harnery 0.34.1 → 0.36.0

package/dist/core/events/v3/latency.js

@@ -1,10 +1,13 @@
-export const EVENT_V3_LATENCY_PROJECTION_VERSION = "event-v3-latency-v1";
+import { canonicalJsonV3, sha256V3 } from "./canonical.js";
+import { ADAPTER_WAIT_KINDS_V3 } from "./capabilities.js";
+export const EVENT_V3_LATENCY_PROJECTION_VERSION = "event-v3-latency-v3";
 export function projectLatencyV3(read) {
     if (!read.complete)
         throw new Error("latency projection requires a complete V3 ledger read");
     const events = read.events.map(({ event }) => event);
     const diagnostics = [];
     const terminalByTurn = new Map();
+    const telemetryByGeneration = latestTelemetryByGeneration(events);
     for (const event of events) {
         if (event.event_type !== "turn.completed")
             continue;
@@ -18,13 +21,13 @@ export function projectLatencyV3(read) {
     const turns = [...terminalByTurn.values()].map((terminal) => {
         const key = turnKey(terminal);
         const turnEvents = events.filter((event) => turnKey(event) === key);
-        return projectTurn(terminal, turnEvents, diagnostics);
+        return projectTurn(terminal, turnEvents, diagnostics, telemetryByGeneration.get(terminal.scope.generation_id ?? "") ?? null);
     });
     turns.sort((left, right) => left.generation_id.localeCompare(right.generation_id) ||
         left.turn_id.localeCompare(right.turn_id));
     return { projection_version: EVENT_V3_LATENCY_PROJECTION_VERSION, turns, diagnostics };
 }
-function projectTurn(terminal, events, diagnostics) {
+function projectTurn(terminal, events, diagnostics, telemetryCapabilities) {
     const span = record(terminal.payload.span);
     const wall = metricFromObservation(span.duration_ms, "turn_duration_unknown");
     const wallInterval = intervalFromSpan(terminal);
@@ -60,6 +63,9 @@ function projectTurn(terminal, events, diagnostics) {
         (expectedWaitCount !== undefined && expectedWaitCount !== endedWaitIds.size)) {
         waits.reasons.push("wait_terminal_count_mismatch");
     }
+    const waitCoverageComplete = expectedWaitCount !== undefined &&
+        expectedWaitCount === endedWaitIds.size &&
+        !waitStartEvents.some(({ payload }) => !endedWaitIds.has(string(record(payload).wait_id)));
     const tool = metricFromIntervals(tools);
     const command = metricFromIntervals(commands);
     const wait = metricFromIntervals(waits);
@@ -74,6 +80,7 @@ function projectTurn(terminal, events, diagnostics) {
         reasons: [...tools.reasons, ...commands.reasons, ...waits.reasons],
     });
     const inference = metricFromNestedObservation(terminal.payload.inference, "api_time_ms", "inference_timing_unknown");
+    const responseLatency = projectResponseLatency(terminal, events, wall, tools, expectedToolCount);
     const harness = metricFromNestedObservation(terminal.payload.harness, "hook_time_ms", "harness_timing_unknown");
     const slowestHook = slowestHookFromObservation(terminal.payload.harness);
     const residual = residualMetric(wall, occupied, inference, harness);
@@ -107,6 +114,7 @@ function projectTurn(terminal, events, diagnostics) {
         wait_ms: wait,
         occupied_ms: occupied,
         inference_ms: inference,
+        response_latency: responseLatency,
         harness_ms: harness,
         slowest_hook: slowestHook.name,
         slowest_hook_ms: slowestHook.duration_ms,
@@ -114,6 +122,11 @@ function projectTurn(terminal, events, diagnostics) {
         over_attributed_ms: overAttributed,
         context_percent: context.percent,
         context_coverage: context.coverage,
+        telemetry_capabilities: telemetryCapabilities,
+        telemetry_evidence_key: telemetryCapabilities
+            ? runtimeTelemetryEvidenceKeyV3(telemetryCapabilities)
+            : null,
+        wait_coverage_by_kind: projectWaitCoverageByKind(waitStartEvents, waitEvents, wallInterval, waitCoverageComplete, waitCount, diagnostics),
         span_counts: {
             tool: toolEvents.length,
             command: commandEvents.length,
@@ -122,6 +135,117 @@ function projectTurn(terminal, events, diagnostics) {
         tool_breakdown: toolBreakdown,
     };
 }
+/** Reports may compare a telemetry-backed channel only inside one evidence key. */
+export function runtimeTelemetryEvidenceKeyV3(telemetry) {
+    return sha256V3(canonicalJsonV3(telemetry));
+}
+function latestTelemetryByGeneration(events) {
+    const result = new Map();
+    for (const event of events) {
+        if (event.event_type !== "session.started" &&
+            event.event_type !== "session.attestation_changed") {
+            continue;
+        }
+        const attestation = record(event.payload.runtime_attestation);
+        const telemetry = record(attestation.telemetry);
+        if (Object.keys(telemetry).length === 0)
+            continue;
+        result.set(event.scope.generation_id ?? "", telemetry);
+    }
+    return result;
+}
+function projectResponseLatency(terminal, events, wall, tools, expectedToolCount) {
+    const turnStart = Date.parse(string(record(terminal.payload.span).opened_at));
+    const turnEnd = Number.isFinite(turnStart) && wall.state === "observed" ? turnStart + wall.value_ms : undefined;
+    const requests = events
+        .filter(({ event_type }) => event_type === "tool.requested")
+        .map(({ time }) => Date.parse(string(time.observed_at)))
+        .filter(Number.isFinite)
+        .sort((left, right) => left - right);
+    const firstRequest = requests[0];
+    const firstTool = Number.isFinite(turnStart) && firstRequest !== undefined
+        ? observedLatency(firstRequest - turnStart)
+        : unknownLatency(expectedToolCount === 0 ? "no_tool_request" : "tool_request_unobserved");
+    const noToolTerminal = expectedToolCount === 0
+        ? wall
+        : unknownLatency(expectedToolCount === undefined ? "tool_channel_unattested" : "turn_contains_tools");
+    const agentAction = firstRequest !== undefined
+        ? firstTool
+        : expectedToolCount === 0
+            ? noToolTerminal
+            : unknownLatency(expectedToolCount === undefined ? "tool_channel_unattested" : "tool_request_unobserved");
+    let postTool = unknownLatency(expectedToolCount === 0
+        ? "no_tool_completion"
+        : expectedToolCount === undefined
+            ? "tool_channel_unattested"
+            : "final_tool_completion_unknown");
+    if (turnEnd !== undefined &&
+        expectedToolCount !== undefined &&
+        expectedToolCount > 0 &&
+        tools.reasons.length === 0 &&
+        tools.intervals.length === expectedToolCount) {
+        postTool = observedLatency(turnEnd - Math.max(...tools.intervals.map(({ end }) => end)));
+    }
+    return {
+        agent_action_ms: agentAction,
+        first_tool_request_ms: firstTool,
+        post_tool_response_ms: postTool,
+        no_tool_terminal_response_ms: noToolTerminal,
+        method: "canonical_event_timestamps_v1",
+    };
+}
+function projectWaitCoverageByKind(starts, ends, wall, complete, waitCount, diagnostics) {
+    const endedIds = new Set(ends.map(({ payload }) => string(record(payload).wait_id)));
+    const unsupported = waitCount.state === "unsupported";
+    return Object.fromEntries(ADAPTER_WAIT_KINDS_V3.map((kind) => {
+        const kindStarts = starts.filter(({ payload }) => waitKind(payload) === kind);
+        const kindEnds = ends.filter(({ payload }) => waitKind(payload) === kind);
+        const openCount = kindStarts.filter(({ payload }) => !endedIds.has(string(record(payload).wait_id))).length;
+        const set = intervalSet(kindEnds, wall, diagnostics);
+        if (!complete)
+            set.reasons.push("wait_kind_completeness_unattested");
+        const completeness = complete
+            ? "complete"
+            : unsupported
+                ? kindStarts.length > 0 || kindEnds.length > 0
+                    ? "lower_bound"
+                    : "unsupported"
+                : kindStarts.length > 0 || kindEnds.length > 0
+                    ? "lower_bound"
+                    : "unknown";
+        const reason = complete
+            ? null
+            : unsupported
+                ? "turn_wait_count_unsupported"
+                : "turn_wait_count_unattested";
+        return [
+            kind,
+            {
+                kind,
+                started_count: kindStarts.length,
+                ended_count: kindEnds.length,
+                open_count: openCount,
+                duration_ms: metricFromIntervals(set),
+                completeness,
+                reason,
+            },
+        ];
+    }));
+}
+function waitKind(payload) {
+    const value = string(record(payload).kind);
+    return ADAPTER_WAIT_KINDS_V3.includes(value)
+        ? value
+        : "unknown";
+}
+function observedLatency(value) {
+    return Number.isFinite(value) && value >= 0
+        ? { state: "observed", value_ms: Math.floor(value) }
+        : unknownLatency("event_time_order_invalid");
+}
+function unknownLatency(reason) {
+    return { state: "unknown", known_ms: 0, reasons: [reason] };
+}
 function groupByTool(events) {
     const groups = new Map();
     for (const event of events) {

