botmux 3.9.2 → 3.10.0

package/dist/workflows/v3/human-gate.js

@@ -1,279 +1,8 @@
 /**
- * v3 humanGate — file-backed approval waits.
+ * Compatibility facade for the host-neutral gate wait store.
  *
- * Codex's v1-review blocker #4: a workflow gate is RUNTIME state, not an
- * in-memory chat ask.  Its pending/resolved status MUST persist to the runDir
- * so a daemon restart doesn't lose a pending approval.  The journal already
- * records `gateDispatched` / `gateResolved` (audit truth); this module owns the
- * materialized, mutable wait files under `runDir/waits/<waitId>.json` — the
- * active state the Lark card layer keys off and the restart-recovery scan reads.
- *
- * Split of concerns:
- *   - THIS file: the file-wait store + a gate resolver that persists
- *     pending → resolved around an injected decision source.  Pure file IO,
- *     bot-agnostic, testable without the daemon.
- *   - daemon (later): supplies `awaitDecision` — posts the Lark approval card
- *     (reusing v0.2's card-builder / card-handler UX) and resolves when the
- *     button is clicked; on restart it re-arms pending waits via
- *     `listPendingWaits`.
- *
- * The wait shape mirrors v0.2's `waitKind: 'human-gate'` lineage but is
- * deliberately scoped to v3's gate needs: no deadline, but options /
- * approveOptions / approvers are persisted for crash-safe card recovery.
- */
-import { randomBytes } from 'node:crypto';
-import { chmodSync, closeSync, constants, writeFileSync, readFileSync, existsSync, fsyncSync, lstatSync, mkdirSync, openSync, renameSync, readdirSync, unlinkSync, } from 'node:fs';
-import { dirname, join } from 'node:path';
-import { withFileLockSync } from '../../utils/file-lock.js';
-import { fsyncDirectorySyncPortable, fsyncRegularFileSync } from '../../utils/fs-durability.js';
-import { DEFAULT_HUMAN_GATE_OPTIONS } from './dag.js';
-// ─── File-wait store ────────────────────────────────────────────────────────
-export function waitsDir(runDir) {
-    return join(runDir, 'waits');
-}
-export function waitPath(runDir, waitId) {
-    return join(waitsDir(runDir), `${waitId}.json`);
-}
-/** Host approvals are per frozen attempt, while ordinary gates remain per
- * runtime instance. Including the attempt number prevents a safe pre-intent
- * retry from reusing an already-resolved approval file. */
-export function v3GateWaitId(nodeId, instanceId, hostApproval) {
-    const base = instanceId ?? nodeId;
-    if (!hostApproval)
-        return `${base}-gate`;
-    const attempt = hostApproval.attemptId.slice(hostApproval.attemptId.lastIndexOf('/') + 1);
-    if (!/^\d{3}$/.test(attempt)) {
-        throw new Error(`v3 human-gate: invalid host attempt id ${JSON.stringify(hostApproval.attemptId)}`);
-    }
-    return `${base}-host-${attempt}-gate`;
-}
-/** Atomic JSON write (tmp + rename) so a crash never leaves a torn wait file. */
-function atomicWriteJson(path, value) {
-    const dir = dirname(path);
-    const runDir = dirname(dir);
-    assertRealDirectory(runDir, 'run directory');
-    if (!existsSync(dir)) {
-        try {
-            mkdirSync(dir, { mode: 0o700 });
-        }
-        catch { /* race: assert below */ }
-    }
-    assertRealDirectory(dir, 'waits directory');
-    chmodSync(dir, 0o700);
-    if (existsSync(path))
-        assertPrivateRegularWaitFile(path, false);
-    const tmp = `${path}.${process.pid}.${randomBytes(4).toString('hex')}.tmp`;
-    let fd;
-    try {
-        fd = openSync(tmp, constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | (constants.O_NOFOLLOW ?? 0), 0o600);
-        writeFileSync(fd, JSON.stringify(value, null, 2), 'utf-8');
-        fsyncSync(fd);
-        closeSync(fd);
-        fd = undefined;
-        // Rename replaces a raced final symlink rather than following it, but an
-        // already-present one is an integrity signal and was rejected above.
