harnery 0.35.0 → 0.36.0

package/dist/core/events/v3/live-route-observer.d.ts

@@ -0,0 +1,31 @@
+import { type EventV3ControlState, type EventV3WriteMode } from "./control.js";
+export type LiveEventLedgerRouteV3 = {
+    state: "v3";
+    mode: EventV3WriteMode;
+    build_id: `build_${string}`;
+    /** Genesis id of the epoch this route was resolved against: the epoch fence for derived writes. */
+    genesis_id: `gex_${string}`;
+} | {
+    state: "blocked";
+    reason: string;
+};
+/**
+ * Observe the V3-only ledger route without repairing control pairs, replacing
+ * epochs, launching processes, or writing files. Read-only consumers fail
+ * closed until a command or producer repairs the route.
+ */
+export declare function observeLiveEventLedgerRouteV3(coordRoot: string): LiveEventLedgerRouteV3;
+/** Project one already-read control state into the passive route contract. */
+export declare function liveEventLedgerRouteFromControlV3(control: EventV3ControlState): LiveEventLedgerRouteV3;
+export declare function runtimeCapabilityProfileCurrentV3(control: Extract<EventV3ControlState, {
+    state: "candidate" | "active";
+}>): boolean;
+export declare function liveInstanceIdV3(instanceId: string): `inst_${string}`;
+/**
+ * The adapter-native id a canonical `inst_*` id carries, for display and for
+ * joins against native-keyed records. Only the direct prefix form round-trips:
+ * a hashed id has no recoverable native form and is returned unchanged, so
+ * never treat this as a guaranteed inverse of `liveInstanceIdV3`.
+ */
+export declare function nativeInstanceIdV3(instanceId: string): string;
+//# sourceMappingURL=live-route-observer.d.ts.map

package/dist/core/events/v3/live-route-observer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"live-route-observer.d.ts","sourceRoot":"","sources":["../../../../src/core/events/v3/live-route-observer.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,KAAK,mBAAmB,EACxB,KAAK,gBAAgB,EAEtB,MAAM,cAAc,CAAC;AAGtB,MAAM,MAAM,sBAAsB,GAC9B;IACE,KAAK,EAAE,IAAI,CAAC;IACZ,IAAI,EAAE,gBAAgB,CAAC;IACvB,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B,mGAAmG;IACnG,UAAU,EAAE,OAAO,MAAM,EAAE,CAAC;CAC7B,GACD;IAAE,KAAK,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzC;;;;GAIG;AACH,wBAAgB,6BAA6B,CAAC,SAAS,EAAE,MAAM,GAAG,sBAAsB,CAEvF;AAED,8EAA8E;AAC9E,wBAAgB,iCAAiC,CAC/C,OAAO,EAAE,mBAAmB,GAC3B,sBAAsB,CAkBxB;AAED,wBAAgB,iCAAiC,CAC/C,OAAO,EAAE,OAAO,CAAC,mBAAmB,EAAE;IAAE,KAAK,EAAE,WAAW,GAAG,QAAQ,CAAA;CAAE,CAAC,GACvE,OAAO,CAST;AAED,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,QAAQ,MAAM,EAAE,CAIrE;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAE7D"}

package/dist/core/events/v3/live-route-observer.js

@@ -0,0 +1,58 @@
+import { createHash } from "node:crypto";
+import { canonicalJsonV3, sha256V3 } from "./canonical.js";
+import { ADAPTER_CAPABILITY_PROFILES_V3 } from "./capabilities.js";
+import { readEventV3ControlState, } from "./control.js";
+import { liveEventV3BuildId } from "./runtime-identity.js";
+/**
+ * Observe the V3-only ledger route without repairing control pairs, replacing
+ * epochs, launching processes, or writing files. Read-only consumers fail
+ * closed until a command or producer repairs the route.
+ */
+export function observeLiveEventLedgerRouteV3(coordRoot) {
+    return liveEventLedgerRouteFromControlV3(readEventV3ControlState(coordRoot));
+}
+/** Project one already-read control state into the passive route contract. */
+export function liveEventLedgerRouteFromControlV3(control) {
+    if (control.state === "closed")
+        return { state: "blocked", reason: "v3_not_initialized" };
+    if (control.state !== "candidate" && control.state !== "active") {
+        return { state: "blocked", reason: `${control.state}:${control.reason}` };
+    }
+    if (!runtimeCapabilityProfileCurrentV3(control)) {
+        return { state: "blocked", reason: "runtime_capability_profile_incompatible" };
+    }
+    const buildId = liveEventV3BuildId(control.genesis.profile.harnery_commit);
+    if (!control.genesis.profile.producer_build_ids.includes(buildId)) {
+        return { state: "blocked", reason: "live_producer_build_not_approved" };
+    }
+    return {
+        state: "v3",
+        mode: control.state,
+        build_id: buildId,
+        genesis_id: control.genesis.event.payload.genesis_id,
+    };
+}
+export function runtimeCapabilityProfileCurrentV3(control) {
+    const expected = Object.values(ADAPTER_CAPABILITY_PROFILES_V3).map((profile) => sha256V3(canonicalJsonV3(profile)));
+    const approved = control.genesis.profile.adapter_capability_profile_digests;
+    const expectedDigests = new Set(expected);
+    return control.state === "candidate"
+        ? approved.some((digest) => expectedDigests.has(digest))
+        : expected.every((digest) => approved.includes(digest));
+}
+export function liveInstanceIdV3(instanceId) {
+    if (/^inst_[a-zA-Z0-9._-]{1,128}$/.test(instanceId))
+        return instanceId;
+    if (/^[a-zA-Z0-9._-]{1,128}$/.test(instanceId))
+        return `inst_${instanceId}`;
+    return `inst_${createHash("sha256").update(instanceId.normalize("NFC")).digest("hex")}`;
+}
+/**
+ * The adapter-native id a canonical `inst_*` id carries, for display and for
+ * joins against native-keyed records. Only the direct prefix form round-trips:
+ * a hashed id has no recoverable native form and is returned unchanged, so
+ * never treat this as a guaranteed inverse of `liveInstanceIdV3`.
+ */
+export function nativeInstanceIdV3(instanceId) {
+    return instanceId.startsWith("inst_") ? instanceId.slice("inst_".length) : instanceId;
+}