package/dist/core/events/v3/live-route-observer.d.ts

@@ -0,0 +1,31 @@
+import { type EventV3ControlState, type EventV3WriteMode } from "./control.js";
+export type LiveEventLedgerRouteV3 = {
+    state: "v3";
+    mode: EventV3WriteMode;
+    build_id: `build_${string}`;
+    /** Genesis id of the epoch this route was resolved against: the epoch fence for derived writes. */
+    genesis_id: `gex_${string}`;
+} | {
+    state: "blocked";
+    reason: string;
+};
+/**
+ * Observe the V3-only ledger route without repairing control pairs, replacing
+ * epochs, launching processes, or writing files. Read-only consumers fail
+ * closed until a command or producer repairs the route.
+ */
+export declare function observeLiveEventLedgerRouteV3(coordRoot: string): LiveEventLedgerRouteV3;
+/** Project one already-read control state into the passive route contract. */
+export declare function liveEventLedgerRouteFromControlV3(control: EventV3ControlState): LiveEventLedgerRouteV3;
+export declare function runtimeCapabilityProfileCurrentV3(control: Extract<EventV3ControlState, {
+    state: "candidate" | "active";
+}>): boolean;
+export declare function liveInstanceIdV3(instanceId: string): `inst_${string}`;
+/**
+ * The adapter-native id a canonical `inst_*` id carries, for display and for
+ * joins against native-keyed records. Only the direct prefix form round-trips:
+ * a hashed id has no recoverable native form and is returned unchanged, so
+ * never treat this as a guaranteed inverse of `liveInstanceIdV3`.
+ */
+export declare function nativeInstanceIdV3(instanceId: string): string;
+//# sourceMappingURL=live-route-observer.d.ts.map

