harnery 0.35.0 → 0.37.0

package/dist/core/supervisor/storage.d.ts

@@ -0,0 +1,30 @@
+import type { CoordinationHealthSnapshot } from "../agents/health.js";
+import type { SupervisorActivitySnapshot, SupervisorConsumerRecord, SupervisorFindingExplanation, SupervisorFindings, SupervisorHistory, SupervisorLogFeed, SupervisorServiceStatusRecord, SupervisorSnapshot, SupervisorTimeline } from "./contract.js";
+export interface SupervisorPaths {
+    root: string;
+    service: string;
+    lease: string;
+    stop: string;
+    snapshot: string;
+    history: string;
+    activity: string;
+    findings: string;
+    timelines: string;
+    explanations: string;
+    coordination_health: string;
+    log_feed: string;
+    consumers: string;
+}
+export declare function supervisorPaths(coordRootRaw: string): SupervisorPaths;
+export declare function supervisorConsumerPath(coordRoot: string, id: string): string;
+export declare function readSupervisorServiceRecord(coordRoot: string): SupervisorServiceStatusRecord | undefined;
+export declare function readSupervisorSnapshot(coordRoot: string): SupervisorSnapshot | undefined;
+export declare function readSupervisorHistory(coordRoot: string): SupervisorHistory | undefined;
+export declare function readSupervisorActivity(coordRoot: string): SupervisorActivitySnapshot | undefined;
+export declare function readSupervisorFindings(coordRoot: string): SupervisorFindings | undefined;
+export declare function readSupervisorTimeline(coordRoot: string, findingId: string): SupervisorTimeline | undefined;
+export declare function readSupervisorExplanation(coordRoot: string, findingId: string): SupervisorFindingExplanation | undefined;
+export declare function readCoordinationHealthSnapshot(coordRoot: string): CoordinationHealthSnapshot | undefined;
+export declare function readSupervisorLogFeed(coordRoot: string): SupervisorLogFeed | undefined;
+export declare function readSupervisorConsumer(path: string): SupervisorConsumerRecord | undefined;
+//# sourceMappingURL=storage.d.ts.map

package/dist/core/supervisor/storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../../../src/core/supervisor/storage.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AACtE,OAAO,KAAK,EACV,0BAA0B,EAC1B,wBAAwB,EACxB,4BAA4B,EAC5B,kBAAkB,EAClB,iBAAiB,EACjB,iBAAiB,EACjB,6BAA6B,EAC7B,kBAAkB,EAClB,kBAAkB,EACnB,MAAM,eAAe,CAAC;AAEvB,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,wBAAgB,eAAe,CAAC,YAAY,EAAE,MAAM,GAAG,eAAe,CAiBrE;AAED,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,CAE5E;AAED,wBAAgB,2BAA2B,CACzC,SAAS,EAAE,MAAM,GAChB,6BAA6B,GAAG,SAAS,CAE3C;AAED,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS,CAExF;AAED,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG,iBAAiB,GAAG,SAAS,CAEtF;AAED,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,MAAM,GAAG,0BAA0B,GAAG,SAAS,CAEhG;AAED,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS,CAExF;AAED,wBAAgB,sBAAsB,CACpC,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAChB,kBAAkB,GAAG,SAAS,CAIhC;AAED,wBAAgB,yBAAyB,CACvC,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAChB,4BAA4B,GAAG,SAAS,CAI1C;AAED,wBAAgB,8BAA8B,CAC5C,SAAS,EAAE,MAAM,GAChB,0BAA0B,GAAG,SAAS,CAExC;AAED,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG,iBAAiB,GAAG,SAAS,CAEtF;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,wBAAwB,GAAG,SAAS,CAEzF"}

package/dist/core/supervisor/storage.js

@@ -0,0 +1,73 @@
+import { existsSync, readFileSync } from "node:fs";
+import { join, resolve } from "node:path";
+export function supervisorPaths(coordRootRaw) {
+    const root = join(resolve(coordRootRaw), ".harnery", "supervisor");
+    return {
+        root,
+        service: join(root, "service.json"),
+        lease: join(root, "service.lease.json"),
+        stop: join(root, "stop.json"),
+        snapshot: join(root, "snapshot.json"),
+        history: join(root, "history.json"),
+        activity: join(root, "activity.json"),
+        findings: join(root, "findings.json"),
+        timelines: join(root, "timelines"),
+        explanations: join(root, "explanations"),
+        coordination_health: join(root, "coordination-health.json"),
+        log_feed: join(root, "log-feed.json"),
+        consumers: join(root, "consumers"),
+    };
+}
+export function supervisorConsumerPath(coordRoot, id) {
+    return join(supervisorPaths(coordRoot).consumers, `${safeId(id)}.json`);
+}
+export function readSupervisorServiceRecord(coordRoot) {
+    return readJson(supervisorPaths(coordRoot).service);
+}
+export function readSupervisorSnapshot(coordRoot) {
+    return readJson(supervisorPaths(coordRoot).snapshot);
+}
+export function readSupervisorHistory(coordRoot) {
+    return readJson(supervisorPaths(coordRoot).history);
+}
+export function readSupervisorActivity(coordRoot) {
+    return readJson(supervisorPaths(coordRoot).activity);
+}
+export function readSupervisorFindings(coordRoot) {
+    return readJson(supervisorPaths(coordRoot).findings);
+}
+export function readSupervisorTimeline(coordRoot, findingId) {
+    return readJson(join(supervisorPaths(coordRoot).timelines, `${safeId(findingId)}.json`));
+}
+export function readSupervisorExplanation(coordRoot, findingId) {
+    return readJson(join(supervisorPaths(coordRoot).explanations, `${safeId(findingId)}.json`));
+}
+export function readCoordinationHealthSnapshot(coordRoot) {
+    return readJson(supervisorPaths(coordRoot).coordination_health);
+}
+export function readSupervisorLogFeed(coordRoot) {
+    return readJson(supervisorPaths(coordRoot).log_feed);
+}
+export function readSupervisorConsumer(path) {
+    return readJson(path);
+}
+function readJson(path) {
+    if (!existsSync(path))
+        return undefined;
+    try {
+        const value = JSON.parse(readFileSync(path, "utf8"));
+        return value && typeof value === "object" && !Array.isArray(value) ? value : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+function safeId(value) {
+    const normalized = value
+        .toLowerCase()
+        .replace(/[^a-z0-9_-]+/g, "-")
+        .replace(/^-+|-+$/g, "");
+    if (!normalized)
+        throw new Error("supervisor consumer id must contain a letter or number");
+    return normalized.slice(0, 80);
+}

