@vercel/factory 0.0.16 → 0.0.18

package/dist/schema/transitions.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"transitions.mjs","names":[],"sources":["../../src/schema/transitions.ts"],"sourcesContent":["import type { ChangeState } from \"./change\";\nimport type { SignalOutcome, SignalTriage } from \"./signal\";\nimport type { TaskState } from \"./task\";\n\n/** Authority category responsible for advancing a state-machine edge. */\nexport type TransitionActor =\n  | \"system\"\n  | \"reconciler\"\n  | \"foreman\"\n  | \"operator\"\n  | \"webhook\"\n  | \"human\";\n\n/** Inspectable legal edge in a Factory state machine. */\nexport interface Transition<State extends string> {\n  readonly from: State;\n  readonly to: State;\n  readonly trigger: string;\n  readonly actor: TransitionActor;\n}\n\n/** Named source and destination states for a transition check. */\nexport interface TransitionInput<State extends string> {\n  readonly from: NoInfer<State>;\n  readonly to: NoInfer<State>;\n}\n\n/** Required lifecycle state assigned when a Task is admitted. */\nexport const taskInitialState = \"queued\" satisfies TaskState;\n\n/** Canonical legal Task lifecycle edges and their responsible authorities. */\nexport const taskTransitions: readonly Transition<TaskState>[] = [\n  {\n    from: \"queued\",\n    to: \"running\",\n    trigger: \"graph prerequisites succeeded, dependencies sealed, workflow admission approved\",\n    actor: \"reconciler\",\n  },\n  { from: \"queued\", to: \"failed\", trigger: \"reservation refused\", actor: \"reconciler\" },\n  {\n    from: \"queued\",\n    to: \"needs_human\",\n    trigger: \"workflow presents a human question\",\n    actor: \"system\",\n  },\n  { from: \"queued\", to: \"cancelled\", trigger: \"cancel or kill\", actor: \"operator\" },\n  {\n    from: \"running\",\n    to: \"verifying\",\n    trigger: \"workflow requests verification of its result\",\n    actor: \"reconciler\",\n  },\n  {\n    from: \"running\",\n    to: \"queued\",\n    trigger: \"launch or execution failed below attempt limit\",\n    actor: \"reconciler\",\n  },\n  {\n    from: \"running\",\n    to: \"failed\",\n    trigger: \"execution or launch failed at attempt limit\",\n    actor: \"reconciler\",\n  },\n  {\n    from: \"running\",\n    to: \"needs_human\",\n    trigger: \"an open QuestionTask requests human input or action\",\n    actor: \"reconciler\",\n  },\n  { from: \"running\", to: \"cancelled\", trigger: \"cancel or kill\", actor: \"operator\" },\n  {\n    from: \"running\",\n    to: \"stalled\",\n    trigger: \"no progress within the stall window\",\n    actor: \"reconciler\",\n  },\n  {\n    from: \"running\",\n    to: \"succeeded\",\n    trigger: \"workflow completes with validated output\",\n    actor: \"reconciler\",\n  },\n  {\n    from: \"stalled\",\n    to: \"queued\",\n    trigger: \"replacement attempt below attempt limit, or operator retry\",\n    actor: \"reconciler\",\n  },\n  { from: \"stalled\", to: \"failed\", trigger: \"attempt limit exhausted\", actor: \"reconciler\" },\n  { from: \"stalled\", to: \"cancelled\", trigger: \"cancel or kill\", actor: \"operator\" },\n  {\n    from: \"verifying\",\n    to: \"succeeded\",\n    trigger: \"workflow verification completes with validated output\",\n    actor: \"reconciler\",\n  },\n  {\n    from: \"verifying\",\n    to: \"running\",\n    trigger: \"verification failed below attempt limit\",\n    actor: \"reconciler\",\n  },\n  {\n    from: \"verifying\",\n    to: \"failed\",\n    trigger: \"verification failed at attempt limit\",\n    actor: \"reconciler\",\n  },\n  { from: \"verifying\", to: \"cancelled\", trigger: \"cancel or kill\", actor: \"operator\" },\n  { from: \"needs_human\", to: \"succeeded\", trigger: \"question answered\", actor: \"operator\" },\n  { from: \"needs_human\", to: \"queued\", trigger: \"operator retry\", actor: \"operator\" },\n  { from: \"needs_human\", to: \"cancelled\", trigger: \"cancel or kill\", actor: \"operator\" },\n  { from: \"failed\", to: \"queued\", trigger: \"operator retry\", actor: \"operator\" },\n];\n\n/** Required lifecycle state assigned when a Change is first recorded. */\nexport const changeInitialState = \"verifying\" satisfies ChangeState;\n\n/** Canonical legal Change lifecycle edges and their responsible authorities. */\nexport const changeTransitions: readonly Transition<ChangeState>[] = [\n  {\n    from: \"ready\",\n    to: \"verifying\",\n    trigger: \"a code_change task updated the existing pull request head\",\n    actor: \"reconciler\",\n  },\n  {\n    from: \"verifying\",\n    to: \"ready\",\n    trigger: \"configured verification policy completed, risk and confidence written\",\n    actor: \"reconciler\",\n  },\n  {\n    from: \"verifying\",\n    to: \"closed\",\n    trigger: \"verification failed at attempt limit or pr closed upstream\",\n    actor: \"reconciler\",\n  },\n  { from: \"ready\", to: \"merged\", trigger: \"pr merged on github\", actor: \"webhook\" },\n  { from: \"ready\", to: \"closed\", trigger: \"pr closed without merge\", actor: \"webhook\" },\n  {\n    from: \"merged\",\n    to: \"deployed\",\n    trigger: \"production deployment ready containing the merge sha\",\n    actor: \"webhook\",\n  },\n  {\n    from: \"deployed\",\n    to: \"rolled_out\",\n    trigger: \"no flag, or flag ramped to full and held\",\n    actor: \"foreman\",\n  },\n  { from: \"deployed\", to: \"rolled_back\", trigger: \"rollback rule crossed\", actor: \"foreman\" },\n  {\n    from: \"rolled_out\",\n    to: \"rolled_back\",\n    trigger: \"rollback rule crossed or flag flipped off\",\n    actor: \"foreman\",\n  },\n  { from: \"rolled_back\", to: \"deployed\", trigger: \"human retried the ramp\", actor: \"human\" },\n];\n\n/** Required outcome assigned when an inbound Signal is admitted. */\nexport const signalInitialOutcome = \"pending\" satisfies SignalOutcome;\n\n/** Canonical one-time Signal triage edges. */\nexport const signalOutcomeTransitions: readonly Transition<SignalOutcome>[] = [\n  { from: \"pending\", to: \"accepted\", trigger: \"classified as actionable\", actor: \"reconciler\" },\n  { from: \"pending\", to: \"duplicate\", trigger: \"classified as duplicate\", actor: \"reconciler\" },\n  {\n    from: \"pending\",\n    to: \"unactionable\",\n    trigger: \"classified as unactionable\",\n    actor: \"reconciler\",\n  },\n  {\n    from: \"pending\",\n    to: \"low_confidence\",\n    trigger: \"classified below confidence threshold\",\n    actor: \"reconciler\",\n  },\n  { from: \"pending\", to: \"ignored\", trigger: \"classified as ignorable\", actor: \"reconciler\" },\n];\n\n/** Reports whether a state-machine table contains the requested directed edge. */\nexport function isTransitionAllowed<State extends string>(\n  transitions: readonly Transition<State>[],\n  input: TransitionInput<State>,\n): boolean {\n  return transitions.some(\n    (transition) => transition.from === input.from && transition.to === input.to,\n  );\n}\n\n/** Returns the distinct states directly reachable from a given state. */\nexport function legalNextStates<State extends string>(\n  transitions: readonly Transition<State>[],\n  from: NoInfer<State>,\n): readonly State[] {\n  return [\n    ...new Set(transitions.filter((transition) => transition.from === from).map((t) => t.to)),\n  ];\n}\n\n/** Error describing a refused state transition and every legal next state. */\nexport class InvalidTransitionError<State extends string> extends Error {\n  readonly from: State;\n  readonly to: State;\n  readonly legalNextStates: readonly State[];\n\n  constructor(from: State, to: State, legal: readonly State[]) {\n    super(\n      legal.length > 0\n        ? `invalid transition from \"${from}\" to \"${to}\"; legal next states: ${legal\n            .map((state) => `\"${state}\"`)\n            .join(\", \")}`\n        : `invalid transition from \"${from}\" to \"${to}\"; \"${from}\" is terminal`,\n    );\n    this.name = \"InvalidTransitionError\";\n    this.from = from;\n    this.to = to;\n    this.legalNextStates = legal;\n  }\n}\n\n/** Throws an {@link InvalidTransitionError} unless the requested edge is legal. */\nexport function assertTransition<State extends string>(\n  transitions: readonly Transition<State>[],\n  input: TransitionInput<State>,\n): void {\n  if (!isTransitionAllowed(transitions, input)) {\n    throw new InvalidTransitionError(\n      input.from,\n      input.to,\n      