harnery 0.40.0 → 0.41.0

package/dist/core/events/v3/producers/recorder.js

@@ -2,8 +2,11 @@ import { createHash, randomUUID } from "node:crypto";
 import { chmodSync, closeSync, existsSync, fsyncSync, lstatSync, mkdirSync, openSync, readdirSync, readFileSync, renameSync, unlinkSync, writeFileSync, } from "node:fs";
 import { hostname } from "node:os";
 import { basename, join, resolve } from "node:path";
+import { normalizeAdapter } from "../../../adapter.js";
+import { adapterBehavior } from "../../../hooks/adapter/behaviors/index.js";
 import { extractBashCommand } from "../../../hooks/adapter/parse.js";
-import { discoverCodexSessionTranscript, readRuntimeContextTelemetry, readRuntimeTuning, } from "../../../hooks/adapter/runtime-telemetry.js";
+import { readRuntimeContextTelemetry, readRuntimeTuning, } from "../../../hooks/adapter/runtime-telemetry.js";
+import { stateDirMode, stateFileMode, stateModeTooOpen } from "../../../storage/modes.js";
 import { fsyncParentDirectory } from "../../../workflow/durable-record.js";
 import { acquireNoClobberLease } from "../../../workflow/workspaces/leases.js";
 import { EVENT_ADAPTER_IDS_V3 } from "../adapter-id.js";
@@ -18,6 +21,7 @@ import { attestationIdV3, clockIdV3, delegationIdV3, eventIdV3, generationIdV3,
 import { readLedgerV3 } from "../reader.js";
 import { effectiveRuntimeTelemetryCapabilitiesV3, } from "../runtime-telemetry-capabilities.js";
 import { closeSpanStateV3, openSpanStateV3, recoverSpanUpperBoundV3, } from "../span-state.js";
+import { prepareToolLineChanges } from "../tool-line-changes.js";
 import { extractTurnTelemetryV3, } from "../turn-telemetry.js";
 import { assertEventV3, validateEventV3 } from "../validate.js";
 import { EVENT_V3_LEDGER_RELATIVE_ROOT, writeEventV3, } from "../writer.js";
@@ -38,17 +42,6 @@ const ACTIVE_RUNTIME_CONTEXT_PROBE_INTERVAL_MS = 15_000;
 const STOP_RUNTIME_CONTEXT_RETRY_DELAYS_MS = [75, 175];
 /** Finalization is off the interactive hook path; briefly cover Codex's delayed transcript flush. */
 const APPROVED_END_RUNTIME_CONTEXT_RETRY_DELAYS_MS = [0, 250, 250];
-/**
- * Adapters whose turn-boundary recovery and mid-flight onboarding are enabled.
- * Kept in code, outside the digested capability profiles, so tuning recovery
- * never changes an adapter capability digest (ADR 0078).
- */
-const RECOVERY_ENABLED_ADAPTERS = new Set([
-    "claude-code",
-    "codex",
-    "cursor",
-    "openclaw",
-]);
 const STATE_LEASE_RETRY_ATTEMPTS = 8;
 const STATE_LEASE_RETRY_DELAY_MS = 25;
 /**
@@ -127,11 +120,11 @@ function sessionHashForSignal(input, context) {
     if (nativeSession !== undefined) {
         return normalizeNativeIdV3(context, `${input.adapter}.session`, nativeSession);
     }
-    // Cursor carries native session identity only on its start signal. Later
-    // hooks may still have an exact coordination instance, so reuse its single
-    // live producer authority instead of hashing the instance into a second
-    // state path. Ambiguous or absent matches keep the fail-closed fallback.
-    if (input.adapter === "cursor") {
+    // Some adapters carry native session identity only on their start signal.
+    // Later hooks may still have an exact coordination instance, so reuse its
+    // single live producer authority instead of hashing the instance into a
+    // second state path. Ambiguous or absent matches keep the fail-closed fallback.
+    if (adapterBehavior(input.adapter).sessionIdentityOnStartOnly) {
         const matches = listHookProducerStateRecordsV3(input.coordRoot).filter(({ state }) => state.adapter === input.adapter && state.instance_id === input.instance_id);
         if (matches.length === 1) {
             const name = basename(matches[0].path);
@@ -298,6 +291,7 @@ function sleepSync(milliseconds) {
 }
 /** The pre-spool body of the recorder: requires the session's state lease to be held. */
 function processHookSignalLocked(control, input, sessionHash, path) {
+    const behavior = adapterBehavior(input.adapter);
     const rootId = control.genesis.event.scope.root_id;
     const epochId = control.genesis.profile.privacy_key_epoch;
     const boundaryEventId = control.state === "candidate"
@@ -329,14 +323,15 @@ function processHookSignalLocked(control, input, sessionHash, path) {
                 state.capability_profile !== adapterCapabilityProfileDigestV3(input.adapter))) {
             throw new Error("V3 producer state authority does not match the active boundary");
         }
-        if (state?.adapter === "cursor" &&
+        if (state &&
+            behavior.tracksExecutionMode &&
             input.payload.cursor_mode &&
             input.payload.cursor_mode !== "unknown") {
             if (!state.cursor_mode || state.cursor_mode === "unknown") {
                 state.cursor_mode = input.payload.cursor_mode;
             }
             else if (state.cursor_mode !== input.payload.cursor_mode) {
-                throw new Error("Cursor execution mode changed within one V3 generation");
+                throw new Error("Execution mode changed within one V3 generation");
             }
         }
         let recovered;
@@ -375,7 +370,7 @@ function processHookSignalLocked(control, input, sessionHash, path) {
             // from the observer instance (that would split the real session).
             const nativeSessionIdentity = input.payload.session_id ?? input.payload.conversation_id ?? input.payload.agent_id;
             const onboardable = !state &&
-                RECOVERY_ENABLED_ADAPTERS.has(input.adapter) &&
+                behavior.turnRecovery &&
                 input.signal !== "session-end" &&
                 nativeSessionIdentity !== undefined;
             if (!onboardable) {
@@ -407,16 +402,16 @@ function processHookSignalLocked(control, input, sessionHash, path) {
                     instance_id: input.instance_id,
                     signal: input.signal,
                     session_hash: sessionHash,
-                    ...(input.adapter === "codex" ? codexMidFlightDiagnosticContext(input.payload) : {}),
+                    ...(behavior.midFlightDiagnosticContext?.(input.payload) ?? {}),
                 });
             }
         }
         const fingerprintContext = fingerprintContextV3(input.coordRoot, rootId, state.generation_id, state.privacy_epoch_id);
-        const recoveryEnabled = RECOVERY_ENABLED_ADAPTERS.has(input.adapter);
+        const recoveryEnabled = behavior.turnRecovery;
         const nativeTid = input.payload.turn_id
             ? normalizeNativeIdV3(fingerprintContext, `${input.adapter}.turn`, input.payload.turn_id).replace(/^hid_/, "tid_")
             : undefined;
-        const cursorPromptWithinOpenTurn = input.adapter === "cursor" &&
+        const cursorPromptWithinOpenTurn = behavior.promptContinuesOpenTurn &&
             input.signal === "user-prompt-submit" &&
             state.current_turn_id !== undefined &&
             state.current_turn_span !== undefined;
@@ -495,7 +490,29 @@ function processHookSignalLocked(control, input, sessionHash, path) {
         // their self-contained timing cannot drift by a millisecond.
         const eventClock = signalClock(input);
         if (input.signal === "after-agent-response") {
-            if (input.adapter !== "cursor" ||
+            // Cursor Stop followups auto-submit without beforeSubmitPrompt, so they
+            // never open a turn. The first stop already closed the human turn.
