harnery 0.35.0 → 0.37.0

package/dist/core/events/v3/archive-retention.js

@@ -0,0 +1,195 @@
+/** Bounded retention for complete, closed Event Ledger V3 epochs. */
+import { existsSync, lstatSync, mkdirSync, readdirSync, readFileSync, rmSync, writeFileSync, } from "node:fs";
+import { basename, join, relative, resolve } from "node:path";
+import { artifactAutoCleanIntervalHours, eventLedgerArchivePolicy, } from "../../config.js";
+const ARCHIVE_PATTERN = /^epoch-[0-9]+(?:-[0-9]+)?$/;
+const AUTO_CLEAN_STAMP = ".harnery/event-v3-archive-auto-clean.json";
+export function eventV3ArchivesRoot(repoRoot) {
+    return join(resolve(repoRoot), ".harnery", "ledgers", "v3-archives");
+}
+export function inventoryEventV3Archives(repoRoot, opts = {}) {
+    const root = eventV3ArchivesRoot(repoRoot);
+    if (!existsSync(root))
+        return [];
+    const now = opts.now ?? new Date();
+    const policy = opts.policy ?? eventLedgerArchivePolicy(repoRoot);
+    const rows = readdirSync(root)
+        .sort()
+        .map((name) => classifyArchive(repoRoot, join(root, name)));
+    const managed = rows.filter((row) => row.classification === "retained" && row.bytes !== null && row.last_modified_at);
+    const newestFirst = [...managed].sort((left, right) => right.name.localeCompare(left.name));
+    const protectedNames = new Set(newestFirst.slice(0, policy.keepMin).map((row) => row.name));
+    const cutoff = now.getTime() - policy.maxAgeDays * 24 * 60 * 60 * 1000;
+    for (const row of managed) {
+        if (protectedNames.has(row.name)) {
+            row.classification = "protected-minimum";
+            row.reason = `one of the newest ${policy.keepMin} complete epochs`;
+            continue;
+        }
+        if (Date.parse(row.last_modified_at) <= cutoff) {
+            row.classification = "expired";
+            row.reason = `closed epoch is older than ${policy.maxAgeDays} days`;
+            row.action = "would-delete";
+        }
+    }
+    let retainedBytes = managed.reduce((sum, row) => sum + (row.bytes ?? 0), 0);
+    retainedBytes -= managed.reduce((sum, row) => sum + (row.action === "would-delete" ? (row.bytes ?? 0) : 0), 0);
+    const budgetCandidates = managed
+        .filter((row) => row.classification === "retained")
+        .sort((left, right) => left.name.localeCompare(right.name));
+    for (const row of budgetCandidates) {
+        if (retainedBytes <= policy.maxBytes)
+            break;
+        row.classification = "over-budget";
+        row.reason = `closed-epoch budget is ${policy.maxBytes} bytes; oldest epochs are removed first`;
+        row.action = "would-delete";
+        retainedBytes -= row.bytes ?? 0;
+    }
+    return rows;
+}
+export function cleanEventV3Archives(repoRoot, opts = {}) {
+    const rows = inventoryEventV3Archives(repoRoot, opts);
+    if (!opts.yes)
+        return rows;
+    return rows.map((entry) => {
+        if (entry.action !== "would-delete")
+            return entry;
+        const current = inventoryEventV3Archives(repoRoot, opts).find((row) => row.path === entry.path);
+        if (!current) {
+            return { ...entry, classification: "unknown", reason: "entry disappeared", action: "keep" };
+        }
+        if (current.action !== "would-delete" ||
+            current.bytes !== entry.bytes ||
+            current.last_modified_at !== entry.last_modified_at) {
+            return current;
+        }
+        try {
+            const stat = lstatSync(current.path);
+            if (!stat.isDirectory() || stat.isSymbolicLink() || !ARCHIVE_PATTERN.test(current.name)) {
+                return {
+                    ...current,
+                    classification: "unknown",
+                    reason: "entry changed before deletion",
+                    action: "keep",
+                };
+            }
+            rmSync(current.path, { recursive: true, force: false });
+            return { ...current, action: "deleted" };
+        }
+        catch (error) {
+            return {
+                ...current,
+                classification: "unknown",
+                reason: `entry changed or could not be deleted: ${error instanceof Error ? error.message : String(error)}`,
+                action: "keep",
+            };
+        }
+    });
+}
+export function autoCleanEventV3Archives(repoRoot, opts = {}) {
+    const now = opts.now ?? new Date();
+    const root = eventV3ArchivesRoot(repoRoot);
+    if (!existsSync(root))
+        return { ran: false, reason: "no-root", deleted: 0, bytes: 0 };
+    const policy = eventLedgerArchivePolicy(repoRoot);
+    if (!policy.autoClean)
+        return { ran: false, reason: "disabled", deleted: 0, bytes: 0 };
+    const stampPath = join(resolve(repoRoot), AUTO_CLEAN_STAMP);
+    const intervalMs = artifactAutoCleanIntervalHours() * 60 * 60 * 1000;
+    try {
+        const stamp = JSON.parse(readFileSync(stampPath, "utf8"));
+        const last = Date.parse(stamp.last_run_at ?? "");
+        if (Number.isFinite(last) && now.getTime() - last < intervalMs) {
+            return { ran: false, reason: "fresh", deleted: 0, bytes: 0 };
+        }
+    }
+    catch {
+        // Missing or unreadable stamp: sweep now.