package/dist/core/events/v3/live-route-observer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"live-route-observer.d.ts","sourceRoot":"","sources":["../../../../src/core/events/v3/live-route-observer.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,KAAK,mBAAmB,EACxB,KAAK,gBAAgB,EAEtB,MAAM,cAAc,CAAC;AAGtB,MAAM,MAAM,sBAAsB,GAC9B;IACE,KAAK,EAAE,IAAI,CAAC;IACZ,IAAI,EAAE,gBAAgB,CAAC;IACvB,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B,mGAAmG;IACnG,UAAU,EAAE,OAAO,MAAM,EAAE,CAAC;CAC7B,GACD;IAAE,KAAK,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzC;;;;GAIG;AACH,wBAAgB,6BAA6B,CAAC,SAAS,EAAE,MAAM,GAAG,sBAAsB,CAEvF;AAED,8EAA8E;AAC9E,wBAAgB,iCAAiC,CAC/C,OAAO,EAAE,mBAAmB,GAC3B,sBAAsB,CAkBxB;AAED,wBAAgB,iCAAiC,CAC/C,OAAO,EAAE,OAAO,CAAC,mBAAmB,EAAE;IAAE,KAAK,EAAE,WAAW,GAAG,QAAQ,CAAA;CAAE,CAAC,GACvE,OAAO,CAST;AAED,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,QAAQ,MAAM,EAAE,CAIrE;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAE7D"}

package/dist/core/events/v3/live-route-observer.js

@@ -0,0 +1,58 @@
+import { createHash } from "node:crypto";
+import { canonicalJsonV3, sha256V3 } from "./canonical.js";
+import { ADAPTER_CAPABILITY_PROFILES_V3 } from "./capabilities.js";
+import { readEventV3ControlState, } from "./control.js";
+import { liveEventV3BuildId } from "./runtime-identity.js";
+/**
+ * Observe the V3-only ledger route without repairing control pairs, replacing
+ * epochs, launching processes, or writing files. Read-only consumers fail
+ * closed until a command or producer repairs the route.
+ */
+export function observeLiveEventLedgerRouteV3(coordRoot) {
+    return liveEventLedgerRouteFromControlV3(readEventV3ControlState(coordRoot));
+}
+/** Project one already-read control state into the passive route contract. */
+export function liveEventLedgerRouteFromControlV3(control) {
+    if (control.state === "closed")
+        return { state: "blocked", reason: "v3_not_initialized" };
+    if (control.state !== "candidate" && control.state !== "active") {
+        return { state: "blocked", reason: `${control.state}:${control.reason}` };
+    }
+    if (!runtimeCapabilityProfileCurrentV3(control)) {
+        return { state: "blocked", reason: "runtime_capability_profile_incompatible" };
+    }
+    const buildId = liveEventV3BuildId(control.genesis.profile.harnery_commit);
+    if (!control.genesis.profile.producer_build_ids.includes(buildId)) {
+        return { state: "blocked", reason: "live_producer_build_not_approved" };
+    }
+    return {
+        state: "v3",
+        mode: control.state,
+        build_id: buildId,
+        genesis_id: control.genesis.event.payload.genesis_id,
+    };
+}
+export function runtimeCapabilityProfileCurrentV3(control) {
+    const expected = Object.values(ADAPTER_CAPABILITY_PROFILES_V3).map((profile) => sha256V3(canonicalJsonV3(profile)));
+    const approved = control.genesis.profile.adapter_capability_profile_digests;
+    const expectedDigests = new Set(expected);
+    return control.state === "candidate"
+        ? approved.some((digest) => expectedDigests.has(digest))
+        : expected.every((digest) => approved.includes(digest));
+}
+export function liveInstanceIdV3(instanceId) {
+    if (/^inst_[a-zA-Z0-9._-]{1,128}$/.test(instanceId))
+        return instanceId;
+    if (/^[a-zA-Z0-9._-]{1,128}$/.test(instanceId))
+        return `inst_${instanceId}`;
+    return `inst_${createHash("sha256").update(instanceId.normalize("NFC")).digest("hex")}`;
+}
+/**
+ * The adapter-native id a canonical `inst_*` id carries, for display and for
+ * joins against native-keyed records. Only the direct prefix form round-trips:
+ * a hashed id has no recoverable native form and is returned unchanged, so
+ * never treat this as a guaranteed inverse of `liveInstanceIdV3`.
+ */
+export function nativeInstanceIdV3(instanceId) {
+    return instanceId.startsWith("inst_") ? instanceId.slice("inst_".length) : instanceId;
+}

