harnery 0.32.0 → 0.34.0

package/dist/core/events/v3/writer.d.ts

@@ -0,0 +1,56 @@
+import type { EventV3 } from "./contract.js";
+export declare const EVENT_V3_LEDGER_RELATIVE_ROOT: ".harnery/ledgers/v3";
+export type EventV3DurabilityState = "committed" | "ready";
+export interface WriteEventV3Result {
+    state: EventV3DurabilityState;
+    event_id: string;
+    row_digest: `sha256:${string}`;
+    ready_path?: string;
+    diagnostic_code?: "wal_drain_failed";
+}
+export interface WriteEventV3Options {
+    leaseMs?: number;
+    /**
+     * Leave the durable row in the ready WAL instead of draining it into the
+     * active authority during this call. A later `drainReadyEventsV3` commits
+     * the batch under one append lease. Production writers default to false;
+     * the option exists for matched harness-cost experiments.
+     */
+    deferDrain?: boolean;
+    now?: () => number;
+    onStep?: (step: EventV3WriteStep, eventId?: string) => void;
+}
+export type EventV3WriteStep = "ready_temp_flushed" | "ready_published" | "active_tail_repaired" | "active_row_appended" | "active_row_flushed" | "receipt_committed" | "receipt_removed";
+/**
+ * Persist one already-normalized V3 event through the spool-first WAL.
+ *
+ * A successful ready rename is the durability boundary. Lease contention or
+ * append failure leaves that ready record recoverable and returns `ready`
+ * instead of changing the producing tool's result.
+ */
+export declare function writeEventV3(coordRoot: string, event: EventV3, options?: WriteEventV3Options): WriteEventV3Result;
+/** Drain every durable ready record under the fenced append lease. */
+export declare function drainReadyEventsV3(coordRoot: string, options?: WriteEventV3Options): number;
+export declare function withEventV3LedgerLease<T>(coordRoot: string, options: WriteEventV3Options, operation: () => T): T;
+export declare function drainReadyEventsUnderLeaseV3(paths: ReturnType<typeof eventV3Paths>, options?: WriteEventV3Options): number;
+export declare function eventV3Paths(coordRoot: string): {
+    root: string;
+    active: string;
+    catalog: string;
+    spool: string;
+    diagnostics: string;
+    segments: string;
+    authorityOutbox: string;
+    lease: string;
+};
+export declare function ensureEventV3Layout(coordRoot: string): {
+    root: string;
+    active: string;
+    catalog: string;
+    spool: string;
+    diagnostics: string;
+    segments: string;
+    authorityOutbox: string;
+    lease: string;
+};
+//# sourceMappingURL=writer.d.ts.map

package/dist/core/events/v3/writer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"writer.d.ts","sourceRoot":"","sources":["../../../../src/core/events/v3/writer.ts"],"names":[],"mappings":"AAwBA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAO7C,eAAO,MAAM,6BAA6B,EAAG,qBAA8B,CAAC;AAE5E,MAAM,MAAM,sBAAsB,GAAG,WAAW,GAAG,OAAO,CAAC;AAE3D,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,sBAAsB,CAAC;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,UAAU,MAAM,EAAE,CAAC;IAC/B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,kBAAkB,CAAC;CACtC;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;OAKG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,gBAAgB,EAAE,OAAO,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7D;AAED,MAAM,MAAM,gBAAgB,GACxB,oBAAoB,GACpB,iBAAiB,GACjB,sBAAsB,GACtB,qBAAqB,GACrB,oBAAoB,GACpB,mBAAmB,GACnB,iBAAiB,CAAC;AAEtB;;;;;;GAMG;AACH,wBAAgB,YAAY,CAC1B,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,OAAO,EACd,OAAO,GAAE,mBAAwB,GAChC,kBAAkB,CA4CpB;AAED,sEAAsE;AACtE,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,GAAE,mBAAwB,GAAG,MAAM,CAK/F;AAED,wBAAgB,sBAAsB,CAAC,CAAC,EACtC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,mBAAmB,EAC5B,SAAS,EAAE,MAAM,CAAC,GACjB,CAAC,CAoBH;AAED,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,UAAU,CAAC,OAAO,YAAY,CAAC,EACtC,OAAO,GAAE,mBAAwB,GAChC,MAAM,CA2CR;AAsDD,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM;;;;;;;;;EAY7C;AAED,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM;;;;;;;;;EA8BpD"}

