@vibesdotdev/runnable 0.0.0-stage → 1.0.0-rc.1

package/dist/client/records/owner.d.ts

@@ -0,0 +1,254 @@
+import { type RuntimeRef } from '@vibesdotdev/kernel';
+import { type JsonObject, type JsonValue } from '@vibesdotdev/kernel/schemas/json';
+import { type RunRecord, type RunnableRecords } from '../../schemas/runs.ts';
+import { type RunnableStateHostContext } from '../../runtime/host.ts';
+import type { GenericRunStateManager } from '../../runtime/state/index.ts';
+export declare class RunnableRecordOwner {
+    readonly runtime: RuntimeRef;
+    constructor(runtime: RuntimeRef);
+    scopeIdentity(): Promise<string>;
+    records(): Promise<RunnableRecords>;
+    storedRecord(input: string): Promise<RunRecord | null>;
+    inputAdmission(runId: string, expectedConfig?: JsonObject): Promise<{
+        record: {
+            id: string;
+            scope: string;
+            status: string;
+            runnableType: string;
+            runnableId: string;
+            config: JsonObject;
+            progress: number;
+            startedAt: number;
+            metadata: JsonObject;
+            inputDigest: string;
+            name?: string | undefined;
+            endedAt?: number | undefined;
+            parentRunId?: string | undefined;
+            outcome?: {
+                status: "done";
+                value: JsonValue;
+            } | {
+                status: "not-done";
+                reason: string;
+                value?: JsonValue | undefined;
+                failure?: {
+                    code: string;
+                    message: string;
+                    name?: string | undefined;
+                    reason?: string | undefined;
+                    retryable?: boolean | undefined;
+                    recoveryHint?: string | undefined;
+                    details?: JsonValue | undefined;
+                } | undefined;
+            } | {
+                status: "disputed";
+                why: string;
+                claims: {
+                    id: string;
+                    statement: string;
+                    quote: {
+                        link: {
+                            kind: string;
+                            id: string;
+                            source: string;
+                            role: string;
+                        };
+                        scope: string;
+                        revision: {
+                            scheme: string;
+                            value: string;
+                        };
+                        text: string;
+                        anchor?: {
+                            kind: "code";
+                            path: string;
+                            startLine: number;
+                            endLine: number;
+                        } | {
+                            kind: "region";
+                            start: number;
+                            end: number;
+                        } | {
+                            kind: "fragment";
+                            id: string;
+                        } | {
+                            kind: "heading";
+                            slug: string;
+                        } | undefined;
+                        freshness?: {
+                            modifiedAt?: string | undefined;
+                            stale?: boolean | undefined;
+                        } | undefined;
+                    };
+                    via: string[];
+                    stale?: boolean | undefined;
+                }[];
+            } | {
+                status: "skipped";
+                reason: string;
+                cause: {
+                    kind: "cancelled";
+                    provenance: JsonValue;
+                } | {
+                    kind: "explicit";
+                } | {
+                    kind: "dependency";
+                    blockedBy: string[];
+                };
+            } | undefined;
+            ref?: {
+                jobId?: string | undefined;
+                aiCallRunId?: string | undefined;
+                ciRunId?: string | undefined;
+                executionReference?: string | undefined;
+            } | undefined;
+            rankReason?: {
+                named: true;
+            } | {
+                coldStart: true;
+                cost: number;
+            } | undefined;
+            approval?: "approved" | "assumed" | undefined;
+            activity?: {
+                message: string;
+                ts: number;
+            } | undefined;
+        };
+        admission: {
+            version: 1;
+            runId: string;
+            runnableId: string;
+            inputDigest: string;
+            configDigest: string;
+            owner: {
+                kind: "runnable/runnable" | "runnable/executor";
+                id: string;
+            };
+            enclosingRunId?: string | undefined;
+            context?: JsonObject | undefined;
+        };
+    } | null>;
+    attachInputAdmission(runId: string, config: JsonObject, jobId: string, known?: NonNullable<Awaited<ReturnType<RunnableRecordOwner['inputAdmission']>>>): Promise<{
+        record: {
+            id: string;
+            scope: string;
+            status: string;
+            runnableType: string;
+            runnableId: string;
+            config: JsonObject;
+            progress: number;
+            startedAt: number;
+            metadata: JsonObject;
+            inputDigest: string;
+            name?: string | undefined;
+            endedAt?: number | undefined;
+            parentRunId?: string | undefined;
+            outcome?: {
+                status: "done";
+                value: JsonValue;
+            } | {
+                status: "not-done";
+                reason: string;
+                value?: JsonValue | undefined;
+                failure?: {
+                    code: string;
+                    message: string;
+                    name?: string | undefined;
+                    reason?: string | undefined;
+                    retryable?: boolean | undefined;
+                    recoveryHint?: string | undefined;
+                    details?: JsonValue | undefined;
+                } | undefined;
+            } | {
+                status: "disputed";
+                why: string;
+                claims: {
+                    id: string;
+                    statement: string;
+                    quote: {
+                        link: {
+                            kind: string;
+                            id: string;
+                            source: string;
+                            role: string;
+                        };
+                        scope: string;
+                        revision: {
+                            scheme: string;
+                            value: string;
+                        };
+                        text: string;
+                        anchor?: {
+                            kind: "code";
+                            path: string;
+                            startLine: number;
+                            endLine: number;
+                        } | {
+                            kind: "region";
+                            start: number;
+                            end: number;
+                        } | {
+                            kind: "fragment";
+                            id: string;
+                        } | {
+                            kind: "heading";
+                            slug: string;
+                        } | undefined;
+                        freshness?: {
+                            modifiedAt?: string | undefined;
+                            stale?: boolean | undefined;
+                        } | undefined;
+                    };
+                    via: string[];
+                    stale?: boolean | undefined;
+                }[];
+            } | {
+                status: "skipped";
+                reason: string;
+                cause: {
+                    kind: "cancelled";
+                    provenance: JsonValue;
+                } | {
+                    kind: "explicit";
+                } | {
+                    kind: "dependency";
+                    blockedBy: string[];
+                };
+            } | undefined;
+            ref?: {
+                jobId?: string | undefined;
+                aiCallRunId?: string | undefined;
+                ciRunId?: string | undefined;
+                executionReference?: string | undefined;
+            } | undefined;
+            rankReason?: {
+                named: true;
+            } | {
+                coldStart: true;
+                cost: number;
+            } | undefined;
+            approval?: "approved" | "assumed" | undefined;
+            activity?: {
+                message: string;
+                ts: number;
+            } | undefined;
+        };
+        admission: {
+            version: 1;
+            runId: string;
+            runnableId: string;
+            inputDigest: string;
+            configDigest: string;
+            owner: {
+                kind: "runnable/runnable" | "runnable/executor";
+                id: string;
+            };
+            enclosingRunId?: string | undefined;
+            context?: JsonObject | undefined;
+        };
+    }>;
+    hydrateState(): Promise<void>;
+    getState(): Promise<GenericRunStateManager>;
+    stateHost(): Promise<RunnableStateHostContext>;
+}
+//# sourceMappingURL=owner.d.ts.map

