@zelari/core 2.4.0 → 2.6.0

package/dist/runtime/harnessManifest.js

@@ -0,0 +1,113 @@
+/**
+ * runtime/harnessManifest.ts — canonical harness fingerprint (2.6 Track A, doc §6).
+ *
+ * The effective behaviour of Zelari depends on more than model+profile:
+ * prompts, tool descriptions, skills, routing, verification/completion/
+ * compaction/resource policies. Two runs with the same model can be
+ * semantically different. The manifest captures that behaviour as a
+ * canonical, versioned, hashable object:
+ *
+ *   - behavioural fields carry HASHES, never raw text (stable size, no
+ *     prompt content leakage into eval reports);
+ *   - hashing reuses `stableStringify`/`sha256Hex` from requestSnapshot
+ *     (AGENTS.MD: zero deps; one canonical serializer);
+ *   - no timestamps, no per-run volatile values — same harness build →
+ *     same hash (§6.4). Runtime versions are per-build constants and are
+ *     included on purpose: a release bump IS a harness candidate.
+ *
+ * Session integration: one state-only `session.harness_manifest` event per
+ * session start (payload {manifest, manifestHash}) — never model-surface.
+ */
+import { z } from 'zod';
+import { sha256Hex, stableStringify } from '../core/requestSnapshot.js';
+export const HARNESS_MANIFEST_SCHEMA_VERSION = 1;
+/** Hashes of the effective prompts (raw text never enters the manifest). */
+export const HarnessPromptsSchema = z.object({
+    kraken: z.string().min(1).optional(),
+    gauntlet: z.string().min(1).optional(),
+    council: z.string().min(1).optional(),
+    mission: z.string().min(1).optional(),
+});
+export const HarnessManifestV1Schema = z.object({
+    schemaVersion: z.literal(HARNESS_MANIFEST_SCHEMA_VERSION),
+    profile: z.object({
+        id: z.string().min(1),
+        /** WorkPhase of the session that recorded the manifest. */
+        phase: z.enum(['plan', 'build']),
+        /** Hash of the full profile (see profileHash in profiles.ts). */
+        hash: z.string().min(1),
+    }),
+    prompts: HarnessPromptsSchema,
+    capabilities: z.object({
+        toolManifestHash: z.string().min(1),
+        skillManifestHash: z.string().min(1),
+    }),
+    policies: z.object({
+        routingHash: z.string().min(1),
+        verificationHash: z.string().min(1),
+        completionPolicyHash: z.string().min(1),
+        compactionHash: z.string().min(1),
+        /** Behavioural since 2.6 Track B: budget policy shapes execution. */
+        resourcePolicyHash: z.string().min(1),
+    }),
+    runtime: z.object({
+        coreVersion: z.string().min(1),
+        cliVersion: z.string().min(1),
+    }),
+});
+/**
+ * Deterministic manifest hash: canonical serialization (keys sorted
+ * recursively), no timestamps. Same harness build → same hash.
+ */
+export function hashHarnessManifest(manifest) {
+    return sha256Hex(stableStringify(manifest));
+}
+/** Hash any behavioural input (prompt text, policy object) canonically. */
+export function harnessInputHash(value) {
+    return sha256Hex(stableStringify(value));
+}
+function collectPaths(base, a, b, out, depth = 0) {
+    if (depth > 6)
+        return;
+    if (stableStringify(a) === stableStringify(b))
+        return;
+    const objA = a && typeof a === 'object' && !Array.isArray(a) ? a : null;
+    const objB = b && typeof b === 'object' && !Array.isArray(b) ? b : null;
+    if (objA && objB) {
+        for (const key of [...new Set([...Object.keys(objA), ...Object.keys(objB)])].sort()) {
+            collectPaths(base ? `${base}.${key}` : key, objA[key], objB[key], out, depth + 1);
+        }
+        return;
+    }
+    out.push(base);
+}
+/** Diff two manifests into sorted dotted paths (e.g. `prompts.kraken`). */
+export function diffHarnessManifest(oldManifest, newManifest) {
+    const changed = [];
+    collectPaths('', oldManifest, newManifest, changed);
+    return { changed: changed.sort() };
+}
+const FIELD_CLASSES = [
+    { prefix: 'prompts', cls: 'behavioral' },
+    { prefix: 'capabilities.toolManifestHash', cls: 'behavioral' },
+    { prefix: 'capabilities.skillManifestHash', cls: 'behavioral' },
+    { prefix: 'policies.routingHash', cls: 'behavioral' },
+    { prefix: 'policies.verificationHash', cls: 'behavioral' },
+    { prefix: 'policies.completionPolicyHash', cls: 'structural' },
+    { prefix: 'policies.compactionHash', cls: 'behavioral' },
+    { prefix: 'policies.resourcePolicyHash', cls: 'behavioral' },
+    { prefix: 'profile', cls: 'structural' },
+    { prefix: 'runtime', cls: 'structural' },
+    { prefix: 'schemaVersion', cls: 'structural' },
+];
+export function classifyHarnessChanges(diff) {
+    const byField = {};
+    for (const field of diff.changed) {
+        const hit = FIELD_CLASSES.find((m) => field === m.prefix || field.startsWith(m.prefix + '.'));
+        byField[field] = hit ? hit.cls : 'cosmetic';
+    }
+    const order = { behavioral: 3, structural: 2, cosmetic: 1 };
+    const overall = Object.values(byField).reduce((acc, cls) => (order[cls] > order[acc] ? cls : acc), 'cosmetic');
+    return { overall, byField };
+}
+//# sourceMappingURL=harnessManifest.js.map