package/dist/core/events/v3/writer.js

@@ -0,0 +1,335 @@
+import { createHash, randomUUID } from "node:crypto";
+import { chmodSync, closeSync, existsSync, fsyncSync, lstatSync, mkdirSync, openSync, readdirSync, readFileSync, readSync, renameSync, statSync, truncateSync, unlinkSync, writeFileSync, writeSync, } from "node:fs";
+import { hostname } from "node:os";
+import { join, resolve } from "node:path";
+import { fsyncParentDirectory } from "../../workflow/durable-record.js";
+import { acquireNoClobberLease } from "../../workflow/workspaces/leases.js";
+import { canonicalJsonV3, sha256V3 } from "./canonical.js";
+import { EVENT_V3_SCHEMA_DIGEST } from "./generated.js";
+import { assertEventV3 } from "./validate.js";
+const MAX_LINE_BYTES = 16 * 1024;
+const DEFAULT_LEASE_MS = 5_000;
+export const EVENT_V3_LEDGER_RELATIVE_ROOT = ".harnery/ledgers/v3";
+/**
+ * Persist one already-normalized V3 event through the spool-first WAL.
+ *
+ * A successful ready rename is the durability boundary. Lease contention or
+ * append failure leaves that ready record recoverable and returns `ready`
+ * instead of changing the producing tool's result.
+ */
+export function writeEventV3(coordRoot, event, options = {}) {
+    assertEventV3(event);
+    if (event.contract.schema_digest !== EVENT_V3_SCHEMA_DIGEST) {
+        throw new Error("event schema digest is not accepted by this V3 writer");
+    }
+    const row = `${canonicalJsonV3(event)}\n`;
+    const bytes = Buffer.byteLength(row, "utf8");
+    if (bytes > MAX_LINE_BYTES) {
+        throw new Error(`event exceeds the V3 ${MAX_LINE_BYTES}-byte row limit`);
+    }
+    const paths = ensureEventV3Layout(coordRoot);
+    const rowDigest = sha256V3(row);
+    const readyName = `${String(event.producer.sequence).padStart(16, "0")}-${event.event_id}-${rowDigest.slice(7)}.ready`;
+    const readyPath = join(paths.spool, readyName);
+    writeReadyRecord(paths.spool, readyPath, row, event.event_id, options.onStep);
+    if (options.deferDrain) {
+        return {
+            state: "ready",
+            event_id: event.event_id,
+            row_digest: rowDigest,
+            ready_path: readyPath,
+        };
+    }
+    try {
+        drainReadyEventsV3(coordRoot, options);
+    }
+    catch {
+        return {
+            state: "ready",
+            event_id: event.event_id,
+            row_digest: rowDigest,
+            ready_path: readyPath,
+            diagnostic_code: "wal_drain_failed",
+        };
+    }
+    return existsSync(readyPath)
+        ? {
+            state: "ready",
+            event_id: event.event_id,
+            row_digest: rowDigest,
+            ready_path: readyPath,
+        }
+        : { state: "committed", event_id: event.event_id, row_digest: rowDigest };
+}
+/** Drain every durable ready record under the fenced append lease. */
+export function drainReadyEventsV3(coordRoot, options = {}) {
+    const paths = ensureEventV3Layout(coordRoot);
+    return withEventV3LedgerLease(coordRoot, options, () => drainReadyEventsUnderLeaseV3(paths, options));
+}
+export function withEventV3LedgerLease(coordRoot, options, operation) {
+    const paths = ensureEventV3Layout(coordRoot);
+    const authority = createHash("sha256")
+        .update(resolve(coordRoot))
+        .update("\0")
+        .update(EVENT_V3_SCHEMA_DIGEST)
+        .digest("hex");
+    const lease = acquireNoClobberLease({
+        path: paths.lease,
+        scope: "event-v3-append",
+        authoritySha256: authority,
+        staleAfterMs: options.leaseMs ?? DEFAULT_LEASE_MS,
+        now: options.now,
+        validateStaleOwner: (owner) => owner.host === hostname() && !pidIsAlive(owner.pid),
+    });
+    try {
+        return operation();
+    }
+    finally {
+        lease.release();
+    }
+}
+export function drainReadyEventsUnderLeaseV3(paths, options = {}) {
+    if (repairUnterminatedActiveFrame(paths.active)) {
+        options.onStep?.("active_tail_repaired");
+    }
+    requeueCommittedReceipts(paths.spool);
+    const readyNames = readdirSync(paths.spool)
+        .filter((name) => name.endsWith(".ready"))
+        .sort();
+    if (readyNames.length === 0)
+        return 0;
+    const readyRows = causallyOrderedReadyRows(readyNames.map((readyName) => {
+        const readyPath = join(paths.spool, readyName);
+        const row = readAndValidateReadyRow(readyPath);
+        return {
+            readyName,
+            readyPath,
+            row,
+            event: JSON.parse(row),
+        };
+    }));
+    const activeFd = openSync(paths.active, "a", 0o600);
+    let committed = 0;
+    try {
+        for (const { readyName, readyPath, row } of readyRows) {
+            const eventId = eventIdFromReadyName(readyName);
+            writeSync(activeFd, row, undefined, "utf8");
+            options.onStep?.("active_row_appended", eventId);
+            fsyncSync(activeFd);
+            options.onStep?.("active_row_flushed", eventId);
+            const committedPath = `${readyPath.slice(0, -".ready".length)}.committed`;
+            renameSync(readyPath, committedPath);
+            fsyncParentDirectory(committedPath);
+            options.onStep?.("receipt_committed", eventId);
+            unlinkSync(committedPath);
+            fsyncParentDirectory(committedPath);
+            options.onStep?.("receipt_removed", eventId);
+            committed += 1;
+        }
+    }
+    finally {
+        closeSync(activeFd);
+    }
+    return committed;
+}
+/**
+ * Keep the spool's deterministic filename order except where a ready event
+ * names another ready event as a cause. Those dependencies are committed
+ * first; a cycle stays in the WAL and never poisons the active authority.
+ */
+function causallyOrderedReadyRows(rows) {
+    const pending = new Map(rows.map((row) => [row.event.event_id, row]));
+    const ordered = [];
+    while (pending.size > 0) {
+        const next = rows.find(({ event }) => {
+            const causes = event.links.caused_by;
+            return pending.has(event.event_id) && causes.every((eventId) => !pending.has(eventId));
+        });
+        if (!next)
+            throw new Error("ready V3 events contain a causal dependency cycle");
