harnery 0.45.1 → 0.46.0

package/dist/core/supervisor/service.js

@@ -1,24 +1,25 @@
 import { spawn } from "node:child_process";
-import { randomUUID } from "node:crypto";
-import { closeSync, existsSync, mkdirSync, openSync, readdirSync, readFileSync, rmSync, unlinkSync, writeFileSync, } from "node:fs";
+import { existsSync, mkdirSync, readdirSync, rmSync } from "node:fs";
 import { hostname } from "node:os";
 import { resolve } from "node:path";
 import { performance } from "node:perf_hooks";
 import { fileURLToPath } from "node:url";
 import { collectCoordinationHealthSnapshot } from "../agents/health.js";
-import { processStartToken, signalIfSameGeneration, } from "../agents/state/proc-start.js";
+import { processStartToken } from "../agents/state/proc-start.js";
+import { acquireServiceLease, requestServiceStop, serviceLeaseOwner, serviceStartRefusal, } from "../agents/state/service-process.js";
 import { resolveBinName } from "../config.js";
 import { pressureHistoryFromSupervisor } from "../diagnostics/advice.js";
 import { assessPressure } from "../diagnostics/pressure.js";
 import { readEventV3ControlState } from "../events/v3/control.js";
 import { janitorLiveDisplayV3 } from "../events/v3/live-feed.js";
+import { installedHarneryBuild } from "../events/v3/runtime-build.js";
 import { sampleResources } from "../resources/sampler.js";
 import { requestResourceServiceStop } from "../resources/service.js";
 import { readResourceServiceStatus } from "../resources/service-status.js";
 import { resourcePaths } from "../resources/storage.js";
 import { writePrivateJsonAtomic } from "../storage/atomic-json.js";
 import { closeProcessLoggers, legacyLogFields, processLogger } from "../storage/logger.js";
-import { stateDirMode, stateFileMode } from "../storage/modes.js";
+import { stateDirMode } from "../storage/modes.js";
 import { collectSupervisorActivitySnapshot } from "./activity.js";
 import { SUPERVISOR_PRESSURE_SCHEMA_VERSION, SUPERVISOR_SNAPSHOT_SCHEMA_VERSION, SUPERVISOR_STATUS_SCHEMA_VERSION, } from "./contract.js";
 import { explainSupervisorFinding } from "./explanations.js";
@@ -29,7 +30,7 @@ import { writeSupervisorHookHealth } from "./hook-health-storage.js";
 import { collectHookHealth } from "./hooks.js";
 import { SupervisorLogCollector } from "./log-feed.js";
 import { collectServiceHealth } from "./services.js";
-import { installedSupervisorBuild, readSupervisorStatus, supervisorProcessLiveness, } from "./status.js";
+import { readSupervisorStatus } from "./status.js";
 import { readSupervisorFindings, readSupervisorHistory, readSupervisorPressure, supervisorPaths, } from "./storage.js";
 import { buildSupervisorTimeline } from "./timeline.js";
 export const SUPERVISOR_DEFAULT_INTERVAL_MS = 2_000;
@@ -42,13 +43,12 @@ const LIVE_DISPLAY_SWEEP_INTERVAL_MS = 5 * 60_000;
 export async function spawnSupervisor(coordRootRaw, options = {}) {
     const coordRoot = resolve(coordRootRaw);
     const current = readSupervisorStatus(coordRoot);
-    if (current.liveness === "unknown")
-        throw unknownOwnerError();
-    if (current.liveness === "running") {
-        throw new Error(`local supervisor is already running under pid ${current.record?.pid}`);
-    }
+    if (current.liveness !== "stopped")
+        throw startRefusal(current.record?.pid, current.liveness);
     const paths = supervisorPaths(coordRoot);
-    assertLeaseAvailable(paths.lease);
+    const lease = serviceLeaseOwner(paths.lease);
+    if (lease.liveness !== "stopped")
+        throw startRefusal(lease.lease?.pid, lease.liveness);
     await stopLegacyResourceObserver(coordRoot);
     const intervalMs = normalizeInterval(options.intervalMs);
     const idleExitMs = normalizeIdleExit(options.idleExitMs);
@@ -112,45 +112,29 @@ export async function ensureSupervisorRunning(coordRoot) {
         };
     }
 }
+/** Windows has no graceful SIGTERM, so the durable request alone stops it there. */
 export function requestSupervisorStop(coordRootRaw, dependencies = {}) {
     const coordRoot = resolve(coordRootRaw);
-    const paths = supervisorPaths(coordRoot);
-    const status = readSupervisorStatus(coordRoot, Date.now(), dependencies);
-    mkdirSync(paths.root, { recursive: true, mode: stateDirMode() });
-    writePrivateJsonAtomic(paths.stop, {
-        requested_at: new Date().toISOString(),
-        requested_by_pid: process.pid,
-    });
     const legacyPaths = resourcePaths(coordRoot);
     if (existsSync(legacyPaths.service) || existsSync(legacyPaths.lease))
         requestResourceServiceStop(coordRoot, dependencies);
-    let signal = { sent: false, verdict: status.generation };
-    if (status.liveness === "running" &&
-        status.record?.host === hostname() &&
-        process.platform !== "win32") {
-        signal = signalIfSameGeneration(status.record.pid, status.record.start_token, "SIGTERM", dependencies);
-    }
-    return {
-        ...readSupervisorStatus(coordRoot, Date.now(), dependencies),
-        signal_sent: signal.sent,
-        signal_verdict: signal.verdict,
-    };
+    const read = () => readSupervisorStatus(coordRoot, Date.now(), dependencies);
+    return requestServiceStop(read(), read, supervisorPaths(coordRoot).stop, dependencies, {
+        signal: process.platform !== "win32",
+    });
 }