-        renameSync(tmp, path);
-    }
-    catch (err) {
-        if (fd !== undefined) {
-            try {
-                closeSync(fd);
-            }
-            catch { /* tolerate */ }
-        }
-        try {
-            unlinkSync(tmp);
-        }
-        catch { /* tolerate */ }
-        throw err;
-    }
-    chmodSync(path, 0o600);
-    fsyncRegularFileSync(path);
-    fsyncDirectorySyncPortable(dir);
-}
-function assertRealDirectory(path, label) {
-    const stat = lstatSync(path);
-    if (!stat.isDirectory() || stat.isSymbolicLink()) {
-        throw new Error(`v3 human-gate: ${label} must be a real directory`);
-    }
-}
-function assertPrivateRegularWaitFile(path, requirePrivate = true) {
-    const stat = lstatSync(path);
-    if (!stat.isFile() || stat.isSymbolicLink()) {
-        throw new Error('v3 human-gate: wait file must be a regular file');
-    }
-    if (requirePrivate && (stat.mode & 0o077) !== 0) {
-        throw new Error('v3 human-gate: host wait file must not be group/world accessible');
-    }
-}
-/** Write the initial `pending` wait file for a gate.  Overwrites any stale
- *  file at the same waitId (a re-dispatched gate). */
-export function writePendingWait(runDir, input) {
-    const options = input.options ?? [...DEFAULT_HUMAN_GATE_OPTIONS];
-    const approveOptions = input.approveOptions ?? (options.includes('approve') ? ['approve'] : [options[0]]);
-    const wait = {
-        waitId: input.waitId,
-        nodeId: input.nodeId,
-        ...(input.instanceId ? { instanceId: input.instanceId } : {}),
-        prompt: input.prompt,
-        options,
-        approveOptions,
-        approvers: input.approvers ?? [],
-        ...(input.hostApproval ? { hostApproval: input.hostApproval } : {}),
-        status: 'pending',
-        createdAt: Date.now(),
-    };
-    atomicWriteJson(waitPath(runDir, input.waitId), wait);
-    return wait;
-}
-/** Read a single wait file, or `undefined` if it doesn't exist. */
-export function readWait(runDir, waitId) {
-    const path = waitPath(runDir, waitId);
-    if (existsSync(waitsDir(runDir)))
-        assertRealDirectory(waitsDir(runDir), 'waits directory');
-    if (!existsSync(path))
-        return undefined;
-    const pathStat = lstatSync(path);
-    if (!pathStat.isFile() || pathStat.isSymbolicLink()) {
-        throw new Error('v3 human-gate: wait file must be a regular file');
-    }
-    const wait = normalizeWaitFile(JSON.parse(readFileSync(path, 'utf-8')));
-    if (wait.hostApproval && (pathStat.mode & 0o077) !== 0) {
-        throw new Error('v3 human-gate: host wait file must not be group/world accessible');
-    }
-    return wait;
-}
-/** Transition a wait to approved / rejected.  Throws if the wait is missing
- *  (a resolution for an unknown gate is a programming error, not a no-op). */
-export function resolveWait(runDir, waitId, resolution, by, selected) {
-    const outcome = resolveWaitOnce(runDir, waitId, resolution, by, selected);
-    if (!outcome.changed) {
-        throw new Error(`v3 human-gate: wait "${waitId}" is already ${outcome.wait.status}; first resolution wins`);
-    }
-    return outcome.wait;
-}
-/** Cross-process compare-and-set for a pending wait. Exactly one resolver may
- *  transition it; every later contradictory click observes the first result. */
-export function resolveWaitOnce(runDir, waitId, resolution, by, selected) {
-    const path = waitPath(runDir, waitId);
-    if (existsSync(waitsDir(runDir)))
-        assertRealDirectory(waitsDir(runDir), 'waits directory');
-    if (!existsSync(path)) {
-        throw new Error(`v3 human-gate: no pending wait "${waitId}" in ${runDir}`);
-    }
-    return withFileLockSync(path, () => {
-        const existing = readWait(runDir, waitId);
-        if (!existing)
-            throw new Error(`v3 human-gate: no pending wait "${waitId}" in ${runDir}`);
-        if (existing.status !== 'pending')
-            return { wait: existing, changed: false };
-        const resolved = {
-            ...existing,
-            status: resolution,
-            resolvedAt: Date.now(),
-            by,
-            selected,
-        };
-        atomicWriteJson(path, resolved);
-        return { wait: resolved, changed: true };
-    });
-}
-export function normalizeGateWaitInput(gate) {
-    const options = gate.options ?? [...DEFAULT_HUMAN_GATE_OPTIONS];
-    return {
-        prompt: gate.prompt,
-        options,
-        approveOptions: gate.approveOptions ?? (options.includes('approve') ? ['approve'] : [options[0]]),
-        approvers: gate.approvers ?? [],
-    };
-}
-export function selectedResolution(wait, selected) {
-    if (!wait.options.includes(selected))
-        return undefined;
-    return wait.approveOptions.includes(selected) ? 'approved' : 'rejected';
-}
-export function canResolveGateWait(wait, by) {
-    return wait.approvers.length === 0 || (!!by && wait.approvers.includes(by));
-}
-/** All still-pending waits in the runDir — the daemon's restart-recovery scan
- *  uses this to re-post / re-arm approval cards after a crash. */
-export function listPendingWaits(runDir) {
-    const dir = waitsDir(runDir);
-    if (!existsSync(dir))
-        return [];
-    const out = [];
-    for (const name of readdirSync(dir)) {
-        if (!name.endsWith('.json') || name.endsWith('.tmp'))
-            continue;
-        try {
-            const wait = readWait(runDir, name.slice(0, -'.json'.length));
-            if (!wait)
-                continue;
-            if (wait.status === 'pending')
-                out.push(wait);
-        }
-        catch {
-            // skip a torn / unparseable wait file (mid-write crash)
-        }
-    }
-    return out;
-}
-function normalizeWaitFile(raw) {
-    const options = raw.options ?? [...DEFAULT_HUMAN_GATE_OPTIONS];
-    let hostApproval;
