harnery 0.29.0 → 0.31.0

package/dist/core/{supervisor → governor}/planning.js

@@ -3,21 +3,21 @@ import { appendFileSync, chmodSync, existsSync, linkSync, mkdirSync, readFileSyn
 import { dirname, join, resolve } from "node:path";
 import { createWorkItem, readWorkItem } from "../work/index.js";
 import { digestResult, readWorkflowProof, runWorkflow, WorkflowParkedError, workflowScriptDigest, } from "../workflow/index.js";
-import { readSupervisorPlan, readSupervisorPlanReviewReceipt, readSupervisorPlans, } from "./plan-read.js";
-import { SUPERVISOR_PLAN_SCHEMA_VERSION, supervisorGraphFingerprint, } from "./plan-types.js";
+import { readGovernorPlan, readGovernorPlanReviewReceipt, readGovernorPlans } from "./plan-read.js";
+import { GOVERNOR_PLAN_SCHEMA_VERSION, governorGraphFingerprint, } from "./plan-types.js";
 const PLAN_KEY = /^[a-z][a-z0-9-]{0,31}$/;
 const TEMPLATE_ID = /^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/;
 const MAX_RECORD_BYTES = 256 * 1024;
 const MAX_EVENTS_BYTES = 512 * 1024;
 const MAX_REASON = 2_000;
 const PROPOSAL_ROOT_RULE = "proposal.root names one newly proposed work key using a root-capable template; it does not preserve or repeat active_root, which is context only";
-export async function runSupervisorPlanner(input) {
+export async function runGovernorPlanner(input) {
     const coordRoot = resolve(input.coordRoot);
     const policy = input.record.intent.replanning;
     if (!policy)
-        throw new Error(`supervisor ${input.record.intent.id} does not allow replanning`);
-    const history = readSupervisorPlans(coordRoot, input.record.intent.id, input.record.intent.root_work_id);
-    const triggerFingerprint = supervisorGraphFingerprint({
+        throw new Error(`governor ${input.record.intent.id} does not allow replanning`);
+    const history = readGovernorPlans(coordRoot, input.record.intent.id, input.record.intent.root_work_id);
+    const triggerFingerprint = governorGraphFingerprint({
         rootWorkId: input.record.projection.root_work_id,
         generation: input.record.projection.plan_generation,
         work: input.record.work,
@@ -69,7 +69,7 @@ export async function runSupervisorPlanner(input) {
             existsSync(reviewInputPath(coordRoot, input.record.intent.id, request.id)) &&
             existsSync(join(coordRoot, ".harnery", "workflows", reviewRunId, "run.json")));
         const reviewInput = resumingReview
-            ? readBoundedJson(reviewInputPath(coordRoot, input.record.intent.id, request.id), "supervisor plan review input")
+            ? readBoundedJson(reviewInputPath(coordRoot, input.record.intent.id, request.id), "governor plan review input")
             : undefined;
         const rawProposal = reviewInput
             ? reviewInput.candidate
@@ -92,7 +92,7 @@ export async function runSupervisorPlanner(input) {
                     actor: input.actor,
                     reason: proposal.rationale,
                 });
-                return outcome(readSupervisorPlan(coordRoot, input.record.intent.id, request.id));
+                return outcome(readGovernorPlan(coordRoot, input.record.intent.id, request.id));
             }
             let receipt;
             try {
@@ -117,7 +117,7 @@ export async function runSupervisorPlanner(input) {
                     actor: input.actor,
                     reason: bounded(`plan review requires attention: ${error.message}`, "plan review attention", MAX_REASON),
                 });
-                return outcome(readSupervisorPlan(coordRoot, input.record.intent.id, request.id));
+                return outcome(readGovernorPlan(coordRoot, input.record.intent.id, request.id));
             }
             return finalizeReviewedProposal({
                 coordRoot,
@@ -128,7 +128,7 @@ export async function runSupervisorPlanner(input) {
                 actor: input.actor,
             });
         }
-        writeExclusiveJson(planProposalPath(coordRoot, input.record.intent.id, request.id), proposal, "supervisor plan proposal");
+        writeExclusiveJson(planProposalPath(coordRoot, input.record.intent.id, request.id), proposal, "governor plan proposal");
         appendPlanEvent(coordRoot, input.record.intent.id, request.id, {
             event: "plan.proposed",
             actor: input.actor,
@@ -141,18 +141,18 @@ export async function runSupervisorPlanner(input) {
                 actor: input.actor,
                 reason: proposal.rationale,
             });
-            return outcome(readSupervisorPlan(coordRoot, input.record.intent.id, request.id));
+            return outcome(readGovernorPlan(coordRoot, input.record.intent.id, request.id));
         }
         if (policy.auto_apply) {
-            return applySupervisorPlanProposal({
+            return applyGovernorPlanProposal({
                 coordRoot,
                 record: input.record,
                 planId: request.id,
                 actor: input.actor,
-                reason: "proposal applied by frozen supervisor replanning policy",
+                reason: "proposal applied by frozen governor replanning policy",
             });
         }
-        return outcome(readSupervisorPlan(coordRoot, input.record.intent.id, request.id));
+        return outcome(readGovernorPlan(coordRoot, input.record.intent.id, request.id));
     }
     catch (error) {
         if (proposalWritten)
@@ -164,21 +164,39 @@ export async function runSupervisorPlanner(input) {
                 reason: `planning workflow parked for approval ${error.approvalId}`,
                 approval_id: error.approvalId,
             });
-            return outcome(readSupervisorPlan(coordRoot, input.record.intent.id, request.id));
+            return outcome(readGovernorPlan(coordRoot, input.record.intent.id, request.id));
         }
+        // ADR 0046: a planner workflow that never touched the plan (its binary was
+        // absent, or the vendor refused) writes a proof carrying run.class. Stamp it
+        // on the failure so the projection can stop an environment failure and bound
+        // consecutive upstream ones, instead of replanning an unchanged environment
+        // to budget exhaustion — the failure mode that burned the measured 19.