 export async function runSupervisor(input) {
     const coordRoot = resolve(input.coordRoot);
     const current = readSupervisorStatus(coordRoot);
-    if (current.liveness === "unknown")
-        throw unknownOwnerError();
-    if (current.liveness === "running") {
-        throw new Error(`local supervisor is already running under pid ${current.record?.pid}`);
-    }
+    if (current.liveness !== "stopped")
+        throw startRefusal(current.record?.pid, current.liveness);
     const paths = supervisorPaths(coordRoot);
     const intervalMs = normalizeInterval(input.intervalMs);
     const idleExitMs = normalizeIdleExit(input.idleExitMs);
     const keepAlive = input.keepAlive ?? false;
     const now = input.now ?? (() => new Date());
     const wait = input.wait ?? delay;
-    const lease = acquireLease(coordRoot, now());
+    const lease = acquireServiceLease(paths.lease, startRefusal);
     rmSync(paths.stop, { force: true });
     const startedAt = now().toISOString();
     const startToken = processStartToken(process.pid);
@@ -158,7 +142,7 @@ export async function runSupervisor(input) {
         schema_version: SUPERVISOR_STATUS_SCHEMA_VERSION,
         pid: process.pid,
         ...(startToken ? { start_token: startToken } : {}),
-        running_build: installedSupervisorBuild(),
+        running_build: installedHarneryBuild(),
         host: hostname(),
         nonce: lease.nonce,
         state: "starting",
@@ -400,7 +384,7 @@ export async function runSupervisor(input) {
             await closeProcessLoggers();
         }
         finally {
-            releaseLease(paths.lease, lease.nonce);
+            lease.release();
         }
     }
     return status;
@@ -440,48 +424,6 @@ function observeLedgerControlState(coordRoot, now) {
         };
     }
 }
-function acquireLease(coordRoot, now) {
-    const paths = supervisorPaths(coordRoot);
-    mkdirSync(paths.root, { recursive: true, mode: stateDirMode() });
-    for (let attempt = 0; attempt < 2; attempt++) {
-        const startToken = processStartToken(process.pid);
-        const lease = {
-            pid: process.pid,
-            ...(startToken ? { start_token: startToken } : {}),
-            host: hostname(),
-            nonce: randomUUID(),
-            created_at: now.toISOString(),
-        };
-        try {
-            const fd = openSync(paths.lease, "wx", stateFileMode());
-            try {
-                writeFileSync(fd, `${JSON.stringify(lease)}\n`, "utf8");
-            }
-            finally {
-                closeSync(fd);
-            }
-            return lease;
-        }
-        catch (error) {
-            if (error.code !== "EEXIST")
-                throw error;
-            const existing = readLease(paths.lease);
-            const liveness = existing ? leaseIsLive(existing) : "unknown";
-            if (liveness === "unknown")
-                throw unknownOwnerError();
-            if (existing && liveness === "running") {
-                throw new Error(`local supervisor lease is held by pid ${existing.pid}`);
-            }
-            try {
-                unlinkSync(paths.lease);
-            }
-            catch {
-                // A concurrent starter may have replaced or removed the stale lease.
-            }
-        }
-    }
-    throw new Error("local supervisor could not acquire its singleton lease");
-}
 function pruneProjectionDirectory(directory, retainedFindingIds) {
     for (const file of readdirSync(directory)) {
         if (!file.endsWith(".json"))
@@ -491,49 +433,8 @@ function pruneProjectionDirectory(directory, retainedFindingIds) {
             rmSync(resolve(directory, file), { force: true });
     }
 }
-function releaseLease(path, nonce) {
-    const current = readLease(path);
-    if (current?.nonce !== nonce)
-        return;
-    try {
-        unlinkSync(path);
-    }
-    catch {
-        // A missing lease is already released.
-    }
-}
-function readLease(path) {
-    try {
-        const value = JSON.parse(readFileSync(path, "utf8"));
-        return value &&
-            Number.isSafeInteger(value.pid) &&
-            value.pid > 0 &&
-            typeof value.host === "string" &&
-            value.host.length > 0 &&
-            typeof value.nonce === "string" &&
-            value.nonce.length > 0
-            ? value
-            : undefined;
-    }
-    catch {
-        return undefined;
-    }
-}
-function leaseIsLive(lease) {
-    return supervisorProcessLiveness(lease).liveness;
-}
-function assertLeaseAvailable(path) {
-    if (!existsSync(path))
-        return;
-    const lease = readLease(path);
-    const liveness = lease ? leaseIsLive(lease) : "unknown";
-    if (liveness === "unknown")
-        throw unknownOwnerError();
-    if (liveness === "running")
-        throw new Error(`local supervisor lease is held by pid ${lease?.pid}`);
-}
-function unknownOwnerError() {
-    return new Error(`local supervisor process identity is unknown; run ${resolveBinName()} supervisor stop to write the durable stop request before starting again`);
+function startRefusal(pid, liveness) {
+    return serviceStartRefusal("local supervisor", `${resolveBinName()} supervisor stop`, pid, liveness);
 }
 async function stopLegacyResourceObserver(coordRoot) {
     const legacy = readResourceServiceStatus(coordRoot);