package/dist/core/supervisor/timeline.d.ts

@@ -0,0 +1,3 @@
+import { type SupervisorFinding, type SupervisorSourceReference, type SupervisorTimeline } from "./contract.js";
+export declare function buildSupervisorTimeline(finding: SupervisorFinding, relatedSources?: readonly SupervisorSourceReference[]): SupervisorTimeline;
+//# sourceMappingURL=timeline.d.ts.map

package/dist/core/supervisor/timeline.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"timeline.d.ts","sourceRoot":"","sources":["../../../src/core/supervisor/timeline.ts"],"names":[],"mappings":"AACA,OAAO,EAGL,KAAK,iBAAiB,EACtB,KAAK,yBAAyB,EAC9B,KAAK,kBAAkB,EAExB,MAAM,eAAe,CAAC;AAEvB,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,iBAAiB,EAC1B,cAAc,GAAE,SAAS,yBAAyB,EAAO,GACxD,kBAAkB,CAoDpB"}

package/dist/core/supervisor/timeline.js

@@ -0,0 +1,87 @@
+import { createHash } from "node:crypto";
+import { SUPERVISOR_DIAGNOSTIC_LIMITS, SUPERVISOR_TIMELINE_SCHEMA_VERSION, } from "./contract.js";
+export function buildSupervisorTimeline(finding, relatedSources = []) {
+    const relatedEntries = clusterRelatedSources(relatedSources);
+    const entries = [
+        entry("opened", finding.opened_at, finding.summary, finding.primary_source),
+        ...finding.evidence.map((evidence) => ({
+            ...entry("observed", evidence.source.observed_at, evidence.summary, evidence.source),
+            evidence_id: evidence.id,
+        })),
+        ...relatedEntries,
+        ...finding.capabilities
+            .filter((capability) => capability.state !== "supported")
+            .map((capability) => entry("capability", finding.observed_at, `${capability.source_kind} capability is ${capability.state}${capability.reason_code ? ` (${capability.reason_code})` : ""}.`, {
+            id: stableId("src", `${finding.id}:${capability.source_kind}:${capability.state}`),
+            source_kind: capability.source_kind,
+            source_id: capability.reason_code ?? capability.state,
+            observed_at: finding.observed_at,
+            capability: capability.state,
+        })),
+        ...(finding.state === "resolved" && finding.resolved_at
+            ? [
+                entry("resolved", finding.resolved_at, "The observed condition returned below its threshold.", finding.primary_source),
+            ]
+            : []),
+    ].sort((left, right) => left.occurred_at.localeCompare(right.occurred_at) || left.id.localeCompare(right.id));
+    const maxEntries = SUPERVISOR_DIAGNOSTIC_LIMITS.max_timeline_entries;
+    const bounded = entries.slice(-maxEntries);
+    return {
+        schema_version: SUPERVISOR_TIMELINE_SCHEMA_VERSION,
+        finding_id: finding.id,
+        start_at: bounded[0]?.occurred_at ?? finding.opened_at,
+        end_at: bounded[bounded.length - 1]?.occurred_at ?? finding.observed_at,
+        max_entries: maxEntries,
+        omitted_entries: Math.max(0, entries.length - bounded.length),
+        compacted_entries: Math.max(0, relatedSources.length - relatedEntries.length),
+        entries: bounded,
+        capabilities: finding.capabilities.slice(0, SUPERVISOR_DIAGNOSTIC_LIMITS.max_capabilities),
+    };
+}
+function entry(relation, occurredAt, summary, source) {
+    return {
+        id: stableId("tl", `${relation}\u0000${occurredAt}\u0000${source.id}\u0000${summary}`),
+        occurred_at: occurredAt,
+        first_occurred_at: occurredAt,
+        last_occurred_at: occurredAt,
+        occurrence_count: 1,
+        relation,
+        summary: summary.slice(0, SUPERVISOR_DIAGNOSTIC_LIMITS.max_summary_chars),
+        source,
+    };
+}
+function clusterRelatedSources(sources) {
+    const groups = new Map();
+    const ordered = [...sources].sort((left, right) => left.observed_at.localeCompare(right.observed_at) || left.id.localeCompare(right.id));
+    for (const source of ordered) {
+        const key = `${source.source_kind}\u0000${source.source_id}\u0000${source.capability}`;
+        const group = groups.get(key);
+        if (group) {
+            group.last = source;
+            group.count += 1;
+        }
+        else {
+            groups.set(key, { first: source, last: source, count: 1 });
+        }
+    }
+    return [...groups.entries()].map(([key, group]) => {
+        const firstAt = group.first.observed_at;
+        const lastAt = group.last.observed_at;
+        const summary = group.count === 1
+            ? `Related ${group.last.source_kind} activity was observed in the same time range.`
+            : `${group.count} related ${group.last.source_kind} ${group.last.source_id} observations were recorded in the same time range.`;
+        return {
+            id: stableId("tl", `related\u0000${key}\u0000${firstAt}\u0000${lastAt}\u0000${group.count}`),
+            occurred_at: lastAt,
+            first_occurred_at: firstAt,
+            last_occurred_at: lastAt,
+            occurrence_count: group.count,
+            relation: "related",
+            summary: summary.slice(0, SUPERVISOR_DIAGNOSTIC_LIMITS.max_summary_chars),
+            source: group.last,
+        };
+    });
+}
+function stableId(prefix, value) {
+    return `${prefix}_${createHash("sha256").update(value).digest("hex").slice(0, 24)}`;
+}

