@vercel/factory 0.0.17 → 0.0.18

package/dist/repositories.mjs

@@ -1,5 +1,6 @@
 import "./schema/common.mjs";
 import { repositorySlugSchema } from "./schema/repository.mjs";
+import { RecordExistsError, VersionConflictError } from "./store/driver.mjs";
 import { createHash } from "node:crypto";
 //#region src/repositories.ts
 /** Derives a stable repository ID from a validated canonical repository slug. */
@@ -13,19 +14,25 @@ async function ensureConfiguredRepository(stores, input) {
 	if (!input.configuredSlugs.map((configured) => repositorySlugSchema.parse(configured.toLowerCase())).includes(slug)) throw new Error(`Repository ${slug} is not configured for this factory.`);
 	const id = repositoryIdForSlug(slug);
 	const dependsOn = input.dependsOn.map((dependency) => repositorySlugSchema.parse(dependency.toLowerCase()));
-	const existing = await stores.repositories.get(id);
-	if (existing !== null && existing.defaultBranch === input.defaultBranch && existing.dependsOn.length === dependsOn.length && existing.dependsOn.every((dependency, index) => dependency === dependsOn[index])) return existing;
-	return stores.repositories.put({
-		...existing ?? {
-			schemaVersion: 1,
-			id,
-			slug,
-			enabled: true,
-			connectedAt: (/* @__PURE__ */ new Date()).toISOString()
-		},
-		defaultBranch: input.defaultBranch,
-		dependsOn
-	});
+	for (let retry = 0;; retry += 1) {
+		const existing = await stores.repositories.get(id);
+		if (existing !== null && existing.defaultBranch === input.defaultBranch && existing.dependsOn.length === dependsOn.length && existing.dependsOn.every((dependency, index) => dependency === dependsOn[index])) return existing;
+		try {
+			return await stores.repositories.put({
+				...existing ?? {
+					schemaVersion: 1,
+					id,
+					slug,
+					enabled: true,
+					connectedAt: (/* @__PURE__ */ new Date()).toISOString()
+				},
+				defaultBranch: input.defaultBranch,
+				dependsOn
+			});
+		} catch (error) {
+			if (!(error instanceof RecordExistsError || error instanceof VersionConflictError) || retry === 4) throw error;
+		}
+	}
 }
 //#endregion
 export { ensureConfiguredRepository, repositoryIdForSlug };

package/dist/repositories.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"repositories.mjs","names":[],"sources":["../src/repositories.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\nimport { SCHEMA_VERSION } from \"./schema/common\";\nimport { repositorySlugSchema, type Repository, type RepositorySlug } from \"./schema/repository\";\nimport type { RepositoryId } from \"./schema/id\";\nimport type { FactoryStores } from \"./store/engine\";\n\n/** Derives a stable repository ID from a validated canonical repository slug. */\nexport function repositoryIdForSlug(slug: RepositorySlug): RepositoryId {\n  const canonical = repositorySlugSchema.parse(slug.toLowerCase());\n  return `repo_${createHash(\"sha256\").update(canonical).digest(\"hex\").slice(0, 32)}`;\n}\n\n/** Repository metadata and configured allowlist used to admit or refresh one repository. */\nexport interface EnsureConfiguredRepositoryInput {\n  readonly slug: RepositorySlug;\n  readonly configuredSlugs: readonly RepositorySlug[];\n  readonly defaultBranch: string;\n  readonly dependsOn: readonly RepositorySlug[];\n}\n\n/** Admits or refreshes a repository only when its slug is explicitly configured. */\nexport async function ensureConfiguredRepository(\n  stores: Pick<FactoryStores, \"repositories\">,\n  input: EnsureConfiguredRepositoryInput,\n): Promise<Repository> {\n  const slug = repositorySlugSchema.parse(input.slug.toLowerCase());\n  const configuredSlugs = input.configuredSlugs.map((configured) =>\n    repositorySlugSchema.parse(configured.toLowerCase()),\n  );\n  if (!configuredSlugs.includes(slug)) {\n    throw new Error(`Repository ${slug} is not configured for this factory.`);\n  }\n  const id = repositoryIdForSlug(slug);\n  const dependsOn = input.dependsOn.map((dependency) =>\n    repositorySlugSchema.parse(dependency.toLowerCase()),\n  );\n  const existing = await stores.repositories.get(id);\n  if (\n    existing !== null &&\n    existing.defaultBranch === input.defaultBranch &&\n    existing.dependsOn.length === dependsOn.length &&\n    existing.dependsOn.every((dependency, index) => dependency === dependsOn[index])\n  ) {\n    return existing;\n  }\n  return stores.repositories.put({\n    ...(existing ?? {\n      schemaVersion: SCHEMA_VERSION,\n      id,\n      slug,\n      enabled: true,\n      connectedAt: new Date().toISOString(),\n    }),\n    defaultBranch: input.defaultBranch,\n    dependsOn,\n  });\n}\n"],"mappings":";;;;;AAOA,SAAgB,oBAAoB,MAAoC;CACtE,MAAM,YAAY,qBAAqB,MAAM,KAAK,YAAY,CAAC;CAC/D,OAAO,QAAQ,WAAW,QAAQ,CAAC,CAAC,OAAO,SAAS,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,MAAM,GAAG,EAAE;AACjF;;AAWA,eAAsB,2BACpB,QACA,OACqB;CACrB,MAAM,OAAO,qBAAqB,MAAM,MAAM,KAAK,YAAY,CAAC;CAIhE,IAAI,CAHoB,MAAM,gBAAgB,KAAK,eACjD,qBAAqB,MAAM,WAAW,YAAY,CAAC,CAElC,CAAC,CAAC,SAAS,IAAI,GAChC,MAAM,IAAI,MAAM,cAAc,KAAK,qCAAqC;CAE1E,MAAM,KAAK,oBAAoB,IAAI;CACnC,MAAM,YAAY,MAAM,UAAU,KAAK,eACrC,qBAAqB,MAAM,WAAW,YAAY,CAAC,CACrD;CACA,MAAM,WAAW,MAAM,OAAO,aAAa,IAAI,EAAE;CACjD,IACE,aAAa,QACb,SAAS,kBAAkB,MAAM,iBACjC,SAAS,UAAU,WAAW,UAAU,UACxC,SAAS,UAAU,OAAO,YAAY,UAAU,eAAe,UAAU,MAAM,GAE/E,OAAO;CAET,OAAO,OAAO,aAAa,IAAI;EAC7B,GAAI,YAAY;GACd,eAAA;GACA;GACA;GACA,SAAS;GACT,8BAAa,IAAI,KAAK,EAAA,CAAE,YAAY;EACtC;EACA,eAAe,MAAM;EACrB;CACF,CAAC;AACH"}
+{"version":3,"file":"repositories.mjs","names":[],"sources":["../src/repositories.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\nimport { SCHEMA_VERSION } from \"./schema/common\";\nimport { repositorySlugSchema, type Repository, type RepositorySlug } from \"./schema/repository\";\nimport type { RepositoryId } from \"./schema/id\";\nimport { RecordExistsError, VersionConflictError } from \"./store/driver\";\nimport type { FactoryStores } from \"./store/engine\";\n\n/** Derives a stable repository ID from a validated canonical repository slug. */\nexport function repositoryIdForSlug(slug: RepositorySlug): RepositoryId {\n  const canonical = repositorySlugSchema.parse(slug.toLowerCase());\n  return `repo_${createHash(\"sha256\").update(canonical).digest(\"hex\").slice(0, 32)}`;\n}\n\n/** Repository metadata and configured allowlist used to admit or refresh one repository. */\nexport interface EnsureConfiguredRepositoryInput {\n  readonly slug: RepositorySlug;\n  readonly configuredSlugs: readonly RepositorySlug[];\n  readonly defaultBranch: string;\n  readonly dependsOn: readonly RepositorySlug[];\n}\n\n/** Admits or refreshes a repository only when its slug is explicitly configured. */\nexport async function ensureConfiguredRepository(\n  stores: Pick<FactoryStores, \"repositories\">,\n  input: EnsureConfiguredRepositoryInput,\n): Promise<Repository> {\n  const slug = repositorySlugSchema.parse(input.slug.toLowerCase());\n  const configuredSlugs = input.configuredSlugs.map((configured) =>\n    repositorySlugSchema.parse(configured.toLowerCase()),\n  );\n  if (!configuredSlugs.includes(slug)) {\n    throw new Error(`Repository ${slug} is not configured for this factory.`);\n  }\n  const id = repositoryIdForSlug(slug);\n  const dependsOn = input.dependsOn.map((dependency) =>\n    repositorySlugSchema.parse(dependency.toLowerCase()),\n  );\n  for (let retry = 0; ; retry += 1) {\n    const existing = await stores.repositories.get(id);\n    if (\n      existing !== null &&\n      existing.defaultBranch === input.defaultBranch &&\n      existing.dependsOn.length === dependsOn.length &&\n      existing.dependsOn.every((dependency, index) => dependency === dependsOn[index])\n    ) {\n      return existing;\n    }\n    try {\n      return await stores.repositories.put({\n        ...(existing ?? {\n          schemaVersion: SCHEMA_VERSION,\n          id,\n          slug,\n          enabled: true,\n          connectedAt: new Date().toISOString(),\n        }),\n        defaultBranch: input.defaultBranch,\n        dependsOn,\n      });\n    } catch (error) {\n      if (\n        !(error instanceof RecordExistsError || error instanceof VersionConflictError) ||\n        retry === 4\n      )\n        throw error;\n    }\n  }\n}\n"],"mappings":";;;;;;AAQA,SAAgB,oBAAoB,MAAoC;CACtE,MAAM,YAAY,qBAAqB,MAAM,KAAK,YAAY,CAAC;CAC/D,OAAO,QAAQ,WAAW,QAAQ,CAAC,CAAC,OAAO,SAAS,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,MAAM,GAAG,EAAE;AACjF;;AAWA,eAAsB,2BACpB,QACA,OACqB;CACrB,MAAM,OAAO,qBAAqB,MAAM,MAAM,KAAK,YAAY,CAAC;CAIhE,IAAI,CAHoB,MAAM,gBAAgB,KAAK,eACjD,qBAAqB,MAAM,WAAW,YAAY,CAAC,CAElC,CAAC,CAAC,SAAS,IAAI,GAChC,MAAM,IAAI,MAAM,cAAc,KAAK,qCAAqC;CAE1E,MAAM,KAAK,oBAAoB,IAAI;CACnC,MAAM,YAAY,MAAM,UAAU,KAAK,eACrC,qBAAqB,MAAM,WAAW,YAAY,CAAC,CACrD;CACA,KAAK,IAAI,QAAQ,IAAK,SAAS,GAAG;EAChC,MAAM,WAAW,MAAM,OAAO,aAAa,IAAI,EAAE;EACjD,IACE,aAAa,QACb,SAAS,kBAAkB,MAAM,iBACjC,SAAS,UAAU,WAAW,UAAU,UACxC,SAAS,UAAU,OAAO,YAAY,UAAU,eAAe,UAAU,MAAM,GAE/E,OAAO;EAET,IAAI;GACF,OAAO,MAAM,OAAO,aAAa,IAAI;IACnC,GAAI,YAAY;KACd,eAAA;KACA;KACA;KACA,SAAS;KACT,8BAAa,IAAI,KAAK,EAAA,CAAE,YAAY;IACtC;IACA,eAAe,MAAM;IACrB;GACF,CAAC;EACH,SAAS,OAAO;GACd,IACE,EAAE,iBAAiB,qBAAqB,iBAAiB,yBACzD,UAAU,GAEV,MAAM;EACV;CACF;AACF"}

package/dist/sandbox/execution-run-ledger.d.mts

@@ -3,7 +3,7 @@ import { ExecutionReference } from "../schema/task.mjs";
 import "../workflows.mjs";
 import { MillisecondClock } from "../schema/common.mjs";
 import { CodingExecutionRequest, ExecutionLaunchKey, ExecutionResult } from "../schema/execution.mjs";
-import { BlobClient } from "../blob/index.mjs";
+import { ConditionalStateStore } from "../store/state.mjs";
 import { HarnessTurnUsage } from "./harness-runner.mjs";
 import { z } from "zod";
 //#region src/sandbox/execution-run-ledger.d.ts
@@ -72,7 +72,7 @@ type WithoutObservedExecution<Result extends ExecutionResult> = Result extends E
 type ExecutionOutcome = WithoutObservedExecution<ExecutionResult>;
 /** Durable state, clock, and model pricing used to construct an execution ledger. */
 interface ExecutionRunLedgerOptions {
-  state: BlobClient;
+  state: ConditionalStateStore;
   now?: MillisecondClock;
   calculateCostUsd?(model: string, turns: readonly HarnessTurnUsage[]): number | undefined;
 }