+        const failureClass = plannerFailureClass(coordRoot, request.workflow_run_id);
         appendPlanEvent(coordRoot, input.record.intent.id, request.id, {
             event: "plan.failed",
             actor: input.actor,
             reason: bounded(error.message, "plan failure", MAX_REASON),
+            ...(failureClass ? { class: failureClass } : {}),
         });
         throw error;
     }
 }
+/** The failure class (ADR 0046) of a planner workflow run, read from its proof.
+ * Undefined when no proof was written, the proof is unreadable, or the run was
+ * informative about the plan — all of which default to a charged replan. */
+function plannerFailureClass(coordRoot, workflowRunId) {
+    try {
+        return readWorkflowProof(coordRoot, workflowRunId).run.class;
+    }
+    catch {
+        return undefined;
+    }
+}
 async function recoverReviewedPlan(input) {
     const review = input.policy.review;
     if (!review)
         return undefined;
-    const existing = readSupervisorPlanReviewReceipt(input.coordRoot, input.record.intent.id, input.request.id);
+    const existing = readGovernorPlanReviewReceipt(input.coordRoot, input.record.intent.id, input.request.id);
     const receipt = existing ??
         reconstructReviewReceiptFromProof({
             coordRoot: input.coordRoot,
@@ -191,7 +209,7 @@ async function recoverReviewedPlan(input) {
     if (!receipt)
         return undefined;
     if (!existing) {
-        writeExclusiveJson(reviewReceiptPath(input.coordRoot, input.record.intent.id, input.request.id), receipt, "supervisor plan review receipt");
+        writeExclusiveJson(reviewReceiptPath(input.coordRoot, input.record.intent.id, input.request.id), receipt, "governor plan review receipt");
     }
     return finalizeReviewedProposal({
         coordRoot: input.coordRoot,
@@ -203,17 +221,17 @@ async function recoverReviewedPlan(input) {
     });
 }
 async function ensurePlanReview(input) {
-    const existing = readSupervisorPlanReviewReceipt(input.coordRoot, input.record.intent.id, input.request.id);
+    const existing = readGovernorPlanReviewReceipt(input.coordRoot, input.record.intent.id, input.request.id);
     if (existing)
         return existing;
     const reconstructed = reconstructReviewReceiptFromProof(input);
     if (reconstructed) {
-        writeExclusiveJson(reviewReceiptPath(input.coordRoot, input.record.intent.id, input.request.id), reconstructed, "supervisor plan review receipt");
+        writeExclusiveJson(reviewReceiptPath(input.coordRoot, input.record.intent.id, input.request.id), reconstructed, "governor plan review receipt");
         return reconstructed;
     }
     const reviewScript = reviewScriptPath(input.coordRoot, input.record.intent.id, input.request.id);
-    writeExclusiveJson(reviewInputPath(input.coordRoot, input.record.intent.id, input.request.id), { candidate: input.proposal }, "supervisor plan review input");
-    writeExclusive(reviewScript, plannerReviewScript(input.record, input.request.id, input.proposal, input.trigger), "supervisor plan review script");
+    writeExclusiveJson(reviewInputPath(input.coordRoot, input.record.intent.id, input.request.id), { candidate: input.proposal }, "governor plan review input");
+    writeExclusive(reviewScript, plannerReviewScript(input.record, input.request.id, input.proposal, input.trigger), "governor plan review script");
     const review = input.policy.review;
     const runId = reviewWorkflowRunId(input.request.id);
     const runExists = existsSync(join(input.coordRoot, ".harnery", "workflows", runId, "run.json"));
@@ -236,7 +254,7 @@ async function ensurePlanReview(input) {
         trigger: input.trigger,
         policy: input.policy,
     });
-    writeExclusiveJson(reviewReceiptPath(input.coordRoot, input.record.intent.id, input.request.id), receipt, "supervisor plan review receipt");
+    writeExclusiveJson(reviewReceiptPath(input.coordRoot, input.record.intent.id, input.request.id), receipt, "governor plan review receipt");
     return receipt;
 }
 function finalizeReviewedProposal(input) {
@@ -247,7 +265,7 @@ function finalizeReviewedProposal(input) {
             actor: input.actor,
             reason: reviewStatusReason(input.receipt),
         });
-        return outcome(readSupervisorPlan(input.coordRoot, input.record.intent.id, input.request.id));
+        return outcome(readGovernorPlan(input.coordRoot, input.record.intent.id, input.request.id));
     }
     // The review authority must become durable before the proposal can become