+        pending.delete(next.event.event_id);
+        ordered.push(next);
+    }
+    return ordered;
+}
+/**
+ * A `.committed` receipt is created only after the active row is flushed. If
+ * the process dies before unlinking it, replaying the exact canonical row is
+ * safe: the validating reader deduplicates the event ID and detects conflicts.
+ */
+function requeueCommittedReceipts(spool) {
+    const committedNames = readdirSync(spool)
+        .filter((name) => name.endsWith(".committed"))
+        .sort();
+    for (const committedName of committedNames) {
+        const committedPath = join(spool, committedName);
+        readAndValidateReadyRow(committedPath);
+        const readyPath = `${committedPath.slice(0, -".committed".length)}.ready`;
+        if (existsSync(readyPath)) {
+            if (readFileSync(readyPath, "utf8") !== readFileSync(committedPath, "utf8")) {
+                throw new Error("committed and ready receipts conflict");
+            }
+            unlinkSync(committedPath);
+        }
+        else {
+            renameSync(committedPath, readyPath);
+        }
+        fsyncParentDirectory(readyPath);
+    }
+}
+export function eventV3Paths(coordRoot) {
+    const root = join(resolve(coordRoot), EVENT_V3_LEDGER_RELATIVE_ROOT);
+    return {
+        root,
+        active: join(root, "active.ndjson"),
+        catalog: join(root, "catalog.json"),
+        spool: join(root, "spool"),
+        diagnostics: join(root, "diagnostics"),
+        segments: join(root, "segments"),
+        authorityOutbox: join(root, "authority-outbox"),
+        lease: join(root, "append-lease"),
+    };
+}
+export function ensureEventV3Layout(coordRoot) {
+    assertSupportedPath(coordRoot);
+    const paths = eventV3Paths(coordRoot);
+    for (const path of [
+        paths.root,
+        paths.spool,
+        paths.diagnostics,
+        paths.segments,
+        paths.authorityOutbox,
+    ]) {
+        mkdirSync(path, { recursive: true, mode: 0o700 });
+        chmodSync(path, 0o700);
+    }
+    if (!existsSync(paths.active)) {
+        let fd;
+        try {
+            fd = openSync(paths.active, "wx", 0o600);
+            fsyncSync(fd);
+            fsyncParentDirectory(paths.active);
+        }
+        catch (error) {
+            if (error.code !== "EEXIST")
+                throw error;
+        }
+        finally {
+            if (fd !== undefined)
+                closeSync(fd);
+        }
+    }
+    const active = lstatSync(paths.active);
+    if (!active.isFile() || active.isSymbolicLink() || (active.mode & 0o077) !== 0) {
+        throw new Error("active V3 ledger must be an owner-only regular file");
+    }
+    return paths;
+}
+function writeReadyRecord(spool, readyPath, row, eventId, onStep) {
+    const temporary = join(spool, `.tmp-${process.pid}-${randomUUID()}`);
+    let fd;
+    try {
+        fd = openSync(temporary, "wx", 0o600);
+        writeFileSync(fd, row, "utf8");
+        fsyncSync(fd);
+        onStep?.("ready_temp_flushed", eventId);
+        closeSync(fd);
+        fd = undefined;
+        renameSync(temporary, readyPath);
+        fsyncParentDirectory(readyPath);
+        onStep?.("ready_published", eventId);
+    }
+    finally {
+        if (fd !== undefined)
+            closeSync(fd);
+        if (existsSync(temporary))
+            unlinkSync(temporary);
+    }
+}
+function readAndValidateReadyRow(path) {
+    const size = statSync(path).size;
+    if (size <= 1 || size > MAX_LINE_BYTES)
+        throw new Error("ready event has invalid size");
+    const row = readFileSync(path, "utf8");
+    if (!row.endsWith("\n") || row.slice(0, -1).includes("\n")) {
+        throw new Error("ready event is not one complete frame");
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(row);
+    }
+    catch {
+        throw new Error("ready event is not valid JSON");
+    }
+    assertEventV3(parsed);
+    if (`${canonicalJsonV3(parsed)}\n` !== row) {
+        throw new Error("ready event is not canonically serialized");
+    }
+    return row;
+}
+function repairUnterminatedActiveFrame(activePath) {
+    const size = statSync(activePath).size;
+    if (size === 0)
+        return false;
+    const tailBytes = Math.min(size, MAX_LINE_BYTES + 1);
+    const fd = openSync(activePath, "r");
+    const tail = Buffer.allocUnsafe(tailBytes);
+    try {
+        const bytesRead = readFileTail(fd, tail, size - tailBytes);
+        if (bytesRead > 0 && tail[bytesRead - 1] === 0x0a)
+            return false;
+        const lastNewline = tail.lastIndexOf(0x0a, bytesRead - 1);
+        if (lastNewline < 0 && size > MAX_LINE_BYTES) {
+            throw new Error("active V3 tail exceeds the frame limit without a boundary");
+        }
+        const repairedSize = size - tailBytes + Math.max(0, lastNewline + 1);
+        truncateSync(activePath, repairedSize);
+    }
+    finally {
+        closeSync(fd);
+    }
+    const repairFd = openSync(activePath, "r+");
+    try {
+        fsyncSync(repairFd);
+    }
+    finally {
+        closeSync(repairFd);
+    }
+    fsyncParentDirectory(activePath);
+    return true;
+}
+function eventIdFromReadyName(name) {
+    const match = name.match(/^\d{16}-(evt_[0-9a-f-]{36})-/);
+    return match?.[1];
+}
+function readFileTail(fd, buffer, position) {
+    let read = 0;
+    while (read < buffer.length) {
+        const count = requireReadSync(fd, buffer, read, buffer.length - read, position + read);
+        if (count === 0)
+            break;
+        read += count;
+    }
+    return read;
+}
+function requireReadSync(fd, buffer, offset, length, position) {
+    // Kept in one helper so the storage state machine has a single positional-read seam.
+    return readSync(fd, buffer, offset, length, position);
+}
+function pidIsAlive(pid) {
+    if (!Number.isSafeInteger(pid) || pid < 1)
+        return false;
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch (error) {
+        return error.code !== "ESRCH";
+    }
+}
+function assertSupportedPath(coordRoot) {
+    if (/^(\\\\|\/\/wsl(?:\.localhost)?\/)/i.test(coordRoot) ||
+        /^\/mnt\/[a-z](?:\/|$)/i.test(coordRoot)) {
+        throw new Error("V3 writer refuses direct UNC or cross-boundary coordination roots");
+    }
+}

