dsh-kingdom 0.8.0 → 2.0.0

package/lib/types/core/binding.d.ts

@@ -1,4 +1,5 @@
 import { KingdomStore, RoleBindingRow } from './db.js';
+import { type OwnerControlCapability, type OwnerEventSource, type OwnerOperationMatch } from './owner-control.js';
 export declare const ROLE_TYPES: readonly ["OWNER", "CHANCELLOR", "SUPERVISOR", "WORKER"];
 export type RoleType = (typeof ROLE_TYPES)[number];
 /**
@@ -25,7 +26,7 @@ export interface SessionIdentity {
  * ExecutorFactory 解析执行时**禁止读取** binding.model_name。
  */
 export interface ExecutionProfileV1 {
-    /** subagent provider 名（spawn/fork）。缺省 → 回退全局 workerProvider（global-fallback 证据）。 */
+    /** Requested provider; governed runtime interprets this as an LLM provider. */
     provider?: string;
     /** requested model（传给子 agent 的 agentOptions.model）。缺省 → 继承父 Agent（parent-inherited 证据）。 */
     model?: string;
@@ -44,8 +45,9 @@ export declare function parseExecutionProfile(json: string | null): ExecutionPro
 /**
  * v0.6.0（M1-C）：设置/清空角色执行配置（组织资源配置，治理对象）。
  *
- * 必须走 Trusted Governance Administration Plane（requireAdmin）：
- * session-bound 下仅真实 OWNER 会话可执行；declarative 演示模式保持现状。
+ * 必须走 Core Owner Control gate（requireAdmin → requireOwnerControl）：
+ * 只有 direct `/kingdom` Slash 持有的 opaque capability 可执行；Agent
+ * Session、`OWNER.session_id` 与 declarative auth 均不是 Owner Authority。
  * 独立工具面 `kingdom_set_execution_profile`，不塞进 bind_session
  * （治理身份 Session 与执行能力 Profile 不混用）。
  */
@@ -73,23 +75,30 @@ export interface RebindSessionInput extends SessionIdentity {
 /**
  * v0.5.2：Trusted Governance Administration Plane 的授权输入。
  *
- * 管理面（任命/罢免/改绑/换届）的调用者身份只允许来自 DSH Runtime
- * （工具面经 `sessionPrincipal(exec)` 注入），**绝不允许调用参数自报**。
- * - `declarative`（本地演示）：不校验调用者（snapshot 如实标注 local-demo）；
- * - `session-bound`（真实权限边界）：只有 OWNER binding 关联的真实会话可执行。
+ * Owner-only 管理面（任命/罢免/改绑/换届/执行配置）的唯一授权输入是
+ * direct `/kingdom` handler 内部取得的 `OwnerControlCapability`。
+ * `mode` 与 `principalSessionId` 保留为兼容类型字段，不能产生写权限；
+ * `declarative`、`session-bound` 以及旧的 `OWNER.session_id` 均只表示历史
+ * 运行上下文，不能作为 Owner Authority。
  */
 export interface AdminAuth {
     mode: 'declarative' | 'session-bound';
     /** 调用方会话（来自 DSH Runtime 证明，工具面注入）。 */
     principalSessionId?: string | null;
+    /** Trusted-local direct Slash capability; never accepted from a Tool/HTTP payload. */
+    ownerControl?: OwnerControlCapability;
 }
 /**
- * v0.5.2 管理面守卫：组织管理（bind/unbind/rebind）在 session-bound 模式下
- * 仅 OWNER 真实会话可执行；OWNER 未绑定会话时 fail-closed（不猜、不放行）。
+ * Core Owner gate（兼容旧符号名）：所有产品 Owner-only 写统一只接受
+ * direct Slash mint 的 opaque capability。旧 auth 输入即使包含匹配的
+ * OWNER.session_id 或 declarative mode 也 fail-closed、zero-write。
  */
-export declare function requireAdmin(store: KingdomStore, kingdomId: string, auth?: AdminAuth): {
+export declare function requireAdmin(store: KingdomStore, kingdomId: string, auth?: AdminAuth, operation?: OwnerOperationMatch): {
     ok: true;
     owner: RoleBindingRow | null;
+    ownerPrincipalId: string | null;
+    ownerControl: boolean;
+    eventSource: OwnerEventSource;
 } | {
     ok: false;
     message: string;