package/dist/client/records/owner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"owner.d.ts","sourceRoot":"","sources":["../../../src/client/records/owner.ts"],"names":[],"mappings":"AAAA,OAAO,EAA4C,KAAK,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAEhG,OAAO,EAAmB,KAAK,UAAU,EAAE,KAAK,SAAS,EAAE,MAAM,kCAAkC,CAAC;AACpG,OAAO,EAAmB,KAAK,SAAS,EAAE,KAAK,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAG9F,OAAO,EAAkC,KAAK,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACtG,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AAE3E,qBAAa,mBAAmB;IACnB,QAAQ,CAAC,OAAO,EAAE,UAAU;gBAAnB,OAAO,EAAE,UAAU;IAElC,aAAa,IAAI,OAAO,CAAC,MAAM,CAAC;IA+ChC,OAAO,IAAI,OAAO,CAAC,eAAe,CAAC;IAQnC,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;IAatD,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,cAAc,CAAC,EAAE,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAUzD,oBAAoB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAwBtJ,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IAK7B,QAAQ,IAAI,OAAO,CAAC,sBAAsB,CAAC;IAIjD,SAAS,IAAI,OAAO,CAAC,wBAAwB,CAAC;CAG9C"}

package/dist/client/records/owner.js

@@ -0,0 +1,127 @@
+import { CapabilityError, captureRuntimeWorkspace } from '@vibesdotdev/kernel';
+import { hashHex } from '@vibesdotdev/crypto/hash';
+import { JsonValueSchema } from '@vibesdotdev/kernel/schemas/json';
+import { RunRecordSchema } from "../../schemas/runs.js";
+import { canonical } from "./identity.js";
+import { readInputAdmission } from "./input-admission.js";
+import { RUNNABLE_STATE_HOST_CONTEXT_ID } from "../../runtime/host.js";
+export class RunnableRecordOwner {
+    runtime;
+    constructor(runtime) {
+        this.runtime = runtime;
+    }
+    async scopeIdentity() {
+        let workspace = null;
+        if (this.runtime.hasContext('runtime/workspace-path')) {
+            try {
+                workspace = await this.runtime.context('runtime/workspace-path');
+            }
+            catch (error) {
+                if (!(error instanceof Error && CapabilityError.isAbsenceOf(error, 'context', 'runtime/workspace-path')))
+                    throw error;
+            }
+        }
+        // Only principal-declaring hosts call requestPrincipal; an inactive invocation is a real refusal.
+        // Identity contains no JWT or session credential.
+        const principal = this.runtime.scope.capabilities?.requestPrincipals === true ? this.runtime.requestPrincipal() : null;
+        let caller = null;
+        if (principal?.kind === 'user') {
+            caller = JsonValueSchema.parse({
+                kind: principal.kind, userId: principal.userId, orgId: principal.orgId ?? null,
+                projectId: principal.projectId ?? null, agentId: principal.agentPrincipal?.agentId ?? null,
+                agentOwner: principal.agentPrincipal?.owner ?? null,
+                agentKeyId: principal.agentPrincipal?.keyId ?? null,
+                agentScopes: [...(principal.agentPrincipal?.scopes ?? [])].sort(),
+                roles: [...(principal.roles ?? [])].sort(),
+                orgs: principal.orgs ? [...principal.orgs].sort((left, right) => left.id.localeCompare(right.id)) : [],
+                staff: principal.staff ?? null, isSuperuser: principal.isSuperuser ?? null
+            });
+        }
+        else if (principal?.kind === 'service') {
+            caller = JsonValueSchema.parse({
+                kind: principal.kind, caller: principal.caller, onBehalfOf: principal.onBehalfOf ?? null,
+                delegation: principal.delegation ?? null
+            });
+        }
+        else if (principal) {
+            caller = principal;
+        }
+        const invocation = captureRuntimeWorkspace(this.runtime);
+        const workspaceIdentity = invocation ? {
+            id: invocation.id ?? null,