package/dist/core/governor/index.d.ts

@@ -3,5 +3,5 @@ export { readGovernorPlan, readGovernorPlanReviewReceipt, readGovernorPlans, } f
 export { type CreateGovernorPlanTemplateInput, type CreateGovernorReplanningInput, GOVERNOR_PLAN_SCHEMA_VERSION, type GovernorPlanEvent, type GovernorPlanEventType, type GovernorPlanHistory, type GovernorPlanMilestone, type GovernorPlanOutcome, type GovernorPlanProposal, type GovernorPlanRecord, type GovernorPlanRequest, type GovernorPlanReviewFinding, type GovernorPlanReviewReceipt, type GovernorPlanReviewReviewer, type GovernorPlanReviewRound, type GovernorPlanReviewStatus, type GovernorPlanReviewSummary, type GovernorPlanReviewVerdict, type GovernorPlanStatus, type GovernorPlanTemplate, type GovernorPlanWorkSpec, type GovernorReplanningPolicy, MAX_GOVERNOR_PLAN_REVIEWERS, MAX_GOVERNOR_PLAN_REVISION_ROUNDS, } from "./plan-types.js";
 export { type GovernorDispatchOutcome, type GovernorRunReport, type GovernorStopReason, type RunGovernorInput, runGovernor, } from "./runner.js";
 export { type ConfigureGovernorServiceInput, configureGovernorService, GOVERNOR_SERVICE_CONFIG_SCHEMA_VERSION, GOVERNOR_SERVICE_RUNTIME_SCHEMA_VERSION, GOVERNOR_SERVICE_STATUS_SCHEMA_VERSION, type GovernorServiceConfig, type GovernorServiceEngineConfig, type GovernorServiceGoalRuntime, type GovernorServiceGoalState, type GovernorServiceProcessState, type GovernorServiceRuntime, type GovernorServiceStatus, type GovernorServiceStatusRecord, type GovernorServiceSweepOutcome, type GovernorServiceSweepReport, governorServiceLogPath, type RunGovernorServiceDaemonInput, type RunGovernorServiceSweepInput, readGovernorServiceConfig, readGovernorServiceRuntime, readGovernorServiceStatus, requestGovernorServiceStop, runGovernorServiceDaemon, runGovernorServiceSweep, spawnGovernorService, } from "./service.js";
-export { assertGovernorId, type CreateGovernorInput, type CreateGovernorMissionInput, collectGovernorWork, createGovernor, GOVERNOR_INTENT_SCHEMA_VERSION, type GovernorAutomationPolicy, type GovernorIntent, type GovernorLimits, type GovernorMission, type GovernorNextAction, type GovernorProjection, type GovernorRecord, type GovernorState, listGovernors, newGovernorId, readGovernor, } from "./state.js";
+export { assertGovernorId, type CreateGovernorInput, type CreateGovernorMissionInput, collectGovernorWork, createGovernor, GOVERNOR_INTENT_SCHEMA_VERSION, type GovernorAutomationPolicy, type GovernorIntent, type GovernorLimits, type GovernorListResult, type GovernorListWarning, type GovernorMission, type GovernorNextAction, type GovernorProjection, type GovernorRecord, type GovernorState, listGovernors, listGovernorsWithWarnings, newGovernorId, readGovernor, } from "./state.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/core/governor/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/governor/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,6BAA6B,EAC7B,kBAAkB,EAClB,qBAAqB,EACrB,iBAAiB,GAClB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,gBAAgB,EAChB,6BAA6B,EAC7B,iBAAiB,GAClB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,KAAK,+BAA+B,EACpC,KAAK,6BAA6B,EAClC,4BAA4B,EAC5B,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,EAC1B,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,EAC1B,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,KAAK,yBAAyB,EAC9B,KAAK,yBAAyB,EAC9B,KAAK,0BAA0B,EAC/B,KAAK,uBAAuB,EAC5B,KAAK,wBAAwB,EAC7B,KAAK,yBAAyB,EAC9B,KAAK,yBAAyB,EAC9B,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,EACzB,KAAK,wBAAwB,EAC7B,2BAA2B,EAC3B,iCAAiC,GAClC,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,KAAK,uBAAuB,EAC5B,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,gBAAgB,EACrB,WAAW,GACZ,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,KAAK,6BAA6B,EAClC,wBAAwB,EACxB,sCAAsC,EACtC,uCAAuC,EACvC,sCAAsC,EACtC,KAAK,qBAAqB,EAC1B,KAAK,2BAA2B,EAChC,KAAK,0BAA0B,EAC/B,KAAK,wBAAwB,EAC7B,KAAK,2BAA2B,EAChC,KAAK,sBAAsB,EAC3B,KAAK,qBAAqB,EAC1B,KAAK,2BAA2B,EAChC,KAAK,2BAA2B,EAChC,KAAK,0BAA0B,EAC/B,sBAAsB,EACtB,KAAK,6BAA6B,EAClC,KAAK,4BAA4B,EACjC,yBAAyB,EACzB,0BAA0B,EAC1B,yBAAyB,EACzB,0BAA0B,EAC1B,wBAAwB,EACxB,uBAAuB,EACvB,oBAAoB,GACrB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,gBAAgB,EAChB,KAAK,mBAAmB,EACxB,KAAK,0BAA0B,EAC/B,mBAAmB,EACnB,cAAc,EACd,8BAA8B,EAC9B,KAAK,wBAAwB,EAC7B,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,KAAK,cAAc,EACnB,KAAK,aAAa,EAClB,aAAa,EACb,aAAa,EACb,YAAY,GACb,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/governor/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,6BAA6B,EAC7B,kBAAkB,EAClB,qBAAqB,EACrB,iBAAiB,GAClB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,gBAAgB,EAChB,6BAA6B,EAC7B,iBAAiB,GAClB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,KAAK,+BAA+B,EACpC,KAAK,6BAA6B,EAClC,4BAA4B,EAC5B,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,EAC1B,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,EAC1B,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,KAAK,yBAAyB,EAC9B,KAAK,yBAAyB,EAC9B,KAAK,0BAA0B,EAC/B,KAAK,uBAAuB,EAC5B,KAAK,wBAAwB,EAC7B,KAAK,yBAAyB,EAC9B,KAAK,yBAAyB,EAC9B,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,EACzB,KAAK,wBAAwB,EAC7B,2BAA2B,EAC3B,iCAAiC,GAClC,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,KAAK,uBAAuB,EAC5B,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,gBAAgB,EACrB,WAAW,GACZ,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,KAAK,6BAA6B,EAClC,wBAAwB,EACxB,sCAAsC,EACtC,uCAAuC,EACvC,sCAAsC,EACtC,KAAK,qBAAqB,EAC1B,KAAK,2BAA2B,EAChC,KAAK,0BAA0B,EAC/B,KAAK,wBAAwB,EAC7B,KAAK,2BAA2B,EAChC,KAAK,sBAAsB,EAC3B,KAAK,qBAAqB,EAC1B,KAAK,2BAA2B,EAChC,KAAK,2BAA2B,EAChC,KAAK,0BAA0B,EAC/B,sBAAsB,EACtB,KAAK,6BAA6B,EAClC,KAAK,4BAA4B,EACjC,yBAAyB,EACzB,0BAA0B,EAC1B,yBAAyB,EACzB,0BAA0B,EAC1B,wBAAwB,EACxB,uBAAuB,EACvB,oBAAoB,GACrB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,gBAAgB,EAChB,KAAK,mBAAmB,EACxB,KAAK,0BAA0B,EAC/B,mBAAmB,EACnB,cAAc,EACd,8BAA8B,EAC9B,KAAK,wBAAwB,EAC7B,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,KAAK,eAAe,EACpB,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,KAAK,cAAc,EACnB,KAAK,aAAa,EAClB,aAAa,EACb,yBAAyB,EACzB,aAAa,EACb,YAAY,GACb,MAAM,YAAY,CAAC"}