package/dist/sandbox/execution-run-ledger.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"execution-run-ledger.mjs","names":[],"sources":["../../src/sandbox/execution-run-ledger.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\nimport { isDeepStrictEqual } from \"node:util\";\nimport { z } from \"zod\";\nimport { ExecutionLaunchPendingError } from \"../dispatch\";\nimport type { MillisecondClock } from \"../schema/common\";\nimport {\n  codingExecutionRequestSchema,\n  executionLaunchKeySchema,\n  executionResultSchema,\n  type CodingExecutionRequest,\n  type ExecutionLaunchKey,\n  type ExecutionResult,\n} from \"../schema/execution\";\nimport { executionReferenceSchema, type ExecutionReference } from \"../schema/task\";\nimport { jsonValueSchema } from \"../schema/work\";\nimport type { BlobClient } from \"../blob/index\";\nimport type { HarnessTurnUsage } from \"./harness-runner\";\n\nconst turnUsageSchema = z.strictObject({\n  inputTokens: z.number().int().nonnegative(),\n  noCacheInputTokens: z.number().int().nonnegative(),\n  cacheReadTokens: z.number().int().nonnegative(),\n  cacheWriteTokens: z.number().int().nonnegative(),\n  outputTokens: z.number().int().nonnegative(),\n  complete: z.boolean().optional(),\n});\n\nconst runRecordSchema = z.strictObject({\n  key: executionLaunchKeySchema,\n  request: codingExecutionRequestSchema,\n  execution: executionReferenceSchema,\n  harnessSessionId: z.string().min(1),\n  model: z.string().min(1),\n  reportSchema: jsonValueSchema,\n  createdAtMs: z.number().int().nonnegative(),\n  launched: z.boolean(),\n  startedAtMs: z.number().int().nonnegative().optional(),\n  /** Set durably right after the prompt was accepted by the runtime. */\n  promptedAtMs: z.number().int().nonnegative().optional(),\n  resumeState: jsonValueSchema.optional(),\n  turns: z.array(turnUsageSchema).readonly(),\n  /** Unobserved spend makes cost permanently unknown, even if later usage is measured. */\n  lostUsage: z.boolean().optional(),\n  result: executionResultSchema.optional(),\n});\n\n/** Durable identity, continuation, usage, and terminal result for one sandbox execution. */\nexport type RunRecord = z.infer<typeof runRecordSchema>;\n\nconst sameJson = (left: unknown, right: unknown) =>\n  isDeepStrictEqual(\n    left === undefined ? undefined : JSON.parse(JSON.stringify(left)),\n    right === undefined ? undefined : JSON.parse(JSON.stringify(right)),\n  );\n// SDK values can carry non-plain properties; validate their persisted JSON form.\nconst asStoredJson = (value: unknown) => JSON.parse(JSON.stringify(value ?? null)) as unknown;\n\n/** A run record paired with the ETag required for its next confirmed CAS update. */\nexport interface RunSnapshot {\n  record: RunRecord;\n  etag: string;\n}\n\n/** Workflow-owned outcome fields combined with observed execution identity and usage at finalize time. */\ntype WithoutObservedExecution<Result extends ExecutionResult> = Result extends ExecutionResult\n  ? Omit<Result, \"execution\" | \"usage\">\n  : never;\n\n/** Workflow-owned outcome fields before observed execution identity and usage are attached. */\nexport type ExecutionOutcome = WithoutObservedExecution<ExecutionResult>;\nconst runPrefix = \"factory-executions/\";\n\n/** Durable state, clock, and model pricing used to construct an execution ledger. */\nexport interface ExecutionRunLedgerOptions {\n  state: BlobClient;\n  now?: MillisecondClock;\n  calculateCostUsd?(model: string, turns: readonly HarnessTurnUsage[]): number | undefined;\n}\n\n/** Immutable admission arguments for one stable sandbox execution key. */\nexport interface AdmitExecutionRunInput {\n  request: CodingExecutionRequest;\n  key: ExecutionLaunchKey;\n  model: string;\n  environmentId: string;\n  reportSchema?: unknown;\n}\n\n/** Identifies the prompt acceptance to persist for one admitted execution run. */\nexport interface MarkExecutionRunPromptedInput {\n  readonly base: RunSnapshot;\n  readonly resumeState: unknown;\n  readonly origin: \"this-driver\" | \"recovered\";\n}\n\n/** Identifies the first measured turn to persist for one admitted execution run. */\nexport interface RecordExecutionRunTurnInput {\n  readonly base: RunSnapshot;\n  readonly turn: HarnessTurnUsage;\n  readonly resumeState: unknown;\n  readonly origin: \"this-driver\" | \"recovered\";\n}\n\n/** CAS-backed operations for one sandbox execution's admission and continuation state. */\nexport interface ExecutionRunLedger {\n  usage(record: RunRecord): ExecutionResult[\"usage\"];\n  read(execution: ExecutionReference): Promise<RunSnapshot | null>;\n  admit(input: AdmitExecutionRunInput): Promise<RunSnapshot>;\n  markLaunched(base: RunSnapshot, resumeState: unknown): Promise<RunSnapshot>;\n  markPrompted(input: MarkExecutionRunPromptedInput): Promise<RunSnapshot>;\n  recordTurn(input: RecordExecutionRunTurnInput): Promise<RunSnapshot>;\n  finalize(base: RunSnapshot, outcome: ExecutionOutcome): Promise<ExecutionResult>;\n  pending(): Promise<readonly ExecutionReference[]>;\n}\n\n/** Create a CAS-backed ledger for idempotent execution admission, continuation, and finalization. */\nexport function createExecutionRunLedger(input: ExecutionRunLedgerOptions): ExecutionRunLedger {\n  const { state } = input;\n  const now = input.now ?? Date.now;\n  const runPath = (sessionId: string) => `${runPrefix}${sessionId}/run`;\n  async function readRun(sessionId: string): Promise<{ record: RunRecord; etag: string } | null> {\n    const stored = await state.read({ pathname: runPath(sessionId) });\n    if (!stored) return null;\n    return { record: runRecordSchema.parse(JSON.parse(stored.body)), etag: stored.etag };\n  }\n\n  async function writeRun(record: RunRecord, etag?: string): Promise<void> {\n    await state.write({\n      pathname: runPath(record.execution.sessionId),\n      body: JSON.stringify(record),\n      overwrite: etag !== undefined,\n      ...(etag === undefined ? {} : { ifMatch: etag }),\n    });\n  }\n\n  // A lost write response is ambiguous; confirm durable state before the next provider effect.\n  async function persistRun(\n    base: { record: RunRecord; etag: string },\n    apply: (record: RunRecord) => RunRecord,\n    verify: (record: RunRecord) => boolean,\n  ): Promise<{ record: RunRecord; etag: string }> {\n    try {\n      await writeRun(apply(base.record), base.etag);\n    } catch {\n      // Confirmed or retried below.\n    }\n    let current = await readRun(base.record.execution.sessionId);\n    if (current && !current.record.result && !verify(current.record)) {\n      try {\n        await writeRun(apply(current.record), current.etag);\n      } catch {\n        // Confirmed below.\n      }\n      current = await readRun(base.record.execution.sessionId);\n    }\n    if (current && (current.record.result || verify(current.record))) return current;\n    throw new Error(\"Execution state could not be persisted; drive again with the same reference\");\n  }\n\n  function usage(record: RunRecord): ExecutionResult[\"usage\"] {\n    const totals = {\n      inputTokens: record.turns.reduce((sum, turn) => sum + turn.inputTokens, 0),\n      outputTokens: record.turns.reduce((sum, turn) => sum + turn.outputTokens, 0),\n    };\n    const costUsd =\n      record.lostUsage !== true && (!record.launched || record.turns.length > 0)\n        ? input.calculateCostUsd?.(record.model, record.turns)\n        : undefined;\n    return {\n      computeMs: Math.max(0, now() - (record.startedAtMs ?? record.createdAtMs)),\n      ...totals,\n      ...(costUsd === undefined ? {} : { costUsd }),\n    };\n  }\n\n  return {\n    usage,\n    async read(execution: ExecutionReference): Promise<RunSnapshot | null> {\n      const stored = await readRun(execution.sessionId);\n      return stored && sameJson(stored.record.execution, execution) ? stored : null;\n    },\n    async admit(input: AdmitExecutionRunInput): Promise<RunSnapshot> {\n      const request = codingExecutionRequestSchema.parse(input.request);\n      if (input.key !== `factory-task:${request.taskId}:${request.attempt}`)\n        throw new Error(\"Execution key must be derived from the request's Task and attempt\");\n      const sessionId = createHash(\"sha256\").update(input.key).digest(\"hex\");\n      const execution = executionReferenceSchema.parse({\n        provider: \"vercel-sandbox\",\n        sessionId,\n        environmentId: input.environmentId,\n        harness: request.harness,\n      });\n      const reportSchema = jsonValueSchema.parse(asStoredJson(input.reportSchema ?? {}));\n      const matches = (record: RunRecord) =>\n        sameJson(record.request, request) &&\n        record.model === input.model &&\n        sameJson(record.reportSchema, reportSchema) &&\n        sameJson(record.execution, execution);\n      const existing = await readRun(sessionId);\n      if (existing) {\n        if (!matches(existing.record))\n          throw new Error(\"Launch key is already bound to a different execution request\");\n        return existing;\n      }\n      const record: RunRecord = {\n        key: input.key,\n        request,\n        execution,\n        model: input.model,\n        reportSchema,\n        harnessSessionId: `factory-${sessionId.slice(0, 24)}`,\n        createdAtMs: now(),\n        launched: false,\n        turns: [],\n      };\n      let writeError: unknown;\n      try {\n        await writeRun(record);\n      } catch (error) {\n        writeError = error;\n      }\n      let stored: RunSnapshot | null;\n      try {\n        stored = await readRun(sessionId);\n      } catch (cause) {\n        throw new ExecutionLaunchPendingError(\n          \"Execution admission requires recovery with its original key\",\n          { cause },\n        );\n      }\n      if (!stored) {\n        if (writeError) throw writeError;\n        throw new ExecutionLaunchPendingError(\"Execution admission could not be confirmed\");\n      }\n      if (!matches(stored.record))\n        throw new Error(\"Launch key is already bound to a different execution request\");\n      return stored;\n    },\n    markLaunched(base: RunSnapshot, resumeState: unknown): Promise<RunSnapshot> {\n      const normalized = jsonValueSchema.parse(asStoredJson(resumeState));\n      return persistRun(\n        base,\n        (record) =>\n          record.launched\n            ? record\n            : {\n                ...record,\n                launched: true,\n                resumeState: normalized,\n                startedAtMs: now(),\n              },\n        (record) => record.launched,\n      );\n    },\n    markPrompted({\n      base,\n      resumeState,\n      origin,\n    }: MarkExecutionRunPromptedInput): Promise<RunSnapshot> {\n      if (!base.record.launched)\n        throw new Error(\"The execution must be launched before recording a prompt\");\n      const normalized = jsonValueSchema.parse(asStoredJson(resumeState));\n      return persistRun(\n        base,\n        (record) =>\n          record.promptedAtMs !== undefined\n            ? record\n            : {\n                ...record,\n                promptedAtMs: now(),\n                resumeState: normalized,\n                ...(origin === \"recovered\" || record.lostUsage ? { lostUsage: true } : {}),\n              },\n        (record) => record.promptedAtMs !== undefined,\n      );\n    },\n    recordTurn({\n      base,\n      turn,\n      resumeState,\n      origin,\n    }: RecordExecutionRunTurnInput): Promise<RunSnapshot> {\n      if (!base.record.launched)\n        throw new Error(\"The execution must be launched before recording a turn\");\n      const normalized = jsonValueSchema.parse(asStoredJson(resumeState));\n      const measured = turnUsageSchema.parse(turn);\n      return persistRun(\n        base,\n        (record) =>\n          record.turns.length > 0\n            ? record\n            : {\n                ...record,\n                promptedAtMs: record.promptedAtMs ?? now(),\n                turns: [measured],\n                resumeState: normalized,\n                ...(origin === \"recovered\" || record.lostUsage ? { lostUsage: true } : {}),\n              },\n        (record) => record.turns.length > 0 && record.promptedAtMs !