package/lib/types/core/budget.d.ts

@@ -0,0 +1,81 @@
+import type { KingdomStore } from './db.js';
+import { type AdminAuth } from './binding.js';
+/** Exact Owner budget.policy parameters. Amounts are tokens, never a hard bill limit. */
+export interface BudgetPolicyParameters {
+    enabled: boolean;
+    limit_tokens: number;
+    reserve_tokens: number;
+    unknown_policy: 'BLOCK' | 'WARN';
+    warning_percent?: number;
+}
+export interface BudgetPolicyView {
+    type: 'KingdomBudgetPolicy/v1';
+    budgetId: string;
+    kingdomId: string;
+    enabled: boolean;
+    limitTokens: number;
+    reserveTokens: number;
+    unknownPolicy: 'BLOCK' | 'WARN';
+    warningPercent: number;
+    sinceEventSeq: number;
+    revision: number;
+    updatedAt: string;
+}
+export interface BudgetView {
+    type: 'KingdomBudgetView/v1';
+    scope: 'KINGDOM';
+    coverage: 'OBSERVABLE_ONLY';
+    policy: BudgetPolicyView | null;
+    state: 'OFF' | 'ALLOW' | 'WARN' | 'BLOCK_LIMIT' | 'BLOCK_UNKNOWN';
+    verifiedTokens: number;
+    workerVerifiedTokens: number;
+    additionalVerifiedTokens: number;
+    reservedEstimateTokens: number;
+    exposureTokens: number;
+    remainingTokens: number | null;
+    pendingUnits: number;
+    unknownUnits: number;
+    attributionGapCount: number;
+    recoveryUnits: number;
+    amount: null;
+    amountStatus: 'UNKNOWN';
+    note: string;
+}
+declare const BUDGET_ADMISSION_HANDLE: unique symbol;
+export interface BudgetAdmissionHandle {
+    readonly [BUDGET_ADMISSION_HANDLE]: true;
+}
+export interface BudgetAdmissionInput {
+    kingdomId: string;
+    taskId: string;
+    attemptNo: number;
+    workerBindingId: string;
+}
+export interface BudgetAdmissionBindingInput extends BudgetAdmissionInput {
+    dispatchId: string;
+    leaseId: string;
+}
+export declare class BudgetError extends Error {
+    readonly code: string;
+    constructor(code: string, message: string);
+}
+/** Process-local observation only; historical IDs do not grant admission authority. */
+export declare function isBudgetAdmissionInvocationActive(store: KingdomStore, admissionId: string): boolean;
+export declare function normalizeBudgetPolicyParameters(value: unknown): Required<BudgetPolicyParameters>;
+export declare function readBudgetPolicy(store: KingdomStore, kingdomId: string): BudgetPolicyView | null;
+/** Synchronous exact Owner helper, also callable inside the Owner receipt transaction. */
+export declare function setBudgetPolicy(store: KingdomStore, input: {
+    kingdomId: string;
+    policy: BudgetPolicyParameters;
+}, auth?: AdminAuth): string;
+/** Deterministic read projection. Additional usage includes non-Worker sources only. */
+export declare function readBudgetView(store: KingdomStore, kingdomId: string): BudgetView;
+/** No Runtime callback occurs inside this transaction; concurrent admissions serialize on the ledger. */
+export declare function reserveBudgetAdmission(store: KingdomStore, input: BudgetAdmissionInput): BudgetAdmissionHandle;
+/** Called only from the existing TX-3 after the exact Execution, Intent and EXECUTING Lease are written. */
+export declare function bindBudgetAdmissionInTransaction(store: KingdomStore, handle: BudgetAdmissionHandle | undefined, input: BudgetAdmissionBindingInput): void;
+/** Only closes accounting; it never releases, stops or edits any Runtime/Lease/Task fact. */
+export declare function cancelBudgetAdmissionIfSafe(store: KingdomStore, handle: BudgetAdmissionHandle): boolean;
+/** End only the in-memory invocation; unresolved persisted reservations remain visible after restart. */
+export declare function finishBudgetAdmissionInvocation(handle: BudgetAdmissionHandle): void;
+export {};