package/dist/core/governor/index.js

@@ -3,4 +3,4 @@ export { readGovernorPlan, readGovernorPlanReviewReceipt, readGovernorPlans, } f
 export { GOVERNOR_PLAN_SCHEMA_VERSION, MAX_GOVERNOR_PLAN_REVIEWERS, MAX_GOVERNOR_PLAN_REVISION_ROUNDS, } from "./plan-types.js";
 export { runGovernor, } from "./runner.js";
 export { configureGovernorService, GOVERNOR_SERVICE_CONFIG_SCHEMA_VERSION, GOVERNOR_SERVICE_RUNTIME_SCHEMA_VERSION, GOVERNOR_SERVICE_STATUS_SCHEMA_VERSION, governorServiceLogPath, readGovernorServiceConfig, readGovernorServiceRuntime, readGovernorServiceStatus, requestGovernorServiceStop, runGovernorServiceDaemon, runGovernorServiceSweep, spawnGovernorService, } from "./service.js";
-export { assertGovernorId, collectGovernorWork, createGovernor, GOVERNOR_INTENT_SCHEMA_VERSION, listGovernors, newGovernorId, readGovernor, } from "./state.js";
+export { assertGovernorId, collectGovernorWork, createGovernor, GOVERNOR_INTENT_SCHEMA_VERSION, listGovernors, listGovernorsWithWarnings, newGovernorId, readGovernor, } from "./state.js";

package/dist/core/governor/plan-api.d.ts

@@ -1,4 +1,5 @@
 import type { GovernorPlanOutcome } from "./plan-types.js";
+import { type GovernorListWarning } from "./state.js";
 export declare function approveGovernorPlan(input: {
     coordRoot: string;
     goalId: string;
@@ -19,7 +20,7 @@ export declare function rejectGovernorPlan(input: {
  * `work reopen` can tell the difference between an item nothing is watching and one
  * whose mission has already been declared complete — the case where reopening the
  * item alone leaves it in `ready_work` that the governor will never dispatch. */
-export declare function findCompletedMissionGoverning(coordRoot: string, workId: string): string | undefined;
+export declare function findCompletedMissionGoverning(coordRoot: string, workId: string, onWarning?: (warning: GovernorListWarning) => void): string | undefined;
 /** ADR 0050: reopen an accepted mission completion by appending to the plan log.
  * Held under the goal lease so it cannot race a foreground governor run. */
 export declare function reopenGovernorMission(input: {

package/dist/core/governor/plan-api.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"plan-api.d.ts","sourceRoot":"","sources":["../../../src/core/governor/plan-api.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAS3D,wBAAgB,mBAAmB,CAAC,KAAK,EAAE;IACzC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GAAG,mBAAmB,CActB;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB,GAAG,mBAAmB,CActB;AAED;;;;;iFAKiF;AACjF,wBAAgB,6BAA6B,CAC3C,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,GACb,MAAM,GAAG,SAAS,CAQpB;AAED;4EAC4E;AAC5E,wBAAgB,qBAAqB,CAAC,KAAK,EAAE;IAC3C,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB,GAAG,mBAAmB,CAatB;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB,GAAG,mBAAmB,CActB"}
+{"version":3,"file":"plan-api.d.ts","sourceRoot":"","sources":["../../../src/core/governor/plan-api.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAO3D,OAAO,EAEL,KAAK,mBAAmB,EAGzB,MAAM,YAAY,CAAC;AAEpB,wBAAgB,mBAAmB,CAAC,KAAK,EAAE;IACzC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GAAG,mBAAmB,CActB;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB,GAAG,mBAAmB,CActB;AAED;;;;;iFAKiF;AACjF,wBAAgB,6BAA6B,CAC3C,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,mBAAmB,KAAK,IAAI,GACjD,MAAM,GAAG,SAAS,CAUpB;AAED;4EAC4E;AAC5E,wBAAgB,qBAAqB,CAAC,KAAK,EAAE;IAC3C,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB,GAAG,mBAAmB,CAatB;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB,GAAG,mBAAmB,CActB"}

package/dist/core/governor/plan-api.js

@@ -1,5 +1,5 @@
 import { applyGovernorPlanProposal, rejectGovernorPlanProposal, reopenGovernorMissionPlan, retryGovernorPlanProposal, } from "./planning.js";
-import { acquireGovernorLease, listGovernors, readGovernorIgnoringLease } from "./state.js";
+import { acquireGovernorLease, listGovernorsWithWarnings, readGovernorIgnoringLease, } from "./state.js";
 export function approveGovernorPlan(input) {
     const actor = input.actor?.trim() || `governor:${input.goalId}`;
     const release = acquireGovernorLease(input.coordRoot, input.goalId);
@@ -38,8 +38,11 @@ export function rejectGovernorPlan(input) {
  * `work reopen` can tell the difference between an item nothing is watching and one
  * whose mission has already been declared complete — the case where reopening the
  * item alone leaves it in `ready_work` that the governor will never dispatch. */
-export function findCompletedMissionGoverning(coordRoot, workId) {
-    for (const record of listGovernors(coordRoot)) {
+export function findCompletedMissionGoverning(coordRoot, workId, onWarning) {
+    const result = listGovernorsWithWarnings(coordRoot);
+    for (const warning of result.warnings)
+        onWarning?.(warning);
+    for (const record of result.records) {
         if (record.projection.state !== "succeeded" || !record.intent.mission)
             continue;
         if (record.projection.root_work_id === workId || record.projection.work_ids.includes(workId)) {