package/dist/core/events/v3/live-routing.d.ts

@@ -1,36 +1,28 @@
 import type { Adapter } from "../../adapter.js";
 import type { ParsedPayload } from "../../hooks/adapter/parse.js";
-import { type EventV3WriteMode } from "./control.js";
+import type { EventV3 } from "./contract.js";
+import { type LiveEventLedgerRouteV3 } from "./live-route-observer.js";
 import type { HookSignalV3 } from "./producers/hook.js";
 import type { TurnRitualEvidenceV3 } from "./producers/hook-base.js";
-import { type RecordHookSignalV3Result } from "./producers/recorder.js";
+import { type ReconcilePendingRuntimeContextV3Result, type RecordHookSignalV3Result } from "./producers/recorder.js";
+export { type LiveEventLedgerRouteV3, liveInstanceIdV3, nativeInstanceIdV3, } from "./live-route-observer.js";
+export { liveEventV3BuildId, livePlatformV3 } from "./runtime-identity.js";
 export declare const LIVE_HOOK_V3_PRODUCER_ID: "prd_agent-hook";
 export declare const LIVE_COMMAND_V3_PRODUCER_ID: "prd_session-tee";
-export type LiveEventLedgerRouteV3 = {
-    state: "v3";
-    mode: EventV3WriteMode;
-    build_id: `build_${string}`;
-} | {
-    state: "blocked";
-    reason: string;
-};
 /**
  * Resolve the V3-only ledger route. A root without an initialized V3 control
- * packet is blocked; no producer or consumer may fall back to an older ledger.
+ * packet is blocked; no mutating producer may fall back to an older ledger.
  * Manifest-first crashes are repaired from the immutable packet and every
  * other invalid state closes the writer gate.
  */
 export declare function resolveLiveEventLedgerRouteV3(coordRoot: string): LiveEventLedgerRouteV3;
-export declare function liveEventV3BuildId(harneryCommit: string): `build_${string}`;
-export declare function liveInstanceIdV3(instanceId: string): `inst_${string}`;
+export declare function hookSignalV3(eventName: string): HookSignalV3 | undefined;
 /**
- * The adapter-native id a canonical `inst_*` id carries, for display and for
- * joins against native-keyed records. Only the direct prefix form round-trips:
- * a hashed id has no recoverable native form and is returned unchanged, so
- * never treat this as a guaranteed inverse of `liveInstanceIdV3`.
+ * Tool lifecycle hooks may stop after publishing their event to the durable
+ * ready WAL. The next non-tool hook drains the causal batch into the active
+ * ledger, avoiding one global append-lease cycle for every tool boundary.
  */
-export declare function nativeInstanceIdV3(instanceId: string): string;
-export declare function hookSignalV3(eventName: string): HookSignalV3 | undefined;
+export declare function liveHookSignalDefersDrainV3(eventName: string, override?: string): boolean;
 export declare function recordLiveHookSignalV3(input: {
     coordRoot: string;
     route: Extract<LiveEventLedgerRouteV3, {
@@ -53,5 +45,35 @@ export declare function recordLiveHookSignalV3(input: {
 }): RecordHookSignalV3Result | {
     state: "ignored";
 };
-export declare function livePlatformV3(): "linux" | "windows" | "macos" | "unknown";
+export declare function reconcileLivePendingRuntimeContextV3(input: {
+    coordRoot: string;
+    route: Extract<LiveEventLedgerRouteV3, {
+        state: "v3";
+    }>;
+    nativeSessionId: string;
+    finalAttempt?: boolean;
+}): ReconcilePendingRuntimeContextV3Result;
+/**
+ * Open the child generation named by a native SubagentStart event.
+ *
+ * The parent producer owns the delegation span and mints its child generation
+ * id. This second crash-safe session-start gives that exact generation its own
+ * producer authority, so later child tool hooks can resolve away from the
+ * parent session and the disposable heartbeat projection has a real source.
+ */
+export declare function recordLiveDelegatedChildSessionV3(input: {
+    coordRoot: string;
+    route: Extract<LiveEventLedgerRouteV3, {
+        state: "v3";
+    }>;
+    parentEvent: Extract<EventV3, {
+        event_type: "agent.started";
+    }>;
+    payload: ParsedPayload;
+    adapter: Adapter;
+    bridge?: "codex-wsl";
+    monotonic_ns?: string;
+}): RecordHookSignalV3Result | {
+    state: "ignored";
+};
 //# sourceMappingURL=live-routing.d.ts.map