== undefined,\n      );\n    },\n    async finalize(base: RunSnapshot, outcome: ExecutionOutcome): Promise<ExecutionResult> {\n      if (base.record.result) return base.record.result;\n      const record = base.record;\n      const observed = usage(record);\n      const cancelledUsage = record.launched ? observed : { computeMs: 0, costUsd: 0 };\n      const result = executionResultSchema.parse({\n        ...outcome,\n        execution: record.execution,\n        usage: outcome.status === \"cancelled\" ? cancelledUsage : observed,\n      });\n      try {\n        await writeRun({ ...record, result }, base.etag);\n      } catch {\n        const latest = await readRun(record.execution.sessionId);\n        if (latest?.record.result) return latest.record.result;\n        throw new Error(\"Execution result could not be recorded; retry with the same key\");\n      }\n      const confirmed = await readRun(record.execution.sessionId);\n      if (confirmed?.record.result) return confirmed.record.result;\n      throw new Error(\"Execution result could not be recorded; retry with the same key\");\n    },\n    async pending(): Promise<readonly ExecutionReference[]> {\n      const references: ExecutionReference[] = [];\n      for (const path of await state.listPaths({ prefix: runPrefix })) {\n        const stored = await readRun(path.slice(runPrefix.length).split(\"/\")[0]!);\n        if (stored && !stored.record.result) references.push(stored.record.execution);\n      }\n      return references;\n    },\n  };\n}\n"],"mappings":";;;;;;;;AAkBA,MAAM,kBAAkB,EAAE,aAAa;CACrC,aAAa,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY;CAC1C,oBAAoB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY;CACjD,iBAAiB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY;CAC9C,kBAAkB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY;CAC/C,cAAc,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY;CAC3C,UAAU,EAAE,QAAQ,CAAC,CAAC,SAAS;AACjC,CAAC;AAED,MAAM,kBAAkB,EAAE,aAAa;CACrC,KAAK;CACL,SAAS;CACT,WAAW;CACX,kBAAkB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC;CAClC,OAAO,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC;CACvB,cAAc;CACd,aAAa,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY;CAC1C,UAAU,EAAE,QAAQ;CACpB,aAAa,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,SAAS;;CAErD,cAAc,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,SAAS;CACtD,aAAa,gBAAgB,SAAS;CACtC,OAAO,EAAE,MAAM,eAAe,CAAC,CAAC,SAAS;;CAEzC,WAAW,EAAE,QAAQ,CAAC,CAAC,SAAS;CAChC,QAAQ,sBAAsB,SAAS;AACzC,CAAC;AAKD,MAAM,YAAY,MAAe,UAC/B,kBACE,SAAS,KAAA,IAAY,KAAA,IAAY,KAAK,MAAM,KAAK,UAAU,IAAI,CAAC,GAChE,UAAU,KAAA,IAAY,KAAA,IAAY,KAAK,MAAM,KAAK,UAAU,KAAK,CAAC,CACpE;AAEF,MAAM,gBAAgB,UAAmB,KAAK,MAAM,KAAK,UAAU,SAAS,IAAI,CAAC;AAejF,MAAM,YAAY;;AA8ClB,SAAgB,yBAAyB,OAAsD;CAC7F,MAAM,EAAE,UAAU;CAClB,MAAM,MAAM,MAAM,OAAO,KAAK;CAC9B,MAAM,WAAW,cAAsB,GAAG,YAAY,UAAU;CAChE,eAAe,QAAQ,WAAwE;EAC7F,MAAM,SAAS,MAAM,MAAM,KAAK,EAAE,UAAU,QAAQ,SAAS,EAAE,CAAC;EAChE,IAAI,CAAC,QAAQ,OAAO;EACpB,OAAO;GAAE,QAAQ,gBAAgB,MAAM,KAAK,MAAM,OAAO,IAAI,CAAC;GAAG,MAAM,OAAO;EAAK;CACrF;CAEA,eAAe,SAAS,QAAmB,MAA8B;EACvE,MAAM,MAAM,MAAM;GAChB,UAAU,QAAQ,OAAO,UAAU,SAAS;GAC5C,MAAM,KAAK,UAAU,MAAM;GAC3B,WAAW,SAAS,KAAA;GACpB,GAAI,SAAS,KAAA,IAAY,CAAC,IAAI,EAAE,SAAS,KAAK;EAChD,CAAC;CACH;CAGA,eAAe,WACb,MACA,OACA,QAC8C;EAC9C,IAAI;GACF,MAAM,SAAS,MAAM,KAAK,MAAM,GAAG,KAAK,IAAI;EAC9C,QAAQ,CAER;EACA,IAAI,UAAU,MAAM,QAAQ,KAAK,OAAO,UAAU,SAAS;EAC3D,IAAI,WAAW,CAAC,QAAQ,OAAO,UAAU,CAAC,OAAO,QAAQ,MAAM,GAAG;GAChE,IAAI;IACF,MAAM,SAAS,MAAM,QAAQ,MAAM,GAAG,QAAQ,IAAI;GACpD,QAAQ,CAER;GACA,UAAU,MAAM,QAAQ,KAAK,OAAO,UAAU,SAAS;EACzD;EACA,IAAI,YAAY,QAAQ,OAAO,UAAU,OAAO,QAAQ,MAAM,IAAI,OAAO;EACzE,MAAM,IAAI,MAAM,6EAA6E;CAC/F;CAEA,SAAS,MAAM,QAA6C;EAC1D,MAAM,SAAS;GACb,aAAa,OAAO,MAAM,QAAQ,KAAK,SAAS,MAAM,KAAK,aAAa,CAAC;GACzE,cAAc,OAAO,MAAM,QAAQ,KAAK,SAAS,MAAM,KAAK,cAAc,CAAC;EAC7E;EACA,MAAM,UACJ,OAAO,cAAc,SAAS,CAAC,OAAO,YAAY,OAAO,MAAM,SAAS,KACpE,MAAM,mBAAmB,OAAO,OAAO,OAAO,KAAK,IACnD,KAAA;EACN,OAAO;GACL,WAAW,KAAK,IAAI,GAAG,IAAI,KAAK,OAAO,eAAe,OAAO,YAAY;GACzE,GAAG;GACH,GAAI,YAAY,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ;EAC7C;CACF;CAEA,OAAO;EACL;EACA,MAAM,KAAK,WAA4D;GACrE,MAAM,SAAS,MAAM,QAAQ,UAAU,SAAS;GAChD,OAAO,UAAU,SAAS,OAAO,OAAO,WAAW,SAAS,IAAI,SAAS;EAC3E;EACA,MAAM,MAAM,OAAqD;GAC/D,MAAM,UAAU,6BAA6B,MAAM,MAAM,OAAO;GAChE,IAAI,MAAM,QAAQ,gBAAgB,QAAQ,OAAO,GAAG,QAAQ,WAC1D,MAAM,IAAI,MAAM,mEAAmE;GACrF,MAAM,YAAY,WAAW,QAAQ,CAAC,CAAC,OAAO,MAAM,GAAG,CAAC,CAAC,OAAO,KAAK;GACrE,MAAM,YAAY,yBAAyB,MAAM;IAC/C,UAAU;IACV;IACA,eAAe,MAAM;IACrB,SAAS,QAAQ;GACnB,CAAC;GACD,MAAM,eAAe,gBAAgB,MAAM,aAAa,MAAM,gBAAgB,CAAC,CAAC,CAAC;GACjF,MAAM,WAAW,WACf,SAAS,OAAO,SAAS,OAAO,KAChC,OAAO,UAAU,MAAM,SACvB,SAAS,OAAO,cAAc,YAAY,KAC1C,SAAS,OAAO,WAAW,SAAS;GACtC,MAAM,WAAW,MAAM,QAAQ,SAAS;GACxC,IAAI,UAAU;IACZ,IAAI,CAAC,QAAQ,SAAS,MAAM,GAC1B,MAAM,IAAI,MAAM,8DAA8D;IAChF,OAAO;GACT;GACA,MAAM,SAAoB;IACxB,KAAK,MAAM;IACX;IACA;IACA,OAAO,MAAM;IACb;IACA,kBAAkB,WAAW,UAAU,MAAM,GAAG,EAAE;IAClD,aAAa,IAAI;IACjB,UAAU;IACV,OAAO,CAAC;GACV;GACA,IAAI;GACJ,IAAI;IACF,MAAM,SAAS,MAAM;GACvB,SAAS,OAAO;IACd,aAAa;GACf;GACA,IAAI;GACJ,IAAI;IACF,SAAS,MAAM,QAAQ,SAAS;GAClC,SAAS,OAAO;IACd,MAAM,IAAI,4BACR,+DACA,EAAE,MAAM,CACV;GACF;GACA,IAAI,CAAC,QAAQ;IACX,IAAI,YAAY,MAAM;IACtB,MAAM,IAAI,4BAA4B,4CAA4C;GACpF;GACA,IAAI,CAAC,QAAQ,OAAO,MAAM,GACxB,MAAM,IAAI,MAAM,8DAA8D;GAChF,OAAO;EACT;EACA,aAAa,MAAmB,aAA4C;GAC1E,MAAM,aAAa,gBAAgB,MAAM,aAAa,WAAW,CAAC;GAClE,OAAO,WACL,OACC,WACC,OAAO,WACH,SACA;IACE,GAAG;IACH,UAAU;IACV,aAAa;IACb,aAAa,IAAI;GACnB,IACL,WAAW,OAAO,QACrB;EACF;EACA,aAAa,EACX,MACA,aACA,UACsD;GACtD,IAAI,CAAC,KAAK,OAAO,UACf,MAAM,IAAI,MAAM,0DAA0D;GAC5E,MAAM,aAAa,gBAAgB,MAAM,aAAa,WAAW,CAAC;GAClE,OAAO,WACL,OACC,WACC,OAAO,iBAAiB,KAAA,IACpB,SACA;IACE,GAAG;IACH,cAAc,IAAI;IAClB,aAAa;IACb,GAAI,WAAW,eAAe,OAAO,YAAY,EAAE,WAAW,KAAK,IAAI,CAAC;GAC1E,IACL,WAAW,OAAO,iBAAiB,KAAA,CACtC;EACF;EACA,WAAW,EACT,MACA,MACA,aACA,UACoD;GACpD,IAAI,CAAC,KAAK,OAAO,UACf,MAAM,IAAI,MAAM,wDAAwD;GAC1E,MAAM,aAAa,gBAAgB,MAAM,aAAa,WAAW,CAAC;GAClE,MAAM,WAAW,gBAAgB,MAAM,IAAI;GAC3C,OAAO,WACL,OACC,WACC,OAAO,MAAM,SAAS,IAClB,SACA;IACE,GAAG;IACH,cAAc,OAAO,gBAAgB,IAAI;IACzC,OAAO,CAAC,QAAQ;IAChB,aAAa;IACb,GAAI,WAAW,eAAe,OAAO,YAAY,EAAE,WAAW,KAAK,IAAI,CAAC;GAC1E,IACL,WAAW,OAAO,MAAM,SAAS,KAAK,OAAO,iBAAiB,KAAA,CACjE;EACF;EACA,MAAM,SAAS,MAAmB,SAAqD;GACrF,IAAI,KAAK,OAAO,QAAQ,OAAO,KAAK,OAAO;GAC3C,MAAM,SAAS,KAAK;GACpB,MAAM,WAAW,MAAM,MAAM;GAC7B,MAAM,iBAAiB,OAAO,WAAW,WAAW;IAAE,WAAW;IAAG,SAAS;GAAE;GAC/E,MAAM,SAAS,sBAAsB,MAAM;IACzC,GAAG;IACH,WAAW,OAAO;IAClB,OAAO,QAAQ,WAAW,cAAc,iBAAiB;GAC3D,CAAC;GACD,IAAI;IACF,MAAM,SAAS;KAAE,GAAG;KAAQ;IAAO,GAAG,KAAK,IAAI;GACjD,QAAQ;IACN,MAAM,SAAS,MAAM,QAAQ,OAAO,UAAU,SAAS;IACvD,IAAI,QAAQ,OAAO,QAAQ,OAAO,OAAO,OAAO;IAChD,MAAM,IAAI,MAAM,iEAAiE;GACnF;GACA,MAAM,YAAY,MAAM,QAAQ,OAAO,UAAU,SAAS;GAC1D,IAAI,WAAW,OAAO,QAAQ,OAAO,UAAU,OAAO;GACtD,MAAM,IAAI,MAAM,iEAAiE;EACnF;EACA,MAAM,UAAkD;GACtD,MAAM,aAAmC,CAAC;GAC1C,KAAK,MAAM,QAAQ,MAAM,MAAM,UAAU,EAAE,QAAQ,UAAU,CAAC,GAAG;IAC/D,MAAM,SAAS,MAAM,QAAQ,KAAK,MAAM,EAAgB,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,EAAG;IACxE,IAAI,UAAU,CAAC,OAAO,OAAO,QAAQ,WAAW,KAAK,OAAO,OAAO,SAAS;GAC9E;GACA,OAAO;EACT;CACF;AACF"}
+{"version":3,"file":"execution-run-ledger.mjs","names":[],"sources":["../../src/sandbox/execution-run-ledger.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\nimport { isDeepStrictEqual } from \"node:util\";\nimport { z } from \"zod\";\nimport { ExecutionLaunchPendingError } from \"../dispatch\";\nimport type { MillisecondClock } from \"../schema/common\";\nimport {\n  codingExecutionRequestSchema,\n  executionLaunchKeySchema,\n  executionResultSchema,\n  type CodingExecutionRequest,\n  type ExecutionLaunchKey,\n  type ExecutionResult,\n} from \"../schema/execution\";\nimport { executionReferenceSchema, type ExecutionReference } from \"../schema/task\";\nimport { jsonValueSchema } from \"../schema/work\";\nimport type { ConditionalStateStore } from \"../store/state\";\nimport type { HarnessTurnUsage } from \"./harness-runner\";\n\nconst turnUsageSchema = z.strictObject({\n  inputTokens: z.number().int().nonnegative(),\n  noCacheInputTokens: z.number().int().nonnegative(),\n  cacheReadTokens: z.number().int().nonnegative(),\n  cacheWriteTokens: z.number().int().nonnegative(),\n  outputTokens: z.number().int().nonnegative(),\n  complete: z.boolean().optional(),\n});\n\nconst runRecordSchema = z.strictObject({\n  key: executionLaunchKeySchema,\n  request: codingExecutionRequestSchema,\n  execution: executionReferenceSchema,\n  harnessSessionId: z.string().min(1),\n  model: z.string().min(1),\n  reportSchema: jsonValueSchema,\n  createdAtMs: z.number().int().nonnegative(),\n  launched: z.boolean(),\n  startedAtMs: z.number().int().nonnegative().optional(),\n  /** Set durably right after the prompt was accepted by the runtime. */\n  promptedAtMs: z.number().int().nonnegative().optional(),\n  resumeState: jsonValueSchema.optional(),\n  turns: z.array(turnUsageSchema).readonly(),\n  /** Unobserved spend makes cost permanently unknown, even if later usage is measured. */\n  lostUsage: z.boolean().optional(),\n  result: executionResultSchema.optional(),\n});\n\n/** Durable identity, continuation, usage, and terminal result for one sandbox execution. */\nexport type RunRecord = z.infer<typeof runRecordSchema>;\n\nconst sameJson = (left: unknown, right: unknown) =>\n  isDeepStrictEqual(\n    left === undefined ? undefined : JSON.parse(JSON.stringify(left)),\n    right === undefined ? undefined : JSON.parse(JSON.stringify(right)),\n  );\n// SDK values can carry non-plain properties; validate their persisted JSON form.\nconst asStoredJson = (value: unknown) => JSON.parse(JSON.stringify(value ?? null)) as unknown;\n\n/** A run record paired with the ETag required for its next confirmed CAS update. */\nexport interface RunSnapshot {\n  record: RunRecord;\n  etag: string;\n}\n\n/** Workflow-owned outcome fields combined with observed execution identity and usage at finalize time. */\ntype WithoutObservedExecution<Result extends ExecutionResult> = Result extends ExecutionResult\n  ? Omit<Result, \"execution\" | \"usage\">\n  : never;\n\n/** Workflow-owned outcome fields before observed execution identity and usage are attached. */\nexport type ExecutionOutcome = WithoutObservedExecution<ExecutionResult>;\nconst runPrefix = \"factory-executions/\";\n\n/** Durable state, clock, and model pricing used to construct an execution ledger. */\nexport interface ExecutionRunLedgerOptions {\n  state: ConditionalStateStore;\n  now?: MillisecondClock;\n  calculateCostUsd?(model: string, turns: readonly HarnessTurnUsage[]): number | undefined;\n}\n\n/** Immutable admission arguments for one stable sandbox execution key. */\nexport interface AdmitExecutionRunInput {\n  request: CodingExecutionRequest;\n  key: ExecutionLaunchKey;\n  model: string;\n  environmentId: string;\n  reportSchema?: unknown;\n}\n\n/** Identifies the prompt acceptance to persist for one admitted execution run. */\nexport interface MarkExecutionRunPromptedInput {\n  readonly base: RunSnapshot;\n  readonly resumeState: unknown;\n  readonly origin: \"this-driver\" | \"recovered\";\n}\n\n/** Identifies the first measured turn to persist for one admitted execution run. */\nexport interface RecordExecutionRunTurnInput {\n  readonly base: RunSnapshot;\n  readonly turn: HarnessTurnUsage;\n  readonly resumeState: unknown;\n  readonly origin: \"this-driver\" | \"recovered\";\n}\n\n/** CAS-backed operations for one sandbox execution's admission and continuation state. */\nexport interface ExecutionRunLedger {\n  usage(record: RunRecord): ExecutionResult[\"usage\"];\n  read(execution: ExecutionReference): Promise<RunSnapshot | null>;\n  admit(input: AdmitExecutionRunInput): Promise<RunSnapshot>;\n  markLaunched(base: RunSnapshot, resumeState: unknown): Promise<RunSnapshot>;\n  markPrompted(input: MarkExecutionRunPromptedInput): Promise<RunSnapshot>;\n  recordTurn(input: RecordExecutionRunTurnInput): Promise<RunSnapshot>;\n  finalize(base: RunSnapshot, outcome: ExecutionOutcome): Promise<ExecutionResult>;\n  pending(): Promise<readonly ExecutionReference[]>;\n}\n\n/** Create a CAS-backed ledger for idempotent execution admission, continuation, and finalization. */\nexport function createExecutionRunLedger(input: ExecutionRunLedgerOptions): ExecutionRunLedger {\n  const { state } = input;\n  const now = input.now ?? Date.now;\n  const runPath = (sessionId: string) => `${runPrefix}${sessionId}/run`;\n  async function readRun(sessionId: string): Promise<{ record: RunRecord; etag: string } | null> {\n    const stored = await state.read({ pathname: runPath(sessionId) });\n    if (!stored) return null;\n    return { record: runRecordSchema.parse(JSON.parse(stored.body)), etag: stored.etag };\n  }\n\n  async function writeRun(record: RunRecord, etag?: string): Promise<void> {\n    await state.write({\n      pathname: runPath(record.execution.sessionId),\n      body: JSON.stringify(record),\n      overwrite: etag !== undefined,\n      ...(etag === undefined ? {} : { ifMatch: etag }),\n    });\n  }\n\n  // A lost write response is ambiguous; confirm durable state before the next provider effect.\n  async function persistRun(\n    base: { record: RunRecord; etag: string },\n    apply: (record: RunRecord) => RunRecord,\n    verify: (record: RunRecord) => boolean,\n  ): Promise<{ record: RunRecord; etag: string }> {\n    try {\n      await writeRun(apply(base.record), base.etag);\n    } catch {\n      // Confirmed or retried below.