legalNextStates(transitions, input.from),\n    );\n  }\n}\n\n/** Derives states with no outgoing edges from a transition table. */\nexport function terminalStates<State extends string>(\n  transitions: readonly Transition<State>[],\n): readonly State[] {\n  const states = new Set<State>();\n  for (const transition of transitions) {\n    states.add(transition.from);\n    states.add(transition.to);\n  }\n  return [...states].filter(\n    (state) => !transitions.some((transition) => transition.from === state),\n  );\n}\n\n/** Canonical triage observation and explicit retry edges. */\nexport const signalTriageTransitions: readonly Transition<SignalTriage[\"state\"]>[] = [\n  { from: \"running\", to: \"blocked\", trigger: \"provider stopped without deciding\", actor: \"system\" },\n  { from: \"running\", to: \"uncertain\", trigger: \"launch response unavailable\", actor: \"system\" },\n  { from: \"uncertain\", to: \"blocked\", trigger: \"provider confirmed stopped\", actor: \"system\" },\n  { from: \"blocked\", to: \"running\", trigger: \"explicit operator retry\", actor: \"operator\" },\n];\n"],"mappings":";;AA4BA,MAAa,mBAAmB;;AAGhC,MAAa,kBAAoD;CAC/D;EACE,MAAM;EACN,IAAI;EACJ,SAAS;EACT,OAAO;CACT;CACA;EAAE,MAAM;EAAU,IAAI;EAAU,SAAS;EAAuB,OAAO;CAAa;CACpF;EACE,MAAM;EACN,IAAI;EACJ,SAAS;EACT,OAAO;CACT;CACA;EAAE,MAAM;EAAU,IAAI;EAAa,SAAS;EAAkB,OAAO;CAAW;CAChF;EACE,MAAM;EACN,IAAI;EACJ,SAAS;EACT,OAAO;CACT;CACA;EACE,MAAM;EACN,IAAI;EACJ,SAAS;EACT,OAAO;CACT;CACA;EACE,MAAM;EACN,IAAI;EACJ,SAAS;EACT,OAAO;CACT;CACA;EACE,MAAM;EACN,IAAI;EACJ,SAAS;EACT,OAAO;CACT;CACA;EAAE,MAAM;EAAW,IAAI;EAAa,SAAS;EAAkB,OAAO;CAAW;CACjF;EACE,MAAM;EACN,IAAI;EACJ,SAAS;EACT,OAAO;CACT;CACA;EACE,MAAM;EACN,IAAI;EACJ,SAAS;EACT,OAAO;CACT;CACA;EACE,MAAM;EACN,IAAI;EACJ,SAAS;EACT,OAAO;CACT;CACA;EAAE,MAAM;EAAW,IAAI;EAAU,SAAS;EAA2B,OAAO;CAAa;CACzF;EAAE,MAAM;EAAW,IAAI;EAAa,SAAS;EAAkB,OAAO;CAAW;CACjF;EACE,MAAM;EACN,IAAI;EACJ,SAAS;EACT,OAAO;CACT;CACA;EACE,MAAM;EACN,IAAI;EACJ,SAAS;EACT,OAAO;CACT;CACA;EACE,MAAM;EACN,IAAI;EACJ,SAAS;EACT,OAAO;CACT;CACA;EAAE,MAAM;EAAa,IAAI;EAAa,SAAS;EAAkB,OAAO;CAAW;CACnF;EAAE,MAAM;EAAe,IAAI;EAAa,SAAS;EAAqB,OAAO;CAAW;CACxF;EAAE,MAAM;EAAe,IAAI;EAAU,SAAS;EAAkB,OAAO;CAAW;CAClF;EAAE,MAAM;EAAe,IAAI;EAAa,SAAS;EAAkB,OAAO;CAAW;CACrF;EAAE,MAAM;EAAU,IAAI;EAAU,SAAS;EAAkB,OAAO;CAAW;AAC/E;;AAGA,MAAa,qBAAqB;;AAGlC,MAAa,oBAAwD;CACnE;EACE,MAAM;EACN,IAAI;EACJ,SAAS;EACT,OAAO;CACT;CACA;EACE,MAAM;EACN,IAAI;EACJ,SAAS;EACT,OAAO;CACT;CACA;EACE,MAAM;EACN,IAAI;EACJ,SAAS;EACT,OAAO;CACT;CACA;EAAE,MAAM;EAAS,IAAI;EAAU,SAAS;EAAuB,OAAO;CAAU;CAChF;EAAE,MAAM;EAAS,IAAI;EAAU,SAAS;EAA2B,OAAO;CAAU;CACpF;EACE,MAAM;EACN,IAAI;EACJ,SAAS;EACT,OAAO;CACT;CACA;EACE,MAAM;EACN,IAAI;EACJ,SAAS;EACT,OAAO;CACT;CACA;EAAE,MAAM;EAAY,IAAI;EAAe,SAAS;EAAyB,OAAO;CAAU;CAC1F;EACE,MAAM;EACN,IAAI;EACJ,SAAS;EACT,OAAO;CACT;CACA;EAAE,MAAM;EAAe,IAAI;EAAY,SAAS;EAA0B,OAAO;CAAQ;AAC3F;;AAGA,MAAa,uBAAuB;;AAGpC,MAAa,2BAAiE;CAC5E;EAAE,MAAM;EAAW,IAAI;EAAY,SAAS;EAA4B,OAAO;CAAa;CAC5F;EAAE,MAAM;EAAW,IAAI;EAAa,SAAS;EAA2B,OAAO;CAAa;CAC5F;EACE,MAAM;EACN,IAAI;EACJ,SAAS;EACT,OAAO;CACT;CACA;EACE,MAAM;EACN,IAAI;EACJ,SAAS;EACT,OAAO;CACT;CACA;EAAE,MAAM;EAAW,IAAI;EAAW,SAAS;EAA2B,OAAO;CAAa;AAC5F;;AAGA,SAAgB,oBACd,aACA,OACS;CACT,OAAO,YAAY,MAChB,eAAe,WAAW,SAAS,MAAM,QAAQ,WAAW,OAAO,MAAM,EAC5E;AACF;;AAGA,SAAgB,gBACd,aACA,MACkB;CAClB,OAAO,CACL,GAAG,IAAI,IAAI,YAAY,QAAQ,eAAe,WAAW,SAAS,IAAI,CAAC,CAAC,KAAK,MAAM,EAAE,EAAE,CAAC,CAC1F;AACF;;AAGA,IAAa,yBAAb,cAAkE,MAAM;CACtE;CACA;CACA;CAEA,YAAY,MAAa,IAAW,OAAyB;EAC3D,MACE,MAAM,SAAS,IACX,4BAA4B,KAAK,QAAQ,GAAG,wBAAwB,MACjE,KAAK,UAAU,IAAI,MAAM,EAAE,CAAC,CAC5B,KAAK,IAAI,MACZ,4BAA4B,KAAK,QAAQ,GAAG,MAAM,KAAK,cAC7D;EACA,KAAK,OAAO;EACZ,KAAK,OAAO;EACZ,KAAK,KAAK;EACV,KAAK,kBAAkB;CACzB;AACF;;AAGA,SAAgB,iBACd,aACA,OACM;CACN,IAAI,CAAC,oBAAoB,aAAa,KAAK,GACzC,MAAM,IAAI,uBACR,MAAM,MACN,MAAM,IACN,gBAAgB,aAAa,MAAM,IAAI,CACzC;AAEJ;;AAGA,SAAgB,eACd,aACkB;CAClB,MAAM,yBAAS,IAAI,IAAW;CAC9B,KAAK,MAAM,cAAc,aAAa;EACpC,OAAO,IAAI,WAAW,IAAI;EAC1B,OAAO,IAAI,WAAW,EAAE;CAC1B;CACA,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC,QAChB,UAAU,CAAC,YAAY,MAAM,eAAe,WAAW,SAAS,KAAK,CACxE;AACF;;AAGA,MAAa,0BAAwE;CACnF;EAAE,MAAM;EAAW,IAAI;EAAW,SAAS;EAAqC,OAAO;CAAS;CAChG;EAAE,MAAM;EAAW,IAAI;EAAa,SAAS;EAA+B,OAAO;CAAS;CAC5F;EAAE,MAAM;EAAa,IAAI;EAAW,SAAS;EAA8B,OAAO;CAAS;CAC3F;EAAE,MAAM;EAAW,IAAI;EAAW,SAAS;EAA2B,OAAO;CAAW;AAC1F"}
+{"version":3,"file":"transitions.mjs","names":[],"sources":["../../src/schema/transitions.ts"],"sourcesContent":["import type { ChangeState } from \"./change\";\nimport type { SignalOutcome, SignalTriage } from \"./signal\";\nimport type { TaskState } from \"./task\";\n\n/** Authority category responsible for advancing a state-machine edge. */\nexport type TransitionActor =\n  | \"system\"\n  | \"reconciler\"\n  | \"foreman\"\n  | \"operator\"\n  | \"webhook\"\n  | \"human\";\n\n/** Inspectable legal edge in a Factory state machine. */\nexport interface Transition<State extends string> {\n  readonly from: State;\n  readonly to: State;\n  readonly trigger: string;\n  readonly actor: TransitionActor;\n}\n\n/** Named source and destination states for a transition check. */\nexport interface TransitionInput<State extends string> {\n  readonly from: NoInfer<State>;\n  readonly to: NoInfer<State>;\n}\n\n/** Required lifecycle state assigned when a Task is admitted. */\nexport const taskInitialState = \"queued\" satisfies TaskState;\n\n/** Canonical legal Task lifecycle edges and their responsible authorities. */\nexport const taskTransitions: readonly Transition<TaskState>[] = [\n  {\n    from: \"queued\",\n    to: \"running\",\n    trigger: \"graph prerequisites succeeded, dependencies sealed, workflow admission approved\",\n    actor: \"reconciler\",\n  },\n  { from: \"queued\", to: \"failed\", trigger: \"reservation refused\", actor: \"reconciler\" },\n  {\n    from: \"queued\",\n    to: \"needs_human\",\n    trigger: \"workflow presents a human question\",\n    actor: \"system\",\n  },\n  { from: \"queued\", to: \"cancelled\", trigger: \"cancel or kill\", actor: \"operator\" },\n  {\n    from: \"running\",\n    to: \"verifying\",\n    trigger: \"workflow requests verification of its result\",\n    actor: \"reconciler\",\n  },\n  {\n    from: \"running\",\n    to: \"queued\",\n    trigger: \"launch or execution failed below attempt limit\",\n    actor: \"reconciler\",\n  },\n  {\n    from: \"running\",\n    to: \"failed\",\n    trigger: \"execution or launch failed at attempt limit\",\n    actor: \"reconciler\",\n  },\n  {\n    from: \"running\",\n    to: \"needs_human\",\n    trigger: \"an open QuestionTask requests human input or action\",\n    actor: \"reconciler\",\n  },\n  { from: \"running\", to: \"cancelled\", trigger: \"cancel or kill\", actor: \"operator\" },\n  {\n    from: \"running\",\n    to: \"stalled\",\n    trigger: \"no progress within the stall window or workflow pauses obsolete execution\",\n    actor: \"reconciler\",\n  },\n  {\n    from: \"running\",\n    to: \"succeeded\",\n    trigger: \"workflow completes with validated output\",\n    actor: \"reconciler\",\n  },\n  {\n    from: \"stalled\",\n    to: \"queued\",\n    trigger: \"replacement attempt below attempt limit, or operator retry\",\n    actor: \"reconciler\",\n  },\n  { from: \"stalled\", to: \"failed\", trigger: \"attempt limit exhausted\", actor: \"reconciler\" },\n  { from: \"stalled\", to: \"cancelled\", trigger: \"cancel or kill\", actor: \"operator\" },\n  {\n    from: \"verifying\",\n    to: \"succeeded\",\n    trigger: \"workflow verification completes with validated output\",\n    actor: \"reconciler\",\n  },\n  {\n    from: \"verifying\",\n    to: \"running\",\n    trigger: \"verification failed below attempt limit\",\n    actor: \"reconciler\",\n  },\n  {\n    from: \"verifying\",\n    to: \"failed\",\n    trigger: \"verification failed at attempt limit\",\n    actor: \"reconciler\",\n  },\n  { from: \"verifying\", to: \"cancelled\", trigger: \"cancel or kill\", actor: \"operator\" },\n  { from: \"needs_human\", to: \"succeeded\", trigger: \"question answered\", actor: \"operator\" },\n  { from: \"needs_human\", to: \"queued\", trigger: \"operator retry\", actor: \"operator\" },\n  { from: \"needs_human\", to: \"cancelled\", trigger: \"cancel or kill\", actor: \"operator\" },\n  { from: \"failed\", to: \"queued\", trigger: \"operator retry\", actor: \"operator\" },\n];\n\n/** Required lifecycle state assigned when a Change is first recorded. */\nexport const changeInitialState = \"verifying\" satisfies ChangeState;\n\n/** Canonical legal