+            // Later completed replies still fire afterAgentResponse; bind them to a
+            // derived remediation turn so Stop can consume the new ritual instead of
+            // looping on the frozen first terminal.
+            const ritualFromResponseEvent = behavior.completedResponseEvent === input.signal;
+            if (ritualFromResponseEvent &&
+                input.turn_ritual &&
+                (!state.current_turn_id || !state.current_turn_span)) {
+                commitRecoveredToolTurnStart(input, state, path, rootId, fingerprintContext, {
+                    stop_remediation: true,
+                });
+                writeProducerDiagnosticV3(input.coordRoot, "cursor_response_ritual_recovered_turn", {
+                    adapter: input.adapter,
+                    instance_id: input.instance_id,
+                    generation_id: state.generation_id,
+                    signal: input.signal,
+                    reason: "no_open_turn",
+                    turn_id: state.current_turn_id,
+                    status_box_present_strict: input.turn_ritual.status_box_present_strict,
+                });
+            }
+            if (!ritualFromResponseEvent ||
                 !state.current_turn_id ||
                 !state.current_turn_span ||
                 !input.turn_ritual) {
@@ -588,6 +605,7 @@ function processHookSignalLocked(control, input, sessionHash, path) {
                 };
                 state.spans.push(span);
             }
+            span.line_changes = prepareToolLineChanges(input.payload, input.payload.cwd ?? input.coordRoot);
         }
         else if (input.signal === "post-tool-use" || input.signal === "post-tool-use-failure") {
             span = sourceId
@@ -740,11 +758,11 @@ function processHookSignalLocked(control, input, sessionHash, path) {
         const turnTelemetry = input.signal === "stop" || input.signal === "stop-failure"
             ? turnTelemetryForTerminal(input, state, eventClock.observed_at)
             : undefined;
-        const cursorToolChannelSupport = input.adapter === "cursor"
+        const cursorToolChannelSupport = behavior.tracksExecutionMode
             ? cursorToolChannelSupportV3(state.cursor_mode ?? "unknown")
             : undefined;
         const cursorToolChannelUnattested = (input.signal === "stop" || input.signal === "stop-failure") &&
-            input.adapter === "cursor" &&
+            behavior.tracksExecutionMode &&
             cursorToolChannelSupport !== "unsupported" &&
             state.tool_call_count === 0;
         if (input.signal === "sub-agent-start" && delegation && !delegation.open_event_id) {
@@ -755,13 +773,14 @@ function processHookSignalLocked(control, input, sessionHash, path) {
         // Before the signal's own event: the tool call or turn that carries the
         // new effort already ran under it, so it must ride the new attestation.
         maybeAttestTuningChange(input, state, path, rootId);
-        const cursorResponseRitual = input.adapter === "cursor" &&
+        const ritualArrivesSeparately = behavior.completedResponseEvent !== undefined;
+        const cursorResponseRitual = ritualArrivesSeparately &&
             (input.signal === "stop" || input.signal === "stop-failure") &&
             state.current_turn_id &&
             state.cursor_response_ritual?.turn_id === state.current_turn_id
             ? state.cursor_response_ritual
             : undefined;
-        const terminalTurnRitual = input.adapter === "cursor" && (input.signal === "stop" || input.signal === "stop-failure")
+        const terminalTurnRitual = ritualArrivesSeparately && (input.signal === "stop" || input.signal === "stop-failure")
             ? cursorResponseRitual
                 ? {
                     status_box_present: cursorResponseRitual.status_box_present,
@@ -814,6 +833,7 @@ function processHookSignalLocked(control, input, sessionHash, path) {
             span_id: openingSpan?.span_id ?? closingSpan?.span_id,
             parent_span_id: openingSpan?.parent_span_id ?? closingSpan?.parent_span_id,
             terminal_span: terminalSpan,
+            tool_line_changes: span?.line_changes,
             harness_timing: state.turn_harness,
             turn_telemetry: turnTelemetry,
             caused_by: [
@@ -1232,8 +1252,8 @@ function commitRecoveredTurnCompleted(input, state, path, rootId, fingerprintCon
     assertEventV3(event);
     commitEventLocked(input, state, path, event);
 }
-/** Open a derived turn for tools that arrive after their native turn closed. */
-function commitRecoveredToolTurnStart(input, state, path, rootId, fingerprintContext) {
+/** Open a derived turn for signals that arrive after their native turn closed. */
+function commitRecoveredToolTurnStart(input, state, path, rootId, fingerprintContext, options) {
     const clock = signalClock(input);
     const span = openSpanStateV3({
         span_id: spanIdV3(),
@@ -1268,6 +1288,7 @@ function commitRecoveredToolTurnStart(input, state, path, rootId, fingerprintCon
         observed_at: clock.observed_at,
         monotonic_ns: orderedEventMonotonic(state, input.monotonic_ns),
         clock_id: state.clock_id,
+        ...(options?.stop_remediation ? { stop_remediation: true } : {}),
     });
     if (event?.event_type !== "turn.started") {
         throw new Error("recovered tool turn start could not be normalized");
@@ -1478,7 +1499,8 @@ function maybeCommitActiveRuntimeContextObservation(input, state, path, rootId,
     }
     const nativeSessionId = input.payload.session_id ?? input.payload.conversation_id;
     const nativeTurnId = input.payload.turn_id ?? state.current_native_turn_id;
-    if (!nativeSessionId || (!nativeTurnId && input.adapter !== "cursor"))
+    const behavior = adapterBehavior(input.adapter);
+    if (!nativeSessionId || (!nativeTurnId && !behavior.nativeTurnIdOptional))
         return;
     const now = Date.now();
     const configuredInterval = input.runtimeTelemetryOptions?.activeContextProbeIntervalMs;
@@ -1504,21 +1526,20 @@ function maybeCommitActiveRuntimeContextObservation(input, state, path, rootId,
         commitActiveContextObservation(input, state, path, rootId, fingerprintContext, sourceEvent, native, nativeContextProvenance(input, state, native));
         return;
     }
-    if (input.adapter === "cursor" && state.cursor_mode === "cloud") {
-        publishProducerState(input.coordRoot, path, state);
-        return;
-    }
-    if (input.adapter === "openclaw") {
+    // Runtime readers exist only for workflow adapters; an event-only adapter
+    // has no transcript to read.
