  })\n}\n\n/** Hash only durable coordination meaning. Bus sequence/timestamp are delivery metadata and a\n * resumed projection's marker describes the reader, not the original settlement. */\nexport function coordinationEventId(\n  context: SupervisorNodeContext,\n  event: CoordinationEvent,\n): Sha256Digest {\n  const durableEvent =\n    event.type === 'settled' && event.worker.resumed === true\n      ? (() => {\n          const { resumed: _resumed, ...worker } = event.worker\n          return { type: 'settled' as const, worker }\n        })()\n      : event\n  return canonicalCandidateDigest({\n    kind: 'supervise-coordination-event',\n    runNamespace: context.runNamespace,\n    ownerId: context.ownerId,\n    event: detachedSnapshot(durableEvent, 'supervise coordination event identity'),\n  })\n}\n","import { existsSync, mkdirSync, readFileSync, watch } from 'node:fs'\nimport { join } from 'node:path'\nimport type { RetainedRunEffect } from '../retained-run-types'\nimport { assertNoSymlinkDescendant, writeAtomicDurableFile } from './durable-file'\nimport { appendWorkerControlEvent, workerCancellationsDir } from './run-layout'\n\n/** Apply a durable request through the run's existing abort controller. */\nexport function applyRunCancellation(\n  dir: string,\n  abortRun: (reason: string, request?: RunCancelRequest) => void,\n  now: () => string,\n  path: 'observer' | 'turn-boundary' | 'fallback' = 'turn-boundary',\n): RunCancellation | undefined {\n  const request = readRunCancelRequest(dir)\n  if (request === undefined) return undefined\n  const prior = readRunCancellation(dir, request.operationId)\n  // A request acknowledged only as `cancel_requested` is still owed by this run: the process\n  // that issued the abort died before the run settled. Abort again; the record stands.\n  if (prior?.effect === 'cancel_requested') {\n    abortRun(request.reason ?? 'run cancel requested', request)\n  }\n  if (prior !== undefined) return prior\n  abortRun(request.reason ?? 'run cancel requested', request)\n  const observedAt = now()\n  const appliedAfterMs = Math.max(0, Date.parse(observedAt) - Date.parse(request.at))\n  const record: RunCancellation = {\n    operationId: request.operationId,\n    effect: 'cancel_requested',\n    path,\n    appliedAfterMs,\n    ...(request.deadlineMs === undefined\n      ? {}\n      : { deadlineExceeded: appliedAfterMs > request.deadlineMs }),\n    requestedAt: request.at,\n    observedAt,\n    ...(request.reason === undefined ? {} : { reason: request.reason }),\n    ...(request.operator === undefined ? {} : { operator: request.operator }),\n    detail: 'root abort issued to the whole run; termination not yet proven',\n  }\n  writeRunCancellation(dir, record)\n  return record\n}\n\n/** External drivers may remain silent indefinitely, so turn boundaries cannot observe control. */\nexport function watchRunCancellation(\n  dir: string,\n  abortRun: (reason: string, request?: RunCancelRequest) => void,\n  createWatch: typeof watch = watch,\n) {\n  mkdirSync(workerCancellationsDir(dir), { recursive: true })\n  let active = true\n  let failure: unknown\n  // One observer aborts its run once: a request this process already applied, or one a dead\n  // process acknowledged, is not re-issued on every poll.\n  let aborted = false\n  const abortOnce = (reason: string, request?: RunCancelRequest): void => {\n    if (aborted) return\n    aborted = true\n    abortRun(reason, request)\n  }\n  const check = (path: 'observer' | 'fallback' = 'observer'): void => {\n    if (failure !== undefined) throw failure\n    if (active) applyRunCancellation(dir, abortOnce, () => new Date().toISOString(), path)\n  }\n  const fail = (error: unknown): void => {\n    if (!active) return\n    failure = error\n    abortRun(`durable run cancellation observer failed: ${String(error)}`)\n  }\n  // The watcher is an optimization over the poll loop below (instant pickup instead of ≤100 ms).\n  // Creating it can fail for reasons that say NOTHING about this run: the host's inotify budget is\n  // exhausted (EMFILE — a shared box with many agents held ~110 of the 128 default user instances\n  // when this was measured), or the kernel caps watches (ENOSPC). Degrading to poll-only keeps\n  // every durable behavior; failing the run would make a neighboring process's resource use kill\n  // runs that never touched the limit. Any other creation error still fails loudly.\n  let watcher: ReturnType<typeof watch> | undefined\n  try {\n    watcher = createWatch(workerCancellationsDir(dir), (_event, filename) => {\n      if (!active || (filename !== null && filename !== 'run.request.json')) return\n      try {\n        check()\n      } catch (error) {\n        fail(error)\n      }\n    })\n  } catch (error) {\n    const code = (error as NodeJS.ErrnoException).code\n    if (code !== 'EMFILE' && code !== 'ENOSPC') throw error\n  }\n  watcher?.on('error', fail)\n  // Filesystem notifications are advisory. Scan the same durable inbox when one is dropped —\n  // and carry the whole observer alone whenever the watcher above could not be created.