dsh-kingdom 0.8.0 → 2.0.0

package/lib/core/cost.js

@@ -0,0 +1,212 @@
+import { randomUUID } from 'node:crypto';
+const count = (value) => typeof value === 'number' && Number.isSafeInteger(value) && value >= 0;
+const ref = (value) => typeof value === 'string' && value.length > 0 && value.length <= 768;
+export function validProviderCounts(usage) {
+    if (!usage || !count(usage.uncachedInputTokens) || !count(usage.outputTokens) || !count(usage.totalTokens))
+        return false;
+    for (const key of ['cacheReadTokens', 'cacheWriteTokens', 'reasoningTokens'])
+        if (usage[key] !== undefined && !count(usage[key]))
+            return false;
+    const prompt = usage.uncachedInputTokens + (usage.cacheReadTokens ?? 0) + (usage.cacheWriteTokens ?? 0);
+    return count(prompt) && usage.totalTokens >= prompt + usage.outputTokens
+        && (usage.reasoningTokens === undefined || usage.reasoningTokens <= usage.outputTokens)
+        && (usage.cacheReadTokens === undefined || usage.cacheWriteTokens === undefined || usage.totalTokens === prompt + usage.outputTokens)
+        && (usage.routes === undefined || Array.isArray(usage.routes) && usage.routes.length <= 128 && usage.routes.every(route => ref(route.provider) && ref(route.model)));
+}
+function roleRecords(store, kingdomId) {
+    const latest = new Map();
+    for (const event of store.listRuntimeCostEvents(kingdomId)) {
+        if (event.event_type !== 'RUNTIME_ROLE_USAGE_OBSERVED')
+            continue;
+        try {
+            const value = JSON.parse(event.payload_json);
+            if (value.type !== 'KingdomRoleUsage/v1' || value.sourceUnitRef !== event.target_id)
+                continue;
+            const previous = latest.get(value.sourceUnitRef);
+            if (previous && (previous.value.observationSequence > value.observationSequence || previous.value.status === 'COMPLETE' && value.status !== 'COMPLETE'))
+                continue;
+            latest.set(value.sourceUnitRef, { value, firstSeq: previous?.firstSeq ?? event.seq, seq: event.seq });
+        }
+        catch { /* An invalid historical observation is not free usage. */ }
+    }
+    return latest;
+}
+function coverageGaps(store, kingdomId, sinceSeq = 0, carriedSourceRefs = []) {
+    const units = new Set();
+    const carried = new Set(carriedSourceRefs);
+    for (const event of store.listRuntimeCostEvents(kingdomId)) {
+        if (event.event_type !== 'RUNTIME_ROLE_USAGE_OBSERVED')
+            continue;
+        try {
+            const value = JSON.parse(event.payload_json);
+            if (value.type === 'KingdomUsageCoverageGap/v1' && (event.seq > sinceSeq || carried.has(value.sourceUnitRef)))
+                units.add(value.sourceUnitRef);
+        }
+        catch {
+            if (event.seq > sinceSeq || carried.has(event.target_id ?? event.event_id))
+                units.add(event.target_id ?? event.event_id);
+        }
+    }
+    return units.size;
+}
+export function recordUsageCoverageGap(store, kingdomId, sourceUnitRef, reasonCode) {
+    if (!ref(sourceUnitRef) || store.getDefaultKingdom()?.kingdom_id !== kingdomId)
+        return;
+    const previous = store.getLatestRuntimeRoleUsageEvent(kingdomId, sourceUnitRef);
+    if (previous)
+        return;
+    const value = { type: 'KingdomUsageCoverageGap/v1', sourceUnitRef, reasonCode };
+    store.appendEvent({ event_id: randomUUID(), kingdom_id: kingdomId, event_type: 'RUNTIME_ROLE_USAGE_OBSERVED', actor_role: 'SYSTEM',
+        actor_id: 'kingdom-cost-observer', target_type: 'runtime-usage', target_id: sourceUnitRef, payload_json: JSON.stringify(value), created_at: new Date().toISOString() });
+}
+/** Arbitrary plugin names are not trusted metadata. Only fixed public categories reach the ledger. */
+export function safePromptPartName(value, index, type) {
+    const known = { 'harness:identity': 'harness identity', 'agent:identity': 'agent identity',
+        'tools': 'tool guidance', 'skills': 'skill catalog', 'plugins': 'plugin guidance', 'AGENTS.md': 'workspace guidance',
+        'runtime': 'runtime context', 'runtime:snapshot': 'runtime snapshot' };
+    return known[value] ?? `${type} ${index + 1}`;
+}
+export function recordRoleUsage(store, kingdomId, input) {
+    const value = structuredClone(input);
+    const binding = store.getBindingById(value.bindingId);
+    if (!binding || binding.kingdom_id !== kingdomId || !['CHANCELLOR', 'SUPERVISOR'].includes(binding.role_type)
+        || binding.role_type !== value.roleType || value.type !== 'KingdomRoleUsage/v1' || value.source !== 'provider-reported'
+        || ![value.sourceUnitRef, value.runtimeInstanceRef, value.sessionRef].every(ref)
+        || !count(value.startedLedgerSeq) || !count(value.observationSequence) || !Number.isFinite(Date.parse(value.startedAt))
+        || !count(value.observedRequests) || !count(value.reportedRequests) || value.reportedRequests > value.observedRequests
+        || !['IN_PROGRESS', 'COMPLETE', 'UNAVAILABLE'].includes(value.status)
+        || !['TASK', 'SHARED', 'UNATTRIBUTED'].includes(value.attribution)
+        || !Array.isArray(value.taskIds) || value.taskIds.length > 32 || new Set(value.taskIds).size !== value.taskIds.length
+        || value.taskIds.some(id => { const task = store.getTask(id); return !task || store.getTerritoryById(task.territory_id)?.kingdom_id !== kingdomId; })
+        || (value.attribution === 'TASK' ? value.taskIds.length !== 1 : value.attribution === 'UNATTRIBUTED' ? value.taskIds.length !== 0 : value.taskIds.length < 1)
+        || (value.status === 'COMPLETE' ? !value.usage || !validProviderCounts(value.usage) || value.observedRequests !== value.reportedRequests : value.usage !== null))
+        return false;
+    return store.withImmediateTransaction(() => {
+        const event = store.getLatestRuntimeRoleUsageEvent(kingdomId, value.sourceUnitRef);
+        let previous;
+        try {
+            previous = event ? JSON.parse(event.payload_json) : undefined;
+        }
+        catch {
+            return false;
+        }
+        if (previous && previous.type !== 'KingdomRoleUsage/v1')
+            return false;
+        if (previous && (previous.bindingId !== value.bindingId || previous.sessionRef !== value.sessionRef
+            || previous.runtimeInstanceRef !== value.runtimeInstanceRef || previous.startedLedgerSeq !== value.startedLedgerSeq
+            || previous.observationSequence > value.observationSequence || previous.status === 'COMPLETE' && value.status !== 'COMPLETE'))
+            return false;
+        if (previous && JSON.stringify(previous) === JSON.stringify(value))
+            return true;
+        // A complete turn is an immutable source unit; rescanning after a budget
+        // boundary must not move old usage into the new accounting period.