package/dist/core/events/v3/live-routing.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"live-routing.d.ts","sourceRoot":"","sources":["../../../../src/core/events/v3/live-routing.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,EACL,KAAK,gBAAgB,EAGtB,MAAM,cAAc,CAAC;AACtB,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AACrE,OAAO,EAAE,KAAK,wBAAwB,EAAsB,MAAM,yBAAyB,CAAC;AAE5F,eAAO,MAAM,wBAAwB,EAAG,gBAAyB,CAAC;AAClE,eAAO,MAAM,2BAA2B,EAAG,iBAA0B,CAAC;AAEtE,MAAM,MAAM,sBAAsB,GAC9B;IAAE,KAAK,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,gBAAgB,CAAC;IAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,GACpE;IAAE,KAAK,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzC;;;;;GAKG;AACH,wBAAgB,6BAA6B,CAAC,SAAS,EAAE,MAAM,GAAG,sBAAsB,CAYvF;AAED,wBAAgB,kBAAkB,CAAC,aAAa,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAI3E;AAED,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,QAAQ,MAAM,EAAE,CAIrE;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAE7D;AAED,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS,CAuBxE;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE;IAC5C,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,OAAO,CAAC,sBAAsB,EAAE;QAAE,KAAK,EAAE,IAAI,CAAA;KAAE,CAAC,CAAC;IACxD,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,aAAa,GAAG,IAAI,CAAC;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,OAAO,MAAM,EAAE,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,MAAM,EAAE,CAAC;IAC7B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,WAAW,CAAC,EAAE,oBAAoB,CAAC;IACnC,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB,GAAG,wBAAwB,GAAG;IAAE,KAAK,EAAE,SAAS,CAAA;CAAE,CAwBlD;AAED,wBAAgB,cAAc,IAAI,OAAO,GAAG,SAAS,GAAG,OAAO,GAAG,SAAS,CAK1E"}
+{"version":3,"file":"live-routing.d.ts","sourceRoot":"","sources":["../../../../src/core/events/v3/live-routing.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAElE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAG7C,OAAO,EACL,KAAK,sBAAsB,EAI5B,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AACrE,OAAO,EACL,KAAK,sCAAsC,EAC3C,KAAK,wBAAwB,EAG9B,MAAM,yBAAyB,CAAC;AAGjC,OAAO,EACL,KAAK,sBAAsB,EAC3B,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAE3E,eAAO,MAAM,wBAAwB,EAAG,gBAAyB,CAAC;AAClE,eAAO,MAAM,2BAA2B,EAAG,iBAA0B,CAAC;AAEtE;;;;;GAKG;AACH,wBAAgB,6BAA6B,CAAC,SAAS,EAAE,MAAM,GAAG,sBAAsB,CA8BvF;AAED,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS,CAuBxE;AAED;;;;GAIG;AACH,wBAAgB,2BAA2B,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAOzF;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE;IAC5C,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,OAAO,CAAC,sBAAsB,EAAE;QAAE,KAAK,EAAE,IAAI,CAAA;KAAE,CAAC,CAAC;IACxD,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,aAAa,GAAG,IAAI,CAAC;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,OAAO,MAAM,EAAE,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,MAAM,EAAE,CAAC;IAC7B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,WAAW,CAAC,EAAE,oBAAoB,CAAC;IACnC,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB,GAAG,wBAAwB,GAAG;IAAE,KAAK,EAAE,SAAS,CAAA;CAAE,CAwClD;AAED,wBAAgB,oCAAoC,CAAC,KAAK,EAAE;IAC1D,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,OAAO,CAAC,sBAAsB,EAAE;QAAE,KAAK,EAAE,IAAI,CAAA;KAAE,CAAC,CAAC;IACxD,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB,GAAG,sCAAsC,CAUzC;AAED;;;;;;;GAOG;AACH,wBAAgB,iCAAiC,CAAC,KAAK,EAAE;IACvD,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,OAAO,CAAC,sBAAsB,EAAE;QAAE,KAAK,EAAE,IAAI,CAAA;KAAE,CAAC,CAAC;IACxD,WAAW,EAAE,OAAO,CAAC,OAAO,EAAE;QAAE,UAAU,EAAE,eAAe,CAAA;KAAE,CAAC,CAAC;IAC/D,OAAO,EAAE,aAAa,CAAC;IACvB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,GAAG,wBAAwB,GAAG;IAAE,KAAK,EAAE,SAAS,CAAA;CAAE,CAsElD"}