\n  const fallback = setInterval(() => {\n    try {\n      check('fallback')\n    } catch (error) {\n      fail(error)\n    }\n  }, 100)\n  fallback.unref()\n  return {\n    check,\n    close(): void {\n      active = false\n      watcher?.close()\n      clearInterval(fallback)\n    },\n  }\n}\n\n/** One durable run-scoped cancel request: cancel the WHOLE run, not one worker. */\nexport interface RunCancelRequest {\n  /** Caller-minted stable operation identifier — the idempotency key of the whole operation. */\n  readonly operationId: string\n  /** ISO timestamp of the write. */\n  readonly at: string\n  /** Who asked — 'human', a brain label, a tool name. Provenance, not authorization. */\n  readonly source: string\n  /** Requested observation target, measured by the acknowledgement's deadlineExceeded field.\n   * The observer always cascades eagerly. This does not guarantee scheduler latency or cleanup. */\n  readonly deadlineMs?: number\n  /** Who stops the run. `cancelRun` requires it on every new request; it is optional here only\n   *  so a request written before that rule still reads. The settle record carries it. */\n  readonly operator?: string\n  readonly reason?: string\n}\n\n/**\n * The durable acknowledgement state for the run-scoped cancel operation, keyed by `operationId`.\n * The runtime is the ONLY writer; {@link cancelRun} only reads it.\n *\n * `effect` is the same {@link RetainedRunEffect} vocabulary the worker-scoped and retained-run\n * paths use, so the runtime has one spelling of the four cancellation states:\n *  - `'unknown'`          — no runtime has answered yet. Never a success.\n *  - `'cancel_requested'` — the root manager issued the run's cascading abort; the run's terminal\n *                           state is not yet observed.\n *  - `'cancelled'`        — the run reached its terminal cancelled state with confirmed teardown.\n *  - `'not_live'`         — the run was not live to cancel: it settled on its own despite the\n *                           request, or it ended before the request was applied.\n */\nexport interface RunCancellation {\n  /** Runtime path that issued the cascade. */\n  readonly path?: 'observer' | 'turn-boundary' | 'fallback'\n  /** Runtime clock elapsed between request timestamp and cascade application. */\n  readonly appliedAfterMs?: number\n  /** Whether application exceeded the requested deadlineMs; absent when no target was requested. */\n  readonly deadlineExceeded?: boolean\n  readonly operationId: string\n  readonly effect: RetainedRunEffect\n  /** ISO timestamp of the original request. */\n  readonly requestedAt: string\n  /** ISO timestamp of the runtime's most recent observation of this operation. */\n  readonly observedAt: string\n  /** The caller's reason, carried verbatim from the request. */\n  readonly reason?: string\n  /** The caller's operator identity, carried verbatim from the request. */\n  readonly operator?: string\n  /** The runtime's explanation of how it arrived at `effect`. */\n  readonly detail?: string\n}\n\n/** The run-scoped cancel request file of one run — one {@link RunCancelRequest}. */\nexport function runCancelRequestFile(eventDir: string): string {\n  return join(workerCancellationsDir(eventDir), 'run.request.json')\n}\n\n/** The run-scoped acknowledgement file of one run — one {@link RunCancellation}. */\nexport function runCancellationFile(eventDir: string): string {\n  return join(workerCancellationsDir(eventDir), 'run.json')\n}\n\n/** Read the run-scoped cancel request, or `undefined` when none was written. */\nexport function readRunCancelRequest(eventDir: string): RunCancelRequest | undefined {\n  const dir = workerCancellationsDir(eventDir)\n  const file = runCancelRequestFile(eventDir)\n  assertNoSymlinkDescendant(eventDir, dir, 'run cancel request')\n  assertNoSymlinkDescendant(eventDir, file, 'run cancel request')\n  if (!existsSync(file)) return undefined\n  const parsed = JSON.parse(readFileSync(file, 'utf8')) as Partial<RunCancelRequest>\n  if (!isRunCancelRequest(parsed)) {\n    throw new Error(`run cancel request '${file}' is not a complete RunCancelRequest`)\n  }\n  return parsed\n}\n\n/**\n * Read the acknowledgement for the run-scoped cancel operation. `undefined` when the runtime has\n * not answered. A record holding a DIFFERENT `operationId` belongs to another operation on the\n * same run — fail loud rather than answer for it.\n */\nexport function readRunCancellation(\n  eventDir: string,\n  operationId: string,\n): RunCancellation | undefined {\n  const dir = workerCancellationsDir(eventDir)\n  const file = runCancellationFile(eventDir)\n  assertNoSymlinkDescendant(eventDir, dir, 'run cancel acknowledgement')\n  assertNoSymlinkDescendant(eventDir, file, 'run cancel acknowledgement')\n  if (!existsSync(file)) return undefined\n  const parsed = JSON.parse(readFileSync(file, 'utf8')) as RunCancellation\n  if (parsed.operationId !