package/lib/types/core/collaboration.d.ts

@@ -0,0 +1,110 @@
+import type { KingdomStore } from './db.js';
+import { type AdminAuth } from './binding.js';
+import { type CommandContext } from './task-service.js';
+export interface CollaborationPlanItemInput {
+    key: string;
+    title: string;
+    description: string;
+    acceptanceCriteria: string;
+    territoryId: string;
+    workerBindingId: string;
+    access: 'READ_ONLY' | 'WRITE';
+    dependsOn: string[];
+    expectedArtifact: string;
+}
+export interface ProposeCollaborationPlanInput {
+    parentTaskId: string;
+    expectedVersion?: number;
+    mode: 'EXPERT' | 'TEAM';
+    reason: string;
+    integratorBindingId: string;
+    budgetTokens: number;
+    reserveTokens: number;
+    items: CollaborationPlanItemInput[];
+}
+export interface PlanAdoptionParameters {
+    plan_id: string;
+    version: number;
+    digest: string;
+}
+export interface CollaborationPlanItem extends CollaborationPlanItemInput {
+    taskId: string;
+}
+export interface CollaborationPlanView {
+    type: 'KingdomCollaborationPlan/v1';
+    planId: string;
+    kingdomId: string;
+    parentTaskId: string;
+    version: number;
+    digest: string;
+    state: 'PROPOSED' | 'ADOPTED' | 'STALE';
+    mode: 'EXPERT' | 'TEAM';
+    reason: string;
+    integratorBindingId: string;
+    budgetTokens: number;
+    reserveTokens: number;
+    items: CollaborationPlanItem[];
+    childTaskIds: string[];
+    proposedBy: string;
+    proposedAt: string;
+    proposedSeq: number;
+    adoptedAt: string | null;
+    adoptedSeq: number | null;
+}
+export declare class CollaborationError extends Error {
+    readonly code: string;
+    constructor(code: string, message: string);
+}
+export declare function normalizePlanAdoptionParameters(value: unknown): PlanAdoptionParameters;
+export declare function readCollaborationPlan(store: KingdomStore, kingdomId: string, planId: string): CollaborationPlanView | null;
+export declare function listCollaborationPlans(store: KingdomStore, kingdomId: string): CollaborationPlanView[];
+export declare function proposeCollaborationPlan(store: KingdomStore, ctx: CommandContext, input: ProposeCollaborationPlanInput): CollaborationPlanView;
+export declare function adoptCollaborationPlan(store: KingdomStore, input: {
+    kingdomId: string;
+} & PlanAdoptionParameters, auth?: AdminAuth): string;
+export interface CollaborationHandoff {
+    taskId: string;
+    attemptNo: number;
+    resultId: string;
+    resultDigest: string;
+    acceptEventId: string;
+    acceptEventSeq: number;
+    summary: string;
+    artifacts: string[];
+}
+export interface CollaborationReadiness {
+    planId: string;
+    version: number;
+    digest: string;
+    parentTaskId: string;
+    taskId: string;
+    kind: 'ITEM' | 'INTEGRATION';
+    access: 'READ_ONLY' | 'WRITE';
+    workerBindingId: string;
+    ready: boolean;
+    reasonCode: string | null;
+    blockingTaskIds: string[];
+    handoffs: CollaborationHandoff[];
+}
+/** Read-only exact references. Handoff text remains an untrusted Worker Claim. */
+export declare function readCollaborationReadiness(store: KingdomStore, kingdomId: string, taskId: string, preparingLeaseId?: string): CollaborationReadiness | null;
+/** Recompute before dispatch; caller-supplied or stale references never become authority. */
+export declare function validateCollaborationHandoffs(store: KingdomStore, kingdomId: string, taskId: string, expected: readonly CollaborationHandoff[], preparingLeaseId?: string): boolean;
+export interface PlanBudgetView {
+    scope: 'PLAN_WITH_KINGDOM_COORDINATION_UPPER_BOUND';
+    planId: string;
+    limitTokens: number;
+    reserveTokens: number;
+    workerVerifiedTokens: number;
+    coordinationUpperBoundTokens: number;
+    reservedEstimateTokens: number;
+    exposureTokens: number;
+    remainingTokens: number;
+    pendingUnits: number;
+    unknownUnits: number;
+    attributionGapCount: number;
+    state: 'ALLOW' | 'WARN' | 'BLOCK_LIMIT' | 'BLOCK_UNKNOWN';
+    amount: null;
+}
+/** Members are exact; all observable concurrent kingdom coordination is a conservative upper bound. */
+export declare function readPlanBudgetView(store: KingdomStore, kingdomId: string, planId: string): PlanBudgetView | null;