+        if (previous?.status === 'COMPLETE')
+            return false;
+        store.appendEvent({ event_id: randomUUID(), kingdom_id: kingdomId, event_type: 'RUNTIME_ROLE_USAGE_OBSERVED',
+            actor_role: 'SYSTEM', actor_id: 'kingdom-cost-observer', target_type: 'runtime-usage', target_id: value.sourceUnitRef,
+            payload_json: JSON.stringify(value), created_at: new Date().toISOString() });
+        return true;
+    });
+}
+/** Lost observer continuity is unknown usage, never proof a Runtime stopped. */
+export function closeInterruptedRoleObservations(store, kingdomId, runtimeInstanceRef) {
+    let closed = 0;
+    for (const { value } of roleRecords(store, kingdomId).values()) {
+        if (value.runtimeInstanceRef !== runtimeInstanceRef || value.status !== 'IN_PROGRESS')
+            continue;
+        if (recordRoleUsage(store, kingdomId, { ...value, status: 'UNAVAILABLE', reasonCode: 'OBSERVER_RESTARTED', usage: null }))
+            closed++;
+    }
+    return closed;
+}
+export function readAdditionalRoleCost(store, kingdomId, taskId) {
+    const all = [...roleRecords(store, kingdomId).values()].map(record => record.value);
+    const values = taskId ? all.filter(value => value.attribution === 'TASK' && value.taskIds[0] === taskId) : all;
+    const complete = values.filter(value => value.status === 'COMPLETE' && value.usage && validProviderCounts(value.usage));
+    const sum = (items) => {
+        if (!items.length)
+            return null;
+        const total = items.reduce((total, item) => total + item.usage.totalTokens, 0);
+        return count(total) ? total : null;
+    };
+    const shared = all.filter(value => value.attribution === 'SHARED' && value.status === 'COMPLETE' && value.usage);
+    const unassigned = all.filter(value => value.attribution === 'UNATTRIBUTED' && value.status === 'COMPLETE' && value.usage);
+    return { scope: 'OBSERVED_GOVERNANCE_TURNS', units: values.length, completeUnits: complete.length,
+        pendingUnits: values.filter(value => value.status === 'IN_PROGRESS').length,
+        unknownUnits: values.filter(value => value.status === 'UNAVAILABLE').length + coverageGaps(store, kingdomId),
+        attributionGapCount: all.filter(value => value.attribution !== 'TASK').length,
+        observedRequests: values.reduce((sum, value) => sum + value.observedRequests, 0),
+        reportedRequests: values.reduce((sum, value) => sum + value.reportedRequests, 0), verifiedTokens: sum(complete),
+        byRole: ['CHANCELLOR', 'SUPERVISOR'].map(roleType => ({ roleType,
+            units: values.filter(value => value.roleType === roleType).length,
+            completeUnits: complete.filter(value => value.roleType === roleType).length,
+            verifiedTokens: sum(complete.filter(value => value.roleType === roleType)) })),
+        sharedTokens: sum(shared), unattributedTokens: sum(unassigned), amount: null, amountStatus: 'PRICE_NOT_CONFIGURED',
+        coverageNote: '仅包含本次观测接入后可核对的宰相/主管轮次；共享及未归属不摊入单任务，未接入的外部参与者和旧历史仍是覆盖缺口。' };
+}
+/** Add only non-Worker observations; Worker dispatch reports are already counted by budget.ts. */
+export function readIncompleteRoleUsageSourceRefs(store, kingdomId) {
+    const refs = new Set([...roleRecords(store, kingdomId).values()].filter(record => record.value.status !== 'COMPLETE')
+        .map(record => record.value.sourceUnitRef));
+    for (const event of store.listRuntimeCostEvents(kingdomId)) {
+        if (event.event_type !== 'RUNTIME_ROLE_USAGE_OBSERVED')
+            continue;
+        try {
+            const value = JSON.parse(event.payload_json);
+            if (value.type === 'KingdomUsageCoverageGap/v1' && ref(value.sourceUnitRef))
+                refs.add(value.sourceUnitRef);
+        }
+        catch {
+            refs.add(event.target_id ?? event.event_id);
+        }
+    }
+    return [...refs];
+}
+/** Frozen carry-in sources preserve work already pending when the first policy was created. */
+export function readAdditionalBudgetUsage(store, kingdomId, sinceEventSeq, carriedSourceRefs = []) {
+    const carried = new Set(carriedSourceRefs);
+    const records = [...roleRecords(store, kingdomId).values()].filter(record => record.seq > sinceEventSeq || carried.has(record.value.sourceUnitRef));
+    let verifiedTokens = 0, unknownUnits = 0, pendingUnits = 0, attributionGapCount = 0;
+    for (const { value } of records) {
+        if (value.status === 'IN_PROGRESS')
+            pendingUnits++;
+        else if (value.status !== 'COMPLETE' || !value.usage || !validProviderCounts(value.usage))
+            unknownUnits++;
+        else if (count(verifiedTokens + value.usage.totalTokens))
+            verifiedTokens += value.usage.totalTokens;
+        else
+            unknownUnits++;
+        if (value.attribution !== 'TASK')
+            attributionGapCount++;
+    }
+    return { verifiedTokens, unknownUnits: unknownUnits + coverageGaps(store, kingdomId, sinceEventSeq, carriedSourceRefs), pendingUnits, attributionGapCount };