== operationId) {\n    throw new Error(\n      `run cancel acknowledgement '${file}' holds operation '${parsed.operationId}', not ` +\n        `'${operationId}' — one run carries one run-scoped cancel operation`,\n    )\n  }\n  return parsed\n}\n\n/**\n * Durably write the run-scoped acknowledgement. The shared writer fsyncs the file and containing\n * directory, so a concurrent reader sees the prior complete record or the new complete record.\n *\n * @internal The runtime is the only intended writer; clients read via {@link readRunCancellation}\n * or {@link cancelRun}.\n */\nexport function writeRunCancellation(eventDir: string, record: RunCancellation): void {\n  const dir = workerCancellationsDir(eventDir)\n  assertNoSymlinkDescendant(eventDir, dir, 'run cancel acknowledgement')\n  mkdirSync(dir, { recursive: true })\n  assertNoSymlinkDescendant(eventDir, dir, 'run cancel acknowledgement')\n  const file = runCancellationFile(eventDir)\n  assertNoSymlinkDescendant(eventDir, file, 'run cancel acknowledgement')\n  writeAtomicDurableFile(file, `${JSON.stringify(record, null, 2)}\\n`, { mode: 0o600 })\n}\n\n/**\n * Request the cancellation of the WHOLE run, idempotently, and return the operation's current\n * durable state.\n *\n * The run-scoped twin of {@link cancelWorker}: write the request into the run's cancellation\n * directory, where the run's own root manager applies it — aborting the root through the one\n * cascade controller the run already has, so every live worker comes down with it. This function\n * never applies the cancellation itself; writing a request file is not an acknowledgement.\n *\n * Idempotency is a lookup: when an acknowledgement for `operationId` already exists it is returned\n * AS-IS and nothing is written. A retry that changes the source, reason, deadline, or operator\n * fails closed. A request the runtime has not answered yet returns `effect: 'unknown'` (never a\n * success); call again with the same `operationId` — or {@link readRunCancellation} — to read the\n * acknowledged result after a reconnect.\n *\n * A run carries ONE run-scoped operation: a second request under a different `operationId` throws\n * rather than silently replacing the pending one, because both would claim the same single abort.\n * Reopening a settled run (`supervisePursuit`'s `reopen`) moves that operation aside.\n *\n * A NEW request must name its `operator`, so every stop says who made it. A replay of a request\n * or acknowledgement written before that rule is answered as it was.\n */\nexport function cancelRun(\n  eventDir: string,\n  operationId: string,\n  options: {\n    readonly reason?: string\n    readonly source?: string\n    readonly deadlineMs?: number\n    readonly operator?: string\n  } = {},\n): RunCancellation {\n  if (\n    options.deadlineMs !== undefined &&\n    (!Number.isFinite(options.deadlineMs) || options.deadlineMs < 0)\n  ) {\n    throw new Error('cancelRun: deadlineMs must be a finite nonnegative number')\n  }\n  const opId = operationId.trim()\n  if (!opId) throw new Error('cancelRun: operationId is empty')\n  const pending = readRunCancelRequest(eventDir)\n  if (pending !== undefined && pending.operationId !== opId) {\n    throw new Error(\n      `cancelRun: run cancel '${pending.operationId}' is already pending for this run; ` +\n        `read it with readRunCancellation instead of issuing '${opId}'`,\n    )\n  }\n  const candidate = {\n    operationId: opId,\n    source: options.source ?? 'human',\n    ...(options.reason === undefined ? {} : { reason: options.reason }),\n    ...(options.deadlineMs === undefined ? {} : { deadlineMs: options.deadlineMs }),\n    ...(options.operator === undefined ? {} : { operator: options.operator }),\n  }\n  if (pending !== undefined) assertSameRunCancelRequest(pending, candidate)\n  const acknowledged = readRunCancellation(eventDir, opId)\n  if (acknowledged !== undefined) {\n    if (pending === undefined && options.source !== undefined) {\n      throw new Error(\n        `cancelRun: operation '${opId}' cannot verify source without its admitted request`,\n      )\n    }\n    assertRunCancellationMatchesCandidate(acknowledged, candidate)\n    return acknowledged\n  }\n  // A new request names who stops the run. A replay of a request written before this rule keeps\n  // its absent operator: it was admitted above against the file it replays.\n  if (pending === undefined && (options.operator === undefined || options.operator.trim() === '')) {\n    throw new Error('cancelRun: operator is required; name who stops the run')\n  }\n  const source = options.source ?? 'human'\n  const request: RunCancelRequest = pending ?? {\n    operationId: opId,\n    at: new Date().toISOString(),\n    source,\n    ...(options.reason === undefined ? {} : { reason: options.reason }),\n    ...(options.deadlineMs === undefined ? {} : { deadlineMs: options.deadlineMs }),\n    ...(options.operator === undefined ? {} : { operator: options.operator }),\n  }\n  if (pending === undefined) {\n    const dir = workerCancellationsDir(eventDir)\n    assertNoSymlinkDescendant(eventDir, dir, 'run cancel request')\n    mkdirSync(dir, { recursive: true })\n    assertNoSymlinkDescendant(eventDir, dir, 'run cancel request')\n    const file = runCancelRequestFile(eventDir)\n    assertNoSymlinkDescendant(eventDir, file, 'run cancel request')\n    writeAtomicDurableFile(file, `${JSON.stringify(request, null, 2)}\\n`, { mode: 0o600 })\n    appendWorkerControlEvent(eventDir, 'run', {\n      kind: 'run-cancel-request',\n      operationId: opId,\n      source,\n      queued: true,\n      ...