package/dist/core/events/v3/live-routing.d.ts

@@ -1,36 +1,21 @@
 import type { Adapter } from "../../adapter.js";
 import type { ParsedPayload } from "../../hooks/adapter/parse.js";
 import type { EventV3 } from "./contract.js";
-import { type EventV3WriteMode } from "./control.js";
+import { type LiveEventLedgerRouteV3 } from "./live-route-observer.js";
 import type { HookSignalV3 } from "./producers/hook.js";
 import type { TurnRitualEvidenceV3 } from "./producers/hook-base.js";
-import { type RecordHookSignalV3Result } from "./producers/recorder.js";
+import { type ReconcilePendingRuntimeContextV3Result, type RecordHookSignalV3Result } from "./producers/recorder.js";
+export { type LiveEventLedgerRouteV3, liveInstanceIdV3, nativeInstanceIdV3, } from "./live-route-observer.js";
+export { liveEventV3BuildId, livePlatformV3 } from "./runtime-identity.js";
 export declare const LIVE_HOOK_V3_PRODUCER_ID: "prd_agent-hook";
 export declare const LIVE_COMMAND_V3_PRODUCER_ID: "prd_session-tee";
-export type LiveEventLedgerRouteV3 = {
-    state: "v3";
-    mode: EventV3WriteMode;
-    build_id: `build_${string}`;
-} | {
-    state: "blocked";
-    reason: string;
-};
 /**
  * Resolve the V3-only ledger route. A root without an initialized V3 control
- * packet is blocked; no producer or consumer may fall back to an older ledger.
+ * packet is blocked; no mutating producer may fall back to an older ledger.
  * Manifest-first crashes are repaired from the immutable packet and every
  * other invalid state closes the writer gate.
  */
 export declare function resolveLiveEventLedgerRouteV3(coordRoot: string): LiveEventLedgerRouteV3;
-export declare function liveEventV3BuildId(harneryCommit: string): `build_${string}`;
-export declare function liveInstanceIdV3(instanceId: string): `inst_${string}`;
-/**
- * The adapter-native id a canonical `inst_*` id carries, for display and for
- * joins against native-keyed records. Only the direct prefix form round-trips:
- * a hashed id has no recoverable native form and is returned unchanged, so
- * never treat this as a guaranteed inverse of `liveInstanceIdV3`.
- */
-export declare function nativeInstanceIdV3(instanceId: string): string;
 export declare function hookSignalV3(eventName: string): HookSignalV3 | undefined;
 /**
  * Tool lifecycle hooks may stop after publishing their event to the durable
@@ -60,6 +45,14 @@ export declare function recordLiveHookSignalV3(input: {
 }): RecordHookSignalV3Result | {
     state: "ignored";
 };
+export declare function reconcileLivePendingRuntimeContextV3(input: {
+    coordRoot: string;
+    route: Extract<LiveEventLedgerRouteV3, {
+        state: "v3";
+    }>;
+    nativeSessionId: string;
+    finalAttempt?: boolean;
+}): ReconcilePendingRuntimeContextV3Result;
 /**
  * Open the child generation named by a native SubagentStart event.
  *
@@ -83,5 +76,4 @@ export declare function recordLiveDelegatedChildSessionV3(input: {
 }): RecordHookSignalV3Result | {
     state: "ignored";
 };
-export declare function livePlatformV3(): "linux" | "windows" | "macos" | "unknown";
 //# sourceMappingURL=live-routing.d.ts.map