Change lifecycle edges and their responsible authorities. */\nexport const changeTransitions: readonly Transition<ChangeState>[] = [\n  {\n    from: \"ready\",\n    to: \"verifying\",\n    trigger: \"a code_change task updated the existing pull request head\",\n    actor: \"reconciler\",\n  },\n  {\n    from: \"verifying\",\n    to: \"ready\",\n    trigger: \"configured verification policy completed, risk and confidence written\",\n    actor: \"reconciler\",\n  },\n  {\n    from: \"verifying\",\n    to: \"closed\",\n    trigger: \"verification failed at attempt limit or pr closed upstream\",\n    actor: \"reconciler\",\n  },\n  { from: \"ready\", to: \"merged\", trigger: \"pr merged on github\", actor: \"webhook\" },\n  { from: \"ready\", to: \"closed\", trigger: \"pr closed without merge\", actor: \"webhook\" },\n  {\n    from: \"merged\",\n    to: \"deployed\",\n    trigger: \"production deployment ready containing the merge sha\",\n    actor: \"webhook\",\n  },\n  {\n    from: \"deployed\",\n    to: \"rolled_out\",\n    trigger: \"no flag, or flag ramped to full and held\",\n    actor: \"foreman\",\n  },\n  { from: \"deployed\", to: \"rolled_back\", trigger: \"rollback rule crossed\", actor: \"foreman\" },\n  {\n    from: \"rolled_out\",\n    to: \"rolled_back\",\n    trigger: \"rollback rule crossed or flag flipped off\",\n    actor: \"foreman\",\n  },\n  { from: \"rolled_back\", to: \"deployed\", trigger: \"human retried the ramp\", actor: \"human\" },\n];\n\n/** Required outcome assigned when an inbound Signal is admitted. */\nexport const signalInitialOutcome = \"pending\" satisfies SignalOutcome;\n\n/** Canonical one-time Signal triage edges. */\nexport const signalOutcomeTransitions: readonly Transition<SignalOutcome>[] = [\n  { from: \"pending\", to: \"accepted\", trigger: \"classified as actionable\", actor: \"reconciler\" },\n  { from: \"pending\", to: \"duplicate\", trigger: \"classified as duplicate\", actor: \"reconciler\" },\n  {\n    from: \"pending\",\n    to: \"unactionable\",\n    trigger: \"classified as unactionable\",\n    actor: \"reconciler\",\n  },\n  {\n    from: \"pending\",\n    to: \"low_confidence\",\n    trigger: \"classified below confidence threshold\",\n    actor: \"reconciler\",\n  },\n  { from: \"pending\", to: \"ignored\", trigger: \"classified as ignorable\", actor: \"reconciler\" },\n];\n\n/** Reports whether a state-machine table contains the requested directed edge. */\nexport function isTransitionAllowed<State extends string>(\n  transitions: readonly Transition<State>[],\n  input: TransitionInput<State>,\n): boolean {\n  return transitions.some(\n    (transition) => transition.from === input.from && transition.to === input.to,\n  );\n}\n\n/** Returns the distinct states directly reachable from a given state. */\nexport function legalNextStates<State extends string>(\n  transitions: readonly Transition<State>[],\n  from: NoInfer<State>,\n): readonly State[] {\n  return [\n    ...new Set(transitions.filter((transition) => transition.from === from).map((t) => t.to)),\n  ];\n}\n\n/** Error describing a refused state transition and every legal next state. */\nexport class InvalidTransitionError<State extends string> extends Error {\n  readonly from: State;\n  readonly to: State;\n  readonly legalNextStates: readonly State[];\n\n  constructor(from: State, to: State, legal: readonly State[]) {\n    super(\n      legal.length > 0\n        ? `invalid transition from \"${from}\" to \"${to}\"; legal next states: ${legal\n            .map((state) => `\"${state}\"`)\n            .join(\", \")}`\n        : `invalid transition from \"${from}\" to \"${to}\"; \"${from}\" is terminal`,\n    );\n    this.name = \"InvalidTransitionError\";\n    this.from = from;\n    this.to = to;\n    this.legalNextStates = legal;\n  }\n}\n\n/** Throws an {@link InvalidTransitionError} unless the requested edge is legal. */\nexport function assertTransition<State extends string>(\n  transitions: readonly Transition<State>[],\n  input: TransitionInput<State>,\n): void {\n  if (!isTransitionAllowed(transitions, input)) {\n    throw new InvalidTransitionError(\n      input.from,\n      input.to,\n      legalNextStates(transitions, input.from),\n    );\n  }\n}\n\n/** Derives states with no outgoing edges from a transition table. */\nexport function terminalStates<State extends string>(\n  transitions: readonly Transition<State>[],\n): readonly State[] {\n  const states = new Set<State>();\n  for (const transition of transitions) {\n    states.add(transition.from);\n    states.add(transition.to);\n  }\n  return [...states].filter(\n    (state) => !transitions.some((transition) => transition.from === state),\n  );\n}\n\n/** Canonical triage observation and explicit retry edges. */\nexport const signalTriageTransitions: readonly Transition<SignalTriage[\"state\"]>[] = [\n  { from: \"running\", to: \"blocked\", trigger: \"provider stopped without deciding\", actor: \"system\" },\n  { from: \"running\", to: \"uncertain\", trigger: \"launch response unavailable\", actor: \"system\" },\n  { from: \"uncertain\", to: \"blocked\", trigger: \"provider confirmed stopped\", actor: \"system\" },\n  { from: \"blocked\", to: \"running\", trigger: \"explicit operator retry\", actor: \"operator\" },\n];\n"],"mappings":";;AA4BA,MAAa,mBAAmB;;AAGhC,MAAa,kBAAoD;CAC/D;EACE,MAAM;EACN,IAAI;EACJ,SAAS;EACT,OAAO;CACT;CACA;EAAE,MAAM;EAAU,IAAI;EAAU,SAAS;EAAuB,OAAO;CAAa;CACpF;EACE,MAAM;EACN,IAAI;EACJ,SAAS;EACT,OAAO;CACT;CACA;EAAE,MAAM;EAAU,IAAI;EAAa,SAAS;EAAkB,OAAO;CAAW;CAChF;EACE,MAAM;EACN,IAAI;EACJ,SAAS;EACT,OAAO;CACT;CACA;EACE,MAAM;EACN,IAAI;EACJ,SAAS;EACT,OAAO;CACT;CACA;EACE,MAAM;EACN,IAAI;EACJ,SAAS;EACT,OAAO;CACT;CACA;EACE,MAAM;EACN,IAAI;EACJ,SAAS;EACT,OAAO;CACT;CACA;EAAE,MAAM;EAAW,IAAI;EAAa,SAAS;EAAkB,OAAO;CAAW;CACjF;EACE,MAAM;EACN,IAAI;EACJ,SAAS;EACT,OAAO;CACT;CACA;EACE,MAAM;EACN,IAAI;EACJ,SAAS;EACT,OAAO;CACT;CACA;EACE,MAAM;EACN,IAAI;EACJ,SAAS;EACT,OAAO;CACT;CACA;EAAE,MAAM;EAAW,IAAI;EAAU,SAAS;EAA2B,OAAO;CAAa;CACzF;EAAE,MAAM;EAAW,IAAI;EAAa,SAAS;EAAkB,OAAO;CAAW;CACjF;EACE,MAAM;EACN,IAAI;EACJ,SAAS;EACT,OAAO;CACT;CACA;EACE,MAAM;EACN,IAAI;EACJ,SAAS;EACT,OAAO;CACT;CACA;EACE,MAAM;EACN,IAAI;EACJ,SAAS;EACT,OAAO;CACT;CACA;EAAE,MAAM;EAAa,IAAI;EAAa,SAAS;EAAkB,OAAO;CAAW;CACnF;EAAE,MAAM;EAAe,IAAI;EAAa,SAAS;EAAqB,OAAO;CAAW;CACxF;EAAE,MAAM;EAAe,IAAI;EAAU,SAAS;EAAkB,OAAO;CAAW;CAClF;EAAE,MAAM;EAAe,IAAI;EAAa,SAAS;EAAkB,OAAO;CAAW;CACrF;EAAE,MAAM;EAAU,IAAI;EAAU,SAAS;EAAkB,OAAO;CAAW;AAC/E;;AAGA,MAAa,qBAAqB;;AAGlC,MAAa,oBAAwD;CACnE;EACE,MAAM;EACN,IAAI;EACJ,SAAS;EACT,OAAO;CACT;CACA;EACE,MAAM;EACN,IAAI;EACJ,SAAS;EACT,OAAO;CACT;CACA;EACE,MAAM;EACN,IAAI;EACJ,SAAS;EACT,OAAO;CACT;CACA;EAAE,MAAM;EAAS,IAAI;EAAU,SAAS;EAAuB,OAAO;CAAU;CAChF;EAAE,MAAM;EAAS,IAAI;EAAU,SAAS;EAA2B,OAAO;CAAU;CACpF;EACE,MAAM;EACN,IAAI;EACJ,SAAS;EACT,OAAO;CACT;CACA;EACE,MAAM;EACN,IAAI;EACJ,SAAS;EACT,OAAO;CACT;CACA;EAAE,MAAM;EAAY,IAAI;EAAe,SAAS;EAAyB,OAAO;CAAU;CAC1F;EACE,MAAM;EACN,IAAI;EACJ,SAAS;EACT,OAAO;CACT;CACA;EAAE,MAAM;EAAe,IAAI;EAAY,SAAS;EAA0B,OAAO;CAAQ;AAC3F;;AAGA,MAAa,uBAAuB;;AAGpC,MAAa,2BAAiE;CAC5E;EAAE,MAAM;EAAW,IAAI;EAAY,SAAS;EAA4B,OAAO;CAAa;CAC5F;EAAE,MAAM;EAAW,IAAI;EAAa,SAAS;EAA2B,OAAO;CAAa;CAC5F;EACE,MAAM;EACN,IAAI;EACJ,SAAS;EACT,OAAO;CACT;CACA;EACE,MAAM;EACN,IAAI;EACJ,SAAS;EACT,OAAO;CACT;CACA;EAAE,MAAM;EAAW,IAAI;EAAW,SAAS;EAA2B,OAAO;CAAa;AAC5F;;AAGA,SAAgB,oBACd,aACA,OACS;CACT,OAAO,YAAY,MAChB,eAAe,WAAW,SAAS,MAAM,QAAQ,WAAW,OAAO,MAAM,EAC5E;AACF;;AAGA,SAAgB,gBACd,aACA,MACkB;CAClB,OAAO,CACL,GAAG,IAAI,IAAI,YAAY,QAAQ,eAAe,WAAW,SAAS,IAAI,CAAC,CAAC,KAAK,MAAM,EAAE,EAAE,CAAC,CAC1F;AACF;;AAGA,IAAa,yBAAb,cAAkE,MAAM;CACtE;CACA;CACA;CAEA,YAAY,MAAa,IAAW,OAAyB;EAC3D,MACE,MAAM,SAAS,IACX,4BAA4B,KAAK,QAAQ,GAAG,wBAAwB,MACjE,KAAK,UAAU,IAAI,MAAM,EAAE,CAAC,CAC5B,KAAK,IAAI,MACZ,4BAA4B,KAAK,QAAQ,GAAG,MAAM,KAAK,cAC7D;EACA,KAAK,OAAO;EACZ,KAAK,OAAO;EACZ,KAAK,KAAK;EACV,KAAK,kBAAkB;CACzB;AACF;;AAGA,SAAgB,iBACd,aACA,OACM;CACN,IAAI,CAAC,oBAAoB,aAAa,KAAK,GACzC,MAAM,IAAI,uBACR,MAAM,MACN,MAAM,IACN,gBAAgB,aAAa,MAAM,IAAI,CACzC;AAEJ;;AAGA,SAAgB,eACd,aACkB;CAClB,MAAM,yBAAS,IAAI,IAAW;CAC9B,KAAK,MAAM,cAAc,aAAa;EACpC,OAAO,IAAI,WAAW,IAAI;EAC1B,OAAO,IAAI,WAAW,EAAE;CAC1B;CACA,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC,QAChB,UAAU,CAAC,YAAY,MAAM,eAAe,WAAW,SAAS,KAAK,CACxE;AACF;;AAGA,MAAa,0BAAwE;CACnF;EAAE,MAAM;EAAW,IAAI;EAAW,SAAS;EAAqC,OAAO;CAAS;CAChG;EAAE,MAAM;EAAW,IAAI;EAAa,SAAS;EAA+B,OAAO;CAAS;CAC5F;EAAE,MAAM;EAAa,IAAI;EAAW,SAAS;EAA8B,OAAO;CAAS;CAC3F;EAAE,MAAM;EAAW,IAAI;EAAW,SAAS;EAA2B,OAAO;CAAW;AAC1F"}