(options.reason === undefined ? {} : { reason: options.reason }),\n      ...(options.deadlineMs === undefined ? {} : { deadlineMs: options.deadlineMs }),\n      ...(options.operator === undefined ? {} : { operator: options.operator }),\n    })\n  }\n  return {\n    operationId: opId,\n    effect: 'unknown',\n    requestedAt: request.at,\n    observedAt: request.at,\n    ...(request.reason === undefined ? {} : { reason: request.reason }),\n    ...(request.operator === undefined ? {} : { operator: request.operator }),\n    detail: 'request queued; no runtime acknowledger has answered yet',\n  }\n}\n\ntype RunCancelRequestCandidate = Omit<RunCancelRequest, 'at'>\n\nfunction assertSameRunCancelRequest(\n  existing: RunCancelRequest,\n  candidate: RunCancelRequestCandidate,\n): void {\n  if (existing.operationId !== candidate.operationId) {\n    throw new Error(`cancelRun: operation '${candidate.operationId}' has an id collision`)\n  }\n  if (existing.source !== candidate.source) {\n    throw new Error(\n      `cancelRun: operation '${candidate.operationId}' conflicts with its admitted request ` +\n        `(source '${existing.source}' != '${candidate.source}')`,\n    )\n  }\n  if (existing.deadlineMs !== candidate.deadlineMs) {\n    throw new Error(\n      `cancelRun: operation '${candidate.operationId}' conflicts with its admitted request (deadlineMs differs)`,\n    )\n  }\n  if (existing.reason !== candidate.reason) {\n    throw new Error(\n      `cancelRun: operation '${candidate.operationId}' conflicts with its admitted request ` +\n        `(reason differs)`,\n    )\n  }\n  if (existing.operator !== candidate.operator) {\n    throw new Error(\n      `cancelRun: operation '${candidate.operationId}' conflicts with its admitted request ` +\n        `(operator '${existing.operator}' != '${candidate.operator}')`,\n    )\n  }\n}\n\nfunction assertRunCancellationMatchesCandidate(\n  existing: RunCancellation,\n  candidate: RunCancelRequestCandidate,\n): void {\n  if (existing.reason !== candidate.reason) {\n    throw new Error(\n      `cancelRun: operation '${candidate.operationId}' conflicts with its acknowledgement ` +\n        `(reason differs)`,\n    )\n  }\n  // An acknowledgement written before acknowledgements carried the operator (0.251.0) names none\n  // even when its admitted request does. The request comparator has already held the candidate\n  // to that request, so a legacy record matches any candidate operator; a record that names one\n  // must name the same one.\n  if (existing.operator !== undefined && existing.operator !== candidate.operator) {\n    throw new Error(\n      `cancelRun: operation '${candidate.operationId}' conflicts with its acknowledgement ` +\n        `(operator '${existing.operator}' != '${candidate.operator}')`,\n    )\n  }\n}\n\nfunction isRunCancelRequest(value: Partial<RunCancelRequest>): value is RunCancelRequest {\n  return (\n    typeof value.operationId === 'string' &&\n    value.operationId.length > 0 &&\n    typeof value.at === 'string' &&\n    typeof value.source === 'string' &&\n    (value.deadlineMs === undefined ||\n      (Number.isFinite(value.deadlineMs) && value.deadlineMs >= 0)) &&\n    (value.reason === undefined || typeof value.reason === 'string') &&\n    (value.operator === undefined || typeof value.operator === 'string')\n  )\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuGA,SAAS,UAAU,OAAmC;CACpD,OAAO,MAAM,SAAS;AACxB;;AAGA,IAAa,sBAAb,MAA4D;CAI7B;CAH7B,eAAgC,uBAAuB;CACvD,aAAoC,QAAQ,QAAQ;CAEpD,YAAY,MAA+B;EAAd,KAAA,OAAA;CAAe;CAE5C,MAAM,OACJ,OACA,QACA,SACe;EACf,IAAI,CAAC,UAAU,OAAO,KAAK,GAAG;EAC9B,MAAM,SAAS,KAAK,WAAW,WAC7B,KAAK,mBAAmB,KAAK,aAAa,OAAO,QAAQ,OAAO,CAAC,CACnE;EACA,KAAK,aAAa,OAAO,YAAY,KAAA,CAAS;EAC9C,OAAO;CACT;CAEA,MAAc,aACZ,OACA,WACA,SACe;EACf,MAAM,KAAK,MAAM,OAAO;EACxB,MAAM,EAAE,YAAY,MAAM,OAAO;EACjC,MAAM,GAAG,MAAM,QAAQ,KAAK,IAAI,GAAG,EAAE,WAAW,KAAK,CAAC;EACtD,MAAM,SAAgC;GACpC;GACA,GAAI,YAAY,KAAA,IAAY,EAAE,QAAQ,IAAI,CAAC;GAC3C,GAAG;EACL;EACA,MAAM,wBAAwB,KAAK,MAAM,MAAM;CACjD;CAEA,MAAM,KAAK,OAAe,SAA2D;EACnF,OAAO,wBACL,uBAA4E,KAAK,MAAM,EACrF,cAAc,KAChB,CAAC,GACD,OACA,OACF;CACF;AACF;;AAGA,eAAsB,wBACpB,QAGA,OACA,SAC4B;CAC5B,MAAM,uBAAO,IAAI,IAA4B;CAC7C,MAAM,WAAkC,CAAC;CACzC,MAAM,cAA0C,CAAC;CACjD,MAAM,qBAA6C,CAAC;CACpD,MAAM,gBAA2C,CAAC;CAClD,MAAM,mBAAmD,CAAC;CAC1D,MAAM,OAAwB,CAAC;CAC/B,MAAM,UAA0C,CAAC;CACjD,IAAI,YAAY;CAChB,WAAW,MAAM,UAAU,QAAQ;EACjC,IAAI,OAAO,UAAU,OAAO;EAG5B,IAAI,YAAY,KAAA,KAAa,OAAO,YAAY,SAAS;EACzD,MAAM,SACJ,SAAS,SACL;GACE,KAAK,OAAO;GACZ,IAAI,OAAO;GACX,UAAU,OAAO;GACjB,OAAO,OAAO;EAChB,IACA;GACE,KAAK;GACL,IAAI,KAAK,MAAM,OAAO,EAAE;GACxB,UAAU;GACV,OAAO,OAAO;EAChB;EACN,QAAQ,KAAK,MAAM;EACnB,MAAM,KAAK,OAAO;EAClB,IAAI,GAAG,SAAS,sBAAsB,GAAG,SAAS,WAAW,GAAG,SAAS,UACvE,iBAAiB,KAAK,EAAE;EAE1B,IAAI,GAAG,SAAS,YACd,KAAK,IAAI,GAAG,SAAS,IAAI,GAAG,QAAQ;OAC/B,IAAI,GAAG,SAAS,WACrB,SAAS,KAAK,GAAG,OAAO;OACnB,IAAI,GAAG,SAAS,UAAU;GAI/B,MAAM,QAAQ,KAAK,IAAI,GAAG,UAAU;GACpC,IAAI,SAAS,GAAG,KAAK,WACnB,KAAK,IAAI,GAAG,YAAY;IACtB,GAAG;IACH,QAAQ;IACR,UAAU;KAAE,MAAM;KAAU,QAAQ,GAAG,KAAK;KAAa,IAAI;IAAY;GAC3E,CAAC;EAEL,OAAO,IAAI,GAAG,SAAS,eACrB,cAAc,KAAK,GAAG,WAAW;OAC5B,IAAI,GAAG,SAAS,QACrB,KAAK,KAAK,GAAG,IAAI;OACZ,IAAI,GAAG,SAAS,cACrB,YAAY,KAAK,GAAG,UAAU;OACzB,IAAI,GAAG,SAAS,mBACrB,mBAAmB,KAAK,GAAG,OAAO;CAEtC;CACA,OAAO;EACL,GAAI,YAAY,KAAA,IAAY,EAAE,QAAQ,IAAI,CAAC;EAC3C,WAAW,CAAC,GAAG,KAAK,OAAO,CAAC;EAC5B;EACA;EACA;EACA;EACA;EACA;EACA;CACF;AACF;;ACxNA,SAAgB,oBAAoB,MAAc,UAA2B;CAE3E,OAAO,GAAG,KAAK,GADA,yBAAyB;EAAE;EAAM;CAAS,CAClC,CAAC,CAAC,MAAM,CAAgB;AACjD;AAEA,SAAgB,eAAkB,OAAa;CAC7C,OAAO,iBAAiB,OAAO,WAAW;AAC5C;AAEA,SAAgB,sBAAsB,OAA8B;CAClE,OAAO,eAAe,mBAAmB,MAAM,KAAK,CAAC;AACvD;AAEA,SAAgB,mBACd,SACA,MACA,cACA,SACgF;CAChF,MAAM,YAAY,iBAAiB,KAAA,IAAY,KAAA,IAAY,eAAe,YAAY;CACtF,IAAI,cAAc,KAAA,GAAW;EAC3B,IAAI,OAAO,cAAc,YAAY,cAAc,QAAQ,MAAM,QAAQ,SAAS,GAChF,MAAM,IAAI,gBAAgB,GAAG,QAAQ,8BAA8B;EAErE,MAAM,UAAU,OAAO,KAAK,SAAS,CAAC,CAAC,QACpC,QAAQ,QAAQ,qBAAqB,QAAQ,aAChD;EACA,IAAI,QAAQ,SAAS,GACnB,MAAM,IAAI,gBAAgB,GAAG,QAAQ,8BAA8B,QAAQ,KAAK,IAAI,GAAG;CAE3F;CACA,MAAM,WAAW,4BAA4B;EAAE;EAAS;CAAU,GAAG,IAAI;CACzE,IAAI,CAAC,UAAU,iBAAiB,CAAC,SAAS,YACxC,MAAM,IAAI,gBACR,GAAG,QAAQ,+EACb;CAEF,MAAM,MACJ,SAAS,mBAAmB,SAAS,cACjC,OAAO,OAAO;EACZ,GAAI,SAAS,kBAAkB,EAAE,iBAAiB,SAAS,gBAAgB,IAAI,CAAC;EAChF,GAAI,SAAS,cAAc,EAAE,aAAa,SAAS,YAAY,IAAI,CAAC;CACtE,CAAC,IACD,KAAA;CACN,OAAO;EAAE;EAAU,GAAI,MAAM,EAAE,IAAI,IAAI,CAAC;CAAG;AAC7C;AAEA,SAAgB,sBAAsB,UAAyC;CAC7E,OAAO,yBAAyB;EAAE,MAAM;EAAmB;CAAS,CAAC;AACvE;AAEA,SAAgB,uBACd,eACA,UACA,SACA,OACQ;CACR,OAAO,yBAAyB;EAC9B,MAAM;EACN;EACA;EACA,YAAY;GACV,IAAI,QAAQ;GACZ,OAAO,QAAQ;GACf,KAAK,QAAQ,OAAO;GACpB;EACF;CACF,CAAC;AACH;AAEA,SAAgB,wBAAwB,QAA4B,OAAuB;CACzF,OAAO,yBACL,WAAW,KAAA,IACP;EAAE,MAAM;EAA2B;EAAO,OAAO,WAAW;CAAE,IAC9D;EAAE,MAAM;EAAyB;EAAO,QAAQ,QAAQ,MAAM;CAAE,CACtE;AACF;AAEA,SAAgB,0BACd,cACA,eACA,cACQ;CACR,OAAO,yBAAyB;EAC9B,MAAM;EACN;EACA;EACA;CACF,CAAC;AACH;;;AAIA,SAAgB,oBACd,SACA,OACc;CACd,MAAM,eACJ,MAAM,SAAS,aAAa,MAAM,OAAO,YAAY,cAC1C;EACL,MAAM,EAAE,SAAS,UAAU,GAAG,WAAW,MAAM;EAC/C,OAAO;GAAE,MAAM;GAAoB;EAAO;CAC5C,EAAA,CAAG,IACH;CACN,OAAO,yBAAyB;EAC9B,MAAM;EACN,cAAc,QAAQ;EACtB,SAAS,QAAQ;EACjB,OAAO,iBAAiB,cAAc,uCAAuC;CAC/E,CAAC;AACH;;;ACvHA,SAAgB,qBACd,KACA,UACA,KACA,OAAkD,iBACrB;CAC7B,MAAM,UAAU,qBAAqB,GAAG;CACxC,IAAI,YAAY,KAAA,GAAW,OAAO,KAAA;CAClC,MAAM,QAAQ,oBAAoB,KAAK,QAAQ,WAAW;CAG1D,IAAI,OAAO,WAAW,oBACpB,SAAS,QAAQ,UAAU,wBAAwB,OAAO;CAE5D,IAAI,UAAU,KAAA,GAAW,OAAO;CAChC,SAAS,QAAQ,UAAU,wBAAwB,OAAO;CAC1D,MAAM,aAAa,IAAI;CACvB,MAAM,iBAAiB,KAAK,IAAI,GAAG,KAAK,MAAM,UAAU,IAAI,KAAK,MAAM,QAAQ,EAAE,CAAC;CAClF,MAAM,SAA0B;EAC9B,aAAa,QAAQ;EACrB,QAAQ;EACR;EACA;EACA,GAAI,QAAQ,eAAe,KAAA,IACvB,CAAC,IACD,EAAE,kBAAkB,iBAAiB,QAAQ,WAAW;EAC5D,aAAa,QAAQ;EACrB;EACA,GAAI,QAAQ,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,QAAQ,OAAO;EACjE,GAAI,QAAQ,aAAa,KAAA,IAAY,CAAC,IAAI,EAAE,UAAU,QAAQ,SAAS;EACvE,QAAQ;CACV;CACA,qBAAqB,KAAK,MAAM;CAChC,OAAO;AACT;;AAGA,SAAgB,qBACd,KACA,UACA,cAA4B,OAC5B;CACA,UAAU,uBAAuB,GAAG,GAAG,EAAE,WAAW,KAAK,CAAC;CAC1D,IAAI,SAAS;CACb,IAAI;CAGJ,IAAI,UAAU;CACd,MAAM,aAAa,QAAgB,YAAqC;EACtE,IAAI,SAAS;EACb,UAAU;EACV,SAAS,QAAQ,OAAO;CAC1B;CACA,MAAM,SAAS,OAAgC,eAAqB;EAClE,IAAI,YAAY,KAAA,GAAW,MAAM;EACjC,IAAI,QAAQ,qBAAqB,KAAK,kCAAiB,IAAI,KAAK,EAAA,CAAE,YAAY,GAAG,IAAI;CACvF;CACA,MAAM,QAAQ,UAAyB;EACrC,IAAI,CAAC,QAAQ;EACb,UAAU;EACV,SAAS,6CAA6C,OAAO,KAAK,GAAG;CACvE;CAOA,IAAI;CACJ,IAAI;EACF,UAAU,YAAY,uBAAuB,GAAG,IAAI,QAAQ,aAAa;GACvE,IAAI,CAAC,UAAW,aAAa,QAAQ,aAAa,oBAAqB;GACvE,IAAI;IACF,MAAM;GACR,SAAS,OAAO;IACd,KAAK,KAAK;GACZ;EACF,CAAC;CACH,SAAS,OAAO;EACd,MAAM,OAAQ,MAAgC;EAC9C,IAAI,SAAS,YAAY,SAAS,UAAU,MAAM;CACpD;CACA,SAAS,GAAG,SAAS,IAAI;CAGzB,MAAM,WAAW,kBAAkB;EACjC,IAAI;GACF,MAAM,UAAU;EAClB,SAAS,OAAO;GACd,KAAK,KAAK;EACZ;CACF,GAAG,GAAG;CACN,SAAS,MAAM;CACf,OAAO;EACL;EACA,QAAc;GACZ,SAAS;GACT,SAAS,MAAM;GACf,cAAc,QAAQ;EACxB;CACF;AACF;;AAsDA,SAAgB,qBAAqB,UAA0B;CAC7D,OAAO,KAAK,uBAAuB,QAAQ,GAAG,kBAAkB;AAClE;;AAGA,SAAgB,oBAAoB,UAA0B;CAC5D,OAAO,KAAK,uBAAuB,QAAQ,GAAG,UAAU;AAC1D;;AAGA,SAAgB,qBAAqB,UAAgD;CACnF,MAAM,MAAM,uBAAuB,QAAQ;CAC3C,MAAM,OAAO,qBAAqB,QAAQ;CAC1C,0BAA0B,UAAU,KAAK,oBAAoB;CAC7D,0BAA0B,UAAU,MAAM,oBAAoB;CAC9D,IAAI,CAAC,WAAW,IAAI,GAAG,OAAO,KAAA;CAC9B,MAAM,SAAS,KAAK,MAAM,aAAa,MAAM,MAAM,CAAC;CACpD,IAAI,CAAC,mBAAmB,MAAM,GAC5B,MAAM,IAAI,MAAM,uBAAuB,KAAK,qCAAqC;CAEnF,OAAO;AACT;;;;;;AAOA,SAAgB,oBACd,UACA,aAC6B;CAC7B,MAAM,MAAM,uBAAuB,QAAQ;CAC3C,MAAM,OAAO,oBAAoB,QAAQ;CACzC,0BAA0B,UAAU,KAAK,4BAA4B;CACrE,0BAA0B,UAAU,MAAM,4BAA4B;CACtE,IAAI,CAAC,WAAW,IAAI,GAAG,OAAO,KAAA;CAC9B,MAAM,SAAS,KAAK,MAAM,aAAa,MAAM,MAAM,CAAC;CACpD,IAAI,OAAO,gBAAgB,aACzB,MAAM,IAAI,MACR,+BAA+B,KAAK,qBAAqB,OAAO,YAAY,UACtE,YAAY,oDACpB;CAEF,OAAO;AACT;;;;;;;;AASA,SAAgB,qBAAqB,UAAkB,QAA+B;CACpF,MAAM,MAAM,uBAAuB,QAAQ;CAC3C,0BAA0B,UAAU,KAAK,4BAA4B;CACrE,UAAU,KAAK,EAAE,WAAW,KAAK,CAAC;CAClC,0BAA0B,UAAU,KAAK,4BAA4B;CACrE,MAAM,OAAO,oBAAoB,QAAQ;CACzC,0BAA0B,UAAU,MAAM,4BAA4B;CACtE,uBAAuB,MAAM,GAAG,KAAK,UAAU,QAAQ,MAAM,CAAC,EAAE,KAAK,EAAE,MAAM,IAAM,CAAC;AACtF;;;;;;;;;;;;;;;;;;;;;;;AAwBA,SAAgB,UACd,UACA,aACA,UAKI,CAAC,GACY;CACjB,IACE,QAAQ,eAAe,KAAA,MACtB,CAAC,OAAO,SAAS,QAAQ,UAAU,KAAK,QAAQ,aAAa,IAE9D,MAAM,IAAI,MAAM,2DAA2D;CAE7E,MAAM,OAAO,YAAY,KAAK;CAC9B,IAAI,CAAC,MAAM,MAAM,IAAI,MAAM,iCAAiC;CAC5D,MAAM,UAAU,qBAAqB,QAAQ;CAC7C,IAAI,YAAY,KAAA,KAAa,QAAQ,gBAAgB,MACnD,MAAM,IAAI,MACR,0BAA0B,QAAQ,YAAY,0FACY,KAAK,EACjE;CAEF,MAAM,YAAY;EAChB,aAAa;EACb,QAAQ,QAAQ,UAAU;EAC1B,GAAI,QAAQ,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,QAAQ,OAAO;EACjE,GAAI,QAAQ,eAAe,KAAA,IAAY,CAAC,IAAI,EAAE,YAAY,QAAQ,WAAW;EAC7E,GAAI,QAAQ,aAAa,KAAA,IAAY,CAAC,IAAI,EAAE,UAAU,QAAQ,SAAS;CACzE;CACA,IAAI,YAAY,KAAA,GAAW,2BAA2B,SAAS,SAAS;CACxE,MAAM,eAAe,oBAAoB,UAAU,IAAI;CACvD,IAAI,iBAAiB,KAAA,GAAW;EAC9B,IAAI,YAAY,KAAA,KAAa,QAAQ,WAAW,KAAA,GAC9C,MAAM,IAAI,MACR,yBAAyB,KAAK,oDAChC;EAEF,sCAAsC,cAAc,SAAS;EAC7D,OAAO;CACT;CAGA,IAAI,YAAY,KAAA,MAAc,QAAQ,aAAa,KAAA,KAAa,QAAQ,SAAS,KAAK,MAAM,KAC1F,MAAM,IAAI,MAAM,yDAAyD;CAE3E,MAAM,SAAS,QAAQ,UAAU;CACjC,MAAM,UAA4B,WAAW;EAC3C,aAAa;EACb,qBAAI,IAAI,KAAK,EAAA,CAAE,YAAY;EAC3B;EACA,GAAI,QAAQ,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,QAAQ,OAAO;EACjE,GAAI,QAAQ,eAAe,KAAA,IAAY,CAAC,IAAI,EAAE,YAAY,QAAQ,WAAW;EAC7E,GAAI,QAAQ,aAAa,KAAA,IAAY,CAAC,IAAI,EAAE,UAAU,QAAQ,SAAS;CACzE;CACA,IAAI,YAAY,KAAA,GAAW;EACzB,MAAM,MAAM,uBAAuB,QAAQ;EAC3C,0BAA0B,UAAU,KAAK,oBAAoB;EAC7D,UAAU,KAAK,EAAE,WAAW,KAAK,CAAC;EAClC,0BAA0B,UAAU,KAAK,oBAAoB;EAC7D,MAAM,OAAO,qBAAqB,QAAQ;EAC1C,0BAA0B,UAAU,MAAM,oBAAoB;EAC9D,uBAAuB,MAAM,GAAG,KAAK,UAAU,SAAS,MAAM,CAAC,EAAE,KAAK,EAAE,MAAM,IAAM,CAAC;EACrF,yBAAyB,UAAU,OAAO;GACxC,MAAM;GACN,aAAa;GACb;GACA,QAAQ;GACR,GAAI,QAAQ,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,QAAQ,OAAO;GACjE,GAAI,QAAQ,eAAe,KAAA,IAAY,CAAC,IAAI,EAAE,YAAY,QAAQ,WAAW;GAC7E,GAAI,QAAQ,aAAa,KAAA,IAAY,CAAC,IAAI,EAAE,UAAU,QAAQ,SAAS;EACzE,CAAC;CACH;CACA,OAAO;EACL,aAAa;EACb,QAAQ;EACR,aAAa,QAAQ;EACrB,YAAY,QAAQ;EACpB,GAAI,QAAQ,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,QAAQ,OAAO;EACjE,GAAI,QAAQ,aAAa,KAAA,IAAY,CAAC,IAAI,EAAE,UAAU,QAAQ,SAAS;EACvE,QAAQ;CACV;AACF;AAIA,SAAS,2BACP,UACA,WACM;CACN,IAAI,SAAS,gBAAgB,UAAU,aACrC,MAAM,IAAI,MAAM,yBAAyB,UAAU,YAAY,sBAAsB;CAEvF,IAAI,SAAS,WAAW,UAAU,QAChC,MAAM,IAAI,MACR,yBAAyB,UAAU,YAAY,iDACjC,SAAS,OAAO,QAAQ,UAAU,OAAO,GACzD;CAEF,IAAI,SAAS,eAAe,UAAU,YACpC,MAAM,IAAI,MACR,yBAAyB,UAAU,YAAY,2DACjD;CAEF,IAAI,SAAS,WAAW,UAAU,QAChC,MAAM,IAAI,MACR,yBAAyB,UAAU,YAAY,uDAEjD;CAEF,IAAI,SAAS,aAAa,UAAU,UAClC,MAAM,IAAI,MACR,yBAAyB,UAAU,YAAY,mDAC/B,SAAS,SAAS,QAAQ,UAAU,SAAS,GAC/D;AAEJ;AAEA,SAAS,sCACP,UACA,WACM;CACN,IAAI,SAAS,WAAW,UAAU,QAChC,MAAM,IAAI,MACR,yBAAyB,UAAU,YAAY,sDAEjD;CAMF,IAAI,SAAS,aAAa,KAAA,KAAa,SAAS,aAAa,UAAU,UACrE,MAAM,IAAI,MACR,yBAAyB,UAAU,YAAY,kDAC/B,SAAS,SAAS,QAAQ,UAAU,SAAS,GAC/D;AAEJ;AAEA,SAAS,mBAAmB,OAA6D;CACvF,OACE,OAAO,MAAM,gBAAgB,YAC7B,MAAM,YAAY,SAAS,KAC3B,OAAO,MAAM,OAAO,YACpB,OAAO,MAAM,WAAW,aACvB,MAAM,eAAe,KAAA,KACnB,OAAO,SAAS,MAAM,UAAU,KAAK,MAAM,cAAc,OAC3D,MAAM,WAAW,KAAA,KAAa,OAAO,MAAM,WAAW,cACtD,MAAM,aAAa,KAAA,KAAa,OAAO,MAAM,aAAa;AAE/D"}

package/dist/run-state-ByHiAjUs.js

@@ -0,0 +1,351 @@
+import { H as spawnJournalRecordEvents } from "./scope-DzhBJrRN.js";
+import { a as readCommittedJsonLines, t as isNoEntError } from "./jsonl-file-CeVYTIQJ.js";
+import { s as readRunParking } from "./supervisor-B6sl14OR.js";
+import { a as writeAtomicDurableFile, c as mutateRunClaim, l as runGenerationPath, r as publishExclusiveDurableFile, u as runWithWriteClaim } from "./durable-file-DstVeHcj.js";
+import { r as readRunCancelRequest } from "./run-cancellation-BCuu6khW.js";
+import { a as readFailureRecord, o as readSettleRecord } from "./settle-record-BSDDf9Z4.js";
+import { isRecord } from "@tangle-network/agent-core";
+import { createHash } from "node:crypto";
+import { setTimeout } from "node:timers/promises";
+import { closeSync, existsSync, fstatSync, mkdirSync, openSync, readFileSync, unlinkSync } from "node:fs";
+import { join, resolve } from "node:path";
+import { open, stat } from "node:fs/promises";
+import { lockHolderVerdict, lockIdentity, parseLockHolderRecord, readLockHolderIdentity } from "@tangle-network/agent-eval/lock-holder";
+// src/durable/run-lock.ts
+/** The lock file `supervisePursuit` holds inside a run directory for the life of one call. */
+const RUN_DIRECTORY_LOCK_FILE = "supervise.lock";
+/** The directory is held by a live process. `holder` is what that process recorded. */
+var RunDirectoryLockedError = class extends Error {
+	path;
+	holder;
+	constructor(path, holder) {
+		super(`supervisePursuit: ${path} is held by pid ${holder.pid} (run '${holder.runId}', since ${holder.startedAt}); one process drives a run directory at a time`);
+		this.name = "RunDirectoryLockedError";
+		this.path = path;
+		this.holder = holder;
+	}
+};
+/**
+* Take `runDir/supervise.lock`, or refuse.
+*
+* The file is published with its full content or not at all, so a contender never reads a
+* half-written holder. A lock whose holder is proved dead (its pid no longer exists, the pid now
+* belongs to a process with a different start token, or the host rebooted) is stale and is removed
+* under the mutation guard; a holder that is alive or cannot be proved dead refuses. An empty file
+* names no holder and is reclaimed. A file with unreadable content is left in place and refused:
+* reclaiming it could evict a live holder written by something other than this module.