     // visible. If the process stops after this event, the plan remains
@@ -258,22 +276,22 @@ function finalizeReviewedProposal(input) {
         actor: input.actor,
         reason: `plan review passed after ${input.receipt.rounds.length} round(s)`,
     });
-    writeExclusiveJson(planProposalPath(input.coordRoot, input.record.intent.id, input.request.id), input.receipt.final_candidate, "supervisor plan proposal");
+    writeExclusiveJson(planProposalPath(input.coordRoot, input.record.intent.id, input.request.id), input.receipt.final_candidate, "governor plan proposal");
     appendPlanEventIfMissing(input.coordRoot, input.record.intent.id, input.request.id, "plan.proposed", {
         event: "plan.proposed",
         actor: input.actor,
         reason: input.receipt.final_candidate.rationale,
     });
     if (input.policy.auto_apply) {
-        return applySupervisorPlanProposal({
+        return applyGovernorPlanProposal({
             coordRoot: input.coordRoot,
             record: input.record,
             planId: input.request.id,
             actor: input.actor,
-            reason: "proposal applied by frozen supervisor replanning policy",
+            reason: "proposal applied by frozen governor replanning policy",
         });
     }
-    return outcome(readSupervisorPlan(input.coordRoot, input.record.intent.id, input.request.id));
+    return outcome(readGovernorPlan(input.coordRoot, input.record.intent.id, input.request.id));
 }
 function reviewStatusReason(receipt) {
     if (receipt.status === "revision_exhausted") {
@@ -283,35 +301,35 @@ function reviewStatusReason(receipt) {
         return "plan review failed";
     return "plan review requires attention";
 }
-export function applySupervisorPlanProposal(input) {
+export function applyGovernorPlanProposal(input) {
     const coordRoot = resolve(input.coordRoot);
     const policy = input.record.intent.replanning;
     if (!policy)
-        throw new Error(`supervisor ${input.record.intent.id} does not allow replanning`);
-    const plan = readSupervisorPlan(coordRoot, input.record.intent.id, input.planId);
+        throw new Error(`governor ${input.record.intent.id} does not allow replanning`);
+    const plan = readGovernorPlan(coordRoot, input.record.intent.id, input.planId);
     if (plan.status === "applied" || plan.status === "completed")
         return outcome(plan);
     if (plan.status !== "proposed" ||
         !plan.proposal ||
         !["apply", "complete"].includes(plan.proposal.decision)) {
-        throw new Error(`supervisor plan ${input.planId} cannot be applied from ${plan.status}`);
+        throw new Error(`governor plan ${input.planId} cannot be applied from ${plan.status}`);
     }
     if (policy.review) {
-        const receipt = readSupervisorPlanReviewReceipt(coordRoot, input.record.intent.id, input.planId);
+        const receipt = readGovernorPlanReviewReceipt(coordRoot, input.record.intent.id, input.planId);
         if (receipt?.status !== "passed") {
-            throw new Error(`supervisor plan ${input.planId} has no passed review receipt`);
+            throw new Error(`governor plan ${input.planId} has no passed review receipt`);
         }
         if (candidateDigest(plan.proposal) !== receipt.candidate_sha256) {
-            throw new Error(`supervisor plan ${input.planId} proposal does not match its passed review`);
+            throw new Error(`governor plan ${input.planId} proposal does not match its passed review`);
         }
         if (!plan.events.some((event) => event.event === "plan.reviewed")) {
-            throw new Error(`supervisor plan ${input.planId} has no reviewed authority event`);
+            throw new Error(`governor plan ${input.planId} has no reviewed authority event`);
         }
     }
     if (plan.request.prior_root_work_id !== input.record.projection.root_work_id) {
-        throw new Error(`supervisor plan ${input.planId} targets stale root ${plan.request.prior_root_work_id}`);
+        throw new Error(`governor plan ${input.planId} targets stale root ${plan.request.prior_root_work_id}`);
     }
-    const history = readSupervisorPlans(coordRoot, input.record.intent.id, input.record.intent.root_work_id);
+    const history = readGovernorPlans(coordRoot, input.record.intent.id, input.record.intent.root_work_id);
     const proposal = normalizeProposal(input.planId, plan.proposal, input.record, history.materialized_work_ids.filter((workId) => !workId.startsWith(`${input.planId}-`)).length, plan.request.trigger ?? "recovery");
     if (proposal.decision === "complete") {
