footprintjs 10.0.1 → 10.2.0

package/dist/esm/lib/attempt/deadline.js

@@ -0,0 +1,101 @@
+/**
+ * attempt/deadline.ts — what the run's deadline IS, to everything that reads time (design §3.1, law 3).
+ *
+ * The deadline is one number, epoch milliseconds (`env.deadline`); the executor arms the run's signal to abort when
+ * it passes (`runner/deadline.ts · armRun`). Reaching it is NOT a cancellation: an attempt the deadline cuts short
+ * timed out (it had no answer in the time it had — law 4), and the series stops `no-time-left`, not `aborted`. So
+ * the reason the run's signal aborts with at the deadline is BRANDED here, and the attempt runner tells the two
+ * apart by the brand — never by the message, never by the clock.
+ *
+ * The brand is a module-private WeakSet: an ordinary `Error` (same message, same name a run with `timeoutMs` always
+ * rejected with), recognisable only by identity.
+ */
+import { anySignal } from './anySignal.js';
+const DEADLINE_REASONS = new WeakSet();
+/** The reason the run's signal aborts with when its deadline passes — an `Error`, branded as the deadline's. */
+export function deadlineReason(message) {
+    const reason = new Error(message);
+    DEADLINE_REASONS.add(reason);
+    return reason;
+}
+/**
+ * Brand `reason` as a time limit — what an attempt's own cap aborts with (P2). An attempt's cap is the deadline of
+ * every call made inside it (`attempt/call.ts`), so a call it cuts ran out of time: `'timeout'`, never `'aborted'`.
+ * The run's own signal never aborts with it, so a stage attempt reads nothing new.
+ */
+export function markTimeLimit(reason) {
+    DEADLINE_REASONS.add(reason);
+    return reason;
+}
+/** Whether `reason` is the run's deadline or an attempt's cap — a time limit, not a cancellation. */
+export function isDeadlineReason(reason) {
+    return typeof reason === 'object' && reason !== null && DEADLINE_REASONS.has(reason);
+}
+/** Whether the signal aborted for a reason OTHER than a time limit — a cancellation. */
+export function isCancelled(signal) {
+    return signal?.aborted === true && !isDeadlineReason(signal.reason);
+}
+/** A deadline as the engine reads one: a finite number (epoch ms), else none. */
+export function readDeadline(value) {
+    return typeof value === 'number' && Number.isFinite(value) ? value : undefined;
+}
+/** The longest delay a host timer honours (2^31 − 1 ms, ~24.8 days); a longer one fires at once. */
+const MAX_TIMER_MS = 2_147_483_647;
+/**
+ * `setTimeout` for any delay: a delay past the host's limit is waited in chunks, so a 30-day deadline does not fire
+ * in a millisecond. Returns the one call that cancels it.
+ */
+export function setLongTimeout(fn, ms) {
+    let timer;
+    let cancelled = false;
+    const arm = (left) => {
+        timer = setTimeout(() => {
+            if (cancelled)
+                return;
+            if (left > MAX_TIMER_MS)
+                arm(left - MAX_TIMER_MS);
+            else
+                fn();
+        }, Math.min(left, MAX_TIMER_MS));
+    };
+    arm(Math.max(0, ms));
+    return () => {
+        cancelled = true;
+        if (timer !== undefined)
+            clearTimeout(timer);
+    };
+}
+/** Whether `value` is an AbortSignal (structurally — a signal from another realm counts). */
+export function isAbortSignal(value) {
+    return (typeof value === 'object' &&
+        value !== null &&
+        typeof value.aborted === 'boolean' &&
+        typeof value.addEventListener === 'function' &&
+        typeof value.removeEventListener === 'function');
+}
+/**
+ * Compose `signal` with a timer that aborts at `deadline` (epoch ms) with a branded {@link deadlineReason} — so the
+ * attempt runner's reading holds: the signal it is handed aborts at the deadline, as the run's does (`armRun`). A
+ * deadline already past aborts at once; without a deadline the signal is handed back as it is.
+ */
+export function armDeadline(signal, deadline, message, now = Date.now) {
+    if (deadline === undefined)
+        return { signal, dispose: () => undefined };
+    const timer = new AbortController();
+    const composed = anySignal([signal, timer.signal]);
+    const reason = deadlineReason(message);
+    const left = deadline - now();
+    let cancel = () => undefined;
+    if (left <= 0)
+        timer.abort(reason);
+    else
+        cancel = setLongTimeout(() => timer.abort(reason), left);
+    return {
+        signal: composed.signal,
+        dispose: () => {
+            cancel();
+            composed.dispose();
+        },
+    };
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist/esm/lib/attempt/decision.d.ts

@@ -0,0 +1,52 @@
+/**
+ * attempt/decision.ts — the ONE retry rule table and the runner's evidence builder (design §3.1, §3.8, law 9).
+ *
+ * `retryRules(policy)` is the retry-or-stop decision as ordinary `decide()` rules over `AttemptInputs`, first
+ * match wins, default `retry` ("retryable"):
+ *
+ *   1  outcome = ok                    → done  succeeded
+ *   2  outcome = paused                → stop  paused
+ *   3  aborted = true                  → stop  aborted        (the run's signal — the attempt's outcome stays its own)
+ *   4  attempt ≥ of                    → stop  exhausted
+ *   5  retryOn = false                 → stop  declined       (a function rule: it shows the verdict it saw)
+ *   6  timeLeftAfterWaitMs ≤ 0         → stop  no-time-left
+ *      default                         → retry retryable
+ *
+ * Each rule's `label` IS the reason it names, so `reason` is a projection of the evidence, never a second
+ * vocabulary. The ceiling is `attempt/policy.ts · attemptCeiling`, the one reading the engine and the runner
+ * share.
+ *
+ * `decideAttempt` evaluates that table WITHOUT a scope (the runner has none — `decide()` needs a registered
+ * one) and builds the evidence `decide()` would build: the filter rows come from `decide()`'s own evaluator
+ * (`filter/evaluator.ts · evaluateFilter`), the function rows and the first-match loop mirror
+ * `decide/decide.ts` field for field and key for key. A property test pins that both paths give equal evidence
+ * for equal inputs (test/lib/attempt/property).
+ *
+ * Inputs are READ, one key at a time, only when a rule reaches them — so the user's `retryOn` and `backoffMs`
+ * run exactly when a retry needs them, as they did before the record existed.
+ */
+import type { DecideRule, DecisionEvidence } from '../decide/types.js';
+import type { AttemptInputs, AttemptNext, AttemptReason, RetryPolicy } from './types.js';
+/** The table's default: no rule stopped the series, so it retries. */
+export declare const RETRY_DEFAULT: Readonly<{
+    readonly branch: "retry";
+    readonly label: "retryable";
+}>;
+/**
+ * The retry rule table for `policy` — six `decide()` rules, then {@link RETRY_DEFAULT}. The ceiling is the
+ * whole number of attempts the policy allows, never fewer than one (`attemptCeiling`): a ceiling of `NaN` or
+ * `Infinity` cannot make rule 4 unreachable.
+ */
+export declare function retryRules(policy: Pick<RetryPolicy, 'attempts'>): DecideRule<AttemptInputs>[];
+/** A decision: the evidence, and its compact projection. */
+export interface AttemptDecision {
+    readonly evidence: DecisionEvidence;
+    readonly next: AttemptNext;
+    readonly reason: AttemptReason;
+}
+/**
+ * Evaluate `rules` (a `retryRules` table) over `read` — first match wins — and build the evidence `decide()`
+ * would record with the default {@link RETRY_DEFAULT}. `read(key)` returns one input; it is called only for the
+ * keys the evaluated rules touch, in rule order.