+*/
+async function acquireRunDirectoryLock(runDir, runId, now = Date.now) {
+	const dir = resolve(runDir);
+	const path = resolve(dir, RUN_DIRECTORY_LOCK_FILE);
+	mkdirSync(dir, { recursive: true });
+	const { pid, ...identity } = readLockHolderIdentity(process.pid);
+	const owner = {
+		pid,
+		startedAt: new Date(now()).toISOString(),
+		runId,
+		...identity
+	};
+	return mutateRunClaim(path, () => {
+		const existing = readLockFile(path);
+		if (existing.state === "holder" && !holderIsDead(existing)) throw new RunDirectoryLockedError(path, existing.holder);
+		let previousGeneration = 0;
+		try {
+			previousGeneration = Number(readFileSync(runGenerationPath(dir), "utf8"));
+			if (!Number.isSafeInteger(previousGeneration) || previousGeneration < 1) throw new Error("invalid run directory generation counter");
+		} catch (error) {
+			if (!isNoEntError(error)) throw error;
+		}
+		const generation = Math.max(previousGeneration, existing.state === "holder" ? existing.holder.generation ?? 0 : 0) + 1;
+		if (!Number.isSafeInteger(generation)) throw new Error("run directory generation exhausted");
+		writeAtomicDurableFile(runGenerationPath(dir), `${generation}\n`);
+		if (existing.state !== "missing") removeIfPresent(path);
+		const written = {};
+		const published = publishExclusiveDurableFile(path, (file) => {
+			written.holder = Object.freeze({
+				...owner,
+				generation,
+				lock: lockIdentity(file)
+			});
+			return `${JSON.stringify(written.holder)}\n`;
+		});
+		const holder = written.holder;
+		if (!published || holder === void 0) throw new Error(`supervisePursuit: could not take ${path}`);
+		let released = false;
+		return Object.freeze({
+			...holder,
+			generation,
+			path,
+			run: (operation) => {
+				if (holder.lock === void 0) throw new Error("run lock has no inode identity");
+				return runWithWriteClaim({
+					path,
+					generation,
+					lock: holder.lock
+				}, operation);
+			},
+			release: async () => {
+				if (released) return;
+				await releaseHolder(path, holder);
+				released = true;
+			}
+		});
+	});
+}
+/** Read the holder a lock file names, or `undefined` when no lock file names one. */
+async function readRunDirectoryLock(runDir) {
+	const existing = await readLockFile(resolve(runDir, RUN_DIRECTORY_LOCK_FILE));
+	return existing.state === "holder" ? existing.holder : void 0;
+}
+/**
+* Whether a run directory is still held by the live process that took its lock.
+*
+* The same rule `acquireRunDirectoryLock` applies to decide whether a lock is stale, exposed so a
+* caller — a supervisor picking up an abandoned directory, an operator tool listing runs — asks
+* the question instead of hand-rolling `process.kill(pid, 0)`. A bare signal probe cannot tell a
+* live holder from an unrelated process that later took the same pid, which is the failure this
+* lock's start token exists to prevent.
+*
+* The answer is ADVISORY: it is read outside the mutation guard `acquireRunDirectoryLock` holds,
+* so a `false` can be stale by the time the caller acts on it and a concurrent acquire can take
+* the directory in between. Reporting and listing are what this is for. A caller that intends to
+* TAKE the directory calls `acquireRunDirectoryLock`, which evaluates the same rule under the
+* guard and refuses atomically.
+*/
+async function runDirectoryHolderIsLive(runDir) {
+	const existing = await readLockFile(resolve(runDir, RUN_DIRECTORY_LOCK_FILE));
+	if (existing.state !== "holder") return { live: false };
+	const verdict = lockHolderVerdict(existing.record, existing.current);
+	return {
+		live: verdict.liveness !== "dead",
+		holder: existing.holder,
+		...verdict.liveness === "unknown" ? { unknown: true } : {}
+	};
+}
+function readLockFile(path) {
+	let text;
+	let current;
+	try {
+		const file = openSync(path, "r");
+		try {
+			current = lockIdentity(fstatSync(file, { bigint: true }));
+			text = readFileSync(file, "utf8");
+		} finally {
+			closeSync(file);
+		}
+	} catch (error) {
+		if (isNoEntError(error)) return { state: "missing" };
+		throw error;
+	}
+	if (text.trim().length === 0) return { state: "empty" };
+	let parsed;
+	try {
+		parsed = JSON.parse(text);
+	} catch (cause) {
+		throw new Error(`supervisePursuit: ${path} is not a readable lock file; remove it by hand`, { cause });
+	}
+	const record = parsed;
+	if (typeof record !== "object" || record === null || typeof record.pid !== "number" || !Number.isInteger(record.pid) || record.pid <= 0 || typeof record.startedAt !== "string" || typeof record.runId !== "string" || record.processStart !== void 0 && typeof record.processStart !== "string" || record.generation !== void 0 && (!Number.isSafeInteger(record.generation) || record.generation < 1)) throw new Error(`supervisePursuit: ${path} is not a readable lock file; remove it by hand`);
+	const { pid, startedAt, runId, processStart } = record;
+	const verdictRecord = parseLockHolderRecord(parsed);
+	const { pid: _pid, ...identity } = verdictRecord ?? { pid };
+	return {
+		state: "holder",
+		holder: Object.freeze({
+			pid,
+			startedAt,
+			runId,
+			...record.generation === void 0 ? {} : { generation: record.generation },
+			...processStart === void 0 ? {} : { processStart },
+			...identity
+		}),
+		record: verdictRecord,
+		current
+	};
+}
+/** agent-eval's dead-owner rule: only a holder proved dead is stale; alive or unknown stays held. */
+function holderIsDead(existing) {
+	return lockHolderVerdict(existing.record, existing.current).liveness === "dead";
+}
+/** Remove the lock only while it still names this holder; a reclaimed lock belongs to its new owner. */
+async function releaseHolder(path, holder) {
+	const deadline = performance.now() + 1e3;
+	while (existsSync(`${path}.guard`) && performance.now() < deadline) await setTimeout(10);
+	mutateRunClaim(path, () => {
+		const existing = readLockFile(path);
+		if (existing.state !== "holder") return;
+		if (existing.holder.pid !== holder.pid || existing.holder.startedAt !== holder.startedAt || existing.holder.runId !== holder.runId || existing.holder.processStart !== holder.processStart || existing.holder.generation !== holder.generation || existing.holder.lock?.dev !== holder.lock?.dev || existing.holder.lock?.ino !== holder.lock?.ino || existing.holder.lock?.birthtimeNs !== holder.lock?.birthtimeNs) return;
+		removeIfPresent(path);
+	});
+}
+function removeIfPresent(path) {
+	try {
+		unlinkSync(path);
+	} catch (error) {
+		if (!isNoEntError(error)) throw error;
+	}
+}
+// src/durable/spawn-journal/read.ts
+/** Read a fixed journal prefix, with historical envelopes and framing owned by Runtime.
+* Missing journals return an empty page. Malformed committed records fail; incomplete final
+* writes remain unread for the next call. Cursors detect replacement, truncation and edits at
+* their sampled opening/boundary; they are not integrity proofs against arbitrary file edits.