         appendPlanEvent(coordRoot, input.record.intent.id, input.planId, {
@@ -319,7 +337,7 @@ export function applySupervisorPlanProposal(input) {
             actor: input.actor,
             reason: input.reason ?? proposal.rationale,
         });
-        return outcome(readSupervisorPlan(coordRoot, input.record.intent.id, input.planId));
+        return outcome(readGovernorPlan(coordRoot, input.record.intent.id, input.planId));
     }
     const ids = new Map();
     const created = [];
@@ -341,7 +359,7 @@ export function applySupervisorPlanProposal(input) {
             max_attempts: template.max_attempts,
             source: {
                 kind: "workflow",
-                ref: `supervisor:${input.record.intent.id}/plan:${input.planId}`,
+                ref: `governor:${input.record.intent.id}/plan:${input.planId}`,
             },
         };
         if (existsSync(join(coordRoot, ".harnery", "work", workId, "intent.json"))) {
@@ -382,74 +400,105 @@ export function applySupervisorPlanProposal(input) {
     appendPlanEvent(coordRoot, input.record.intent.id, input.planId, {
         event: "plan.applied",
         actor: input.actor,
-        reason: input.reason ?? "supervisor plan explicitly approved",
+        reason: input.reason ?? "governor plan explicitly approved",
         root_work_id: rootWorkId,
         work_ids: created,
     });
-    return outcome(readSupervisorPlan(coordRoot, input.record.intent.id, input.planId));
+    return outcome(readGovernorPlan(coordRoot, input.record.intent.id, input.planId));
 }
-export function rejectSupervisorPlanProposal(input) {
-    const plan = readSupervisorPlan(input.coordRoot, input.goalId, input.planId);
+export function rejectGovernorPlanProposal(input) {
+    const plan = readGovernorPlan(input.coordRoot, input.goalId, input.planId);
     if (plan.status === "rejected")
         return outcome(plan);
     if (plan.status !== "proposed") {
-        throw new Error(`supervisor plan ${input.planId} cannot be rejected from ${plan.status}`);
+        throw new Error(`governor plan ${input.planId} cannot be rejected from ${plan.status}`);
     }
     appendPlanEvent(input.coordRoot, input.goalId, input.planId, {
         event: "plan.rejected",
         actor: input.actor,
         reason: input.reason,
     });
-    return outcome(readSupervisorPlan(input.coordRoot, input.goalId, input.planId));
+    return outcome(readGovernorPlan(input.coordRoot, input.goalId, input.planId));
 }
-export function retrySupervisorPlanProposal(input) {
+/** ADR 0050: reopen a mission whose completion was already accepted, so an operator
+ * finding on work beneath it can be dispatched through the normal governor rather
+ * than only by running the work item by hand.
+ *
+ * The accepted `plan.completed` event is never rewritten. This appends a superseding
+ * `plan.reopened` alongside it, which is why the prior completion survives as history
+ * and why a reader that cannot understand the new event still sees a completed plan
+ * rather than a silently altered one. Refuses when the mission is not complete, so a
+ * caller cannot use it to skip the ordinary completion path. */
+export function reopenGovernorMissionPlan(input) {
+    const goalId = input.record.intent.id;
+    if (!input.record.intent.mission) {
+        throw new Error(`governor ${goalId} is not a mission`);
+    }
+    const history = readGovernorPlans(input.coordRoot, goalId, input.record.intent.root_work_id);
+    const latest = history.latest;
+    if (!latest) {
+        throw new Error(`governor ${goalId} has no plan to reopen`);
+    }
+    if (latest.status === "reopened")
+        return outcome(latest);
+    if (!history.completed || latest.status !== "completed") {
+        throw new Error(`governor ${goalId} mission is not complete, so there is nothing to reopen`);
+    }
+    appendPlanEvent(input.coordRoot, goalId, latest.request.id, {
+        event: "plan.reopened",
+        actor: input.actor,
+        reason: bounded(input.reason, "mission reopen reason", MAX_REASON),
+    });
+    return outcome(readGovernorPlan(input.coordRoot, goalId, latest.request.id));
+}
+export function retryGovernorPlanProposal(input) {
     const policy = input.record.intent.replanning;
     if (!policy) {
-        throw new Error(`supervisor ${input.record.intent.id} does not allow replanning`);
+        throw new Error(`governor ${input.record.intent.id} does not allow replanning`);
     }
     const reason = bounded(input.reason, "plan retry reason", MAX_REASON);