+}
+export function recordPromptCost(store, kingdomId, input) {
+    const binding = store.getBindingById(input.bindingId);
+    const parts = [...input.sections, ...input.contexts];
+    if (!binding || binding.kingdom_id !== kingdomId || !ref(input.sourceUnitRef) || parts.length > 256
+        || parts.some(part => !ref(part.name) || !count(part.bytes))
+        || ![input.toolsBefore, input.toolsAfter, input.toolsBytesBefore, input.toolsBytesAfter].every(count))
+        return;
+    const value = { ...input,
+        sections: input.sections.map((part, index) => ({ name: safePromptPartName(part.name, index, 'section'), bytes: part.bytes })),
+        contexts: input.contexts.map((part, index) => ({ name: safePromptPartName(part.name, index, 'context'), bytes: part.bytes })) };
+    store.appendEvent({ event_id: randomUUID(), kingdom_id: kingdomId, event_type: 'RUNTIME_PROMPT_COST_OBSERVED', actor_role: 'SYSTEM',
+        actor_id: 'kingdom-cost-observer', target_type: 'runtime-prompt', target_id: input.sourceUnitRef,
+        payload_json: JSON.stringify(value), created_at: new Date().toISOString() });
+}
+export function readLatestPromptCosts(store, kingdomId) {
+    const latest = new Map();
+    for (const event of store.listRuntimeCostEvents(kingdomId)) {
+        if (event.event_type !== 'RUNTIME_PROMPT_COST_OBSERVED')
+            continue;
+        try {
+            const value = JSON.parse(event.payload_json);
+            if (value.type === 'KingdomPromptCost/v1')
+                latest.set(value.bindingId, value);
+        }
+        catch { /* Omit corrupt observations rather than inventing measurements. */ }
+    }
+    return [...latest.values()];
+}
+//# sourceMappingURL=cost.js.map

package/lib/core/cost.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cost.js","sourceRoot":"","sources":["../../src/core/cost.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAwDxC,MAAM,KAAK,GAAG,CAAC,KAAc,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAA;AACzH,MAAM,GAAG,GAAG,CAAC,KAAc,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG,CAAA;AAErH,MAAM,UAAU,mBAAmB,CAAC,KAA0B;IAC5D,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC;QAAE,OAAO,KAAK,CAAA;IACxH,KAAK,MAAM,GAAG,IAAI,CAAC,iBAAiB,EAAE,kBAAkB,EAAE,iBAAiB,CAAU;QAAE,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAAE,OAAO,KAAK,CAAA;IACvJ,MAAM,MAAM,GAAG,KAAK,CAAC,mBAAmB,GAAG,CAAC,KAAK,CAAC,eAAe,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,gBAAgB,IAAI,CAAC,CAAC,CAAA;IACvG,OAAO,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,WAAW,IAAI,MAAM,GAAG,KAAK,CAAC,YAAY;WACnE,CAAC,KAAK,CAAC,eAAe,KAAK,SAAS,IAAI,KAAK,CAAC,eAAe,IAAI,KAAK,CAAC,YAAY,CAAC;WACpF,CAAC,KAAK,CAAC,eAAe,KAAK,SAAS,IAAI,KAAK,CAAC,gBAAgB,KAAK,SAAS,IAAI,KAAK,CAAC,WAAW,KAAK,MAAM,GAAG,KAAK,CAAC,YAAY,CAAC;WAClI,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,IAAI,GAAG,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;AACxK,CAAC;AAED,SAAS,WAAW,CAAC,KAAmB,EAAE,SAAiB;IACzD,MAAM,MAAM,GAAG,IAAI,GAAG,EAA0E,CAAA;IAChG,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,qBAAqB,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3D,IAAI,KAAK,CAAC,UAAU,KAAK,6BAA6B;YAAE,SAAQ;QAChE,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,CAAyB,CAAA;YACpE,IAAI,KAAK,CAAC,IAAI,KAAK,qBAAqB,IAAI,KAAK,CAAC,aAAa,KAAK,KAAK,CAAC,SAAS;gBAAE,SAAQ;YAC7F,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAA;YAChD,IAAI,QAAQ,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,mBAAmB,GAAG,KAAK,CAAC,mBAAmB,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,KAAK,UAAU,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU,CAAC;gBAAE,SAAQ;YACjK,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,IAAI,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAA;QACvG,CAAC;QAAC,MAAM,CAAC,CAAC,0DAA0D,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,SAAS,YAAY,CAAC,KAAmB,EAAE,SAAiB,EAAE,QAAQ,GAAG,CAAC,EAAE,oBAAuC,EAAE;IACnH,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAA;IAC/B,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,iBAAiB,CAAC,CAAA;IAC1C,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,qBAAqB,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3D,IAAI,KAAK,CAAC,UAAU,KAAK,6BAA6B;YAAE,SAAQ;QAChE,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,CAAqB,CAAA;YAChE,IAAI,KAAK,CAAC,IAAI,KAAK,4BAA4B,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;gBAAE,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAA;QAC/I,CAAC;QAAC,MAAM,CAAC;YAAC,IAAI,KAAK,CAAC,GAAG,GAAG,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,QAAQ,CAAC;gBAAE,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAA;QAAC,CAAC;IACtI,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAA;AACnB,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAAmB,EAAE,SAAiB,EAAE,aAAqB,EAAE,UAAqC;IACzI,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,iBAAiB,EAAE,EAAE,UAAU,KAAK,SAAS;QAAE,OAAM;IACtF,MAAM,QAAQ,GAAG,KAAK,CAAC,8BAA8B,CAAC,SAAS,EAAE,aAAa,CAAC,CAAA;IAC/E,IAAI,QAAQ;QAAE,OAAM;IACpB,MAAM,KAAK,GAAqB,EAAE,IAAI,EAAE,4BAA4B,EAAE,aAAa,EAAE,UAAU,EAAE,CAAA;IACjG,KAAK,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,6BAA6B,EAAE,UAAU,EAAE,QAAQ;QAChI,QAAQ,EAAE,uBAAuB,EAAE,WAAW,EAAE,eAAe,EAAE,SAAS,EAAE,aAAa,EAAE,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAA;AAC3K,CAAC;AAED,sGAAsG;AACtG,MAAM,UAAU,kBAAkB,CAAC,KAAa,EAAE,KAAa,EAAE,IAA2B;IAC1F,MAAM,KAAK,GAA2B,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,gBAAgB;QAChH,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,eAAe,EAAE,SAAS,EAAE,iBAAiB,EAAE,WAAW,EAAE,oBAAoB;QACpH,SAAS,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,CAAA;IACxE,OAAO,KAAK,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,IAAI,KAAK,GAAG,CAAC,EAAE,CAAA;AAC/C,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAmB,EAAE,SAAiB,EAAE,KAA2B;IACjG,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,CAAA;IACpC,MAAM,OAAO,GAAG,KAAK,CAAC,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;IACrD,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,IAAI,CAAC,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC;WACxG,OAAO,CAAC,SAAS,KAAK,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,IAAI,KAAK,qBAAqB,IAAI,KAAK,CAAC,MAAM,KAAK,mBAAmB;WACpH,CAAC,CAAC,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,kBAAkB,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC;WAC7E,CAAC,KAAK,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;WACpH,CAAC,KAAK,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,KAAK,CAAC,gBAAgB,GAAG,KAAK,CAAC,gBAAgB;WACnH,CAAC,CAAC,aAAa,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;WAClE,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC;WAC/D,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,EAAE,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,CAAC,MAAM;WAClH,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,GAAG,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,IAAI,KAAK,CAAC,gBAAgB,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,UAAU,KAAK,SAAS,CAAA,CAAC,CAAC,CAAC;WACjJ,CAAC,KAAK,CAAC,WAAW,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,KAAK,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;WAC1J,CAAC,KAAK,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,gBAAgB,KAAK,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC;QAAE,OAAO,KAAK,CAAA;IAChL,OAAO,KAAK,CAAC,wBAAwB,CAAC,GAAG,EAAE;QACzC,MAAM,KAAK,GAAG,KAAK,CAAC,8BAA8B,CAAC,SAAS,EAAE,KAAK,CAAC,aAAa,CAAC,CAAA;QAClF,IAAI,QAA0C,CAAA;QAC9C,IAAI,CAAC;YAAC,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,CAAyB,CAAC,CAAC,CAAC,SAAS,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,KAAK,CAAA;QAAC,CAAC;QACpH,IAAI,QAAQ,IAAI,QAAQ,CAAC,IAAI,KAAK,qBAAqB;YAAE,OAAO,KAAK,CAAA;QACrE,IAAI,QAAQ,IAAI,CAAC,QAAQ,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,IAAI,QAAQ,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU;eAC9F,QAAQ,CAAC,kBAAkB,KAAK,KAAK,CAAC,kBAAkB,IAAI,QAAQ,CAAC,gBAAgB,KAAK,KAAK,CAAC,gBAAgB;eAChH,QAAQ,CAAC,mBAAmB,GAAG,KAAK,CAAC,mBAAmB,IAAI,QAAQ,CAAC,MAAM,KAAK,UAAU,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU,CAAC;YAAE,OAAO,KAAK,CAAA;QAC7I,IAAI,QAAQ,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAA;QAC/E,yEAAyE;QACzE,mEAAmE;QACnE,IAAI,QAAQ,EAAE,MAAM,KAAK,UAAU;YAAE,OAAO,KAAK,CAAA;QACjD,KAAK,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,6BAA6B;YAC1G,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,uBAAuB,EAAE,WAAW,EAAE,eAAe,EAAE,SAAS,EAAE,KAAK,CAAC,aAAa;YACrH,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAA;QAC9E,OAAO,IAAI,CAAA;IACb,CAAC,CAAC,CAAA;AACJ,CAAC;AAoBD,gFAAgF;AAChF,MAAM,UAAU,gCAAgC,CAAC,KAAmB,EAAE,SAAiB,EAAE,kBAA0B;IACjH,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,KAAK,MAAM,EAAE,KAAK,EAAE,IAAI,WAAW,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;QAC/D,IAAI,KAAK,CAAC,kBAAkB,KAAK,kBAAkB,IAAI,KAAK,CAAC,MAAM,KAAK,aAAa;YAAE,SAAQ;QAC/F,IAAI,eAAe,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,oBAAoB,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;YAAE,MAAM,EAAE,CAAA;IACrI,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAAmB,EAAE,SAAiB,EAAE,MAAe;IAC5F,MAAM,GAAG,GAAG,CAAC,GAAG,WAAW,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IACnF,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,KAAK,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAA;IAC9G,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,UAAU,IAAI,KAAK,CAAC,KAAK,IAAI,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAA;IACvH,MAAM,GAAG,GAAG,CAAC,KAA6B,EAAE,EAAE;QAC5C,IAAI,CAAC,KAAK,CAAC,MAAM;YAAE,OAAO,IAAI,CAAA;QAC9B,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,GAAG,IAAI,CAAC,KAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAA;QAC/E,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAA;IACpC,CAAC,CAAA;IACD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU,IAAI,KAAK,CAAC,KAAK,CAAC,CAAA;IAChH,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,KAAK,cAAc,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU,IAAI,KAAK,CAAC,KAAK,CAAC,CAAA;IAC1H,OAAO,EAAE,KAAK,EAAE,2BAA2B,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