package/dist/core/events/v3/live-routing.js

@@ -1,11 +1,16 @@
-import { createHash } from "node:crypto";
-import { readEventV3ControlState, repairEventV3ControlPair, } from "./control.js";
-import { recordHookSignalV3 } from "./producers/recorder.js";
+import { refreshIncompatibleEventLedgerV3, rotateOversizedEventLedgerV3 } from "./bootstrap.js";
+import { readEventV3ControlState } from "./control.js";
+import { repairEventV3ControlPair } from "./control-writer.js";
+import { liveEventLedgerRouteFromControlV3, liveInstanceIdV3, runtimeCapabilityProfileCurrentV3, } from "./live-route-observer.js";
+import { reconcilePendingRuntimeContextV3, recordHookSignalV3, } from "./producers/recorder.js";
+import { livePlatformV3 } from "./runtime-identity.js";
+export { liveInstanceIdV3, nativeInstanceIdV3, } from "./live-route-observer.js";
+export { liveEventV3BuildId, livePlatformV3 } from "./runtime-identity.js";
 export const LIVE_HOOK_V3_PRODUCER_ID = "prd_agent-hook";
 export const LIVE_COMMAND_V3_PRODUCER_ID = "prd_session-tee";
 /**
  * Resolve the V3-only ledger route. A root without an initialized V3 control
- * packet is blocked; no producer or consumer may fall back to an older ledger.
+ * packet is blocked; no mutating producer may fall back to an older ledger.
  * Manifest-first crashes are repaired from the immutable packet and every
  * other invalid state closes the writer gate.
  */
@@ -15,36 +20,33 @@ export function resolveLiveEventLedgerRouteV3(coordRoot) {
         return { state: "blocked", reason: "v3_not_initialized" };
     if (control.state === "repairable")
         control = repairEventV3ControlPair(coordRoot);
-    if (control.state !== "candidate" && control.state !== "active") {
-        return { state: "blocked", reason: `${control.state}:${control.reason}` };
+    if ((control.state === "invalid" && control.reason === "genesis_schema_digest_incompatible") ||
+        ((control.state === "candidate" || control.state === "active") &&
+            !runtimeCapabilityProfileCurrentV3(control))) {
+        try {
+            control = refreshIncompatibleEventLedgerV3(coordRoot).control;
+        }
+        catch (error) {
+            return {
+                state: "blocked",
+                reason: `runtime_refresh_failed:${error instanceof Error ? error.message : String(error)}`,
+            };
+        }
     }
-    const buildId = liveEventV3BuildId(control.genesis.profile.harnery_commit);
-    if (!control.genesis.profile.producer_build_ids.includes(buildId)) {
-        return { state: "blocked", reason: "live_producer_build_not_approved" };
+    if (control.state === "active") {
+        // Bound the epoch every producer must re-validate: an oversized active
+        // segment rotates into the archive here, on the shared route boundary.
+        // Rotation failure never blocks recording; the current epoch stays live.
+        try {
+            const rotated = rotateOversizedEventLedgerV3(coordRoot);
+            if (rotated.state === "rotated" && rotated.control)
+                control = rotated.control;
+        }
+        catch {
+            // The oversized epoch keeps serving; the next route resolution retries.
+        }
     }
-    return { state: "v3", mode: control.state, build_id: buildId };
-}
-export function liveEventV3BuildId(harneryCommit) {
-    const exact = harneryCommit.normalize("NFC");
-    if (/^[a-zA-Z0-9._-]{1,120}$/.test(exact))
-        return `build_${exact}`;
-    return `build_${createHash("sha256").update(exact).digest("hex")}`;
-}
-export function liveInstanceIdV3(instanceId) {
-    if (/^inst_[a-zA-Z0-9._-]{1,128}$/.test(instanceId))
-        return instanceId;
-    if (/^[a-zA-Z0-9._-]{1,128}$/.test(instanceId))
-        return `inst_${instanceId}`;
-    return `inst_${createHash("sha256").update(instanceId.normalize("NFC")).digest("hex")}`;
-}
-/**
- * The adapter-native id a canonical `inst_*` id carries, for display and for
- * joins against native-keyed records. Only the direct prefix form round-trips:
- * a hashed id has no recoverable native form and is returned unchanged, so
- * never treat this as a guaranteed inverse of `liveInstanceIdV3`.
- */
-export function nativeInstanceIdV3(instanceId) {
-    return instanceId.startsWith("inst_") ? instanceId.slice("inst_".length) : instanceId;
+    return liveEventLedgerRouteFromControlV3(control);
 }
 export function hookSignalV3(eventName) {
     switch (eventName) {
@@ -70,15 +72,43 @@ export function hookSignalV3(eventName) {
             return undefined;
     }
 }
+/**
+ * Tool lifecycle hooks may stop after publishing their event to the durable
+ * ready WAL. The next non-tool hook drains the causal batch into the active
+ * ledger, avoiding one global append-lease cycle for every tool boundary.
+ */
+export function liveHookSignalDefersDrainV3(eventName, override) {
+    if (override === "1")
+        return true;
+    if (override === "0")
+        return false;
+    const signal = hookSignalV3(eventName);
+    return (signal === "pre-tool-use" || signal === "post-tool-use" || signal === "post-tool-use-failure");
+}
 export function recordLiveHookSignalV3(input) {
     const signal = hookSignalV3(input.eventName);
     if (!signal)