+    const runtimeAdapter = normalizeAdapter(input.adapter);
+    if (!runtimeAdapter || !behavior.runtimeContextAvailable(state.cursor_mode)) {
         publishProducerState(input.coordRoot, path, state);
         return;
     }
     const transcriptPath = runtimeTranscriptPath(input, state);
-    if (!transcriptPath && input.adapter !== "cursor") {
+    if (!transcriptPath && !behavior.runtimeContextTranscriptOptional) {
         publishProducerState(input.coordRoot, path, state);
         return;
     }
     const runtime = readRuntimeContextTelemetry({
-        adapter: input.adapter,
+        adapter: runtimeAdapter,
         session_id: nativeSessionId,
         ...(nativeTurnId ? { turn_id: nativeTurnId } : {}),
         ...(state.current_turn_span?.opened_at
@@ -1629,7 +1650,7 @@ function turnContextTarget(turnTerminal) {
     };
 }
 function queuePendingRuntimeContext(input, state, target, measurement, nativeTurnId) {
-    if (input.adapter !== "codex" ||
+    if (!adapterBehavior(input.adapter).runtimeContextRetry ||
         !target ||
         measurement.state !== "expected_but_missing" ||
         !retryableRuntimeContextReason(measurement.reason)) {
@@ -1654,8 +1675,10 @@ function queuePendingRuntimeContext(input, state, target, measurement, nativeTur
     ].slice(-PENDING_RUNTIME_CONTEXT_CAP);
 }
 function reconcilePendingRuntimeContexts(input, state, path, rootId, fingerprintContext, options = {}) {
-    if (state.adapter !== "codex" || !state.pending_runtime_contexts?.length)
+    if (!adapterBehavior(state.adapter).runtimeContextRetry ||
+        !state.pending_runtime_contexts?.length) {
         return;
+    }
     for (const pending of [...state.pending_runtime_contexts]) {
         const runtime = readRuntimeContextTelemetry({
             adapter: "codex",
@@ -1703,8 +1726,18 @@ function reconcilePendingRuntimeContexts(input, state, path, rootId, fingerprint
     publishProducerState(input.coordRoot, path, state);
 }
 function reconcilePendingRuntimeContextsBeforeApprovedEnd(input, state, path, rootId, fingerprintContext) {
-    if (state.adapter !== "codex" || !state.pending_runtime_contexts?.length)
+    if (!adapterBehavior(state.adapter).runtimeContextRetry ||
+        !state.pending_runtime_contexts?.length) {
         return;
+    }
+    // Context reconciliation continues the hook boot's sequence, even when the
+    // finalizer drives it. Recover that producer identity from its validated
+    // session start instead of attaching the sequence to the finalizer's name.
+    const ledger = readLedgerV3(input.coordRoot, { authority: input.mode });
+    const start = ledger.events.find(({ event }) => event.event_id === state.started_event_id)?.event;
+    if (!ledger.complete || !start || start.producer.boot_id !== state.boot_id) {
+        throw new Error("event_v3_finalizer_context_producer_unavailable");
+    }
     for (const [index, delayMs] of APPROVED_END_RUNTIME_CONTEXT_RETRY_DELAYS_MS.entries()) {
         if (delayMs > 0)
             sleepSync(delayMs);
@@ -1715,7 +1748,7 @@ function reconcilePendingRuntimeContextsBeforeApprovedEnd(input, state, path, ro
             payload: { raw: {} },
             adapter: state.adapter,
             instance_id: state.instance_id,
-            producer_id: "prd_agent-finalizer",
+            producer_id: start.producer.producer_id,
             build_id: input.build_id,
             platform: input.platform,
             observed_at: new Date().toISOString(),
@@ -1735,18 +1768,20 @@ function retryableRuntimeContextReason(reason) {
 }
 function turnTelemetryForTerminal(input, state, observedAt) {
     const native = extractTurnTelemetryV3(input.adapter, input.payload.raw, observedAt);
+    const behavior = adapterBehavior(input.adapter);
     if (native.context.state === "observed")
         return native;
-    if (input.adapter === "openclaw")
+    const runtimeAdapter = normalizeAdapter(input.adapter);
+    if (!runtimeAdapter || behavior.nativeTelemetryOnly)
         return native;
-    if (input.adapter === "cursor" && state.cursor_mode === "cloud") {
+    if (!behavior.runtimeContextAvailable(state.cursor_mode)) {
         return {
             ...native,
             context: { state: "unsupported", capability: "context_usage" },
         };
     }
     const request = {
-        adapter: input.adapter,
+        adapter: runtimeAdapter,
         session_id: input.payload.session_id ?? input.payload.conversation_id,
         turn_id: input.payload.turn_id ?? state.current_native_turn_id,
         transcript_path: runtimeTranscriptPath(input, state),
@@ -1756,7 +1791,7 @@ function turnTelemetryForTerminal(input, state, observedAt) {
     let runtime = readRuntimeContextTelemetry(request, input.runtimeTelemetryOptions);
     if (runtime.bytes_read > 0)
         recordRuntimeTelemetryTiming(state, runtime.io_duration_ms);
-    if (input.adapter === "codex" &&
+    if (behavior.runtimeContextRetry &&
         runtime.state === "partial" &&
         retryableRuntimeContextReason(runtime.reason)) {
         for (const delayMs of STOP_RUNTIME_CONTEXT_RETRY_DELAYS_MS) {
@@ -1788,26 +1823,27 @@ function turnTelemetryForTerminal(input, state, observedAt) {
  * events receive only numeric telemetry and an opaque source witness.