+    }
+    mkdirSync(join(resolve(repoRoot), ".harnery"), { recursive: true });
+    writeFileSync(stampPath, `${JSON.stringify({ last_run_at: now.toISOString() }, null, 2)}\n`);
+    const rows = cleanEventV3Archives(repoRoot, { yes: true, now, policy });
+    const deletedRows = rows.filter((row) => row.action === "deleted");
+    const result = {
+        ran: true,
+        reason: "swept",
+        deleted: deletedRows.length,
+        bytes: deletedRows.reduce((sum, row) => sum + (row.bytes ?? 0), 0),
+    };
+    writeFileSync(stampPath, `${JSON.stringify({ last_run_at: now.toISOString(), ...result }, null, 2)}\n`);
+    return result;
+}
+function classifyArchive(repoRoot, path) {
+    const name = basename(path);
+    const base = {
+        name,
+        path,
+        relative_path: relative(repoRoot, path),
+        classification: "retained",
+        reason: "closed epoch is inside the retention window",
+        action: "keep",
+        bytes: null,
+        last_modified_at: null,
+    };
+    try {
+        const stat = lstatSync(path);
+        if (stat.isSymbolicLink()) {
+            return {
+                ...base,
+                classification: "symlink",
+                reason: "symlinks are never traversed or deleted",
+                bytes: stat.size,
+            };
+        }
+        if (!stat.isDirectory() || !ARCHIVE_PATTERN.test(name)) {
+            return {
+                ...base,
+                classification: "unmanaged",
+                reason: "entry is not a complete named epoch",
+            };
+        }
+        const measured = measureTree(path);
+        if (!measured) {
+            return {
+                ...base,
+                classification: "unknown",
+                reason: "one or more epoch paths are unreadable",
+            };
+        }
+        return {
+            ...base,
+            bytes: measured.bytes,
+            last_modified_at: new Date(measured.lastModifiedMs).toISOString(),
+        };
+    }
+    catch (error) {
+        return {
+            ...base,
+            classification: "unknown",
+            reason: `cannot inspect archive: ${error instanceof Error ? error.message : String(error)}`,
+        };
+    }
+}
+function measureTree(path) {
+    try {
+        const stat = lstatSync(path);
+        if (stat.isSymbolicLink() || stat.isFile()) {
+            return { bytes: stat.size, lastModifiedMs: stat.mtimeMs };
+        }
+        if (!stat.isDirectory())
+            return { bytes: 0, lastModifiedMs: stat.mtimeMs };
+        let bytes = stat.size;
+        let lastModifiedMs = stat.mtimeMs;
+        for (const child of readdirSync(path)) {
+            const measured = measureTree(join(path, child));
+            if (!measured)
+                return null;
+            bytes += measured.bytes;
+            lastModifiedMs = Math.max(lastModifiedMs, measured.lastModifiedMs);
+        }
+        return { bytes, lastModifiedMs };
+    }
+    catch {
+        return null;
+    }
+}

package/dist/core/events/v3/authority-outbox.d.ts

@@ -1,4 +1,8 @@
 import type { EventV3 } from "./contract.js";
+export interface AuthorityEpochFenceV3 {
+    /** Genesis id of the epoch the transaction's event was produced for. */
+    expectedGenesisId?: `gex_${string}`;
+}
 export type AuthorityMutationV3 = {
     kind: "task.transition";
     state: "set" | "cleared";
@@ -69,10 +73,11 @@ export declare function prepareAuthorityTransactionV3(coordRoot: string, input:
 /** Build and validate an authority transaction without touching durable state. */
 export declare function buildAuthorityTransactionV3(input: PrepareAuthorityTransactionV3Input): AuthorityTransactionV3;
 /** Publish an already-built transaction exactly, preserving its pre-minted event. */
-export declare function publishAuthorityTransactionV3(coordRoot: string, transaction: AuthorityTransactionV3): AuthorityTransactionV3;
+export declare function publishAuthorityTransactionV3(coordRoot: string, transaction: AuthorityTransactionV3, fence?: AuthorityEpochFenceV3): AuthorityTransactionV3;
 /** Apply or recognize the desired state, durably submit its event, then leave a hash-only receipt. */
-export declare function reconcileAuthorityTransactionV3(coordRoot: string, transactionId: string, reconciler: AuthorityReconcilerV3): AuthorityReceiptV3;
+export declare function reconcileAuthorityTransactionV3(coordRoot: string, transactionId: string, reconciler: AuthorityReconcilerV3, fence?: AuthorityEpochFenceV3): AuthorityReceiptV3;
 export declare function listPendingAuthorityTransactionsV3(coordRoot: string): AuthorityTransactionV3[];
+export declare function authorityRecoveryIntentPathV3(coordRoot: string, transactionId: string): string;
 export declare function readAuthorityTransactionV3(path: string): AuthorityTransactionV3;
 export declare function readAuthorityReceiptV3(path: string): AuthorityReceiptV3;
 //# sourceMappingURL=authority-outbox.d.ts.map

package/dist/core/events/v3/authority-outbox.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authority-outbox.d.ts","sourceRoot":"","sources":["../../../../src/core/events/v3/authority-outbox.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAU7C,MAAM,MAAM,mBAAmB,GAC3B;IACE,IAAI,EAAE,iBAAiB,CAAC;IACxB,KAAK,EAAE,KAAK,GAAG,SAAS,CAAC;IACzB,gBAAgB,CAAC,EAAE,UAAU,MAAM,EAAE,CAAC;CACvC,GACD;IACE,IAAI,EAAE,sBAAsB,CAAC;IAC7B,KAAK,EAAE,QAAQ,GAAG,SAAS,GAAG,MAAM,CAAC;IACrC,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,GACD;IACE,IAAI,EAAE,kBAAkB,CAAC;IACzB,SAAS,EAAE,UAAU,GAAG,UAAU,CAAC;IACnC,kBAAkB,EAAE,UAAU,MAAM,EAAE,CAAC;IACvC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;CAC1B,GACD;IACE,IAAI,EAAE,iBAAiB,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;CACrB,GACD;IACE,IAAI,EAAE,kBAAkB,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,UAAU,GAAG,QAAQ,GAAG,UAAU,CAAC;CAC7C,GACD;IACE,IAAI,EAAE,YAAY,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EACL,YAAY,GACZ,UAAU,GACV,UAAU,GACV,gBAAgB,GAChB,YAAY,GACZ,WAAW,CAAC;CACjB,GACD;IACE,IAAI,EAAE,UAAU,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EACH,WAAW,GACX,QAAQ,GACR,WAAW,GACX,WAAW,GACX,QAAQ,GACR,aAAa,GACb,SAAS,CAAC;CACf,CAAC;AAEN,MAAM,WAAW,kCAAkC;IACjD,cAAc,CAAC,EAAE,OAAO,MAAM,EAAE,CAAC;IACjC,2BAA2B,EAAE,UAAU,MAAM,EAAE,CAAC;IAChD,oBAAoB,EAAE,UAAU,MAAM,EAAE,CAAC;IACzC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,KAAK,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,wCAAwC,CAAC;IACjD,cAAc,EAAE,CAAC,CAAC;IAClB,cAAc,EAAE,OAAO,MAAM,EAAE,CAAC;IAChC,2BAA2B,EAAE,UAAU,MAAM,EAAE,CAAC;IAChD,oBAAoB,EAAE,UAAU,MAAM,EAAE,CAAC;IACzC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,oCAAoC,CAAC;IAC7C,cAAc,EAAE,CAAC,CAAC;IAClB,cAAc,EAAE,OAAO,MAAM,EAAE,CAAC;IAChC,kBAAkB,EAAE,UAAU,MAAM,EAAE,CAAC;IACvC,oBAAoB,EAAE,UAAU,MAAM,EAAE,CAAC;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,gBAAgB,EAAE,UAAU,MAAM,EAAE,CAAC;IACrC,