package/dist/signals.d.mts

@@ -1,6 +1,6 @@
 /// <reference types="node" />
-import { DecidedSignal, PendingSignal, Signal, SignalOutcome, SignalSource, SignalTriage, signalOutcomeSchema, signalSchema, signalSourceSchema, signalTriageSchema, standardSignalSources } from "./schema/signal.mjs";
 import { SignalId, signalIdSchema } from "./schema/id.mjs";
+import { DecidedSignal, PendingSignal, Signal, SignalOutcome, SignalSource, SignalTriage, signalOutcomeSchema, signalSchema, signalSourceSchema, signalTriageSchema, standardSignalSources } from "./schema/signal.mjs";
 import { CreateSignalInput, DecideSignalInput, FactoryStores } from "./store/engine.mjs";
 import { signalInitialOutcome, signalOutcomeTransitions, signalTriageTransitions } from "./schema/transitions.mjs";
 import { createSignalTriageHook, runSignalTriage, signalTriageHeaders, withSignalTriage } from "./signal-triage.mjs";

package/dist/stall.mjs

@@ -1,3 +1,4 @@
+import { collectFactoryRecords } from "./store/iterate.mjs";
 //#region src/stall.ts
 /** Resolve the progress timeout for a Task kind from the configured execution policy. */
 function stallWindowMinutes(policy, kind) {
@@ -20,7 +21,10 @@ async function sweepTaskStalls(stores, options) {
 		failed: [],
 		cancelled: []
 	};
-	const tasks = options.tasks ?? await stores.tasks.list();
+	const tasks = options.tasks ?? await collectFactoryRecords(stores.tasks.list, {
+		limit: 100,
+		match: [{ state: "running" }, { state: "stalled" }]
+	});
 	const newlyStalled = [];
 	for (const task of tasks) {
 		if (task.waitingForMessages || task.state !== "running") continue;
@@ -45,11 +49,15 @@ async function sweepTaskStalls(stores, options) {
 			continue;
 		}
 	}
-	const stalledCandidates = options.tasks === void 0 ? await stores.tasks.list() : [...tasks.filter((task) => task.state === "stalled"), ...newlyStalled];
+	const stalledCandidates = options.tasks === void 0 ? await collectFactoryRecords(stores.tasks.list, {
+		limit: 100,
+		match: [{ state: "running" }, { state: "stalled" }]
+	}) : [...tasks.filter((task) => task.state === "stalled"), ...newlyStalled];
 	for (const task of stalledCandidates) {
 		if (task.waitingForMessages || task.state !== "stalled") continue;
 		const cancellationReason = await options.cancelStalled?.(task, tasks) ?? null;
 		try {
+			if (await options.recoverResult?.(task)) continue;
 			if (cancellationReason !== null) {
 				await stores.tasks.transition(task.id, "cancelled", {
 					reason: cancellationReason,