\n    }\n    let current = await readRun(base.record.execution.sessionId);\n    if (current && !current.record.result && !verify(current.record)) {\n      try {\n        await writeRun(apply(current.record), current.etag);\n      } catch {\n        // Confirmed below.\n      }\n      current = await readRun(base.record.execution.sessionId);\n    }\n    if (current && (current.record.result || verify(current.record))) return current;\n    throw new Error(\"Execution state could not be persisted; drive again with the same reference\");\n  }\n\n  function usage(record: RunRecord): ExecutionResult[\"usage\"] {\n    const totals = {\n      inputTokens: record.turns.reduce((sum, turn) => sum + turn.inputTokens, 0),\n      outputTokens: record.turns.reduce((sum, turn) => sum + turn.outputTokens, 0),\n    };\n    const costUsd =\n      record.lostUsage !== true && (!record.launched || record.turns.length > 0)\n        ? input.calculateCostUsd?.(record.model, record.turns)\n        : undefined;\n    return {\n      computeMs: Math.max(0, now() - (record.startedAtMs ?? record.createdAtMs)),\n      ...totals,\n      ...(costUsd === undefined ? {} : { costUsd }),\n    };\n  }\n\n  return {\n    usage,\n    async read(execution: ExecutionReference): Promise<RunSnapshot | null> {\n      const stored = await readRun(execution.sessionId);\n      return stored && sameJson(stored.record.execution, execution) ? stored : null;\n    },\n    async admit(input: AdmitExecutionRunInput): Promise<RunSnapshot> {\n      const request = codingExecutionRequestSchema.parse(input.request);\n      if (input.key !== `factory-task:${request.taskId}:${request.attempt}`)\n        throw new Error(\"Execution key must be derived from the request's Task and attempt\");\n      const sessionId = createHash(\"sha256\").update(input.key).digest(\"hex\");\n      const execution = executionReferenceSchema.parse({\n        provider: \"vercel-sandbox\",\n        sessionId,\n        environmentId: input.environmentId,\n        harness: request.harness,\n      });\n      const reportSchema = jsonValueSchema.parse(asStoredJson(input.reportSchema ?? {}));\n      const matches = (record: RunRecord) =>\n        sameJson(record.request, request) &&\n        record.model === input.model &&\n        sameJson(record.reportSchema, reportSchema) &&\n        sameJson(record.execution, execution);\n      const existing = await readRun(sessionId);\n      if (existing) {\n        if (!matches(existing.record))\n          throw new Error(\"Launch key is already bound to a different execution request\");\n        return existing;\n      }\n      const record: RunRecord = {\n        key: input.key,\n        request,\n        execution,\n        model: input.model,\n        reportSchema,\n        harnessSessionId: `factory-${sessionId.slice(0, 24)}`,\n        createdAtMs: now(),\n        launched: false,\n        turns: [],\n      };\n      let writeError: unknown;\n      try {\n        await writeRun(record);\n      } catch (error) {\n        writeError = error;\n      }\n      let stored: RunSnapshot | null;\n      try {\n        stored = await readRun(sessionId);\n      } catch (cause) {\n        throw new ExecutionLaunchPendingError(\n          \"Execution admission requires recovery with its original key\",\n          { cause },\n        );\n      }\n      if (!stored) {\n        if (writeError) throw writeError;\n        throw new ExecutionLaunchPendingError(\"Execution admission could not be confirmed\");\n      }\n      if (!matches(stored.record))\n        throw new Error(\"Launch key is already bound to a different execution request\");\n      return stored;\n    },\n    markLaunched(base: RunSnapshot, resumeState: unknown): Promise<RunSnapshot> {\n      const normalized = jsonValueSchema.parse(asStoredJson(resumeState));\n      return persistRun(\n        base,\n        (record) =>\n          record.launched\n            ? record\n            : {\n                ...record,\n                launched: true,\n                resumeState: normalized,\n                startedAtMs: now(),\n              },\n        (record) => record.launched,\n      );\n    },\n    markPrompted({\n      base,\n      resumeState,\n      origin,\n    }: MarkExecutionRunPromptedInput): Promise<RunSnapshot> {\n      if (!base.record.launched)\n        throw new Error(\"The execution must be launched before recording a prompt\");\n      const normalized = jsonValueSchema.parse(asStoredJson(resumeState));\n      return persistRun(\n        base,\n        (record) =>\n          record.promptedAtMs !== undefined\n            ? record\n            : {\n                ...record,\n                promptedAtMs: now(),\n                resumeState: normalized,\n                ...(origin === \"recovered\" || record.lostUsage ? { lostUsage: true } : {}),\n              },\n        (record) => record.promptedAtMs !== undefined,\n      );\n    },\n    recordTurn({\n      base,\n      turn,\n      resumeState,\n      origin,\n    }: RecordExecutionRunTurnInput): Promise<RunSnapshot> {\n      if (!base.record.launched)\n        throw new Error(\"The execution must be launched before recording a turn\");\n      const normalized = jsonValueSchema.parse(asStoredJson(resumeState));\n      const measured = turnUsageSchema.parse(turn);\n      return persistRun(\n        base,\n        (record) =>\n          record.turns.length > 0\n            ? record\n            : {\n                ...record,\n                promptedAtMs: record.promptedAtMs ?? now(),\n                turns: [measured],\n                resumeState: normalized,\n                ...(origin === \"recovered\" || record.lostUsage ? { lostUsage: true } : {}),\n              },\n        (record) => record.turns.length > 0 && record.promptedAtMs !== undefined,\n      );\n    },\n    async finalize(base: RunSnapshot, outcome: ExecutionOutcome): Promise<ExecutionResult> {\n      if (base.record.result) return base.record.result;\n      const record = base.record;\n      const observed = usage(record);\n      const cancelledUsage = record.launched ? observed : { computeMs: 0, costUsd: 0 };\n      const result = executionResultSchema.parse({\n        ...outcome,\n        execution: record.execution,\n        usage: outcome.status === \"cancelled\" ? cancelledUsage : observed,\n      });\n      try {\n        await writeRun({ ...record, result }, base.etag);\n      } catch {\n        const latest = await readRun(record.execution.sessionId);\n        if (latest?.record.result) return latest.record.result;\n        throw new Error(\"Execution result could not be recorded; retry with the same key\");\n      }\n      const confirmed = await readRun(record.execution.sessionId);\n      if (confirmed?.record.result) return confirmed.record.result;\n      throw new Error(\"Execution result could not be recorded; retry with the same key\");\n    },\n    async pending(): Promise<readonly ExecutionReference[]> {\n      const references: ExecutionReference[] = [];\n      for (const path of await state.listPaths({ prefix: runPrefix })) {\n        const stored = await readRun(path.slice(runPrefix.length).split(\"/\")[0]!);\n        if (stored && !stored.record.result) references.push(stored.record.execution);\n      }\n      return references;\n    },\n  };\n}\n"],"mappings":";;;;;;;;AAkBA,MAAM,kBAAkB,EAAE,aAAa;CACrC,aAAa,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY;CAC1C,oBAAoB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY;CACjD,iBAAiB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY;CAC9C,kBAAkB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY;CAC/C,cAAc,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY;CAC3C,UAAU,EAAE,QAAQ,CAAC,CAAC,SAAS;AACjC,CAAC;AAED,MAAM,kBAAkB,EAAE,aAAa;CACrC,KAAK;CACL,SAAS;CACT,WAAW;CACX,kBAAkB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC;CAClC,OAAO,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC;CACvB,cAAc;CACd,aAAa,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY;CAC1C,UAAU,EAAE,QAAQ;CACpB,aAAa,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,SAAS;;CAErD,cAAc,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,SAAS;CACtD,aAAa,gBAAgB,SAAS;CACtC,OAAO,EAAE,MAAM,eAAe,CAAC,CAAC,SAAS;;CAEzC,WAAW,EAAE,QAAQ,CAAC,CAAC,SAAS;CAChC,QAAQ,sBAAsB,SAAS;AACzC,CAAC;AAKD,MAAM,YAAY,MAAe,UAC/B,kBACE,SAAS,KAAA,IAAY,KAAA,IAAY,KAAK,MAAM,KAAK,UAAU,IAAI,CAAC,GAChE,UAAU,KAAA,IAAY,KAAA,IAAY,KAAK,MAAM,KAAK,UAAU,KAAK,CAAC,CACpE;AAEF,MAAM,gBAAgB,UAAmB,KAAK,MAAM,KAAK,UAAU,SAAS,IAAI,CAAC;AAejF,MAAM,YAAY;;AA8ClB,SAAgB,yBAAyB,OAAsD;CAC7F,MAAM,EAAE,UAAU;CAClB,MAAM,MAAM,MAAM,OAAO,KAAK;CAC9B,MAAM,WAAW,cAAsB,GAAG,YAAY,UAAU;CAChE,eAAe,QAAQ,WAAwE;EAC7F,MAAM,SAAS,MAAM,MAAM,KAAK,EAAE,UAAU,QAAQ,SAAS,EAAE,CAAC;EAChE,IAAI,CAAC,QAAQ,OAAO;EACpB,OAAO;GAAE,QAAQ,gBAAgB,MAAM,KAAK,MAAM,OAAO,IAAI,CAAC;GAAG,MAAM,OAAO;EAAK;CACrF;CAEA,eAAe,SAAS,QAAmB,MAA8B;EACvE,MAAM,MAAM,MAAM;GAChB,UAAU,QAAQ,OAAO,UAAU,SAAS;GAC5C,MAAM,KAAK,UAAU,MAAM;GAC3B,WAAW,SAAS,KAAA;GACpB,GAAI,SAAS,KAAA,IAAY,CAAC,IAAI,EAAE,SAAS,KAAK;EAChD,CAAC;CACH;CAGA,eAAe,WACb,MACA,OACA,QAC8C;EAC9C,IAAI;GACF,MAAM,SAAS,MAAM,KAAK,MAAM,GAAG,KAAK,IAAI;EAC9C,QAAQ,CAER;EACA,IAAI,UAAU,MAAM,QAAQ,KAAK,OAAO,UAAU,SAAS;EAC3D,IAAI,WAAW,CAAC,QAAQ,OAAO,UAAU,CAAC,OAAO,QAAQ,MAAM,GAAG;GAChE,IAAI;IACF,MAAM,SAAS,MAAM,QAAQ,MAAM,GAAG,QAAQ,IAAI;GACpD,QAAQ,CAER;GACA,UAAU,MAAM,QAAQ,KAAK,OAAO,UAAU,SAAS;EACzD;EACA,IAAI,YAAY,QAAQ,OAAO,UAAU,OAAO,QAAQ,MAAM,IAAI,OAAO;EACzE,MAAM,IAAI,MAAM,6EAA6E;CAC/F;CAEA,SAAS,MAAM,QAA6C;EAC1D,MAAM,SAAS;GACb,aAAa,OAAO,MAAM,QAAQ,KAAK,SAAS,MAAM,KAAK,aAAa,CAAC;GACzE,cAAc,OAAO,MAAM,QAAQ,KAAK,SAAS,MAAM,KAAK,cAAc,CAAC;EAC7E;EACA,MAAM,UACJ,OAAO,cAAc,SAAS,CAAC,OAAO,YAAY,OAAO,MAAM,SAAS,KACpE,MAAM,mBAAmB,OAAO,OAAO,OAAO,KAAK,IACnD,KAAA;EACN,OAAO;GACL,WAAW,KAAK,IAAI,GAAG,IAAI,KAAK,OAAO,eAAe,OAAO,YAAY;GACzE,GAAG;GACH,GAAI,YAAY,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ;EAC7C;CACF;CAEA,OAAO;EACL;EACA,MAAM,KAAK,WAA4D;GACrE,MAAM,SAAS,MAAM,QAAQ,UAAU,SAAS;GAChD,OAAO,UAAU,SAAS,OAAO,OAAO,WAAW,SAAS,IAAI,SAAS;EAC3E;EACA,MAAM,MAAM,OAAqD;GAC/D,MAAM,UAAU,6BAA6B,MAAM,MAAM,OAAO;GAChE,IAAI,MAAM,QAAQ,gBAAgB,QAAQ,OAAO,GAAG,QAAQ,WAC1D,MAAM,IAAI,MAAM,mEAAmE;GACrF,MAAM,YAAY,WAAW,QAAQ,CAAC,CAAC,OAAO,MAAM,GAAG,CAAC,CAAC,OAAO,KAAK;GACrE,MAAM,YAAY,yBAAyB,MAAM;IAC/C,UAAU;IACV;IACA,eAAe,MAAM;IACrB,SAAS,QAAQ;GACnB,CAAC;GACD,MAAM,eAAe,gBAAgB,MAAM,aAAa,MAAM,gBAAgB,CAAC,CAAC,CAAC;GACjF,MAAM,WAAW,WACf,SAAS,OAAO,SAAS,OAAO,KAChC,OAAO,UAAU,MAAM,SACvB,SAAS,OAAO,cAAc,YAAY,KAC1C,SAAS,OAAO,WAAW,SAAS;GACtC,MAAM,WAAW,MAAM,QAAQ,SAAS;GACxC,IAAI,UAAU;IACZ,IAAI,CAAC,QAAQ,SAAS,MAAM,GAC1B,MAAM,IAAI,MAAM,8DAA8D;IAChF,OAAO;GACT;GACA,MAAM,SAAoB;IACxB,KAAK,MAAM;IACX;IACA;IACA,OAAO,MAAM;IACb;IACA,kBAAkB,WAAW,UAAU,MAAM,GAAG,EAAE;IAClD,aAAa,IAAI;IACjB,UAAU;IACV,OAAO,CAAC;GACV;GACA,IAAI;GACJ,IAAI;IACF,MAAM,SAAS,MAAM;GACvB,SAAS,OAAO;IACd,aAAa;GACf;GACA,IAAI;GACJ,IAAI;IACF,SAAS,MAAM,QAAQ,SAAS;GAClC,SAAS,OAAO;IACd,MAAM,IAAI,4BACR,+DACA,EAAE,MAAM,CACV;GACF;GACA,IAAI,CAAC,QAAQ;IACX,IAAI,YAAY,MAAM;IACtB,MAAM,IAAI,4BAA4B,4CAA4C;GACpF;GACA,IAAI,CAAC,QAAQ,OAAO,MAAM,GACxB,MAAM,IAAI,MAAM,8DAA8D;GAChF,OAAO;EACT;EACA,aAAa,MAAmB,aAA4C;GAC1E,MAAM,aAAa,gBAAgB,MAAM,aAAa,WAAW,CAAC;GAClE,OAAO,WACL,OACC,WACC,OAAO,WACH,SACA;IACE,GAAG;IACH,UAAU;IACV,aAAa;IACb,aAAa,IAAI;GACnB,IACL,WAAW,OAAO,QACrB;EACF;EACA,aAAa,EACX,MACA,aACA,UACsD;GACtD,IAAI,CAAC,KAAK,OAAO,UACf,MAAM,IAAI,MAAM,0DAA0D;GAC5E,MAAM,aAAa,gBAAgB,MAAM,aAAa,WAAW,CAAC;GAClE,OAAO,WACL,OACC,WACC,OAAO,iBAAiB,KAAA,IACpB,SACA;IACE,GAAG;IACH,cAAc,IAAI;IAClB,aAAa;IACb,GAAI,WAAW,eAAe,OAAO,YAAY,EAAE,WAAW,KAAK,IAAI,CAAC;GAC1E,IACL,WAAW,OAAO,iBAAiB,KAAA,CACtC;EACF;EACA,WAAW,EACT,MACA,MACA,aACA,UACoD;GACpD,IAAI,CAAC,KAAK,OAAO,UACf,MAAM,IAAI,MAAM,wDAAwD;GAC1E,MAAM,aAAa,gBAAgB,MAAM,aAAa,WAAW,CAAC;GAClE,MAAM,WAAW,gBAAgB,MAAM,IAAI;GAC3C,OAAO,WACL,OACC,WACC,OAAO,MAAM,SAAS,IAClB,SACA;IACE,GAAG;IACH,cAAc,OAAO,gBAAgB,IAAI;IACzC,OAAO,CAAC,QAAQ;IAChB,aAAa;IACb,GAAI,WAAW,eAAe,OAAO,YAAY,EAAE,WAAW,KAAK,IAAI,CAAC;GAC1E,IACL,WAAW,OAAO,MAAM,SAAS,KAAK,OAAO,iBAAiB,KAAA,CACjE;EACF;EACA,MAAM,SAAS,MAAmB,SAAqD;GACrF,IAAI,KAAK,OAAO,QAAQ,OAAO,KAAK,OAAO;GAC3C,MAAM,SAAS,KAAK;GACpB,MAAM,WAAW,MAAM,MAAM;GAC7B,MAAM,iBAAiB,OAAO,WAAW,WAAW;IAAE,WAAW;IAAG,SAAS;GAAE;GAC/E,MAAM,SAAS,sBAAsB,MAAM;IACzC,GAAG;IACH,WAAW,OAAO;IAClB,OAAO,QAAQ,WAAW,cAAc,iBAAiB;GAC3D,CAAC;GACD,IAAI;IACF,MAAM,SAAS;KAAE,GAAG;KAAQ;IAAO,GAAG,KAAK,IAAI;GACjD,QAAQ;IACN,MAAM,SAAS,MAAM,QAAQ,OAAO,UAAU,SAAS;IACvD,IAAI,QAAQ,OAAO,QAAQ,OAAO,OAAO,OAAO;IAChD,MAAM,IAAI,MAAM,iEAAiE;GACnF;GACA,MAAM,YAAY,MAAM,QAAQ,OAAO,UAAU,SAAS;GAC1D,IAAI,WAAW,OAAO,QAAQ,OAAO,UAAU,OAAO;GACtD,MAAM,IAAI,MAAM,iEAAiE;EACnF;EACA,MAAM,UAAkD;GACtD,MAAM,aAAmC,CAAC;GAC1C,KAAK,MAAM,QAAQ,MAAM,MAAM,UAAU,EAAE,QAAQ,UAAU,CAAC,GAAG;IAC/D,MAAM,SAAS,MAAM,QAAQ,KAAK,MAAM,EAAgB,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,EAAG;IACxE,IAAI,UAAU,CAAC,OAAO,OAAO,QAAQ,WAAW,KAAK,OAAO,OAAO,SAAS;GAC9E;GACA,OAAO;EACT;CACF;AACF"}