package/dist/core/events/v3/live-routing.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"live-routing.d.ts","sourceRoot":"","sources":["../../../../src/core/events/v3/live-routing.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EACL,KAAK,gBAAgB,EAGtB,MAAM,cAAc,CAAC;AACtB,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AACrE,OAAO,EAAE,KAAK,wBAAwB,EAAsB,MAAM,yBAAyB,CAAC;AAE5F,eAAO,MAAM,wBAAwB,EAAG,gBAAyB,CAAC;AAClE,eAAO,MAAM,2BAA2B,EAAG,iBAA0B,CAAC;AAEtE,MAAM,MAAM,sBAAsB,GAC9B;IAAE,KAAK,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,gBAAgB,CAAC;IAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,GACpE;IAAE,KAAK,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzC;;;;;GAKG;AACH,wBAAgB,6BAA6B,CAAC,SAAS,EAAE,MAAM,GAAG,sBAAsB,CAYvF;AAED,wBAAgB,kBAAkB,CAAC,aAAa,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAI3E;AAED,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,QAAQ,MAAM,EAAE,CAIrE;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAE7D;AAED,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS,CAuBxE;AAED;;;;GAIG;AACH,wBAAgB,2BAA2B,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAOzF;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE;IAC5C,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,OAAO,CAAC,sBAAsB,EAAE;QAAE,KAAK,EAAE,IAAI,CAAA;KAAE,CAAC,CAAC;IACxD,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,aAAa,GAAG,IAAI,CAAC;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,OAAO,MAAM,EAAE,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,MAAM,EAAE,CAAC;IAC7B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,WAAW,CAAC,EAAE,oBAAoB,CAAC;IACnC,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB,GAAG,wBAAwB,GAAG;IAAE,KAAK,EAAE,SAAS,CAAA;CAAE,CAwClD;AAED;;;;;;;GAOG;AACH,wBAAgB,iCAAiC,CAAC,KAAK,EAAE;IACvD,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,OAAO,CAAC,sBAAsB,EAAE;QAAE,KAAK,EAAE,IAAI,CAAA;KAAE,CAAC,CAAC;IACxD,WAAW,EAAE,OAAO,CAAC,OAAO,EAAE;QAAE,UAAU,EAAE,eAAe,CAAA;KAAE,CAAC,CAAC;IAC/D,OAAO,EAAE,aAAa,CAAC;IACvB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,GAAG,wBAAwB,GAAG;IAAE,KAAK,EAAE,SAAS,CAAA;CAAE,CAsElD;AAED,wBAAgB,cAAc,IAAI,OAAO,GAAG,SAAS,GAAG,OAAO,GAAG,SAAS,CAK1E"}
+{"version":3,"file":"live-routing.d.ts","sourceRoot":"","sources":["../../../../src/core/events/v3/live-routing.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAElE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAG7C,OAAO,EACL,KAAK,sBAAsB,EAI5B,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AACrE,OAAO,EACL,KAAK,sCAAsC,EAC3C,KAAK,wBAAwB,EAG9B,MAAM,yBAAyB,CAAC;AAGjC,OAAO,EACL,KAAK,sBAAsB,EAC3B,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAE3E,eAAO,MAAM,wBAAwB,EAAG,gBAAyB,CAAC;AAClE,eAAO,MAAM,2BAA2B,EAAG,iBAA0B,CAAC;AAEtE;;;;;GAKG;AACH,wBAAgB,6BAA6B,CAAC,SAAS,EAAE,MAAM,GAAG,sBAAsB,CA8BvF;AAED,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS,CAuBxE;AAED;;;;GAIG;AACH,wBAAgB,2BAA2B,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAOzF;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE;IAC5C,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,OAAO,CAAC,sBAAsB,EAAE;QAAE,KAAK,EAAE,IAAI,CAAA;KAAE,CAAC,CAAC;IACxD,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,aAAa,GAAG,IAAI,CAAC;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,OAAO,MAAM,EAAE,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,MAAM,EAAE,CAAC;IAC7B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,WAAW,CAAC,EAAE,oBAAoB,CAAC;IACnC,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB,GAAG,wBAAwB,GAAG;IAAE,KAAK,EAAE,SAAS,CAAA;CAAE,CAwClD;AAED,wBAAgB,oCAAoC,CAAC,KAAK,EAAE;IAC1D,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,OAAO,CAAC,sBAAsB,EAAE;QAAE,KAAK,EAAE,IAAI,CAAA;KAAE,CAAC,CAAC;IACxD,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB,GAAG,sCAAsC,CAUzC;AAED;;;;;;;GAOG;AACH,wBAAgB,iCAAiC,CAAC,KAAK,EAAE;IACvD,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,OAAO,CAAC,sBAAsB,EAAE;QAAE,KAAK,EAAE,IAAI,CAAA;KAAE,CAAC,CAAC;IACxD,WAAW,EAAE,OAAO,CAAC,OAAO,EAAE;QAAE,UAAU,EAAE,eAAe,CAAA;KAAE,CAAC,CAAC;IAC/D,OAAO,EAAE,aAAa,CAAC;IACvB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,GAAG,wBAAwB,GAAG;IAAE,KAAK,EAAE,SAAS,CAAA;CAAE,CAsElD"}