package/dist/stall.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"stall.mjs","names":[],"sources":["../src/stall.ts"],"sourcesContent":["import type { ExecutionPolicy } from \"./schema/factory-config\";\nimport type { DateClock, MaybePromise } from \"./schema/common\";\nimport type { TaskId } from \"./schema/id\";\nimport type { Task } from \"./schema/task\";\nimport type { FactoryStores } from \"./store/engine\";\n\n/** Execution policy, clock, snapshot, and optional workflow cancellation hook for stall recovery. */\nexport interface StallSweepOptions {\n  policy: ExecutionPolicy;\n  now?: DateClock;\n  /** A dispatcher-wide snapshot avoids another complete task read. */\n  tasks?: readonly Task[];\n  /** Recover a saved result before marking work stalled; a throw defers stall recovery. */\n  recoverResult?: (task: Task) => Promise<boolean>;\n  /** Optional workflow policy that cancels a stalled task instead of retrying it. */\n  cancelStalled?: (task: Task, tasks: readonly Task[]) => MaybePromise<string | null>;\n}\n\n/** Task IDs transitioned at each stage of one stall-recovery pass. */\nexport interface TaskStallSweepResult {\n  readonly stalled: readonly TaskId[];\n  readonly requeued: readonly TaskId[];\n  readonly failed: readonly TaskId[];\n  readonly cancelled: readonly TaskId[];\n}\n\n/** Task capability required to detect and recover stalled work. */\nexport type TaskStallSweepStores = Pick<FactoryStores, \"tasks\">;\n\n/** Resolve the progress timeout for a Task kind from the configured execution policy. */\nexport function stallWindowMinutes(policy: ExecutionPolicy, kind: Task[\"kind\"]): number {\n  return policy.stallMinutesByKind[kind] ?? policy.stallMinutes;\n}\n\n/**\n * The reconciler's stall pass. A running task whose execution has not\n * progressed within its stall window is marked stalled; a stalled task is\n * re-queued for a replacement attempt while attempts remain, and failed once\n * they are exhausted. Only `running` tasks can stall: a task whose result has\n * already been recorded (verifying, or terminal) is never retried by this\n * pass. Workflows explicitly waiting for messages are skipped. Configured result recovery\n * runs before marking a Task stalled; an error defers that attempt to a later pass.\n */\nexport async function sweepTaskStalls(\n  stores: TaskStallSweepStores,\n  options: StallSweepOptions,\n): Promise<TaskStallSweepResult> {\n  const nowMs = (options.now ?? (() => new Date()))().getTime();\n  const result: {\n    stalled: TaskId[];\n    requeued: TaskId[];\n    failed: TaskId[];\n    cancelled: TaskId[];\n  } = {\n    stalled: [],\n    requeued: [],\n    failed: [],\n    cancelled: [],\n  };\n  const tasks = options.tasks ?? (await stores.tasks.list());\n  const newlyStalled: Task[] = [];\n\n  for (const task of tasks) {\n    if (task.waitingForMessages || task.state !== \"running\") {\n      continue;\n    }\n    const minutes = stallWindowMinutes(options.policy, task.kind);\n    const sinceProgress = nowMs - Date.parse(task.lastProgressAt ?? task.updatedAt);\n    if (sinceProgress < minutes * 60_000) {\n      continue;\n    }\n    // A concurrent writer may have moved the task; skip rather than abort.\n    try {\n      if (await options.recoverResult?.(task)) continue;\n      const stalled = await stores.tasks.transition(task.id, \"stalled\", {\n        reason: `no progress for ${Math.floor(sinceProgress / 60_000)} minutes (window ${minutes})`,\n        expectFrom: \"running\",\n        expectAttempt: task.attempt,\n        expectExecution: task.execution,\n      });\n      result.stalled.push(task.id);\n      newlyStalled.push(stalled);\n    } catch {\n      if (options.tasks !== undefined) {\n        const current = await stores.tasks.get(task.id).catch(() => null);\n        if (current?.state === \"stalled\") newlyStalled.push(current);\n      }\n      continue;\n    }\n  }\n\n  // Resolve every stalled task, including ones stalled by an earlier pass that\n  // crashed before reaching this step.\n  const stalledCandidates =\n    options.tasks === undefined\n      ? await stores.tasks.list()\n      : [...tasks.filter((task) => task.state === \"stalled\"), ...newlyStalled];\n  for (const task of stalledCandidates) {\n    if (task.waitingForMessages || task.state !== \"stalled\") {\n      continue;\n    }\n    const cancellationReason = (await options.cancelStalled?.(task, tasks)) ?? null;\n    try {\n      if (cancellationReason !== null) {\n        await stores.tasks.transition(task.id, \"cancelled\", {\n          reason: cancellationReason,\n          expectFrom: \"stalled\",\n        });\n        result.cancelled.push(task.id);\n      } else if (task.attempt < options.policy.maxAttempts) {\n        await stores.tasks.transition(task.id, \"queued\", {\n          reason: `stalled on attempt ${task.attempt} of ${options.policy.maxAttempts}; replacing`,\n          phase: \"retry\",\n          expectFrom: \"stalled\",\n        });\n        result.requeued.push(task.id);\n      } else {\n        await stores.tasks.transition(task.id, \"failed\", {\n          reason: `stalled on attempt ${task.attempt} of ${options.policy.maxAttempts}; attempts exhausted`,\n          phase: \"retry\",\n          expectFrom: \"stalled\",\n        });\n        result.failed.push(task.id);\n      }\n    } catch {\n      continue;\n    }\n  }\n  return result;\n}\n"],"mappings":";;AA8BA,SAAgB,mBAAmB,QAAyB,MAA4B;CACtF,OAAO,OAAO,mBAAmB,SAAS,OAAO;AACnD;;;;;;;;;;AAWA,eAAsB,gBACpB,QACA,SAC+B;CAC/B,MAAM,SAAS,QAAQ,8BAAc,IAAI,KAAK,GAAA,CAAI,CAAC,CAAC,QAAQ;CAC5D,MAAM,SAKF;EACF,SAAS,CAAC;EACV,UAAU,CAAC;EACX,QAAQ,CAAC;EACT,WAAW,CAAC;CACd;CACA,MAAM,QAAQ,QAAQ,SAAU,MAAM,OAAO,MAAM,KAAK;CACxD,MAAM,eAAuB,CAAC;CAE9B,KAAK,MAAM,QAAQ,OAAO;EACxB,IAAI,KAAK,sBAAsB,KAAK,UAAU,WAC5C;EAEF,MAAM,UAAU,mBAAmB,QAAQ,QAAQ,KAAK,IAAI;EAC5D,MAAM,gBAAgB,QAAQ,KAAK,MAAM,KAAK,kBAAkB,KAAK,SAAS;EAC9E,IAAI,gBAAgB,UAAU,KAC5B;EAGF,IAAI;GACF,IAAI,MAAM,QAAQ,gBAAgB,IAAI,GAAG;GACzC,MAAM,UAAU,MAAM,OAAO,MAAM,WAAW,KAAK,IAAI,WAAW;IAChE,QAAQ,mBAAmB,KAAK,MAAM,gBAAgB,GAAM,EAAE,mBAAmB,QAAQ;IACzF,YAAY;IACZ,eAAe,KAAK;IACpB,iBAAiB,KAAK;GACxB,CAAC;GACD,OAAO,QAAQ,KAAK,KAAK,EAAE;GAC3B,aAAa,KAAK,OAAO;EAC3B,QAAQ;GACN,IAAI,QAAQ,UAAU,KAAA,GAAW;IAC/B,MAAM,UAAU,MAAM,OAAO,MAAM,IAAI,KAAK,EAAE,CAAC,CAAC,YAAY,IAAI;IAChE,IAAI,SAAS,UAAU,WAAW,aAAa,KAAK,OAAO;GAC7D;GACA;EACF;CACF;CAIA,MAAM,oBACJ,QAAQ,UAAU,KAAA,IACd,MAAM,OAAO,MAAM,KAAK,IACxB,CAAC,GAAG,MAAM,QAAQ,SAAS,KAAK,UAAU,SAAS,GAAG,GAAG,YAAY;CAC3E,KAAK,MAAM,QAAQ,mBAAmB;EACpC,IAAI,KAAK,sBAAsB,KAAK,UAAU,WAC5C;EAEF,MAAM,qBAAsB,MAAM,QAAQ,gBAAgB,MAAM,KAAK,KAAM;EAC3E,IAAI;GACF,IAAI,uBAAuB,MAAM;IAC/B,MAAM,OAAO,MAAM,WAAW,KAAK,IAAI,aAAa;KAClD,QAAQ;KACR,YAAY;IACd,CAAC;IACD,OAAO,UAAU,KAAK,KAAK,EAAE;GAC/B,OAAO,IAAI,KAAK,UAAU,QAAQ,OAAO,aAAa;IACpD,MAAM,OAAO,MAAM,WAAW,KAAK,IAAI,UAAU;KAC/C,QAAQ,sBAAsB,KAAK,QAAQ,MAAM,QAAQ,OAAO,YAAY;KAC5E,OAAO;KACP,YAAY;IACd,CAAC;IACD,OAAO,SAAS,KAAK,KAAK,EAAE;GAC9B,OAAO;IACL,MAAM,OAAO,MAAM,WAAW,KAAK,IAAI,UAAU;KAC/C,QAAQ,sBAAsB,KAAK,QAAQ,MAAM,QAAQ,OAAO,YAAY;KAC5E,OAAO;KACP,YAAY;IACd,CAAC;IACD,OAAO,OAAO,KAAK,KAAK,EAAE;GAC5B;EACF,QAAQ;GACN;EACF;CACF;CACA,OAAO;AACT"}