package/dist/sandbox/execution.d.mts

@@ -1,8 +1,8 @@
 import { ExecutionReference } from "../schema/task.mjs";
 import { MillisecondClock } from "../schema/common.mjs";
 import { CodingExecutionRequest, ExecutionLaunchKey, ExecutionResult } from "../schema/execution.mjs";
-import { BlobClient } from "../blob/index.mjs";
 import { ExecutionAdapter } from "../execution.mjs";
+import { ConditionalStateStore } from "../store/state.mjs";
 import { ConfiguredHarnessRunner, HarnessTurnUsage, SandboxHandle } from "./harness-runner.mjs";
 import { ExecutionEnvironment } from "./execution-environment.mjs";
 import { ExecutionOutcome } from "./execution-run-ledger.mjs";
@@ -20,7 +20,7 @@ interface SandboxExecutionOutcomeContext {
 }
 /** Configures durable state, harnesses, environments, prompts, evidence, and usage pricing. */
 interface SandboxExecutionOptions {
-  state: BlobClient;
+  state: ConditionalStateStore;
   harnesses: Partial<Record<CodingExecutionRequest["harness"], ConfiguredHarnessRunner>>;
   environment: ExecutionEnvironment;
   buildPrompt(context: SandboxExecutionPromptContext): string;