  */
 function runtimeTranscriptPath(input, state) {
-    if (input.adapter !== "codex")
+    const discover = adapterBehavior(input.adapter).discoverTranscript;
+    if (!discover)
         return input.payload.transcript_path;
     const nativeSessionId = input.payload.session_id ?? input.payload.conversation_id;
     if (!nativeSessionId)
         return input.payload.transcript_path;
     const supplied = input.payload.transcript_path;
     if (supplied) {
-        const verified = discoverCodexSessionTranscript(nativeSessionId, supplied, input.runtimeTelemetryOptions);
+        const verified = discover(nativeSessionId, supplied, input.runtimeTelemetryOptions);
         if (verified)
             state.runtime_transcript_path = verified;
         // Preserve a supplied mismatch so the typed reader reports it honestly.
         return verified ?? supplied;
     }
     if (state.runtime_transcript_path) {
-        const verified = discoverCodexSessionTranscript(nativeSessionId, state.runtime_transcript_path, input.runtimeTelemetryOptions);
+        const verified = discover(nativeSessionId, state.runtime_transcript_path, input.runtimeTelemetryOptions);
         if (verified)
             return verified;
         state.runtime_transcript_path = undefined;
     }
-    const discovered = discoverCodexSessionTranscript(nativeSessionId, undefined, input.runtimeTelemetryOptions);
+    const discovered = discover(nativeSessionId, undefined, input.runtimeTelemetryOptions);
     if (discovered)
         state.runtime_transcript_path = discovered;
     return discovered;
@@ -1889,12 +1925,13 @@ function maybeAttestTuningChange(input, state, path, rootId) {
     let candidate;
     let attestationSource = "native";
     let sourceEvent = `${input.adapter}.effort-payload`;
-    if (input.adapter === "claude-code" || input.adapter === "cursor") {
+    const behavior = adapterBehavior(input.adapter);
+    if (behavior.effortAttestation === "payload") {
         if (!input.payload.effort)
             return;
         candidate = { effort: input.payload.effort };
     }
-    else if (input.adapter === "codex" &&
+    else if (behavior.effortAttestation === "rollout-probe" &&
         (input.signal === "stop" ||
             // Early probe: without it, a Codex card shows no effort until the first
             // turn terminal. One rollout read per turn while effort is unknown.
@@ -1936,9 +1973,9 @@ function maybeAttestTuningChange(input, state, path, rootId) {
     if (baseline.effort === next.effort && (candidate.speed ?? baseline.speed) === baseline.speed) {
         return;
     }
-    // CC change detection rides the payload; the paired transcript row also
-    // carries speed and the (possibly swapped) model, so refresh from it.
-    if (input.adapter === "claude-code") {
+    // Payload change detection rides the payload; the paired transcript row
+    // also carries speed and the (possibly swapped) model, so refresh from it.
+    if (behavior.transcriptTuningRefresh) {
         const runtime = readRuntimeTuning({
             adapter: "claude-code",
             transcript_path: input.payload.transcript_path,
@@ -2074,11 +2111,7 @@ function commitRuntimeAttestationChange(input, state, path, rootId, change) {
     commitEventLocked(input, state, path, event);
 }
 function modelProviderFor(adapter) {
-    if (adapter === "claude-code")
-        return "anthropic";
-    if (adapter === "codex")
-        return "openai";
-    return adapter;
+    return adapterBehavior(adapter).modelProvider;
 }
 function recordRuntimeTelemetryTiming(state, durationMs) {
     const duration = Math.max(0, Math.ceil(durationMs));
@@ -2277,39 +2310,11 @@ function buildMidFlightSessionStart(input, state, rootId, cursorPromptBootstrap
  * so it is a high-confidence session boundary rather than degraded recovery.
  */
 function isCursorPromptBootstrap(input) {
-    return (input.adapter === "cursor" &&
+    return (adapterBehavior(input.adapter).promptMayPrecedeSessionStart &&
         input.signal === "user-prompt-submit" &&
         (input.payload.conversation_id !== undefined || input.payload.session_id !== undefined) &&
         input.payload.turn_id !== undefined);
 }
-/** Privacy-safe environment and recovery provenance for Codex mid-flight
- * onboarding. WSLENV values are never recorded, only normalized variable
- * names, and the native session identifier itself remains fingerprinted. */
-export function codexMidFlightDiagnosticContext(payload, env = process.env) {
-    const wslenv = env.WSLENV?.trim() ?? "";
-    const wslenvNames = [
-        ...new Set(wslenv
-            .split(":")
-            .map((entry) => entry.split("/", 1)[0]?.trim() ?? "")
-            .filter((name) => /^[A-Za-z_][A-Za-z0-9_]*$/.test(name))),
-    ]
-        .sort()
-        .join(":")
-        .slice(0, 512);
-    const identityRecoverySource = payload.session_id
-        ? "native_session_id"
-        : payload.conversation_id
-            ? "native_conversation_id"
-            : payload.agent_id
-                ? "native_agent_id"
-                : "unavailable";
-    return {
-        thread_id_present: Boolean(env.CODEX_THREAD_ID?.trim()),
-        wslenv_present: wslenv.length > 0,
-        wslenv_names: wslenvNames,
-        identity_recovery_source: identityRecoverySource,
-    };
-}
 function suppressClosedSpanSignal(input, sessionHash, category) {
     writeProducerDiagnosticV3(input.coordRoot, category, {
         adapter: input.adapter,
@@ -2616,7 +2621,7 @@ export function reanchorArchivedHookProducersV3(input) {
                 payload: {
                     raw: {},
                     ...(previous.current_native_turn_id ? { turn_id: previous.current_native_turn_id } : {}),
-                    ...(previous.adapter === "cursor" && previous.cursor_mode
+                    ...(adapterBehavior(previous.adapter).tracksExecutionMode && previous.cursor_mode
                         ? { cursor_mode: previous.cursor_mode }
                         : {}),
                 },
@@ -2761,7 +2766,8 @@ export function reconcilePendingRuntimeContextV3(input) {
             // holds everything this producer durably recorded.