+{"version":3,"file":"stall.mjs","names":[],"sources":["../src/stall.ts"],"sourcesContent":["import { collectFactoryRecords } from \"./store/iterate\";\nimport type { ExecutionPolicy } from \"./schema/factory-config\";\nimport type { DateClock, MaybePromise } from \"./schema/common\";\nimport type { TaskId } from \"./schema/id\";\nimport type { Task } from \"./schema/task\";\nimport type { FactoryStores } from \"./store/engine\";\n\n/** Execution policy, clock, snapshot, and optional workflow cancellation hook for stall recovery. */\nexport interface StallSweepOptions {\n  policy: ExecutionPolicy;\n  now?: DateClock;\n  /** A dispatcher-wide snapshot avoids another complete task read. */\n  tasks?: readonly Task[];\n  /** Recover a saved result before marking work stalled; a throw defers stall recovery. */\n  recoverResult?: (task: Task) => Promise<boolean>;\n  /** Optional workflow policy that cancels a stalled task instead of retrying it. */\n  cancelStalled?: (task: Task, tasks: readonly Task[]) => MaybePromise<string | null>;\n}\n\n/** Task IDs transitioned at each stage of one stall-recovery pass. */\nexport interface TaskStallSweepResult {\n  readonly stalled: readonly TaskId[];\n  readonly requeued: readonly TaskId[];\n  readonly failed: readonly TaskId[];\n  readonly cancelled: readonly TaskId[];\n}\n\n/** Task capability required to detect and recover stalled work. */\nexport type TaskStallSweepStores = Pick<FactoryStores, \"tasks\">;\n\n/** Resolve the progress timeout for a Task kind from the configured execution policy. */\nexport function stallWindowMinutes(policy: ExecutionPolicy, kind: Task[\"kind\"]): number {\n  return policy.stallMinutesByKind[kind] ?? policy.stallMinutes;\n}\n\n/**\n * The reconciler's stall pass. A running task whose execution has not\n * progressed within its stall window is marked stalled; a stalled task is\n * re-queued for a replacement attempt while attempts remain, and failed once\n * they are exhausted. Only `running` tasks can stall: a task whose result has\n * already been recorded (verifying, or terminal) is never retried by this\n * pass. Workflows explicitly waiting for messages are skipped. Configured result recovery\n * runs before marking a Task stalled; an error defers that attempt to a later pass.\n */\nexport async function sweepTaskStalls(\n  stores: TaskStallSweepStores,\n  options: StallSweepOptions,\n): Promise<TaskStallSweepResult> {\n  const nowMs = (options.now ?? (() => new Date()))().getTime();\n  const result: {\n    stalled: TaskId[];\n    requeued: TaskId[];\n    failed: TaskId[];\n    cancelled: TaskId[];\n  } = {\n    stalled: [],\n    requeued: [],\n    failed: [],\n    cancelled: [],\n  };\n  const tasks =\n    options.tasks ??\n    (await collectFactoryRecords(stores.tasks.list, {\n      limit: 100,\n      match: [{ state: \"running\" }, { state: \"stalled\" }],\n    }));\n  const newlyStalled: Task[] = [];\n\n  for (const task of tasks) {\n    if (task.waitingForMessages || task.state !== \"running\") {\n      continue;\n    }\n    const minutes = stallWindowMinutes(options.policy, task.kind);\n    const sinceProgress = nowMs - Date.parse(task.lastProgressAt ?? task.updatedAt);\n    if (sinceProgress < minutes * 60_000) {\n      continue;\n    }\n    // A concurrent writer may have moved the task; skip rather than abort.\n    try {\n      if (await options.recoverResult?.(task)) continue;\n      const stalled = await stores.tasks.transition(task.id, \"stalled\", {\n        reason: `no progress for ${Math.floor(sinceProgress / 60_000)} minutes (window ${minutes})`,\n        expectFrom: \"running\",\n        expectAttempt: task.attempt,\n        expectExecution: task.execution,\n      });\n      result.stalled.push(task.id);\n      newlyStalled.push(stalled);\n    } catch {\n      if (options.tasks !== undefined) {\n        const current = await stores.tasks.get(task.id).catch(() => null);\n        if (current?.state === \"stalled\") newlyStalled.push(current);\n      }\n      continue;\n    }\n  }\n\n  // Resolve every stalled task, including ones stalled by an earlier pass that\n  // crashed before reaching this step.\n  const stalledCandidates =\n    options.tasks === undefined\n      ? await collectFactoryRecords(stores.tasks.list, {\n          limit: 100,\n          match: [{ state: \"running\" }, { state: \"stalled\" }],\n        })\n      : [...tasks.filter((task) => task.state === \"stalled\"), ...newlyStalled];\n  for (const task of stalledCandidates) {\n    if (task.waitingForMessages || task.state !== \"stalled\") {\n      continue;\n    }\n    const cancellationReason = (await options.cancelStalled?.(task, tasks)) ?? null;\n    try {\n      if (await options.recoverResult?.(task)) continue;\n      if (cancellationReason !== null) {\n        await stores.tasks.transition(task.id, \"cancelled\", {\n          reason: cancellationReason,\n          expectFrom: \"stalled\",\n        });\n        result.cancelled.push(task.id);\n      } else if (task.attempt < options.policy.maxAttempts) {\n        await stores.tasks.transition(task.id, \"queued\", {\n          reason: `stalled on attempt ${task.attempt} of ${options.policy.maxAttempts}; replacing`,\n          phase: \"retry\",\n          expectFrom: \"stalled\",\n        });\n        result.requeued.push(task.id);\n      } else {\n        await stores.tasks.transition(task.id, \"failed\", {\n          reason: `stalled on attempt ${task.attempt} of ${options.policy.maxAttempts}; attempts exhausted`,\n          phase: \"retry\",\n          expectFrom: \"stalled\",\n        });\n        result.failed.push(task.id);\n      }\n    } catch {\n      continue;\n    }\n  }\n  return result;\n}\n"],"mappings":";;;AA+BA,SAAgB,mBAAmB,QAAyB,MAA4B;CACtF,OAAO,OAAO,mBAAmB,SAAS,OAAO;AACnD;;;;;;;;;;AAWA,eAAsB,gBACpB,QACA,SAC+B;CAC/B,MAAM,SAAS,QAAQ,8BAAc,IAAI,KAAK,GAAA,CAAI,CAAC,CAAC,QAAQ;CAC5D,MAAM,SAKF;EACF,SAAS,CAAC;EACV,UAAU,CAAC;EACX,QAAQ,CAAC;EACT,WAAW,CAAC;CACd;CACA,MAAM,QACJ,QAAQ,SACP,MAAM,sBAAsB,OAAO,MAAM,MAAM;EAC9C,OAAO;EACP,OAAO,CAAC,EAAE,OAAO,UAAU,GAAG,EAAE,OAAO,UAAU,CAAC;CACpD,CAAC;CACH,MAAM,eAAuB,CAAC;CAE9B,KAAK,MAAM,QAAQ,OAAO;EACxB,IAAI,KAAK,sBAAsB,KAAK,UAAU,WAC5C;EAEF,MAAM,UAAU,mBAAmB,QAAQ,QAAQ,KAAK,IAAI;EAC5D,MAAM,gBAAgB,QAAQ,KAAK,MAAM,KAAK,kBAAkB,KAAK,SAAS;EAC9E,IAAI,gBAAgB,UAAU,KAC5B;EAGF,IAAI;GACF,IAAI,MAAM,QAAQ,gBAAgB,IAAI,GAAG;GACzC,MAAM,UAAU,MAAM,OAAO,MAAM,WAAW,KAAK,IAAI,WAAW;IAChE,QAAQ,mBAAmB,KAAK,MAAM,gBAAgB,GAAM,EAAE,mBAAmB,QAAQ;IACzF,YAAY;IACZ,eAAe,KAAK;IACpB,iBAAiB,KAAK;GACxB,CAAC;GACD,OAAO,QAAQ,KAAK,KAAK,EAAE;GAC3B,aAAa,KAAK,OAAO;EAC3B,QAAQ;GACN,IAAI,QAAQ,UAAU,KAAA,GAAW;IAC/B,MAAM,UAAU,MAAM,OAAO,MAAM,IAAI,KAAK,EAAE,CAAC,CAAC,YAAY,IAAI;IAChE,IAAI,SAAS,UAAU,WAAW,aAAa,KAAK,OAAO;GAC7D;GACA;EACF;CACF;CAIA,MAAM,oBACJ,QAAQ,UAAU,KAAA,IACd,MAAM,sBAAsB,OAAO,MAAM,MAAM;EAC7C,OAAO;EACP,OAAO,CAAC,EAAE,OAAO,UAAU,GAAG,EAAE,OAAO,UAAU,CAAC;CACpD,CAAC,IACD,CAAC,GAAG,MAAM,QAAQ,SAAS,KAAK,UAAU,SAAS,GAAG,GAAG,YAAY;CAC3E,KAAK,MAAM,QAAQ,mBAAmB;EACpC,IAAI,KAAK,sBAAsB,KAAK,UAAU,WAC5C;EAEF,MAAM,qBAAsB,MAAM,QAAQ,gBAAgB,MAAM,KAAK,KAAM;EAC3E,IAAI;GACF,IAAI,MAAM,QAAQ,gBAAgB,IAAI,GAAG;GACzC,IAAI,uBAAuB,MAAM;IAC/B,MAAM,OAAO,MAAM,WAAW,KAAK,IAAI,aAAa;KAClD,QAAQ;KACR,YAAY;IACd,CAAC;IACD,OAAO,UAAU,KAAK,KAAK,EAAE;GAC/B,OAAO,IAAI,KAAK,UAAU,QAAQ,OAAO,aAAa;IACpD,MAAM,OAAO,MAAM,WAAW,KAAK,IAAI,UAAU;KAC/C,QAAQ,sBAAsB,KAAK,QAAQ,MAAM,QAAQ,OAAO,YAAY;KAC5E,OAAO;KACP,YAAY;IACd,CAAC;IACD,OAAO,SAAS,KAAK,KAAK,EAAE;GAC9B,OAAO;IACL,MAAM,OAAO,MAAM,WAAW,KAAK,IAAI,UAAU;KAC/C,QAAQ,sBAAsB,KAAK,QAAQ,MAAM,QAAQ,OAAO,YAAY;KAC5E,OAAO;KACP,YAAY;IACd,CAAC;IACD,OAAO,OAAO,KAAK,KAAK,EAAE;GAC5B;EACF,QAAQ;GACN;EACF;CACF;CACA,OAAO;AACT"}