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,qBAAqB;IACpC,eAAe,EAAE,MAAM,UAAU,MAAM,EAAE,CAAC;IAC1C,KAAK,EAAE,CAAC,QAAQ,EAAE,mBAAmB,EAAE,aAAa,EAAE,MAAM,KAAK,IAAI,CAAC;IACtE,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAED,wFAAwF;AACxF,wBAAgB,6BAA6B,CAC3C,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,kCAAkC,GACxC,sBAAsB,CAExB;AAED,kFAAkF;AAClF,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,kCAAkC,GACxC,sBAAsB,CAgBxB;AAED,qFAAqF;AACrF,wBAAgB,6BAA6B,CAC3C,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,sBAAsB,GAClC,sBAAsB,CAoBxB;AAED,sGAAsG;AACtG,wBAAgB,+BAA+B,CAC7C,SAAS,EAAE,MAAM,EACjB,aAAa,EAAE,MAAM,EACrB,UAAU,EAAE,qBAAqB,GAChC,kBAAkB,CAsCpB;AAED,wBAAgB,kCAAkC,CAAC,SAAS,EAAE,MAAM,GAAG,sBAAsB,EAAE,CAO9F;AAED,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,sBAAsB,CAa/E;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,kBAAkB,CAavE"}
+{"version":3,"file":"authority-outbox.d.ts","sourceRoot":"","sources":["../../../../src/core/events/v3/authority-outbox.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAK7C,MAAM,WAAW,qBAAqB;IACpC,wEAAwE;IACxE,iBAAiB,CAAC,EAAE,OAAO,MAAM,EAAE,CAAC;CACrC;AAQD,MAAM,MAAM,mBAAmB,GAC3B;IACE,IAAI,EAAE,iBAAiB,CAAC;IACxB,KAAK,EAAE,KAAK,GAAG,SAAS,CAAC;IACzB,gBAAgB,CAAC,EAAE,UAAU,MAAM,EAAE,CAAC;CACvC,GACD;IACE,IAAI,EAAE,sBAAsB,CAAC;IAC7B,KAAK,EAAE,QAAQ,GAAG,SAAS,GAAG,MAAM,CAAC;IACrC,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,GACD;IACE,IAAI,EAAE,kBAAkB,CAAC;IACzB,SAAS,EAAE,UAAU,GAAG,UAAU,CAAC;IACnC,kBAAkB,EAAE,UAAU,MAAM,EAAE,CAAC;IACvC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;CAC1B,GACD;IACE,IAAI,EAAE,iBAAiB,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;CACrB,GACD;IACE,IAAI,EAAE,kBAAkB,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,UAAU,GAAG,QAAQ,GAAG,UAAU,CAAC;CAC7C,GACD;IACE,IAAI,EAAE,YAAY,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EACL,YAAY,GACZ,UAAU,GACV,UAAU,GACV,gBAAgB,GAChB,YAAY,GACZ,WAAW,CAAC;CACjB,GACD;IACE,IAAI,EAAE,UAAU,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EACH,WAAW,GACX,QAAQ,GACR,WAAW,GACX,WAAW,GACX,QAAQ,GACR,aAAa,GACb,SAAS,CAAC;CACf,CAAC;AAEN,MAAM,WAAW,kCAAkC;IACjD,cAAc,CAAC,EAAE,OAAO,MAAM,EAAE,CAAC;IACjC,2BAA2B,EAAE,UAAU,MAAM,EAAE,CAAC;IAChD,oBAAoB,EAAE,UAAU,MAAM,EAAE,CAAC;IACzC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,KAAK,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,wCAAwC,CAAC;IACjD,cAAc,EAAE,CAAC,CAAC;IAClB,cAAc,EAAE,OAAO,MAAM,EAAE,CAAC;IAChC,2BAA2B,EAAE,UAAU,MAAM,EAAE,CAAC;IAChD,oBAAoB,EAAE,UAAU,MAAM,EAAE,CAAC;IACzC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,oCAAoC,CAAC;IAC7C,cAAc,EAAE,CAAC,CAAC;IAClB,cAAc,EAAE,OAAO,MAAM,EAAE,CAAC;IAChC,kBAAkB,EAAE,UAAU,MAAM,EAAE,CAAC;IACvC,oBAAoB,EAAE,UAAU,MAAM,EAAE,CAAC;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,gBAAgB,EAAE,UAAU,MAAM,EAAE,CAAC;IACrC,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,qBAAqB;IACpC,eAAe,EAAE,MAAM,UAAU,MAAM,EAAE,CAAC;IAC1C,KAAK,EAAE,CAAC,QAAQ,EAAE,mBAAmB,EAAE,aAAa,EAAE,MAAM,KAAK,IAAI,CAAC;IACtE,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAED,wFAAwF;AACxF,wBAAgB,6BAA6B,CAC3C,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,kCAAkC,GACxC,sBAAsB,CAExB;AAED,kFAAkF;AAClF,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,kCAAkC,GACxC,sBAAsB,CAgBxB;AAED,qFAAqF;AACrF,wBAAgB,6BAA6B,CAC3C,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,sBAAsB,EACnC,KAAK,GAAE,qBAA0B,GAChC,sBAAsB,CAuBxB;AAED,sGAAsG;AACtG,wBAAgB,+BAA+B,CAC7C,SAAS,EAAE,MAAM,EACjB,aAAa,EAAE,MAAM,EACrB,UAAU,EAAE,qBAAqB,EACjC,KAAK,GAAE,qBAA0B,GAChC,kBAAkB,CA2CpB;AAED,wBAAgB,kCAAkC,CAAC,SAAS,EAAE,MAAM,GAAG,sBAAsB,EAAE,CAO9F;AAED,wBAAgB,6BAA6B,CAAC,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,MAAM,CAG9F;AAED,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,sBAAsB,CAa/E;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,kBAAkB,CAavE"}