+            target: invocation.target ?? null,
+            remoteHostId: invocation.remoteHostId ?? null,
+            access: invocation.access ?? null
+        } : null;
+        const scope = invocation
+            ? { ...this.runtime.scope, workspace: { root: invocation.root, access: invocation.access } }
+            : this.runtime.scope;
+        const identity = { scope, workspace, caller };
+        if (workspaceIdentity)
+            return canonical({ ...identity, workspaceIdentity });
+        return canonical(identity);
+    }
+    async records() {
+        const records = (await this.stateHost()).records;
+        if (!records) {
+            throw new CapabilityError('Runnable host does not provide durable run records.', 'UNAVAILABLE', { reason: 'runnable-records-unavailable' });
+        }
+        return records;
+    }
+    async storedRecord(input) {
+        const id = RunRecordSchema.shape.id.parse(input);
+        const host = await this.stateHost();
+        if (host.reads) {
+            const record = await host.reads.get(id);
+            return record === null ? null : RunRecordSchema.parse(record);
+        }
+        const scope = await this.scopeIdentity();
+        const records = await this.records();
+        const record = (await records.list({ scope, id })).find(record => record.id === id);
+        return record ? RunRecordSchema.parse(record) : null;
+    }
+    async inputAdmission(runId, expectedConfig) {
+        const record = await this.storedRecord(runId);
+        if (!record)
+            return null;
+        const admission = await readInputAdmission(this.runtime, record);
+        if (admission && expectedConfig !== undefined && admission.configDigest !== await hashHex(this.runtime, 'sha256', canonical(expectedConfig))) {
+            throw new CapabilityError('Queued input differs from the owner-admitted config.', 'PERMISSION_DENIED', { reason: 'runnable-input-admission-mismatch' });
+        }
+        return admission ? { record, admission } : null;
+    }
+    async attachInputAdmission(runId, config, jobId, known) {
+        if (known?.record.id === runId && known.admission.configDigest !== await hashHex(this.runtime, 'sha256', canonical(config))) {
+            throw new CapabilityError('Queued input differs from the owner-admitted config.', 'PERMISSION_DENIED', { reason: 'runnable-input-admission-mismatch' });
+        }
+        const held = await this.inputAdmission(runId, config);
+        const expectedJobId = held?.record.ref?.jobId ?? (held?.admission.owner.kind === 'runnable/runnable' ? `runnable:${runId}` : undefined);
+        if (!held || expectedJobId !== jobId || (known?.record.id === runId && canonical(held.admission) !== canonical(known.admission))) {
+            throw new CapabilityError(held ? 'Execution reference differs from its input admission.' : 'Execution input admission is unavailable to this owner.', 'PERMISSION_DENIED', {
+                reason: 'runnable-input-admission-mismatch',
+                details: {
+                    runId, jobId, admissionPresent: held !== null,
+                    admittedJobId: held?.record.ref?.jobId ?? null
+                }
+            });
+        }
+        held.record.ref = { ...held.record.ref, jobId };
+        await (await this.records()).save(held.record);
+        if (known?.record.id === runId) {
+            known.record = held.record;
+            known.admission = held.admission;
+        }
+        return held;
+    }
+    async hydrateState() {
+        const host = await this.stateHost();
+        await host.hydrateOnce();
+    }
+    async getState() {
+        return (await this.stateHost()).state;
+    }
+    stateHost() {
+        return this.runtime.context(RUNNABLE_STATE_HOST_CONTEXT_ID);
+    }
+}
+//# sourceMappingURL=owner.js.map