package/dist/core/work/state.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"state.d.ts","sourceRoot":"","sources":["../../../src/core/work/state.ts"],"names":[],"mappings":"AAuBA,eAAO,MAAM,0BAA0B,EAAG,CAAU,CAAC;AACrD,eAAO,MAAM,yBAAyB,EAAG,CAAU,CAAC;AAwBpD,MAAM,MAAM,SAAS,GACjB,SAAS,GACT,OAAO,GACP,SAAS,GACT,mBAAmB,GACnB,WAAW,GACX,SAAS,GACT,WAAW,GACX,WAAW,CAAC;AAEhB,MAAM,MAAM,cAAc,GACtB,uBAAuB,GACvB,KAAK,GACL,cAAc,GACd,kBAAkB,GAClB,QAAQ,GACR,OAAO,GACP,QAAQ,GACR,MAAM,CAAC;AAEX,MAAM,MAAM,kBAAkB,GAAG,SAAS,GAAG,OAAO,CAAC;AAErD,MAAM,WAAW,UAAU;IACzB,cAAc,EAAE,OAAO,0BAA0B,CAAC;IAClD,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,QAAQ,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3C,YAAY,EAAE,MAAM,CAAC;IACrB;;;0DAGsD;IACtD,sBAAsB,EAAE,MAAM,CAAC;IAC/B,MAAM,CAAC,EAAE;QAAE,IAAI,EAAE,OAAO,GAAG,UAAU,GAAG,UAAU,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACnE,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,aAAa,GACrB,cAAc,GACd,iBAAiB,GACjB,iBAAiB,GACjB,iBAAiB,GACjB,eAAe,GACf,gBAAgB,GAChB,eAAe,CAAC;AAEpB,MAAM,WAAW,SAAS;IACxB,cAAc,EAAE,OAAO,yBAAyB,CAAC;IACjD,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,aAAa,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,kBAAkB,CAAC;IAC7B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,2BAA2B,CAAC,EAAE,MAAM,CAAC;IACrC,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B;gFAC4E;IAC5E,QAAQ,CAAC,EAAE,mBAAmB,EAAE,CAAC;IACjC,mEAAmE;IACnE,YAAY,CAAC,EAAE,sBAAsB,EAAE,CAAC;IACxC,KAAK,CAAC,EAAE,SAAS,CAAC;IAClB,WAAW,CAAC,EAAE,cAAc,CAAC;CAC9B;AAED,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,OAAO,GAAG,UAAU,CAAC;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,kBAAkB,CAAC;IAC7B,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,WAAW,GAAG,QAAQ,GAAG,MAAM,GAAG,uBAAuB,CAAC;IACzF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;4EAEwE;IACxE,SAAS,CAAC,EAAE,aAAa,GAAG,UAAU,GAAG,UAAU,CAAC;IACpD;6EACyE;IACzE,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,SAAS,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,cAAc,CAAC;IAC5B,uBAAuB,EAAE,MAAM,EAAE,CAAC;IAClC,QAAQ,EAAE,WAAW,EAAE,CAAC;IACxB;gEAC4D;IAC5D,aAAa,EAAE,MAAM,CAAC;IACtB;;6DAEyD;IACzD,gBAAgB,EAAE,MAAM,CAAC;IACzB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;0DAGsD;IACtD,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,UAAU,CAAC;IACnB,MAAM,EAAE,SAAS,EAAE,CAAC;IACpB,UAAU,EAAE,cAAc,CAAC;CAC5B;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,QAAQ,EAAE,eAAe,EAAE,CAAC;CAC7B;AAED,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,MAAM,CAAC,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC9B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,mBAAmB,GAAG,UAAU,CAmErE;AAED,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,UAAU,CAI1E;AAED,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,UAAU,EAAE,CAE7D;AAED,wBAAgB,yBAAyB,CAAC,SAAS,EAAE,MAAM,GAAG,cAAc,CAmB3E;AAED,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,UAAU,CAmC/F;AAED,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,UAAU,EAAE,CAIrF;AAED,wBAAgB,cAAc,CAC5B,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,KAAK,GAAE;IACL,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gBAAgB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,YAAY,CAAC,EAAE,SAAS,sBAAsB,EAAE,CAAC;CAC7C,GACL,UAAU,CAEZ;AAED,wBAAgB,cAAc,CAC5B,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,KAAK,GAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAO,GAC9C,UAAU,CAQZ;AAED,wBAAgB,cAAc,CAC5B,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,KAAK,GAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAAO,GAC5E,UAAU,CAQZ;AAED;+DAC+D;AAC/D,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,GACb;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,mBAAmB,EAAE,CAAA;CAAE,CAepD;AAED,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAEjD;AAED,wBAAgB,SAAS,IAAI,MAAM,CAElC;AAED,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC;AAwfD,kEAAkE;AAClE,wBAAgB,wBAAwB,CACtC,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,UAAU,EAClB,KAAK,EAAE,MAAM,GACZ,IAAI,CA4BN;AAED,kEAAkE;AAClE,wBAAgB,eAAe,CAC7B,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,gBAAgB,GAAG,SAAS,GAAG,KAAK,GAAG,IAAI,CAAC,GAClE,SAAS,CAOX;AA2ED,kEAAkE;AAClE,wBAAgB,yBAAyB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,UAAU,CAIvF;AAuJD,kEAAkE;AAClE,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,UAAU,GAAG,IAAI,CAMhE;AAkBD,kEAAkE;AAClE,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,IAAI,CAE9E;AAED,+CAA+C;AAC/C,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,IAAI,CAOnF;AAiKD,kEAAkE;AAClE,wBAAgB,YAAY,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,QAAQ,SAAa,GAAG,MAAM,CAE1E"}