package/dist/core/supervisor/services.js

@@ -1,7 +1,7 @@
 import { existsSync, readdirSync, readFileSync, rmSync, statSync } from "node:fs";
 import { hostname } from "node:os";
 import { join } from "node:path";
-import { checkPidToken, processStartToken } from "../agents/state/proc-start.js";
+import { processStartToken, verifyProcessGeneration } from "../agents/state/proc-start.js";
 import { readGovernorServiceStatus } from "../governor/service-read.js";
 import { writePrivateJsonAtomic } from "../storage/atomic-json.js";
 import { SUPERVISOR_CONSUMER_SCHEMA_VERSION, } from "./contract.js";
@@ -87,7 +87,7 @@ function consumerAlive(record) {
         if (error.code !== "EPERM")
             return false;
     }
-    return checkPidToken(record.pid, record.start_token) !== "mismatch";
+    return verifyProcessGeneration(record.pid, record.start_token) !== "different";
 }
 function readDetachedService(path, id) {
     const record = readBoundedJson(path);

package/dist/core/supervisor/status.d.ts

@@ -1,18 +1,4 @@
-import { type ProcessGenerationVerdict } from "../agents/state/proc-start.js";
-import { type SupervisorBuild, type SupervisorStatus } from "./contract.js";
-export interface SupervisorProcessDependencies {
-    readToken?: (pid: number) => string | null;
-    probePid?: (pid: number) => unknown;
-}
-export declare function installedSupervisorBuild(): SupervisorBuild;
-export declare function readSupervisorStatus(coordRoot: string, nowMs?: number, dependencies?: SupervisorProcessDependencies): SupervisorStatus;
-/** A stale heartbeat does not prove that a process has exited. */
-export declare function supervisorProcessLiveness(owner: {
-    pid: number;
-    host: string;
-    start_token?: string;
-}, dependencies?: SupervisorProcessDependencies): {
-    liveness: SupervisorStatus["liveness"];
-    generation: ProcessGenerationVerdict;
-};
+import { type ServiceProcessDependencies } from "../agents/state/service-process.js";
+import { type SupervisorStatus } from "./contract.js";
+export declare function readSupervisorStatus(coordRoot: string, nowMs?: number, dependencies?: ServiceProcessDependencies): SupervisorStatus;
 //# sourceMappingURL=status.d.ts.map