package/dist/sandbox/execution.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"execution.mjs","names":[],"sources":["../../src/sandbox/execution.ts"],"sourcesContent":["import { ExecutionLaunchPendingError } from \"../dispatch\";\nimport {\n  codingExecutionRequestSchema,\n  executionResultSchema,\n  type CodingExecutionRequest,\n  type ExecutionLaunchKey,\n  type ExecutionResult,\n} from \"../schema/execution\";\nimport { type ExecutionAdapter } from \"../execution\";\nimport type { MillisecondClock } from \"../schema/common\";\nimport type { ExecutionReference } from \"../schema/task\";\nimport type { BlobClient } from \"../blob\";\nimport { ExecutionTimeoutError, withExecutionAbort } from \"./execution-abort\";\nimport type { ExecutionEnvironment } from \"./execution-environment\";\nimport {\n  createExecutionRunLedger,\n  type RunRecord,\n  type ExecutionOutcome,\n} from \"./execution-run-ledger\";\nimport type {\n  ConfiguredHarnessRunner,\n  HarnessTurn,\n  HarnessTurnUsage,\n  SandboxHandle,\n} from \"./harness-runner\";\n\nconst defaultSandboxTimeoutMarginMs = 300_000;\n\n/** Context used to construct the immutable prompt for an admitted sandbox execution. */\nexport interface SandboxExecutionPromptContext {\n  request: CodingExecutionRequest;\n  reportSchema: unknown;\n  sandbox: SandboxHandle;\n}\n\n/** Context used to validate and extract artifacts after a sandbox turn completes. */\nexport interface SandboxExecutionOutcomeContext {\n  request: CodingExecutionRequest;\n  sandbox: SandboxHandle;\n}\n\n/** Configures durable state, harnesses, environments, prompts, evidence, and usage pricing. */\nexport interface SandboxExecutionOptions {\n  state: BlobClient;\n  harnesses: Partial<Record<CodingExecutionRequest[\"harness\"], ConfiguredHarnessRunner>>;\n  environment: ExecutionEnvironment;\n  buildPrompt(context: SandboxExecutionPromptContext): string;\n  extractOutcome(context: SandboxExecutionOutcomeContext): Promise<ExecutionOutcome>;\n  calculateCostUsd?(model: string, turns: readonly HarnessTurnUsage[]): number | undefined;\n  sandboxTimeoutMarginMs?: number;\n  now?: MillisecondClock;\n}\n\n/** Coding request, stable launch key, and optional report contract for sandbox admission. */\nexport interface StartSandboxExecutionInput {\n  request: CodingExecutionRequest;\n  launchKey: ExecutionLaunchKey;\n  context?: SandboxExecutionStartContext;\n}\n\n/** Optional report contract associated with one sandbox execution launch. */\nexport interface SandboxExecutionStartContext {\n  reportSchema: unknown;\n}\n\n/** Execution adapter with explicit serial driving and pending-run discovery for sandbox work. */\nexport interface SandboxExecutionAdapter extends ExecutionAdapter {\n  start(input: StartSandboxExecutionInput): Promise<ExecutionReference>;\n  /** Serialize calls per execution; ledger CAS does not fence provider effects. */\n  drive(execution: ExecutionReference): Promise<ExecutionResult>;\n  /** Launch keys with admitted but unfinished runs, for drivers and drills. */\n  pending(): Promise<readonly ExecutionReference[]>;\n}\n\nconst bounded = (reason: string) => reason.slice(0, 2000);\n\n/** Create a durable execution adapter that runs configured harnesses in Task-scoped sandboxes. */\nexport function createSandboxExecutionAdapter(\n  options: SandboxExecutionOptions,\n): SandboxExecutionAdapter {\n  const now = options.now ?? Date.now;\n  const ledger = createExecutionRunLedger({\n    state: options.state,\n    now,\n    ...(options.calculateCostUsd ? { calculateCostUsd: options.calculateCostUsd } : {}),\n  });\n\n  function configuredHarness(harness: CodingExecutionRequest[\"harness\"]) {\n    const configured = options.harnesses[harness];\n    if (!configured || !configured.model.trim()) {\n      throw new Error(`Execution harness ${harness} has no configured runner and model`);\n    }\n    return configured;\n  }\n\n  const keyOf = (record: RunRecord) => ({\n    taskId: record.request.taskId,\n    attempt: record.request.attempt,\n  });\n\n  const sandboxTimeout = (request: CodingExecutionRequest) =>\n    request.environment.timeoutMs +\n    (options.sandboxTimeoutMarginMs ?? defaultSandboxTimeoutMarginMs);\n\n  async function extract(sandbox: SandboxHandle, record: RunRecord): Promise<ExecutionOutcome> {\n    const request = record.request;\n    const failed = (reason: string): ExecutionOutcome => ({\n      status: \"failed\",\n      artifacts: [],\n      reason: bounded(reason),\n    });\n    // Post-turn checks detect overruns; they cannot enforce a hard cap.\n    const usage = ledger.usage(record);\n    const { maxCostUsd, maxTokens } = request.limits;\n    if (maxCostUsd !== undefined && usage.costUsd !== undefined && usage.costUsd > maxCostUsd) {\n      return failed(\n        `Execution spent $${usage.costUsd}, exceeding its maxCostUsd of $${maxCostUsd}`,\n      );\n    }\n    if (\n      maxTokens !== undefined &&\n      (usage.inputTokens ?? 0) + (usage.outputTokens ?? 0) > maxTokens\n    ) {\n      return failed(\n        `Execution used ${(usage.inputTokens ?? 0) + (usage.outputTokens ?? 0)} tokens, exceeding its maxTokens of ${maxTokens}`,\n      );\n    }\n    return options.extractOutcome({ sandbox, request });\n  }\n\n  /** Best-effort idempotent environment shutdown; ambiguity propagates for retry. */\n  async function stopEnvironment(record: RunRecord): Promise<void> {\n    const sandbox = await options.environment.find(keyOf(record));\n    if (sandbox) await options.environment.stop(sandbox.sandbox);\n  }\n\n  return {\n    async start({ request, launchKey, context }) {\n      const parsed = codingExecutionRequestSchema.parse(request);\n      const configured = configuredHarness(parsed.harness);\n      const keyParts = { taskId: parsed.taskId, attempt: parsed.attempt };\n      const stored = await ledger.admit({\n        request: parsed,\n        key: launchKey,\n        model: configured.model,\n        environmentId: options.environment.name(keyParts),\n        reportSchema: context?.reportSchema,\n      });\n      if (stored.record.launched || stored.record.result) return stored.record.execution;\n      try {\n        await options.environment.ensure(keyParts, {\n          timeoutMs: sandboxTimeout(parsed),\n          request: parsed,\n        });\n      } catch (cause) {\n        // Admission already exists; provisioning failure must recover with the same key.\n        throw new ExecutionLaunchPendingError(\n          \"Execution environment provisioning is unresolved; recover with the original key\",\n          { cause },\n        );\n      }\n      return stored.record.execution;\n    },\n\n    async inspect(execution) {\n      const stored = await ledger.read(execution);\n      if (!stored) return { status: \"expired\" };\n      if (stored.record.result) return { status: \"finished\", result: stored.record.result };\n      const sandbox = await options.environment.find(keyOf(stored.record));\n      if (!sandbox || sandbox.liveness === \"terminal\") {\n        return { status: \"expired\" };\n      }\n      if (sandbox.liveness !== \"live\")\n        throw new Error(\"Execution environment is transitioning; inspect again shortly\");\n      return { status: \"active\" };\n    },\n\n    async stop(execution) {\n      const stored = await ledger.read(execution);\n      if (!stored) {\n        return executionResultSchema.parse({\n          status: \"cancelled\",\n          execution,\n          artifacts: [],\n          usage: { computeMs: 0 },\n          reason: \"No admitted execution matches this reference; its cost is unknown\",\n        });\n      }\n      const { record } = stored;\n      if (record.result) {\n        // A final result does not imply the sandbox has stopped.\n        await stopEnvironment(record);\n        return record.result;\n      }\n      await stopEnvironment(record);\n      return ledger.finalize(stored, {\n        status: \"cancelled\",\n        artifacts: [],\n        reason: record.launched\n          ? record.turns.length > 0\n            ? \"Execution was stopped after its completed turn was recorded\"\n            : \"Execution was stopped after launch; unfinished turn cost is unknown\"\n          : \"Execution was stopped before its prompt was sent\",\n      });\n    },\n\n    async drive(execution) {\n      const admitted = await ledger.read(execution);\n      if (!admitted) {\n        throw new Error(\"No admitted execution matches this reference\");\n      }\n      let stored = admitted;\n      if (stored.record.result) return stored.record.result;\n      const request = stored.record.request;\n      const configured = configuredHarness(request.harness);\n      if (configured.model !== stored.record.model) {\n        throw new Error(\"Execution model changed; restore its admitted harness configuration\");\n      }\n      // A launched attempt must never recreate its environment.\n      let sandbox: SandboxHandle;\n      if (!stored.record.launched) {\n        const observed = await options.environment.ensure(keyOf(stored.record), {\n          timeoutMs: sandboxTimeout(request),\n          request,\n        });\n        if (observed.liveness !== \"live\") throw new Error(\"Execution environment is not live\");\n        sandbox = observed.sandbox;\n      } else {\n        const found = await options.environment.find(keyOf(stored.record));\n        if (!found || found.liveness === \"terminal\") {\n          return ledger.finalize(stored, {\n            status: \"failed\",\n            artifacts: [],\n            reason:\n              \"Execution environment expired before a result was extracted; replacement requires a new attempt\",\n          });\n        }\n        if (found.liveness !== \"live\") {\n          throw new Error(\"Execution environment is transitioning; drive again shortly\");\n        }\n        sandbox = found.sandbox;\n      }\n      const remainingMs = Math.max(\n        0,\n        request.environment.timeoutMs - (now() - (stored.record.startedAtMs ?? now())),\n      );\n      try {\n        return await withExecutionAbort({\n          timeoutMs: remainingMs,\n          isStopped: async () => {\n            const latest = await ledger.read(execution);\n            if (!latest) throw new Error(\"The admitted execution disappeared\");\n            return latest.record.result !== undefined;\n          },\n          run: async (abortSignal) => {\n            if (remainingMs === 0) throw new ExecutionTimeoutError();\n            let observedFlip = false;\n            if (!stored.record.launched) {\n              // Confirm launch intent durably before sending any prompt.\n              const session = await configured.runner.open({\n                sandbox,\n                sessionId: stored.record.harnessSessionId,\n                abortSignal,\n              });\n              stored = await ledger.markLaunched(stored, await session.detach());\n              if (stored.record.result) return stored.record.result;\n              observedFlip = true;\n            }\n            let turn: HarnessTurn | undefined;\n            let promptedHere = false;\n            if (stored.record.promptedAtMs === undefined && stored.record.turns.length === 0) {\n              const session = await configured.runner.open({\n                sandbox,\n                sessionId: stored.record.harnessSessionId,\n                resumeFrom: stored.record.resumeState,\n                abortSignal,\n              });\n              const prompt = options.buildPrompt({\n                request,\n                reportSchema: stored.record.reportSchema,\n                sandbox,\n              });\n              // An unmarked prompt from another driver may have spent money already.\n              const foreignFlip = !observedFlip;\n              try {\n                const inflight = await session.beginPrompt(prompt);\n                stored = await ledger.markPrompted({\n                  base: stored,\n                  resumeState: inflight,\n                  origin: foreignFlip ? \"recovered\" : \"this-driver\",\n                });\n                promptedHere = true;\n              } catch (error) {\n                if (!(error instanceof Error && /unfinished turn/iu.test(error.message)))\n                  throw error;\n                // Drain the existing turn; its earlier usage was not observed.\n                turn = await session.continueTurn();\n                stored = await ledger.recordTurn({\n                  base: stored,\n                  turn: turn.usage,\n                  resumeState: await session.detach(),\n                  origin: \"recovered\",\n                });\n              }\n              if (stored.record.result) return stored.record.result;\n            }\n            if (turn === undefined && stored.record.turns.length === 0) {\n              const session = await configured.runner.open({\n                sandbox,\n                sessionId: stored.record.harnessSessionId,\n                resumeFrom: stored.record.resumeState,\n                abortSignal,\n              });\n              turn = await session.continueTurn();\n              stored = await ledger.recordTurn({\n                base: stored,\n                turn: turn.usage,\n                resumeState: await session.detach(),\n                origin: promptedHere ? \"this-driver\" : \"recovered\",\n              });\n              if (stored.record.result) return stored.record.result;\n            }\n            const result = await extract(sandbox, stored.record);\n            abortSignal.throwIfAborted();\n            return ledger.finalize(stored, result);\n          },\n        });\n      } catch (error) {\n        const latest = await ledger.read(execution);\n        if (latest?.record.result) return latest.record.result;\n        if (!(error instanceof ExecutionTimeoutError) || !latest) throw error;\n        await stopEnvironment(latest.record);\n        return ledger.finalize(latest, {\n          status: \"failed\",\n          artifacts: [],\n          reason: error.message,\n        });\n      }\n    },\n\n    pending: ledger.pending,\n  };\n}\n"],"mappings":";;;;;AA0BA,MAAM,gCAAgC;AAgDtC,MAAM,WAAW,WAAmB,OAAO,MAAM,GAAG,GAAI;;AAGxD,SAAgB,8BACd,SACyB;CACzB,MAAM,MAAM,QAAQ,OAAO,KAAK;CAChC,MAAM,SAAS,yBAAyB;EACtC,OAAO,QAAQ;EACf;EACA,GAAI,QAAQ,mBAAmB,EAAE,kBAAkB,QAAQ,iBAAiB,IAAI,CAAC;CACnF,CAAC;CAED,SAAS,kBAAkB,SAA4C;EACrE,MAAM,aAAa,QAAQ,UAAU;EACrC,IAAI,CAAC,cAAc,CAAC,WAAW,MAAM,KAAK,GACxC,MAAM,IAAI,MAAM,qBAAqB,QAAQ,oCAAoC;EAEnF,OAAO;CACT;CAEA,MAAM,SAAS,YAAuB;EACpC,QAAQ,OAAO,QAAQ;EACvB,SAAS,OAAO,QAAQ;CAC1B;CAEA,MAAM,kBAAkB,YACtB,QAAQ,YAAY,aACnB,QAAQ,0BAA0B;CAErC,eAAe,QAAQ,SAAwB,QAA8C;EAC3F,MAAM,UAAU,OAAO;EACvB,MAAM,UAAU,YAAsC;GACpD,QAAQ;GACR,WAAW,CAAC;GACZ,QAAQ,QAAQ,MAAM;EACxB;EAEA,MAAM,QAAQ,OAAO,MAAM,MAAM;EACjC,MAAM,EAAE,YAAY,cAAc,QAAQ;EAC1C,IAAI,eAAe,KAAA,KAAa,MAAM,YAAY,KAAA,KAAa,MAAM,UAAU,YAC7E,OAAO,OACL,oBAAoB,MAAM,QAAQ,iCAAiC,YACrE;EAEF,IACE,cAAc,KAAA,MACb,MAAM,eAAe,MAAM,MAAM,gBAAgB,KAAK,WAEvD,OAAO,OACL,mBAAmB,MAAM,eAAe,MAAM,MAAM,gBAAgB,GAAG,sCAAsC,WAC/G;EAEF,OAAO,QAAQ,eAAe;GAAE;GAAS;EAAQ,CAAC;CACpD;;CAGA,eAAe,gBAAgB,QAAkC;EAC/D,MAAM,UAAU,MAAM,QAAQ,YAAY,KAAK,MAAM,MAAM,CAAC;EAC5D,IAAI,SAAS,MAAM,QAAQ,YAAY,KAAK,QAAQ,OAAO;CAC7D;CAEA,OAAO;EACL,MAAM,MAAM,EAAE,SAAS,WAAW,WAAW;GAC3C,MAAM,SAAS,6BAA6B,MAAM,OAAO;GACzD,MAAM,aAAa,kBAAkB,OAAO,OAAO;GACnD,MAAM,WAAW;IAAE,QAAQ,OAAO;IAAQ,SAAS,OAAO;GAAQ;GAClE,MAAM,SAAS,MAAM,OAAO,MAAM;IAChC,SAAS;IACT,KAAK;IACL,OAAO,WAAW;IAClB,eAAe,QAAQ,YAAY,KAAK,QAAQ;IAChD,cAAc,SAAS;GACzB,CAAC;GACD,IAAI,OAAO,OAAO,YAAY,OAAO,OAAO,QAAQ,OAAO,OAAO,OAAO;GACzE,IAAI;IACF,MAAM,QAAQ,YAAY,OAAO,UAAU;KACzC,WAAW,eAAe,MAAM;KAChC,SAAS;IACX,CAAC;GACH,SAAS,OAAO;IAEd,MAAM,IAAI,4BACR,mFACA,EAAE,MAAM,CACV;GACF;GACA,OAAO,OAAO,OAAO;EACvB;EAEA,MAAM,QAAQ,WAAW;GACvB,MAAM,SAAS,MAAM,OAAO,KAAK,SAAS;GAC1C,IAAI,CAAC,QAAQ,OAAO,EAAE,QAAQ,UAAU;GACxC,IAAI,OAAO,OAAO,QAAQ,OAAO;IAAE,QAAQ;IAAY,QAAQ,OAAO,OAAO;GAAO;GACpF,MAAM,UAAU,MAAM,QAAQ,YAAY,KAAK,MAAM,OAAO,MAAM,CAAC;GACnE,IAAI,CAAC,WAAW,QAAQ,aAAa,YACnC,OAAO,EAAE,QAAQ,UAAU;GAE7B,IAAI,QAAQ,aAAa,QACvB,MAAM,IAAI,MAAM,+DAA+D;GACjF,OAAO,EAAE,QAAQ,SAAS;EAC5B;EAEA,MAAM,KAAK,WAAW;GACpB,MAAM,SAAS,MAAM,OAAO,KAAK,SAAS;GAC1C,IAAI,CAAC,QACH,OAAO,sBAAsB,MAAM;IACjC,QAAQ;IACR;IACA,WAAW,CAAC;IACZ,OAAO,EAAE,WAAW,EAAE;IACtB,QAAQ;GACV,CAAC;GAEH,MAAM,EAAE,WAAW;GACnB,IAAI,OAAO,QAAQ;IAEjB,MAAM,gBAAgB,MAAM;IAC5B,OAAO,OAAO;GAChB;GACA,MAAM,gBAAgB,MAAM;GAC5B,OAAO,OAAO,SAAS,QAAQ;IAC7B,QAAQ;IACR,WAAW,CAAC;IACZ,QAAQ,OAAO,WACX,OAAO,MAAM,SAAS,IACpB,gEACA,wEACF;GACN,CAAC;EACH;EAEA,MAAM,MAAM,WAAW;GACrB,MAAM,WAAW,MAAM,OAAO,KAAK,SAAS;GAC5C,IAAI,CAAC,UACH,MAAM,IAAI,MAAM,8CAA8C;GAEhE,IAAI,SAAS;GACb,IAAI,OAAO,OAAO,QAAQ,OAAO,OAAO,OAAO;GAC/C,MAAM,UAAU,OAAO,OAAO;GAC9B,MAAM,aAAa,kBAAkB,QAAQ,OAAO;GACpD,IAAI,WAAW,UAAU,OAAO,OAAO,OACrC,MAAM,IAAI,MAAM,qEAAqE;GAGvF,IAAI;GACJ,IAAI,CAAC,OAAO,OAAO,UAAU;IAC3B,MAAM,WAAW,MAAM,QAAQ,YAAY,OAAO,MAAM,OAAO,MAAM,GAAG;KACtE,WAAW,eAAe,OAAO;KACjC;IACF,CAAC;IACD,IAAI,SAAS,aAAa,QAAQ,MAAM,IAAI,MAAM,mCAAmC;IACrF,UAAU,SAAS;GACrB,OAAO;IACL,MAAM,QAAQ,MAAM,QAAQ,YAAY,KAAK,MAAM,OAAO,MAAM,CAAC;IACjE,IAAI,CAAC,SAAS,MAAM,aAAa,YAC/B,OAAO,OAAO,SAAS,QAAQ;KAC7B,QAAQ;KACR,WAAW,CAAC;KACZ,QACE;IACJ,CAAC;IAEH,IAAI,MAAM,aAAa,QACrB,MAAM,IAAI,MAAM,6DAA6D;IAE/E,UAAU,MAAM;GAClB;GACA,MAAM,cAAc,KAAK,IACvB,GACA,QAAQ,YAAY,aAAa,IAAI,KAAK,OAAO,OAAO,eAAe,IAAI,GAC7E;GACA,IAAI;IACF,OAAO,MAAM,mBAAmB;KAC9B,WAAW;KACX,WAAW,YAAY;MACrB,MAAM,SAAS,MAAM,OAAO,KAAK,SAAS;MAC1C,IAAI,CAAC,QAAQ,MAAM,IAAI,MAAM,oCAAoC;MACjE,OAAO,OAAO,OAAO,WAAW,KAAA;KAClC;KACA,KAAK,OAAO,gBAAgB;MAC1B,IAAI,gBAAgB,GAAG,MAAM,IAAI,sBAAsB;MACvD,IAAI,eAAe;MACnB,IAAI,CAAC,OAAO,OAAO,UAAU;OAE3B,MAAM,UAAU,MAAM,WAAW,OAAO,KAAK;QAC3C;QACA,WAAW,OAAO,OAAO;QACzB;OACF,CAAC;OACD,SAAS,MAAM,OAAO,aAAa,QAAQ,MAAM,QAAQ,OAAO,CAAC;OACjE,IAAI,OAAO,OAAO,QAAQ,OAAO,OAAO,OAAO;OAC/C,eAAe;MACjB;MACA,IAAI;MACJ,IAAI,eAAe;MACnB,IAAI,OAAO,OAAO,iBAAiB,KAAA,KAAa,OAAO,OAAO,MAAM,WAAW,GAAG;OAChF,MAAM,UAAU,MAAM,WAAW,OAAO,KAAK;QAC3C;QACA,WAAW,OAAO,OAAO;QACzB,YAAY,OAAO,OAAO;QAC1B;OACF,CAAC;OACD,MAAM,SAAS,QAAQ,YAAY;QACjC;QACA,cAAc,OAAO,OAAO;QAC5B;OACF,CAAC;OAED,MAAM,cAAc,CAAC;OACrB,IAAI;QACF,MAAM,WAAW,MAAM,QAAQ,YAAY,MAAM;QACjD,SAAS,MAAM,OAAO,aAAa;SACjC,MAAM;SACN,aAAa;SACb,QAAQ,cAAc,cAAc;QACtC,CAAC;QACD,eAAe;OACjB,SAAS,OAAO;QACd,IAAI,EAAE,iBAAiB,SAAS,oBAAoB,KAAK,MAAM,OAAO,IACpE,MAAM;QAER,OAAO,MAAM,QAAQ,aAAa;QAClC,SAAS,MAAM,OAAO,WAAW;SAC/B,MAAM;SACN,MAAM,KAAK;SACX,aAAa,MAAM,QAAQ,OAAO;SAClC,QAAQ;QACV,CAAC;OACH;OACA,IAAI,OAAO,OAAO,QAAQ,OAAO,OAAO,OAAO;MACjD;MACA,IAAI,SAAS,KAAA,KAAa,OAAO,OAAO,MAAM,WAAW,GAAG;OAC1D,MAAM,UAAU,MAAM,WAAW,OAAO,KAAK;QAC3C;QACA,WAAW,OAAO,OAAO;QACzB,YAAY,OAAO,OAAO;QAC1B;OACF,CAAC;OACD,OAAO,MAAM,QAAQ,aAAa;OAClC,SAAS,MAAM,OAAO,WAAW;QAC/B,MAAM;QACN,MAAM,KAAK;QACX,aAAa,MAAM,QAAQ,OAAO;QAClC,QAAQ,eAAe,gBAAgB;OACzC,CAAC;OACD,IAAI,OAAO,OAAO,QAAQ,OAAO,OAAO,OAAO;MACjD;MACA,MAAM,SAAS,MAAM,QAAQ,SAAS,OAAO,MAAM;MACnD,YAAY,eAAe;MAC3B,OAAO,OAAO,SAAS,QAAQ,MAAM;KACvC;IACF,CAAC;GACH,SAAS,OAAO;IACd,MAAM,SAAS,MAAM,OAAO,KAAK,SAAS;IAC1C,IAAI,QAAQ,OAAO,QAAQ,OAAO,OAAO,OAAO;IAChD,IAAI,EAAE,iBAAiB,0BAA0B,CAAC,QAAQ,MAAM;IAChE,MAAM,gBAAgB,OAAO,MAAM;IACnC,OAAO,OAAO,SAAS,QAAQ;KAC7B,QAAQ;KACR,WAAW,CAAC;KACZ,QAAQ,MAAM;IAChB,CAAC;GACH;EACF;EAEA,SAAS,OAAO;CAClB;AACF"}