+{"version":3,"file":"state.d.ts","sourceRoot":"","sources":["../../../src/core/work/state.ts"],"names":[],"mappings":"AA0BA,eAAO,MAAM,0BAA0B,EAAG,CAAU,CAAC;AACrD,eAAO,MAAM,yBAAyB,EAAG,CAAU,CAAC;AAwBpD,MAAM,MAAM,SAAS,GACjB,SAAS,GACT,OAAO,GACP,SAAS,GACT,mBAAmB,GACnB,WAAW,GACX,SAAS,GACT,WAAW,GACX,WAAW,CAAC;AAEhB,MAAM,MAAM,cAAc,GACtB,uBAAuB,GACvB,KAAK,GACL,cAAc,GACd,kBAAkB,GAClB,QAAQ,GACR,OAAO,GACP,QAAQ,GACR,MAAM,CAAC;AAEX,MAAM,MAAM,kBAAkB,GAAG,SAAS,GAAG,OAAO,CAAC;AAErD,MAAM,WAAW,UAAU;IACzB,cAAc,EAAE,OAAO,0BAA0B,CAAC;IAClD,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,QAAQ,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3C,YAAY,EAAE,MAAM,CAAC;IACrB;;;0DAGsD;IACtD,sBAAsB,EAAE,MAAM,CAAC;IAC/B,MAAM,CAAC,EAAE;QAAE,IAAI,EAAE,OAAO,GAAG,UAAU,GAAG,UAAU,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACnE,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,aAAa,GACrB,cAAc,GACd,iBAAiB,GACjB,iBAAiB,GACjB,iBAAiB,GACjB,eAAe,GACf,gBAAgB,GAChB,eAAe,CAAC;AAEpB,MAAM,WAAW,SAAS;IACxB,cAAc,EAAE,OAAO,yBAAyB,CAAC;IACjD,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,aAAa,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,kBAAkB,CAAC;IAC7B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,2BAA2B,CAAC,EAAE,MAAM,CAAC;IACrC,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B;gFAC4E;IAC5E,QAAQ,CAAC,EAAE,mBAAmB,EAAE,CAAC;IACjC,mEAAmE;IACnE,YAAY,CAAC,EAAE,sBAAsB,EAAE,CAAC;IACxC,KAAK,CAAC,EAAE,SAAS,CAAC;IAClB,WAAW,CAAC,EAAE,cAAc,CAAC;CAC9B;AAED,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,OAAO,GAAG,UAAU,CAAC;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,kBAAkB,CAAC;IAC7B,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,WAAW,GAAG,QAAQ,GAAG,MAAM,GAAG,uBAAuB,CAAC;IACzF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;4EAEwE;IACxE,SAAS,CAAC,EAAE,aAAa,GAAG,UAAU,GAAG,UAAU,CAAC;IACpD;6EACyE;IACzE,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,SAAS,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,cAAc,CAAC;IAC5B,uBAAuB,EAAE,MAAM,EAAE,CAAC;IAClC,QAAQ,EAAE,WAAW,EAAE,CAAC;IACxB;gEAC4D;IAC5D,aAAa,EAAE,MAAM,CAAC;IACtB;;6DAEyD;IACzD,gBAAgB,EAAE,MAAM,CAAC;IACzB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;0DAGsD;IACtD,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,UAAU,CAAC;IACnB,MAAM,EAAE,SAAS,EAAE,CAAC;IACpB,UAAU,EAAE,cAAc,CAAC;CAC5B;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,QAAQ,EAAE,eAAe,EAAE,CAAC;CAC7B;AAED,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,MAAM,CAAC,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC9B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,mBAAmB,GAAG,UAAU,CAmErE;AAED,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,UAAU,CAI1E;AAED,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,UAAU,EAAE,CAE7D;AAED,wBAAgB,yBAAyB,CAAC,SAAS,EAAE,MAAM,GAAG,cAAc,CAmB3E;AAED,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,UAAU,CAmC/F;AAED,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,UAAU,EAAE,CAIrF;AAED,wBAAgB,cAAc,CAC5B,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,KAAK,GAAE;IACL,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gBAAgB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,YAAY,CAAC,EAAE,SAAS,sBAAsB,EAAE,CAAC;CAC7C,GACL,UAAU,CAEZ;AAED,wBAAgB,cAAc,CAC5B,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,KAAK,GAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAO,GAC9C,UAAU,CAQZ;AAED,wBAAgB,cAAc,CAC5B,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,KAAK,GAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAAO,GAC5E,UAAU,CAQZ;AAED;+DAC+D;AAC/D,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,GACb;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,mBAAmB,EAAE,CAAA;CAAE,CAepD;AAED,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAEjD;AAED,wBAAgB,SAAS,IAAI,MAAM,CAElC;AAED,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC;AAwfD,kEAAkE;AAClE,wBAAgB,wBAAwB,CACtC,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,UAAU,EAClB,KAAK,EAAE,MAAM,GACZ,IAAI,CA4BN;AAED,kEAAkE;AAClE,wBAAgB,eAAe,CAC7B,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,gBAAgB,GAAG,SAAS,GAAG,KAAK,GAAG,IAAI,CAAC,GAClE,SAAS,CAOX;AA+DD,kEAAkE;AAClE,wBAAgB,yBAAyB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,UAAU,CAIvF;AAuJD,kEAAkE;AAClE,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,UAAU,GAAG,IAAI,CAMhE;AAkBD,kEAAkE;AAClE,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,IAAI,CAE9E;AAED,+CAA+C;AAC/C,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,IAAI,CAOnF;AAiKD,kEAAkE;AAClE,wBAAgB,YAAY,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,QAAQ,SAAa,GAAG,MAAM,CAE1E"}