package/dist/runtime/harnessManifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"harnessManifest.js","sourceRoot":"","sources":["../../src/runtime/harnessManifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAExE,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC;AAEjD,4EAA4E;AAC5E,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACpC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACtC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACrC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACtC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,+BAA+B,CAAC;IACzD,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACrB,2DAA2D;QAC3D,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAChC,iEAAiE;QACjE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KACxB,CAAC;IACF,OAAO,EAAE,oBAAoB;IAC7B,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC;QACrB,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACnC,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KACrC,CAAC;IACF,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC;QACjB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9B,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACnC,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACvC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACjC,qEAAqE;QACrE,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KACtC,CAAC;IACF,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KAC9B,CAAC;CACH,CAAC,CAAC;AAGH;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAA2B;IAC7D,OAAO,SAAS,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC;AAC9C,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,OAAO,SAAS,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;AAC3C,CAAC;AAQD,SAAS,YAAY,CACnB,IAAY,EACZ,CAAU,EACV,CAAU,EACV,GAAa,EACb,KAAK,GAAG,CAAC;IAET,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO;IACtB,IAAI,eAAe,CAAC,CAAC,CAAC,KAAK,eAAe,CAAC,CAAC,CAAC;QAAE,OAAO;IACtD,MAAM,IAAI,GAAG,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAA6B,CAAC,CAAC,CAAC,IAAI,CAAC;IACrG,MAAM,IAAI,GAAG,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAA6B,CAAC,CAAC,CAAC,IAAI,CAAC;IACrG,IAAI,IAAI,IAAI,IAAI,EAAE,CAAC;QACjB,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YACpF,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QACpF,CAAC;QACD,OAAO;IACT,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACjB,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,mBAAmB,CACjC,WAA8B,EAC9B,WAA8B;IAE9B,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,YAAY,CAAC,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;IACpD,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;AACrC,CAAC;AAWD,MAAM,aAAa,GAA+D;IAChF,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,YAAY,EAAE;IACxC,EAAE,MAAM,EAAE,+BAA+B,EAAE,GAAG,EAAE,YAAY,EAAE;IAC9D,EAAE,MAAM,EAAE,gCAAgC,EAAE,GAAG,EAAE,YAAY,EAAE;IAC/D,EAAE,MAAM,EAAE,sBAAsB,EAAE,GAAG,EAAE,YAAY,EAAE;IACrD,EAAE,MAAM,EAAE,2BAA2B,EAAE,GAAG,EAAE,YAAY,EAAE;IAC1D,EAAE,MAAM,EAAE,+BAA+B,EAAE,GAAG,EAAE,YAAY,EAAE;IAC9D,EAAE,MAAM,EAAE,yBAAyB,EAAE,GAAG,EAAE,YAAY,EAAE;IACxD,EAAE,MAAM,EAAE,6BAA6B,EAAE,GAAG,EAAE,YAAY,EAAE;IAC5D,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,YAAY,EAAE;IACxC,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,YAAY,EAAE;IACxC,EAAE,MAAM,EAAE,eAAe,EAAE,GAAG,EAAE,YAAY,EAAE;CAC/C,CAAC;AAQF,MAAM,UAAU,sBAAsB,CAAC,IAAyB;IAC9D,MAAM,OAAO,GAAuC,EAAE,CAAC;IACvD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACjC,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC;QAC9F,OAAO,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC;IAC9C,CAAC;IACD,MAAM,KAAK,GAAuC,EAAE,UAAU,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IAChG,MAAM,OAAO,GAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAA0B,CAAC,MAAM,CACrE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EACnD,UAAU,CACX,CAAC;IACF,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAC9B,CAAC"}

package/dist/runtime/index.d.ts

@@ -1,10 +1,13 @@
 /**
- * @zelari/core/runtime — execution seams + profiles (ADR-0022).
+ * @zelari/core/runtime - execution seams + profiles (ADR-0022) + harness manifest (2.6).
  */
 export * from './providers.js';
 export * from './nodeProviders.js';
 export * from './memoryProviders.js';
 export * from './worktreeWorkspace.js';
 export * from './profiles.js';
+export * from './harnessManifest.js';
 export * from './executionContext.js';
+export * from './resourcePolicy.js';
+export * from './resourceBudget.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/runtime/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/runtime/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,cAAc,gBAAgB,CAAC;AAC/B,cAAc,oBAAoB,CAAC;AACnC,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC;AACvC,cAAc,eAAe,CAAC;AAC9B,cAAc,uBAAuB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/runtime/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,cAAc,gBAAgB,CAAC;AAC/B,cAAc,oBAAoB,CAAC;AACnC,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC;AACvC,cAAc,eAAe,CAAC;AAC9B,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC;AACtC,cAAc,qBAAqB,CAAC;AACpC,cAAc,qBAAqB,CAAC"}

package/dist/runtime/index.js

@@ -1,10 +1,13 @@
 /**
- * @zelari/core/runtime — execution seams + profiles (ADR-0022).
+ * @zelari/core/runtime - execution seams + profiles (ADR-0022) + harness manifest (2.6).
  */
 export * from './providers.js';
 export * from './nodeProviders.js';
 export * from './memoryProviders.js';
 export * from './worktreeWorkspace.js';
 export * from './profiles.js';
+export * from './harnessManifest.js';
 export * from './executionContext.js';
+export * from './resourcePolicy.js';
+export * from './resourceBudget.js';
 //# sourceMappingURL=index.js.map

package/dist/runtime/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/runtime/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,cAAc,gBAAgB,CAAC;AAC/B,cAAc,oBAAoB,CAAC;AACnC,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC;AACvC,cAAc,eAAe,CAAC;AAC9B,cAAc,uBAAuB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/runtime/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,cAAc,gBAAgB,CAAC;AAC/B,cAAc,oBAAoB,CAAC;AACnC,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC;AACvC,cAAc,eAAe,CAAC;AAC9B,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC;AACtC,cAAc,qBAAqB,CAAC;AACpC,cAAc,qBAAqB,CAAC"}

package/dist/runtime/profiles.d.ts

@@ -41,4 +41,11 @@ export declare class UnknownProfileError extends Error {
 export declare function resolveProfile(id: string): Profile;
 /** sha256 of the sorted tool names — recorded in the session header. */
 export declare function toolManifestHash(tools: readonly string[]): string;
+/**
+ * Stable hash of the FULL profile (capability set + orchestration mounts +
+ * verification flags) — the `profile.hash` field of the harness manifest
+ * (2.6 Track A). Uses the shared canonical serializer (requestSnapshot) so
+ * key order can never flip the hash.
+ */
+export declare function profileHash(profile: Profile): string;
 //# sourceMappingURL=profiles.d.ts.map