             return { state: "missing" };
         }
-        if (state.adapter !== "codex" || !state.pending_runtime_contexts?.length) {
+        if (!adapterBehavior(state.adapter).runtimeContextRetry ||
+            !state.pending_runtime_contexts?.length) {
             return { state: "not_pending" };
         }
         const context = fingerprintContextV3(input.coordRoot, rootId, state.generation_id, state.privacy_epoch_id);
@@ -2845,7 +2851,9 @@ function newProducerState(input, sessionId, epochId, boundaryEventId, genesisId)
         generation_id: input.delegated_child?.generation_id ?? generationIdV3(),
         attestation_id: attestationIdV3(),
         capability_profile: adapterCapabilityProfileDigestV3(input.adapter),
-        cursor_mode: input.adapter === "cursor" ? (input.payload.cursor_mode ?? "unknown") : undefined,
+        cursor_mode: adapterBehavior(input.adapter).tracksExecutionMode
+            ? (input.payload.cursor_mode ?? "unknown")
+            : undefined,
         privacy_epoch_id: epochId,
         epoch_genesis_id: genesisId,
         boot_id: bootId,
@@ -3006,7 +3014,7 @@ function sourceIdForSignal(input, context) {
         : undefined;
 }
 function cursorShellSemanticKey(input, context) {
-    if (input.adapter !== "cursor")
+    if (!adapterBehavior(input.adapter).shellOperationDedup)
         return undefined;
     const command = extractBashCommand(input.payload.tool_name, input.payload.tool_input);
     return command
@@ -3134,9 +3142,9 @@ function producerStatePath(coordRoot, adapter, sessionHash) {
 function acquireStateLease(coordRoot, statePath) {
     const directory = join(statePath, "..");
     const producerRoot = join(resolve(coordRoot), EVENT_V3_LEDGER_RELATIVE_ROOT, "private-producers");
-    mkdirSync(directory, { recursive: true, mode: 0o700 });
-    chmodSync(producerRoot, 0o700);
-    chmodSync(directory, 0o700);
+    mkdirSync(directory, { recursive: true, mode: stateDirMode() });
+    chmodSync(producerRoot, stateDirMode());
+    chmodSync(directory, stateDirMode());
     const acquiredControl = readEventV3ControlState(coordRoot);
     const acquiredGenesis = acquiredControl.state === "candidate" || acquiredControl.state === "active"
         ? acquiredControl.genesis.event.payload.genesis_id
@@ -3179,13 +3187,13 @@ function publishProducerState(coordRoot, path, state) {
     const temporary = `${path}.tmp-${process.pid}-${randomUUID()}`;
     let fd;
     try {
-        fd = openSync(temporary, "wx", 0o600);
+        fd = openSync(temporary, "wx", stateFileMode());
         writeFileSync(fd, `${JSON.stringify(state)}\n`, "utf8");
         fsyncSync(fd);
         closeSync(fd);
         fd = undefined;
         renameSync(temporary, path);
-        chmodSync(path, 0o600);
+        chmodSync(path, stateFileMode());
         fsyncParentDirectory(path);
     }
     finally {
@@ -3200,8 +3208,8 @@ function readProducerState(path) {
     if (!metadata.isFile() || metadata.isSymbolicLink()) {
         throw new Error("V3 producer state path is unsafe");
     }
-    if ((metadata.mode & 0o077) !== 0)
-        throw new Error("V3 producer state is not owner-only");
+    if (stateModeTooOpen(metadata.mode))
+        throw new Error("V3 producer state is open to other users");
     let parsed;
     try {
         parsed = JSON.parse(readFileSync(path, "utf8"));
@@ -3230,7 +3238,7 @@ function readProducerState(path) {
         state.pending_runtime_contexts.length === 0) {
         state.pending_runtime_contexts = undefined;
     }
-    if (state.adapter === "cursor")
+    if (adapterBehavior(state.adapter).tracksExecutionMode)
         state.cursor_mode ??= "unknown";
     const allowedKeys = new Set([
         "active_runtime_context_probe",

package/dist/core/events/v3/recovery.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"recovery.d.ts","sourceRoot":"","sources":["../../../../src/core/events/v3/recovery.ts"],"names":[],"mappings":"AAsBA,OAAO,EAGL,KAAK,sBAAsB,EAO5B,MAAM,sBAAsB,CAAC;AAE9B,MAAM,WAAW,gCAAgC;IAC/C,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,UAAU,MAAM,EAAE,CAAC;IACjC,gBAAgB,EAAE,MAAM,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAED,MAAM,WAAW,iCAAiC;IAChD,KAAK,EAAE,WAAW,GAAG,mBAAmB,CAAC;IACzC,OAAO,EAAE,sBAAsB,CAAC;CACjC;AAED;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,gCAAgC,GACtC,iCAAiC,CAoEnC"}
+{"version":3,"file":"recovery.d.ts","sourceRoot":"","sources":["../../../../src/core/events/v3/recovery.ts"],"names":[],"mappings":"AAuBA,OAAO,EAGL,KAAK,sBAAsB,EAO5B,MAAM,sBAAsB,CAAC;AAE9B,MAAM,WAAW,gCAAgC;IAC/C,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,UAAU,MAAM,EAAE,CAAC;IACjC,gBAAgB,EAAE,MAAM,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAED,MAAM,WAAW,iCAAiC;IAChD,KAAK,EAAE,WAAW,GAAG,mBAAmB,CAAC;IACzC,OAAO,EAAE,sBAAsB,CAAC;CACjC;AAED;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,gCAAgC,GACtC,iCAAiC,CAoEnC"}

package/dist/core/events/v3/recovery.js

@@ -1,5 +1,6 @@