package/dist/core/work/state.js

@@ -1,7 +1,8 @@
 import { createHash, randomBytes, randomUUID } from "node:crypto";
-import { appendFileSync, chmodSync, closeSync, existsSync, mkdirSync, openSync, readdirSync, readFileSync, statSync, unlinkSync, writeFileSync, } from "node:fs";
+import { chmodSync, closeSync, existsSync, mkdirSync, openSync, readdirSync, readFileSync, statSync, unlinkSync, writeFileSync, } from "node:fs";
 import { hostname } from "node:os";
 import { dirname, isAbsolute, join, resolve } from "node:path";
+import { appendSegmentedJsonlFile, readSegmentedJsonlFileSync, } from "../storage/durable-history.js";
 import { readWorkflowApproval } from "../workflow/approvals.js";
 import { stableDigest } from "../workflow/durable-record.js";
 import { readWorkflowProof } from "../workflow/proof.js";
@@ -674,8 +675,6 @@ function appendWorkEventUnderLease(coordRoot, workId, input) {
         });
         return appendWorkEventUnderLease(coordRoot, workId, input);
     }
-    if (events.length >= MAX_EVENTS)
-        throw new Error(`work item ${workId} exceeds ${MAX_EVENTS} events`);
     const event = {
         schema_version: WORK_EVENT_SCHEMA_VERSION,
         work_id: workId,
@@ -688,13 +687,10 @@ function appendWorkEventUnderLease(coordRoot, workId, input) {
     if (Buffer.byteLength(line) > MAX_EVENT_BYTES) {
         throw new Error(`work event exceeds ${MAX_EVENT_BYTES} bytes`);
     }
-    const path = join(workDir(coordRoot, workId), "events.jsonl");
-    const existingBytes = existsSync(path) ? statSync(path).size : 0;
-    if (existingBytes + Buffer.byteLength(line) > MAX_EVENTS_BYTES) {
-        throw new Error("work event log would exceed its limit");
-    }
-    appendFileSync(path, line, { encoding: "utf8", mode: 0o600 });
-    chmodSync(path, 0o600);
+    appendSegmentedJsonlFile(join(workDir(coordRoot, workId), "events.jsonl"), event, {
+        max_record_bytes: MAX_EVENT_BYTES,
+        max_segment_bytes: MAX_EVENTS_BYTES,
+    });
     return event;
 }
 function readWorkIntent(coordRoot, workId) {
@@ -712,10 +708,10 @@ function readWorkIntent(coordRoot, workId) {
 function readWorkEvents(coordRoot, workId) {
     assertWorkId(workId);
     const path = join(workDir(coordRoot, workId), "events.jsonl");
-    if (!existsSync(path))
-        return [];
-    const events = readBoundedLines(path, MAX_EVENTS_BYTES, MAX_EVENT_BYTES, `work item ${workId} events`).map((line, index) => {
-        const event = parseObject(line, `work item ${workId} event ${index + 1}`);
+    const events = readSegmentedJsonlFileSync(path, {
+        max_record_bytes: MAX_EVENT_BYTES,
+        max_records: 1_000_000,
+    }).map((event, index) => {
         validateWorkEvent(event, workId, index + 1);
         return event;
     });

package/dist/core/workflow/admission.d.ts

@@ -0,0 +1,23 @@
+import { type EnsureSupervisorResult, type SupervisorFindings, type SupervisorStatus } from "../supervisor/index.js";
+import type { WorkflowDiagnosticAdmissionObservation } from "./types.js";
+export interface WorkflowDiagnosticAdmissionRuntime {
+    now: () => Date;
+    wait: (milliseconds: number) => Promise<void>;
+    registerConsumer: (coordRoot: string, input: {
+        id: string;
+        pid?: number;
+    }) => unknown;
+    unregisterConsumer: (coordRoot: string, id: string) => void;
+    ensureSupervisor: (coordRoot: string) => Promise<EnsureSupervisorResult>;
+    readStatus: (coordRoot: string, nowMs?: number) => SupervisorStatus;
+    readFindings: (coordRoot: string) => SupervisorFindings | undefined;
+}
+export interface ObserveWorkflowDiagnosticAdmissionInput {
+    coordRoot: string;
+    runId: string;
+    freshCycleWaitMs?: number;
+    runtime?: Partial<WorkflowDiagnosticAdmissionRuntime>;
+}
+export declare function observeWorkflowDiagnosticAdmission(input: ObserveWorkflowDiagnosticAdmissionInput): Promise<WorkflowDiagnosticAdmissionObservation>;
+export declare function failedWorkflowDiagnosticAdmissionObservation(error: unknown, requestedAt: Date, observedAt?: Date): WorkflowDiagnosticAdmissionObservation;
+//# sourceMappingURL=admission.d.ts.map

package/dist/core/workflow/admission.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admission.d.ts","sourceRoot":"","sources":["../../../src/core/workflow/admission.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,KAAK,sBAAsB,EAO3B,KAAK,kBAAkB,EACvB,KAAK,gBAAgB,EAEtB,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,sCAAsC,EAAE,MAAM,YAAY,CAAC;AAKzE,MAAM,WAAW,kCAAkC;IACjD,GAAG,EAAE,MAAM,IAAI,CAAC;IAChB,IAAI,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,gBAAgB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC;IACtF,kBAAkB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5D,gBAAgB,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACzE,UAAU,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,KAAK,gBAAgB,CAAC;IACpE,YAAY,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,kBAAkB,GAAG,SAAS,CAAC;CACrE;AAED,MAAM,WAAW,uCAAuC;IACtD,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,OAAO,CAAC,EAAE,OAAO,CAAC,kCAAkC,CAAC,CAAC;CACvD;AAED,wBAAsB,kCAAkC,CACtD,KAAK,EAAE,uCAAuC,GAC7C,OAAO,CAAC,sCAAsC,CAAC,CAoFjD;AAED,wBAAgB,4CAA4C,CAC1D,KAAK,EAAE,OAAO,EACd,WAAW,EAAE,IAAI,EACjB,UAAU,OAAa,GACtB,sCAAsC,CAmBxC"}