package/dist/core/events/v3/live-routing.js

@@ -1,11 +1,16 @@
-import { createHash } from "node:crypto";
-import { readEventV3ControlState, repairEventV3ControlPair, } from "./control.js";
-import { recordHookSignalV3 } from "./producers/recorder.js";
+import { refreshIncompatibleEventLedgerV3, rotateOversizedEventLedgerV3 } from "./bootstrap.js";
+import { readEventV3ControlState } from "./control.js";
+import { repairEventV3ControlPair } from "./control-writer.js";
+import { liveEventLedgerRouteFromControlV3, liveInstanceIdV3, runtimeCapabilityProfileCurrentV3, } from "./live-route-observer.js";
+import { reconcilePendingRuntimeContextV3, recordHookSignalV3, } from "./producers/recorder.js";
+import { livePlatformV3 } from "./runtime-identity.js";
+export { liveInstanceIdV3, nativeInstanceIdV3, } from "./live-route-observer.js";
+export { liveEventV3BuildId, livePlatformV3 } from "./runtime-identity.js";
 export const LIVE_HOOK_V3_PRODUCER_ID = "prd_agent-hook";
 export const LIVE_COMMAND_V3_PRODUCER_ID = "prd_session-tee";
 /**
  * Resolve the V3-only ledger route. A root without an initialized V3 control
- * packet is blocked; no producer or consumer may fall back to an older ledger.
+ * packet is blocked; no mutating producer may fall back to an older ledger.
  * Manifest-first crashes are repaired from the immutable packet and every
  * other invalid state closes the writer gate.
  */
@@ -15,36 +20,33 @@ export function resolveLiveEventLedgerRouteV3(coordRoot) {
         return { state: "blocked", reason: "v3_not_initialized" };
     if (control.state === "repairable")
         control = repairEventV3ControlPair(coordRoot);
-    if (control.state !== "candidate" && control.state !== "active") {
-        return { state: "blocked", reason: `${control.state}:${control.reason}` };
+    if ((control.state === "invalid" && control.reason === "genesis_schema_digest_incompatible") ||
+        ((control.state === "candidate" || control.state === "active") &&
+            !runtimeCapabilityProfileCurrentV3(control))) {
+        try {
+            control = refreshIncompatibleEventLedgerV3(coordRoot).control;
+        }
+        catch (error) {
+            return {
+                state: "blocked",
+                reason: `runtime_refresh_failed:${error instanceof Error ? error.message : String(error)}`,
+            };
+        }
     }
-    const buildId = liveEventV3BuildId(control.genesis.profile.harnery_commit);
-    if (!control.genesis.profile.producer_build_ids.includes(buildId)) {
-        return { state: "blocked", reason: "live_producer_build_not_approved" };
+    if (control.state === "active") {
+        // Bound the epoch every producer must re-validate: an oversized active
+        // segment rotates into the archive here, on the shared route boundary.
+        // Rotation failure never blocks recording; the current epoch stays live.
+        try {
+            const rotated = rotateOversizedEventLedgerV3(coordRoot);
+            if (rotated.state === "rotated" && rotated.control)
+                control = rotated.control;
+        }
+        catch {
+            // The oversized epoch keeps serving; the next route resolution retries.
+        }
     }
-    return { state: "v3", mode: control.state, build_id: buildId };
-}
-export function liveEventV3BuildId(harneryCommit) {
-    const exact = harneryCommit.normalize("NFC");
-    if (/^[a-zA-Z0-9._-]{1,120}$/.test(exact))
-        return `build_${exact}`;
-    return `build_${createHash("sha256").update(exact).digest("hex")}`;
-}
-export function liveInstanceIdV3(instanceId) {
-    if (/^inst_[a-zA-Z0-9._-]{1,128}$/.test(instanceId))
-        return instanceId;
-    if (/^[a-zA-Z0-9._-]{1,128}$/.test(instanceId))
-        return `inst_${instanceId}`;
-    return `inst_${createHash("sha256").update(instanceId.normalize("NFC")).digest("hex")}`;
-}
-/**
- * The adapter-native id a canonical `inst_*` id carries, for display and for
- * joins against native-keyed records. Only the direct prefix form round-trips:
- * a hashed id has no recoverable native form and is returned unchanged, so
- * never treat this as a guaranteed inverse of `liveInstanceIdV3`.
- */
-export function nativeInstanceIdV3(instanceId) {
-    return instanceId.startsWith("inst_") ? instanceId.slice("inst_".length) : instanceId;
+    return liveEventLedgerRouteFromControlV3(control);
 }
 export function hookSignalV3(eventName) {
     switch (eventName) {
@@ -124,6 +126,17 @@ export function recordLiveHookSignalV3(input) {
         ...(input.defer_drain ? { writerOptions: { deferDrain: true } } : {}),
     });
 }
+export function reconcileLivePendingRuntimeContextV3(input) {
+    return reconcilePendingRuntimeContextV3({
+        coordRoot: input.coordRoot,
+        mode: input.route.mode,
+        nativeSessionId: input.nativeSessionId,
+        producer_id: LIVE_HOOK_V3_PRODUCER_ID,
+        build_id: input.route.build_id,
+        platform: livePlatformV3(),
+        finalAttempt: input.finalAttempt,
+    });
+}
 /**
  * Open the child generation named by a native SubagentStart event.
  *
@@ -204,12 +217,3 @@ export function recordLiveDelegatedChildSessionV3(input) {
     });
     return started;
 }
-export function livePlatformV3() {
-    if (process.platform === "linux")
-        return "linux";
-    if (process.platform === "win32")
-        return "windows";
-    if (process.platform === "darwin")
-        return "macos";
-    return "unknown";
-}

package/dist/core/events/v3/producers/coordination-recorder.d.ts

@@ -1,8 +1,12 @@
 import type { Adapter } from "../../../adapter.js";
-import { type AuthorityReceiptV3, type AuthorityReconcilerV3 } from "../authority-outbox.js";
+import { type AuthorityReceiptV3, type AuthorityReconcilerV3, type AuthorityTransactionV3 } from "../authority-outbox.js";
 import type { EventV3 } from "../contract.js";
 import { type EventV3WriteMode } from "../control.js";
 import { type CoordinationAuthoritySignalV3, type CoordinationObservationBySignalV3 } from "./coordination.js";
+export interface PendingCoordinationTransactionV3Location {
+    producer_state_file: string;
+    transaction: AuthorityTransactionV3;
+}
 export interface RecordCoordinationAuthorityV3Input<S extends CoordinationAuthoritySignalV3 = CoordinationAuthoritySignalV3> {
     coordRoot: string;
     mode: EventV3WriteMode;
@@ -50,4 +54,10 @@ export type RecordCoordinationAuthorityV3Result = {
  * settled is refused rather than guessed at.
  */
 export declare function recordCoordinationAuthorityV3<S extends CoordinationAuthoritySignalV3>(input: RecordCoordinationAuthorityV3Input<S>): RecordCoordinationAuthorityV3Result;
+/** Locate the one private producer state that owns a pending authority transaction. */
+export declare function findPendingCoordinationTransactionV3(coordRoot: string, transactionId: string): PendingCoordinationTransactionV3Location | null;
+/** Clear one transaction from its exact producer state after durable quarantine is established. */
+export declare function withPendingCoordinationTransactionRecoveryV3<T>(coordRoot: string, producerStateFile: string, transaction: AuthorityTransactionV3, allowAlreadyCleared: boolean, operation: (control: {
+    clearPending: () => "cleared" | "already_cleared";
+}) => T): T;
 //# sourceMappingURL=coordination-recorder.d.ts.map