,EAAE,QAAQ,CAAC,MAAM;QAC/F,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,aAAa,CAAC,CAAC,MAAM;QAC3E,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,aAAa,CAAC,CAAC,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,SAAS,CAAC;QAC5G,mBAAmB,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,KAAK,MAAM,CAAC,CAAC,MAAM;QAC7E,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,GAAG,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAC;QAChF,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,GAAG,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAC,EAAE,cAAc,EAAE,GAAG,CAAC,QAAQ,CAAC;QAC/G,MAAM,EAAE,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,EAAE,QAAQ;YAC9D,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,MAAM;YACjE,aAAa,EAAE,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,MAAM;YAC3E,cAAc,EAAE,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC;QAChF,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,kBAAkB,EAAE,GAAG,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,sBAAsB;QAClH,YAAY,EAAE,yDAAyD,EAAE,CAAA;AAC7E,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,iCAAiC,CAAC,KAAmB,EAAE,SAAiB;IACtF,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,WAAW,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,UAAU,CAAC;SAClH,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAA;IAC7C,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,qBAAqB,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3D,IAAI,KAAK,CAAC,UAAU,KAAK,6BAA6B;YAAE,SAAQ;QAChE,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,CAAqB,CAAA;YAChE,IAAI,KAAK,CAAC,IAAI,KAAK,4BAA4B,IAAI,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC;gBAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAA;QAC5G,CAAC;QAAC,MAAM,CAAC;YAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAA;QAAC,CAAC;IACzD,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,CAAC,CAAA;AAClB,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,yBAAyB,CAAC,KAAmB,EAAE,SAAiB,EAAE,aAAqB,EAAE,oBAAuC,EAAE;IAGhJ,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,iBAAiB,CAAC,CAAA;IAC1C,MAAM,OAAO,GAAG,CAAC,GAAG,WAAW,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,GAAG,aAAa,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAA;IACnJ,IAAI,cAAc,GAAG,CAAC,EAAE,YAAY,GAAG,CAAC,EAAE,YAAY,GAAG,CAAC,EAAE,mBAAmB,GAAG,CAAC,CAAA;IACnF,KAAK,MAAM,EAAE,KAAK,EAAE,IAAI,OAAO,EAAE,CAAC;QAChC,IAAI,KAAK,CAAC,MAAM,KAAK,aAAa;YAAE,YAAY,EAAE,CAAA;aAC7C,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC;YAAE,YAAY,EAAE,CAAA;aACpG,IAAI,KAAK,CAAC,cAAc,GAAG,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC;YAAE,cAAc,IAAI,KAAK,CAAC,KAAK,CAAC,WAAW,CAAA;;YAC9F,YAAY,EAAE,CAAA;QACnB,IAAI,KAAK,CAAC,WAAW,KAAK,MAAM;YAAE,mBAAmB,EAAE,CAAA;IACzD,CAAC;IACD,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,YAAY,GAAG,YAAY,CAAC,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,iBAAiB,CAAC,EAAE,YAAY,EAAE,mBAAmB,EAAE,CAAA;AAC7J,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAmB,EAAE,SAAiB,EAAE,KAA4B;IACnG,MAAM,OAAO,GAAG,KAAK,CAAC,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;IACrD,MAAM,KAAK,GAAG,CAAC,GAAG,KAAK,CAAC,QAAQ,EAAE,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAA;IACpD,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG;WAC9F,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;WACzD,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,gBAAgB,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC;QAAE,OAAM;IAC/G,MAAM,KAAK,GAA0B,EAAE,GAAG,KAAK;QAC7C,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,kBAAkB,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QAC7H,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,kBAAkB,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,CAAA;IACjI,KAAK,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,8BAA8B,EAAE,UAAU,EAAE,QAAQ;QACjI,QAAQ,EAAE,uBAAuB,EAAE,WAAW,EAAE,gBAAgB,EAAE,SAAS,EAAE,KAAK,CAAC,aAAa;QAChG,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAA;AAChF,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAmB,EAAE,SAAiB;IAC1E,MAAM,MAAM,GAAG,IAAI,GAAG,EAAiC,CAAA;IACvD,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,qBAAqB,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3D,IAAI,KAAK,CAAC,UAAU,KAAK,8BAA8B;YAAE,SAAQ;QACjE,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,CAA0B,CAAA;YACrE,IAAI,KAAK,CAAC,IAAI,KAAK,sBAAsB;gBAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;QAC/E,CAAC;QAAC,MAAM,CAAC,CAAC,mEAAmE,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAA;AAC7B,CAAC"}

package/lib/core/db.js

@@ -372,7 +372,7 @@ export class KingdomStore {
     }
     // ── v0.8（M3-S2 Schema v4 Design v6，Owner 三次 Review APPROVED）─────────
     //
-    // 忠实实现 v6（D:\dsh\kingdom\docs\M3-S2-SCHEMA-V4-DESIGN-v6.md + 49/49 验证脚本）：
+    // 忠实实现 v6（M3-S2 Schema v4 Design v6 + 当时的 49/49 验证脚本）：
     // - 四套独立 Core Ledger：session_territory_affinities / execution_leases /
     //   capability_decisions / dispatch_records；
     // - executions 重建（v6 §14）：建 executions_v4 暂存表（v2 证据列 + 新增