package/dist/client/records/owner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"owner.js","sourceRoot":"","sources":["../../../src/client/records/owner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,uBAAuB,EAAmB,MAAM,qBAAqB,CAAC;AAChG,OAAO,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAC;AACnD,OAAO,EAAE,eAAe,EAAmC,MAAM,kCAAkC,CAAC;AACpG,OAAO,EAAE,eAAe,EAAwC,MAAM,uBAAuB,CAAC;AAC9F,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,8BAA8B,EAAiC,MAAM,uBAAuB,CAAC;AAGtG,MAAM,OAAO,mBAAmB;IACV;IAArB,YAAqB,OAAmB;QAAnB,YAAO,GAAP,OAAO,CAAY;IAAG,CAAC;IAE5C,KAAK,CAAC,aAAa;QAClB,IAAI,SAAS,GAAkB,IAAI,CAAC;QACpC,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,wBAAwB,CAAC,EAAE,CAAC;YACvD,IAAI,CAAC;gBACJ,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAS,wBAAwB,CAAC,CAAC;YAC1E,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,IAAI,eAAe,CAAC,WAAW,CAAC,KAAK,EAAE,SAAS,EAAE,wBAAwB,CAAC,CAAC;oBAAE,MAAM,KAAK,CAAC;YACvH,CAAC;QACF,CAAC;QACD,kGAAkG;QAClG,kDAAkD;QAClD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,EAAE,iBAAiB,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QACvH,IAAI,MAAM,GAAc,IAAI,CAAC;QAC7B,IAAI,SAAS,EAAE,IAAI,KAAK,MAAM,EAAE,CAAC;YAChC,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC;gBAC9B,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,IAAI,IAAI;gBAC9E,SAAS,EAAE,SAAS,CAAC,SAAS,IAAI,IAAI,EAAE,OAAO,EAAE,SAAS,CAAC,cAAc,EAAE,OAAO,IAAI,IAAI;gBAC1F,UAAU,EAAE,SAAS,CAAC,cAAc,EAAE,KAAK,IAAI,IAAI;gBACnD,UAAU,EAAE,SAAS,CAAC,cAAc,EAAE,KAAK,IAAI,IAAI;gBACnD,WAAW,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE;gBACjE,KAAK,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE;gBAC1C,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE;gBACtG,KAAK,EAAE,SAAS,CAAC,KAAK,IAAI,IAAI,EAAE,WAAW,EAAE,SAAS,CAAC,WAAW,IAAI,IAAI;aAC1E,CAAC,CAAC;QACJ,CAAC;aAAM,IAAI,SAAS,EAAE,IAAI,KAAK,SAAS,EAAE,CAAC;YAC1C,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC;gBAC9B,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,CAAC,UAAU,IAAI,IAAI;gBACxF,UAAU,EAAE,SAAS,CAAC,UAAU,IAAI,IAAI;aACxC,CAAC,CAAC;QACJ,CAAC;aAAM,IAAI,SAAS,EAAE,CAAC;YACtB,MAAM,GAAG,SAAS,CAAC;QACpB,CAAC;QACD,MAAM,UAAU,GAAG,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACzD,MAAM,iBAAiB,GAAG,UAAU,CAAC,CAAC,CAAC;YACtC,EAAE,EAAE,UAAU,CAAC,EAAE,IAAI,IAAI;YACzB,MAAM,EAAE,UAAU,CAAC,MAAM,IAAI,IAAI;YACjC,YAAY,EAAE,UAAU,CAAC,YAAY,IAAI,IAAI;YAC7C,MAAM,EAAE,UAAU,CAAC,MAAM,IAAI,IAAI;SACjC,CAAC,CAAC,CAAC,IAAI,CAAC;QACT,MAAM,KAAK,GAAG,UAAU;YACvB,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,EAAE;YAC5F,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;QACtB,MAAM,QAAQ,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;QAC9C,IAAI,iBAAiB;YAAE,OAAO,SAAS,CAAC,EAAE,GAAG,QAAQ,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAC5E,OAAO,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,OAAO;QACZ,MAAM,OAAO,GAAG,CAAC,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC;QACjD,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,MAAM,IAAI,eAAe,CAAC,qDAAqD,EAAE,aAAa,EAAE,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAAC,CAAC;QAC7I,CAAC;QACD,OAAO,OAAO,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,KAAa;QAC/B,MAAM,EAAE,GAAG,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACpC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAChB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACxC,OAAO,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC/D,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACpF,OAAO,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACtD,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,KAAa,EAAE,cAA2B;QAC9D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,MAAM,SAAS,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACjE,IAAI,SAAS,IAAI,cAAc,KAAK,SAAS,IAAI,SAAS,CAAC,YAAY,KAAK,MAAM,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC;YAC9I,MAAM,IAAI,eAAe,CAAC,sDAAsD,EAAE,mBAAmB,EAAE,EAAE,MAAM,EAAE,mCAAmC,EAAE,CAAC,CAAC;QACzJ,CAAC;QACD,OAAO,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,KAAa,EAAE,MAAkB,EAAE,KAAa,EAAE,KAA+E;QAC3J,IAAI,KAAK,EAAE,MAAM,CAAC,EAAE,KAAK,KAAK,IAAI,KAAK,CAAC,SAAS,CAAC,YAAY,KAAK,MAAM,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;YAC7H,MAAM,IAAI,eAAe,CAAC,sDAAsD,EAAE,mBAAmB,EAAE,EAAE,MAAM,EAAE,mCAAmC,EAAE,CAAC,CAAC;QACzJ,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACtD,MAAM,aAAa,GAAG,IAAI,EAAE,MAAM,CAAC,GAAG,EAAE,KAAK,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,mBAAmB,CAAC,CAAC,CAAC,YAAY,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACxI,IAAI,CAAC,IAAI,IAAI,aAAa,KAAK,KAAK,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,KAAK,KAAK,IAAI,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;YAClI,MAAM,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,uDAAuD,CAAC,CAAC,CAAC,yDAAyD,EAAE,mBAAmB,EAAE;gBAC1K,MAAM,EAAE,mCAAmC;gBAC3C,OAAO,EAAE;oBACR,KAAK,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,KAAK,IAAI;oBAC7C,aAAa,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,EAAE,KAAK,IAAI,IAAI;iBAC9C;aACD,CAAC,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,GAAG,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC;QAChD,MAAM,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC/C,IAAI,KAAK,EAAE,MAAM,CAAC,EAAE,KAAK,KAAK,EAAE,CAAC;YAChC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;YAC3B,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAClC,CAAC;QACD,OAAO,IAAI,CAAC;IACb,CAAC;IAED,KAAK,CAAC,YAAY;QACjB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACpC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,QAAQ;QACb,OAAO,CAAC,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC;IACvC,CAAC;IAED,SAAS;QACR,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAA2B,8BAA8B,CAAC,CAAC;IACvF,CAAC;CACD"}