package/dist/core/events/v3/producers/coordination-recorder.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"coordination-recorder.d.ts","sourceRoot":"","sources":["../../../../../src/core/events/v3/producers/coordination-recorder.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAGnD,OAAO,EACL,KAAK,kBAAkB,EACvB,KAAK,qBAAqB,EAK3B,MAAM,wBAAwB,CAAC;AAGhC,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,KAAK,gBAAgB,EAA2B,MAAM,eAAe,CAAC;AAK/E,OAAO,EACL,KAAK,6BAA6B,EAClC,KAAK,iCAAiC,EAEvC,MAAM,mBAAmB,CAAC;AAyC3B,MAAM,WAAW,kCAAkC,CACjD,CAAC,SAAS,6BAA6B,GAAG,6BAA6B;IAEvE,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,gBAAgB,CAAC;IACvB,MAAM,EAAE,CAAC,CAAC;IACV,WAAW,EAAE,iCAAiC,CAAC,CAAC,CAAC,CAAC;IAClD,OAAO,EAAE,OAAO,CAAC;IACjB,uBAAuB,EAAE,MAAM,CAAC;IAChC,iBAAiB,EAAE,QAAQ,MAAM,EAAE,CAAC;IACpC,mBAAmB,EAAE,QAAQ,MAAM,EAAE,CAAC;IACtC,WAAW,EAAE,OAAO,MAAM,EAAE,CAAC;IAC7B,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B,QAAQ,EAAE,OAAO,GAAG,SAAS,GAAG,OAAO,GAAG,SAAS,CAAC;IACpD,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,2BAA2B,EAAE,UAAU,MAAM,EAAE,CAAC;IAChD,oBAAoB,EAAE,UAAU,MAAM,EAAE,CAAC;IACzC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,qBAAqB,CAAC;CACnC;AAED,MAAM,MAAM,mCAAmC,GAC3C;IAAE,KAAK,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACxC;IAAE,KAAK,EAAE,wBAAwB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACnD;IAAE,KAAK,EAAE,kBAAkB,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE,GACvE;IAAE,KAAK,EAAE,qBAAqB,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,GAC/E;IACE,KAAK,EAAE,UAAU,CAAC;IAClB,KAAK,EAAE,OAAO,CAAC;IACf,OAAO,EAAE,kBAAkB,CAAC;IAC5B,SAAS,EAAE,OAAO,CAAC;CACpB,CAAC;AAEN;;;;;;GAMG;AACH,wBAAgB,6BAA6B,CAAC,CAAC,SAAS,6BAA6B,EACnF,KAAK,EAAE,kCAAkC,CAAC,CAAC,CAAC,GAC3C,mCAAmC,CAuMrC"}
+{"version":3,"file":"coordination-recorder.d.ts","sourceRoot":"","sources":["../../../../../src/core/events/v3/producers/coordination-recorder.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAGnD,OAAO,EACL,KAAK,kBAAkB,EACvB,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAK5B,MAAM,wBAAwB,CAAC;AAGhC,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,KAAK,gBAAgB,EAA2B,MAAM,eAAe,CAAC;AAK/E,OAAO,EACL,KAAK,6BAA6B,EAClC,KAAK,iCAAiC,EAEvC,MAAM,mBAAmB,CAAC;AAyC3B,MAAM,WAAW,wCAAwC;IACvD,mBAAmB,EAAE,MAAM,CAAC;IAC5B,WAAW,EAAE,sBAAsB,CAAC;CACrC;AAED,MAAM,WAAW,kCAAkC,CACjD,CAAC,SAAS,6BAA6B,GAAG,6BAA6B;IAEvE,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,gBAAgB,CAAC;IACvB,MAAM,EAAE,CAAC,CAAC;IACV,WAAW,EAAE,iCAAiC,CAAC,CAAC,CAAC,CAAC;IAClD,OAAO,EAAE,OAAO,CAAC;IACjB,uBAAuB,EAAE,MAAM,CAAC;IAChC,iBAAiB,EAAE,QAAQ,MAAM,EAAE,CAAC;IACpC,mBAAmB,EAAE,QAAQ,MAAM,EAAE,CAAC;IACtC,WAAW,EAAE,OAAO,MAAM,EAAE,CAAC;IAC7B,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B,QAAQ,EAAE,OAAO,GAAG,SAAS,GAAG,OAAO,GAAG,SAAS,CAAC;IACpD,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,2BAA2B,EAAE,UAAU,MAAM,EAAE,CAAC;IAChD,oBAAoB,EAAE,UAAU,MAAM,EAAE,CAAC;IACzC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,qBAAqB,CAAC;CACnC;AAED,MAAM,MAAM,mCAAmC,GAC3C;IAAE,KAAK,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACxC;IAAE,KAAK,EAAE,wBAAwB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACnD;IAAE,KAAK,EAAE,kBAAkB,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE,GACvE;IAAE,KAAK,EAAE,qBAAqB,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,GAC/E;IACE,KAAK,EAAE,UAAU,CAAC;IAClB,KAAK,EAAE,OAAO,CAAC;IACf,OAAO,EAAE,kBAAkB,CAAC;IAC5B,SAAS,EAAE,OAAO,CAAC;CACpB,CAAC;AAEN;;;;;;GAMG;AACH,wBAAgB,6BAA6B,CAAC,CAAC,SAAS,6BAA6B,EACnF,KAAK,EAAE,kCAAkC,CAAC,CAAC,CAAC,GAC3C,mCAAmC,CAwNrC;AAED,uFAAuF;AACvF,wBAAgB,oCAAoC,CAClD,SAAS,EAAE,MAAM,EACjB,aAAa,EAAE,MAAM,GACpB,wCAAwC,GAAG,IAAI,CAgBjD;AAED,mGAAmG;AACnG,wBAAgB,4CAA4C,CAAC,CAAC,EAC5D,SAAS,EAAE,MAAM,EACjB,iBAAiB,EAAE,MAAM,EACzB,WAAW,EAAE,sBAAsB,EACnC,mBAAmB,EAAE,OAAO,EAC5B,SAAS,EAAE,CAAC,OAAO,EAAE;IAAE,YAAY,EAAE,MAAM,SAAS,GAAG,iBAAiB,CAAA;CAAE,KAAK,CAAC,GAC/E,CAAC,CA+BH"}