package/dist/storage.d.mts

@@ -1,4 +1,13 @@
+import { FactoryRecordFieldFilter, FactoryRecordPage, FactoryRecordQuery } from "./store/query.mjs";
 import { CollectionName, InsertStoreRecordInput, RecordExistsError, RecordNotFoundError, StoreDriver, StoredEntry, StoredRecord, TransientStoreError, UpdateStoreRecordInput, VersionConflictError } from "./store/driver.mjs";
+import { IndexedStore, QueryStoreIndexInput, QueryStoreIndexResult, QueryStoreRecordsInput, QueryStoreRecordsResult, StoreIndexEntry, StoreIndexRecord, StoreOperationConflictError, WriteIndexedRecordInput, WriteIndexedRecordResult } from "./store/indexed.mjs";
 import { CacheContinuationContextInput, CreateStoresOptions, FactoryStores, createStores } from "./store/engine.mjs";
+import { ApprovalStore } from "./store/approvals.mjs";
+import { ConversationProjectionOptions, ConversationQuery, ConversationStore } from "./store/conversations.mjs";
+import { ConditionalStateStore, createIndexedStateStore } from "./store/state.mjs";
 import { createInMemoryDriver } from "./store/memory.mjs";
-export { type CacheContinuationContextInput, type CollectionName, type CreateStoresOptions, type FactoryStores, type InsertStoreRecordInput, RecordExistsError, RecordNotFoundError, type StoreDriver, type StoredEntry, type StoredRecord, TransientStoreError, type UpdateStoreRecordInput, VersionConflictError, createInMemoryDriver, createStores };
+import { createInMemoryIndexedStore } from "./store/indexed-memory.mjs";
+import { FactoryIndexScope, FactoryRecordSummary, factoryIndexScopeSchema, factoryRecordSummarySchema } from "./store/indexed-projections.mjs";
+import { CreateIndexedStoresOptions, FactoryIndexedEntry, FactoryIndexedPage, IndexedFactoryStores, createIndexedStores } from "./store/indexed-engine.mjs";
+import { collectFactoryRecords, iterateFactoryRecords } from "./store/iterate.mjs";
+export { type ApprovalStore, type CacheContinuationContextInput, type CollectionName, type ConditionalStateStore, type ConversationProjectionOptions, type ConversationQuery, type ConversationStore, type CreateIndexedStoresOptions, type CreateStoresOptions, type FactoryIndexScope, type FactoryIndexedEntry, type FactoryIndexedPage, type FactoryRecordFieldFilter, type FactoryRecordPage, type FactoryRecordQuery, type FactoryRecordSummary, type FactoryStores, type IndexedFactoryStores, type IndexedStore, type InsertStoreRecordInput, type QueryStoreIndexInput, type QueryStoreIndexResult, type QueryStoreRecordsInput, type QueryStoreRecordsResult, RecordExistsError, RecordNotFoundError, type StoreDriver, type StoreIndexEntry, type StoreIndexRecord, StoreOperationConflictError, type StoredEntry, type StoredRecord, TransientStoreError, type UpdateStoreRecordInput, VersionConflictError, type WriteIndexedRecordInput, type WriteIndexedRecordResult, collectFactoryRecords, createInMemoryDriver, createInMemoryIndexedStore, createIndexedStateStore, createIndexedStores, createStores, factoryIndexScopeSchema, factoryRecordSummarySchema, iterateFactoryRecords };

package/dist/storage.mjs

@@ -1,4 +1,10 @@
+import { collectFactoryRecords, iterateFactoryRecords } from "./store/iterate.mjs";
 import { RecordExistsError, RecordNotFoundError, TransientStoreError, VersionConflictError } from "./store/driver.mjs";
+import { factoryIndexScopeSchema, factoryRecordSummarySchema } from "./store/indexed-projections.mjs";
 import { createStores } from "./store/engine.mjs";
 import { createInMemoryDriver } from "./store/memory.mjs";
-export { RecordExistsError, RecordNotFoundError, TransientStoreError, VersionConflictError, createInMemoryDriver, createStores };
+import { StoreOperationConflictError } from "./store/indexed.mjs";
+import { createInMemoryIndexedStore } from "./store/indexed-memory.mjs";
+import { createIndexedStores } from "./store/indexed-engine.mjs";
+import { createIndexedStateStore } from "./store/state.mjs";
+export { RecordExistsError, RecordNotFoundError, StoreOperationConflictError, TransientStoreError, VersionConflictError, collectFactoryRecords, createInMemoryDriver, createInMemoryIndexedStore, createIndexedStateStore, createIndexedStores, createStores, factoryIndexScopeSchema, factoryRecordSummarySchema, iterateFactoryRecords };

package/dist/store/approvals.d.mts

@@ -0,0 +1,14 @@
+import { TaskId } from "../schema/id.mjs";
+import { FactoryRecordPage, FactoryRecordQuery } from "./query.mjs";
+import "./indexed.mjs";
+import "./engine.mjs";
+//#region src/store/approvals.d.ts
+/** Indexed approval discovery; full authorized proposals are loaded only for the selected page. */
+interface ApprovalStore {
+  list(query: FactoryRecordQuery & {
+    sort?: "created" | "priority" | "decided";
+  }): Promise<FactoryRecordPage<TaskId>>;
+}
+//#endregion
+export { ApprovalStore };
+//# sourceMappingURL=approvals.d.mts.map

package/dist/store/approvals.mjs

@@ -0,0 +1,78 @@
+import { taskIdSchema } from "../schema/id.mjs";
+import { taskSchema } from "../schema/task.mjs";
+import { findFindingForTask } from "../finding-remediation/brief.mjs";
+import { randomUUID } from "node:crypto";
+import { z } from "zod";
+//#region src/store/approvals.ts
+function createApprovalStore(store) {
+	return { async list({ sort = "created", ...query }) {
+		const page = await store.queryRecords({
+			...query,
+			sources: [{
+				collection: "approvalRecords",
+				index: `approvals:${sort}`
+			}],
+			order: sort === "decided" ? "desc" : "asc"
+		});
+		return {
+			items: page.entries.map((entry) => taskIdSchema.parse(entry.id)),
+			nextCursor: page.nextCursor,
+			totalCount: page.totalCount
+		};
+	} };
+}
+async function projectApproval(store, stores, value) {
+	const task = taskSchema.parse(value);
+	if (task.approval === void 0) return;
+	const [finding, decision, repositories] = await Promise.all([
+		findFindingForTask(stores, task),
+		stores.tasks.approvalReceipt(task.id),
+		Promise.all(task.repositoryIds.map((id) => stores.repositories.get(id)))
+	]);
+	const record = {
+		id: task.id,
+		repositoryIds: task.repositoryIds,
+		status: task.approval === "required" && task.state === "queued" ? "pending" : task.approval !== "required" ? "decided" : "inactive",
+		searchText: [
+			task.id,
+			...repositories.map((repo) => repo?.slug),
+			finding?.title,
+			finding?.body,
+			finding?.category,
+			finding?.path,
+			decision?.decidedBy,
+			decision?.reason
+		].join(" ")
+	};
+	const previous = await store.get("approvalRecords", task.id);
+	const indexes = [
+		{
+			index: "approvals:created",
+			sortKey: task.createdAt,
+			summary: { id: task.id }
+		},
+		{
+			index: "approvals:priority",
+			sortKey: `${finding?.priority ?? "P4"}:${task.createdAt}`,
+			summary: { id: task.id }
+		},
+		{
+			index: "approvals:decided",
+			sortKey: decision?.recordedAt ?? task.createdAt,
+			summary: { id: task.id }
+		}
+	];
+	z.array(z.string()).parse(record.repositoryIds);
+	await store.write({
+		collection: "approvalRecords",
+		id: task.id,
+		operationId: randomUUID(),
+		expectedVersion: previous?.version ?? 0,
+		value: record,
+		indexes
+	});
+}
+//#endregion
+export { createApprovalStore, projectApproval };
+
+//# sourceMappingURL=approvals.mjs.map