package/dist/core/supervisor/status.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"status.d.ts","sourceRoot":"","sources":["../../../src/core/supervisor/status.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,KAAK,wBAAwB,EAE9B,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EAEL,KAAK,eAAe,EAEpB,KAAK,gBAAgB,EACtB,MAAM,eAAe,CAAC;AAKvB,MAAM,WAAW,6BAA6B;IAC5C,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IAC3C,QAAQ,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC;CACrC;AAED,wBAAgB,wBAAwB,IAAI,eAAe,CAW1D;AAED,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,MAAM,EACjB,KAAK,SAAa,EAClB,YAAY,GAAE,6BAAkC,GAC/C,gBAAgB,CA+ClB;AAeD,kEAAkE;AAClE,wBAAgB,yBAAyB,CACvC,KAAK,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,EAC1D,YAAY,GAAE,6BAAkC,GAC/C;IAAE,QAAQ,EAAE,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAAC,UAAU,EAAE,wBAAwB,CAAA;CAAE,CAgBlF"}
+{"version":3,"file":"status.d.ts","sourceRoot":"","sources":["../../../src/core/supervisor/status.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,KAAK,0BAA0B,EAChC,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EAGL,KAAK,gBAAgB,EACtB,MAAM,eAAe,CAAC;AAKvB,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,MAAM,EACjB,KAAK,SAAa,EAClB,YAAY,GAAE,0BAA+B,GAC5C,gBAAgB,CA4BlB"}

package/dist/core/supervisor/status.js

@@ -1,45 +1,13 @@
-import { existsSync, readFileSync } from "node:fs";
-import { hostname } from "node:os";
-import { join } from "node:path";
-import { verifyProcessGeneration, } from "../agents/state/proc-start.js";
-import { currentHarneryRuntimeBuild, harneryPackageRoot } from "../events/v3/runtime-build.js";
+import { existsSync } from "node:fs";
+import { observeServiceProcess, } from "../agents/state/service-process.js";
+import { serviceBuildStatus } from "../events/v3/runtime-build.js";
 import { SUPERVISOR_STATUS_SCHEMA_VERSION, } from "./contract.js";
 import { readSupervisorServiceRecord, supervisorPaths } from "./storage.js";
 const STALE_HEARTBEAT_MS = 15_000;
-export function installedSupervisorBuild() {
-    let version = "unknown";
-    let revision = "unknown";
-    try {
-        const pkg = JSON.parse(readFileSync(join(harneryPackageRoot(), "package.json"), "utf8"));
-        if (typeof pkg.version === "string")
-            version = pkg.version;
-        revision = currentHarneryRuntimeBuild();
-    }
-    catch {
-        // Missing build evidence must still produce an inspectable status.
-    }
-    return { version, revision };
-}
 export function readSupervisorStatus(coordRoot, nowMs = Date.now(), dependencies = {}) {
     const paths = supervisorPaths(coordRoot);
     const record = readSupervisorServiceRecord(coordRoot);
-    const installedBuild = installedSupervisorBuild();
-    const runningBuild = validBuild(record?.running_build) ? record.running_build : null;
-    const restartNeeded = !runningBuild ||
-        installedBuild.version === "unknown" ||
-        installedBuild.revision === "unknown" ||
-        runningBuild.version !== installedBuild.version ||
-        runningBuild.revision !== installedBuild.revision;
-    const build = {
-        running_build: runningBuild,
-        installed_build: installedBuild,
-        restart_needed: restartNeeded,
-        build_status: !runningBuild
-            ? "running build unknown; restart needed"
-            : restartNeeded
-                ? "restart needed"
-                : "current",
-    };
+    const build = serviceBuildStatus(record?.running_build);
     if (!validRecord(record)) {
         return {
             running: false,
@@ -53,12 +21,11 @@ export function readSupervisorStatus(coordRoot, nowMs = Date.now(), dependencies
     }
     const heartbeatAt = Date.parse(record.heartbeat_at);
     const stale = !Number.isFinite(heartbeatAt) || nowMs - heartbeatAt > STALE_HEARTBEAT_MS;
-    const owner = supervisorProcessLiveness(record, dependencies);
-    const liveness = owner.generation === "same" && record.state === "stopped" ? "stopped" : owner.liveness;
+    const { generation, liveness } = observeServiceProcess(record, dependencies);
     return {
-        running: liveness === "running" && !stale && record.state !== "stopped",
+        running: liveness === "running" && !stale,
         stale,
-        generation: owner.generation,
+        generation,
         liveness,
         ...build,
         record,
@@ -74,33 +41,3 @@ function validRecord(value) {
         typeof value.heartbeat_at === "string" &&
         typeof value.keep_alive === "boolean");
 }
-/** A stale heartbeat does not prove that a process has exited. */
-export function supervisorProcessLiveness(owner, dependencies = {}) {
-    if (owner.host !== hostname())
-        return { liveness: "unknown", generation: "unknown" };
-    try {
-        (dependencies.probePid ?? ((pid) => process.kill(pid, 0)))(owner.pid);
-    }
-    catch (error) {
-        return {
-            liveness: error.code === "ESRCH" ? "stopped" : "unknown",
-            generation: "unknown",
-        };
-    }
-    const generation = verifyProcessGeneration(owner.pid, owner.start_token, dependencies.readToken);
-    return {
-        generation,
-        liveness: generation === "same" ? "running" : generation === "different" ? "stopped" : "unknown",
-    };
-}
-function validBuild(value) {
-    if (!value || typeof value !== "object")
-        return false;
-    const build = value;
-    return (typeof build.version === "string" &&
-        !!build.version &&
-        build.version !== "unknown" &&
-        typeof build.revision === "string" &&
-        !!build.revision &&
-        build.revision !== "unknown");
-}