package/dist/client/records/query.d.ts

@@ -0,0 +1,11 @@
+import { type RunnableCatalogRun, type RunnableTrackedRun, type RunnableReadQuery } from '../../schemas/runs.ts';
+import type { JsonValue } from '@vibesdotdev/kernel/schemas/json';
+/** Project already-authorized owner rows; unknown filters are refused at the schema boundary. */
+export declare function queryRunRecords<T extends RunnableTrackedRun>(records: T[], input: RunnableReadQuery): T[];
+/** Filter already-authorized catalog facts; evidence is requested only by matching filters. */
+export declare function queryRunSummaries<T extends RunnableCatalogRun>(records: T[], input: RunnableReadQuery, facts: (record: T) => {
+    input?: JsonValue;
+    about?: JsonValue;
+    host?: string;
+}): T[];
+//# sourceMappingURL=query.d.ts.map

package/dist/client/records/query.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"query.d.ts","sourceRoot":"","sources":["../../../src/client/records/query.ts"],"names":[],"mappings":"AAEA,OAAO,EAA+C,KAAK,kBAAkB,EAAE,KAAK,kBAAkB,EAAE,KAAK,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC9J,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kCAAkC,CAAC;AAElE,iGAAiG;AACjG,wBAAgB,eAAe,CAAC,CAAC,SAAS,kBAAkB,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,iBAAiB,GAAG,CAAC,EAAE,CASzG;AAED,+FAA+F;AAC/F,wBAAgB,iBAAiB,CAAC,CAAC,SAAS,kBAAkB,EAC7D,OAAO,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,iBAAiB,EACtC,KAAK,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK;IAAE,KAAK,CAAC,EAAE,SAAS,CAAC;IAAC,KAAK,CAAC,EAAE,SAAS,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,GAC3E,CAAC,EAAE,CAgCL"}