package/lib/types/core/cost.d.ts

@@ -0,0 +1,99 @@
+import type { KingdomStore } from './db.js';
+/** Provider buckets are disjoint; reasoning is already included in output. */
+export interface ProviderTokenCounts {
+    uncachedInputTokens: number;
+    outputTokens: number;
+    totalTokens: number;
+    cacheReadTokens?: number;
+    cacheWriteTokens?: number;
+    reasoningTokens?: number;
+    routes?: readonly {
+        provider: string;
+        model: string;
+    }[];
+}
+/** Neutral source observation. It cannot change role, task, or execution authority. */
+export interface RoleUsageObservation {
+    type: 'KingdomRoleUsage/v1';
+    source: 'provider-reported';
+    sourceUnitRef: string;
+    runtimeInstanceRef: string;
+    sessionRef: string;
+    bindingId: string;
+    roleType: 'CHANCELLOR' | 'SUPERVISOR';
+    taskIds: string[];
+    attribution: 'TASK' | 'SHARED' | 'UNATTRIBUTED';
+    startedAt: string;
+    startedLedgerSeq: number;
+    observationSequence: number;
+    status: 'IN_PROGRESS' | 'COMPLETE' | 'UNAVAILABLE';
+    reasonCode: string | null;
+    observedRequests: number;
+    reportedRequests: number;
+    usage: ProviderTokenCounts | null;
+}
+export interface PromptCostObservation {
+    type: 'KingdomPromptCost/v1';
+    source: 'assembly-byte-observation';
+    sourceUnitRef: string;
+    bindingId: string;
+    roleType: string;
+    toolsBefore: number;
+    toolsAfter: number;
+    toolsBytesBefore: number;
+    toolsBytesAfter: number;
+    sections: {
+        name: string;
+        bytes: number;
+    }[];
+    contexts: {
+        name: string;
+        bytes: number;
+    }[];
+    /** Assembly has no final history envelope; never substitute a zero. */
+    historyBytes: null;
+    tokenEstimate: null;
+    mode: 'off' | 'pilot';
+    reasonCode: string | null;
+}
+export declare function validProviderCounts(usage: ProviderTokenCounts): boolean;
+export declare function recordUsageCoverageGap(store: KingdomStore, kingdomId: string, sourceUnitRef: string, reasonCode: 'ROLE_IDENTITY_AMBIGUOUS'): void;
+/** Arbitrary plugin names are not trusted metadata. Only fixed public categories reach the ledger. */
+export declare function safePromptPartName(value: string, index: number, type: 'section' | 'context'): string;
+export declare function recordRoleUsage(store: KingdomStore, kingdomId: string, input: RoleUsageObservation): boolean;
+export interface AdditionalRoleCostSummary {
+    scope: 'OBSERVED_GOVERNANCE_TURNS';
+    units: number;
+    completeUnits: number;
+    pendingUnits: number;
+    unknownUnits: number;
+    attributionGapCount: number;
+    observedRequests: number;
+    reportedRequests: number;
+    verifiedTokens: number | null;
+    byRole: {
+        roleType: string;
+        units: number;
+        completeUnits: number;
+        verifiedTokens: number | null;
+    }[];
+    sharedTokens: number | null;
+    unattributedTokens: number | null;
+    amount: null;
+    amountStatus: 'PRICE_NOT_CONFIGURED';
+    coverageNote: string;
+}
+/** Lost observer continuity is unknown usage, never proof a Runtime stopped. */
+export declare function closeInterruptedRoleObservations(store: KingdomStore, kingdomId: string, runtimeInstanceRef: string): number;
+export declare function readAdditionalRoleCost(store: KingdomStore, kingdomId: string, taskId?: string): AdditionalRoleCostSummary;
+/** Add only non-Worker observations; Worker dispatch reports are already counted by budget.ts. */
+export declare function readIncompleteRoleUsageSourceRefs(store: KingdomStore, kingdomId: string): string[];
+/** Frozen carry-in sources preserve work already pending when the first policy was created. */
+export declare function readAdditionalBudgetUsage(store: KingdomStore, kingdomId: string, sinceEventSeq: number, carriedSourceRefs?: readonly string[]): {
+    verifiedTokens: number;
+    unknownUnits: number;
+    pendingUnits: number;
+    attributionGapCount: number;
+};
+export declare function recordPromptCost(store: KingdomStore, kingdomId: string, input: PromptCostObservation): void;
+export declare function readLatestPromptCosts(store: KingdomStore, kingdomId: string): PromptCostObservation[];