-    if (raw.hostApproval !== undefined) {
-        const approval = raw.hostApproval;
-        if (!approval ||
-            typeof approval !== 'object' ||
-            Array.isArray(approval) ||
-            Object.keys(approval).sort().join(',') !== 'approvalDigest,attemptId,inputHash' ||
-            typeof approval.attemptId !== 'string' ||
-            !/\/attempts\/\d{3}$/.test(approval.attemptId) ||
-            typeof approval.approvalDigest !== 'string' ||
-            !/^sha256:[0-9a-f]{64}$/.test(approval.approvalDigest) ||
-            typeof approval.inputHash !== 'string' ||
-            !/^sha256:[0-9a-f]{64}$/.test(approval.inputHash)) {
-            throw new Error('v3 human-gate: malformed hostApproval in wait file');
-        }
-        hostApproval = approval;
-    }
-    return {
-        waitId: raw.waitId ?? '',
-        nodeId: raw.nodeId ?? '',
-        ...(raw.instanceId ? { instanceId: raw.instanceId } : {}),
-        prompt: raw.prompt ?? '',
-        options,
-        approveOptions: raw.approveOptions ?? (options.includes('approve') ? ['approve'] : [options[0]]),
-        approvers: raw.approvers ?? [],
-        status: raw.status ?? 'pending',
-        createdAt: raw.createdAt ?? 0,
-        resolvedAt: raw.resolvedAt,
-        by: raw.by,
-        selected: raw.selected,
-        ...(hostApproval ? { hostApproval } : {}),
-    };
-}
-// ─── Gate resolver (injected into the runtime) ──────────────────────────────
-/**
- * Build the `resolveGate` the runtime injects.  Persists the wait as `pending`,
- * delegates to the daemon-supplied `awaitDecision` (post card + await the
- * click), then persists the resolution — so the file store is authoritative
- * for pending/resolved regardless of whether the in-memory decision promise
- * survives a restart (the daemon re-arms via `listPendingWaits`).
- *
- * `awaitDecision` is the only daemon-coupled seam; everything else here is file
- * IO, which is why this factory is unit-testable with a fake decision source.
+ * Daemon and CLI callers retain the historical module path while embedders
+ * can depend directly on gate-wait-store without importing a Botmux adapter.
  */
-export function createFileGate(deps) {
-    return async ({ nodeId, prompt, waitId, runDir, hostApproval }) => {
-        const wait = writePendingWait(runDir, { waitId, nodeId, prompt, ...(hostApproval ? { hostApproval } : {}) });
-        const { resolution, by, selected } = await deps.awaitDecision(wait);
-        const settled = resolveWaitOnce(runDir, waitId, resolution, by, selected);
-        return {
-            resolution: settled.wait.status === 'approved' ? 'approved' : 'rejected',
-            by: settled.wait.by ?? by,
-            selected: settled.wait.selected,
-        };
-    };
-}
+export * from './gate-wait-store.js';
 //# sourceMappingURL=human-gate.js.map

package/dist/workflows/v3/human-gate.js.map

@@ -1 +1 @@
-{"version":3,"file":"human-gate.js","sourceRoot":"","sources":["../../../src/workflows/v3/human-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EACL,SAAS,EACT,SAAS,EACT,SAAS,EACT,aAAa,EACb,YAAY,EACZ,UAAU,EACV,SAAS,EACT,SAAS,EACT,SAAS,EACT,QAAQ,EACR,UAAU,EACV,WAAW,EACX,UAAU,GACX,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,0BAA0B,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAChG,OAAO,EAAE,0BAA0B,EAAoB,MAAM,UAAU,CAAC;AA8BxE,+EAA+E;AAE/E,MAAM,UAAU,QAAQ,CAAC,MAAc;IACrC,OAAO,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,MAAc,EAAE,MAAc;IACrD,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,OAAO,CAAC,CAAC;AAClD,CAAC;AAED;;2DAE2D;AAC3D,MAAM,UAAU,YAAY,CAC1B,MAAc,EACd,UAAmB,EACnB,YAAoC;IAEpC,MAAM,IAAI,GAAG,UAAU,IAAI,MAAM,CAAC;IAClC,IAAI,CAAC,YAAY;QAAE,OAAO,GAAG,IAAI,OAAO,CAAC;IACzC,MAAM,OAAO,GAAG,YAAY,CAAC,SAAS,CAAC,KAAK,CAAC,YAAY,CAAC,SAAS,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1F,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,0CAA0C,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACtG,CAAC;IACD,OAAO,GAAG,IAAI,SAAS,OAAO,OAAO,CAAC;AACxC,CAAC;AAED,iFAAiF;AACjF,SAAS,eAAe,CAAC,IAAY,EAAE,KAAc;IACnD,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAC5B,mBAAmB,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAC7C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,IAAI,CAAC;YAAC,SAAS,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,wBAAwB,CAAC,CAAC;IAC7E,CAAC;IACD,mBAAmB,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;IAC5C,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACtB,IAAI,UAAU,CAAC,IAAI,CAAC;QAAE,4BAA4B,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAChE,MAAM,GAAG,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;IAC3E,IAAI,EAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,EAAE,GAAG,QAAQ,CACX,GAAG,EACH,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,EACvF,KAAK,CACN,CAAC;QACF,aAAa,CAAC,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QAC3D,SAAS,CAAC,EAAE,CAAC,CAAC;QACd,SAAS,CAAC,EAAE,CAAC,CAAC;QACd,EAAE,GAAG,SAAS,CAAC;QACf,yEAAyE;QACzE,qEAAqE;QACrE,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACxB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;YACrB,IAAI,CAAC;gBAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,cAAc,CAAC,CAAC;QACjD,CAAC;QACD,IAAI,CAAC;YAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,cAAc,CAAC,CAAC;QACjD,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACvB,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAC3B,0BAA0B,CAAC,GAAG,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAY,EAAE,KAAa;IACtD,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,kBAAkB,KAAK,2BAA2B,CAAC,CAAC;IACtE,CAAC;AACH,CAAC;AAED,SAAS,4BAA4B,CAAC,IAAY,EAAE,cAAc,GAAG,IAAI;IACvE,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,cAAc,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;IACtF,CAAC;AACH,CAAC;AAED;sDACsD;AACtD,MAAM,UAAU,gBAAgB,CAC9B,MAAc,EACd,KACqG;IAErG,