-    const history = readSupervisorPlans(input.coordRoot, input.record.intent.id, input.record.intent.root_work_id);
+    const history = readGovernorPlans(input.coordRoot, input.record.intent.id, input.record.intent.root_work_id);
     const latest = history.latest;
     if (!latest || latest.request.id !== input.planId) {
-        throw new Error(`supervisor plan ${input.planId} is not the latest plan`);
+        throw new Error(`governor plan ${input.planId} is not the latest plan`);
     }
-    const triggerFingerprint = supervisorGraphFingerprint({
+    const triggerFingerprint = governorGraphFingerprint({
         rootWorkId: history.active_root_work_id,
         generation: history.generation,
         work: input.record.work,
     });
     if (latest.request.trigger_fingerprint !== triggerFingerprint ||
         latest.request.prior_root_work_id !== history.active_root_work_id) {
-        throw new Error(`supervisor plan ${input.planId} no longer matches the active graph`);
+        throw new Error(`governor plan ${input.planId} no longer matches the active graph`);
     }
     if (history.completed) {
-        throw new Error(`supervisor ${input.record.intent.id} mission is already complete`);
+        throw new Error(`governor ${input.record.intent.id} mission is already complete`);
     }
     if (latest.status === "retry_requested")
         return outcome(latest);
     if (latest.status !== "attention") {
-        throw new Error(`supervisor plan ${input.planId} cannot be retried from ${latest.status}`);
+        throw new Error(`governor plan ${input.planId} cannot be retried from ${latest.status}`);
     }
     if (history.plans.length >= policy.max_replans) {
-        throw new Error(`supervisor ${input.record.intent.id} exhausted its ${policy.max_replans} replans`);
+        throw new Error(`governor ${input.record.intent.id} exhausted its ${policy.max_replans} replans`);
     }
     appendPlanEvent(input.coordRoot, input.record.intent.id, input.planId, {
         event: "plan.retry_requested",
         actor: input.actor,
         reason,
     });
-    return outcome(readSupervisorPlan(input.coordRoot, input.record.intent.id, input.planId));
+    return outcome(readGovernorPlan(input.coordRoot, input.record.intent.id, input.planId));
 }
 function createPlanRequest(coordRoot, record, sequence, triggerFingerprint, trigger) {
     const policy = record.intent.replanning;
     if (!policy)
-        throw new Error(`supervisor ${record.intent.id} does not allow replanning`);
+        throw new Error(`governor ${record.intent.id} does not allow replanning`);
     if (sequence > policy.max_replans) {
-        throw new Error(`supervisor ${record.intent.id} exhausted its ${policy.max_replans} replans`);
+        throw new Error(`governor ${record.intent.id} exhausted its ${policy.max_replans} replans`);
     }
     const planId = `plan-${String(sequence).padStart(4, "0")}-${randomBytes(4).toString("hex")}`;
     const request = {
-        schema_version: SUPERVISOR_PLAN_SCHEMA_VERSION,
+        schema_version: GOVERNOR_PLAN_SCHEMA_VERSION,
         id: planId,
         goal_id: record.intent.id,
         sequence,
@@ -463,14 +512,14 @@ function createPlanRequest(coordRoot, record, sequence, triggerFingerprint, trig
     const dir = planDir(coordRoot, record.intent.id, planId);
     mkdirSync(dir, { recursive: true, mode: 0o700 });
     chmodSync(dir, 0o700);
-    writeExclusiveJson(join(dir, "request.json"), request, "supervisor plan request");
-    writeExclusive(join(dir, "planner.mjs"), script, "supervisor planner script");
+    writeExclusiveJson(join(dir, "request.json"), request, "governor plan request");
+    writeExclusive(join(dir, "planner.mjs"), script, "governor planner script");
     return request;
 }
 function plannerScript(coordRoot, record, planId, trigger) {
     const policy = record.intent.replanning;
     if (!policy)
-        throw new Error(`supervisor ${record.intent.id} does not allow replanning`);
+        throw new Error(`governor ${record.intent.id} does not allow replanning`);
     const prompt = [
         "You are producing one bounded replacement plan or milestone decision for a durable supervised goal.",
         record.intent.mission
@@ -545,7 +594,7 @@ function plannerReviewScript(record, planId, initialCandidate, trigger) {
     const policy = record.intent.replanning;
     const review = policy?.review;
     if (!policy || !review)
-        throw new Error(`supervisor ${record.intent.id} does not review plans`);
+        throw new Error(`governor ${record.intent.id} does not review plans`);