package/lib/types/core/db.d.ts

@@ -141,7 +141,10 @@ export interface ExecutionRow {
     task_id: string;
     attempt_no: number;
     worker_binding_id: string | null;
-    /** 该次执行的 one-shot subagent session id（每轮 REWORK 都是新的）。 */
+    /**
+     * 该次执行的 runtime session id；LEGACY_COMPAT 每轮 REWORK 都是新的 one-shot，
+     * GOVERNED_PERSISTENT 则记录被复用的长期 Worker Session。
+     */
     session_id: string | null;
     /** STARTING / RUNNING / PAUSED / COMPLETED / FAILED / ABORTED，见 ./execution.ts。 */
     state: string;
@@ -151,7 +154,7 @@ export interface ExecutionRow {
     /**
      * 最近一次**状态转移**的时刻，不是心跳。
      *
-     * 诚实说明：one-shot subagent 这个 seam 不提供任何进度回调
+     * 诚实说明：LEGACY_COMPAT one-shot subagent seam 不提供任何进度回调
      * （`SubagentRun` 只有 `{id, localAgent, result, dispose}`），
      * 所以执行进行中没有任何可以周期性上报的信号，本字段在整个执行体内不会前进。
      *
@@ -164,7 +167,7 @@ export interface ExecutionRow {
     /**
      * 暂停请求时间。
      *
-     * one-shot subagent 无法在一次 turn 中途真正挂起，因此"暂停"的诚实语义是：
+     * LEGACY_COMPAT one-shot subagent 无法在一次 turn 中途真正挂起，因此"暂停"的诚实语义是：
      * 请求已登记，**在下一个 attempt 边界生效**。执行中的 Execution 会保持
      * `RUNNING` 并带 `pause_requested_at`（GUI 应显示"准备休息"而不是"已睡着"）。
      */
@@ -296,6 +299,8 @@ export interface TaskRow {
     acceptance_criteria: string | null;
     /** 最近一次 Worker Claim 的摘要。**是 Claim，不是完成事实**。 */
     result_summary: string | null;
+    /** v0.8：Task 的非权威 Capability Requirement；旧 v3 库可能没有该列。 */
+    capability_requirement_json?: string | null;
     created_at: string;
     updated_at: string;
 }
@@ -313,7 +318,7 @@ export interface WorkerResultRow {
     /** 第几次尝试，从 1 起；REWORK 每轮 +1。UNIQUE(task_id, attempt_no)。 */
     attempt_no: number;
     worker_binding_id: string | null;
-    /** 该 attempt 的 one-shot subagent session id（每轮 REWORK 都是新 session）。 */
+    /** 该 attempt 的 runtime session id；仅 LEGACY_COMPAT 每轮 REWORK 都是新 one-shot session。 */
     session_id: string | null;
     /** Worker 自称的结果：COMPLETED / FAILED / BLOCKED。是 Claim。 */
     outcome: string;
@@ -438,6 +443,12 @@ export declare class KingdomStore {
     tombstoneTerritoryRow(territoryId: string, reason: string | null): void;
     /** v0.7.0（M2）：设置 Territory 主理 Supervisor（scope relation；NULL=未指派=fail-closed）。 */
     updateTerritorySupervisor(territoryId: string, supervisorBindingId: string | null): void;
+    updateTerritoryMetadata(territoryId: string, name: string, summary: string | null): void;
+    getEventById(eventId: string): EventRow | null;
+    /** Global append cursor; callers predicting a receipt sequence must hold the write transaction. */
+    eventSequence(): number;
+    /** Owner topology guards include RECOVERING and unknown future nonterminal states. */
+    listUnsettledOwnerExecutions(kingdomId: string): ExecutionRow[];
     insertTaskAssignment(row: TaskAssignmentRow): TaskAssignmentRow;
     /** 当前 active assignment（partial unique index 保证至多一条）。 */
     getActiveAssignmentForTask(taskId: string): TaskAssignmentRow | null;
@@ -486,6 +497,19 @@ export declare class KingdomStore {
      * 漏了就重新拉一次全量 snapshot，而不是拿残缺事件流去驱动动画。
      */
     listEventsSince(kingdomId: string, afterSeq: number, limit?: number): EventRow[];
+    /**
+     * Exact Dispatch lookup for one Task attempt.
+     *
+     * Integrity decisions must not scan a bounded event projection: the
+     * dispatch/task/attempt relation is authoritative in dispatch_records.
+     */