+ */
+export declare function decideAttempt(rules: readonly DecideRule<AttemptInputs>[], read: (key: string) => unknown): AttemptDecision;

package/dist/esm/lib/attempt/decision.js

@@ -0,0 +1,134 @@
+/**
+ * attempt/decision.ts — the ONE retry rule table and the runner's evidence builder (design §3.1, §3.8, law 9).
+ *
+ * `retryRules(policy)` is the retry-or-stop decision as ordinary `decide()` rules over `AttemptInputs`, first
+ * match wins, default `retry` ("retryable"):
+ *
+ *   1  outcome = ok                    → done  succeeded
+ *   2  outcome = paused                → stop  paused
+ *   3  aborted = true                  → stop  aborted        (the run's signal — the attempt's outcome stays its own)
+ *   4  attempt ≥ of                    → stop  exhausted
+ *   5  retryOn = false                 → stop  declined       (a function rule: it shows the verdict it saw)
+ *   6  timeLeftAfterWaitMs ≤ 0         → stop  no-time-left
+ *      default                         → retry retryable
+ *
+ * Each rule's `label` IS the reason it names, so `reason` is a projection of the evidence, never a second
+ * vocabulary. The ceiling is `attempt/policy.ts · attemptCeiling`, the one reading the engine and the runner
+ * share.
+ *
+ * `decideAttempt` evaluates that table WITHOUT a scope (the runner has none — `decide()` needs a registered
+ * one) and builds the evidence `decide()` would build: the filter rows come from `decide()`'s own evaluator
+ * (`filter/evaluator.ts · evaluateFilter`), the function rows and the first-match loop mirror
+ * `decide/decide.ts` field for field and key for key. A property test pins that both paths give equal evidence
+ * for equal inputs (test/lib/attempt/property).
+ *
+ * Inputs are READ, one key at a time, only when a rule reaches them — so the user's `retryOn` and `backoffMs`
+ * run exactly when a retry needs them, as they did before the record existed.
+ */
+import { summarizeValue } from '../capture/summarize.js';
+import { evaluateFilter } from '../filter/evaluator.js';
+import { attemptCeiling } from './policy.js';
+/** The table's default: no rule stopped the series, so it retries. */
+export const RETRY_DEFAULT = Object.freeze({ branch: 'retry', label: 'retryable' });
+/** `decide()`'s summary length for an evidence value (filter/evaluator.ts, decide/evidence.ts). */
+const MAX_VALUE_LEN = 80;
+/**
+ * The retry rule table for `policy` — six `decide()` rules, then {@link RETRY_DEFAULT}. The ceiling is the
+ * whole number of attempts the policy allows, never fewer than one (`attemptCeiling`): a ceiling of `NaN` or
+ * `Infinity` cannot make rule 4 unreachable.
+ */
+export function retryRules(policy) {
+    return [
+        { when: { outcome: { eq: 'ok' } }, then: 'done', label: 'succeeded' },
+        { when: { outcome: { eq: 'paused' } }, then: 'stop', label: 'paused' },
+        { when: { aborted: { eq: true } }, then: 'stop', label: 'aborted' },
+        { when: { attempt: { gte: attemptCeiling(policy.attempts) } }, then: 'stop', label: 'exhausted' },
+        { when: (inputs) => inputs.retryOn === false, then: 'stop', label: 'declined' },
+        { when: { timeLeftAfterWaitMs: { lte: 0 } }, then: 'stop', label: 'no-time-left' },
+    ];
+}
+/**
+ * Evaluate `rules` (a `retryRules` table) over `read` — first match wins — and build the evidence `decide()`
+ * would record with the default {@link RETRY_DEFAULT}. `read(key)` returns one input; it is called only for the
+ * keys the evaluated rules touch, in rule order.
+ */
+export function decideAttempt(rules, read) {
+    const evaluated = [];
+    for (const [index, rule] of rules.entries()) {
+        const evidence = evaluateRule(rule, index, read);
+        evaluated.push(evidence);
+        if (evidence.matched)
+            return decided(evaluated, rule.then, rule.label);
+    }
+    return decided(evaluated, RETRY_DEFAULT.branch, RETRY_DEFAULT.label);
+}
+function decided(rules, chosen, label) {
+    // decide()'s key order: rules, chosen, default, defaultLabel.
+    const evidence = {
+        rules,
+        chosen,
+        default: RETRY_DEFAULT.branch,
+        defaultLabel: RETRY_DEFAULT.label,
+    };
+    return { evidence, next: chosen, reason: label };
+}
+/** One rule, as `decide/decide.ts · evaluateRule` evaluates it — minus the scope. */
+function evaluateRule(rule, index, read) {
+    if (typeof rule.when === 'function') {
+        const inputs = [];
+        let matched;
+        let matchError;
+        try {
+            matched = rule.when(readingView(read, inputs));
+        }
+        catch (error) {
+            matched = false;
+            matchError = error instanceof Error ? error.message : String(error);
+        }
+        const evidence = {
+            type: 'function',
+            ruleIndex: index,
+            branch: rule.then,
+            matched,
+            label: rule.label,
+            inputs,
+            ...(matchError !== undefined && { matchError }),
+        };
+        return evidence;
+    }
+    let matched = false;
+    let conditions = [];
+    let matchError;
+    try {
+        ({ matched, conditions } = evaluateFilter(read, () => false, rule.when));
+    }
+    catch (error) {
+        matchError = error instanceof Error ? error.message : String(error);
+    }
+    const evidence = {
+        type: 'filter',
+        ruleIndex: index,
+        branch: rule.then,
+        matched,
+        label: rule.label,
+        conditions,
+        ...(matchError !== undefined && { matchError }),
+    };
+    return evidence;
+}
+/**
+ * The inputs as a function rule sees them: each string-keyed read is recorded the way `decide()`'s evidence
+ * collector records a scope read (key, summary, not redacted — every input is a number, a name or a flag).