package/dist/core/workflow/admission.js

@@ -0,0 +1,136 @@
+import { buildDiagnosticAdvice } from "../diagnostics/advice.js";
+import { ensureSupervisorRunning, readSupervisorFindings, readSupervisorStatus, registerSupervisorConsumer, unregisterSupervisorConsumer, } from "../supervisor/index.js";
+const DEFAULT_FRESH_CYCLE_WAIT_MS = 4_000;
+const POLL_INTERVAL_MS = 50;
+export async function observeWorkflowDiagnosticAdmission(input) {
+    const runtime = admissionRuntime(input.runtime);
+    const requested = runtime.now();
+    const requestedAt = requested.toISOString();
+    const startedMs = requested.getTime();
+    const consumerId = `workflow-${input.runId}`;
+    let serviceState = "unavailable";
+    try {
+        runtime.registerConsumer(input.coordRoot, { id: consumerId });
+        const ensured = await runtime.ensureSupervisor(input.coordRoot);
+        serviceState = ensured.state;
+        if (ensured.state === "unavailable") {
+            return unavailableObservation(runtime, requestedAt, startedMs, serviceState, "error", "supervisor_unavailable", ensured.error);
+        }
+        const deadlineMs = runtime.now().getTime() + normalizeWait(input.freshCycleWaitMs);
+        while (runtime.now().getTime() <= deadlineMs) {
+            const status = runtime.readStatus(input.coordRoot, runtime.now().getTime());
+            const sampledAt = status.record?.last_cycle_at;
+            if (status.running && sampledAt && Date.parse(sampledAt) >= requested.getTime()) {
+                const report = runtime.readFindings(input.coordRoot);
+                if (!report) {
+                    return unavailableObservation(runtime, requestedAt, startedMs, serviceState, "unsupported", "source_missing");
+                }
+                const observedAt = runtime.now().toISOString();
+                return {
+                    requested_at: requestedAt,
+                    observed_at: observedAt,
+                    wait_ms: elapsedMs(runtime, startedMs),
+                    service_state: serviceState,
+                    freshness: "fresh",
+                    sampled_at: sampledAt,
+                    advice: buildDiagnosticAdvice({
+                        findings: mergeFindings(report),
+                        sourceCapability: supportedCapability(),
+                        evaluatedAt: observedAt,
+                    }),
+                };
+            }
+            const remainingMs = deadlineMs - runtime.now().getTime();
+            if (remainingMs <= 0)
+                break;
+            await runtime.wait(Math.min(POLL_INTERVAL_MS, remainingMs));
+        }
+        return unavailableObservation(runtime, requestedAt, startedMs, serviceState, "expired", "fresh_cycle_timeout");
+    }
+    catch (error) {
+        return unavailableObservation(runtime, requestedAt, startedMs, serviceState, "error", "observation_failed", error instanceof Error ? error.message : String(error));
+    }
+    finally {
+        try {
+            runtime.unregisterConsumer(input.coordRoot, consumerId);
+        }
+        catch {
+            // Admission is observer-only. Cleanup failure cannot affect dispatch.
+        }
+    }
+}
+export function failedWorkflowDiagnosticAdmissionObservation(error, requestedAt, observedAt = new Date()) {
+    const capability = {
+        source_kind: "supervisor.findings",
+        state: "error",
+        reason_code: "observation_failed",
+        detail: (error instanceof Error ? error.message : String(error)).slice(0, 500),
+    };
+    return {
+        requested_at: requestedAt.toISOString(),
+        observed_at: observedAt.toISOString(),
+        wait_ms: Math.max(0, observedAt.getTime() - requestedAt.getTime()),
+        service_state: "unavailable",
+        freshness: "unavailable",
+        advice: buildDiagnosticAdvice({
+            findings: [],
+            sourceCapability: capability,
+            evaluatedAt: observedAt.toISOString(),
+        }),
+    };
+}
+function unavailableObservation(runtime, requestedAt, startedMs, serviceState, state, reasonCode, detail) {
+    const observedAt = runtime.now().toISOString();
+    const capability = {
+        source_kind: "supervisor.findings",
+        state,
+        reason_code: reasonCode,
+        ...(detail ? { detail: detail.slice(0, 500) } : {}),
+    };
+    const advice = buildDiagnosticAdvice({
+        findings: [],
+        sourceCapability: capability,
+        evaluatedAt: observedAt,
+    });
+    return {
+        requested_at: requestedAt,
+        observed_at: observedAt,
+        wait_ms: elapsedMs(runtime, startedMs),
+        service_state: serviceState,
+        freshness: "unavailable",
+        advice,
+    };
+}
+function mergeFindings(report) {
+    const byId = new Map();
+    for (const finding of report.transitions)
+        byId.set(finding.id, finding);
+    for (const finding of report.active)
+        byId.set(finding.id, finding);
+    return [...byId.values()];
+}
+function supportedCapability() {
+    return { source_kind: "supervisor.findings", state: "supported" };
+}
+function normalizeWait(value) {
+    if (value === undefined)
+        return DEFAULT_FRESH_CYCLE_WAIT_MS;
+    if (!Number.isFinite(value) || value < 0)
+        return DEFAULT_FRESH_CYCLE_WAIT_MS;
+    return Math.min(Math.floor(value), 30_000);
+}
+function elapsedMs(runtime, startedMs) {
+    return Math.max(0, runtime.now().getTime() - startedMs);
+}
+function admissionRuntime(overrides) {
+    return {
+        now: () => new Date(),
+        wait: (milliseconds) => new Promise((resolve) => setTimeout(resolve, milliseconds)),
+        registerConsumer: registerSupervisorConsumer,
+        unregisterConsumer: unregisterSupervisorConsumer,
+        ensureSupervisor: ensureSupervisorRunning,
+        readStatus: readSupervisorStatus,
+        readFindings: readSupervisorFindings,
+        ...overrides,
+    };
+}