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,CAAC,GAAG,0BAA0B,CAAC,CAAC;IACjE,MAAM,cAAc,GAAG,KAAK,CAAC,cAAc,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC;IAC3G,MAAM,IAAI,GAAa;QACrB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,OAAO;QACP,cAAc;QACd,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,EAAE;QAChC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,MAAM,EAAE,SAAS;QACjB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;KACtB,CAAC;IACF,eAAe,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;IACtD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,QAAQ,CAAC,MAAc,EAAE,MAAc;IACrD,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,IAAI,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAAE,mBAAmB,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,iBAAiB,CAAC,CAAC;IAC3F,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACxC,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,QAAQ,CAAC,cAAc,EAAE,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAsB,CAAC,CAAC;IAC7F,IAAI,IAAI,CAAC,YAAY,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;8EAC8E;AAC9E,MAAM,UAAU,WAAW,CACzB,MAAc,EACd,MAAc,EACd,UAAmC,EACnC,EAAU,EACV,QAAiB;IAEjB,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC;IAC1E,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CACb,wBAAwB,MAAM,gBAAgB,OAAO,CAAC,IAAI,CAAC,MAAM,yBAAyB,CAC3F,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC,IAAI,CAAC;AACtB,CAAC;AAED;gFACgF;AAChF,MAAM,UAAU,eAAe,CAC7B,MAAc,EACd,MAAc,EACd,UAAmC,EACnC,EAAU,EACV,QAAiB;IAEjB,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,IAAI,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAAE,mBAAmB,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,iBAAiB,CAAC,CAAC;IAC3F,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,mCAAmC,MAAM,QAAQ,MAAM,EAAE,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,gBAAgB,CAAC,IAAI,EAAE,GAAG,EAAE;QACjC,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC1C,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,MAAM,QAAQ,MAAM,EAAE,CAAC,CAAC;QAC1F,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC7E,MAAM,QAAQ,GAAa;YACzB,GAAG,QAAQ;YACX,MAAM,EAAE,UAAU;YAClB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;YACtB,EAAE;YACF,QAAQ;SACT,CAAC;QACF,eAAe,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAChC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,IAAiB;IACtD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,CAAC,GAAG,0BAA0B,CAAC,CAAC;IAChE,OAAO;QACL,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,OAAO;QACP,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,CAAC;QAClG,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,EAAE;KAChC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,IAAkD,EAClD,QAAgB;IAEhB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,SAAS,CAAC;IACvD,OAAO,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAiC,EAAE,EAAsB;IAC1F,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED;kEACkE;AAClE,MAAM,UAAU,gBAAgB,CAAC,MAAc;IAC7C,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC7B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAChC,MAAM,GAAG,GAAe,EAAE,CAAC;IAC3B,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;QACpC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,SAAS;QAC/D,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;YAC9D,IAAI,CAAC,IAAI;gBAAE,SAAS;YACpB,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;gBAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChD,CAAC;QAAC,MAAM,CAAC;YACP,wDAAwD;QAC1D,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAsB;IAC/C,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,CAAC,GAAG,0BAA0B,CAAC,CAAC;IAC/D,IAAI,YAAsC,CAAC;IAC3C,IAAI,GAAG,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,GAAG,CAAC,YAAkD,CAAC;QACxE,IACE,CAAC,QAAQ;YACT,OAAO,QAAQ,KAAK,QAAQ;YAC5B,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;YACvB,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,oCAAoC;YAC/E,OAAO,QAAQ,CAAC,SAAS,KAAK,QAAQ;YACtC,CAAC,oBAAoB,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;YAC9C,OAAO,QAAQ,CAAC,cAAc,KAAK,QAAQ;YAC3C,CAAC,uBAAuB,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC;YACtD,OAAO,QAAQ,CAAC,SAAS,KAAK,QAAQ;YACtC,CAAC,uBAAuB,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EACjD,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxE,CAAC;QACD,YAAY,GAAG,QAA4D,CAAC;IAC9E,CAAC;IACD,OAAO;QACL,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE;QACxB,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE;QACxB,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE;QACxB,OAAO;QACP,cAAc,EAAE,GAAG,CAAC,cAAc,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,CAAC;QACjG,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,EAAE;QAC9B,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,SAAS;QAC/B,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,CAAC;QAC7B,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1C,CAAC;AACJ,CAAC;AAED,+EAA+E;AAE/E;;;;;;;;;GASG;AACH,MAAM,UAAU,cAAc,CAAC,IAE9B;IACC,OAAO,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE,EAAE;QAChE,MAAM,IAAI,GAAG,gBAAgB,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAC7G,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QACpE,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC;QAC1E,OAAO;YACL,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU;YACxE,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE;YACzB,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ;SAChC,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"human-gate.js","sourceRoot":"","sources":["../../../src/workflows/v3/human-gate.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,sBAAsB,CAAC"}

package/dist/workflows/v3/in-process-attempt-lease.d.ts

@@ -0,0 +1,10 @@
+import type { AttemptLeaseProvider } from './runtime-host-contract.js';
+/**
+ * Lease provider for fresh, process-local executions.