package/dist/core/events/v3/authority-outbox.js

@@ -3,6 +3,7 @@ import { closeSync, existsSync, fsyncSync, linkSync, openSync, readdirSync, read
 import { join } from "node:path";
 import { fsyncParentDirectory } from "../../workflow/durable-record.js";
 import { canonicalJsonV3, sha256V3 } from "./canonical.js";
+import { liveGenesisIdV3 } from "./control.js";
 import { assertEventV3 } from "./validate.js";
 import { ensureEventV3Layout, eventV3Paths, writeEventV3 } from "./writer.js";
 const SHA256_PATTERN = /^sha256:[a-f0-9]{64}$/;
@@ -33,9 +34,12 @@ export function buildAuthorityTransactionV3(input) {
     return transaction;
 }
 /** Publish an already-built transaction exactly, preserving its pre-minted event. */
-export function publishAuthorityTransactionV3(coordRoot, transaction) {
+export function publishAuthorityTransactionV3(coordRoot, transaction, fence = {}) {
     validateTransaction(transaction);
     const paths = ensureEventV3Layout(coordRoot);
+    if (fence.expectedGenesisId && liveGenesisIdV3(coordRoot) !== fence.expectedGenesisId) {
+        throw new Error("authority transaction epoch was replaced before publication");
+    }
     const readyPath = authorityReadyPath(paths.authorityOutbox, transaction.transaction_id);
     const serialized = `${canonicalJsonV3(transaction)}\n`;
     if (existsSync(readyPath)) {
@@ -57,7 +61,7 @@ export function publishAuthorityTransactionV3(coordRoot, transaction) {
     return transaction;
 }
 /** Apply or recognize the desired state, durably submit its event, then leave a hash-only receipt. */
-export function reconcileAuthorityTransactionV3(coordRoot, transactionId, reconciler) {
+export function reconcileAuthorityTransactionV3(coordRoot, transactionId, reconciler, fence = {}) {
     assertTransactionId(transactionId);
     const paths = ensureEventV3Layout(coordRoot);
     const committedPath = authorityCommittedPath(paths.authorityOutbox, transactionId);
@@ -77,7 +81,12 @@ export function reconcileAuthorityTransactionV3(coordRoot, transactionId, reconc
     }
     const event = JSON.parse(transaction.event_row);
     assertEventV3(event);
-    writeEventV3(coordRoot, event);
+    const durability = writeEventV3(coordRoot, event, {
+        ...(fence.expectedGenesisId ? { expectedGenesisId: fence.expectedGenesisId } : {}),
+    });
+    if (durability.state === "epoch_replaced") {
+        throw new Error("authority transaction epoch was replaced before its event committed");
+    }
     const receipt = {
         format: "harnery-event-v3-authority-receipt",
         format_version: 1,
@@ -109,6 +118,10 @@ export function listPendingAuthorityTransactionsV3(coordRoot) {
         .sort()
         .map((name) => readAuthorityTransactionV3(join(outbox, name)));
 }
+export function authorityRecoveryIntentPathV3(coordRoot, transactionId) {
+    assertTransactionId(transactionId);
+    return join(eventV3Paths(coordRoot).root, "authority-recoveries", `${transactionId}.ready.json`);
+}
 export function readAuthorityTransactionV3(path) {
     const serialized = readFileSync(path, "utf8");
     let parsed;