         return { state: "ignored" };
+    const nativeChild = input.payload?.subagent_id ?? input.payload?.agent_id;
+    const childOwnsSignal = signal !== "sub-agent-start" &&
+        signal !== "sub-agent-stop" &&
+        nativeChild !== undefined &&
+        liveInstanceIdV3(input.instanceId) === liveInstanceIdV3(nativeChild);
+    const payload = input.payload
+        ? childOwnsSignal
+            ? {
+                ...input.payload,
+                session_id: nativeChild,
+                conversation_id: undefined,
+                parent_session_id: input.payload.session_id ?? input.payload.conversation_id,
+            }
+            : input.payload
+        : { raw: {} };
     return recordHookSignalV3({
         coordRoot: input.coordRoot,
         mode: input.route.mode,
         signal,
-        payload: input.payload ?? { raw: {} },
+        payload,
         adapter: input.adapter,
         instance_id: liveInstanceIdV3(input.instanceId),
         run_id: input.run_id,
@@ -96,12 +126,94 @@ export function recordLiveHookSignalV3(input) {
         ...(input.defer_drain ? { writerOptions: { deferDrain: true } } : {}),
     });
 }
-export function livePlatformV3() {
-    if (process.platform === "linux")
-        return "linux";
-    if (process.platform === "win32")
-        return "windows";
-    if (process.platform === "darwin")
-        return "macos";
-    return "unknown";
+export function reconcileLivePendingRuntimeContextV3(input) {
+    return reconcilePendingRuntimeContextV3({
+        coordRoot: input.coordRoot,
+        mode: input.route.mode,
+        nativeSessionId: input.nativeSessionId,
+        producer_id: LIVE_HOOK_V3_PRODUCER_ID,
+        build_id: input.route.build_id,
+        platform: livePlatformV3(),
+        finalAttempt: input.finalAttempt,
+    });
+}
+/**
+ * Open the child generation named by a native SubagentStart event.
+ *
+ * The parent producer owns the delegation span and mints its child generation
+ * id. This second crash-safe session-start gives that exact generation its own
+ * producer authority, so later child tool hooks can resolve away from the
+ * parent session and the disposable heartbeat projection has a real source.
+ */
+export function recordLiveDelegatedChildSessionV3(input) {
+    const nativeChild = input.payload.subagent_id ?? input.payload.agent_id;
+    if (!nativeChild)
+        return { state: "ignored" };
+    const parentGeneration = input.parentEvent.links
+        .parent_generation_id;
+    if (!parentGeneration)
+        return { state: "ignored" };
+    const nativeParent = input.payload.session_id ?? input.payload.conversation_id;
+    const childPayload = {
+        session_id: nativeChild,
+        agent_id: nativeChild,
+        parent_session_id: nativeParent,
+        source: "startup",
+        model: input.payload.model,
+        cwd: input.payload.cwd,
+        raw: {
+            session_id: nativeChild,
+            agent_id: nativeChild,
+            ...(nativeParent ? { parent_session_id: nativeParent } : {}),
+            ...(input.payload.raw.agent_type ? { agent_type: input.payload.raw.agent_type } : {}),
+        },
+    };
+    const started = recordHookSignalV3({
+        coordRoot: input.coordRoot,
+        mode: input.route.mode,
+        signal: "session-start",
+        payload: childPayload,
+        adapter: input.adapter,
+        instance_id: liveInstanceIdV3(nativeChild),
+        producer_id: LIVE_HOOK_V3_PRODUCER_ID,
+        build_id: input.route.build_id,
+        platform: livePlatformV3(),
+        ...(input.bridge ? { bridge: input.bridge } : {}),
+        monotonic_ns: input.monotonic_ns,
+        hook_name: "sub-agent-start-child-session",
+        delegated_child: {
+            generation_id: input.parentEvent.payload.child_generation_id,
+            parent_generation_id: parentGeneration,
+            delegation_id: input.parentEvent.payload.delegation_id,
+            caused_by_event_id: input.parentEvent.event_id,
+        },
+    });
+    if (started.state !== "recorded" && started.state !== "already_started")
+        return started;
+    const childStartEventId = (started.state === "recorded" ? started.event.event_id : started.event_id);
+    recordHookSignalV3({
+        coordRoot: input.coordRoot,
+        mode: input.route.mode,
+        signal: "user-prompt-submit",
+        payload: {
+            ...childPayload,
+            turn_id: `delegated:${nativeChild}`,
+            raw: { ...childPayload.raw, turn_id: `delegated:${nativeChild}` },
+        },
+        adapter: input.adapter,
+        instance_id: liveInstanceIdV3(nativeChild),
+        producer_id: LIVE_HOOK_V3_PRODUCER_ID,
+        build_id: input.route.build_id,
+        platform: livePlatformV3(),
+        ...(input.bridge ? { bridge: input.bridge } : {}),
+        monotonic_ns: input.monotonic_ns,
+        hook_name: "sub-agent-start-child-turn",
+        delegated_child: {
+            generation_id: input.parentEvent.payload.child_generation_id,
+            parent_generation_id: parentGeneration,
+            delegation_id: input.parentEvent.payload.delegation_id,
+            caused_by_event_id: childStartEventId,
+        },
+    });
+    return started;
 }