+{"version":3,"file":"execution.mjs","names":[],"sources":["../../src/sandbox/execution.ts"],"sourcesContent":["import { ExecutionLaunchPendingError } from \"../dispatch\";\nimport {\n  codingExecutionRequestSchema,\n  executionResultSchema,\n  type CodingExecutionRequest,\n  type ExecutionLaunchKey,\n  type ExecutionResult,\n} from \"../schema/execution\";\nimport { type ExecutionAdapter } from \"../execution\";\nimport type { MillisecondClock } from \"../schema/common\";\nimport type { ExecutionReference } from \"../schema/task\";\nimport type { ConditionalStateStore } from \"../store/state\";\nimport { ExecutionTimeoutError, withExecutionAbort } from \"./execution-abort\";\nimport type { ExecutionEnvironment } from \"./execution-environment\";\nimport {\n  createExecutionRunLedger,\n  type RunRecord,\n  type ExecutionOutcome,\n} from \"./execution-run-ledger\";\nimport type {\n  ConfiguredHarnessRunner,\n  HarnessTurn,\n  HarnessTurnUsage,\n  SandboxHandle,\n} from \"./harness-runner\";\n\nconst defaultSandboxTimeoutMarginMs = 300_000;\n\n/** Context used to construct the immutable prompt for an admitted sandbox execution. */\nexport interface SandboxExecutionPromptContext {\n  request: CodingExecutionRequest;\n  reportSchema: unknown;\n  sandbox: SandboxHandle;\n}\n\n/** Context used to validate and extract artifacts after a sandbox turn completes. */\nexport interface SandboxExecutionOutcomeContext {\n  request: CodingExecutionRequest;\n  sandbox: SandboxHandle;\n}\n\n/** Configures durable state, harnesses, environments, prompts, evidence, and usage pricing. */\nexport interface SandboxExecutionOptions {\n  state: ConditionalStateStore;\n  harnesses: Partial<Record<CodingExecutionRequest[\"harness\"], ConfiguredHarnessRunner>>;\n  environment: ExecutionEnvironment;\n  buildPrompt(context: SandboxExecutionPromptContext): string;\n  extractOutcome(context: SandboxExecutionOutcomeContext): Promise<ExecutionOutcome>;\n  calculateCostUsd?(model: string, turns: readonly HarnessTurnUsage[]): number | undefined;\n  sandboxTimeoutMarginMs?: number;\n  now?: MillisecondClock;\n}\n\n/** Coding request, stable launch key, and optional report contract for sandbox admission. */\nexport interface StartSandboxExecutionInput {\n  request: CodingExecutionRequest;\n  launchKey: ExecutionLaunchKey;\n  context?: SandboxExecutionStartContext;\n}\n\n/** Optional report contract associated with one sandbox execution launch. */\nexport interface SandboxExecutionStartContext {\n  reportSchema: unknown;\n}\n\n/** Execution adapter with explicit serial driving and pending-run discovery for sandbox work. */\nexport interface SandboxExecutionAdapter extends ExecutionAdapter {\n  start(input: StartSandboxExecutionInput): Promise<ExecutionReference>;\n  /** Serialize calls per execution; ledger CAS does not fence provider effects. */\n  drive(execution: ExecutionReference): Promise<ExecutionResult>;\n  /** Launch keys with admitted but unfinished runs, for drivers and drills. */\n  pending(): Promise<readonly ExecutionReference[]>;\n}\n\nconst bounded = (reason: string) => reason.slice(0, 2000);\n\n/** Create a durable execution adapter that runs configured harnesses in Task-scoped sandboxes. */\nexport function createSandboxExecutionAdapter(\n  options: SandboxExecutionOptions,\n): SandboxExecutionAdapter {\n  const now = options.now ?? Date.now;\n  const ledger = createExecutionRunLedger({\n    state: options.state,\n    now,\n    ...(options.calculateCostUsd ? { calculateCostUsd: options.calculateCostUsd } : {}),\n  });\n\n  function configuredHarness(harness: CodingExecutionRequest[\"harness\"]) {\n    const configured = options.harnesses[harness];\n    if (!configured || !configured.model.trim()) {\n      throw new Error(`Execution harness ${harness} has no configured runner and model`);\n    }\n    return configured;\n  }\n\n  const keyOf = (record: RunRecord) => ({\n    taskId: record.request.taskId,\n    attempt: record.request.attempt,\n  });\n\n  const sandboxTimeout = (request: CodingExecutionRequest) =>\n    request.environment.timeoutMs +\n    (options.sandboxTimeoutMarginMs ?? defaultSandboxTimeoutMarginMs);\n\n  async function extract(sandbox: SandboxHandle, record: RunRecord): Promise<ExecutionOutcome> {\n    const request = record.request;\n    const failed = (reason: string): ExecutionOutcome => ({\n      status: \"failed\",\n      artifacts: [],\n      reason: bounded(reason),\n    });\n    // Post-turn checks detect overruns; they cannot enforce a hard cap.\n    const usage = ledger.usage(record);\n    const { maxCostUsd, maxTokens } = request.limits;\n    if (maxCostUsd !== undefined && usage.costUsd !== undefined && usage.costUsd > maxCostUsd) {\n      return failed(\n        `Execution spent $${usage.costUsd}, exceeding its maxCostUsd of $${maxCostUsd}`,\n      );\n    }\n    if (\n      maxTokens !== undefined &&\n      (usage.inputTokens ?? 0) + (usage.outputTokens ?? 0) > maxTokens\n    ) {\n      return failed(\n        `Execution used ${(usage.inputTokens ?? 0) + (usage.outputTokens ?? 0)} tokens, exceeding its maxTokens of ${maxTokens}`,\n      );\n    }\n    return options.extractOutcome({ sandbox, request });\n  }\n\n  /** Best-effort idempotent environment shutdown; ambiguity propagates for retry. */\n  async function stopEnvironment(record: RunRecord): Promise<void> {\n    const sandbox = await options.environment.find(keyOf(record));\n    if (sandbox) await options.environment.stop(sandbox.sandbox);\n  }\n\n  return {\n    async start({ request, launchKey, context }) {\n      const parsed = codingExecutionRequestSchema.parse(request);\n      const configured = configuredHarness(parsed.harness);\n      const keyParts = { taskId: parsed.taskId, attempt: parsed.attempt };\n      const stored = await ledger.admit({\n        request: parsed,\n        key: launchKey,\n        model: configured.model,\n        environmentId: options.environment.name(keyParts),\n        reportSchema: context?.reportSchema,\n      });\n      if (stored.record.launched || stored.record.result) return stored.record.execution;\n      try {\n        await options.environment.ensure(keyParts, {\n          timeoutMs: sandboxTimeout(parsed),\n          request: parsed,\n        });\n      } catch (cause) {\n        // Admission already exists; provisioning failure must recover with the same key.\n        throw new ExecutionLaunchPendingError(\n          \"Execution environment provisioning is unresolved; recover with the original key\",\n          { cause },\n        );\n      }\n      return stored.record.execution;\n    },\n\n    async inspect(execution) {\n      const stored = await ledger.read(execution);\n      if (!stored) return { status: \"expired\" };\n      if (stored.record.result) return { status: \"finished\", result: stored.record.result };\n      const sandbox = await options.environment.find(keyOf(stored.record));\n      if (!sandbox || sandbox.liveness === \"terminal\") {\n        return { status: \"expired\" };\n      }\n      if (sandbox.liveness !== \"live\")\n        throw new Error(\"Execution environment is transitioning; inspect again shortly\");\n      return { status: \"active\" };\n    },\n\n    async stop(execution) {\n      const stored = await ledger.read(execution);\n      if (!stored) {\n        return executionResultSchema.parse({\n          status: \"cancelled\",\n          execution,\n          artifacts: [],\n          usage: { computeMs: 0 },\n          reason: \"No admitted execution matches this reference; its cost is unknown\",\n        });\n      }\n      const { record } = stored;\n      if (record.result) {\n        // A final result does not imply the sandbox has stopped.\n        await stopEnvironment(record);\n        return record.result;\n      }\n      await stopEnvironment(record);\n      return ledger.finalize(stored, {\n        status: \"cancelled\",\n        artifacts: [],\n        reason: record.launched\n          ? record.turns.length > 0\n            ? \"Execution was stopped after its completed turn was recorded\"\n            : \"Execution was stopped after launch; unfinished turn cost is unknown\"\n          : \"Execution was stopped before its prompt was sent\",\n      });\n    },\n\n    async drive(execution) {\n      const admitted = await ledger.read(execution);\n      if (!admitted) {\n        throw new Error(\"No admitted execution matches this reference\");\n      }\n      let stored = admitted;\n      if (stored.record.result) return stored.record.result;\n      const request = stored.record.request;\n      const configured = configuredHarness(request.harness);\n      if (configured.model !== stored.record.model) {\n        throw new Error(\"Execution model changed; restore its admitted harness configuration\");\n      }\n      // A launched attempt must never recreate its environment.\n      let sandbox: SandboxHandle;\n      if (!stored.record.launched) {\n        const observed = await options.environment.ensure(keyOf(stored.record), {\n          timeoutMs: sandboxTimeout(request),\n          request,\n        });\n        if (observed.liveness !== \"live\") throw new Error(\"Execution environment is not live\");\n        sandbox = observed.sandbox;\n      } else {\n        const found = await options.environment.find(keyOf(stored.record));\n        if (!found || found.liveness === \"terminal\") {\n          return ledger.finalize(stored, {\n            status: \"failed\",\n            artifacts: [],\n            reason:\n              \"Execution environment expired before a result was extracted; replacement requires a new attempt\",\n          });\n        }\n        if (found.liveness !== \"live\") {\n          throw new Error(\"Execution environment is transitioning; drive again shortly\");\n        }\n        sandbox = found.sandbox;\n      }\n      const remainingMs = Math.max(\n        0,\n        request.environment.timeoutMs - (now() - (stored.record.startedAtMs ?? now())),\n      );\n      try {\n        return await withExecutionAbort({\n          timeoutMs: remainingMs,\n          isStopped: async () => {\n            const latest = await ledger.read(execution);\n            if (!latest) throw new Error(\"The admitted execution disappeared\");\n            return latest.record.result !== undefined;\n          },\n          run: async (abortSignal) => {\n            if (remainingMs === 0) throw new ExecutionTimeoutError();\n            let observedFlip = false;\n            if (!stored.record.launched) {\n              // Confirm launch intent durably before sending any prompt.\n              const session = await configured.runner.open({\n                sandbox,\n                sessionId: stored.record.harnessSessionId,\n                abortSignal,\n              });\n              stored = await ledger.markLaunched(stored, await session.detach());\n              if (stored.record.result) return stored.record.result;\n              observedFlip = true;\n            }\n            let turn: HarnessTurn | undefined;\n            let promptedHere = false;\n            if (stored.record.promptedAtMs === undefined && stored.record.turns.length === 0) {\n              const session = await configured.runner.open({\n                sandbox,\n                sessionId: stored.record.harnessSessionId,\n                resumeFrom: stored.record.resumeState,\n                abortSignal,\n              });\n              const prompt = options.buildPrompt({\n                request,\n                reportSchema: stored.record.reportSchema,\n                sandbox,\n              });\n              // An unmarked prompt from another driver may have spent money already.\n              const foreignFlip = !observedFlip;\n              try {\n                const inflight = await session.beginPrompt(prompt);\n                stored = await ledger.markPrompted({\n                  base: stored,\n                  resumeState: inflight,\n                  origin: foreignFlip ? \"recovered\" : \"this-driver\",\n                });\n                promptedHere = true;\n              } catch (error) {\n                if (!(error instanceof Error && /unfinished turn/iu.test(error.message)))\n                  throw error;\n                // Drain the existing turn; its earlier usage was not observed.\n                turn = await session.continueTurn();\n                stored = await ledger.recordTurn({\n                  base: stored,\n                  turn: turn.usage,\n                  resumeState: await session.detach(),\n                  origin: \"recovered\",\n                });\n              }\n              if (stored.record.result) return stored.record.result;\n            }\n            if (turn === undefined && stored.record.turns.length === 0) {\n              const session = await configured.runner.open({\n                sandbox,\n                sessionId: stored.record.harnessSessionId,\n                resumeFrom: stored.record.resumeState,\n                abortSignal,\n              });\n              turn = await session.continueTurn();\n              stored = await ledger.recordTurn({\n                base: stored,\n                turn: turn.usage,\n                resumeState: await session.detach(),\n                origin: promptedHere ? \"this-driver\" : \"recovered\",\n              });\n              if (stored.record.result) return stored.record.result;\n            }\n            const result = await extract(sandbox, stored.record);\n            abortSignal.throwIfAborted();\n            return ledger.finalize(stored, result);\n          },\n        });\n      } catch (error) {\n        const latest = await ledger.read(execution);\n        if (latest?.record.result) return latest.record.result;\n        if (!(error instanceof ExecutionTimeoutError) || !latest) throw error;\n        await stopEnvironment(latest.record);\n        return ledger.finalize(latest, {\n          status: \"failed\",\n          artifacts: [],\n          reason: error.message,\n        });\n      }\n    },\n\n    pending: ledger.pending,\n  };\n}\n"],"mappings":";;;;;AA0BA,MAAM,gCAAgC;AAgDtC,MAAM,WAAW,WAAmB,OAAO,MAAM,GAAG,GAAI;;AAGxD,SAAgB,8BACd,SACyB;CACzB,MAAM,MAAM,QAAQ,OAAO,KAAK;CAChC,MAAM,SAAS,yBAAyB;EACtC,OAAO,QAAQ;EACf;EACA,GAAI,QAAQ,mBAAmB,EAAE,kBAAkB,QAAQ,iBAAiB,IAAI,CAAC;CACnF,CAAC;CAED,SAAS,kBAAkB,SAA4C;EACrE,MAAM,aAAa,QAAQ,UAAU;EACrC,IAAI,CAAC,cAAc,CAAC,WAAW,MAAM,KAAK,GACxC,MAAM,IAAI,MAAM,qBAAqB,QAAQ,oCAAoC;EAEnF,OAAO;CACT;CAEA,MAAM,SAAS,YAAuB;EACpC,QAAQ,OAAO,QAAQ;EACvB,SAAS,OAAO,QAAQ;CAC1B;CAEA,MAAM,kBAAkB,YACtB,QAAQ,YAAY,aACnB,QAAQ,0BAA0B;CAErC,eAAe,QAAQ,SAAwB,QAA8C;EAC3F,MAAM,UAAU,OAAO;EACvB,MAAM,UAAU,YAAsC;GACpD,QAAQ;GACR,WAAW,CAAC;GACZ,QAAQ,QAAQ,MAAM;EACxB;EAEA,MAAM,QAAQ,OAAO,MAAM,MAAM;EACjC,MAAM,EAAE,YAAY,cAAc,QAAQ;EAC1C,IAAI,eAAe,KAAA,KAAa,MAAM,YAAY,KAAA,KAAa,MAAM,UAAU,YAC7E,OAAO,OACL,oBAAoB,MAAM,QAAQ,iCAAiC,YACrE;EAEF,IACE,cAAc,KAAA,MACb,MAAM,eAAe,MAAM,MAAM,gBAAgB,KAAK,WAEvD,OAAO,OACL,mBAAmB,MAAM,eAAe,MAAM,MAAM,gBAAgB,GAAG,sCAAsC,WAC/G;EAEF,OAAO,QAAQ,eAAe;GAAE;GAAS;EAAQ,CAAC;CACpD;;CAGA,eAAe,gBAAgB,QAAkC;EAC/D,MAAM,UAAU,MAAM,QAAQ,YAAY,KAAK,MAAM,MAAM,CAAC;EAC5D,IAAI,SAAS,MAAM,QAAQ,YAAY,KAAK,QAAQ,OAAO;CAC7D;CAEA,OAAO;EACL,MAAM,MAAM,EAAE,SAAS,WAAW,WAAW;GAC3C,MAAM,SAAS,6BAA6B,MAAM,OAAO;GACzD,MAAM,aAAa,kBAAkB,OAAO,OAAO;GACnD,MAAM,WAAW;IAAE,QAAQ,OAAO;IAAQ,SAAS,OAAO;GAAQ;GAClE,MAAM,SAAS,MAAM,OAAO,MAAM;IAChC,SAAS;IACT,KAAK;IACL,OAAO,WAAW;IAClB,eAAe,QAAQ,YAAY,KAAK,QAAQ;IAChD,cAAc,SAAS;GACzB,CAAC;GACD,IAAI,OAAO,OAAO,YAAY,OAAO,OAAO,QAAQ,OAAO,OAAO,OAAO;GACzE,IAAI;IACF,MAAM,QAAQ,YAAY,OAAO,UAAU;KACzC,WAAW,eAAe,MAAM;KAChC,SAAS;IACX,CAAC;GACH,SAAS,OAAO;IAEd,MAAM,IAAI,4BACR,mFACA,EAAE,MAAM,CACV;GACF;GACA,OAAO,OAAO,OAAO;EACvB;EAEA,MAAM,QAAQ,WAAW;GACvB,MAAM,SAAS,MAAM,OAAO,KAAK,SAAS;GAC1C,IAAI,CAAC,QAAQ,OAAO,EAAE,QAAQ,UAAU;GACxC,IAAI,OAAO,OAAO,QAAQ,OAAO;IAAE,QAAQ;IAAY,QAAQ,OAAO,OAAO;GAAO;GACpF,MAAM,UAAU,MAAM,QAAQ,YAAY,KAAK,MAAM,OAAO,MAAM,CAAC;GACnE,IAAI,CAAC,WAAW,QAAQ,aAAa,YACnC,OAAO,EAAE,QAAQ,UAAU;GAE7B,IAAI,QAAQ,aAAa,QACvB,MAAM,IAAI,MAAM,+DAA+D;GACjF,OAAO,EAAE,QAAQ,SAAS;EAC5B;EAEA,MAAM,KAAK,WAAW;GACpB,MAAM,SAAS,MAAM,OAAO,KAAK,SAAS;GAC1C,IAAI,CAAC,QACH,OAAO,sBAAsB,MAAM;IACjC,QAAQ;IACR;IACA,WAAW,CAAC;IACZ,OAAO,EAAE,WAAW,EAAE;IACtB,QAAQ;GACV,CAAC;GAEH,MAAM,EAAE,WAAW;GACnB,IAAI,OAAO,QAAQ;IAEjB,MAAM,gBAAgB,MAAM;IAC5B,OAAO,OAAO;GAChB;GACA,MAAM,gBAAgB,MAAM;GAC5B,OAAO,OAAO,SAAS,QAAQ;IAC7B,QAAQ;IACR,WAAW,CAAC;IACZ,QAAQ,OAAO,WACX,OAAO,MAAM,SAAS,IACpB,gEACA,wEACF;GACN,CAAC;EACH;EAEA,MAAM,MAAM,WAAW;GACrB,MAAM,WAAW,MAAM,OAAO,KAAK,SAAS;GAC5C,IAAI,CAAC,UACH,MAAM,IAAI,MAAM,8CAA8C;GAEhE,IAAI,SAAS;GACb,IAAI,OAAO,OAAO,QAAQ,OAAO,OAAO,OAAO;GAC/C,MAAM,UAAU,OAAO,OAAO;GAC9B,MAAM,aAAa,kBAAkB,QAAQ,OAAO;GACpD,IAAI,WAAW,UAAU,OAAO,OAAO,OACrC,MAAM,IAAI,MAAM,qEAAqE;GAGvF,IAAI;GACJ,IAAI,CAAC,OAAO,OAAO,UAAU;IAC3B,MAAM,WAAW,MAAM,QAAQ,YAAY,OAAO,MAAM,OAAO,MAAM,GAAG;KACtE,WAAW,eAAe,OAAO;KACjC;IACF,CAAC;IACD,IAAI,SAAS,aAAa,QAAQ,MAAM,IAAI,MAAM,mCAAmC;IACrF,UAAU,SAAS;GACrB,OAAO;IACL,MAAM,QAAQ,MAAM,QAAQ,YAAY,KAAK,MAAM,OAAO,MAAM,CAAC;IACjE,IAAI,CAAC,SAAS,MAAM,aAAa,YAC/B,OAAO,OAAO,SAAS,QAAQ;KAC7B,QAAQ;KACR,WAAW,CAAC;KACZ,QACE;IACJ,CAAC;IAEH,IAAI,MAAM,aAAa,QACrB,MAAM,IAAI,MAAM,6DAA6D;IAE/E,UAAU,MAAM;GAClB;GACA,MAAM,cAAc,KAAK,IACvB,GACA,QAAQ,YAAY,aAAa,IAAI,KAAK,OAAO,OAAO,eAAe,IAAI,GAC7E;GACA,IAAI;IACF,OAAO,MAAM,mBAAmB;KAC9B,WAAW;KACX,WAAW,YAAY;MACrB,MAAM,SAAS,MAAM,OAAO,KAAK,SAAS;MAC1C,IAAI,CAAC,QAAQ,MAAM,IAAI,MAAM,oCAAoC;MACjE,OAAO,OAAO,OAAO,WAAW,KAAA;KAClC;KACA,KAAK,OAAO,gBAAgB;MAC1B,IAAI,gBAAgB,GAAG,MAAM,IAAI,sBAAsB;MACvD,IAAI,eAAe;MACnB,IAAI,CAAC,OAAO,OAAO,UAAU;OAE3B,MAAM,UAAU,MAAM,WAAW,OAAO,KAAK;QAC3C;QACA,WAAW,OAAO,OAAO;QACzB;OACF,CAAC;OACD,SAAS,MAAM,OAAO,aAAa,QAAQ,MAAM,QAAQ,OAAO,CAAC;OACjE,IAAI,OAAO,OAAO,QAAQ,OAAO,OAAO,OAAO;OAC/C,eAAe;MACjB;MACA,IAAI;MACJ,IAAI,eAAe;MACnB,IAAI,OAAO,OAAO,iBAAiB,KAAA,KAAa,OAAO,OAAO,MAAM,WAAW,GAAG;OAChF,MAAM,UAAU,MAAM,WAAW,OAAO,KAAK;QAC3C;QACA,WAAW,OAAO,OAAO;QACzB,YAAY,OAAO,OAAO;QAC1B;OACF,CAAC;OACD,MAAM,SAAS,QAAQ,YAAY;QACjC;QACA,cAAc,OAAO,OAAO;QAC5B;OACF,CAAC;OAED,MAAM,cAAc,CAAC;OACrB,IAAI;QACF,MAAM,WAAW,MAAM,QAAQ,YAAY,MAAM;QACjD,SAAS,MAAM,OAAO,aAAa;SACjC,MAAM;SACN,aAAa;SACb,QAAQ,cAAc,cAAc;QACtC,CAAC;QACD,eAAe;OACjB,SAAS,OAAO;QACd,IAAI,EAAE,iBAAiB,SAAS,oBAAoB,KAAK,MAAM,OAAO,IACpE,MAAM;QAER,OAAO,MAAM,QAAQ,aAAa;QAClC,SAAS,MAAM,OAAO,WAAW;SAC/B,MAAM;SACN,MAAM,KAAK;SACX,aAAa,MAAM,QAAQ,OAAO;SAClC,QAAQ;QACV,CAAC;OACH;OACA,IAAI,OAAO,OAAO,QAAQ,OAAO,OAAO,OAAO;MACjD;MACA,IAAI,SAAS,KAAA,KAAa,OAAO,OAAO,MAAM,WAAW,GAAG;OAC1D,MAAM,UAAU,MAAM,WAAW,OAAO,KAAK;QAC3C;QACA,WAAW,OAAO,OAAO;QACzB,YAAY,OAAO,OAAO;QAC1B;OACF,CAAC;OACD,OAAO,MAAM,QAAQ,aAAa;OAClC,SAAS,MAAM,OAAO,WAAW;QAC/B,MAAM;QACN,MAAM,KAAK;QACX,aAAa,MAAM,QAAQ,OAAO;QAClC,QAAQ,eAAe,gBAAgB;OACzC,CAAC;OACD,IAAI,OAAO,OAAO,QAAQ,OAAO,OAAO,OAAO;MACjD;MACA,MAAM,SAAS,MAAM,QAAQ,SAAS,OAAO,MAAM;MACnD,YAAY,eAAe;MAC3B,OAAO,OAAO,SAAS,QAAQ,MAAM;KACvC;IACF,CAAC;GACH,SAAS,OAAO;IACd,MAAM,SAAS,MAAM,OAAO,KAAK,SAAS;IAC1C,IAAI,QAAQ,OAAO,QAAQ,OAAO,OAAO,OAAO;IAChD,IAAI,EAAE,iBAAiB,0BAA0B,CAAC,QAAQ,MAAM;IAChE,MAAM,gBAAgB,OAAO,MAAM;IACnC,OAAO,OAAO,SAAS,QAAQ;KAC7B,QAAQ;KACR,WAAW,CAAC;KACZ,QAAQ,MAAM;IAChB,CAAC;GACH;EACF;EAEA,SAAS,OAAO;CAClB;AACF"}