+ */
+function readingView(read, inputs) {
+    return new Proxy({}, {
+        get(_target, key) {
+            if (typeof key !== 'string')
+                return undefined;
+            const value = read(key);
+            inputs.push({ key, valueSummary: summarizeValue(value, MAX_VALUE_LEN), redacted: false });
+            return value;
+        },
+    });
+}
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiZGVjaXNpb24uanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi9zcmMvbGliL2F0dGVtcHQvZGVjaXNpb24udHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6IkFBQUE7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7O0dBMEJHO0FBRUgsT0FBTyxFQUFFLGNBQWMsRUFBRSxNQUFNLHlCQUF5QixDQUFDO0FBVXpELE9BQU8sRUFBRSxjQUFjLEVBQUUsTUFBTSx3QkFBd0IsQ0FBQztBQUN4RCxPQUFPLEVBQUUsY0FBYyxFQUFFLE1BQU0sYUFBYSxDQUFDO0FBRzdDLHNFQUFzRTtBQUN0RSxNQUFNLENBQUMsTUFBTSxhQUFhLEdBQUcsTUFBTSxDQUFDLE1BQU0sQ0FBQyxFQUFFLE1BQU0sRUFBRSxPQUFPLEVBQUUsS0FBSyxFQUFFLFdBQVcsRUFBVyxDQUFDLENBQUM7QUFFN0YsbUdBQW1HO0FBQ25HLE1BQU0sYUFBYSxHQUFHLEVBQUUsQ0FBQztBQUV6Qjs7OztHQUlHO0FBQ0gsTUFBTSxVQUFVLFVBQVUsQ0FBQyxNQUFxQztJQUM5RCxPQUFPO1FBQ0wsRUFBRSxJQUFJLEVBQUUsRUFBRSxPQUFPLEVBQUUsRUFBRSxFQUFFLEVBQUUsSUFBSSxFQUFFLEVBQUUsRUFBRSxJQUFJLEVBQUUsTUFBTSxFQUFFLEtBQUssRUFBRSxXQUFXLEVBQUU7UUFDckUsRUFBRSxJQUFJLEVBQUUsRUFBRSxPQUFPLEVBQUUsRUFBRSxFQUFFLEVBQUUsUUFBUSxFQUFFLEVBQUUsRUFBRSxJQUFJLEVBQUUsTUFBTSxFQUFFLEtBQUssRUFBRSxRQUFRLEVBQUU7UUFDdEUsRUFBRSxJQUFJLEVBQUUsRUFBRSxPQUFPLEVBQUUsRUFBRSxFQUFFLEVBQUUsSUFBSSxFQUFFLEVBQUUsRUFBRSxJQUFJLEVBQUUsTUFBTSxFQUFFLEtBQUssRUFBRSxTQUFTLEVBQUU7UUFDbkUsRUFBRSxJQUFJLEVBQUUsRUFBRSxPQUFPLEVBQUUsRUFBRSxHQUFHLEVBQUUsY0FBYyxDQUFDLE1BQU0sQ0FBQyxRQUFRLENBQUMsRUFBRSxFQUFFLEVBQUUsSUFBSSxFQUFFLE1BQU0sRUFBRSxLQUFLLEVBQUUsV0FBVyxFQUFFO1FBQ2pHLEVBQUUsSUFBSSxFQUFFLENBQUMsTUFBTSxFQUFFLEVBQUUsQ0FBQyxNQUFNLENBQUMsT0FBTyxLQUFLLEtBQUssRUFBRSxJQUFJLEVBQUUsTUFBTSxFQUFFLEtBQUssRUFBRSxVQUFVLEVBQUU7UUFDL0UsRUFBRSxJQUFJLEVBQUUsRUFBRSxtQkFBbUIsRUFBRSxFQUFFLEdBQUcsRUFBRSxDQUFDLEVBQUUsRUFBRSxFQUFFLElBQUksRUFBRSxNQUFNLEVBQUUsS0FBSyxFQUFFLGNBQWMsRUFBRTtLQUNuRixDQUFDO0FBQ0osQ0FBQztBQVNEOzs7O0dBSUc7QUFDSCxNQUFNLFVBQVUsYUFBYSxDQUMzQixLQUEyQyxFQUMzQyxJQUE4QjtJQUU5QixNQUFNLFNBQVMsR0FBbUIsRUFBRSxDQUFDO0lBQ3JDLEtBQUssTUFBTSxDQUFDLEtBQUssRUFBRSxJQUFJLENBQUMsSUFBSSxLQUFLLENBQUMsT0FBTyxFQUFFLEVBQUUsQ0FBQztRQUM1QyxNQUFNLFFBQVEsR0FBRyxZQUFZLENBQUMsSUFBSSxFQUFFLEtBQUssRUFBRSxJQUFJLENBQUMsQ0FBQztRQUNqRCxTQUFTLENBQUMsSUFBSSxDQUFDLFFBQVEsQ0FBQyxDQUFDO1FBQ3pCLElBQUksUUFBUSxDQUFDLE9BQU87WUFBRSxPQUFPLE9BQU8sQ0FBQyxTQUFTLEVBQUUsSUFBSSxDQUFDLElBQUksRUFBRSxJQUFJLENBQUMsS0FBSyxDQUFDLENBQUM7SUFDekUsQ0FBQztJQUNELE9BQU8sT0FBTyxDQUFDLFNBQVMsRUFBRSxhQUFhLENBQUMsTUFBTSxFQUFFLGFBQWEsQ0FBQyxLQUFLLENBQUMsQ0FBQztBQUN2RSxDQUFDO0FBRUQsU0FBUyxPQUFPLENBQUMsS0FBcUIsRUFBRSxNQUFjLEVBQUUsS0FBeUI7SUFDL0UsOERBQThEO0lBQzlELE1BQU0sUUFBUSxHQUFxQjtRQUNqQyxLQUFLO1FBQ0wsTUFBTTtRQUNOLE9BQU8sRUFBRSxhQUFhLENBQUMsTUFBTTtRQUM3QixZQUFZLEVBQUUsYUFBYSxDQUFDLEtBQUs7S0FDbEMsQ0FBQztJQUNGLE9BQU8sRUFBRSxRQUFRLEVBQUUsSUFBSSxFQUFFLE1BQXFCLEVBQUUsTUFBTSxFQUFFLEtBQXNCLEVBQUUsQ0FBQztBQUNuRixDQUFDO0FBRUQscUZBQXFGO0FBQ3JGLFNBQVMsWUFBWSxDQUFDLElBQStCLEVBQUUsS0FBYSxFQUFFLElBQThCO0lBQ2xHLElBQUksT0FBTyxJQUFJLENBQUMsSUFBSSxLQUFLLFVBQVUsRUFBRSxDQUFDO1FBQ3BDLE1BQU0sTUFBTSxHQUFnQixFQUFFLENBQUM7UUFDL0IsSUFBSSxPQUFnQixDQUFDO1FBQ3JCLElBQUksVUFBOEIsQ0FBQztRQUNuQyxJQUFJLENBQUM7WUFDSCxPQUFPLEdBQUcsSUFBSSxDQUFDLElBQUksQ0FBQyxXQUFXLENBQUMsSUFBSSxFQUFFLE1BQU0sQ0FBQyxDQUFDLENBQUM7UUFDakQsQ0FBQztRQUFDLE9BQU8sS0FBSyxFQUFFLENBQUM7WUFDZixPQUFPLEdBQUcsS0FBSyxDQUFDO1lBQ2hCLFVBQVUsR0FBRyxLQUFLLFlBQVksS0FBSyxDQUFDLENBQUMsQ0FBQyxLQUFLLENBQUMsT0FBTyxDQUFDLENBQUMsQ0FBQyxNQUFNLENBQUMsS0FBSyxDQUFDLENBQUM7UUFDdEUsQ0FBQztRQUNELE1BQU0sUUFBUSxHQUF5QjtZQUNyQyxJQUFJLEVBQUUsVUFBVTtZQUNoQixTQUFTLEVBQUUsS0FBSztZQUNoQixNQUFNLEVBQUUsSUFBSSxDQUFDLElBQUk7WUFDakIsT0FBTztZQUNQLEtBQUssRUFBRSxJQUFJLENBQUMsS0FBSztZQUNqQixNQUFNO1lBQ04sR0FBRyxDQUFDLFVBQVUsS0FBSyxTQUFTLElBQUksRUFBRSxVQUFVLEVBQUUsQ0FBQztTQUNoRCxDQUFDO1FBQ0YsT0FBTyxRQUFRLENBQUM7SUFDbEIsQ0FBQztJQUNELElBQUksT0FBTyxHQUFHLEtBQUssQ0FBQztJQUNwQixJQUFJLFVBQVUsR0FBcUMsRUFBRSxDQUFDO0lBQ3RELElBQUksVUFBOEIsQ0FBQztJQUNuQyxJQUFJLENBQUM7UUFDSCxDQUFDLEVBQUUsT0FBTyxFQUFFLFVBQVUsRUFBRSxHQUFHLGNBQWMsQ0FBQyxJQUFJLEVBQUUsR0FBRyxFQUFFLENBQUMsS0FBSyxFQUFFLElBQUksQ0FBQyxJQUFrQyxDQUFDLENBQUMsQ0FBQztJQUN6RyxDQUFDO0lBQUMsT0FBTyxLQUFLLEVBQUUsQ0FBQztRQUNmLFVBQVUsR0FBRyxLQUFLLFlBQVksS0FBSyxDQUFDLENBQUMsQ0FBQyxLQUFLLENBQUMsT0FBTyxDQUFDLENBQUMsQ0FBQyxNQUFNLENBQUMsS0FBSyxDQUFDLENBQUM7SUFDdEUsQ0FBQztJQUNELE1BQU0sUUFBUSxHQUF1QjtRQUNuQyxJQUFJLEVBQUUsUUFBUTtRQUNkLFNBQVMsRUFBRSxLQUFLO1FBQ2hCLE1BQU0sRUFBRSxJQUFJLENBQUMsSUFBSTtRQUNqQixPQUFPO1FBQ1AsS0FBSyxFQUFFLElBQUksQ0FBQyxLQUFLO1FBQ2pCLFVBQVU7UUFDVixHQUFHLENBQUMsVUFBVSxLQUFLLFNBQVMsSUFBSSxFQUFFLFVBQVUsRUFBRSxDQUFDO0tBQ2hELENBQUM7SUFDRixPQUFPLFFBQVEsQ0FBQztBQUNsQixDQUFDO0FBRUQ7OztHQUdHO0FBQ0gsU0FBUyxXQUFXLENBQUMsSUFBOEIsRUFBRSxNQUFtQjtJQUN0RSxPQUFPLElBQUksS0FBSyxDQUFDLEVBQW1CLEVBQUU7UUFDcEMsR0FBRyxDQUFDLE9BQU8sRUFBRSxHQUFHO1lBQ2QsSUFBSSxPQUFPLEdBQUcsS0FBSyxRQUFRO2dCQUFFLE9BQU8sU0FBUyxDQUFDO1lBQzlDLE1BQU0sS0FBSyxHQUFHLElBQUksQ0FBQyxHQUFHLENBQUMsQ0FBQztZQUN4QixNQUFNLENBQUMsSUFBSSxDQUFDLEVBQUUsR0FBRyxFQUFFLFlBQVksRUFBRSxjQUFjLENBQUMsS0FBSyxFQUFFLGFBQWEsQ0FBQyxFQUFFLFFBQVEsRUFBRSxLQUFLLEVBQUUsQ0FBQyxDQUFDO1lBQzFGLE9BQU8sS0FBSyxDQUFDO1FBQ2YsQ0FBQztLQUNGLENBQUMsQ0FBQztBQUNMLENBQUMiLCJzb3VyY2VzQ29udGVudCI6WyIvKipcbiAqIGF0dGVtcHQvZGVjaXNpb24udHMg4oCUIHRoZSBPTkUgcmV0cnkgcnVsZSB0YWJsZSBhbmQgdGhlIHJ1bm5lcidzIGV2aWRlbmNlIGJ1aWxkZXIgKGRlc2lnbiDCpzMuMSwgwqczLjgsIGxhdyA5KS5cbiAqXG4gKiBgcmV0cnlSdWxlcyhwb2xpY3kpYCBpcyB0aGUgcmV0cnktb3Itc3RvcCBkZWNpc2lvbiBhcyBvcmRpbmFyeSBgZGVjaWRlKClgIHJ1bGVzIG92ZXIgYEF0dGVtcHRJbnB1dHNgLCBmaXJzdFxuICogbWF0Y2ggd2lucywgZGVmYXVsdCBgcmV0cnlgIChcInJldHJ5YWJsZVwiKTpcbiAqXG4gKiAgIDEgIG91dGNvbWUgPSBvayAgICAgICAgICAgICAgICAgICAg4oaSIGRvbmUgIHN1Y2NlZWRlZFxuICogICAyICBvdXRjb21lID0gcGF1c2VkICAgICAgICAgICAgICAgIOKGkiBzdG9wICBwYXVzZWRcbiAqICAgMyAgYWJvcnRlZCA9IHRydWUgICAgICAgICAgICAgICAgICDihpIgc3RvcCAgYWJvcnRlZCAgICAgICAgKHRoZSBydW4ncyBzaWduYWwg4oCUIHRoZSBhdHRlbXB0J3Mgb3V0Y29tZSBzdGF5cyBpdHMgb3duKVxuICogICA0ICBhdHRlbXB0IOKJpSBvZiAgICAgICAgICAgICAgICAgICAg4oaSIHN0b3AgIGV4aGF1c3RlZFxuICogICA1ICByZXRyeU9uID0gZmFsc2UgICAgICAgICAgICAgICAgIOKGkiBzdG9wICBkZWNsaW5lZCAgICAgICAoYSBmdW5jdGlvbiBydWxlOiBpdCBzaG93cyB0aGUgdmVyZGljdCBpdCBzYXcpXG4gKiAgIDYgIHRpbWVMZWZ0QWZ0ZXJXYWl0TXMg4omkIDAgICAgICAgICDihpIgc3RvcCAgbm8tdGltZS1sZWZ0XG4gKiAgICAgIGRlZmF1bHQgICAgICAgICAgICAgICAgICAgICAgICAg4oaSIHJldHJ5IHJldHJ5YWJsZVxuICpcbiAqIEVhY2ggcnVsZSdzIGBsYWJlbGAgSVMgdGhlIHJlYXNvbiBpdCBuYW1lcywgc28gYHJlYXNvbmAgaXMgYSBwcm9qZWN0aW9uIG9mIHRoZSBldmlkZW5jZSwgbmV2ZXIgYSBzZWNvbmRcbiAqIHZvY2FidWxhcnkuIFRoZSBjZWlsaW5nIGlzIGBhdHRlbXB0L3BvbGljeS50cyDCtyBhdHRlbXB0Q2VpbGluZ2AsIHRoZSBvbmUgcmVhZGluZyB0aGUgZW5naW5lIGFuZCB0aGUgcnVubmVyXG4gKiBzaGFyZS5cbiAqXG4gKiBgZGVjaWRlQXR0ZW1wdGAgZXZhbHVhdGVzIHRoYXQgdGFibGUgV0lUSE9VVCBhIHNjb3BlICh0aGUgcnVubmVyIGhhcyBub25lIOKAlCBgZGVjaWRlKClgIG5lZWRzIGEgcmVnaXN0ZXJlZFxuICogb25lKSBhbmQgYnVpbGRzIHRoZSBldmlkZW5jZSBgZGVjaWRlKClgIHdvdWxkIGJ1aWxkOiB0aGUgZmlsdGVyIHJvd3MgY29tZSBmcm9tIGBkZWNpZGUoKWAncyBvd24gZXZhbHVhdG9yXG4gKiAoYGZpbHRlci9ldmFsdWF0b3IudHMgwrcgZXZhbHVhdGVGaWx0ZXJgKSwgdGhlIGZ1bmN0aW9uIHJvd3MgYW5kIHRoZSBmaXJzdC1tYXRjaCBsb29wIG1pcnJvclxuICogYGRlY2lkZS9kZWNpZGUudHNgIGZpZWxkIGZvciBmaWVsZCBhbmQga2V5IGZvciBrZXkuIEEgcHJvcGVydHkgdGVzdCBwaW5zIHRoYXQgYm90aCBwYXRocyBnaXZlIGVxdWFsIGV2aWRlbmNlXG4gKiBmb3IgZXF1YWwgaW5wdXRzICh0ZXN0L2xpYi9hdHRlbXB0L3Byb3BlcnR5KS5cbiAqXG4gKiBJbnB1dHMgYXJlIFJFQUQsIG9uZSBrZXkgYXQgYSB0aW1lLCBvbmx5IHdoZW4gYSBydWxlIHJlYWNoZXMgdGhlbSDigJQgc28gdGhlIHVzZXIncyBgcmV0cnlPbmAgYW5kIGBiYWNrb2ZmTXNgXG4gKiBydW4gZXhhY3RseSB3aGVuIGEgcmV0cnkgbmVlZHMgdGhlbSwgYXMgdGhleSBkaWQgYmVmb3JlIHRoZSByZWNvcmQgZXhpc3RlZC5cbiAqL1xuXG5pbXBvcnQgeyBzdW1tYXJpemVWYWx1ZSB9IGZyb20gJy4uL2NhcHR1cmUvc3VtbWFyaXplLmpzJztcbmltcG9ydCB0eXBlIHtcbiAgRGVjaWRlUnVsZSxcbiAgRGVjaXNpb25FdmlkZW5jZSxcbiAgRmlsdGVyUnVsZUV2aWRlbmNlLFxuICBGdW5jdGlvblJ1bGVFdmlkZW5jZSxcbiAgUmVhZElucHV0LFxuICBSdWxlRXZpZGVuY2UsXG4gIFdoZXJlRmlsdGVyLFxufSBmcm9tICcuLi9kZWNpZGUvdHlwZXMuanMnO1xuaW1wb3J0IHsgZXZhbHVhdGVGaWx0ZXIgfSBmcm9tICcuLi9maWx0ZXIvZXZhbHVhdG9yLmpzJztcbmltcG9ydCB7IGF0dGVtcHRDZWlsaW5nIH0gZnJvbSAnLi9wb2xpY3kuanMnO1xuaW1wb3J0IHR5cGUgeyBBdHRlbXB0SW5wdXRzLCBBdHRlbXB0TmV4dCwgQXR0ZW1wdFJlYXNvbiwgUmV0cnlQb2xpY3kgfSBmcm9tICcuL3R5cGVzLmpzJztcblxuLyoqIFRoZSB0YWJsZSdzIGRlZmF1bHQ6IG5vIHJ1bGUgc3RvcHBlZCB0aGUgc2VyaWVzLCBzbyBpdCByZXRyaWVzLiAqL1xuZXhwb3J0IGNvbnN0IFJFVFJZX0RFRkFVTFQgPSBPYmplY3QuZnJlZXplKHsgYnJhbmNoOiAncmV0cnknLCBsYWJlbDogJ3JldHJ5YWJsZScgfSBhcyBjb25zdCk7XG5cbi8qKiBgZGVjaWRlKClgJ3Mgc3VtbWFyeSBsZW5ndGggZm9yIGFuIGV2aWRlbmNlIHZhbHVlIChmaWx0ZXIvZXZhbHVhdG9yLnRzLCBkZWNpZGUvZXZpZGVuY2UudHMpLiAqL1xuY29uc3QgTUFYX1ZBTFVFX0xFTiA9IDgwO1xuXG4vKipcbiAqIFRoZSByZXRyeSBydWxlIHRhYmxlIGZvciBgcG9saWN5YCDigJQgc2l4IGBkZWNpZGUoKWAgcnVsZXMsIHRoZW4ge0BsaW5rIFJFVFJZX0RFRkFVTFR9LiBUaGUgY2VpbGluZyBpcyB0aGVcbiAqIHdob2xlIG51bWJlciBvZiBhdHRlbXB0cyB0aGUgcG9saWN5IGFsbG93cywgbmV2ZXIgZmV3ZXIgdGhhbiBvbmUgKGBhdHRlbXB0Q2VpbGluZ2ApOiBhIGNlaWxpbmcgb2YgYE5hTmAgb3JcbiAqIGBJbmZpbml0eWAgY2Fubm90IG1ha2UgcnVsZSA0IHVucmVhY2hhYmxlLlxuICovXG5leHBvcnQgZnVuY3Rpb24gcmV0cnlSdWxlcyhwb2xpY3k6IFBpY2s8UmV0cnlQb2xpY3ksICdhdHRlbXB0cyc+KTogRGVjaWRlUnVsZTxBdHRlbXB0SW5wdXRzPltdIHtcbiAgcmV0dXJuIFtcbiAgICB7IHdoZW46IHsgb3V0Y29tZTogeyBlcTogJ29rJyB9IH0sIHRoZW46ICdkb25lJywgbGFiZWw6ICdzdWNjZWVkZWQnIH0sXG4gICAgeyB3aGVuOiB7IG91dGNvbWU6IHsgZXE6ICdwYXVzZWQnIH0gfSwgdGhlbjogJ3N0b3AnLCBsYWJlbDogJ3BhdXNlZCcgfSxcbiAgICB7IHdoZW46IHsgYWJvcnRlZDogeyBlcTogdHJ1ZSB9IH0sIHRoZW46ICdzdG9wJywgbGFiZWw6ICdhYm9ydGVkJyB9LFxuICAgIHsgd2hlbjogeyBhdHRlbXB0OiB7IGd0ZTogYXR0ZW1wdENlaWxpbmcocG9saWN5LmF0dGVtcHRzKSB9IH0sIHRoZW46ICdzdG9wJywgbGFiZWw6ICdleGhhdXN0ZWQnIH0sXG4gICAgeyB3aGVuOiAoaW5wdXRzKSA9PiBpbnB1dHMucmV0cnlPbiA9PT0gZmFsc2UsIHRoZW46ICdzdG9wJywgbGFiZWw6ICdkZWNsaW5lZCcgfSxcbiAgICB7IHdoZW46IHsgdGltZUxlZnRBZnRlcldhaXRNczogeyBsdGU6IDAgfSB9LCB0aGVuOiAnc3RvcCcsIGxhYmVsOiAnbm8tdGltZS1sZWZ0JyB9LFxuICBdO1xufVxuXG4vKiogQSBkZWNpc2lvbjogdGhlIGV2aWRlbmNlLCBhbmQgaXRzIGNvbXBhY3QgcHJvamVjdGlvbi4gKi9cbmV4cG9ydCBpbnRlcmZhY2UgQXR0ZW1wdERlY2lzaW9uIHtcbiAgcmVhZG9ubHkgZXZpZGVuY2U6IERlY2lzaW9uRXZpZGVuY2U7XG4gIHJlYWRvbmx5IG5leHQ6IEF0dGVtcHROZXh0O1xuICByZWFkb25seSByZWFzb246IEF0dGVtcHRSZWFzb247XG59XG5cbi8qKlxuICogRXZhbHVhdGUgYHJ1bGVzYCAoYSBgcmV0cnlSdWxlc2AgdGFibGUpIG92ZXIgYHJlYWRgIOKAlCBmaXJzdCBtYXRjaCB3aW5zIOKAlCBhbmQgYnVpbGQgdGhlIGV2aWRlbmNlIGBkZWNpZGUoKWBcbiAqIHdvdWxkIHJlY29yZCB3aXRoIHRoZSBkZWZhdWx0IHtAbGluayBSRVRSWV9ERUZBVUxUfS4gYHJlYWQoa2V5KWAgcmV0dXJucyBvbmUgaW5wdXQ7IGl0IGlzIGNhbGxlZCBvbmx5IGZvciB0aGVcbiAqIGtleXMgdGhlIGV2YWx1YXRlZCBydWxlcyB0b3VjaCwgaW4gcnVsZSBvcmRlci5cbiAqL1xuZXhwb3J0IGZ1bmN0aW9uIGRlY2lkZUF0dGVtcHQoXG4gIHJ1bGVzOiByZWFkb25seSBEZWNpZGVSdWxlPEF0dGVtcHRJbnB1dHM+W10sXG4gIHJlYWQ6IChrZXk6IHN0cmluZykgPT4gdW5rbm93bixcbik6IEF0dGVtcHREZWNpc2lvbiB7XG4gIGNvbnN0IGV2YWx1YXRlZDogUnVsZUV2aWRlbmNlW10gPSBbXTtcbiAgZm9yIChjb25zdCBbaW5kZXgsIHJ1bGVdIG9mIHJ1bGVzLmVudHJpZXMoKSkge1xuICAgIGNvbnN0IGV2aWRlbmNlID0gZXZhbHVhdGVSdWxlKHJ1bGUsIGluZGV4LCByZWFkKTtcbiAgICBldmFsdWF0ZWQucHVzaChldmlkZW5jZSk7XG4gICAgaWYgKGV2aWRlbmNlLm1hdGNoZWQpIHJldHVybiBkZWNpZGVkKGV2YWx1YXRlZCwgcnVsZS50aGVuLCBydWxlLmxhYmVsKTtcbiAgfVxuICByZXR1cm4gZGVjaWRlZChldmFsdWF0ZWQsIFJFVFJZX0RFRkFVTFQuYnJhbmNoLCBSRVRSWV9ERUZBVUxULmxhYmVsKTtcbn1cblxuZnVuY3Rpb24gZGVjaWRlZChydWxlczogUnVsZUV2aWRlbmNlW10sIGNob3Nlbjogc3RyaW5nLCBsYWJlbDogc3RyaW5nIHwgdW5kZWZpbmVkKTogQXR0ZW1wdERlY2lzaW9uIHtcbiAgLy8gZGVjaWRlKCkncyBrZXkgb3JkZXI6IHJ1bGVzLCBjaG9zZW4sIGRlZmF1bHQsIGRlZmF1bHRMYWJlbC5cbiAgY29uc3QgZXZpZGVuY2U6IERlY2lzaW9uRXZpZGVuY2UgPSB7XG4gICAgcnVsZXMsXG4gICAgY2hvc2VuLFxuICAgIGRlZmF1bHQ6IFJFVFJZX0RFRkFVTFQuYnJhbmNoLFxuICAgIGRlZmF1bHRMYWJlbDogUkVUUllfREVGQVVMVC5sYWJlbCxcbiAgfTtcbiAgcmV0dXJuIHsgZXZpZGVuY2UsIG5leHQ6IGNob3NlbiBhcyBBdHRlbXB0TmV4dCwgcmVhc29uOiBsYWJlbCBhcyBBdHRlbXB0UmVhc29uIH07XG59XG5cbi8qKiBPbmUgcnVsZSwgYXMgYGRlY2lkZS9kZWNpZGUudHMgwrcgZXZhbHVhdGVSdWxlYCBldmFsdWF0ZXMgaXQg4oCUIG1pbnVzIHRoZSBzY29wZS4gKi9cbmZ1bmN0aW9uIGV2YWx1YXRlUnVsZShydWxlOiBEZWNpZGVSdWxlPEF0dGVtcHRJbnB1dHM+LCBpbmRleDogbnVtYmVyLCByZWFkOiAoa2V5OiBzdHJpbmcpID0+IHVua25vd24pOiBSdWxlRXZpZGVuY2Uge1xuICBpZiAodHlwZW9mIHJ1bGUud2hlbiA9PT0gJ2Z1bmN0aW9uJykge1xuICAgIGNvbnN0IGlucHV0czogUmVhZElucHV0W10gPSBbXTtcbiAgICBsZXQgbWF0Y2hlZDogYm9vbGVhbjtcbiAgICBsZXQgbWF0Y2hFcnJvcjogc3RyaW5nIHwgdW5kZWZpbmVkO1xuICAgIHRyeSB7XG4gICAgICBtYXRjaGVkID0gcnVsZS53aGVuKHJlYWRpbmdWaWV3KHJlYWQsIGlucHV0cykpO1xuICAgIH0gY2F0Y2ggKGVycm9yKSB7XG4gICAgICBtYXRjaGVkID0gZmFsc2U7XG4gICAgICBtYXRjaEVycm9yID0gZXJyb3IgaW5zdGFuY2VvZiBFcnJvciA/IGVycm9yLm1lc3NhZ2UgOiBTdHJpbmcoZXJyb3IpO1xuICAgIH1cbiAgICBjb25zdCBldmlkZW5jZTogRnVuY3Rpb25SdWxlRXZpZGVuY2UgPSB7XG4gICAgICB0eXBlOiAnZnVuY3Rpb24nLFxuICAgICAgcnVsZUluZGV4OiBpbmRleCxcbiAgICAgIGJyYW5jaDogcnVsZS50aGVuLFxuICAgICAgbWF0Y2hlZCxcbiAgICAgIGxhYmVsOiBydWxlLmxhYmVsLFxuICAgICAgaW5wdXRzLFxuICAgICAgLi4uKG1hdGNoRXJyb3IgIT09IHVuZGVmaW5lZCAmJiB7IG1hdGNoRXJyb3IgfSksXG4gICAgfTtcbiAgICByZXR1cm4gZXZpZGVuY2U7XG4gIH1cbiAgbGV0IG1hdGNoZWQgPSBmYWxzZTtcbiAgbGV0IGNvbmRpdGlvbnM6IEZpbHRlclJ1bGVFdmlkZW5jZVsnY29uZGl0aW9ucyddID0gW107XG4gIGxldCBtYXRjaEVycm9yOiBzdHJpbmcgfCB1bmRlZmluZWQ7XG4gIHRyeSB7XG4gICAgKHsgbWF0Y2hlZCwgY29uZGl0aW9ucyB9ID0gZXZhbHVhdGVGaWx0ZXIocmVhZCwgKCkgPT4gZmFsc2UsIHJ1bGUud2hlbiBhcyBXaGVyZUZpbHRlcjxBdHRlbXB0SW5wdXRzPikpO1xuICB9IGNhdGNoIChlcnJvcikge1xuICAgIG1hdGNoRXJyb3IgPSBlcnJvciBpbnN0YW5jZW9mIEVycm9yID8gZXJyb3IubWVzc2FnZSA6IFN0cmluZyhlcnJvcik7XG4gIH1cbiAgY29uc3QgZXZpZGVuY2U6IEZpbHRlclJ1bGVFdmlkZW5jZSA9IHtcbiAgICB0eXBlOiAnZmlsdGVyJyxcbiAgICBydWxlSW5kZXg6IGluZGV4LFxuICAgIGJyYW5jaDogcnVsZS50aGVuLFxuICAgIG1hdGNoZWQsXG4gICAgbGFiZWw6IHJ1bGUubGFiZWwsXG4gICAgY29uZGl0aW9ucyxcbiAgICAuLi4obWF0Y2hFcnJvciAhPT0gdW5kZWZpbmVkICYmIHsgbWF0Y2hFcnJvciB9KSxcbiAgfTtcbiAgcmV0dXJuIGV2aWRlbmNlO1xufVxuXG4vKipcbiAqIFRoZSBpbnB1dHMgYXMgYSBmdW5jdGlvbiBydWxlIHNlZXMgdGhlbTogZWFjaCBzdHJpbmcta2V5ZWQgcmVhZCBpcyByZWNvcmRlZCB0aGUgd2F5IGBkZWNpZGUoKWAncyBldmlkZW5jZVxuICogY29sbGVjdG9yIHJlY29yZHMgYSBzY29wZSByZWFkIChrZXksIHN1bW1hcnksIG5vdCByZWRhY3RlZCDigJQgZXZlcnkgaW5wdXQgaXMgYSBudW1iZXIsIGEgbmFtZSBvciBhIGZsYWcpLlxuICovXG5mdW5jdGlvbiByZWFkaW5nVmlldyhyZWFkOiAoa2V5OiBzdHJpbmcpID0+IHVua25vd24sIGlucHV0czogUmVhZElucHV0W10pOiBBdHRlbXB0SW5wdXRzIHtcbiAgcmV0dXJuIG5ldyBQcm94eSh7fSBhcyBBdHRlbXB0SW5wdXRzLCB7XG4gICAgZ2V0KF90YXJnZXQsIGtleSkge1xuICAgICAgaWYgKHR5cGVvZiBrZXkgIT09ICdzdHJpbmcnKSByZXR1cm4gdW5kZWZpbmVkO1xuICAgICAgY29uc3QgdmFsdWUgPSByZWFkKGtleSk7XG4gICAgICBpbnB1dHMucHVzaCh7IGtleSwgdmFsdWVTdW1tYXJ5OiBzdW1tYXJpemVWYWx1ZSh2YWx1ZSwgTUFYX1ZBTFVFX0xFTiksIHJlZGFjdGVkOiBmYWxzZSB9KTtcbiAgICAgIHJldHVybiB2YWx1ZTtcbiAgICB9LFxuICB9KTtcbn1cbiJdfQ==

package/dist/esm/lib/attempt/effect.d.ts

@@ -0,0 +1,76 @@
+/**
+ * attempt/effect.ts — side-effect safety (design §3.3, packet P3): the ONE reading of what an attempt did to an
+ * outside system, and the ONE rule for a touching target.