+    listDispatchesForTaskAttempt(taskId: string, attemptNo: number): DispatchRecordRow[];
+    /**
+     * Exact, replay-safe lookup for an open terminal integrity incident.
+     * The SQL predicate narrows by the exact Dispatch target; the bounded JSON
+     * payload is then checked against the exact Task/attempt correlation.
+     */
+    getOpenDispatchTerminalIntegrityIncident(kingdomId: string, dispatchId: string, taskId: string, attemptNo: number): EventRow | null;
     /**
      * 王国当前 revision = 最大事件序号。
      *
@@ -493,6 +517,12 @@ export declare class KingdomStore {
      * GUI 比较 revision 就知道要不要重绘，不必 diff 整个 snapshot。
      */
     revision(kingdomId: string): number;
+    /** Observations and future admission/window policy cannot change an in-flight Runner relation. */
+    runnerContextRevision(kingdomId: string, scope?: {
+        taskId: string;
+        workerBindingId: string;
+        sessionRef: string;
+    }): number;
     /**
      * v0.7.0（M2）：外层事务包装——HANDOFF 等**原子治理操作**（多步写 + 事件）整体提交/回滚。
      * appendEvent 的内层 BEGIN 在事务中会抛错，由 appendEvent 的嵌套容忍逻辑接管（见下）。
@@ -538,6 +568,15 @@ export declare class KingdomStore {
     }): TaskRow;
     listWorkerResults(taskId: string): WorkerResultRow[];
     latestWorkerResult(taskId: string): WorkerResultRow | null;
+    /** Exact task/attempt lookup; unrelated kingdom activity cannot hide the reviewed attempt. */
+    latestTaskReworkEvent(kingdomId: string, taskId: string, reviewedAttemptNo: number): EventRow | null;
+    listDispatchUsageEvents(dispatchId: string): EventRow[];
+    /** Complete exact budget ledger; display event windows must never be used as accounting history. */
+    listBudgetEvents(kingdomId: string): EventRow[];
+    listWorkspaceAdmissionEvents(kingdomId: string): EventRow[];
+    listRuntimeCostEvents(kingdomId: string): EventRow[];
+    listActorEventsSince(kingdomId: string, actorId: string, afterSeq: number): EventRow[];
+    getLatestRuntimeRoleUsageEvent(kingdomId: string, sourceUnitRef: string): EventRow | null;
     /** 已落库的最大 attempt_no；无结果时为 0。下一次尝试 = 本值 + 1。 */
     maxAttemptNo(taskId: string): number;
     /**
@@ -636,6 +675,7 @@ export declare class KingdomStore {
     } | undefined, at: string): DispatchRecordRow;
     getTaskCapabilityRequirement(taskId: string): string | null;
     setTaskCapabilityRequirement(taskId: string, json: string | null): void;
+    private getTaskCapabilityRequirementColumn;
     getKingdomCapabilityCeiling(kingdomId: string): string | null;
     setKingdomCapabilityCeiling(kingdomId: string, json: string | null): void;
     statusSummary(): string;

package/lib/types/core/execution.d.ts

@@ -24,7 +24,7 @@ export type ExecutionState = (typeof EXECUTION_STATES)[number];
 /**
  * 合法转移。
  *
- * - `STARTING → RUNNING`：宿主确认执行已真正开始。
+ * - `STARTING → RUNNING | PAUSED`：宿主确认执行已开始，或 Supervisor 在分派前暂停。
  * - `RUNNING ↔ PAUSED`：暂停/恢复（见 `./execution.ts` 关于 one-shot 的诚实边界说明）。
  * - `* → RECOVERING`：v0.8（M3-S2 v6）——Kingdom 无法确认 Execution 真实 Runtime 状态、
  *   正在重建证据（Dispatch Intent 有 / Adapter 失联 / host 重启）。**不改 Task 治理状态**；

package/lib/types/core/governed-claim.d.ts

@@ -0,0 +1,7 @@
+import type { KingdomStore } from './db.js';
+/** One terminal dispatch produces one Claim. Runtime completion never accepts a task. */
+export declare function submitGovernedClaim(store: KingdomStore, dispatchId: string, summary: string): {
+    created: boolean;
+    summary: string;
+    outcome: string;
+};