     const proposalSchema = planProposalSchema(record, trigger);
     const reviewerSchema = {
         type: "object",
@@ -606,7 +655,7 @@ function plannerReviewScript(record, planId, initialCandidate, trigger) {
         "    stage('Review round ' + round);",
         "    const reviewersOut = await Promise.all(reviewers.map(async (specialist) => {",
         "      const prompt = [",
-        "        'Review this bounded supervisor plan candidate independently.',",
+        "        'Review this bounded governor plan candidate independently.',",
         "        'Return approve only when the candidate is complete, scoped, and satisfies the goal context.',",
         "        'Return revise for blocking defects. Return attention when human judgment is required.',",
         "        'Apply proposal_root_rule exactly; never require proposal.root to equal active_root.',",
@@ -626,7 +675,7 @@ function plannerReviewScript(record, planId, initialCandidate, trigger) {
         "    if (round > maxRevisionRounds) break;",
         "    stage('Revise round ' + round);",
         "    const revisionPrompt = [",
-        "      'Revise this supervisor plan candidate. Return a complete replacement candidate, not a patch.',",
+        "      'Revise this governor plan candidate. Return a complete replacement candidate, not a patch.',",
         "      'Do not merge reviewer text mechanically; satisfy the blocking findings within the frozen goal and template constraints.',",
         "      'Apply proposal_root_rule exactly; never require proposal.root to equal active_root.',",
         "      'Goal context: ' + JSON.stringify(goalContext),",
@@ -702,7 +751,7 @@ function normalizeReviewReceipt(input) {
     }
     status ??= "attention";
     return {
-        schema_version: SUPERVISOR_PLAN_SCHEMA_VERSION,
+        schema_version: GOVERNOR_PLAN_SCHEMA_VERSION,
         plan_id: input.request.id,
         status,
         candidate_sha256: candidateDigest(candidate),
@@ -789,12 +838,12 @@ function reconstructReviewReceiptFromProof(input) {
 }
 function recoverReviewWorkflowResult(coordRoot, goalId, planId, proof, expectedSpecialists) {
     const inputPath = reviewInputPath(coordRoot, goalId, planId);
-    const reviewInput = readBoundedJson(inputPath, "supervisor plan review input");
-    const journal = readVerifiedWorkflowJournal(coordRoot, reviewWorkflowRunId(planId), proof);
+    const reviewInput = readBoundedJson(inputPath, "governor plan review input");
+    const transcript = readVerifiedWorkflowTranscript(coordRoot, reviewWorkflowRunId(planId), proof);
     const starts = new Map();
     const byRound = new Map();
     let currentCandidate = reviewInput.candidate;
-    for (const line of journal.split("\n")) {
+    for (const line of transcript.split("\n")) {
         if (!line.trim())
             continue;
         const event = JSON.parse(line);
@@ -805,7 +854,7 @@ function recoverReviewWorkflowResult(coordRoot, goalId, planId, proof, expectedS
         }
         if (event.event !== "agent.end" || event.result_kind !== "json")
             continue;
-        const round = workflowJournalRound(event.stage);
+        const round = workflowTranscriptRound(event.stage);
         if (!round)
             continue;
         let record = byRound.get(round.round);
@@ -816,7 +865,7 @@ function recoverReviewWorkflowResult(coordRoot, goalId, planId, proof, expectedS
         if (round.kind === "review") {
             const specialist = typeof event.id === "string" ? starts.get(event.id)?.specialist : undefined;
             if (!event.result || typeof event.result !== "object" || Array.isArray(event.result)) {
-                throw new Error("supervisor plan review journal contains an invalid reviewer result");
+                throw new Error("governor plan review transcript contains an invalid reviewer result");
             }
             record.reviewers.push({
                 specialist,
@@ -848,18 +897,18 @@ function recoverReviewWorkflowResult(coordRoot, goalId, planId, proof, expectedS
         result: { rounds },
     };
 }
-function readVerifiedWorkflowJournal(coordRoot, runId, proof) {
-    const journalPath = join(coordRoot, ".harnery", "workflows", runId, proof.integrity.journal.path);
-    const journal = readFileSync(journalPath, "utf8");
-    const bytes = Buffer.byteLength(journal);
-    if (bytes <= 0 || bytes > MAX_RECORD_BYTES || bytes !== proof.integrity.journal.bytes) {
-        throw new Error(`supervisor plan review journal does not match proof integrity`);