package/dist/runtime/profiles.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"profiles.d.ts","sourceRoot":"","sources":["../../src/runtime/profiles.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;iBAiBxB,CAAC;AACH,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAEpD,eAAO,MAAM,aAAa,2EAA4E,CAAC;AAEvG,eAAO,MAAM,UAAU,EAAE,OAOvB,CAAC;AAEH,eAAO,MAAM,SAAS,EAAE,OAOtB,CAAC;AAEH,eAAO,MAAM,UAAU,EAAE,OAOvB,CAAC;AAEH,eAAO,MAAM,UAAU,EAAE,OAOvB,CAAC;AAEH,eAAO,MAAM,iBAAiB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAK9D,CAAC;AAEH,qBAAa,mBAAoB,SAAQ,KAAK;aAG1B,SAAS,EAAE,MAAM;aACjB,KAAK,EAAE,MAAM,EAAE;IAHjC,QAAQ,CAAC,IAAI,qBAAqB;gBAEhB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EAAE;CAKlC;AAED,gEAAgE;AAChE,wBAAgB,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAIlD;AAED,wEAAwE;AACxE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAGjE"}
+{"version":3,"file":"profiles.d.ts","sourceRoot":"","sources":["../../src/runtime/profiles.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;iBAiBxB,CAAC;AACH,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAEpD,eAAO,MAAM,aAAa,2EAA4E,CAAC;AAEvG,eAAO,MAAM,UAAU,EAAE,OAOvB,CAAC;AAEH,eAAO,MAAM,SAAS,EAAE,OAOtB,CAAC;AAEH,eAAO,MAAM,UAAU,EAAE,OAOvB,CAAC;AAEH,eAAO,MAAM,UAAU,EAAE,OAOvB,CAAC;AAEH,eAAO,MAAM,iBAAiB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAK9D,CAAC;AAEH,qBAAa,mBAAoB,SAAQ,KAAK;aAG1B,SAAS,EAAE,MAAM;aACjB,KAAK,EAAE,MAAM,EAAE;IAHjC,QAAQ,CAAC,IAAI,qBAAqB;gBAEhB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EAAE;CAKlC;AAED,gEAAgE;AAChE,wBAAgB,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAIlD;AAED,wEAAwE;AACxE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAGjE;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAEpD"}

package/dist/runtime/profiles.js

@@ -8,6 +8,7 @@
  */
 import { createHash } from 'node:crypto';
 import { z } from 'zod';
+import { stableStringify } from '../core/requestSnapshot.js';
 export const ProfileSchema = z.object({
     /** `<name>/v<N>` — immutable once published. */
     id: z.string().regex(/^[a-z0-9-]+\/v\d+$/, 'profile id must be <name>/v<N>'),
@@ -88,4 +89,13 @@ export function toolManifestHash(tools) {
     const manifest = [...tools].sort().join(',');
     return createHash('sha256').update(manifest).digest('hex');
 }
+/**
+ * Stable hash of the FULL profile (capability set + orchestration mounts +
+ * verification flags) — the `profile.hash` field of the harness manifest
+ * (2.6 Track A). Uses the shared canonical serializer (requestSnapshot) so
+ * key order can never flip the hash.
+ */
+export function profileHash(profile) {
+    return createHash('sha256').update(stableStringify(profile)).digest('hex');
+}
 //# sourceMappingURL=profiles.js.map