+ *
+ *   - `touchesProblem` — the build law, asked at every door a touching declaration enters: the builder
+ *     (`FlowChartBuilder · applyTouches` / `applyRetryPolicy`), the traverser for a StageNode a stage returns at run
+ *     time (`FlowchartTraverser · admitDynamicNodes`), and the stage itself (`FlowchartTraverser · executeStage`, for
+ *     a chart edited after `build()`). A touching target that may retry without an idempotency key is refused: a
+ *     retry of a non-idempotent effect without one can apply it twice.
+ *   - `callTouches` — the same law for `scope.$call(target, fn, policy, { touches, idempotencyKey })`.
+ *   - `admitIdempotencyKey` — the key's format: 1–255 printable ASCII characters, no space. It travels in a request
+ *     header (`Idempotency-Key`), so a control character could forge one; the refusal names the field, never the
+ *     value.
+ *   - `effectOf` — `ok → 'applied'`; a failure whose error declares `effect: 'none'` → `'none'`; anything else →
+ *     `'unknown'`. A timeout is the absence of an answer (law 4), so it is never `'none'`.
+ *   - `unknownEffectError` — what a series that ends without an answer after ANY attempt of unknown effect fails
+ *     with, in place of the attempt's own error (its `cause`).
+ *   - `interruptProblem` — a keyless touching stage may not be re-run by an `interrupt()` resume.
+ */
+import { UnknownEffectError } from './errors.js';
+import type { AttemptEffect, AttemptOutcome, AttemptRecord, RetryPolicy, StageTouches } from './types.js';
+export { MAX_IDEMPOTENCY_KEY_LENGTH } from '../ids/idempotencyKey.js';
+/**
+ * What a touching runner series is told (`AttemptRunOptions.effect`): the system, the REAL key the attempts are made
+ * under, and the key as records carry it (the run's served form; the real one when no rule applies).
+ */
+export interface EffectTarget {
+    readonly system: string;
+    readonly idempotencyKey?: string;
+    readonly recordedKey?: string;
+}
+/**
+ * Why a touching declaration is refused, or `undefined` when it is admitted: `touches` must be `{ system,
+ * idempotencyKey? }` with `system` a name and the key rule a function; and a target that may retry (`retry`'s
+ * ceiling above 1) must declare the key rule.
+ */
+export declare function touchesProblem(touches: unknown, retry: Pick<RetryPolicy, 'attempts'> | undefined): string | undefined;
+/** `value` as an idempotency key (`ids/idempotencyKey.ts`, the one rule), or a `TypeError` that names `where`. */
+export declare function admitIdempotencyKey(where: string, value: unknown): string;
+/**
+ * A `$call`'s side-effect declaration, admitted: `undefined` when it touches nothing; otherwise the system and the
+ * key, refused with a `TypeError` naming `where` when malformed, when a key comes without a system, or when the
+ * call may retry with no key — before anything is sent.
+ */
+export declare function callTouches(where: string, options: unknown, policy: Pick<RetryPolicy, 'attempts'>): {
+    readonly system: string;
+    readonly idempotencyKey?: string;
+} | undefined;
+/** What an attempt that ended `outcome` (with `error`, when it failed) did to the outside system. */
+export declare function effectOf(outcome: AttemptOutcome, error: unknown): AttemptEffect;
+/**
+ * What a touching series fails with when any of its attempts left the effect unknown — never the attempt's own error,
+ * which a caller would read as a failure and retry. The key is the RECORDED one: under a redaction rule that names
+ * it, the error carries the placeholder, as every record does.
+ */
+export declare function unknownEffectError(target: EffectTarget, record: AttemptRecord, cause: unknown): UnknownEffectError;
+/** The key as records carry it: the served form when the caller gave one, else the key itself. */
+export declare function recordedKeyOf(target: EffectTarget): string | undefined;
+/** The runner's refusal of a touching series that may retry with no key — the law, at the last door. */
+export declare function refuseKeylessRetry(target: EffectTarget, attempts: number): void;
+/**
+ * Why a touching stage may not be RE-RUN by an `interrupt()` resume, or `undefined` when it may (P3). A resume
+ * re-runs the stage's function from its top — a second attempt of its effect — so the law that refuses a keyless
+ * retry refuses a keyless re-run too. Asked when the stage interrupts (`StageRunner`) and when a checkpoint is
+ * resumed (`runner/resume.ts · planResume`, for a checkpoint made by another version of the chart).
+ */
+export declare function interruptProblem(touches: StageTouches | undefined): string | undefined;
+/**
+ * The stand-in's declaration on a resume (P3): the paused stage's system, answering the key its checkpoint carried —
+ * the OPERATIONAL value, real (checkpoints are exempt from redaction by law). It is marked, so the run serves it
+ * like a key of unknown sources: under any state rule the records carry the placeholder (`isCarriedTouches`) — the
+ * resumed leg no longer holds the input the key was made of, so it cannot tell whether the key was masked.
+ */
+export declare function carriedTouches(system: string, key: string): StageTouches;
+/** The declaration answers a key a checkpoint carried ({@link carriedTouches}). */
+export declare function isCarriedTouches(touches: unknown): boolean;

package/dist/esm/lib/attempt/effect.js

@@ -0,0 +1,160 @@
+/**
+ * attempt/effect.ts — side-effect safety (design §3.3, packet P3): the ONE reading of what an attempt did to an
+ * outside system, and the ONE rule for a touching target.
+ *
+ *   - `touchesProblem` — the build law, asked at every door a touching declaration enters: the builder
+ *     (`FlowChartBuilder · applyTouches` / `applyRetryPolicy`), the traverser for a StageNode a stage returns at run
+ *     time (`FlowchartTraverser · admitDynamicNodes`), and the stage itself (`FlowchartTraverser · executeStage`, for
+ *     a chart edited after `build()`). A touching target that may retry without an idempotency key is refused: a
+ *     retry of a non-idempotent effect without one can apply it twice.
+ *   - `callTouches` — the same law for `scope.$call(target, fn, policy, { touches, idempotencyKey })`.
+ *   - `admitIdempotencyKey` — the key's format: 1–255 printable ASCII characters, no space. It travels in a request
+ *     header (`Idempotency-Key`), so a control character could forge one; the refusal names the field, never the
+ *     value.