package/dist/core/workflow/engine.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../../../src/core/workflow/engine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AA2CH,OAAO,KAAK,EAIV,UAAU,EAEV,SAAS,EAYV,MAAM,YAAY,CAAC;AAiDpB,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;gBAEf,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO;CAM/E;AAED,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;gBAEpB,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM;CAOvF;AAED;;;;6EAI6E;AAC7E,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;gBAEjB,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM;CAUhD;AAED,wBAAsB,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,CA6E1F"}
+{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../../../src/core/workflow/engine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAgDH,OAAO,KAAK,EAIV,UAAU,EAEV,SAAS,EAeV,MAAM,YAAY,CAAC;AAkDpB,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;gBAEf,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO;CAM/E;AAED,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;gBAEpB,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM;CAOvF;AAED;;;;6EAI6E;AAC7E,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;gBAEjB,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM;CAUhD;AAED,wBAAsB,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,CA6E1F"}

package/dist/core/workflow/engine.js

@@ -30,6 +30,7 @@ import { isAbsolute, join, resolve } from "node:path";
 import { pathToFileURL } from "node:url";
 import { snapshotRepo } from "../context/index.js";
 import { evaluatePolicy, normalizePolicy, PolicyDeniedError, policyDigest, summarizePolicyRequest, } from "../policy/index.js";
+import { failedWorkflowDiagnosticAdmissionObservation, observeWorkflowDiagnosticAdmission, } from "./admission.js";
 import { assertWorkflowRunId, createWorkflowApproval } from "./approvals.js";
 import { freezeWorkflowAttemptContext } from "./attempt-context.js";
 import { probeBilling } from "./billing.js";
@@ -37,10 +38,11 @@ import { stableDigest } from "./durable-record.js";
 import { evidencePreflightError } from "./evidence-preflight.js";
 import { endWorkflowChildSessionV3, startWorkflowChildSessionV3 } from "./live-session-v3.js";
 import { buildWorkflowProof, createEvidenceRecord, digestResult, normalizeWorkflowMeta, writeWorkflowProof, } from "./proof.js";
-import { acquireWorkflowResumeLease, assertWorkflowRunResumable, assertWorkflowScriptUnchanged, workflowScriptDigest, writeWorkflowRunManifest, } from "./run-state.js";
+import { acquireWorkflowResumeLease, assertWorkflowRunResumable, assertWorkflowScriptUnchanged, WORKFLOW_RUN_MANIFEST_SCHEMA_VERSION, workflowScriptDigest, writeWorkflowRunManifest, } from "./run-state.js";
 import { assertProjectionWithinWorkspace, resolveGitGrantRoots } from "./sandbox-projection.js";
 import { normalizeWorkflowSpecialists, resolveSpecialistAssignment } from "./specialists.js";
 import { appendWorkflowTranscriptEvent } from "./transcript.js";
+import { WORKFLOW_DIAGNOSTIC_ADMISSION_SCHEMA_VERSION } from "./types.js";
 import { parseStageOutput, validateAgainstSchema } from "./validate.js";
 import { freezeWorkflowWorkContext } from "./work-context.js";
 import { attestTerminal, attestWorkspaceFailure, resolveWorkspaceBinding, } from "./workspaces/execution.js";
@@ -234,6 +236,11 @@ async function executeWorkflow(scriptPath, absScript, opts, resumeState, workCon
     const approvalAddressee = frozen?.approval_addressee ?? opts.approvalAddressee ?? "operator";
     const subscriptionOnly = frozen?.subscription_only ?? Boolean(opts.subscriptionOnly);
     const allowApiBilling = frozen?.allow_api_billing ?? Boolean(opts.allowApiBilling);
+    const diagnosticAdmissionConfig = frozen?.diagnostic_admission
+        ? normalizeDiagnosticAdmissionConfig(frozen.diagnostic_admission)
+        : resumeState
+            ? undefined
+            : normalizeDiagnosticAdmissionConfig(opts.diagnosticAdmission);
     const startedAt = resumeState?.manifest.started_at ?? new Date().toISOString();
     const t0 = resumeState ? Date.parse(startedAt) : Date.now();
     const scriptSha256 = resumeState?.manifest.script.sha256 ?? workflowScriptDigest(absScript);
@@ -304,6 +311,7 @@ async function executeWorkflow(scriptPath, absScript, opts, resumeState, workCon
                 after: resumeState.manifest.repository_before,
                 agents: [],
                 evidence: [],
+                diagnosticAdmission: initialDiagnosticAdmissionProof(diagnosticAdmissionConfig),
                 adapterEvidence: opts.adapterEvidence,
                 adapterAttestations: opts.adapterAttestations,
                 sandboxProjection: sandboxProjectionEvidence(opts.filesystemPolicy, opts.gitWrite ?? "none"),
@@ -357,7 +365,7 @@ async function executeWorkflow(scriptPath, absScript, opts, resumeState, workCon
         writeWorkflowRunManifest({
             coordRoot: opts.coordRoot,
             manifest: {
-                schema_version: 1,
+                schema_version: WORKFLOW_RUN_MANIFEST_SCHEMA_VERSION,
                 run_id: runId,
                 work_item_id: opts.workItemId,
                 work_context: workContext,
@@ -371,6 +379,7 @@ async function executeWorkflow(scriptPath, absScript, opts, resumeState, workCon
                     default_adapter: defaultAdapter,
                     max_agents: maxAgents,
                     concurrency,
+                    diagnostic_admission: diagnosticAdmissionConfig,