package/dist/runtime/profiles.js.map

@@ -1 +1 @@
-{"version":3,"file":"profiles.js","sourceRoot":"","sources":["../../src/runtime/profiles.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,gDAAgD;IAChD,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,oBAAoB,EAAE,gCAAgC,CAAC;IAC5E,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACrB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACxC,aAAa,EAAE,CAAC,CAAC,MAAM,CAAC;QACtB,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE;QACnB,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;QACpB,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;QACtB,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;KACrB,CAAC;IACF,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC;QACrB,mBAAmB,EAAE,CAAC,CAAC,OAAO,EAAE;QAChC,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE;QACxB,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE;KAC9B,CAAC;CACH,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,MAAM,EAAE,cAAc,EAAE,YAAY,CAAU,CAAC;AAEvG,MAAM,CAAC,MAAM,UAAU,GAAY,MAAM,CAAC,MAAM,CAAC;IAC/C,EAAE,EAAE,YAAY;IAChB,OAAO,EAAE,CAAC;IACV,WAAW,EAAE,gFAAgF;IAC7F,KAAK,EAAE,CAAC,GAAG,aAAa,CAAC;IACzB,aAAa,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE;IAClF,YAAY,EAAE,EAAE,mBAAmB,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE;CACxF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,SAAS,GAAY,MAAM,CAAC,MAAM,CAAC;IAC9C,EAAE,EAAE,WAAW;IACf,OAAO,EAAE,CAAC;IACV,WAAW,EAAE,4FAA4F;IACzG,KAAK,EAAE,CAAC,GAAG,aAAa,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,eAAe,CAAC;IAC5F,aAAa,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE;IAChF,YAAY,EAAE,EAAE,mBAAmB,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE;CACxF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,UAAU,GAAY,MAAM,CAAC,MAAM,CAAC;IAC/C,EAAE,EAAE,YAAY;IAChB,OAAO,EAAE,CAAC;IACV,WAAW,EAAE,gGAAgG;IAC7G,KAAK,EAAE,CAAC,GAAG,aAAa,EAAE,YAAY,CAAC;IACvC,aAAa,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE;IACjF,YAAY,EAAE,EAAE,mBAAmB,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE;CACxF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,UAAU,GAAY,MAAM,CAAC,MAAM,CAAC;IAC/C,EAAE,EAAE,YAAY;IAChB,OAAO,EAAE,CAAC;IACV,WAAW,EAAE,8FAA8F;IAC3G,KAAK,EAAE,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC;IAC3B,aAAa,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE;IAC9E,YAAY,EAAE,EAAE,mBAAmB,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE;CACxF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAsC,MAAM,CAAC,MAAM,CAAC;IAChF,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,UAAU;IAC3B,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,SAAS;IACzB,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,UAAU;IAC3B,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,UAAU;CAC5B,CAAC,CAAC;AAEH,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAG1B;IACA;IAHT,IAAI,GAAG,iBAAiB,CAAC;IAClC,YACkB,SAAiB,EACjB,KAAe;QAE/B,KAAK,CAAC,oBAAoB,SAAS,sBAAsB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAH7D,cAAS,GAAT,SAAS,CAAQ;QACjB,UAAK,GAAL,KAAK,CAAU;QAG/B,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAED,gEAAgE;AAChE,MAAM,UAAU,cAAc,CAAC,EAAU;IACvC,MAAM,OAAO,GAAG,iBAAiB,CAAC,EAAE,CAAC,CAAC;IACtC,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,mBAAmB,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC;IAChF,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,gBAAgB,CAAC,KAAwB;IACvD,MAAM,QAAQ,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC7D,CAAC"}
+{"version":3,"file":"profiles.js","sourceRoot":"","sources":["../../src/runtime/profiles.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAE7D,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,gDAAgD;IAChD,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,oBAAoB,EAAE,gCAAgC,CAAC;IAC5E,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACrB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACxC,aAAa,EAAE,CAAC,CAAC,MAAM,CAAC;QACtB,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE;QACnB,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;QACpB,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;QACtB,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;KACrB,CAAC;IACF,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC;QACrB,mBAAmB,EAAE,CAAC,CAAC,OAAO,EAAE;QAChC,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE;QACxB,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE;KAC9B,CAAC;CACH,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,MAAM,EAAE,cAAc,EAAE,YAAY,CAAU,CAAC;AAEvG,MAAM,CAAC,MAAM,UAAU,GAAY,MAAM,CAAC,MAAM,CAAC;IAC/C,EAAE,EAAE,YAAY;IAChB,OAAO,EAAE,CAAC;IACV,WAAW,EAAE,gFAAgF;IAC7F,KAAK,EAAE,CAAC,GAAG,aAAa,CAAC;IACzB,aAAa,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE;IAClF,YAAY,EAAE,EAAE,mBAAmB,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE;CACxF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,SAAS,GAAY,MAAM,CAAC,MAAM,CAAC;IAC9C,EAAE,EAAE,WAAW;IACf,OAAO,EAAE,CAAC;IACV,WAAW,EAAE,4FAA4F;IACzG,KAAK,EAAE,CAAC,GAAG,aAAa,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,eAAe,CAAC;IAC5F,aAAa,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE;IAChF,YAAY,EAAE,EAAE,mBAAmB,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE;CACxF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,UAAU,GAAY,MAAM,CAAC,MAAM,CAAC;IAC/C,EAAE,EAAE,YAAY;IAChB,OAAO,EAAE,CAAC;IACV,WAAW,EAAE,gGAAgG;IAC7G,KAAK,EAAE,CAAC,GAAG,aAAa,EAAE,YAAY,CAAC;IACvC,aAAa,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE;IACjF,YAAY,EAAE,EAAE,mBAAmB,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE;CACxF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,UAAU,GAAY,MAAM,CAAC,MAAM,CAAC;IAC/C,EAAE,EAAE,YAAY;IAChB,OAAO,EAAE,CAAC;IACV,WAAW,EAAE,8FAA8F;IAC3G,KAAK,EAAE,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC;IAC3B,aAAa,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE;IAC9E,YAAY,EAAE,EAAE,mBAAmB,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE;CACxF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAsC,MAAM,CAAC,MAAM,CAAC;IAChF,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,UAAU;IAC3B,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,SAAS;IACzB,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,UAAU;IAC3B,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,UAAU;CAC5B,CAAC,CAAC;AAEH,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAG1B;IACA;IAHT,IAAI,GAAG,iBAAiB,CAAC;IAClC,YACkB,SAAiB,EACjB,KAAe;QAE/B,KAAK,CAAC,oBAAoB,SAAS,sBAAsB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAH7D,cAAS,GAAT,SAAS,CAAQ;QACjB,UAAK,GAAL,KAAK,CAAU;QAG/B,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAED,gEAAgE;AAChE,MAAM,UAAU,cAAc,CAAC,EAAU;IACvC,MAAM,OAAO,GAAG,iBAAiB,CAAC,EAAE,CAAC,CAAC;IACtC,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,mBAAmB,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC;IAChF,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,gBAAgB,CAAC,KAAwB;IACvD,MAAM,QAAQ,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC7D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,OAAgB;IAC1C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC7E,CAAC"}

package/dist/runtime/resourceBudget.d.ts

@@ -0,0 +1,69 @@
+/**
+ * runtime/resourceBudget.ts — central resource budget projection (2.6 Track B,
+ * doc §9). PURE functions: the host owns enforcement; nothing here talks to
+ * the model or mutates state. Budget state is reconstructible from the
+ * session log (ResourceLedger on the CLI side counts `tool.call` events).
+ *
+ * Invariants (§9.5): used <= limit, remaining = limit - used, reserves >= 0.
+ */
+import type { BudgetPressure, ResourcePolicy, ResourceStage } from './resourcePolicy.js';
+export interface ResourceBudget {
+    toolCalls: {
+        limit: number;
+        used: number;
+        remaining: number;
+    };
+    wallTime: {
+        limitMs?: number;
+        elapsedMs: number;
+        remainingMs?: number;
+    };
+    tokens?: {
+        softLimit?: number;
+        used: number;
+        remaining?: number;
+    };
+    reserve: {
+        verification: number;
+        repair: number;
+    };
+    stage: ResourceStage;
+}
+export type ResourceLedgerReason = 'tool-call' | 'model-turn' | 'verification' | 'repair' | 'timeout' | 'reservation';
+/** Host-owned ledger entry (append-only; rebuilt from session events on resume). */
+export interface ResourceLedgerEntry {
+    seq: number;
+    reason: ResourceLedgerReason;
+    delta: {
+        toolCalls?: number;
+        tokens?: number;
+        wallMs?: number;
+    };
+}
+/** Compute the budget projection from a policy and cumulative usage. Pure. */
+export declare function computeBudget(policy: ResourcePolicy, usage: {
+    toolCallsUsed: number;
+    elapsedMs?: number;
+    tokensUsed?: number;
+}, stage?: ResourceStage): ResourceBudget;
+/** Reduce the ledger to cumulative usage. Pure; double entries count once by seq. */
+export declare function usageFromLedger(entries: readonly ResourceLedgerEntry[]): {
+    toolCallsUsed: number;
+    wallMs: number;
+    tokensUsed: number;
+};
+/**
+ * Pressure band (§12): usable = remaining - verificationReserve floor.
+ * critical < thresholds.critical <= constrained < thresholds.ample <= ample.
+ */
+export declare function budgetPressure(budget: ResourceBudget, policy: ResourcePolicy): BudgetPressure;
+/**
+ * Protected verification reserve (§11.3): when true, only the verify/repair
+ * tool set may spend — the host enforces, this is the predicate.
+ */
+export declare function isVerificationReserveProtected(budget: ResourceBudget): boolean;
+/** Can the run still afford `calls` outside the protected reserve? */
+export declare function canSpendOutsideReserve(budget: ResourceBudget, calls: number): boolean;
+/** Map an event stream reason onto the ledger delta (single counting point). */
+export declare function ledgerDeltaFor(reason: ResourceLedgerReason, calls?: number): ResourceLedgerEntry['delta'];
+//# sourceMappingURL=resourceBudget.d.ts.map