package/dist/core/events/v3/producers/coordination-recorder.js

@@ -1,10 +1,10 @@
 import { createHash, randomUUID } from "node:crypto";
-import { chmodSync, closeSync, existsSync, fsyncSync, mkdirSync, openSync, readFileSync, renameSync, statSync, unlinkSync, writeFileSync, } from "node:fs";
+import { chmodSync, closeSync, existsSync, fsyncSync, mkdirSync, openSync, readdirSync, readFileSync, renameSync, statSync, unlinkSync, writeFileSync, } from "node:fs";
 import { hostname } from "node:os";
-import { join, resolve } from "node:path";
+import { basename, join, resolve } from "node:path";
 import { fsyncParentDirectory } from "../../../workflow/durable-record.js";
 import { acquireNoClobberLease } from "../../../workflow/workspaces/leases.js";
-import { buildAuthorityTransactionV3, publishAuthorityTransactionV3, reconcileAuthorityTransactionV3, } from "../authority-outbox.js";
+import { authorityRecoveryIntentPathV3, buildAuthorityTransactionV3, publishAuthorityTransactionV3, reconcileAuthorityTransactionV3, } from "../authority-outbox.js";
 import { canonicalJsonV3, normalizeNativeIdV3 } from "../canonical.js";
 import { markObservedClockRegressionV3 } from "../clock-order.js";
 import { readEventV3ControlState } from "../control.js";
@@ -37,6 +37,9 @@ export function recordCoordinationAuthorityV3(input) {
     }
     const rootId = control.genesis.event.scope.root_id;
     const epochId = control.genesis.profile.privacy_key_epoch;
+    const epochFence = {
+        expectedGenesisId: control.genesis.event.payload.genesis_id,
+    };
     const rootContext = fingerprintContextV3(input.coordRoot, rootId, undefined, epochId);
     const producerSource = normalizeNativeIdV3(rootContext, "agent-coord.producer", `${input.adapter}\0${input.native_actor_session_id}\0${hook.generation_id}`);
     const sourceId = normalizeNativeIdV3(rootContext, "agent-coord.observation", input.observation.native_observation_id);
@@ -58,6 +61,13 @@ export function recordCoordinationAuthorityV3(input) {
             state.attestation_id = hook.attestation_id;
         }
         if (state?.pending) {
+            if (existsSync(authorityRecoveryIntentPathV3(input.coordRoot, state.pending.transaction.transaction_id))) {
+                return {
+                    state: "pending_transaction",
+                    transaction_id: state.pending.transaction.transaction_id,
+                    mutation_kind: state.pending.transaction.mutation.kind,
+                };
+            }
             if (state.pending.source_id !== sourceId) {
                 // A writer that died mid-commit leaves `pending` owned by an
                 // observation that will never retry (hook observations are one-shot).
@@ -68,8 +78,8 @@ export function recordCoordinationAuthorityV3(input) {
                 // still refuses rather than guessing at a conflicting mutation.
                 const stale = state.pending;
                 try {
-                    publishAuthorityTransactionV3(input.coordRoot, stale.transaction);
-                    reconcileAuthorityTransactionV3(input.coordRoot, stale.transaction.transaction_id, input.reconciler);
+                    publishAuthorityTransactionV3(input.coordRoot, stale.transaction, epochFence);
+                    reconcileAuthorityTransactionV3(input.coordRoot, stale.transaction.transaction_id, input.reconciler, epochFence);
                 }
                 catch {
                     return {
@@ -84,8 +94,8 @@ export function recordCoordinationAuthorityV3(input) {
             }
             else {
                 const pending = state.pending;
-                publishAuthorityTransactionV3(input.coordRoot, pending.transaction);
-                const receipt = reconcileAuthorityTransactionV3(input.coordRoot, pending.transaction.transaction_id, input.reconciler);
+                publishAuthorityTransactionV3(input.coordRoot, pending.transaction, epochFence);
+                const receipt = reconcileAuthorityTransactionV3(input.coordRoot, pending.transaction.transaction_id, input.reconciler, epochFence);
                 const event = eventFromTransaction(pending.transaction);
                 applyCoordinationEvent(state, pending.source_id, pending.transaction, event);
                 state.pending = undefined;
@@ -178,8 +188,8 @@ export function recordCoordinationAuthorityV3(input) {
             delete state.open_waits[waitId];
         state.pending = { source_id: sourceId, transaction };
         publishCoordinationState(path, state);
-        publishAuthorityTransactionV3(input.coordRoot, transaction);
-        const receipt = reconcileAuthorityTransactionV3(input.coordRoot, transaction.transaction_id, input.reconciler);
+        publishAuthorityTransactionV3(input.coordRoot, transaction, epochFence);
+        const receipt = reconcileAuthorityTransactionV3(input.coordRoot, transaction.transaction_id, input.reconciler, epochFence);
         applyCoordinationEvent(state, sourceId, transaction, normalized.event);
         state.pending = undefined;
         publishCoordinationState(path, state);
@@ -189,6 +199,59 @@ export function recordCoordinationAuthorityV3(input) {
         lease.release();
     }
 }
+/** Locate the one private producer state that owns a pending authority transaction. */
+export function findPendingCoordinationTransactionV3(coordRoot, transactionId) {
+    const directory = coordinationProducerDirectory(coordRoot);
+    if (!existsSync(directory))
+        return null;
+    const matches = readdirSync(directory)
+        .filter((name) => /^hid_[a-f0-9]{64}\.json$/.test(name))
+        .sort()
+        .flatMap((name) => {
+        const state = readCoordinationState(join(directory, name));
+        return state.pending?.transaction.transaction_id === transactionId
+            ? [{ producer_state_file: name, transaction: state.pending.transaction }]
+            : [];
+    });
+    if (matches.length > 1) {
+        throw new Error("authority transaction is pending in more than one coordination producer");
+    }
+    return matches[0] ?? null;
+}
+/** Clear one transaction from its exact producer state after durable quarantine is established. */
+export function withPendingCoordinationTransactionRecoveryV3(coordRoot, producerStateFile, transaction, allowAlreadyCleared, operation) {
+    if (!/^hid_[a-f0-9]{64}\.json$/.test(producerStateFile)) {
+        throw new Error("coordination producer state file is invalid");
+    }
+    const path = join(coordinationProducerDirectory(coordRoot), basename(producerStateFile));
+    if (!existsSync(path))
+        throw new Error("coordination producer state is missing");
+    const lease = acquireCoordinationLease(coordRoot, path);
+    try {
+        const state = readCoordinationState(path);
+        if (!state.pending && !allowAlreadyCleared) {
+            throw new Error("coordination producer no longer owns the pending transaction");
+        }
+        if (state.pending) {
+            if (state.pending.transaction.transaction_id !== transaction.transaction_id ||
+                canonicalJsonV3(state.pending.transaction) !== canonicalJsonV3(transaction)) {
+                throw new Error("coordination producer pending transaction changed during recovery");
+            }
+        }
+        return operation({
+            clearPending: () => {
+                if (!state.pending)
+                    return "already_cleared";
+                state.pending = undefined;
+                publishCoordinationState(path, state);
+                return "cleared";
+            },
+        });
+    }
+    finally {
+        lease.release();
+    }
+}
 function newCoordinationState(input, hook, epochId) {
     return {
         format: COORDINATION_STATE_FORMAT,
@@ -240,7 +303,10 @@ function eventFromTransaction(transaction) {
     return JSON.parse(transaction.event_row);
 }
 function coordinationStatePath(coordRoot, producerSource) {
-    return join(resolve(coordRoot), EVENT_V3_LEDGER_RELATIVE_ROOT, "private-producers/agent-coord", `${producerSource}.json`);
+    return join(coordinationProducerDirectory(coordRoot), `${producerSource}.json`);
+}
+function coordinationProducerDirectory(coordRoot) {
+    return join(resolve(coordRoot), EVENT_V3_LEDGER_RELATIVE_ROOT, "private-producers/agent-coord");
 }
 function acquireCoordinationLease(coordRoot, statePath) {
     const directory = join(statePath, "..");