@@ -945,6 +945,23 @@ BEGIN SELECT RAISE(ABORT, 'DISPATCH_NO_DELETE'); END;
     updateTerritorySupervisor(territoryId, supervisorBindingId) {
         this.db.prepare('UPDATE territories SET supervisor_binding_id = ? WHERE territory_id = ?').run(supervisorBindingId, territoryId);
     }
+    updateTerritoryMetadata(territoryId, name, summary) {
+        this.db.prepare('UPDATE territories SET name = ?, summary = ? WHERE territory_id = ?').run(name, summary, territoryId);
+    }
+    getEventById(eventId) {
+        return this.db.prepare('SELECT * FROM events WHERE event_id = ?').get(eventId) ?? null;
+    }
+    /** Global append cursor; callers predicting a receipt sequence must hold the write transaction. */
+    eventSequence() {
+        const row = this.db.prepare('SELECT COALESCE(MAX(seq), 0) AS n FROM events').get();
+        return row.n;
+    }
+    /** Owner topology guards include RECOVERING and unknown future nonterminal states. */
+    listUnsettledOwnerExecutions(kingdomId) {
+        return this.db.prepare(`SELECT e.* FROM executions e JOIN tasks t ON t.task_id = e.task_id
+      JOIN territories te ON te.territory_id = t.territory_id WHERE te.kingdom_id = ?
+      AND e.state NOT IN ('COMPLETED', 'FAILED', 'ABORTED') ORDER BY e.started_at`).all(kingdomId);
+    }
     // ── task_assignments（v0.7.0 M2-B Assignment Ledger）──────────
     insertTaskAssignment(row) {
         this.db
@@ -1083,6 +1100,57 @@ BEGIN SELECT RAISE(ABORT, 'DISPATCH_NO_DELETE'); END;
             .prepare('SELECT * FROM events WHERE kingdom_id = ? AND seq > ? ORDER BY seq ASC LIMIT ?')
             .all(kingdomId, afterSeq, limit);
     }
+    /**
+     * Exact Dispatch lookup for one Task attempt.
+     *
+     * Integrity decisions must not scan a bounded event projection: the
+     * dispatch/task/attempt relation is authoritative in dispatch_records.
+     */
+    listDispatchesForTaskAttempt(taskId, attemptNo) {
+        return this.db
+            .prepare(`SELECT * FROM dispatch_records
+           WHERE task_id = ? AND attempt_no = ?
+           ORDER BY created_at ASC`)
+            .all(taskId, attemptNo);
+    }
+    /**
+     * Exact, replay-safe lookup for an open terminal integrity incident.
+     * The SQL predicate narrows by the exact Dispatch target; the bounded JSON
+     * payload is then checked against the exact Task/attempt correlation.
+     */
+    getOpenDispatchTerminalIntegrityIncident(kingdomId, dispatchId, taskId, attemptNo) {
+        // The Dispatch row is authoritative for the Task/attempt relation.  Do
+        // not accept an event merely because its target_id happens to match a
+        // caller-supplied string.
+        const dispatch = this.getDispatch(dispatchId);
+        if (!dispatch
+            || dispatch.kingdom_id !== kingdomId
+            || dispatch.task_id !== taskId
+            || dispatch.attempt_no !== attemptNo)
+            return null;
+        const rows = this.db
+            .prepare(`SELECT * FROM events
+           WHERE kingdom_id = ?
+             AND event_type = 'DISPATCH_TERMINAL_INTEGRITY_INCIDENT'
+             AND target_type = 'dispatch'
+             AND target_id = ?
+           ORDER BY seq ASC`)
+            .all(kingdomId, dispatchId);
+        for (const row of rows) {
+            try {
+                const payload = JSON.parse(row.payload_json);
+                if (payload.incident_code === 'DISPATCH_TERMINAL_INTEGRITY_INCIDENT'
+                    && payload.state === 'OPEN'
+                    && payload.attempt_no === attemptNo) {
+                    return row;
+                }
+            }
+            catch {
+                // A malformed incident payload is not trusted as a matching incident.
+            }
+        }
+        return null;
+    }
     /**
      * 王国当前 revision = 最大事件序号。
      *
@@ -1095,6 +1163,73 @@ BEGIN SELECT RAISE(ABORT, 'DISPATCH_NO_DELETE'); END;
             .get(kingdomId);
         return row?.n ?? 0;
     }
+    /** Observations and future admission/window policy cannot change an in-flight Runner relation. */
+    runnerContextRevision(kingdomId, scope) {
+        const rows = this.db.prepare(`SELECT * FROM events
+      WHERE kingdom_id = ? AND event_type NOT IN (
+        'RUNTIME_ROLE_USAGE_OBSERVED', 'RUNTIME_PROMPT_COST_OBSERVED', 'DISPATCH_USAGE_OBSERVED',
+        'BUDGET_POLICY_UPDATED', 'BUDGET_ADMISSION_RESERVED', 'BUDGET_ADMISSION_BOUND', 'BUDGET_ADMISSION_CANCELLED',
+        'OWNER_DECISION_CREATED', 'OWNER_DECISION_REVOKED', 'OWNER_DECISION_CONSUMED'
+      ) AND NOT (event_type = 'OWNER_OPERATION_APPLIED' AND COALESCE(
+        CASE WHEN json_valid(payload_json) THEN json_extract(payload_json, '$.action') = 'budget.policy' ELSE 0 END, 0
+      )) ORDER BY seq DESC`).all(kingdomId);
+        if (!scope)
+            return rows[0]?.seq ?? 0;
+        // Only a known event with a provably independent live Core relation can be
+        // ignored. Missing/corrupt targets and future event kinds remain invalidating.