package/dist/runtime/resourceBudget.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resourceBudget.d.ts","sourceRoot":"","sources":["../../src/runtime/resourceBudget.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEzF,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE;QACT,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,MAAM,CAAC;QACb,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,QAAQ,EAAE;QACR,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC;QAClB,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;IACF,MAAM,CAAC,EAAE;QACP,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,IAAI,EAAE,MAAM,CAAC;QACb,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;IACF,OAAO,EAAE;QACP,YAAY,EAAE,MAAM,CAAC;QACrB,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,KAAK,EAAE,aAAa,CAAC;CACtB;AAED,MAAM,MAAM,oBAAoB,GAC5B,WAAW,GACX,YAAY,GACZ,cAAc,GACd,QAAQ,GACR,SAAS,GACT,aAAa,CAAC;AAElB,oFAAoF;AACpF,MAAM,WAAW,mBAAmB;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,oBAAoB,CAAC;IAC7B,KAAK,EAAE;QACL,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC;CACH;AAED,8EAA8E;AAC9E,wBAAgB,aAAa,CAC3B,MAAM,EAAE,cAAc,EACtB,KAAK,EAAE;IACL,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,EACD,KAAK,GAAE,aAAyB,GAC/B,cAAc,CA8BhB;AAED,qFAAqF;AACrF,wBAAgB,eAAe,CAAC,OAAO,EAAE,SAAS,mBAAmB,EAAE,GAAG;IACxE,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACpB,CAaA;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,cAAc,GAAG,cAAc,CAS7F;AAED;;;GAGG;AACH,wBAAgB,8BAA8B,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAE9E;AAED,sEAAsE;AACtE,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAErF;AAED,gFAAgF;AAChF,wBAAgB,cAAc,CAAC,MAAM,EAAE,oBAAoB,EAAE,KAAK,SAAI,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAapG"}

package/dist/runtime/resourceBudget.js

@@ -0,0 +1,98 @@
+/**
+ * runtime/resourceBudget.ts — central resource budget projection (2.6 Track B,
+ * doc §9). PURE functions: the host owns enforcement; nothing here talks to
+ * the model or mutates state. Budget state is reconstructible from the
+ * session log (ResourceLedger on the CLI side counts `tool.call` events).
+ *
+ * Invariants (§9.5): used <= limit, remaining = limit - used, reserves >= 0.
+ */
+/** Compute the budget projection from a policy and cumulative usage. Pure. */
+export function computeBudget(policy, usage, stage = 'explore') {
+    const used = Math.max(0, Math.min(usage.toolCallsUsed, policy.maxToolCalls));
+    return {
+        toolCalls: {
+            limit: policy.maxToolCalls,
+            used,
+            remaining: policy.maxToolCalls - used,
+        },
+        wallTime: {
+            limitMs: policy.wallClockMs,
+            elapsedMs: Math.max(0, usage.elapsedMs ?? 0),
+            remainingMs: policy.wallClockMs === undefined ? undefined : Math.max(0, policy.wallClockMs - (usage.elapsedMs ?? 0)),
+        },
+        tokens: usage.tokensUsed === undefined && policy.softMaxTokens === undefined
+            ? undefined
+            : {
+                softLimit: policy.softMaxTokens,
+                used: usage.tokensUsed ?? 0,
+                remaining: policy.softMaxTokens === undefined
+                    ? undefined
+                    : Math.max(0, policy.softMaxTokens - (usage.tokensUsed ?? 0)),
+            },
+        reserve: {
+            verification: Math.max(0, policy.reserve.verification),
+            repair: Math.max(0, policy.reserve.repair),
+        },
+        stage,
+    };
+}
+/** Reduce the ledger to cumulative usage. Pure; double entries count once by seq. */
+export function usageFromLedger(entries) {
+    const seen = new Set();
+    let toolCallsUsed = 0;
+    let wallMs = 0;
+    let tokensUsed = 0;
+    for (const e of entries) {
+        if (seen.has(e.seq))
+            continue; // idempotent replay
+        seen.add(e.seq);
+        toolCallsUsed += e.delta.toolCalls ?? 0;
+        wallMs += e.delta.wallMs ?? 0;
+        tokensUsed += e.delta.tokens ?? 0;
+    }
+    return { toolCallsUsed: Math.max(0, toolCallsUsed), wallMs: Math.max(0, wallMs), tokensUsed: Math.max(0, tokensUsed) };
+}
+/**
+ * Pressure band (§12): usable = remaining - verificationReserve floor.
+ * critical < thresholds.critical <= constrained < thresholds.ample <= ample.
+ */
+export function budgetPressure(budget, policy) {
+    const usable = Math.max(0, budget.toolCalls.remaining - budget.reserve.verification);
+    const capacity = Math.max(1, budget.toolCalls.limit - budget.reserve.verification);
+    const ratio = usable / capacity;
+    const t = policy.pressure;
+    if (ratio >= t.ample)
+        return 'ample';
+    if (ratio >= t.constrained)
+        return 'normal';
+    if (ratio >= t.critical)
+        return 'constrained';
+    return 'critical';
+}
+/**
+ * Protected verification reserve (§11.3): when true, only the verify/repair
+ * tool set may spend — the host enforces, this is the predicate.
+ */
+export function isVerificationReserveProtected(budget) {
+    return budget.toolCalls.remaining <= budget.reserve.verification;
+}
+/** Can the run still afford `calls` outside the protected reserve? */
+export function canSpendOutsideReserve(budget, calls) {
+    return budget.toolCalls.remaining - budget.reserve.verification >= calls;
+}
+/** Map an event stream reason onto the ledger delta (single counting point). */
+export function ledgerDeltaFor(reason, calls = 1) {
+    switch (reason) {
+        case 'tool-call':
+            return { toolCalls: calls };
+        case 'model-turn':
+        case 'verification':
+        case 'repair':
+            return { toolCalls: calls };
+        case 'timeout':
+            return {};
+        case 'reservation':
+            return {};
+    }
+}
+//# sourceMappingURL=resourceBudget.js.map