-    }
-    const sha256 = createHash("sha256").update(journal).digest("hex");
-    if (sha256 !== proof.integrity.journal.sha256) {
-        throw new Error(`supervisor plan review journal does not match proof integrity`);
-    }
-    return journal;
+function readVerifiedWorkflowTranscript(coordRoot, runId, proof) {
+    const transcriptPath = join(coordRoot, ".harnery", "workflows", runId, proof.integrity.transcript.path);
+    const transcript = readFileSync(transcriptPath, "utf8");
+    const bytes = Buffer.byteLength(transcript);
+    if (bytes <= 0 || bytes > MAX_RECORD_BYTES || bytes !== proof.integrity.transcript.bytes) {
+        throw new Error(`governor plan review transcript does not match proof integrity`);
+    }
+    const sha256 = createHash("sha256").update(transcript).digest("hex");
+    if (sha256 !== proof.integrity.transcript.sha256) {
+        throw new Error(`governor plan review transcript does not match proof integrity`);
+    }
+    return transcript;
 }
 function orderRecoveredReviewers(raw, expectedSpecialists) {
     if (!Array.isArray(raw) || raw.length !== expectedSpecialists.length)
@@ -903,16 +952,16 @@ function aggregateRecoveredReviewers(reviewers) {
 }
 function assertResultDigest(raw, expected, runId) {
     if (!expected) {
-        throw new Error(`supervisor plan review proof ${runId} is missing its result digest`);
+        throw new Error(`governor plan review proof ${runId} is missing its result digest`);
     }
     const actual = digestResult(raw, "json");
     if (actual.kind !== expected.kind ||
         actual.sha256 !== expected.sha256 ||
         actual.bytes !== expected.bytes) {
-        throw new Error(`supervisor plan review result does not match proof digest`);
+        throw new Error(`governor plan review result does not match proof digest`);
     }
 }
-function workflowJournalRound(stage) {
+function workflowTranscriptRound(stage) {
     if (typeof stage !== "string")
         return undefined;
     const review = /^Review round ([1-9][0-9]*)$/.exec(stage);
@@ -946,7 +995,7 @@ function hasReviewRecoveryEvidence(coordRoot, goalId, planId) {
 function planProposalSchema(record, trigger) {
     const policy = record.intent.replanning;
     if (!policy)
-        throw new Error(`supervisor ${record.intent.id} does not allow replanning`);
+        throw new Error(`governor ${record.intent.id} does not allow replanning`);
     const rationale = { type: "string", minLength: 1, maxLength: MAX_REASON };
     const workItem = {
         type: "object",
@@ -1037,7 +1086,7 @@ function planProposalSchema(record, trigger) {
 function normalizeProposal(planId, raw, record, previouslyApplied, trigger, preservedProposedAt) {
     const policy = record.intent.replanning;
     if (!policy)
-        throw new Error(`supervisor ${record.intent.id} does not allow replanning`);
+        throw new Error(`governor ${record.intent.id} does not allow replanning`);
     if (!raw || typeof raw !== "object" || Array.isArray(raw)) {
         throw new Error("planner result must be an object");
     }
@@ -1056,7 +1105,7 @@ function normalizeProposal(planId, raw, record, previouslyApplied, trigger, pres
             throw new Error("mission completion may be proposed only at a milestone boundary");
         }
         return {
-            schema_version: SUPERVISOR_PLAN_SCHEMA_VERSION,
+            schema_version: GOVERNOR_PLAN_SCHEMA_VERSION,
             plan_id: planId,
             decision,
             rationale,
@@ -1143,7 +1192,7 @@ function normalizeProposal(planId, raw, record, previouslyApplied, trigger, pres
     if (unused.length)
         throw new Error(`plan contains work not reachable from root: ${unused.map((item) => item.key).join(", ")}`);
     return {
-        schema_version: SUPERVISOR_PLAN_SCHEMA_VERSION,
+        schema_version: GOVERNOR_PLAN_SCHEMA_VERSION,
         plan_id: planId,
         decision,
         rationale,
@@ -1195,9 +1244,9 @@ function planTrigger(record) {
 function appendPlanEvent(coordRootRaw, goalId, planId, input) {
     const coordRoot = resolve(coordRootRaw);
     const path = join(planDir(coordRoot, goalId, planId), "events.jsonl");
-    const current = readSupervisorPlan(coordRoot, goalId, planId).events;
+    const current = readGovernorPlan(coordRoot, goalId, planId).events;
     const event = {
-        schema_version: SUPERVISOR_PLAN_SCHEMA_VERSION,
+        schema_version: GOVERNOR_PLAN_SCHEMA_VERSION,
         plan_id: planId,
         seq: current.length + 1,
         ts: new Date().toISOString(),