package/dist/core/events/v3/producers/diagnostic-summaries.d.ts

@@ -0,0 +1,129 @@
+/**
+ * Producer-side bound on duplicate diagnostic file creation.
+ *
+ * A producer fault can emit the same diagnostic thousands of times per day,
+ * and every emission used to become one loose file in the diagnostics spool.
+ * This module keeps the first bounded loose exemplars per
+ * (category, reason, instance) key and UTC day unchanged, then coalesces
+ * further identical emissions into one deterministic summary file per key and
+ * window, preserving the exact logical count, first and last times,
+ * represented bytes, hourly rate buckets, and bounded exemplar digests.
+ *
+ * Below the bound the gate creates no state at all: admitted loose filenames
+ * carry the key digest as a suffix, and the gate counts a key's emissions for
+ * the window from those filenames alone. A summary file and its short-lived
+ * per-key lease exist only for a key that actually crossed the bound, so a
+ * healthy spool gains zero files and zero directories from this mitigation.
+ *
+ * The mitigation is fail-open: any count, lease, read, or publish failure
+ * admits the loose diagnostic exactly as before and appends to a lock-free,
+ * size-capped emergency log. It never deletes, moves, or rewrites an existing
+ * loose diagnostic, and it never calls back into the diagnostic writer.
+ */
+export declare const DIAGNOSTIC_SUMMARY_FORMAT: "harnery-v3-diagnostic-summary";
+export declare const DIAGNOSTIC_SUMMARY_VERSION: 1;
+/**
+ * Loose exemplars admitted per (category, reason, instance) key per UTC day
+ * before identical emissions coalesce into the key's summary. Frozen from a
+ * whole-history measurement: healthy categories peak well under this value
+ * per day across ALL keys combined, while a producer fault exceeds it within
+ * minutes. The bound is enforced from filename counts without cross-process
+ * locking, so simultaneous writers straddling the crossing can admit a few
+ * extra exemplars; the bound is a flood stop, not an exact quota.
+ */
+export declare const DIAGNOSTIC_LOOSE_EXEMPLAR_LIMIT = 32;
+export declare const DIAGNOSTIC_MITIGATION_HEALTH_FILE = "mitigation-health.ndjson";
+export interface DiagnosticContentFingerprint {
+    bytes: number;
+    sha256: string;
+}
+export interface DiagnosticGateInputV3 {
+    /** Already sanitized by the diagnostic writer. */
+    category: string;
+    reason?: string;
+    instanceId?: string;
+    fingerprint: DiagnosticContentFingerprint;
+    /** Approved scalar metadata only; stored once per summary. */
+    metadata: Record<string, string | number | boolean | null>;
+}
+export type DiagnosticGateDecisionV3 = {
+    admit: true;
+    /**
+     * Appended to the loose filename before `.json` so future gate calls
+     * can count the key's admitted exemplars from the directory listing.
+     * Empty when the gate is disabled.
+     */
+    loose_name_suffix: string;
+} | {
+    admit: false;
+    /** The summary file the emission was durably coalesced into. */
+    summary_path: string;
+};
+export interface DiagnosticSummaryV3 {
+    format: typeof DIAGNOSTIC_SUMMARY_FORMAT;
+    format_version: typeof DIAGNOSTIC_SUMMARY_VERSION;
+    category: string;
+    reason: string;
+    instance_id: string;
+    /** UTC day this summary covers, as YYYY-MM-DD. */
+    window: string;
+    /** Loose exemplar files observed for the key when the bound was crossed. */
+    loose_count: number;
+    /** Identical emissions coalesced here instead of becoming loose files. */
+    summarized_count: number;
+    first_summarized_at: string | null;
+    last_summarized_at: string | null;
+    /** Sum of content-fingerprint bytes across summarized emissions. */
+    represented_bytes: number;
+    /** Digests of the first summarized emissions, bounded. */
+    exemplars: DiagnosticContentFingerprint[];
+    /** Approved scalar metadata from the first summarized emission. */
+    metadata: Record<string, string | number | boolean | null>;
+    /** Summarized-only counts per UTC hour ("YYYY-MM-DDTHH"), pruned. */
+    recent_hours: Record<string, number>;
+}
+/** Aggregate of the append-only emergency fail-open log. */
+export interface DiagnosticMitigationHealthV3 {
+    fail_open_count: number;
+    last_fail_open_at: string | null;
+    by_stage: Record<string, number>;
+    /** True when the log hit its size cap and later fail-opens were dropped. */
+    truncated: boolean;
+}
+export declare function diagnosticSummariesRootV3(coordRoot: string): string;
+export declare function diagnosticSummariesEnabledV3(): boolean;
+/**
+ * Decide whether one diagnostic emission may become a loose file.
+ *
+ * Below the per-key bound (counted from digest-suffixed loose filenames) the
+ * emission is admitted with the suffix to append, and no summary or lease
+ * state is created. At or past the bound the emission is durably coalesced
+ * into the key's summary under a short per-key lease and `admit: false` is
+ * returned with the summary path. Any mitigation failure, and the disabled
+ * gate, admit the loose write exactly as before.
+ */
+export declare function gateProducerDiagnosticV3(coordRoot: string, input: DiagnosticGateInputV3, nowMs?: number): DiagnosticGateDecisionV3;
+export interface DiagnosticSummaryListingV3 {
+    summaries: DiagnosticSummaryV3[];
+    /** Physical summary files, including any that failed validation. */
+    file_count: number;
+    unreadable_count: number;
+    mitigation_health: DiagnosticMitigationHealthV3 | null;
+}
+/**
+ * Read every summary in the active epoch's `diagnostic-summaries/` subtree.
+ * Skips lease state, temp files, and the mitigation health log (which is
+ * aggregated into `mitigation_health` instead). Never throws; a missing
+ * subtree returns an empty listing.
+ */
+export declare function listDiagnosticSummariesV3(coordRoot: string): DiagnosticSummaryListingV3;
+/**
+ * Sum summarized-only occurrences inside a lookback window, from hour
+ * buckets. Hour-granular and conservative: a bucket is counted only when its
+ * whole hour lies inside `[sinceMs, nowMs]`, so a boundary bucket is excluded
+ * (up to 59 minutes undercounted) rather than fully included (up to 59
+ * minutes overcounted), and a future-dated bucket from clock skew never
+ * inflates a window.
+ */
+export declare function countSummarizedSinceV3(summaries: readonly DiagnosticSummaryV3[], sinceMs: number, filter?: (summary: DiagnosticSummaryV3) => boolean, nowMs?: number): number;
+//# sourceMappingURL=diagnostic-summaries.d.ts.map