package/dist/core/workflow/engine.js

@@ -39,7 +39,8 @@ import { stableDigest } from "./durable-record.js";
 import { evidencePreflightError } from "./evidence-preflight.js";
 import { endWorkflowChildSessionV3, startWorkflowChildSessionV3 } from "./live-session-v3.js";
 import { buildWorkflowProof, createEvidenceRecord, digestResult, normalizeWorkflowMeta, writeWorkflowProof, } from "./proof.js";
-import { acquireWorkflowResumeLease, assertWorkflowRunResumable, assertWorkflowScriptUnchanged, WORKFLOW_RUN_MANIFEST_SCHEMA_VERSION, workflowScriptDigest, writeWorkflowRunManifest, } from "./run-state.js";
+import { acquireWorkflowResumeLease } from "./resume-lock.js";
+import { assertWorkflowRunResumable, assertWorkflowScriptUnchanged, WORKFLOW_RUN_MANIFEST_SCHEMA_VERSION, workflowScriptDigest, writeWorkflowRunManifest, } from "./run-state.js";
 import { assertProjectionWithinWorkspace, resolveGitGrantRoots } from "./sandbox-projection.js";
 import { normalizeWorkflowSpecialists, resolveSpecialistAssignment } from "./specialists.js";
 import { appendWorkflowTranscriptEvent } from "./transcript.js";

package/dist/core/workflow/index.d.ts

@@ -4,10 +4,9 @@ export { assertWorkflowRunId, createWorkflowApproval, listWorkflowApprovals, rea
 export { freezeWorkflowAttemptContext, isCanonicalWorkflowAttemptContext, normalizeWorkflowAttemptContext, } from "./attempt-context.js";
 export { runWorkflow, WorkflowParkedError, WorkflowRunError } from "./engine.js";
 export { buildWorkflowProof, createEvidenceRecord, deriveRunFailureClass, digestResult, normalizeWorkflowMeta, readWorkflowProof, renderWorkflowProof, rollupAcceptance, writeWorkflowProof, } from "./proof.js";
-export type { WorkflowRecoveryAuthorization, WorkflowRecoveryIntent, WorkflowRecoveryRecord, } from "./recovery-audit.js";
-export { beginWorkflowRecovery, readWorkflowRecoveryLedger } from "./recovery-audit.js";
-export type { WorkflowResumeRecoveryOptions, WorkflowResumeRecoveryResult, WorkflowRunManifest, } from "./run-state.js";
-export { acquireWorkflowResumeLease, assertWorkflowRunResumable, assertWorkflowScriptUnchanged, readWorkflowRunManifest, recoverWorkflowResumeLease, WORKFLOW_RUN_MANIFEST_SCHEMA_VERSION, workflowRunManifestPath, workflowScriptDigest, writeWorkflowRunManifest, } from "./run-state.js";
+export { acquireWorkflowResumeLease } from "./resume-lock.js";
+export type { WorkflowRunManifest } from "./run-state.js";
+export { assertWorkflowRunResumable, assertWorkflowScriptUnchanged, readWorkflowRunManifest, WORKFLOW_RUN_MANIFEST_SCHEMA_VERSION, workflowRunManifestPath, workflowScriptDigest, writeWorkflowRunManifest, } from "./run-state.js";
 export { isUpstreamFailureText, vendorFailureText } from "./spawn-failure.js";
 export type { AcceptanceCriterion, AcceptanceResult, AcceptanceStatus, AcceptanceSummary, AdapterEvidenceCapability, AdapterEvidenceCoverage, AdapterName, AgentOpts, EngineOpts, EvidenceKind, EvidenceSource, EvidenceStatus, ResultDigest, RunReport, Spawner, SpawnFailureClass, SpawnRequest, SpawnResult, StageSchema, WorkflowAgentProof, WorkflowApprovalMode, WorkflowAttemptContext, WorkflowAttemptFailureCause, WorkflowAttemptPriorContext, WorkflowAttemptUnresolvedCriterion, WorkflowContext, WorkflowDiagnosticAdmissionConfig, WorkflowDiagnosticAdmissionObservation, WorkflowDiagnosticAdmissionProof, WorkflowEvidenceInput, WorkflowEvidenceRecord, WorkflowMeta, WorkflowModule, WorkflowPolicyProof, WorkflowProof, WorkflowProofUnknown, WorkflowRepoEvidence, WorkflowRepoSnapshot, WorkflowRunStatus, WorkflowSpecialistProfile, WorkflowWorkContext, } from "./types.js";
 export { WORKFLOW_ATTEMPT_CONTEXT_SCHEMA_VERSION, WORKFLOW_DIAGNOSTIC_ADMISSION_SCHEMA_VERSION, WORKFLOW_PROOF_SCHEMA_VERSION, WORKFLOW_WORK_CONTEXT_SCHEMA_VERSION, } from "./types.js";