@@ -1208,13 +1257,13 @@ function appendPlanEvent(coordRootRaw, goalId, planId, input) {
     const line = `${JSON.stringify(event)}\n`;
     const existing = existsSync(path) ? statSync(path).size : 0;
     if (existing + Buffer.byteLength(line) > MAX_EVENTS_BYTES) {
-        throw new Error("supervisor plan event log would exceed its byte limit");
+        throw new Error("governor plan event log would exceed its byte limit");
     }
     appendFileSync(path, line, { encoding: "utf8", mode: 0o600 });
     chmodSync(path, 0o600);
 }
 function appendPlanEventIfMissing(coordRoot, goalId, planId, eventType, input) {
-    const plan = readSupervisorPlan(coordRoot, goalId, planId);
+    const plan = readGovernorPlan(coordRoot, goalId, planId);
     if (plan.events.some((event) => event.event === eventType))
         return;
     appendPlanEvent(coordRoot, goalId, planId, input);
@@ -1262,7 +1311,7 @@ function writeExclusive(path, body, label) {
     }
 }
 function planDir(coordRoot, goalId, planId) {
-    return join(coordRoot, ".harnery", "supervisors", goalId, "plans", planId);
+    return join(coordRoot, ".harnery", "governors", goalId, "plans", planId);
 }
 function planScriptPath(coordRoot, goalId, planId) {
     return join(planDir(coordRoot, goalId, planId), "planner.mjs");

package/dist/core/governor/read.d.ts

@@ -0,0 +1,6 @@
+export { readGovernorPlan, readGovernorPlanReviewReceipt, readGovernorPlans, } from "./plan-read.js";
+export { GOVERNOR_PLAN_SCHEMA_VERSION, type GovernorPlanEvent, type GovernorPlanEventType, type GovernorPlanHistory, type GovernorPlanMilestone, type GovernorPlanOutcome, type GovernorPlanProposal, type GovernorPlanRecord, type GovernorPlanRequest, type GovernorPlanReviewFinding, type GovernorPlanReviewReceipt, type GovernorPlanReviewReviewer, type GovernorPlanReviewRound, type GovernorPlanReviewStatus, type GovernorPlanReviewSummary, type GovernorPlanReviewVerdict, type GovernorPlanStatus, type GovernorPlanTemplate, type GovernorPlanWorkSpec, type GovernorReplanningPolicy, MAX_GOVERNOR_PLAN_REVIEWERS, MAX_GOVERNOR_PLAN_REVISION_ROUNDS, } from "./plan-types.js";
+export type { GovernorServiceConfig, GovernorServiceGoalRuntime, GovernorServiceGoalState, GovernorServiceProcessState, GovernorServiceRuntime, GovernorServiceStatus, GovernorServiceStatusRecord, } from "./service.js";
+export { governorServiceLogPath, readGovernorServiceConfig, readGovernorServiceRuntime, readGovernorServiceStatus, } from "./service-read.js";
+export { assertGovernorId, collectGovernorWork, GOVERNOR_INTENT_SCHEMA_VERSION, type GovernorAutomationPolicy, type GovernorIntent, type GovernorLimits, type GovernorMission, type GovernorNextAction, type GovernorProjection, type GovernorRecord, type GovernorState, listGovernors, readGovernor, } from "./state.js";
+//# sourceMappingURL=read.d.ts.map

package/dist/core/governor/read.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"read.d.ts","sourceRoot":"","sources":["../../../src/core/governor/read.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAChB,6BAA6B,EAC7B,iBAAiB,GAClB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,4BAA4B,EAC5B,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,EAC1B,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,EAC1B,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,KAAK,yBAAyB,EAC9B,KAAK,yBAAyB,EAC9B,KAAK,0BAA0B,EAC/B,KAAK,uBAAuB,EAC5B,KAAK,wBAAwB,EAC7B,KAAK,yBAAyB,EAC9B,KAAK,yBAAyB,EAC9B,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,EACzB,KAAK,wBAAwB,EAC7B,2BAA2B,EAC3B,iCAAiC,GAClC,MAAM,iBAAiB,CAAC;AACzB,YAAY,EACV,qBAAqB,EACrB,0BAA0B,EAC1B,wBAAwB,EACxB,2BAA2B,EAC3B,sBAAsB,EACtB,qBAAqB,EACrB,2BAA2B,GAC5B,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,sBAAsB,EACtB,yBAAyB,EACzB,0BAA0B,EAC1B,yBAAyB,GAC1B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,gBAAgB,EAChB,mBAAmB,EACnB,8BAA8B,EAC9B,KAAK,wBAAwB,EAC7B,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,KAAK,cAAc,EACnB,KAAK,aAAa,EAClB,aAAa,EACb,YAAY,GACb,MAAM,YAAY,CAAC"}

package/dist/core/governor/read.js

@@ -0,0 +1,4 @@
+export { readGovernorPlan, readGovernorPlanReviewReceipt, readGovernorPlans, } from "./plan-read.js";
+export { GOVERNOR_PLAN_SCHEMA_VERSION, MAX_GOVERNOR_PLAN_REVIEWERS, MAX_GOVERNOR_PLAN_REVISION_ROUNDS, } from "./plan-types.js";
+export { governorServiceLogPath, readGovernorServiceConfig, readGovernorServiceRuntime, readGovernorServiceStatus, } from "./service-read.js";
+export { assertGovernorId, collectGovernorWork, GOVERNOR_INTENT_SCHEMA_VERSION, listGovernors, readGovernor, } from "./state.js";