package/dist/schema/catalog.mjs

@@ -1,6 +1,6 @@
 import { isoDateTimeSchema, replyToSchema, schemaVersionSchema } from "./common.mjs";
-import { externalSessionSchema, storedSessionSchema } from "./stored-session.mjs";
 import { changeSchema } from "./change.mjs";
+import { externalSessionSchema, storedSessionSchema } from "./stored-session.mjs";
 import { storedTaskSchema } from "./stored-task.mjs";
 import { z } from "zod";
 //#region src/schema/catalog.ts

package/dist/schema/change.d.mts

@@ -10,11 +10,11 @@ declare const changeLevelSchema: z.ZodEnum<{
 declare const changeStateSchema: z.ZodEnum<{
   verifying: "verifying";
   ready: "ready";
+  closed: "closed";
   merged: "merged";
   deployed: "deployed";
   rolled_out: "rolled_out";
   rolled_back: "rolled_back";
-  closed: "closed";
 }>;
 /** Validates the verification evidence used to assess a Change. */
 declare const changeEvidenceSchema: z.ZodObject<{

package/dist/schema/communication.d.mts

@@ -10,8 +10,8 @@ declare const communicationOutcomeSchema: z.ZodEnum<{
   needs_human: "needs_human";
   cancelled: "cancelled";
   accepted: "accepted";
-  question: "question";
   rolled_back: "rolled_back";
+  question: "question";
   started: "started";
   digest: "digest";
   budget_warning: "budget_warning";
@@ -34,8 +34,8 @@ declare const communicationEventSchema: z.ZodObject<{
     needs_human: "needs_human";
     cancelled: "cancelled";
     accepted: "accepted";
-    question: "question";
     rolled_back: "rolled_back";
+    question: "question";
     started: "started";
     digest: "digest";
     budget_warning: "budget_warning";

package/dist/schema/factory-config.d.mts

@@ -1,5 +1,5 @@
-import { RepositorySlug } from "./repository.mjs";
 import { TaskKind } from "./task.mjs";
+import { RepositorySlug } from "./repository.mjs";
 import { z } from "zod";
 //#region src/schema/factory-config.d.ts
 /** Validates one repository allowlist entry and its configured dependency ordering. */

package/dist/schema/outbox.d.mts

@@ -29,8 +29,8 @@ declare const outboxMessageSchema: z.ZodDiscriminatedUnion<[z.ZodReadonly<z.ZodO
       needs_human: "needs_human";
       cancelled: "cancelled";
       accepted: "accepted";
-      question: "question";
       rolled_back: "rolled_back";
+      question: "question";
       started: "started";
       digest: "digest";
       budget_warning: "budget_warning";
@@ -65,8 +65,8 @@ declare const outboxMessageSchema: z.ZodDiscriminatedUnion<[z.ZodReadonly<z.ZodO
       needs_human: "needs_human";
       cancelled: "cancelled";
       accepted: "accepted";
-      question: "question";
       rolled_back: "rolled_back";
+      question: "question";
       started: "started";
       digest: "digest";
       budget_warning: "budget_warning";
@@ -101,8 +101,8 @@ declare const outboxMessageSchema: z.ZodDiscriminatedUnion<[z.ZodReadonly<z.ZodO
       needs_human: "needs_human";
       cancelled: "cancelled";
       accepted: "accepted";
-      question: "question";
       rolled_back: "rolled_back";
+      question: "question";
       started: "started";
       digest: "digest";
       budget_warning: "budget_warning";
@@ -144,8 +144,8 @@ declare const outboxQueueSchema: z.ZodReadonly<z.ZodObject<{
         needs_human: "needs_human";
         cancelled: "cancelled";
         accepted: "accepted";
-        question: "question";
         rolled_back: "rolled_back";
+        question: "question";
         started: "started";
         digest: "digest";
         budget_warning: "budget_warning";
@@ -180,8 +180,8 @@ declare const outboxQueueSchema: z.ZodReadonly<z.ZodObject<{
         needs_human: "needs_human";
         cancelled: "cancelled";
         accepted: "accepted";
-        question: "question";
         rolled_back: "rolled_back";
+        question: "question";
         started: "started";
         digest: "digest";
         budget_warning: "budget_warning";
@@ -216,8 +216,8 @@ declare const outboxQueueSchema: z.ZodReadonly<z.ZodObject<{
         needs_human: "needs_human";
         cancelled: "cancelled";
         accepted: "accepted";
-        question: "question";
         rolled_back: "rolled_back";
+        question: "question";
         started: "started";
         digest: "digest";
         budget_warning: "budget_warning";

package/dist/schema/session-summary.d.mts

@@ -0,0 +1,218 @@
+import { TaskKind } from "./task.mjs";
+import { z } from "zod";
+//#region src/schema/session-summary.d.ts
+/** Compact Task fields needed to render a conversation card, without execution inputs or outputs. */
+declare const sessionTaskSummarySchema: z.ZodObject<{
+  id: z.ZodType<`task_${string}`, string, z.core.$ZodTypeInternals<`task_${string}`, string>>;
+  replyTo: z.ZodObject<{
+    channel: z.ZodString;
+    address: z.ZodString;
+  }, z.core.$strict>;
+  attempt: z.ZodNumber;
+  state: z.ZodEnum<{
+    queued: "queued";
+    running: "running";
+    stalled: "stalled";
+    verifying: "verifying";
+    succeeded: "succeeded";
+    failed: "failed";
+    needs_human: "needs_human";
+    cancelled: "cancelled";
+  }>;
+  updatedAt: z.ZodISODateTime;
+  createdAt: z.ZodISODateTime;
+  repositoryIds: z.ZodReadonly<z.ZodTuple<[z.ZodType<`repo_${string}`, string, z.core.$ZodTypeInternals<`repo_${string}`, string>>], z.ZodType<`repo_${string}`, string, z.core.$ZodTypeInternals<`repo_${string}`, string>>>>;
+  kind: z.ZodType<TaskKind, unknown, z.core.$ZodTypeInternals<TaskKind, unknown>>;
+  approval: z.ZodOptional<z.ZodEnum<{
+    required: "required";
+    granted: "granted";
+    denied: "denied";
+  }>>;
+  rootTaskId: z.ZodType<`task_${string}`, string, z.core.$ZodTypeInternals<`task_${string}`, string>>;
+  parentTaskId: z.ZodOptional<z.ZodType<`task_${string}`, string, z.core.$ZodTypeInternals<`task_${string}`, string>>>;
+  stalledReason: z.ZodOptional<z.ZodString>;
+  needsHumanAction: z.ZodOptional<z.ZodString>;
+  changeId: z.ZodOptional<z.ZodType<`chg_${string}`, string, z.core.$ZodTypeInternals<`chg_${string}`, string>>>;
+  work: z.ZodObject<{
+    title: z.ZodString;
+    route: z.ZodOptional<z.core.$ZodBranded<z.ZodObject<{
+      id: z.ZodString;
+      version: z.ZodNumber;
+    }, z.core.$strict>, "AgentRouteBinding", "out">>;
+  }, z.core.$strip>;
+}, z.core.$strip>;
+/** Compact Task state on an operator conversation card. */
+type SessionTaskSummary = z.infer<typeof sessionTaskSummarySchema>;
+/** A conversation card deliberately excludes canonical Task bodies, histories, and transcript content. */
+declare const conversationSummarySchema: z.ZodObject<{
+  session: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    id: z.ZodType<`ses_${string}`, string, z.core.$ZodTypeInternals<`ses_${string}`, string>>;
+    owner: z.ZodString;
+    agent: z.ZodString;
+    repositoryId: z.ZodOptional<z.ZodType<`repo_${string}`, string, z.core.$ZodTypeInternals<`repo_${string}`, string>>>;
+    route: z.ZodOptional<z.core.$ZodBranded<z.ZodObject<{
+      id: z.ZodString;
+      version: z.ZodNumber;
+    }, z.core.$strict>, "AgentRouteBinding", "out">>;
+    model: z.ZodOptional<z.ZodString>;
+    attachments: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodObject<{
+      id: z.ZodType<`img_${string}`, string, z.core.$ZodTypeInternals<`img_${string}`, string>>;
+      filename: z.ZodString;
+      mediaType: z.ZodEnum<{
+        "image/png": "image/png";
+        "image/jpeg": "image/jpeg";
+        "image/webp": "image/webp";
+      }>;
+      size: z.ZodNumber;
+    }, z.core.$strict>>>>;
+    changeId: z.ZodOptional<z.ZodType<`chg_${string}`, string, z.core.$ZodTypeInternals<`chg_${string}`, string>>>;
+    taskId: z.ZodOptional<z.ZodType<`task_${string}`, string, z.core.$ZodTypeInternals<`task_${string}`, string>>>;
+    attached: z.ZodOptional<z.ZodBoolean>;
+    latestContinuationId: z.ZodOptional<z.ZodString>;
+    execution: z.ZodOptional<z.ZodObject<{
+      provider: z.ZodString;
+      sessionId: z.ZodString;
+      environmentId: z.ZodOptional<z.ZodString>;
+      harness: z.ZodOptional<z.ZodString>;
+      traceId: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+    external: z.ZodOptional<z.ZodReadonly<z.ZodObject<{
+      replyTo: z.ZodObject<{
+        channel: z.ZodString;
+        address: z.ZodString;
+      }, z.core.$strict>;
+      repositoryIds: z.ZodReadonly<z.ZodTuple<[z.ZodType<`repo_${string}`, string, z.core.$ZodTypeInternals<`repo_${string}`, string>>], z.ZodType<`repo_${string}`, string, z.core.$ZodTypeInternals<`repo_${string}`, string>>>>;
+      url: z.ZodOptional<z.ZodURL>;
+    }, z.core.$strict>>>;
+    latestNotificationId: z.ZodOptional<z.ZodString>;
+    createdAt: z.ZodISODateTime;
+    message: z.ZodString;
+  }, z.core.$strip>;
+  task: z.ZodNullable<z.ZodObject<{
+    id: z.ZodType<`task_${string}`, string, z.core.$ZodTypeInternals<`task_${string}`, string>>;
+    replyTo: z.ZodObject<{
+      channel: z.ZodString;
+      address: z.ZodString;
+    }, z.core.$strict>;
+    attempt: z.ZodNumber;
+    state: z.ZodEnum<{
+      queued: "queued";
+      running: "running";
+      stalled: "stalled";
+      verifying: "verifying";
+      succeeded: "succeeded";
+      failed: "failed";
+      needs_human: "needs_human";
+      cancelled: "cancelled";
+    }>;
+    updatedAt: z.ZodISODateTime;
+    createdAt: z.ZodISODateTime;
+    repositoryIds: z.ZodReadonly<z.ZodTuple<[z.ZodType<`repo_${string}`, string, z.core.$ZodTypeInternals<`repo_${string}`, string>>], z.ZodType<`repo_${string}`, string, z.core.$ZodTypeInternals<`repo_${string}`, string>>>>;
+    kind: z.ZodType<TaskKind, unknown, z.core.$ZodTypeInternals<TaskKind, unknown>>;
+    approval: z.ZodOptional<z.ZodEnum<{
+      required: "required";
+      granted: "granted";
+      denied: "denied";
+    }>>;
+    rootTaskId: z.ZodType<`task_${string}`, string, z.core.$ZodTypeInternals<`task_${string}`, string>>;
+    parentTaskId: z.ZodOptional<z.ZodType<`task_${string}`, string, z.core.$ZodTypeInternals<`task_${string}`, string>>>;
+    stalledReason: z.ZodOptional<z.ZodString>;
+    needsHumanAction: z.ZodOptional<z.ZodString>;
+    changeId: z.ZodOptional<z.ZodType<`chg_${string}`, string, z.core.$ZodTypeInternals<`chg_${string}`, string>>>;
+    work: z.ZodObject<{
+      title: z.ZodString;
+      route: z.ZodOptional<z.core.$ZodBranded<z.ZodObject<{
+        id: z.ZodString;
+        version: z.ZodNumber;
+      }, z.core.$strict>, "AgentRouteBinding", "out">>;
+    }, z.core.$strip>;
+  }, z.core.$strip>>;
+  question: z.ZodNullable<z.ZodObject<{
+    id: z.ZodType<`task_${string}`, string, z.core.$ZodTypeInternals<`task_${string}`, string>>;
+    updatedAt: z.ZodISODateTime;
+    question: z.ZodOptional<z.ZodObject<{
+      text: z.ZodString;
+      options: z.ZodReadonly<z.ZodArray<z.ZodString>>;
+      closingOptions: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodString>>>;
+      answer: z.ZodOptional<z.ZodString>;
+      answeredBy: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+  }, z.core.$strip>>;
+  execution: z.ZodNullable<z.ZodObject<{
+    provider: z.ZodString;
+    sessionId: z.ZodString;
+    environmentId: z.ZodOptional<z.ZodString>;
+    harness: z.ZodOptional<z.ZodString>;
+    traceId: z.ZodOptional<z.ZodString>;
+  }, z.core.$strict>>;
+  activeAgent: z.ZodOptional<z.ZodString>;
+  source: z.ZodOptional<z.ZodString>;
+  prUrl: z.ZodOptional<z.ZodString>;
+  attention: z.ZodOptional<z.ZodEnum<{
+    stalled: "stalled";
+    failed: "failed";
+    question: "question";
+    review: "review";
+    conversation: "conversation";
+  }>>;
+  status: z.ZodOptional<z.ZodEnum<{
+    stalled: "stalled";
+    verifying: "verifying";
+    failed: "failed";
+    ready: "ready";
+    working: "working";
+    delegated: "delegated";
+    needs_input: "needs_input";
+    awaiting_approval: "awaiting_approval";
+  }>>;
+  statusRevision: z.ZodOptional<z.ZodString>;
+  hasWorkflowFailure: z.ZodOptional<z.ZodBoolean>;
+  canCancel: z.ZodOptional<z.ZodBoolean>;
+  canFollowUp: z.ZodOptional<z.ZodBoolean>;
+  dependencyTaskIds: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodType<`task_${string}`, string, z.core.$ZodTypeInternals<`task_${string}`, string>>>>>;
+  relatedTasks: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodObject<{
+    id: z.ZodType<`task_${string}`, string, z.core.$ZodTypeInternals<`task_${string}`, string>>;
+    replyTo: z.ZodObject<{
+      channel: z.ZodString;
+      address: z.ZodString;
+    }, z.core.$strict>;
+    attempt: z.ZodNumber;
+    state: z.ZodEnum<{
+      queued: "queued";
+      running: "running";
+      stalled: "stalled";
+      verifying: "verifying";
+      succeeded: "succeeded";
+      failed: "failed";
+      needs_human: "needs_human";
+      cancelled: "cancelled";
+    }>;
+    updatedAt: z.ZodISODateTime;
+    createdAt: z.ZodISODateTime;
+    repositoryIds: z.ZodReadonly<z.ZodTuple<[z.ZodType<`repo_${string}`, string, z.core.$ZodTypeInternals<`repo_${string}`, string>>], z.ZodType<`repo_${string}`, string, z.core.$ZodTypeInternals<`repo_${string}`, string>>>>;
+    kind: z.ZodType<TaskKind, unknown, z.core.$ZodTypeInternals<TaskKind, unknown>>;
+    approval: z.ZodOptional<z.ZodEnum<{
+      required: "required";
+      granted: "granted";
+      denied: "denied";
+    }>>;
+    rootTaskId: z.ZodType<`task_${string}`, string, z.core.$ZodTypeInternals<`task_${string}`, string>>;
+    parentTaskId: z.ZodOptional<z.ZodType<`task_${string}`, string, z.core.$ZodTypeInternals<`task_${string}`, string>>>;
+    stalledReason: z.ZodOptional<z.ZodString>;
+    needsHumanAction: z.ZodOptional<z.ZodString>;
+    changeId: z.ZodOptional<z.ZodType<`chg_${string}`, string, z.core.$ZodTypeInternals<`chg_${string}`, string>>>;
+    work: z.ZodObject<{
+      title: z.ZodString;
+      route: z.ZodOptional<z.core.$ZodBranded<z.ZodObject<{
+        id: z.ZodString;
+        version: z.ZodNumber;
+      }, z.core.$strict>, "AgentRouteBinding", "out">>;
+    }, z.core.$strip>;
+  }, z.core.$strip>>>>;
+}, z.core.$strip>;
+/** Stored conversation card before request-time operator enrichment. */
+type ConversationSummary = z.infer<typeof conversationSummarySchema>;
+//#endregion
+export { ConversationSummary, SessionTaskSummary, conversationSummarySchema, sessionTaskSummarySchema };
+//# sourceMappingURL=session-summary.d.mts.map