+ *
+ * It can prove only closures observed by this exact provider instance. An
+ * attempt absent from the local ledger may belong to another live process, so
+ * restart recovery stays fail-closed instead of inventing a close proof.
+ */
+export declare function createInProcessAttemptLeaseProvider(): AttemptLeaseProvider;
+//# sourceMappingURL=in-process-attempt-lease.d.ts.map

package/dist/workflows/v3/in-process-attempt-lease.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"in-process-attempt-lease.d.ts","sourceRoot":"","sources":["../../../src/workflows/v3/in-process-attempt-lease.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,oBAAoB,EACrB,MAAM,4BAA4B,CAAC;AAEpC;;;;;;GAMG;AACH,wBAAgB,mCAAmC,IAAI,oBAAoB,CAwC1E"}

package/dist/workflows/v3/in-process-attempt-lease.js

@@ -0,0 +1,47 @@
+/**
+ * Lease provider for fresh, process-local executions.
+ *
+ * It can prove only closures observed by this exact provider instance. An
+ * attempt absent from the local ledger may belong to another live process, so
+ * restart recovery stays fail-closed instead of inventing a close proof.
+ */
+export function createInProcessAttemptLeaseProvider() {
+    const leases = new Map();
+    const keyFor = (binding) => `${binding.runId}\0${binding.attemptId}\0${binding.attemptDir}`;
+    return {
+        acquire: (binding) => {
+            const key = keyFor(binding);
+            if (leases.has(key)) {
+                throw new Error(`in-process attempt lease already acquired: ${binding.attemptId}`);
+            }
+            leases.set(key, 'active');
+            return { auditKind: 'attemptLease' };
+        },
+        closeBeforeExecution: (binding) => {
+            const key = keyFor(binding);
+            if (leases.get(key) !== 'active') {
+                throw new Error(`in-process attempt lease is not active: ${binding.attemptId}`);
+            }
+            leases.set(key, 'closed');
+        },
+        drainExternallyOwned: (binding) => {
+            const key = keyFor(binding);
+            const state = leases.get(key);
+            if (state === 'active')
+                return { status: 'pending' };
+            if (state !== 'closed')
+                return { status: 'unknown' };
+            return {
+                status: 'closed',
+                finalizeAfterProof: () => {
+                    if (leases.get(key) === 'closed')
+                        leases.delete(key);
+                },
+            };
+        },
+        cleanupSettled: (binding) => {
+            leases.delete(keyFor(binding));
+        },
+    };
+}
+//# sourceMappingURL=in-process-attempt-lease.js.map

package/dist/workflows/v3/in-process-attempt-lease.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"in-process-attempt-lease.js","sourceRoot":"","sources":["../../../src/workflows/v3/in-process-attempt-lease.ts"],"names":[],"mappings":"AAKA;;;;;;GAMG;AACH,MAAM,UAAU,mCAAmC;IACjD,MAAM,MAAM,GAAG,IAAI,GAAG,EAA+B,CAAC;IACtD,MAAM,MAAM,GAAG,CAAC,OAIf,EAAU,EAAE,CAAC,GAAG,OAAO,CAAC,KAAK,KAAK,OAAO,CAAC,SAAS,KAAK,OAAO,CAAC,UAAU,EAAE,CAAC;IAE9E,OAAO;QACL,OAAO,EAAE,CAAC,OAAO,EAA2B,EAAE;YAC5C,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;YAC5B,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CAAC,8CAA8C,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;YACrF,CAAC;YACD,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YAC1B,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC;QACvC,CAAC;QACD,oBAAoB,EAAE,CAAC,OAAO,EAAE,EAAE;YAChC,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;YAC5B,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,QAAQ,EAAE,CAAC;gBACjC,MAAM,IAAI,KAAK,CAAC,2CAA2C,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;YAClF,CAAC;YACD,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC5B,CAAC;QACD,oBAAoB,EAAE,CAAC,OAAO,EAAE,EAAE;YAChC,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;YAC5B,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC9B,IAAI,KAAK,KAAK,QAAQ;gBAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;YACrD,IAAI,KAAK,KAAK,QAAQ;gBAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;YACrD,OAAO;gBACL,MAAM,EAAE,QAAQ;gBAChB,kBAAkB,EAAE,GAAG,EAAE;oBACvB,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,QAAQ;wBAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACvD,CAAC;aACF,CAAC;QACJ,CAAC;QACD,cAAc,EAAE,CAAC,OAAO,EAAE,EAAE;YAC1B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;QACjC,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/workflows/v3/journal.d.ts

@@ -14,281 +14,8 @@
  * cross-process journal lock and repairs an unterminated tail before writing
  * the next event.