package/dist/client/records/query.js

@@ -0,0 +1,60 @@
+import { canonical } from "./identity.js";
+import { RUN_ADMISSION_METADATA_KEY } from "./authority.js";
+import { RunAdmissionSchema, RunnableReadQuerySchema } from "../../schemas/runs.js";
+/** Project already-authorized owner rows; unknown filters are refused at the schema boundary. */
+export function queryRunRecords(records, input) {
+    return queryRunSummaries(records, input, record => {
+        const admission = RunAdmissionSchema.safeParse(record.metadata[RUN_ADMISSION_METADATA_KEY]);
+        return {
+            input: record.metadata['runnable.submittedInput'] ?? record.config,
+            about: record.metadata.about ?? null,
+            host: admission.success ? admission.data.workspace?.remoteHostId : undefined
+        };
+    });
+}
+/** Filter already-authorized catalog facts; evidence is requested only by matching filters. */
+export function queryRunSummaries(records, input, facts) {
+    const query = RunnableReadQuerySchema.strict().parse(input);
+    const subtree = new Set();
+    if (query.under !== undefined) {
+        subtree.add(query.under);
+        let changed = true;
+        while (changed) {
+            changed = false;
+            for (const record of records) {
+                if (record.parentRunId && subtree.has(record.parentRunId) && !subtree.has(record.id)) {
+                    subtree.add(record.id);
+                    changed = true;
+                }
+            }
+        }
+    }
+    return records.filter(record => {
+        if (query.id !== undefined && record.id !== query.id)
+            return false;
+        if (query.runnable !== undefined && record.runnableId !== query.runnable)
+            return false;
+        if (query.type !== undefined && record.runnableType !== query.type)
+            return false;
+        if (query.parentRunId !== undefined && record.parentRunId !== query.parentRunId)
+            return false;
+        if (query.under !== undefined && !subtree.has(record.id))
+            return false;
+        if (query.inputDigest !== undefined && record.inputDigest !== query.inputDigest)
+            return false;
+        if (query.since !== undefined && record.startedAt < query.since)
+            return false;
+        if (query.status !== undefined && record.outcome?.status !== query.status)
+            return false;
+        if (query.input !== undefined && canonical(facts(record).input) !== canonical(query.input))
+            return false;
+        if (query.about !== undefined && canonical(facts(record).about ?? null) !== canonical(query.about))
+            return false;
+        if (query.host !== undefined) {
+            if (record.hostId !== query.host && facts(record).host !== query.host)
+                return false;
+        }
+        return true;
+    }).sort((left, right) => right.startedAt - left.startedAt || left.id.localeCompare(right.id));
+}
+//# sourceMappingURL=query.js.map

package/dist/client/records/query.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"query.js","sourceRoot":"","sources":["../../../src/client/records/query.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAE,0BAA0B,EAAE,MAAM,gBAAgB,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAAE,uBAAuB,EAA4E,MAAM,uBAAuB,CAAC;AAG9J,iGAAiG;AACjG,MAAM,UAAU,eAAe,CAA+B,OAAY,EAAE,KAAwB;IACnG,OAAO,iBAAiB,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,EAAE;QACjD,MAAM,SAAS,GAAG,kBAAkB,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,0BAA0B,CAAC,CAAC,CAAC;QAC5F,OAAO;YACN,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,yBAAyB,CAAC,IAAI,MAAM,CAAC,MAAM;YAClE,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,IAAI,IAAI;YACpC,IAAI,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC,SAAS;SAC5E,CAAC;IACH,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,iBAAiB,CAChC,OAAY,EAAE,KAAwB,EACtC,KAA6E;IAE7E,MAAM,KAAK,GAAG,uBAAuB,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACzB,IAAI,OAAO,GAAG,IAAI,CAAC;QACnB,OAAO,OAAO,EAAE,CAAC;YAChB,OAAO,GAAG,KAAK,CAAC;YAChB,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC9B,IAAI,MAAM,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;oBACtF,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;oBACvB,OAAO,GAAG,IAAI,CAAC;gBAChB,CAAC;YACF,CAAC;QACF,CAAC;IACF,CAAC;IACD,OAAO,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE;QAC9B,IAAI,KAAK,CAAC,EAAE,KAAK,SAAS,IAAI,MAAM,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE;YAAE,OAAO,KAAK,CAAC;QACnE,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,MAAM,CAAC,UAAU,KAAK,KAAK,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QACvF,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,YAAY,KAAK,KAAK,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC;QACjF,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,IAAI,MAAM,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW;YAAE,OAAO,KAAK,CAAC;QAC9F,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAAE,OAAO,KAAK,CAAC;QACvE,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,IAAI,MAAM,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW;YAAE,OAAO,KAAK,CAAC;QAC9F,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,GAAG,KAAK,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QAC9E,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,EAAE,MAAM,KAAK,KAAK,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QACxF,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,KAAK,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACzG,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACjH,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC9B,IAAI,MAAM,CAAC,MAAM,KAAK,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;gBAAE,OAAO,KAAK,CAAC;QACrF,CAAC;QACD,OAAO,IAAI,CAAC;IACb,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;AAC/F,CAAC"}