 import { chmodSync, closeSync, existsSync, fsyncSync, linkSync, mkdirSync, openSync, readdirSync, unlinkSync, writeFileSync, } from "node:fs";
 import { basename, join, resolve } from "node:path";
+import { stateDirMode, stateFileMode } from "../../storage/modes.js";
 import { fsyncParentDirectory } from "../../workflow/durable-record.js";
 import { initializeEventLedgerV3 } from "./bootstrap.js";
 import { canonicalJsonV3, sha256V3 } from "./canonical.js";
@@ -90,8 +91,8 @@ function recoveryIdFor(failure) {
 function publishRecoveryIntent(root, value) {
     const intent = validateEventV3RecoveryIntent(value);
     const records = eventV3RecoveryRecordsRoot(root);
-    mkdirSync(records, { recursive: true, mode: 0o700 });
-    chmodSync(records, 0o700);
+    mkdirSync(records, { recursive: true, mode: stateDirMode() });
+    chmodSync(records, stateDirMode());
     const path = recoveryIntentPath(records, intent.recovery_id);
     const serialized = `${canonicalJsonV3(intent)}\n`;
     if (existsSync(path)) {
@@ -209,7 +210,7 @@ function publishExclusive(path, serialized) {
     const temporary = `${path}.tmp.${process.pid}`;
     let fd;
     try {
-        fd = openSync(temporary, "wx", 0o600);
+        fd = openSync(temporary, "wx", stateFileMode());
         writeFileSync(fd, serialized, "utf8");
         fsyncSync(fd);
         closeSync(fd);

package/dist/core/events/v3/support-storage/inventory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"inventory.d.ts","sourceRoot":"","sources":["../../../../../src/core/events/v3/support-storage/inventory.ts"],"names":[],"mappings":"AAIA,OAAO,EAEL,KAAK,oCAAoC,EACzC,KAAK,yBAAyB,EAC/B,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAE/D,MAAM,WAAW,+BAA+B;IAC9C,KAAK,EAAE,QAAQ,GAAG,UAAU,CAAC;IAC7B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,4BAA4B;IAC3C,SAAS,EAAE,+BAA+B,CAAC;IAC3C,MAAM,EAAE,oBAAoB,CAAC;IAC7B,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,UAAU,MAAM,EAAE,CAAC;IAC3B,WAAW,EAAE,yBAAyB,CAAC;IACvC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,EAAE;QACR,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC;CACH;AAED,MAAM,WAAW,4BAA4B;IAC3C,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,+BAA+B,CAAC;IAC3C,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,MAAM,CACf,MAAM,EACN,IAAI,CAAC,oCAAoC,EAAE,QAAQ,GAAG,iBAAiB,GAAG,KAAK,CAAC,CACjF,CAAC;CACH;AAQD,0FAA0F;AAC1F,wBAAsB,uBAAuB,CAC3C,KAAK,EAAE,4BAA4B,GAClC,OAAO,CAAC,4BAA4B,EAAE,CAAC,CAqEzC"}
+{"version":3,"file":"inventory.d.ts","sourceRoot":"","sources":["../../../../../src/core/events/v3/support-storage/inventory.ts"],"names":[],"mappings":"AAKA,OAAO,EAEL,KAAK,oCAAoC,EACzC,KAAK,yBAAyB,EAC/B,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAE/D,MAAM,WAAW,+BAA+B;IAC9C,KAAK,EAAE,QAAQ,GAAG,UAAU,CAAC;IAC7B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,4BAA4B;IAC3C,SAAS,EAAE,+BAA+B,CAAC;IAC3C,MAAM,EAAE,oBAAoB,CAAC;IAC7B,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,UAAU,MAAM,EAAE,CAAC;IAC3B,WAAW,EAAE,yBAAyB,CAAC;IACvC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,EAAE;QACR,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC;CACH;AAED,MAAM,WAAW,4BAA4B;IAC3C,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,+BAA+B,CAAC;IAC3C,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,MAAM,CACf,MAAM,EACN,IAAI,CAAC,oCAAoC,EAAE,QAAQ,GAAG,iBAAiB,GAAG,KAAK,CAAC,CACjF,CAAC;CACH;AAQD,0FAA0F;AAC1F,wBAAsB,uBAAuB,CAC3C,KAAK,EAAE,4BAA4B,GAClC,OAAO,CAAC,4BAA4B,EAAE,CAAC,CAqEzC"}

package/dist/core/events/v3/support-storage/inventory.js

@@ -2,6 +2,7 @@ import { createHash } from "node:crypto";
 import { createReadStream } from "node:fs";
 import { lstat, readdir, realpath } from "node:fs/promises";
 import { basename, join, relative, resolve } from "node:path";
+import { stateModeTooOpen } from "../../../storage/modes.js";
 import { classifyEventV3Support, } from "./classify.js";
 const SUPPORT_ROOTS = [
     { prefix: "diagnostics", family: "diagnostic" },
@@ -58,7 +59,7 @@ export async function inventoryEventV3Support(input) {
                 authority_state: input.authority.state,
                 now: input.now,
                 file_regular: true,
-                file_owner_only: (fileStat.mode & 0o077) === 0,
+                file_owner_only: !stateModeTooOpen(fileStat.mode),
             });
             results.push({
                 authority: input.authority,