  */
-import type { GoalAsk } from './contract.js';
-/** Why a node failed — drives fail-fast root-cause reporting + retry policy
- *  (`classifyTerminal` maps each class to `blocked` or `failed`).
- *  `gateRejected` / `cancelled` are user-driven; the rest are faults. */
-export type V3ErrorClass = 'workerError' | 'manifestInvalid' | 'resultInvalid' | 'timeout' | 'gateRejected' | 'cancelled';
-export type V3RunFailureReason = 'allSinksSkipped';
-/** Bounded, privacy-safe identity for an external effect whose final provider
- *  outcome cannot be proved. Full inputs/errors stay in the protected attempt
- *  artifacts and logs; terminal cards only need this machine-readable tuple. */
-export interface V3UncertainHostEffect {
-    nodeId: string;
-    instanceId: string;
-    attemptId: string;
-    executor: string;
-    errorCode: string;
-}
-/**
- * The MVP event union.  Static DAG + fail-fast, so the lifecycle is small:
- * run boundaries, per-node dispatch/settle, and gate dispatch/resolve.  Retry
- * (`attempts/NNN`) is modeled by `attemptId` on dispatch/settle events — a new
- * attempt is just another `nodeDispatched` with a fresh `attemptId`.
- */
-/**
- * Structured loop reference carried on body-instance dispatches.  The expanded
- * nodeId (`repairLoop.i001.code`) is an OPAQUE key — projections/dashboards
- * group by THIS field and never parse the id string (body ids may themselves
- * contain dots).
- */
-export interface V3LoopRef {
-    loopId: string;
-    iteration: number;
-    bodyNodeId: string;
-}
-export type V3Event = {
-    type: 'runStarted';
-    runId: string;
-} | {
-    type: 'nodeDispatched';
-    nodeId: string;
-    instanceId?: string;
-    attemptId: string;
-    loop?: V3LoopRef;
-} | {
-    type: 'hostInputPrepared';
-    nodeId: string;
-    instanceId: string;
-    attemptId: string;
-    executor: string;
-    provider: string;
-    inputRef: {
-        path: string;
-        sha256: string;
-        bytes: number;
-    };
-    inputHash: string;
-    idempotencyKey: string;
-    idempotencyTtlMs: number;
-    approvalDigest: string;
-} | {
-    type: 'hostEffectIntent';
-    nodeId: string;
-    instanceId: string;
-    attemptId: string;
-    executor: string;
-    provider: string;
-    inputRef: {
-        path: string;
-        sha256: string;
-        bytes: number;
-    };
-    inputHash: string;
-    idempotencyKey: string;
-    idempotencyTtlMs: number;
-    approvalDigest: string;
-} | {
-    type: 'hostEffectUncertain';
-    nodeId: string;
-    instanceId: string;
-    attemptId: string;
-    executor: string;
-    reason: 'ttlExpired' | 'inputUnrecoverable' | 'outputUnrecoverable' | 'definitionMismatch' | 'unknownProvider' | 'inputHashMismatch' | 'providerUncertain';
-    errorCode: string;
-} | {
-    type: 'hostEffectRetryDeferred';
-    nodeId: string;
-    instanceId: string;
-    attemptId: string;
-    retryCount: number;
-    nextRetryAt: number;
-    errorCode: string;
-} | {
-    type: 'nodeWorkerFenceArmed';
-    nodeId: string;
-    instanceId?: string;
-    attemptId: string;
-} | {
-    type: 'nodeSessionReady';
-    nodeId: string;
-    instanceId?: string;
-    attemptId: string;
-    sessionInfo: {
-        sessionId: string;
-        webPort?: number;
-    };
-    ptyLogPath?: string;
-} | {
-    type: 'nodeSucceeded';
-    nodeId: string;
-    instanceId?: string;
-    attemptId: string;
-    manifestPath: string;
-} | {
-    type: 'nodeFailed';
-    nodeId: string;
-    instanceId?: string;
-    attemptId: string;
-    errorClass: V3ErrorClass;
-    errorCode?: string;
-    message?: string;
-} | {
-    type: 'nodeBlocked';
-    nodeId: string;
-    instanceId?: string;
-    attemptId: string;
-    errorClass: V3ErrorClass;
-    errorCode?: string;
-    message?: string;
-    ask?: GoalAsk;
-    revisitTo?: string;
-} | {
-    type: 'nodeRetryRequested';
-    nodeId: string;
-    instanceId?: string;
-    previousAttemptId: string;
-    nextAttemptId: string;
-    reason: 'blockedRetry';
-    previousErrorClass?: V3ErrorClass;
-    previousErrorCode?: string;
-    /** Host pre-intent retry must approve the newly frozen attempt again. */
-    resetGate?: boolean;
-    answer?: {
-        path: string;
-        preview: string;
-        by: string;
-    };
-} | {
-    type: 'gateDispatched';
-    nodeId: string;
-    instanceId?: string;
-    waitId: string;
-    hostApproval?: {
-        attemptId: string;
-        approvalDigest: string;
-        inputHash: string;
-    };
-} | {
-    type: 'gateResolved';
-    nodeId: string;
-    instanceId?: string;
-    waitId: string;