package/dist/store/approvals.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"approvals.mjs","names":[],"sources":["../../src/store/approvals.ts"],"sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport { z } from \"zod\";\nimport { findFindingForTask } from \"../finding-remediation/brief\";\nimport { taskIdSchema, type TaskId } from \"../schema/id\";\nimport { taskSchema } from \"../schema/task\";\nimport type { FactoryStores } from \"./engine\";\nimport type { IndexedStore } from \"./indexed\";\nimport type { FactoryRecordPage, FactoryRecordQuery } from \"./query\";\n\n/** Indexed approval discovery; full authorized proposals are loaded only for the selected page. */\nexport interface ApprovalStore {\n  list(\n    query: FactoryRecordQuery & { sort?: \"created\" | \"priority\" | \"decided\" },\n  ): Promise<FactoryRecordPage<TaskId>>;\n}\nexport function createApprovalStore(store: IndexedStore): ApprovalStore {\n  return {\n    async list({ sort = \"created\", ...query }) {\n      const page = await store.queryRecords({\n        ...query,\n        sources: [{ collection: \"approvalRecords\", index: `approvals:${sort}` }],\n        order: sort === \"decided\" ? \"desc\" : \"asc\",\n      });\n      return {\n        items: page.entries.map((entry) => taskIdSchema.parse(entry.id)),\n        nextCursor: page.nextCursor,\n        totalCount: page.totalCount,\n      };\n    },\n  };\n}\nexport async function projectApproval(store: IndexedStore, stores: FactoryStores, value: unknown) {\n  const task = taskSchema.parse(value);\n  if (task.approval === undefined) return;\n  const [finding, decision, repositories] = await Promise.all([\n    findFindingForTask(stores, task),\n    stores.tasks.approvalReceipt(task.id),\n    Promise.all(task.repositoryIds.map((id) => stores.repositories.get(id))),\n  ]);\n  const record = {\n    id: task.id,\n    repositoryIds: task.repositoryIds,\n    status:\n      task.approval === \"required\" && task.state === \"queued\"\n        ? \"pending\"\n        : task.approval !== \"required\"\n          ? \"decided\"\n          : \"inactive\",\n    searchText: [\n      task.id,\n      ...repositories.map((repo) => repo?.slug),\n      finding?.title,\n      finding?.body,\n      finding?.category,\n      finding?.path,\n      decision?.decidedBy,\n      decision?.reason,\n    ].join(\" \"),\n  };\n  const previous = await store.get(\"approvalRecords\", task.id);\n  const indexes = [\n    { index: \"approvals:created\", sortKey: task.createdAt, summary: { id: task.id } },\n    {\n      index: \"approvals:priority\",\n      sortKey: `${finding?.priority ?? \"P4\"}:${task.createdAt}`,\n      summary: { id: task.id },\n    },\n    {\n      index: \"approvals:decided\",\n      sortKey: decision?.recordedAt ?? task.createdAt,\n      summary: { id: task.id },\n    },\n  ];\n  z.array(z.string()).parse(record.repositoryIds);\n  await store.write({\n    collection: \"approvalRecords\",\n    id: task.id,\n    operationId: randomUUID(),\n    expectedVersion: previous?.version ?? 0,\n    value: record,\n    indexes,\n  });\n}\n"],"mappings":";;;;;;AAeA,SAAgB,oBAAoB,OAAoC;CACtE,OAAO,EACL,MAAM,KAAK,EAAE,OAAO,WAAW,GAAG,SAAS;EACzC,MAAM,OAAO,MAAM,MAAM,aAAa;GACpC,GAAG;GACH,SAAS,CAAC;IAAE,YAAY;IAAmB,OAAO,aAAa;GAAO,CAAC;GACvE,OAAO,SAAS,YAAY,SAAS;EACvC,CAAC;EACD,OAAO;GACL,OAAO,KAAK,QAAQ,KAAK,UAAU,aAAa,MAAM,MAAM,EAAE,CAAC;GAC/D,YAAY,KAAK;GACjB,YAAY,KAAK;EACnB;CACF,EACF;AACF;AACA,eAAsB,gBAAgB,OAAqB,QAAuB,OAAgB;CAChG,MAAM,OAAO,WAAW,MAAM,KAAK;CACnC,IAAI,KAAK,aAAa,KAAA,GAAW;CACjC,MAAM,CAAC,SAAS,UAAU,gBAAgB,MAAM,QAAQ,IAAI;EAC1D,mBAAmB,QAAQ,IAAI;EAC/B,OAAO,MAAM,gBAAgB,KAAK,EAAE;EACpC,QAAQ,IAAI,KAAK,cAAc,KAAK,OAAO,OAAO,aAAa,IAAI,EAAE,CAAC,CAAC;CACzE,CAAC;CACD,MAAM,SAAS;EACb,IAAI,KAAK;EACT,eAAe,KAAK;EACpB,QACE,KAAK,aAAa,cAAc,KAAK,UAAU,WAC3C,YACA,KAAK,aAAa,aAChB,YACA;EACR,YAAY;GACV,KAAK;GACL,GAAG,aAAa,KAAK,SAAS,MAAM,IAAI;GACxC,SAAS;GACT,SAAS;GACT,SAAS;GACT,SAAS;GACT,UAAU;GACV,UAAU;EACZ,CAAC,CAAC,KAAK,GAAG;CACZ;CACA,MAAM,WAAW,MAAM,MAAM,IAAI,mBAAmB,KAAK,EAAE;CAC3D,MAAM,UAAU;EACd;GAAE,OAAO;GAAqB,SAAS,KAAK;GAAW,SAAS,EAAE,IAAI,KAAK,GAAG;EAAE;EAChF;GACE,OAAO;GACP,SAAS,GAAG,SAAS,YAAY,KAAK,GAAG,KAAK;GAC9C,SAAS,EAAE,IAAI,KAAK,GAAG;EACzB;EACA;GACE,OAAO;GACP,SAAS,UAAU,cAAc,KAAK;GACtC,SAAS,EAAE,IAAI,KAAK,GAAG;EACzB;CACF;CACA,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,OAAO,aAAa;CAC9C,MAAM,MAAM,MAAM;EAChB,YAAY;EACZ,IAAI,KAAK;EACT,aAAa,WAAW;EACxB,iBAAiB,UAAU,WAAW;EACtC,OAAO;EACP;CACF,CAAC;AACH"}

package/dist/store/conversations.d.mts

@@ -0,0 +1,59 @@
+import { FactoryRecordPage, FactoryRecordQuery } from "./query.mjs";
+import "./indexed.mjs";
+import "../schema/task.mjs";
+import { AgentRouteRegistry } from "../agent-routes.mjs";
+import { AgentSessionId } from "../schema/session.mjs";
+import "./engine.mjs";
+import { ConversationSummary } from "../schema/session-summary.mjs";
+import { z } from "zod";
+//#region src/store/conversations.d.ts
+/** Application-owned conversation routing and optional automatic-work workspace. */
+interface ConversationProjectionOptions {
+  readonly routes: AgentRouteRegistry;
+  readonly continuationAgent?: string;
+  /** Explicit shared workspace receiving newly admitted external routed Tasks. */
+  readonly workspaceOwner?: string;
+}
+declare const conversationExecutionSchema: z.ZodObject<{
+  taskId: z.ZodOptional<z.ZodType<`task_${string}`, string, z.core.$ZodTypeInternals<`task_${string}`, string>>>;
+  agent: z.ZodString;
+  message: z.ZodString;
+  attachments: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodObject<{
+    id: z.ZodType<`img_${string}`, string, z.core.$ZodTypeInternals<`img_${string}`, string>>;
+    filename: z.ZodString;
+    mediaType: z.ZodEnum<{
+      "image/png": "image/png";
+      "image/jpeg": "image/jpeg";
+      "image/webp": "image/webp";
+    }>;
+    size: z.ZodNumber;
+  }, z.core.$strict>>>>;
+  execution: z.ZodObject<{
+    provider: z.ZodString;
+    sessionId: z.ZodString;
+    environmentId: z.ZodOptional<z.ZodString>;
+    harness: z.ZodOptional<z.ZodString>;
+    traceId: z.ZodOptional<z.ZodString>;
+  }, z.core.$strict>;
+}, z.core.$strip>;
+type ConversationExecution = z.infer<typeof conversationExecutionSchema>;
+/** Authorized query of compact conversation records; never reads canonical Task payloads. */
+interface ConversationQuery extends FactoryRecordQuery {
+  readonly owner: string;
+  readonly repositoryId?: string;
+  readonly attention?: boolean;
+}
+/** Compact conversation discovery and maintained exact-owner attention count. */
+interface ConversationStore {
+  history(id: AgentSessionId, query: {
+    limit: number;
+    cursor?: string;
+  }): Promise<FactoryRecordPage<ConversationExecution>>;
+  execution(id: AgentSessionId, executionId: string): Promise<ConversationExecution | null>;
+  get(id: AgentSessionId): Promise<ConversationSummary | null>;
+  list(query: ConversationQuery): Promise<FactoryRecordPage<ConversationSummary>>;
+  count(owner: string, repositoryId?: string, attention?: boolean): Promise<number>;
+}
+//#endregion
+export { ConversationProjectionOptions, ConversationQuery, ConversationStore };
+//# sourceMappingURL=conversations.d.mts.map