package/dist/client/records/recording.d.ts

@@ -0,0 +1,9 @@
+import type { RunHandle } from "../../schemas/contracts/index.ts";
+import { type RunRecord, type RunnableRecords } from "../../schemas/runs.ts";
+/** One invocation writes to the host's existing record; snapshots preserve event order. */
+export declare function recordRunHandle(handle: RunHandle, record: RunRecord, records: RunnableRecords, read?: () => Promise<RunRecord | null>): {
+    handle: RunHandle;
+    save: (lifecycle?: boolean) => Promise<void>;
+    handoff: () => Promise<RunRecord | null>;
+};
+//# sourceMappingURL=recording.d.ts.map

package/dist/client/records/recording.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recording.d.ts","sourceRoot":"","sources":["../../../src/client/records/recording.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kCAAkC,CAAC;AAIlE,OAAO,EAAgT,KAAK,SAAS,EAAE,KAAK,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAE3X,2FAA2F;AAC3F,wBAAgB,eAAe,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,eAAe,EAAE,IAAI,CAAC,EAAE,MAAM,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;;mCAyDnG,OAAO,CAAC,IAAI,CAAC;mBApDrB,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;EAuInD"}

package/dist/client/records/recording.js

@@ -0,0 +1,160 @@
+import { CapabilityError, CaughtFailureSchema, isCapabilityError } from "@vibesdotdev/kernel";
+import { canonical } from "./identity.js";
+import { RUN_ADMISSION_METADATA_KEY, RUN_INPUT_ADMISSION_METADATA_KEY, mergeNativeExecutionMetadata } from "./authority.js";
+import { RunApprovalEventSchema, RunExecutionReferenceReleaseSchema, RunExecutionReferenceSchema, RunRecordSchema, RUN_APPROVAL_EVENT, RUN_EXECUTION_REFERENCE_EVENT, RUN_NATIVE_EXECUTION_METADATA_KEY, RUN_NATIVE_COMPLETION_METADATA_KEY, RunnableNativeExecutionStateSchema, RunnableNativeCompletionOutboxSchema } from "../../schemas/runs.js";
+/** One invocation writes to the host's existing record; snapshots preserve event order. */
+export function recordRunHandle(handle, record, records, read) {
+    let pending = Promise.resolve();
+    let terminal = false;
+    let lateDonePending = false;
+    let transferred = null;
+    const handoff = async () => {
+        if (transferred)
+            return transferred;
+        if (!read || record.metadata[RUN_NATIVE_EXECUTION_METADATA_KEY] !== undefined || record.metadata[RUN_INPUT_ADMISSION_METADATA_KEY] === undefined)
+            return null;
+        const current = await read();
+        if (current?.metadata[RUN_NATIVE_EXECUTION_METADATA_KEY] === undefined)
+            return null;
+        const expectedJobId = record.ref?.jobId ?? `runnable:${record.id}`;
+        if (current.id !== record.id || current.scope !== record.scope || current.runnableId !== record.runnableId ||
+            current.inputDigest !== record.inputDigest || canonical(current.config) !== canonical(record.config) ||
+            canonical(current.metadata[RUN_INPUT_ADMISSION_METADATA_KEY]) !== canonical(record.metadata[RUN_INPUT_ADMISSION_METADATA_KEY]) ||
+            !current.ref?.jobId || current.ref.jobId !== expectedJobId) {
+            throw new CapabilityError('The native receipt differs from the producer admission.', 'CONFLICT', { reason: 'runnable-native-handoff-mismatch' });
+        }
+        record.ref = current.ref;
+        transferred = current;
+        return transferred;
+    };
+    // Only a durable completion of this exact admission can retire its stale lifecycle writer.
+    const retireCompletedLifecycle = async (snapshot) => {
+        if (!read || snapshot.metadata[RUN_NATIVE_EXECUTION_METADATA_KEY] === undefined)
+            return false;
+        const current = await read();
+        if (!current || current.id !== snapshot.id || current.scope !== snapshot.scope ||
+            current.runnableId !== snapshot.runnableId || current.runnableType !== snapshot.runnableType ||
+            current.inputDigest !== snapshot.inputDigest || canonical(current.config) !== canonical(snapshot.config) ||
+            canonical(current.metadata[RUN_ADMISSION_METADATA_KEY]) !== canonical(snapshot.metadata[RUN_ADMISSION_METADATA_KEY]) ||
+            canonical(current.metadata[RUN_INPUT_ADMISSION_METADATA_KEY]) !== canonical(snapshot.metadata[RUN_INPUT_ADMISSION_METADATA_KEY]))
+            return false;
+        const admitted = RunnableNativeExecutionStateSchema.parse(snapshot.metadata[RUN_NATIVE_EXECUTION_METADATA_KEY]);
+        const latest = RunnableNativeExecutionStateSchema.safeParse(current.metadata[RUN_NATIVE_EXECUTION_METADATA_KEY]);
+        if (!latest.success)
+            return false;
+        // Reuse the record owner's native identity/history fence; do not reinterpret a newer admission.
+        mergeNativeExecutionMetadata(current.metadata, snapshot.metadata);
+        if (latest.data.generation !== admitted.generation ||