-    resolution: 'approved' | 'rejected';
-    by: string;
-    selected?: string;
-    hostApproval?: {
-        attemptId: string;
-        approvalDigest: string;
-        inputHash: string;
-    };
-} | {
-    type: 'edgeResolved';
-    from: string;
-    to: string;
-    fromInstanceId?: string;
-    toInstanceId?: string;
-    sourceAttemptId: string;
-    active: boolean;
-    detail?: string;
-} | {
-    type: 'nodeSkipped';
-    nodeId: string;
-    reason: 'triggerRuleUnsatisfied';
-    detail?: string;
-} | ({
-    type: 'nodeCancelled';
-    nodeId: string;
-    instanceId?: string;
-    attemptId?: string;
-    detail?: string;
-} & ({
-    reason: 'earlyReleaseLoser';
-    byNodeId: string;
-} | {
-    reason: 'runCancelled';
-    cancelRequestId: string;
-})) | {
-    type: 'nodeAttemptDrained';
-    nodeId: string;
-    instanceId?: string;
-    attemptId: string;
-    reason: 'terminalPeer' | 'obsoleteAttempt' | 'orphanRecovery' | 'runCancellation';
-} | {
-    type: 'nodeRevisitRequested';
-    nodeId: string;
-    instanceId: string;
-    attemptId: string;
-    toNodeId: string;
-    reason?: string;
-    reasonPath?: string;
-    sourceManifestPath?: string;
-    targetPreviousManifestPath?: string;
-} | {
-    type: 'nodeInstanceSuperseded';
-    nodeId: string;
-    instanceId: string;
-    byNodeId: string;
-    reason: 'refresh';
-} | {
-    type: 'revisitBudgetGranted';
-    sourceNodeId?: string;
-    toNodeId?: string;
-    by: string;
-    reason?: string;
-} | {
-    type: 'loopStarted';
-    loopId: string;
-} | {
-    type: 'loopIterationStarted';
-    loopId: string;
-    iteration: number;
-} | {
-    type: 'loopIterationDecision';
-    loopId: string;
-    iteration: number;
-    decision: 'exit' | 'continue' | 'exhausted';
-    /** Human-readable why (e.g. `result.passed=false (2/3 iterations used)`). */
-    detail?: string;
-} | {
-    type: 'loopIterationGranted';
-    loopId: string;
-    fromIteration: number;
-    by?: string;
-} | {
-    type: 'runCancelRequested';
-    cancelRequestId: string;
-    by: string;
-    reason?: string;
-} | {
-    type: 'runCancelled';
-    cancelRequestId: string;
-    by: string;
-    uncertainHostEffects?: V3UncertainHostEffect[];
-} | {
-    type: 'runSucceeded';
-} | {
-    type: 'runFailed';
-    failedNodeId?: string;
-    reason?: V3RunFailureReason;
-    detail?: string;
-} | {
-    type: 'runBlocked';
-    blockedNodeId: string;
-};
-/** A journal line: the event flattened with its append timestamp (flattened —
- *  not `{ts, event}` — so `grep nodeFailed journal.ndjson` just works). */
-export type StoredEvent = V3Event & {
-    ts: number;
-};
-export interface JournalMutation {
-    /** Lazy snapshot; access it before calling append when doing read/check/write. */
-    readonly events: readonly StoredEvent[];
-    /** Append while retaining the mutation's already-held cross-process lock. */
-    append(event: V3Event, options?: {
-        durable?: boolean;
-    }): StoredEvent;
-}
+import type { JournalMutation, StoredEvent, V3Event } from './event-contract.js';
+export type { GoalAsk, GoalAnswer, JournalMutation, StoredEvent, V3ErrorClass, V3Event, V3LoopRef, V3RunFailureReason, V3UncertainHostEffect, } from './event-contract.js';
 /**
  * Run one read/check/append mutation under the journal's sole lock. Callers
  * such as start-intent use this instead of nesting a file lock around

package/dist/workflows/v3/journal.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"journal.d.ts","sourceRoot":"","sources":["../../../src/workflows/v3/journal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAiBH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAI7C;;yEAEyE;AACzE,MAAM,MAAM,YAAY,GACpB,aAAa,GACb,iBAAiB,GACjB,eAAe,GACf,SAAS,GACT,cAAc,GACd,WAAW,CAAC;AAEhB,MAAM,MAAM,kBAAkB,GAAG,iBAAiB,CAAC;AAEnD;;gFAEgF;AAChF,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;;GAKG;AACH;;;;;GAKG;AACH,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,OAAO,GACf;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAQrC;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,SAAS,CAAA;CAAE,GAIpG;IACE,IAAI,EAAE,mBAAmB,CAAC;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1D,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,MAAM,CAAC;IACzB,cAAc,EAAE,MAAM,CAAC;CACxB,GAID;IACE,IAAI,EAAE,kBAAkB,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1D,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,MAAM,CAAC;IACzB,cAAc,EAAE,MAAM,CAAC;CACxB,GAID;IACE,IAAI,EAAE,qBAAqB,CAAC;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EACF,YAAY,GACZ,oBAAoB,GACpB,qBAAqB,GACrB,oBAAoB,GACpB,iBAAiB,GACjB,mBAAmB,GACnB,mBAAmB,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;CACnB,GACD;IACE,IAAI,EAAE,yBAAyB,CAAC;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB,GAID;IAAE,IAAI,EAAE,sBAAsB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAOxF;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GAC/J;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GAGvG;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,YAAY,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAQ9I;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,YAAY,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,OAAO,CAAC;IAK3J,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GAOtB;IACE,IAAI,EAAE,oBAAoB,CAAC;IAC3B,MAAM,EAAE,MAAM,CAAC;IAKf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,cAAc,CAAC;IACvB,kBAAkB,CAAC,EAAE,YAAY,CAAC;IAClC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,yEAAyE;IACzE,SAAS,CAAC,EAAE,OAAO,CAAC;IAMpB,MAAM,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;CACxD,GAGD;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAC5E,YAAY,CAAC,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GACnF;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,UAAU,GAAG,UAAU,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC9I,YAAY,CAAC,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GASnF;IACE,IAAI,EAAE,cAAc,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GAID;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,wBAAwB,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAM1F,CAAC;IACC,IAAI,EAAE,eAAe,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GAAG,CACA;IAAE,MAAM,EAAE,mBAAmB,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACjD;IAAE,MAAM,EAAE,cAAc,CAAC;IAAC,eAAe,EAAE,MAAM,CAAA;CAAE,CACtD,CAAC,GAMF;IACE,IAAI,EAAE,oBAAoB,CAAC;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,cAAc,GAAG,iBAAiB,GAAG,gBAAgB,GAAG,iBAAiB,CAAC;CACnF,GAMD;IACE,IAAI,EAAE,sBAAsB,CAAC;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAQhB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,0BAA0B,CAAC,EAAE,MAAM,CAAC;CACrC,GAQD;IACE,IAAI,EAAE,wBAAwB,CAAC;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,SAAS,CAAC;CACnB,GAMD;IACE,IAAI,EAAE,sBAAsB,CAAC;IAC7B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GAQD;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACvC;IAAE,IAAI,EAAE,sBAAsB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAKnE;IACE,IAAI,EAAE,uBAAuB,CAAC;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,GAAG,UAAU,GAAG,WAAW,CAAC;IAC5C,6EAA6E;IAC7E,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GAID;IAAE,IAAI,EAAE,sBAAsB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,EAAE,CAAC,EAAE,MAAM,CAAA;CAAE,GAKpF;IAAE,IAAI,EAAE,oBAAoB,CAAC;IAAC,eAAe,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GACpF;IACE,IAAI,EAAE,cAAc,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,oBAAoB,CAAC,EAAE,qBAAqB,EAAE,CAAC;CAChD,GACD;IAAE,IAAI,EAAE,cAAc,CAAA;CAAE,GACxB;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,kBAAkB,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAG1F;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,CAAC;AAElD;2EAC2E;AAC3E,MAAM,MAAM,WAAW,GAAG,OAAO,GAAG;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC;AAInD,MAAM,WAAW,eAAe;IAC9B,kFAAkF;IAClF,QAAQ,CAAC,MAAM,EAAE,SAAS,WAAW,EAAE,CAAC;IACxC,6EAA6E;IAC7E,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,WAAW,CAAC;CACtE;AA+FD;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,CAAC,EACvC,WAAW,EAAE,MAAM,EACnB,EAAE,EAAE,CAAC,QAAQ,EAAE,eAAe,KAAK,CAAC,GACnC,CAAC,CAgCH;AAED;;;;;;;;GAQG;AACH,wBAAgB,WAAW,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,WAAW,CAE5E;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,WAAW,CAEnF;AAID;;;;;;;GAOG;AACH,wBAAgB,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,WAAW,EAAE,CAG9D"}
+{"version":3,"file":"journal.d.ts","sourceRoot":"","sources":["../../../src/workflows/v3/journal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAiBH,OAAO,KAAK,EAAE,eAAe,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AACjF,YAAY,EACV,OAAO,EACP,UAAU,EACV,eAAe,EACf,WAAW,EACX,YAAY,EACZ,OAAO,EACP,SAAS,EACT,kBAAkB,EAClB,qBAAqB,GACtB,MAAM,qBAAqB,CAAC;AA+F7B;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,CAAC,EACvC,WAAW,EAAE,MAAM,EACnB,EAAE,EAAE,CAAC,QAAQ,EAAE,eAAe,KAAK,CAAC,GACnC,CAAC,CAgCH;AAED;;;;;;;;GAQG;AACH,wBAAgB,WAAW,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,WAAW,CAE5E;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,WAAW,CAEnF;AAID;;;;;;;GAOG;AACH,wBAAgB,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,WAAW,EAAE,CAG9D"}