package/dist/runtime/resourceBudget.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resourceBudget.js","sourceRoot":"","sources":["../../src/runtime/resourceBudget.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AA8CH,8EAA8E;AAC9E,MAAM,UAAU,aAAa,CAC3B,MAAsB,EACtB,KAIC,EACD,QAAuB,SAAS;IAEhC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;IAC7E,OAAO;QACL,SAAS,EAAE;YACT,KAAK,EAAE,MAAM,CAAC,YAAY;YAC1B,IAAI;YACJ,SAAS,EAAE,MAAM,CAAC,YAAY,GAAG,IAAI;SACtC;QACD,QAAQ,EAAE;YACR,OAAO,EAAE,MAAM,CAAC,WAAW;YAC3B,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,SAAS,IAAI,CAAC,CAAC;YAC5C,WAAW,EAAE,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,WAAW,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC;SACrH;QACD,MAAM,EACJ,KAAK,CAAC,UAAU,KAAK,SAAS,IAAI,MAAM,CAAC,aAAa,KAAK,SAAS;YAClE,CAAC,CAAC,SAAS;YACX,CAAC,CAAC;gBACE,SAAS,EAAE,MAAM,CAAC,aAAa;gBAC/B,IAAI,EAAE,KAAK,CAAC,UAAU,IAAI,CAAC;gBAC3B,SAAS,EACP,MAAM,CAAC,aAAa,KAAK,SAAS;oBAChC,CAAC,CAAC,SAAS;oBACX,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,aAAa,GAAG,CAAC,KAAK,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC;aAClE;QACP,OAAO,EAAE;YACP,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC;YACtD,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;SAC3C;QACD,KAAK;KACN,CAAC;AACJ,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,eAAe,CAAC,OAAuC;IAKrE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;YAAE,SAAS,CAAC,oBAAoB;QACnD,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAChB,aAAa,IAAI,CAAC,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,CAAC;QACxC,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;QAC9B,UAAU,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,EAAE,aAAa,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,aAAa,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC,EAAE,CAAC;AACzH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,MAAsB,EAAE,MAAsB;IAC3E,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,SAAS,CAAC,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACrF,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,SAAS,CAAC,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACnF,MAAM,KAAK,GAAG,MAAM,GAAG,QAAQ,CAAC;IAChC,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC;IAC1B,IAAI,KAAK,IAAI,CAAC,CAAC,KAAK;QAAE,OAAO,OAAO,CAAC;IACrC,IAAI,KAAK,IAAI,CAAC,CAAC,WAAW;QAAE,OAAO,QAAQ,CAAC;IAC5C,IAAI,KAAK,IAAI,CAAC,CAAC,QAAQ;QAAE,OAAO,aAAa,CAAC;IAC9C,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,8BAA8B,CAAC,MAAsB;IACnE,OAAO,MAAM,CAAC,SAAS,CAAC,SAAS,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC;AACnE,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,sBAAsB,CAAC,MAAsB,EAAE,KAAa;IAC1E,OAAO,MAAM,CAAC,SAAS,CAAC,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,YAAY,IAAI,KAAK,CAAC;AAC3E,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,cAAc,CAAC,MAA4B,EAAE,KAAK,GAAG,CAAC;IACpE,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,WAAW;YACd,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;QAC9B,KAAK,YAAY,CAAC;QAClB,KAAK,cAAc,CAAC;QACpB,KAAK,QAAQ;YACX,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;QAC9B,KAAK,SAAS;YACZ,OAAO,EAAE,CAAC;QACZ,KAAK,aAAa;YAChB,OAAO,EAAE,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/runtime/resourcePolicy.d.ts

@@ -0,0 +1,56 @@
+/**
+ * runtime/resourcePolicy.ts — host-owned resource policy (2.6 Track B, doc §11-12).
+ *
+ * The policy is BEHAVIOURAL: it shapes how the agent spends its remaining
+ * budget, so its hash feeds the harness manifest (§6.6). Enforcement stays
+ * host-side; the model only ever sees a projection (doc §9.2).
+ *
+ * Pressure thresholds are policy-configurable, NOT copied from other
+ * domains (§12.3): defaults below are first-guess values to be replaced by
+ * Zelari's own benchmark data.
+ */
+import { z } from 'zod';
+export declare const BudgetPressureSchema: z.ZodEnum<{
+    critical: "critical";
+    ample: "ample";
+    normal: "normal";
+    constrained: "constrained";
+}>;
+export type BudgetPressure = z.infer<typeof BudgetPressureSchema>;
+/** Operational stage of the run — deliberately NOT named `phase` (WorkPhase collision). */
+export declare const ResourceStageSchema: z.ZodEnum<{
+    explore: "explore";
+    verify: "verify";
+    implement: "implement";
+    repair: "repair";
+}>;
+export type ResourceStage = z.infer<typeof ResourceStageSchema>;
+/** Fractions of (limit - reserve floor) at which pressure bands change. */
+export declare const PressureThresholdsSchema: z.ZodObject<{
+    ample: z.ZodNumber;
+    constrained: z.ZodNumber;
+    critical: z.ZodNumber;
+}, z.core.$strip>;
+export type PressureThresholds = z.infer<typeof PressureThresholdsSchema>;
+export declare const DEFAULT_PRESSURE_THRESHOLDS: PressureThresholds;
+export declare const ResourcePolicySchema: z.ZodObject<{
+    maxToolCalls: z.ZodNumber;
+    reserve: z.ZodObject<{
+        verification: z.ZodNumber;
+        repair: z.ZodNumber;
+    }, z.core.$strip>;
+    wallClockMs: z.ZodOptional<z.ZodNumber>;
+    softMaxTokens: z.ZodOptional<z.ZodNumber>;
+    pressure: z.ZodDefault<z.ZodObject<{
+        ample: z.ZodNumber;
+        constrained: z.ZodNumber;
+        critical: z.ZodNumber;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type ResourcePolicy = z.infer<typeof ResourcePolicySchema>;
+/** Default policies per profile (doc §11.2 kraken default 40/6/4/900000). */
+export declare const PROFILE_RESOURCE_POLICIES: Readonly<Record<string, ResourcePolicy>>;
+export declare function defaultResourcePolicy(profileId: string): ResourcePolicy;
+/** Canonical behavioural hash — the manifest's `policies.resourcePolicyHash`. */
+export declare function resourcePolicyHash(policy: ResourcePolicy): string;
+//# sourceMappingURL=resourcePolicy.d.ts.map