package/dist/core/workflow/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/workflow/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,4CAA4C,EAC5C,KAAK,uCAAuC,EAC5C,kCAAkC,EAClC,KAAK,kCAAkC,GACxC,MAAM,gBAAgB,CAAC;AACxB,YAAY,EACV,2BAA2B,EAC3B,4BAA4B,EAC5B,gBAAgB,EAChB,wBAAwB,EACxB,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EACtB,qBAAqB,EACrB,oBAAoB,EACpB,sBAAsB,EACtB,uBAAuB,EACvB,gCAAgC,EAChC,kBAAkB,GACnB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,4BAA4B,EAC5B,iCAAiC,EACjC,+BAA+B,GAChC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACjF,OAAO,EACL,kBAAkB,EAClB,oBAAoB,EACpB,qBAAqB,EACrB,YAAY,EACZ,qBAAqB,EACrB,iBAAiB,EACjB,mBAAmB,EACnB,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,YAAY,CAAC;AACpB,YAAY,EACV,6BAA6B,EAC7B,sBAAsB,EACtB,sBAAsB,GACvB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,qBAAqB,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AACxF,YAAY,EACV,6BAA6B,EAC7B,4BAA4B,EAC5B,mBAAmB,GACpB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,0BAA0B,EAC1B,0BAA0B,EAC1B,6BAA6B,EAC7B,uBAAuB,EACvB,0BAA0B,EAC1B,oCAAoC,EACpC,uBAAuB,EACvB,oBAAoB,EACpB,wBAAwB,GACzB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC9E,YAAY,EACV,mBAAmB,EACnB,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,yBAAyB,EACzB,uBAAuB,EACvB,WAAW,EACX,SAAS,EACT,UAAU,EACV,YAAY,EACZ,cAAc,EACd,cAAc,EACd,YAAY,EACZ,SAAS,EACT,OAAO,EACP,iBAAiB,EACjB,YAAY,EACZ,WAAW,EACX,WAAW,EACX,kBAAkB,EAClB,oBAAoB,EACpB,sBAAsB,EACtB,2BAA2B,EAC3B,2BAA2B,EAC3B,kCAAkC,EAClC,eAAe,EACf,iCAAiC,EACjC,sCAAsC,EACtC,gCAAgC,EAChC,qBAAqB,EACrB,sBAAsB,EACtB,YAAY,EACZ,cAAc,EACd,mBAAmB,EACnB,aAAa,EACb,oBAAoB,EACpB,oBAAoB,EACpB,oBAAoB,EACpB,iBAAiB,EACjB,yBAAyB,EACzB,mBAAmB,GACpB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,uCAAuC,EACvC,4CAA4C,EAC5C,6BAA6B,EAC7B,oCAAoC,GACrC,MAAM,YAAY,CAAC;AACpB,YAAY,EACV,qBAAqB,EACrB,yBAAyB,EACzB,kCAAkC,EAClC,oBAAoB,EACpB,qBAAqB,EACrB,kBAAkB,EAClB,uBAAuB,EACvB,uBAAuB,EACvB,wBAAwB,EACxB,eAAe,EACf,uBAAuB,EACvB,iBAAiB,EACjB,+BAA+B,EAC/B,uBAAuB,EACvB,wBAAwB,EACxB,0BAA0B,EAC1B,yBAAyB,EACzB,eAAe,EACf,yBAAyB,EACzB,iBAAiB,EACjB,uBAAuB,EACvB,2BAA2B,EAC3B,0BAA0B,EAC1B,uBAAuB,EACvB,6BAA6B,EAC7B,0BAA0B,EAC1B,oBAAoB,EACpB,gBAAgB,EAChB,+BAA+B,EAC/B,4BAA4B,EAC5B,2BAA2B,EAC3B,uBAAuB,EACvB,sBAAsB,EACtB,oBAAoB,EACpB,uBAAuB,EACvB,sBAAsB,EACtB,uCAAuC,EACvC,0BAA0B,EAC1B,yBAAyB,EACzB,kBAAkB,EAClB,4BAA4B,EAC5B,iCAAiC,EACjC,uBAAuB,EACvB,oBAAoB,EACpB,cAAc,EACd,mBAAmB,EACnB,oBAAoB,EACpB,qBAAqB,EACrB,iBAAiB,EACjB,6BAA6B,EAC7B,oBAAoB,EACpB,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,gBAAgB,EAChB,kCAAkC,EAClC,eAAe,EACf,gBAAgB,EAChB,8BAA8B,EAC9B,wBAAwB,EACxB,6BAA6B,EAC7B,wBAAwB,EACxB,yBAAyB,EACzB,gCAAgC,EAChC,kBAAkB,EAClB,6BAA6B,EAC7B,2BAA2B,EAC3B,6BAA6B,EAC7B,0BAA0B,EAC1B,gCAAgC,EAChC,gCAAgC,GACjC,MAAM,uBAAuB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/workflow/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,4CAA4C,EAC5C,KAAK,uCAAuC,EAC5C,kCAAkC,EAClC,KAAK,kCAAkC,GACxC,MAAM,gBAAgB,CAAC;AACxB,YAAY,EACV,2BAA2B,EAC3B,4BAA4B,EAC5B,gBAAgB,EAChB,wBAAwB,EACxB,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EACtB,qBAAqB,EACrB,oBAAoB,EACpB,sBAAsB,EACtB,uBAAuB,EACvB,gCAAgC,EAChC,kBAAkB,GACnB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,4BAA4B,EAC5B,iCAAiC,EACjC,+BAA+B,GAChC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACjF,OAAO,EACL,kBAAkB,EAClB,oBAAoB,EACpB,qBAAqB,EACrB,YAAY,EACZ,qBAAqB,EACrB,iBAAiB,EACjB,mBAAmB,EACnB,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,0BAA0B,EAAE,MAAM,kBAAkB,CAAC;AAC9D,YAAY,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAC1D,OAAO,EACL,0BAA0B,EAC1B,6BAA6B,EAC7B,uBAAuB,EACvB,oCAAoC,EACpC,uBAAuB,EACvB,oBAAoB,EACpB,wBAAwB,GACzB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC9E,YAAY,EACV,mBAAmB,EACnB,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,yBAAyB,EACzB,uBAAuB,EACvB,WAAW,EACX,SAAS,EACT,UAAU,EACV,YAAY,EACZ,cAAc,EACd,cAAc,EACd,YAAY,EACZ,SAAS,EACT,OAAO,EACP,iBAAiB,EACjB,YAAY,EACZ,WAAW,EACX,WAAW,EACX,kBAAkB,EAClB,oBAAoB,EACpB,sBAAsB,EACtB,2BAA2B,EAC3B,2BAA2B,EAC3B,kCAAkC,EAClC,eAAe,EACf,iCAAiC,EACjC,sCAAsC,EACtC,gCAAgC,EAChC,qBAAqB,EACrB,sBAAsB,EACtB,YAAY,EACZ,cAAc,EACd,mBAAmB,EACnB,aAAa,EACb,oBAAoB,EACpB,oBAAoB,EACpB,oBAAoB,EACpB,iBAAiB,EACjB,yBAAyB,EACzB,mBAAmB,GACpB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,uCAAuC,EACvC,4CAA4C,EAC5C,6BAA6B,EAC7B,oCAAoC,GACrC,MAAM,YAAY,CAAC;AACpB,YAAY,EACV,qBAAqB,EACrB,yBAAyB,EACzB,kCAAkC,EAClC,oBAAoB,EACpB,qBAAqB,EACrB,kBAAkB,EAClB,uBAAuB,EACvB,uBAAuB,EACvB,wBAAwB,EACxB,eAAe,EACf,uBAAuB,EACvB,iBAAiB,EACjB,+BAA+B,EAC/B,uBAAuB,EACvB,wBAAwB,EACxB,0BAA0B,EAC1B,yBAAyB,EACzB,eAAe,EACf,yBAAyB,EACzB,iBAAiB,EACjB,uBAAuB,EACvB,2BAA2B,EAC3B,0BAA0B,EAC1B,uBAAuB,EACvB,6BAA6B,EAC7B,0BAA0B,EAC1B,oBAAoB,EACpB,gBAAgB,EAChB,+BAA+B,EAC/B,4BAA4B,EAC5B,2BAA2B,EAC3B,uBAAuB,EACvB,sBAAsB,EACtB,oBAAoB,EACpB,uBAAuB,EACvB,sBAAsB,EACtB,uCAAuC,EACvC,0BAA0B,EAC1B,yBAAyB,EACzB,kBAAkB,EAClB,4BAA4B,EAC5B,iCAAiC,EACjC,uBAAuB,EACvB,oBAAoB,EACpB,cAAc,EACd,mBAAmB,EACnB,oBAAoB,EACpB,qBAAqB,EACrB,iBAAiB,EACjB,6BAA6B,EAC7B,oBAAoB,EACpB,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,gBAAgB,EAChB,kCAAkC,EAClC,eAAe,EACf,gBAAgB,EAChB,8BAA8B,EAC9B,wBAAwB,EACxB,6BAA6B,EAC7B,wBAAwB,EACxB,yBAAyB,EACzB,gCAAgC,EAChC,kBAAkB,EAClB,6BAA6B,EAC7B,2BAA2B,EAC3B,6BAA6B,EAC7B,0BAA0B,EAC1B,gCAAgC,EAChC,gCAAgC,GACjC,MAAM,uBAAuB,CAAC"}