+ *   - `effectOf` — `ok → 'applied'`; a failure whose error declares `effect: 'none'` → `'none'`; anything else →
+ *     `'unknown'`. A timeout is the absence of an answer (law 4), so it is never `'none'`.
+ *   - `unknownEffectError` — what a series that ends without an answer after ANY attempt of unknown effect fails
+ *     with, in place of the attempt's own error (its `cause`).
+ *   - `interruptProblem` — a keyless touching stage may not be re-run by an `interrupt()` resume.
+ */
+import { idempotencyKeyProblem } from '../ids/idempotencyKey.js';
+import { UnknownEffectError } from './errors.js';
+import { attemptNameProblem } from './name.js';
+import { attemptCeiling } from './policy.js';
+export { MAX_IDEMPOTENCY_KEY_LENGTH } from '../ids/idempotencyKey.js';
+/** Why `retry` with `touches` breaks the law — the shared words of every door. */
+function retriedWithoutKey(system, attempts) {
+    return (`touches "${system}" and may retry (attempts: ${attempts}) but declares no idempotencyKey — a retry of an ` +
+        'outside effect without a key can apply it twice. Declare the key rule ' +
+        `(.touches('${system}', { idempotencyKey: ({ args }) => \`order-\${args.orderId}\` })), or retry once.`);
+}
+/**
+ * Why a touching declaration is refused, or `undefined` when it is admitted: `touches` must be `{ system,
+ * idempotencyKey? }` with `system` a name and the key rule a function; and a target that may retry (`retry`'s
+ * ceiling above 1) must declare the key rule.
+ */
+export function touchesProblem(touches, retry) {
+    if (touches === null || typeof touches !== 'object') {
+        return 'touches must be { system, idempotencyKey? } — the outside system and the key rule';
+    }
+    const { system, idempotencyKey } = touches;
+    const nameProblem = attemptNameProblem(system);
+    if (nameProblem !== undefined)
+        return `touches.system ${nameProblem} — it is a name from code, never a value`;
+    if (idempotencyKey !== undefined && typeof idempotencyKey !== 'function') {
+        return ('touches.idempotencyKey must be a function of the execution ((ctx) => string) — a constant key would make ' +
+            'every run one operation');
+    }
+    const attempts = attemptCeiling(retry?.attempts);
+    if (attempts > 1 && idempotencyKey === undefined)
+        return retriedWithoutKey(system, attempts);
+    return undefined;
+}
+/** `value` as an idempotency key (`ids/idempotencyKey.ts`, the one rule), or a `TypeError` that names `where`. */
+export function admitIdempotencyKey(where, value) {
+    const problem = idempotencyKeyProblem(value);
+    if (problem !== undefined) {
+        throw new TypeError(`${where}: idempotencyKey ${problem} (derive it from the input or the state, never from model output)`);
+    }
+    return value;
+}
+/**
+ * A `$call`'s side-effect declaration, admitted: `undefined` when it touches nothing; otherwise the system and the
+ * key, refused with a `TypeError` naming `where` when malformed, when a key comes without a system, or when the
+ * call may retry with no key — before anything is sent.
+ */
+export function callTouches(where, options, policy) {
+    if (options === undefined)
+        return undefined;
+    if (options === null || typeof options !== 'object') {
+        throw new TypeError(`${where}: options must be { touches?, idempotencyKey? }`);
+    }
+    const { touches, idempotencyKey } = options;
+    if (touches === undefined) {
+        if (idempotencyKey !== undefined) {
+            throw new TypeError(`${where}: an idempotencyKey names an effect — declare the system it touches (touches)`);
+        }
+        return undefined;
+    }
+    const nameProblem = attemptNameProblem(touches);
+    if (nameProblem !== undefined) {
+        throw new TypeError(`${where}: touches ${nameProblem} — it is a name from code, never a value`);
+    }
+    const key = idempotencyKey === undefined ? undefined : admitIdempotencyKey(where, idempotencyKey);
+    const attempts = attemptCeiling(policy.attempts);
+    if (attempts > 1 && key === undefined)
+        throw new TypeError(`${where}: ${retriedWithoutKey(touches, attempts)}`);
+    return { system: touches, ...(key !== undefined && { idempotencyKey: key }) };
+}
+/** What an attempt that ended `outcome` (with `error`, when it failed) did to the outside system. */
+export function effectOf(outcome, error) {
+    if (outcome === 'ok')
+        return 'applied';
+    if (outcome === 'failed' && declaresNoEffect(error))
+        return 'none';
+    return 'unknown';
+}
+/** The error itself says nothing was sent — `effect: 'none'`, read once; a value that cannot be read says nothing. */
+function declaresNoEffect(error) {
+    if (error === null || typeof error !== 'object')
+        return false;
+    try {
+        return error.effect === 'none';
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * What a touching series fails with when any of its attempts left the effect unknown — never the attempt's own error,
+ * which a caller would read as a failure and retry. The key is the RECORDED one: under a redaction rule that names
+ * it, the error carries the placeholder, as every record does.
+ */
+export function unknownEffectError(target, record, cause) {
+    return new UnknownEffectError({
+        system: target.system,
+        ...(recordedKeyOf(target) !== undefined && { idempotencyKey: recordedKeyOf(target) }),
+        attempts: record.attempt,
+        cause,
+    });
+}
+/** The key as records carry it: the served form when the caller gave one, else the key itself. */
+export function recordedKeyOf(target) {
+    return target.recordedKey ?? target.idempotencyKey;
+}
+/** The runner's refusal of a touching series that may retry with no key — the law, at the last door. */
+export function refuseKeylessRetry(target, attempts) {
+    if (attempts > 1 && target.idempotencyKey === undefined) {
+        throw new TypeError(`[footprint] ${retriedWithoutKey(target.system, attempts)}`);
+    }
+}
+/**
+ * Why a touching stage may not be RE-RUN by an `interrupt()` resume, or `undefined` when it may (P3). A resume
+ * re-runs the stage's function from its top — a second attempt of its effect — so the law that refuses a keyless
+ * retry refuses a keyless re-run too. Asked when the stage interrupts (`StageRunner`) and when a checkpoint is
+ * resumed (`runner/resume.ts · planResume`, for a checkpoint made by another version of the chart).
+ */
+export function interruptProblem(touches) {
+    if (touches === undefined || touches.idempotencyKey !== undefined)
+        return undefined;
+    return (`touches "${touches.system}" with no idempotencyKey, and a resume after interrupt() re-runs the stage from its ` +
+        'top — a second attempt of the effect without a key. Declare the key rule, or interrupt in a stage of its own.');
+}
+/** The touching declarations `resume()` builds around a key a checkpoint carried (`carriedTouches`). */
+const CARRIED = new WeakSet();
+/**
+ * The stand-in's declaration on a resume (P3): the paused stage's system, answering the key its checkpoint carried —
+ * the OPERATIONAL value, real (checkpoints are exempt from redaction by law). It is marked, so the run serves it
+ * like a key of unknown sources: under any state rule the records carry the placeholder (`isCarriedTouches`) — the
+ * resumed leg no longer holds the input the key was made of, so it cannot tell whether the key was masked.
+ */
+export function carriedTouches(system, key) {
+    const touches = Object.freeze({ system, idempotencyKey: () => key });
+    CARRIED.add(touches);
+    return touches;
+}
+/** The declaration answers a key a checkpoint carried ({@link carriedTouches}). */
+export function isCarriedTouches(touches) {
+    return typeof touches === 'object' && touches !== null && CARRIED.has(touches);
+}
+//# sourceMappingURL=data:application/json;base64,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