+        const independentTask = (taskId, worker, session) => {
+            if (!taskId || taskId === scope.taskId || worker === scope.workerBindingId || session === scope.sessionRef)
+                return false;
+            const task = this.getTask(taskId), territory = task ? this.getTerritoryById(task.territory_id) : null;
+            if (!task || territory?.kingdom_id !== kingdomId || task.assigned_binding_id === scope.workerBindingId)
+                return false;
+            return !this.listExecutions(taskId).some(row => row.worker_binding_id === scope.workerBindingId || row.session_id === scope.sessionRef)
+                && !this.listTaskAssignments(taskId).some(row => row.worker_binding_id === scope.workerBindingId);
+        };
+        for (const event of rows) {
+            let independent = false;
+            const id = event.target_id;
+            if (id) {
+                if (event.target_type === 'task' && ['TASK_PLANNED', 'TASK_ASSIGNED', 'TASK_ACCEPTED', 'TASK_REWORK_REQUESTED', 'TASK_FAILED',
+                    'TASK_HANDED_OFF', 'WORKER_RESULT_SUBMITTED', 'WORKER_EXECUTION_STARTED', 'WORKER_EXECUTION_FAILED', 'COLLABORATION_CHILD_CREATED'].includes(event.event_type)) {
+                    independent = independentTask(id);
+                }
+                else if (event.target_type === 'execution' && ['EXECUTION_GOVERNED_CREATED', 'EXECUTION_RECOVERING', 'SESSION_STARTED',
+                    'SESSION_STOPPED', 'SESSION_FAILED', 'SESSION_PAUSED', 'SESSION_RESUMED'].includes(event.event_type)) {
+                    const row = this.getExecution(id);
+                    independent = !!row && independentTask(row.task_id, row.worker_binding_id, row.session_id);
+                }
+                else if (event.target_type === 'lease' && ['LEASE_ACQUIRED', 'LEASE_STATE_CHANGED', 'LEASE_RELEASED'].includes(event.event_type)) {
+                    const row = this.getLease(id);
+                    independent = row?.kingdom_id === kingdomId && independentTask(row.task_id, row.worker_binding_id, row.session_ref);
+                }
+                else if (event.target_type === 'dispatch' && ['DISPATCH_INTENDED', 'DISPATCH_STATE_CHANGED'].includes(event.event_type)) {
+                    const row = this.getDispatch(id), lease = row ? this.getLease(row.lease_id) : null;
+                    independent = row?.kingdom_id === kingdomId && !!lease && lease.task_id === row.task_id
+                        && independentTask(row.task_id, lease.worker_binding_id, row.session_ref);
+                }
+                else if (event.target_type === 'decision' && event.event_type === 'CAPABILITY_DECISION_RECORDED') {
+                    const row = this.getCapabilityDecision(id);
+                    independent = row?.kingdom_id === kingdomId && independentTask(row.task_id, row.worker_binding_id);
+                }
+                else if (event.target_type === 'affinity' && ['AFFINITY_ESTABLISHED', 'AFFINITY_RETIRED'].includes(event.event_type)) {
+                    const row = this.getAffinity(id);
+                    independent = row?.kingdom_id === kingdomId && row.worker_binding_id !== scope.workerBindingId && row.session_ref !== scope.sessionRef;
+                }
+                else if (event.target_type === 'workspace-admission' && ['WORKSPACE_ADMISSION_RESERVED', 'WORKSPACE_ADMISSION_BOUND', 'WORKSPACE_ADMISSION_CANCELLED'].includes(event.event_type)) {
+                    try {
+                        const row = JSON.parse(event.payload_json);
+                        independent = row.type === 'KingdomWorkspaceAdmission/v1' && row.admissionId === id
+                            && row.kingdomId === kingdomId && independentTask(row.taskId, row.workerBindingId);
+                    }
+                    catch { /* retain invalidation */ }
+                }
+            }
+            if (!independent)
+                return event.seq;
+        }
+        return 0;
+    }
     /**
      * v0.7.0（M2）：外层事务包装——HANDOFF 等**原子治理操作**（多步写 + 事件）整体提交/回滚。
      * appendEvent 的内层 BEGIN 在事务中会抛错，由 appendEvent 的嵌套容忍逻辑接管（见下）。
@@ -1178,12 +1313,21 @@ BEGIN SELECT RAISE(ABORT, 'DISPATCH_NO_DELETE'); END;
             .all(...params);
     }
     insertTask(row) {
+        const hasRequirementColumn = this.db
+            .prepare('PRAGMA table_info(tasks)')
+            .all()
+            .some(column => column.name === 'capability_requirement_json');
+        if (!hasRequirementColumn && row.capability_requirement_json != null) {
+            throw new Error('TASK_CAPABILITY_REQUIREMENT_UNAVAILABLE: Schema v4 未迁移，拒绝丢弃 Task requirement');
+        }
+        const columns = hasRequirementColumn ? ', capability_requirement_json' : '';
+        const values = hasRequirementColumn ? ', ?' : '';
         this.db
             .prepare(`INSERT INTO tasks