package/dist/core/events/v3/support-storage/maintenance.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"maintenance.d.ts","sourceRoot":"","sources":["../../../../../src/core/events/v3/support-storage/maintenance.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,gBAAgB,CAAC;AAEnE,OAAO,KAAK,EAAE,oBAAoB,EAAE,8BAA8B,EAAE,MAAM,oBAAoB,CAAC;AAK/F,MAAM,MAAM,8BAA8B,GACtC,SAAS,GACT,gBAAgB,GAChB,iBAAiB,GACjB,mBAAmB,GACnB,oBAAoB,GACpB,WAAW,CAAC;AAEhB,MAAM,WAAW,+BAA+B;IAC9C,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,UAAU,MAAM,EAAE,CAAC;IAC3B,MAAM,EAAE,oBAAoB,CAAC;IAC7B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,oCAAoC;IACnD,MAAM,EAAE,sCAAsC,CAAC;IAC/C,cAAc,EAAE,CAAC,CAAC;IAClB,cAAc,EAAE,OAAO,MAAM,EAAE,CAAC;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,8BAA8B,CAAC;IACtC,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE;QACT,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,EAAE,MAAM,CAAC;QACnB,KAAK,EAAE,QAAQ,GAAG,UAAU,CAAC;QAC7B,iBAAiB,EAAE,8BAA8B,CAAC;QAClD,uBAAuB,CAAC,EAAE,UAAU,MAAM,EAAE,CAAC;KAC9C,CAAC;IACF,OAAO,EAAE,+BAA+B,EAAE,CAAC;IAC3C,MAAM,CAAC,EAAE;QACP,aAAa,EAAE,MAAM,CAAC;QACtB,YAAY,EAAE,MAAM,CAAC;QACrB,OAAO,EAAE,OAAO,MAAM,EAAE,CAAC;KAC1B,CAAC;IACF,aAAa,CAAC,EAAE;QACd,oBAAoB,EAAE,OAAO,MAAM,EAAE,CAAC;QACtC,aAAa,EAAE,MAAM,CAAC;KACvB,CAAC;CACH;AAED,MAAM,WAAW,kCAAkC;IACjD,gBAAgB,EAAE,MAAM,CAAC;IACzB,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,QAAQ,GAAG,UAAU,CAAC;IACvC,uBAAuB,CAAC,EAAE,UAAU,MAAM,EAAE,CAAC;IAC7C,OAAO,EAAE,4BAA4B,EAAE,CAAC;IACxC,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;IACvB,GAAG,EAAE,MAAM,CAAC;CACb;AAED,2FAA2F;AAC3F,wBAAsB,6BAA6B,CACjD,KAAK,EAAE,kCAAkC,GACxC,OAAO,CAAC,oCAAoC,CAAC,CA0E/C;AAED,wBAAsB,oCAAoC,CAAC,KAAK,EAAE;IAChE,gBAAgB,EAAE,MAAM,CAAC;IACzB,cAAc,EAAE,MAAM,CAAC;IACvB,uBAAuB,EAAE,MAAM,CAAC;IAChC,GAAG,EAAE,MAAM,CAAC;CACb,GAAG,OAAO,CAAC,oCAAoC,CAAC,CAqChD;AAED,wBAAsB,qCAAqC,CAAC,KAAK,EAAE;IACjE,gBAAgB,EAAE,MAAM,CAAC;IACzB,cAAc,EAAE,MAAM,CAAC;IACvB,2BAA2B,EAAE,MAAM,CAAC;IACpC,GAAG,EAAE,MAAM,CAAC;CACb,GAAG,OAAO,CAAC,oCAAoC,CAAC,CAgDhD;AAED,uFAAuF;AACvF,wBAAsB,kCAAkC,CAAC,KAAK,EAAE;IAC9D,gBAAgB,EAAE,MAAM,CAAC;IACzB,cAAc,EAAE,MAAM,CAAC;IACvB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,GAAG,EAAE,OAAO,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;CACb,GAAG,OAAO,CAAC,oCAAoC,CAAC,CAahD;AAED,MAAM,WAAW,6BAA6B;IAC5C,cAAc,EAAE,OAAO,MAAM,EAAE,CAAC;IAChC,OAAO,EAAE,KAAK,CAAC;IACf,mBAAmB,EAAE,MAAM,CAAC;IAC5B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B,MAAM,EAAE,kDAAkD,CAAC;CAC5D;AAED,0FAA0F;AAC1F,wBAAsB,6BAA6B,CAAC,KAAK,EAAE;IACzD,gBAAgB,EAAE,MAAM,CAAC;IACzB,cAAc,EAAE,MAAM,CAAC;CACxB,GAAG,OAAO,CAAC,6BAA6B,CAAC,CAiBzC;AAED,wBAAgB,iCAAiC,IAAI,KAAK,CAEzD;AAED,wBAAsB,gCAAgC,CAAC,KAAK,EAAE;IAC5D,gBAAgB,EAAE,MAAM,CAAC;IACzB,cAAc,EAAE,MAAM,CAAC;IACvB,2BAA2B,EAAE,MAAM,CAAC;CACrC,GAAG,OAAO,CAAC;IACV,MAAM,EAAE,cAAc,GAAG,eAAe,GAAG,qBAAqB,GAAG,qBAAqB,CAAC;CAC1F,CAAC,CAoBD;AAED,wBAAsB,6BAA6B,CACjD,eAAe,EAAE,MAAM,EACvB,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,oCAAoC,CAAC,CAyB/C"}
+{"version":3,"file":"maintenance.d.ts","sourceRoot":"","sources":["../../../../../src/core/events/v3/support-storage/maintenance.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,gBAAgB,CAAC;AAEnE,OAAO,KAAK,EAAE,oBAAoB,EAAE,8BAA8B,EAAE,MAAM,oBAAoB,CAAC;AAK/F,MAAM,MAAM,8BAA8B,GACtC,SAAS,GACT,gBAAgB,GAChB,iBAAiB,GACjB,mBAAmB,GACnB,oBAAoB,GACpB,WAAW,CAAC;AAEhB,MAAM,WAAW,+BAA+B;IAC9C,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,UAAU,MAAM,EAAE,CAAC;IAC3B,MAAM,EAAE,oBAAoB,CAAC;IAC7B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,oCAAoC;IACnD,MAAM,EAAE,sCAAsC,CAAC;IAC/C,cAAc,EAAE,CAAC,CAAC;IAClB,cAAc,EAAE,OAAO,MAAM,EAAE,CAAC;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,8BAA8B,CAAC;IACtC,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE;QACT,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,EAAE,MAAM,CAAC;QACnB,KAAK,EAAE,QAAQ,GAAG,UAAU,CAAC;QAC7B,iBAAiB,EAAE,8BAA8B,CAAC;QAClD,uBAAuB,CAAC,EAAE,UAAU,MAAM,EAAE,CAAC;KAC9C,CAAC;IACF,OAAO,EAAE,+BAA+B,EAAE,CAAC;IAC3C,MAAM,CAAC,EAAE;QACP,aAAa,EAAE,MAAM,CAAC;QACtB,YAAY,EAAE,MAAM,CAAC;QACrB,OAAO,EAAE,OAAO,MAAM,EAAE,CAAC;KAC1B,CAAC;IACF,aAAa,CAAC,EAAE;QACd,oBAAoB,EAAE,OAAO,MAAM,EAAE,CAAC;QACtC,aAAa,EAAE,MAAM,CAAC;KACvB,CAAC;CACH;AAED,MAAM,WAAW,kCAAkC;IACjD,gBAAgB,EAAE,MAAM,CAAC;IACzB,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,QAAQ,GAAG,UAAU,CAAC;IACvC,uBAAuB,CAAC,EAAE,UAAU,MAAM,EAAE,CAAC;IAC7C,OAAO,EAAE,4BAA4B,EAAE,CAAC;IACxC,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;IACvB,GAAG,EAAE,MAAM,CAAC;CACb;AAED,2FAA2F;AAC3F,wBAAsB,6BAA6B,CACjD,KAAK,EAAE,kCAAkC,GACxC,OAAO,CAAC,oCAAoC,CAAC,CA0E/C;AAED,wBAAsB,oCAAoC,CAAC,KAAK,EAAE;IAChE,gBAAgB,EAAE,MAAM,CAAC;IACzB,cAAc,EAAE,MAAM,CAAC;IACvB,uBAAuB,EAAE,MAAM,CAAC;IAChC,GAAG,EAAE,MAAM,CAAC;CACb,GAAG,OAAO,CAAC,oCAAoC,CAAC,CAqChD;AAED,wBAAsB,qCAAqC,CAAC,KAAK,EAAE;IACjE,gBAAgB,EAAE,MAAM,CAAC;IACzB,cAAc,EAAE,MAAM,CAAC;IACvB,2BAA2B,EAAE,MAAM,CAAC;IACpC,GAAG,EAAE,MAAM,CAAC;CACb,GAAG,OAAO,CAAC,oCAAoC,CAAC,CAgDhD;AAED,uFAAuF;AACvF,wBAAsB,kCAAkC,CAAC,KAAK,EAAE;IAC9D,gBAAgB,EAAE,MAAM,CAAC;IACzB,cAAc,EAAE,MAAM,CAAC;IACvB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,GAAG,EAAE,OAAO,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;CACb,GAAG,OAAO,CAAC,oCAAoC,CAAC,CAahD;AAED,MAAM,WAAW,6BAA6B;IAC5C,cAAc,EAAE,OAAO,MAAM,EAAE,CAAC;IAChC,OAAO,EAAE,KAAK,CAAC;IACf,mBAAmB,EAAE,MAAM,CAAC;IAC5B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B,MAAM,EAAE,kDAAkD,CAAC;CAC5D;AAED,0FAA0F;AAC1F,wBAAsB,6BAA6B,CAAC,KAAK,EAAE;IACzD,gBAAgB,EAAE,MAAM,CAAC;IACzB,cAAc,EAAE,MAAM,CAAC;CACxB,GAAG,OAAO,CAAC,6BAA6B,CAAC,CAiBzC;AAED,wBAAgB,iCAAiC,IAAI,KAAK,CAEzD;AAED,wBAAsB,gCAAgC,CAAC,KAAK,EAAE;IAC5D,gBAAgB,EAAE,MAAM,CAAC;IACzB,cAAc,EAAE,MAAM,CAAC;IACvB,2BAA2B,EAAE,MAAM,CAAC;CACrC,GAAG,OAAO,CAAC;IACV,MAAM,EAAE,cAAc,GAAG,eAAe,GAAG,qBAAqB,GAAG,qBAAqB,CAAC;CAC1F,CAAC,CAoBD;AAED,wBAAsB,6BAA6B,CACjD,eAAe,EAAE,MAAM,EACvB,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,oCAAoC,CAAC,CAyB/C"}