+            canonical(latest.data.observer) !== canonical(admitted.observer))
+            return false;
+        const before = admitted.attempts.at(-1);
+        const after = latest.data.attempts.at(-1);
+        if (!before || !after)
+            return false;
+        for (const key of ['generation', 'attempt', 'maxAttempts', 'startedAt']) {
+            if (before[key] !== after[key])
+                return false;
+        }
+        const completion = RunnableNativeCompletionOutboxSchema.parse(current.metadata[RUN_NATIVE_COMPLETION_METADATA_KEY] ?? [])
+            .find(value => value.generation === admitted.generation && value.attempt === before.attempt &&
+            value.payload.runId === current.id && value.payload.runnableId === current.runnableId &&
+            value.payload.generation === admitted.generation && value.payload.attempt === before.attempt);
+        if (!completion || current.status !== completion.payload.status ||
+            canonical(current.outcome) !== canonical(completion.payload.outcome))
+            return false;
+        Object.assign(record, current);
+        terminal = true;
+        lateDonePending = true;
+        return true;
+    };
+    const save = (lifecycle = false) => {
+        const snapshot = RunRecordSchema.parse(record);
+        const write = async () => {
+            if (await handoff())
+                return;
+            try {
+                await records.save(snapshot);
+            }
+            catch (cause) {
+                const caught = CaughtFailureSchema.parse(cause);
+                // A remote record owner refuses a terminal-write conflict by status
+                // alone (its reason does not cross the transport); retirement re-reads
+                // and proves the durable completion either way. A stale-generation
+                // refusal keeps its own handoff below.
+                if (isCapabilityError(caught) && caught.code === 'CONFLICT' &&
+                    caught.reason !== 'runnable-native-execution-write-conflict' &&
+                    lifecycle && await retireCompletedLifecycle(snapshot))
+                    return;
+                if (!isCapabilityError(caught) || caught.reason !== 'runnable-native-execution-write-conflict' || !await handoff())
+                    throw cause;
+            }
+        };
+        pending = pending.then(write, write);
+        return pending;
+    };
+    const tracked = {
+        runId: handle.runId,
+        async start(config) {
+            await handle.start(config);
+        },
+        async progress(fraction, message) {
+            if (!terminal) {
+                record.progress = fraction;
+                await save(true);
+            }
+            await handle.progress(fraction, message);
+        },
+        async status(status, message) {
+            if (!terminal) {
+                record.status = status;
+                terminal = ['completed', 'error', 'stopped'].includes(status);
+                if (terminal)
+                    record.endedAt = Date.now();
+                await save(true);
+            }
+            await handle.status(status, message);
+        },
+        async event(type, payload, occurrence) {
+            if (type === RUN_APPROVAL_EVENT) {
+                record.approval = RunApprovalEventSchema.parse(payload).approval;
+                await save();
+            }
+            if (type === RUN_EXECUTION_REFERENCE_EVENT) {
+                // A refusal before admission must not leave this object for finalize to save.
+                if (RunExecutionReferenceReleaseSchema.safeParse(payload).success) {
+                    delete record.ref;
+                    await save();
+                    return;
+                }
+                const reference = RunExecutionReferenceSchema.parse(payload);
+                record.ref = { ...record.ref, ...reference };
+                await save();
+            }
+            await handle.event(type, payload, occurrence);
+        },
+        async done(options) {
+            if (terminal && !lateDonePending)
+                return;
+            if (!terminal) {
+                record.status = 'completed';
+                record.progress = 1;
+                record.endedAt = Date.now();
+                terminal = true;
+                await save(true);
+            }
+            await handle.done(options);
+            lateDonePending = false;
+        },
+        async metric(key, value, dimensions) {
+            await handle.metric(key, value, dimensions);
+        },
+        async log(level, message, data) {
+            await handle.log(level, message, data);
+        },
+        async artifact(name, mimeType, data) {
+            await handle.artifact(name, mimeType, data);
+        }
+    };
+    return { handle: tracked, save, handoff };
+}
+//# sourceMappingURL=recording.js.map