package/dist/core/governor/read.d.ts

@@ -2,5 +2,5 @@ export { readGovernorPlan, readGovernorPlanReviewReceipt, readGovernorPlans, } f
 export { GOVERNOR_PLAN_SCHEMA_VERSION, type GovernorPlanEvent, type GovernorPlanEventType, type GovernorPlanHistory, type GovernorPlanMilestone, type GovernorPlanOutcome, type GovernorPlanProposal, type GovernorPlanRecord, type GovernorPlanRequest, type GovernorPlanReviewFinding, type GovernorPlanReviewReceipt, type GovernorPlanReviewReviewer, type GovernorPlanReviewRound, type GovernorPlanReviewStatus, type GovernorPlanReviewSummary, type GovernorPlanReviewVerdict, type GovernorPlanStatus, type GovernorPlanTemplate, type GovernorPlanWorkSpec, type GovernorReplanningPolicy, MAX_GOVERNOR_PLAN_REVIEWERS, MAX_GOVERNOR_PLAN_REVISION_ROUNDS, } from "./plan-types.js";
 export type { GovernorServiceConfig, GovernorServiceGoalRuntime, GovernorServiceGoalState, GovernorServiceProcessState, GovernorServiceRuntime, GovernorServiceStatus, GovernorServiceStatusRecord, } from "./service.js";
 export { governorServiceLogPath, readGovernorServiceConfig, readGovernorServiceRuntime, readGovernorServiceStatus, } from "./service-read.js";
-export { assertGovernorId, collectGovernorWork, GOVERNOR_INTENT_SCHEMA_VERSION, type GovernorAutomationPolicy, type GovernorIntent, type GovernorLimits, type GovernorMission, type GovernorNextAction, type GovernorProjection, type GovernorRecord, type GovernorState, listGovernors, readGovernor, } from "./state.js";
+export { assertGovernorId, collectGovernorWork, GOVERNOR_INTENT_SCHEMA_VERSION, type GovernorAutomationPolicy, type GovernorIntent, type GovernorLimits, type GovernorListResult, type GovernorListWarning, type GovernorMission, type GovernorNextAction, type GovernorProjection, type GovernorRecord, type GovernorState, listGovernors, listGovernorsWithWarnings, readGovernor, } from "./state.js";
 //# sourceMappingURL=read.d.ts.map

package/dist/core/governor/read.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"read.d.ts","sourceRoot":"","sources":["../../../src/core/governor/read.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAChB,6BAA6B,EAC7B,iBAAiB,GAClB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,4BAA4B,EAC5B,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,EAC1B,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,EAC1B,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,KAAK,yBAAyB,EAC9B,KAAK,yBAAyB,EAC9B,KAAK,0BAA0B,EAC/B,KAAK,uBAAuB,EAC5B,KAAK,wBAAwB,EAC7B,KAAK,yBAAyB,EAC9B,KAAK,yBAAyB,EAC9B,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,EACzB,KAAK,wBAAwB,EAC7B,2BAA2B,EAC3B,iCAAiC,GAClC,MAAM,iBAAiB,CAAC;AACzB,YAAY,EACV,qBAAqB,EACrB,0BAA0B,EAC1B,wBAAwB,EACxB,2BAA2B,EAC3B,sBAAsB,EACtB,qBAAqB,EACrB,2BAA2B,GAC5B,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,sBAAsB,EACtB,yBAAyB,EACzB,0BAA0B,EAC1B,yBAAyB,GAC1B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,gBAAgB,EAChB,mBAAmB,EACnB,8BAA8B,EAC9B,KAAK,wBAAwB,EAC7B,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,KAAK,cAAc,EACnB,KAAK,aAAa,EAClB,aAAa,EACb,YAAY,GACb,MAAM,YAAY,CAAC"}
+{"version":3,"file":"read.d.ts","sourceRoot":"","sources":["../../../src/core/governor/read.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAChB,6BAA6B,EAC7B,iBAAiB,GAClB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,4BAA4B,EAC5B,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,EAC1B,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,EAC1B,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,KAAK,yBAAyB,EAC9B,KAAK,yBAAyB,EAC9B,KAAK,0BAA0B,EAC/B,KAAK,uBAAuB,EAC5B,KAAK,wBAAwB,EAC7B,KAAK,yBAAyB,EAC9B,KAAK,yBAAyB,EAC9B,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,EACzB,KAAK,wBAAwB,EAC7B,2BAA2B,EAC3B,iCAAiC,GAClC,MAAM,iBAAiB,CAAC;AACzB,YAAY,EACV,qBAAqB,EACrB,0BAA0B,EAC1B,wBAAwB,EACxB,2BAA2B,EAC3B,sBAAsB,EACtB,qBAAqB,EACrB,2BAA2B,GAC5B,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,sBAAsB,EACtB,yBAAyB,EACzB,0BAA0B,EAC1B,yBAAyB,GAC1B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,gBAAgB,EAChB,mBAAmB,EACnB,8BAA8B,EAC9B,KAAK,wBAAwB,EAC7B,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,KAAK,eAAe,EACpB,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,KAAK,cAAc,EACnB,KAAK,aAAa,EAClB,aAAa,EACb,yBAAyB,EACzB,YAAY,GACb,MAAM,YAAY,CAAC"}

package/dist/core/governor/read.js

@@ -1,4 +1,4 @@
 export { readGovernorPlan, readGovernorPlanReviewReceipt, readGovernorPlans, } from "./plan-read.js";
 export { GOVERNOR_PLAN_SCHEMA_VERSION, MAX_GOVERNOR_PLAN_REVIEWERS, MAX_GOVERNOR_PLAN_REVISION_ROUNDS, } from "./plan-types.js";
 export { governorServiceLogPath, readGovernorServiceConfig, readGovernorServiceRuntime, readGovernorServiceStatus, } from "./service-read.js";
-export { assertGovernorId, collectGovernorWork, GOVERNOR_INTENT_SCHEMA_VERSION, listGovernors, readGovernor, } from "./state.js";
+export { assertGovernorId, collectGovernorWork, GOVERNOR_INTENT_SCHEMA_VERSION, listGovernors, listGovernorsWithWarnings, readGovernor, } from "./state.js";