package/dist/core/events/v3/producers/diagnostic-summaries.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"diagnostic-summaries.d.ts","sourceRoot":"","sources":["../../../../../src/core/events/v3/producers/diagnostic-summaries.ts"],"names":[],"mappings":"AAyBA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,eAAO,MAAM,yBAAyB,EAAG,+BAAwC,CAAC;AAClF,eAAO,MAAM,0BAA0B,EAAG,CAAU,CAAC;AAErD;;;;;;;;GAQG;AACH,eAAO,MAAM,+BAA+B,KAAK,CAAC;AAkBlD,eAAO,MAAM,iCAAiC,6BAA6B,CAAC;AAW5E,MAAM,WAAW,4BAA4B;IAC3C,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,qBAAqB;IACpC,kDAAkD;IAClD,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,4BAA4B,CAAC;IAC1C,8DAA8D;IAC9D,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC,CAAC;CAC5D;AAED,MAAM,MAAM,wBAAwB,GAChC;IACE,KAAK,EAAE,IAAI,CAAC;IACZ;;;;OAIG;IACH,iBAAiB,EAAE,MAAM,CAAC;CAC3B,GACD;IACE,KAAK,EAAE,KAAK,CAAC;IACb,gEAAgE;IAChE,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC;AAEN,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,OAAO,yBAAyB,CAAC;IACzC,cAAc,EAAE,OAAO,0BAA0B,CAAC;IAClD,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,kDAAkD;IAClD,MAAM,EAAE,MAAM,CAAC;IACf,4EAA4E;IAC5E,WAAW,EAAE,MAAM,CAAC;IACpB,0EAA0E;IAC1E,gBAAgB,EAAE,MAAM,CAAC;IACzB,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,oEAAoE;IACpE,iBAAiB,EAAE,MAAM,CAAC;IAC1B,0DAA0D;IAC1D,SAAS,EAAE,4BAA4B,EAAE,CAAC;IAC1C,mEAAmE;IACnE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC,CAAC;IAC3D,qEAAqE;IACrE,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACtC;AAED,4DAA4D;AAC5D,MAAM,WAAW,4BAA4B;IAC3C,eAAe,EAAE,MAAM,CAAC;IACxB,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,4EAA4E;IAC5E,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,wBAAgB,yBAAyB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAEnE;AAMD,wBAAgB,4BAA4B,IAAI,OAAO,CAEtD;AA2RD;;;;;;;;;GASG;AACH,wBAAgB,wBAAwB,CACtC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,qBAAqB,EAC5B,KAAK,SAAa,GACjB,wBAAwB,CAoD1B;AAED,MAAM,WAAW,0BAA0B;IACzC,SAAS,EAAE,mBAAmB,EAAE,CAAC;IACjC,oEAAoE;IACpE,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,MAAM,CAAC;IACzB,iBAAiB,EAAE,4BAA4B,GAAG,IAAI,CAAC;CACxD;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,SAAS,EAAE,MAAM,GAAG,0BAA0B,CA+BvF;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CACpC,SAAS,EAAE,SAAS,mBAAmB,EAAE,EACzC,OAAO,EAAE,MAAM,EACf,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,mBAAmB,KAAK,OAAO,EAClD,KAAK,SAAa,GACjB,MAAM,CAkBR"}