+*/
+async function readSpawnJournal(runDir, options = {}) {
+	const { after, tailBytes } = options;
+	if (tailBytes !== void 0 && (!Number.isSafeInteger(tailBytes) || tailBytes < 1)) throw new RangeError("readSpawnJournal: tailBytes must be a positive safe integer");
+	const path = join(runDir, "spawn-journal.jsonl");
+	let handle;
+	try {
+		handle = await open(path, "r");
+	} catch (error) {
+		if (isNoEntError(error)) return {
+			records: [],
+			reset: after !== void 0,
+			truncated: false,
+			remainingBytes: 0
+		};
+		throw error;
+	}
+	try {
+		const snapshot = await handle.stat({ bigint: true });
+		if (!snapshot.isFile()) throw new Error(`${path}: expected a regular file`);
+		const size = Number(snapshot.size);
+		const file = identity(snapshot);
+		const resumed = after !== void 0 && after.file === file && Number.isSafeInteger(after.offset) && after.offset >= 0 && after.offset <= size && after.boundary === await boundary(handle, after.offset);
+		let offset = resumed ? after.offset : 0;
+		const records = [];
+		const read = async (start, end, firstOnly = false) => {
+			offset = start;
+			for await (const record of readCommittedJsonLines(path, {
+				handle,
+				start,
+				end,
+				strictUtf8: true,
+				onCommit: (committed) => {
+					offset = committed;
+				}
+			})) {
+				if (!isRecord(record) || typeof record.root !== "string") throw new Error(`${path}: spawn journal record has no root`);
+				if (record.kind === "begin") {
+					if (typeof record.at !== "string") throw new Error(`${path}: begin record has no at`);
+					records.push({
+						kind: "begin",
+						root: record.root,
+						at: record.at
+					});
+				} else for (const event of spawnJournalRecordEvents(record)) {
+					if (!isRecord(event) || typeof event.kind !== "string" || typeof event.id !== "string") throw new Error(`${path}: spawn journal record has no event identity`);
+					records.push({
+						kind: "event",
+						root: record.root,
+						event
+					});
+				}
+				if (firstOnly) break;
+			}
+		};
+		let truncated = false;
+		if (!resumed && tailBytes !== void 0 && size > tailBytes) {
+			await read(0, size, true);
+			const openingEnd = offset;
+			const tailStart = await lineBoundary(handle, size - tailBytes, size, -1);
+			truncated = tailStart > openingEnd;
+			await read(Math.max(openingEnd, tailStart), size);
+			if (offset === tailStart && tailStart > openingEnd) {
+				const previous = await lineBoundary(handle, tailStart - 1, size, -1);
+				truncated = previous > openingEnd;
+				await read(Math.max(openingEnd, previous), tailStart);
+			}
+		} else {
+			const end = resumed && tailBytes !== void 0 && size - offset > tailBytes ? await lineBoundary(handle, offset + tailBytes, size, 1) : size;
+			await read(offset, end);
+		}
+		if (identity(await stat(path, { bigint: true })) !== file || (await handle.stat()).size < size) throw new Error(`${path}: journal changed while reading its committed prefix`);
+		return {
+			records,
+			cursor: {
+				file,
+				offset,
+				boundary: await boundary(handle, offset)
+			},
+			reset: after !== void 0 && !resumed,
+			truncated,
+			remainingBytes: size - offset
+		};
+	} finally {
+		await handle.close();
+	}
+}
+function identity(info) {
+	return `${info.dev}:${info.ino}:${info.birthtimeNs}`;
+}
+async function bytes(handle, start, length) {
+	const buffer = Buffer.alloc(length);
+	const { bytesRead } = await handle.read(buffer, 0, length, start);
+	if (bytesRead !== length) throw new Error("spawn journal changed while reading its boundary");
+	return buffer;
+}
+async function boundary(handle, offset) {
+	const length = Math.min(offset, 128);
+	return createHash("sha256").update(await bytes(handle, 0, length)).update(await bytes(handle, offset - length, length)).digest("hex");
+}
+/** Include the record crossing a tail window or incremental page boundary. */
+async function lineBoundary(handle, position, size, direction) {
+	while (position > 0 && position < size) {
+		const start = direction === -1 ? Math.max(0, position - 65536) : position;
+		const end = direction === -1 ? position : Math.min(size, position + 65536);
+		const part = await bytes(handle, start, end - start);
+		const newline = direction === -1 ? part.lastIndexOf(10) : part.indexOf(10);
+		if (newline !== -1) return start + newline + 1;
+		position = direction === -1 ? start : end;
+	}
+	return position;
+}
+// src/durable/run-state.ts
+/** Compose maintained record readers. Terminal settlement outranks cancellation and parking;
+* a request remains cancelling until settlement. An unheld run with evidence is down.
+* No Runtime evidence (including a missing or empty directory) returns undefined. Reads are
+* advisory snapshots across independently published files, not a transaction or a resume gate.
+*/
+async function readRunState(runDir) {
+	const [settle, failure, parking, holder, journal] = await Promise.all([
+		readSettleRecord(runDir),
+		readFailureRecord(runDir),
+		readRunParking(runDir),
+		runDirectoryHolderIsLive(runDir),
+		readSpawnJournal(runDir, { tailBytes: 65536 })
+	]);
+	const cancelRequest = readRunCancelRequest(runDir);
+	if (!settle && !failure && !parking && !holder.holder && !cancelRequest && journal.records.length === 0) return;
+	const holderLive = holder.unknown ? void 0 : holder.live;
+	const phase = settle ? "settled" : cancelRequest ? "cancelling" : parking ? "parked" : holderLive === true ? "running" : holderLive === false ? "down" : void 0;
+	const root = settle?.tree.nodes?.find((node) => node.id === settle.tree.root);
+	const failureCode = (settle?.kind === "no-winner" && settle.reason === "driver-failed" ? settle.error?.failure?.code : void 0) ?? root?.failure?.code;
+	let latest;
+	const observe = (at) => {
+		const timestamp = at === void 0 ? void 0 : new Date(at).getTime();
+		if (timestamp !== void 0 && Number.isFinite(timestamp)) latest = latest === void 0 ? timestamp : Math.max(latest, timestamp);
+	};
+	observe(failure?.at);
+	observe(parking?.since);
+	observe(cancelRequest?.at);
+	observe(holder.holder?.startedAt);
+	for (const record of journal.records) observe(record.kind === "begin" ? record.at : record.event.at);
+	for (const node of settle?.tree.nodes ?? []) {
+		observe(node.spawnedAt);
+		observe(node.settledAt);
+	}
+	const lastActivityAt = latest === void 0 ? void 0 : new Date(latest).toISOString();
+	return {
+		...phase === void 0 ? {} : { phase },
+		...failureCode === void 0 ? {} : { failureCode },
+		...settle === void 0 ? {} : { settle },
+		...cancelRequest === void 0 ? {} : { cancelRequest },
+		...holderLive === void 0 ? {} : { holderLive },
+		...lastActivityAt === void 0 ? {} : { lastActivityAt }
+	};
+}
+export { readRunDirectoryLock as a, acquireRunDirectoryLock as i, readSpawnJournal as n, runDirectoryHolderIsLive as o, RunDirectoryLockedError as r, readRunState as t };
+
+//# sourceMappingURL=run-state-ByHiAjUs.js.map