package/dist/core/events/v3/support-storage/maintenance.js

@@ -2,6 +2,7 @@ import { createHash } from "node:crypto";
 import { constants, createReadStream } from "node:fs";
 import { chmod, lstat, mkdir, open, readdir, readFile, realpath } from "node:fs/promises";
 import { join, relative, resolve } from "node:path";
+import { stateDirMode, stateFileMode } from "../../../storage/modes.js";
 import { canonicalJsonV3 } from "../canonical.js";
 import { digestEventV3LogicalAuthority } from "./logical-authority.js";
 import { assertEventV3SupportPackAuthority, logicalEntriesDigestV3 } from "./pack-contract.js";
@@ -68,7 +69,7 @@ export async function planEventV3SupportTransaction(input) {
     };
     const directory = transactionDirectory(input.transaction_root, transactionId);
     try {
-        await mkdir(directory, { recursive: false, mode: 0o700 });
+        await mkdir(directory, { recursive: false, mode: stateDirMode() });
     }
     catch (error) {
         if (error.code !== "EEXIST")
@@ -79,7 +80,7 @@ export async function planEventV3SupportTransaction(input) {
         }
         return existing;
     }
-    await chmod(directory, 0o700);
+    await chmod(directory, stateDirMode());
     await publishState(directory, transaction);
     return transaction;
 }
@@ -284,7 +285,7 @@ function validTransition(from, to) {
 }
 async function publishState(directory, transaction) {
     const path = join(directory, `state-${String(transaction.sequence).padStart(6, "0")}.json`);
-    const handle = await open(path, constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL, 0o600);
+    const handle = await open(path, constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL, stateFileMode());
     try {
         await handle.writeFile(`${canonicalJsonV3(transaction)}\n`, "utf8");
         await handle.sync();

package/dist/core/events/v3/support-storage/pack-reader.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pack-reader.d.ts","sourceRoot":"","sources":["../../../../../src/core/events/v3/support-storage/pack-reader.ts"],"names":[],"mappings":"AAMA,OAAO,EAEL,KAAK,0BAA0B,EAC/B,KAAK,wBAAwB,EAI9B,MAAM,oBAAoB,CAAC;AAE5B,MAAM,WAAW,wBAAwB;IACvC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,CAAC,QAAQ,EAAE,sBAAsB,EAAE,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAClE;AAED,MAAM,WAAW,+BACf,SAAQ,IAAI,CAAC,wBAAwB,EAAE,gBAAgB,CAAC;IACxD,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,EAAE,0BAA0B,CAAC;IACrC,OAAO,EAAE,+BAA+B,EAAE,CAAC;CAC5C;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,EAAE,0BAA0B,CAAC;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,kBAAkB,EAAE,MAAM,CAAC;CAC5B;AAUD,wBAAsB,8BAA8B,CAClD,YAAY,EAAE,MAAM,EACpB,MAAM,GAAE,wBAA6B,GACpC,OAAO,CAAC,0BAA0B,CAAC,CAarC;AAED,4FAA4F;AAC5F,wBAAuB,+BAA+B,CACpD,YAAY,EAAE,MAAM,EACpB,MAAM,GAAE,wBAA6B,GACpC,cAAc,CAAC,+BAA+B,CAAC,CAGjD;AA2GD,wBAAsB,0BAA0B,CAC9C,YAAY,EAAE,MAAM,EACpB,MAAM,GAAE,wBAA6B,GACpC,OAAO,CAAC,2BAA2B,CAAC,CAWtC;AAED,yFAAyF;AACzF,wBAAsB,wBAAwB,CAC5C,YAAY,EAAE,MAAM,EACpB,MAAM,GAAE,wBAA6B,GACpC,OAAO,CAAC,0BAA0B,CAAC,CAarC;AAED,0FAA0F;AAC1F,wBAAsB,wBAAwB,CAC5C,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,MAAM,EACnB,MAAM,GAAE,wBAA6B,GACpC,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAAC,CA0BhE"}
+{"version":3,"file":"pack-reader.d.ts","sourceRoot":"","sources":["../../../../../src/core/events/v3/support-storage/pack-reader.ts"],"names":[],"mappings":"AAOA,OAAO,EAEL,KAAK,0BAA0B,EAC/B,KAAK,wBAAwB,EAI9B,MAAM,oBAAoB,CAAC;AAE5B,MAAM,WAAW,wBAAwB;IACvC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,CAAC,QAAQ,EAAE,sBAAsB,EAAE,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAClE;AAED,MAAM,WAAW,+BACf,SAAQ,IAAI,CAAC,wBAAwB,EAAE,gBAAgB,CAAC;IACxD,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,EAAE,0BAA0B,CAAC;IACrC,OAAO,EAAE,+BAA+B,EAAE,CAAC;CAC5C;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,EAAE,0BAA0B,CAAC;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,kBAAkB,EAAE,MAAM,CAAC;CAC5B;AAUD,wBAAsB,8BAA8B,CAClD,YAAY,EAAE,MAAM,EACpB,MAAM,GAAE,wBAA6B,GACpC,OAAO,CAAC,0BAA0B,CAAC,CAarC;AAED,4FAA4F;AAC5F,wBAAuB,+BAA+B,CACpD,YAAY,EAAE,MAAM,EACpB,MAAM,GAAE,wBAA6B,GACpC,cAAc,CAAC,+BAA+B,CAAC,CAGjD;AA2GD,wBAAsB,0BAA0B,CAC9C,YAAY,EAAE,MAAM,EACpB,MAAM,GAAE,wBAA6B,GACpC,OAAO,CAAC,2BAA2B,CAAC,CAWtC;AAED,yFAAyF;AACzF,wBAAsB,wBAAwB,CAC5C,YAAY,EAAE,MAAM,EACpB,MAAM,GAAE,wBAA6B,GACpC,OAAO,CAAC,0BAA0B,CAAC,CAarC;AAED,0FAA0F;AAC1F,wBAAsB,wBAAwB,CAC5C,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,MAAM,EACnB,MAAM,GAAE,wBAA6B,GACpC,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAAC,CA0BhE"}