package/dist/core/events/v3/producers/command-recorder.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"command-recorder.d.ts","sourceRoot":"","sources":["../../../../../src/core/events/v3/producers/command-recorder.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAOnD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,KAAK,gBAAgB,EAA2B,MAAM,eAAe,CAAC;AAM/E,OAAO,EAEL,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EAExB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,KAAK,oBAAoB,EACzB,KAAK,eAAe,EAErB,MAAM,cAAc,CAAC;AA0CtB,MAAM,WAAW,0BAA0B;IACzC,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,gBAAgB,CAAC;IACvB,MAAM,EAAE,eAAe,CAAC;IACxB,WAAW,EAAE,oBAAoB,CAAC;IAClC,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,EAAE,QAAQ,MAAM,EAAE,CAAC;IAC9B,WAAW,EAAE,OAAO,MAAM,EAAE,CAAC;IAC7B,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B,QAAQ,EAAE,OAAO,GAAG,SAAS,GAAG,OAAO,GAAG,SAAS,CAAC;IACpD,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,mBAAmB,CAAC;CACrC;AAED,MAAM,MAAM,2BAA2B,GACnC;IAAE,KAAK,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACxC;IAAE,KAAK,EAAE,wBAAwB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACnD;IAAE,KAAK,EAAE,wBAAwB,CAAA;CAAE,GACnC;IAAE,KAAK,EAAE,wBAAwB,CAAA;CAAE,GACnC;IAAE,KAAK,EAAE,kBAAkB,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAC/C;IAAE,KAAK,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,OAAO,CAAC;IAAC,UAAU,EAAE,kBAAkB,CAAC;IAAC,SAAS,EAAE,OAAO,CAAA;CAAE,CAAC;AAE9F;;;;GAIG;AACH,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,0BAA0B,GAChC,2BAA2B,CAgI7B;AAED,MAAM,WAAW,iCAAiC;IAChD,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,gBAAgB,CAAC;IACvB,aAAa,EAAE,OAAO,MAAM,EAAE,CAAC;IAC/B,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B,QAAQ,EAAE,OAAO,GAAG,SAAS,GAAG,OAAO,GAAG,SAAS,CAAC;IACpD,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,mBAAmB,CAAC;CACrC;AAED,MAAM,WAAW,kCAAkC;IACjD,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;GAMG;AACH,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,iCAAiC,GACvC,kCAAkC,CA8HpC"}
+{"version":3,"file":"command-recorder.d.ts","sourceRoot":"","sources":["../../../../../src/core/events/v3/producers/command-recorder.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAOnD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,KAAK,gBAAgB,EAA2B,MAAM,eAAe,CAAC;AAM/E,OAAO,EAEL,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EAExB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,KAAK,oBAAoB,EACzB,KAAK,eAAe,EAErB,MAAM,cAAc,CAAC;AA0CtB,MAAM,WAAW,0BAA0B;IACzC,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,gBAAgB,CAAC;IACvB,MAAM,EAAE,eAAe,CAAC;IACxB,WAAW,EAAE,oBAAoB,CAAC;IAClC,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,EAAE,QAAQ,MAAM,EAAE,CAAC;IAC9B,WAAW,EAAE,OAAO,MAAM,EAAE,CAAC;IAC7B,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B,QAAQ,EAAE,OAAO,GAAG,SAAS,GAAG,OAAO,GAAG,SAAS,CAAC;IACpD,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,mBAAmB,CAAC;CACrC;AAED,MAAM,MAAM,2BAA2B,GACnC;IAAE,KAAK,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACxC;IAAE,KAAK,EAAE,wBAAwB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACnD;IAAE,KAAK,EAAE,wBAAwB,CAAA;CAAE,GACnC;IAAE,KAAK,EAAE,wBAAwB,CAAA;CAAE,GACnC;IAAE,KAAK,EAAE,kBAAkB,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAC/C;IAAE,KAAK,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,OAAO,CAAC;IAAC,UAAU,EAAE,kBAAkB,CAAC;IAAC,SAAS,EAAE,OAAO,CAAA;CAAE,CAAC;AAE9F;;;;GAIG;AACH,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,0BAA0B,GAChC,2BAA2B,CAwI7B;AAED,MAAM,WAAW,iCAAiC;IAChD,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,gBAAgB,CAAC;IACvB,aAAa,EAAE,OAAO,MAAM,EAAE,CAAC;IAC/B,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B,QAAQ,EAAE,OAAO,GAAG,SAAS,GAAG,OAAO,GAAG,SAAS,CAAC;IACpD,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,mBAAmB,CAAC;CACrC;AAED,MAAM,WAAW,kCAAkC;IACjD,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;GAMG;AACH,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,iCAAiC,GACvC,kCAAkC,CA8HpC"}

package/dist/core/events/v3/producers/command-recorder.js

@@ -51,6 +51,14 @@ export function recordCommandSignalV3(input) {
         if (state && !matchesHookState(state, hook, input, epochId)) {
             throw new Error("V3 command producer state does not match the joined hook generation");
         }
+        if (state && state.attestation_id !== hook.attestation_id) {
+            // A mid-generation re-attestation (session.attestation_changed) moves
+            // the hook's attestation id without opening a new generation or turn. A
+            // command span that straddles the change keeps its span, sequence, and
+            // dedupe state; later events ride the live attestation, the same
+            // in-place adoption the hook producer performs.
+            state.attestation_id = hook.attestation_id;
+        }
         let recovered = false;
         if (state?.pending) {
             const pending = state.pending;
@@ -309,7 +317,8 @@ function matchesHookState(state, hook, input, epochId) {
         state.session_id === hook.session_id &&
         state.generation_id === hook.generation_id &&
         state.turn_id === hook.current_turn_id &&
-        state.attestation_id === hook.attestation_id &&
+        // attestation_id is deliberately absent: a re-attestation within the
+        // generation is a continuation, adopted by the caller, not a mismatch.
         state.privacy_epoch_id === epochId);
 }
 function observationSourceId(input, context) {