package/dist/core/governor/state.d.ts

@@ -92,6 +92,14 @@ export interface GovernorRecord {
     work: WorkRecord[];
     plans: GovernorPlanRecord[];
 }
+export interface GovernorListWarning {
+    goal_id: string;
+    reason: string;
+}
+export interface GovernorListResult {
+    records: GovernorRecord[];
+    warnings: GovernorListWarning[];
+}
 export interface CreateGovernorInput {
     coordRoot: string;
     rootWorkId?: string;
@@ -108,6 +116,7 @@ export declare function readGovernor(coordRoot: string, goalId: string): Governo
 /** @internal Runner seam; ignores the lease held by this governor process. */
 export declare function readGovernorIgnoringLease(coordRoot: string, goalId: string): GovernorRecord;
 export declare function listGovernors(coordRoot: string): GovernorRecord[];
+export declare function listGovernorsWithWarnings(coordRoot: string): GovernorListResult;
 export declare function collectGovernorWork(coordRoot: string, rootWorkId: string): WorkRecord[];
 export declare function assertGovernorId(goalId: string): void;
 export declare function newGovernorId(): string;

package/dist/core/governor/state.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"state.d.ts","sourceRoot":"","sources":["../../../src/core/governor/state.ts"],"names":[],"mappings":"AAeA,OAAO,EAA8B,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAG9E,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AAEtE,OAAO,EACL,KAAK,6BAA6B,EAElC,KAAK,kBAAkB,EACvB,KAAK,wBAAwB,EAI9B,MAAM,iBAAiB,CAAC;AAEzB,eAAO,MAAM,8BAA8B,EAAG,CAAU,CAAC;AAkBzD,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,wBAAwB;IACvC,oBAAoB,EAAE,OAAO,CAAC;IAC9B,eAAe,EAAE,OAAO,CAAC;IACzB,aAAa,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,0BAA0B;IACzC,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9B,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,cAAc;IAC7B,cAAc,EAAE,OAAO,8BAA8B,CAAC;IACtD,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC;IACvD,MAAM,EAAE,cAAc,CAAC;IACvB,UAAU,EAAE,wBAAwB,CAAC;IACrC,OAAO,CAAC,EAAE,eAAe,CAAC;IAC1B,UAAU,CAAC,EAAE,wBAAwB,CAAC;IACtC,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,aAAa,GACrB,OAAO,GACP,SAAS,GACT,oBAAoB,GACpB,SAAS,GACT,kBAAkB,GAClB,WAAW,CAAC;AAEhB,MAAM,MAAM,kBAAkB,GAC1B,KAAK,GACL,cAAc,GACd,kBAAkB,GAClB,QAAQ,GACR,OAAO,GACP,QAAQ,GACR,cAAc,GACd,gBAAgB,GAChB,aAAa,GACb,YAAY,GACZ,MAAM,CAAC;AAEX,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,KAAK,EAAE,aAAa,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,kBAAkB,CAAC;IAChC,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB;;sEAEkE;IAClE,qBAAqB,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACxE,aAAa,EAAE,MAAM,CAAC;IACtB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,kBAAkB,CAAC,EAAE,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAClD;;;;;;;;;OASG;IACH,kBAAkB,CAAC,EAAE;QACnB,kBAAkB,EAAE,MAAM,CAAC;QAC3B,mBAAmB,EAAE,MAAM,CAAC;KAC7B,CAAC;IACF,iBAAiB,EAAE,MAAM,EAAE,CAAC;CAC7B;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,cAAc,CAAC;IACvB,UAAU,EAAE,kBAAkB,CAAC;IAC/B,IAAI,EAAE,UAAU,EAAE,CAAC;IACnB,KAAK,EAAE,kBAAkB,EAAE,CAAC;CAC7B;AAED,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC,CAAC;IACjE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IACjC,UAAU,CAAC,EAAE,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAC/C,OAAO,CAAC,EAAE,0BAA0B,CAAC;IACrC,UAAU,CAAC,EAAE,6BAA6B,CAAC;CAC5C;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,mBAAmB,GAAG,cAAc,CAgDzE;AAED,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,cAAc,CAE9E;AAED,8EAA8E;AAC9E,wBAAgB,yBAAyB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,cAAc,CAE3F;AAED,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,cAAc,EAAE,CAWjE;AAED,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,UAAU,EAAE,CAcvF;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAErD;AAED,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAED,6EAA6E;AAC7E,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,IAAI,CA0ClF"}
+{"version":3,"file":"state.d.ts","sourceRoot":"","sources":["../../../src/core/governor/state.ts"],"names":[],"mappings":"AAeA,OAAO,EAA8B,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAG9E,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AAEtE,OAAO,EACL,KAAK,6BAA6B,EAElC,KAAK,kBAAkB,EACvB,KAAK,wBAAwB,EAI9B,MAAM,iBAAiB,CAAC;AAEzB,eAAO,MAAM,8BAA8B,EAAG,CAAU,CAAC;AAyBzD,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,wBAAwB;IACvC,oBAAoB,EAAE,OAAO,CAAC;IAC9B,eAAe,EAAE,OAAO,CAAC;IACzB,aAAa,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,0BAA0B;IACzC,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9B,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,cAAc;IAC7B,cAAc,EAAE,OAAO,8BAA8B,CAAC;IACtD,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC;IACvD,MAAM,EAAE,cAAc,CAAC;IACvB,UAAU,EAAE,wBAAwB,CAAC;IACrC,OAAO,CAAC,EAAE,eAAe,CAAC;IAC1B,UAAU,CAAC,EAAE,wBAAwB,CAAC;IACtC,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,aAAa,GACrB,OAAO,GACP,SAAS,GACT,oBAAoB,GACpB,SAAS,GACT,kBAAkB,GAClB,WAAW,CAAC;AAEhB,MAAM,MAAM,kBAAkB,GAC1B,KAAK,GACL,cAAc,GACd,kBAAkB,GAClB,QAAQ,GACR,OAAO,GACP,QAAQ,GACR,cAAc,GACd,gBAAgB,GAChB,aAAa,GACb,YAAY,GACZ,MAAM,CAAC;AAEX,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,KAAK,EAAE,aAAa,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,kBAAkB,CAAC;IAChC,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB;;sEAEkE;IAClE,qBAAqB,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACxE,aAAa,EAAE,MAAM,CAAC;IACtB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,kBAAkB,CAAC,EAAE,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAClD;;;;;;;;;OASG;IACH,kBAAkB,CAAC,EAAE;QACnB,kBAAkB,EAAE,MAAM,CAAC;QAC3B,mBAAmB,EAAE,MAAM,CAAC;KAC7B,CAAC;IACF,iBAAiB,EAAE,MAAM,EAAE,CAAC;CAC7B;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,cAAc,CAAC;IACvB,UAAU,EAAE,kBAAkB,CAAC;IAC/B,IAAI,EAAE,UAAU,EAAE,CAAC;IACnB,KAAK,EAAE,kBAAkB,EAAE,CAAC;CAC7B;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,cAAc,EAAE,CAAC;IAC1B,QAAQ,EAAE,mBAAmB,EAAE,CAAC;CACjC;AAED,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC,CAAC;IACjE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IACjC,UAAU,CAAC,EAAE,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAC/C,OAAO,CAAC,EAAE,0BAA0B,CAAC;IACrC,UAAU,CAAC,EAAE,6BAA6B,CAAC;CAC5C;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,mBAAmB,GAAG,cAAc,CAiDzE;AAED,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,cAAc,CAE9E;AAED,8EAA8E;AAC9E,wBAAgB,yBAAyB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,cAAc,CAE3F;AAED,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,cAAc,EAAE,CAEjE;AAED,wBAAgB,yBAAyB,CAAC,SAAS,EAAE,MAAM,GAAG,kBAAkB,CAmB/E;AAED,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,UAAU,EAAE,CAcvF;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAErD;AAED,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAED,6EAA6E;AAC7E,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,IAAI,CA0ClF"}