                     subscription_only: subscriptionOnly,
                     allow_api_billing: allowApiBilling,
                     approval_mode: approvalMode,
@@ -463,6 +472,8 @@ async function executeWorkflow(scriptPath, absScript, opts, resumeState, workCon
     const evidenceRecords = [];
     const policyDecisions = new Map(history?.policyDecisions.map((decision) => [decision.id, decision]));
     const acceptanceIds = new Set(meta.acceptance.map((criterion) => criterion.id));
+    let diagnosticAdmission = initialDiagnosticAdmissionProof(diagnosticAdmissionConfig);
+    let diagnosticAdmissionPromise;
     const transcript = (event, data) => {
         appendWorkflowTranscriptEvent(opts.coordRoot, runId, event, { stage: currentStage, ...data });
     };
@@ -477,6 +488,42 @@ async function executeWorkflow(scriptPath, absScript, opts, resumeState, workCon
             result,
         });
     };
+    const ensureDiagnosticAdmissionObserved = async () => {
+        if (!diagnosticAdmissionConfig)
+            return;
+        diagnosticAdmissionPromise ??= (async () => {
+            const requestedAt = new Date();
+            let observation;
+            try {
+                observation = await (opts.observeDiagnosticAdmission ??
+                    ((coordRoot, observationRunId) => observeWorkflowDiagnosticAdmission({
+                        coordRoot,
+                        runId: observationRunId,
+                    })))(opts.coordRoot, runId);
+            }
+            catch (error) {
+                observation = failedWorkflowDiagnosticAdmissionObservation(error, requestedAt);
+            }
+            diagnosticAdmission = {
+                schema_version: WORKFLOW_DIAGNOSTIC_ADMISSION_SCHEMA_VERSION,
+                mode: "shadow",
+                trigger: "before-first-dispatch",
+                state: "observed",
+                action: "none",
+                observation,
+            };
+            transcript("diagnostic.admission", {
+                schema_version: diagnosticAdmission.schema_version,
+                mode: diagnosticAdmission.mode,
+                trigger: diagnosticAdmission.trigger,
+                action: diagnosticAdmission.action,
+                observation,
+            });
+            log(`[admission] shadow pressure=${observation.advice.pressure} ` +
+                `recommendation=${observation.advice.fan_out_recommendation}; dispatch unchanged`);
+        })();
+        await diagnosticAdmissionPromise;
+    };
     // Bounded concurrency gate shared by every spawn in the run — direct
     // `agent()` calls and `parallel()` thunks draw from the same slot pool, so
     // the cap holds even when a script nests parallel() inside loops.
@@ -791,6 +838,7 @@ async function executeWorkflow(scriptPath, absScript, opts, resumeState, workCon
             agentsSpawned++;
         await acquire();
         try {
+            await ensureDiagnosticAdmissionObserved();
             transcript("agent.start", {
                 id,
                 label,
@@ -1061,6 +1109,7 @@ async function executeWorkflow(scriptPath, absScript, opts, resumeState, workCon
                 after: snapshotRepo(executionCwd),
                 agents: Array.from(agentProofs.values()),
                 evidence: evidenceRecords,
+                diagnosticAdmission,
                 adapterEvidence: opts.adapterEvidence,
                 adapterAttestations: opts.adapterAttestations,
                 sandboxProjection: sandboxProjectionEvidence(filesystemPolicy, gitWrite),
@@ -1100,6 +1149,7 @@ async function executeWorkflow(scriptPath, absScript, opts, resumeState, workCon
                 mode: subscriptionOnly ? "subscription" : p.mode,
             })),
             policy: proof.policy?.summary,
+            diagnosticAdmission,
             workspaceBinding,
         };
         return report;
@@ -1140,6 +1190,7 @@ async function executeWorkflow(scriptPath, absScript, opts, resumeState, workCon
                 after: snapshotRepo(executionCwd),
                 agents: Array.from(agentProofs.values()),
                 evidence: evidenceRecords,
+                diagnosticAdmission,
                 adapterEvidence: opts.adapterEvidence,
                 adapterAttestations: opts.adapterAttestations,
                 sandboxProjection: sandboxProjectionEvidence(filesystemPolicy, gitWrite),
@@ -1278,6 +1329,30 @@ function loadRunHistory(path) {
 function round4(n) {
     return Math.round(n * 10_000) / 10_000;
 }
+function normalizeDiagnosticAdmissionConfig(value) {
+    if (value === undefined)
+        return undefined;
+    if (value.schema_version !== WORKFLOW_DIAGNOSTIC_ADMISSION_SCHEMA_VERSION ||
+        value.mode !== "shadow") {
+        throw new Error("diagnosticAdmission must use schema_version 1 and mode shadow");
+    }
+    return {
+        schema_version: WORKFLOW_DIAGNOSTIC_ADMISSION_SCHEMA_VERSION,
+        mode: "shadow",
+    };
+}
+function initialDiagnosticAdmissionProof(config) {
+    if (!config)
+        return undefined;
+    return {
+        schema_version: WORKFLOW_DIAGNOSTIC_ADMISSION_SCHEMA_VERSION,
+        mode: "shadow",
+        trigger: "before-first-dispatch",
+        state: "not-needed",
+        action: "none",
+        reason_code: "no-dispatch",
+    };
+}
 function assertAgentCapacity(agentsSpawned, maxAgents) {
     if (agentsSpawned >= maxAgents) {
         throw new Error(`workflow agent cap reached (${maxAgents}); raise --max-agents deliberately if the fan-out is intended`);