package/dist/runtime/resourcePolicy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resourcePolicy.d.ts","sourceRoot":"","sources":["../../src/runtime/resourcePolicy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,eAAO,MAAM,oBAAoB;;;;;EAAyD,CAAC;AAC3F,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,2FAA2F;AAC3F,eAAO,MAAM,mBAAmB;;;;;EAAuD,CAAC;AACxF,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE,2EAA2E;AAC3E,eAAO,MAAM,wBAAwB;;;;iBAOnC,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,eAAO,MAAM,2BAA2B,EAAE,kBAIxC,CAAC;AAEH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;iBAY/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,6EAA6E;AAC7E,eAAO,MAAM,yBAAyB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAuB7E,CAAC;AAEH,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG,cAAc,CAEvE;AAED,iFAAiF;AACjF,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,cAAc,GAAG,MAAM,CAEjE"}

package/dist/runtime/resourcePolicy.js

@@ -0,0 +1,77 @@
+/**
+ * runtime/resourcePolicy.ts — host-owned resource policy (2.6 Track B, doc §11-12).
+ *
+ * The policy is BEHAVIOURAL: it shapes how the agent spends its remaining
+ * budget, so its hash feeds the harness manifest (§6.6). Enforcement stays
+ * host-side; the model only ever sees a projection (doc §9.2).
+ *
+ * Pressure thresholds are policy-configurable, NOT copied from other
+ * domains (§12.3): defaults below are first-guess values to be replaced by
+ * Zelari's own benchmark data.
+ */
+import { createHash } from 'node:crypto';
+import { z } from 'zod';
+import { stableStringify } from '../core/requestSnapshot.js';
+export const BudgetPressureSchema = z.enum(['ample', 'normal', 'constrained', 'critical']);
+/** Operational stage of the run — deliberately NOT named `phase` (WorkPhase collision). */
+export const ResourceStageSchema = z.enum(['explore', 'implement', 'verify', 'repair']);
+/** Fractions of (limit - reserve floor) at which pressure bands change. */
+export const PressureThresholdsSchema = z.object({
+    /** remaining/usable >= ample → ample. */
+    ample: z.number().min(0).max(1),
+    /** remaining/usable >= constrained → normal; below → constrained. */
+    constrained: z.number().min(0).max(1),
+    /** remaining/usable < critical → critical. */
+    critical: z.number().min(0).max(1),
+});
+export const DEFAULT_PRESSURE_THRESHOLDS = Object.freeze({
+    ample: 0.5,
+    constrained: 0.25,
+    critical: 0.1,
+});
+export const ResourcePolicySchema = z.object({
+    maxToolCalls: z.number().int().positive(),
+    reserve: z.object({
+        /** Protected: tool budget the non-verification loop may not consume (§11.4). */
+        verification: z.number().int().min(0),
+        /** Advisory-only by default (§11.4). */
+        repair: z.number().int().min(0),
+    }),
+    wallClockMs: z.number().int().positive().optional(),
+    /** Soft token ceiling (advisory telemetry, not enforced). */
+    softMaxTokens: z.number().int().positive().optional(),
+    pressure: PressureThresholdsSchema.default(DEFAULT_PRESSURE_THRESHOLDS),
+});
+/** Default policies per profile (doc §11.2 kraken default 40/6/4/900000). */
+export const PROFILE_RESOURCE_POLICIES = Object.freeze({
+    'minimal/v1': {
+        maxToolCalls: 25,
+        reserve: { verification: 4, repair: 3 },
+        pressure: DEFAULT_PRESSURE_THRESHOLDS,
+    },
+    'kraken/v1': {
+        maxToolCalls: 40,
+        reserve: { verification: 6, repair: 4 },
+        wallClockMs: 900_000,
+        pressure: DEFAULT_PRESSURE_THRESHOLDS,
+    },
+    'council/v1': {
+        maxToolCalls: 30,
+        reserve: { verification: 4, repair: 2 },
+        pressure: DEFAULT_PRESSURE_THRESHOLDS,
+    },
+    'mission/v1': {
+        maxToolCalls: 60,
+        reserve: { verification: 8, repair: 6 },
+        wallClockMs: 1_800_000,
+        pressure: DEFAULT_PRESSURE_THRESHOLDS,
+    },
+});
+export function defaultResourcePolicy(profileId) {
+    return PROFILE_RESOURCE_POLICIES[profileId] ?? PROFILE_RESOURCE_POLICIES['kraken/v1'];
+}
+/** Canonical behavioural hash — the manifest's `policies.resourcePolicyHash`. */
+export function resourcePolicyHash(policy) {
+    return createHash('sha256').update(stableStringify(ResourcePolicySchema.parse(policy))).digest('hex');
+}
+//# sourceMappingURL=resourcePolicy.js.map