package/dist/core/governor/state.js

@@ -15,6 +15,13 @@ const MAX_ACCEPTANCE = 50;
 const MAX_INTENT_BYTES = 256 * 1024;
 const MAX_TEMPLATES = 20;
 const TEMPLATE_ID = /^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/;
+const GOVERNOR_SPECIALIST_PROFILE_KEYS = [
+    "instructions",
+    "adapter",
+    "effort",
+    "maxAttempts",
+];
+const GOVERNOR_SPECIALIST_PROFILE_KEY_SET = new Set(GOVERNOR_SPECIALIST_PROFILE_KEYS);
 const FOREIGN_LEASE_STALE_MS = 24 * 60 * 60 * 1_000;
 /** Ceiling on CONSECUTIVE uncharged (upstream) replans (ADR 0046). Because an
  * uncharged replan does not spend `max_replans`, an unending vendor outage would
@@ -27,6 +34,7 @@ export function createGovernor(input) {
     const coordRoot = resolve(input.coordRoot);
     const id = input.id ?? newGovernorId();
     assertGovernorId(id);
+    assertGovernorSpecialistProfileKeys(input.specialists);
     const mission = input.mission ? normalizeMission(input.mission) : undefined;
     if (mission && !input.replanning) {
         throw new Error("governor mission requires a replanning policy");
@@ -73,16 +81,30 @@ export function readGovernorIgnoringLease(coordRoot, goalId) {
     return readGovernorInternal(coordRoot, goalId, true);
 }
 export function listGovernors(coordRoot) {
+    return listGovernorsWithWarnings(coordRoot).records;
+}
+export function listGovernorsWithWarnings(coordRoot) {
     const base = join(resolve(coordRoot), ".harnery", "governors");
     if (!existsSync(base))
-        return [];
+        return { records: [], warnings: [] };
     const records = [];
+    const warnings = [];
     for (const name of readdirSync(base)) {
         if (!GOAL_ID.test(name) || !existsSync(governorIntentPath(coordRoot, name)))
             continue;
-        records.push(readGovernor(coordRoot, name));
+        try {
+            records.push(readGovernor(coordRoot, name));
+        }
+        catch (error) {
+            warnings.push({
+                goal_id: name,
+                reason: error instanceof Error ? error.message : String(error),
+            });
+        }
     }
-    return records.sort((left, right) => right.intent.created_at.localeCompare(left.intent.created_at));
+    records.sort((left, right) => right.intent.created_at.localeCompare(left.intent.created_at));
+    warnings.sort((left, right) => left.goal_id.localeCompare(right.goal_id));
+    return { records, warnings };
 }
 export function collectGovernorWork(coordRoot, rootWorkId) {
     const records = new Map();
@@ -665,6 +687,21 @@ function validateIntent(intent, goalId) {
     if (intent.replanning)
         validateReplanning(intent.replanning, specialists, intent.limits, goalId);
 }
+function assertGovernorSpecialistProfileKeys(specialists) {
+    if (!specialists || typeof specialists !== "object" || Array.isArray(specialists))
+        return;
+    for (const [id, profile] of Object.entries(specialists)) {
+        if (!profile || typeof profile !== "object" || Array.isArray(profile))
+            continue;
+        const unsupported = Object.keys(profile)
+            .filter((key) => !GOVERNOR_SPECIALIST_PROFILE_KEY_SET.has(key))
+            .sort();
+        if (unsupported.length === 0)
+            continue;
+        throw new Error(`governor specialist ${id} has unsupported key ${JSON.stringify(unsupported[0])}; ` +
+            `allowed keys: ${GOVERNOR_SPECIALIST_PROFILE_KEYS.join(", ")}`);
+    }
+}
 function normalizeMission(input) {
     if (!Array.isArray(input.acceptance)) {
         throw new Error("governor mission acceptance must be an array");

package/dist/core/guard/config.d.ts

@@ -0,0 +1,5 @@
+import type { RunQualityConfig, RunQualityConfigResult } from "./types.js";
+export declare const DEFAULT_RUN_QUALITY_CONFIG: RunQualityConfig;
+/** Read and validate the project-owned coord.run_quality object as one unit. */
+export declare function readRunQualityConfig(coordRoot: string): RunQualityConfigResult;
+//# sourceMappingURL=config.d.ts.map

package/dist/core/guard/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../src/core/guard/config.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gBAAgB,EAAE,sBAAsB,EAAkB,MAAM,YAAY,CAAC;AAE3F,eAAO,MAAM,0BAA0B,EAAE,gBAexC,CAAC;AAgBF,gFAAgF;AAChF,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,sBAAsB,CAyD9E"}