            (task_id, territory_id, parent_task_id, title, description, assigned_binding_id,
-            status, acceptance_criteria, result_summary, created_at, updated_at)
-         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`)
-            .run(row.task_id, row.territory_id, row.parent_task_id, row.title, row.description, row.assigned_binding_id, row.status, row.acceptance_criteria, row.result_summary, row.created_at, row.updated_at);
+             status, acceptance_criteria, result_summary, created_at, updated_at${columns})
+          VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?${values})`)
+            .run(row.task_id, row.territory_id, row.parent_task_id, row.title, row.description, row.assigned_binding_id, row.status, row.acceptance_criteria, row.result_summary, row.created_at, row.updated_at, ...(hasRequirementColumn ? [row.capability_requirement_json ?? null] : []));
         return row;
     }
     /**
@@ -1224,6 +1368,46 @@ BEGIN SELECT RAISE(ABORT, 'DISPATCH_NO_DELETE'); END;
             .all(taskId);
         return rows[0] ?? null;
     }
+    /** Exact task/attempt lookup; unrelated kingdom activity cannot hide the reviewed attempt. */
+    latestTaskReworkEvent(kingdomId, taskId, reviewedAttemptNo) {
+        const rows = this.db.prepare("SELECT * FROM events WHERE kingdom_id = ? AND event_type = 'TASK_REWORK_REQUESTED' AND target_type = 'task' AND target_id = ? ORDER BY seq DESC")
+            .all(kingdomId, taskId);
+        for (const row of rows) {
+            try {
+                if (JSON.parse(row.payload_json).reviewed_attempt_no === reviewedAttemptNo)
+                    return row;
+            }
+            catch { /* Malformed historical evidence cannot establish a review reference. */ }
+        }
+        return null;
+    }
+    listDispatchUsageEvents(dispatchId) {
+        return this.db.prepare("SELECT * FROM events WHERE event_type = 'DISPATCH_USAGE_OBSERVED' AND target_type = 'dispatch' AND target_id = ? ORDER BY seq")
+            .all(dispatchId);
+    }
+    /** Complete exact budget ledger; display event windows must never be used as accounting history. */
+    listBudgetEvents(kingdomId) {
+        return this.db.prepare(`SELECT * FROM events WHERE kingdom_id = ? AND event_type IN
+      ('BUDGET_POLICY_UPDATED', 'BUDGET_ADMISSION_RESERVED', 'BUDGET_ADMISSION_BOUND', 'BUDGET_ADMISSION_CANCELLED', 'DISPATCH_INTENDED')
+      ORDER BY seq ASC`).all(kingdomId);
+    }
+    listWorkspaceAdmissionEvents(kingdomId) {
+        return this.db.prepare(`SELECT * FROM events WHERE kingdom_id = ? AND event_type IN
+      ('WORKSPACE_ADMISSION_RESERVED', 'WORKSPACE_ADMISSION_BOUND', 'WORKSPACE_ADMISSION_CANCELLED')
+      ORDER BY seq ASC`).all(kingdomId);
+    }
+    listRuntimeCostEvents(kingdomId) {
+        return this.db.prepare(`SELECT * FROM events WHERE kingdom_id = ? AND event_type IN
+      ('RUNTIME_ROLE_USAGE_OBSERVED', 'RUNTIME_PROMPT_COST_OBSERVED') ORDER BY seq ASC`).all(kingdomId);
+    }
+    listActorEventsSince(kingdomId, actorId, afterSeq) {
+        return this.db.prepare('SELECT * FROM events WHERE kingdom_id = ? AND actor_id = ? AND seq > ? ORDER BY seq ASC')
+            .all(kingdomId, actorId, afterSeq);
+    }
+    getLatestRuntimeRoleUsageEvent(kingdomId, sourceUnitRef) {
+        return this.db.prepare("SELECT * FROM events WHERE kingdom_id = ? AND event_type = 'RUNTIME_ROLE_USAGE_OBSERVED' AND target_id = ? ORDER BY seq DESC LIMIT 1")
+            .get(kingdomId, sourceUnitRef) ?? null;
+    }
     /** 已落库的最大 attempt_no；无结果时为 0。下一次尝试 = 本值 + 1。 */
     maxAttemptNo(taskId) {
         const row = this.db
@@ -1546,12 +1730,21 @@ BEGIN SELECT RAISE(ABORT, 'DISPATCH_NO_DELETE'); END;
     }
     // tasks.capability_requirement_json / kingdoms.capability_ceiling_json（v6 增量）────
     getTaskCapabilityRequirement(taskId) {
+        if (!this.getTaskCapabilityRequirementColumn())
+            return null;
         const row = this.db.prepare('SELECT capability_requirement_json FROM tasks WHERE task_id = ?').get(taskId);
         return row?.capability_requirement_json ?? null;
     }
     setTaskCapabilityRequirement(taskId, json) {
+        if (!this.getTaskCapabilityRequirementColumn()) {
+            throw new Error('TASK_CAPABILITY_REQUIREMENT_UNAVAILABLE: Schema v4 未迁移');
+        }
         this.db.prepare('UPDATE tasks SET capability_requirement_json = ? WHERE task_id = ?').run(json, taskId);
     }
+    getTaskCapabilityRequirementColumn() {
+        return this.db.prepare('PRAGMA table_info(tasks)').all()
+            .some(column => column.name === 'capability_requirement_json');
+    }
     getKingdomCapabilityCeiling(kingdomId) {
         const row = this.db.prepare('SELECT capability_ceiling_json FROM kingdoms WHERE kingdom_id = ?').get(kingdomId);
         return row?.capability_ceiling_json ?? null;