package/dist/runtime/resourcePolicy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resourcePolicy.js","sourceRoot":"","sources":["../../src/runtime/resourcePolicy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAE7D,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,UAAU,CAAC,CAAC,CAAC;AAG3F,2FAA2F;AAC3F,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;AAGxF,2EAA2E;AAC3E,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,yCAAyC;IACzC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,qEAAqE;IACrE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACrC,8CAA8C;IAC9C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CACnC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,2BAA2B,GAAuB,MAAM,CAAC,MAAM,CAAC;IAC3E,KAAK,EAAE,GAAG;IACV,WAAW,EAAE,IAAI;IACjB,QAAQ,EAAE,GAAG;CACd,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACzC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,gFAAgF;QAChF,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACrC,wCAAwC;QACxC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KAChC,CAAC;IACF,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACnD,6DAA6D;IAC7D,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACrD,QAAQ,EAAE,wBAAwB,CAAC,OAAO,CAAC,2BAA2B,CAAC;CACxE,CAAC,CAAC;AAGH,6EAA6E;AAC7E,MAAM,CAAC,MAAM,yBAAyB,GAA6C,MAAM,CAAC,MAAM,CAAC;IAC/F,YAAY,EAAE;QACZ,YAAY,EAAE,EAAE;QAChB,OAAO,EAAE,EAAE,YAAY,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE;QACvC,QAAQ,EAAE,2BAA2B;KACtC;IACD,WAAW,EAAE;QACX,YAAY,EAAE,EAAE;QAChB,OAAO,EAAE,EAAE,YAAY,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE;QACvC,WAAW,EAAE,OAAO;QACpB,QAAQ,EAAE,2BAA2B;KACtC;IACD,YAAY,EAAE;QACZ,YAAY,EAAE,EAAE;QAChB,OAAO,EAAE,EAAE,YAAY,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE;QACvC,QAAQ,EAAE,2BAA2B;KACtC;IACD,YAAY,EAAE;QACZ,YAAY,EAAE,EAAE;QAChB,OAAO,EAAE,EAAE,YAAY,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE;QACvC,WAAW,EAAE,SAAS;QACtB,QAAQ,EAAE,2BAA2B;KACtC;CACF,CAAC,CAAC;AAEH,MAAM,UAAU,qBAAqB,CAAC,SAAiB;IACrD,OAAO,yBAAyB,CAAC,SAAS,CAAC,IAAI,yBAAyB,CAAC,WAAW,CAAE,CAAC;AACzF,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,kBAAkB,CAAC,MAAsB;IACvD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,oBAAoB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACxG,CAAC"}

package/dist/session/agentAdapter.d.ts

@@ -8,8 +8,8 @@
  * history any other way — model-visible ⟺ logged.
  *
  * Field mapping (lossy by design, log keeps the full truth):
- * - `seq` (provenance) has no AgentMessage equivalent — audits read it from
- *   the spine, not from the harness input.
+ * - `seq` is copied as optional provenance so hosts can persist compact
+ *   ranges; providers never put it on the wire.
  * - `toolName` / `isError` on tool results have no AgentMessage slot; the
  *   output text is already in `content`, the semantics stay in the log.
  * - tool calls derived with `includeToolCalls: true` are JSON-encoded

package/dist/session/agentAdapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agentAdapter.d.ts","sourceRoot":"","sources":["../../src/session/agentAdapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAExD;;;;GAIG;AACH,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,SAAS,cAAc,EAAE,GAClC,YAAY,EAAE,CAQhB"}
+{"version":3,"file":"agentAdapter.d.ts","sourceRoot":"","sources":["../../src/session/agentAdapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAExD;;;;GAIG;AACH,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,SAAS,cAAc,EAAE,GAClC,YAAY,EAAE,CAYhB"}

package/dist/session/agentAdapter.js

@@ -8,8 +8,8 @@
  * history any other way — model-visible ⟺ logged.
  *
  * Field mapping (lossy by design, log keeps the full truth):
- * - `seq` (provenance) has no AgentMessage equivalent — audits read it from
- *   the spine, not from the harness input.
+ * - `seq` is copied as optional provenance so hosts can persist compact
+ *   ranges; providers never put it on the wire.
  * - `toolName` / `isError` on tool results have no AgentMessage slot; the
  *   output text is already in `content`, the semantics stay in the log.
  * - tool calls derived with `includeToolCalls: true` are JSON-encoded
@@ -31,6 +31,14 @@ export function derivedToAgentMessages(messages) {
         const agent = { role: m.role, content: m.content };
         if (m.toolCallId !== undefined)
             agent.toolCallId = m.toolCallId;
+        if (m.seq !== undefined)
+            agent.seq = m.seq;
+        if (m.compactedFromSeq !== undefined)
+            agent.compactedFromSeq = m.compactedFromSeq;
+        if (m.compactedToSeq !== undefined)
+            agent.compactedToSeq = m.compactedToSeq;
+        if (m.sourceEventSeqs !== undefined)
+            agent.sourceEventSeqs = [...m.sourceEventSeqs];
         out.push(agent);
     }
     return out;

package/dist/session/agentAdapter.js.map

@@ -1 +1 @@
-{"version":3,"file":"agentAdapter.js","sourceRoot":"","sources":["../../src/session/agentAdapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAKH;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CACpC,QAAmC;IAEnC,MAAM,GAAG,GAAmB,EAAE,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,KAAK,GAAiB,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;QACjE,IAAI,CAAC,CAAC,UAAU,KAAK,SAAS;YAAE,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAAC;QAChE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}
+{"version":3,"file":"agentAdapter.js","sourceRoot":"","sources":["../../src/session/agentAdapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAKH;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CACpC,QAAmC;IAEnC,MAAM,GAAG,GAAmB,EAAE,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,KAAK,GAAiB,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;QACjE,IAAI,CAAC,CAAC,UAAU,KAAK,SAAS;YAAE,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAAC;QAChE,IAAI,CAAC,CAAC,GAAG,KAAK,SAAS;YAAE,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC;QAC3C,IAAI,CAAC,CAAC,gBAAgB,KAAK,SAAS;YAAE,KAAK,CAAC,gBAAgB,GAAG,CAAC,CAAC,gBAAgB,CAAC;QAClF,IAAI,CAAC,CAAC,cAAc,KAAK,SAAS;YAAE,KAAK,CAAC,cAAc,GAAG,CAAC,CAAC,cAAc,CAAC;QAC5E,IAAI,CAAC,CAAC,eAAe,KAAK,SAAS;YAAE,KAAK,CAAC,eAAe,GAAG,CAAC,GAAG,CAAC,CAAC,eAAe,CAAC,CAAC;QACpF,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}