package/dist/core/workflow/index.js

@@ -3,8 +3,8 @@ export { assertWorkflowRunId, createWorkflowApproval, listWorkflowApprovals, rea
 export { freezeWorkflowAttemptContext, isCanonicalWorkflowAttemptContext, normalizeWorkflowAttemptContext, } from "./attempt-context.js";
 export { runWorkflow, WorkflowParkedError, WorkflowRunError } from "./engine.js";
 export { buildWorkflowProof, createEvidenceRecord, deriveRunFailureClass, digestResult, normalizeWorkflowMeta, readWorkflowProof, renderWorkflowProof, rollupAcceptance, writeWorkflowProof, } from "./proof.js";
-export { beginWorkflowRecovery, readWorkflowRecoveryLedger } from "./recovery-audit.js";
-export { acquireWorkflowResumeLease, assertWorkflowRunResumable, assertWorkflowScriptUnchanged, readWorkflowRunManifest, recoverWorkflowResumeLease, WORKFLOW_RUN_MANIFEST_SCHEMA_VERSION, workflowRunManifestPath, workflowScriptDigest, writeWorkflowRunManifest, } from "./run-state.js";
+export { acquireWorkflowResumeLease } from "./resume-lock.js";
+export { assertWorkflowRunResumable, assertWorkflowScriptUnchanged, readWorkflowRunManifest, WORKFLOW_RUN_MANIFEST_SCHEMA_VERSION, workflowRunManifestPath, workflowScriptDigest, writeWorkflowRunManifest, } from "./run-state.js";
 export { isUpstreamFailureText, vendorFailureText } from "./spawn-failure.js";
 export { WORKFLOW_ATTEMPT_CONTEXT_SCHEMA_VERSION, WORKFLOW_DIAGNOSTIC_ADMISSION_SCHEMA_VERSION, WORKFLOW_PROOF_SCHEMA_VERSION, WORKFLOW_WORK_CONTEXT_SCHEMA_VERSION, } from "./types.js";
 export { applyIntegration, assertWorkspaceLifecycleTransition, cancelWorkspace, cleanupWorkspace, createLocalGitWorktreeProvider, deriveWorkspaceLifecycle, IntegrationPrepareParkedError, inspectWorkflowWorkspace, isWorkspaceLifecycleState, listWorkflowWorkspaceInspections, prepareIntegration, probeLocalGitWorktreeProvider, readWorkflowWorkspaceStatus, renderWorkflowWorkspaceStatus, validateProviderEventChain, WORKSPACE_BINDING_SCHEMA_VERSION, WORKSPACE_RECEIPT_SCHEMA_VERSION, } from "./workspaces/index.js";

package/dist/core/workflow/proof.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"proof.d.ts","sourceRoot":"","sources":["../../../src/core/workflow/proof.ts"],"names":[],"mappings":"AAGA,OAAO,EAA0B,KAAK,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAEtF,OAAO,KAAK,EACV,gBAAgB,EAChB,cAAc,EACd,eAAe,EACf,mBAAmB,EACpB,MAAM,oBAAoB,CAAC;AAK5B,OAAO,KAAK,EACV,mBAAmB,EACnB,gBAAgB,EAChB,iBAAiB,EACjB,0BAA0B,EAC1B,yBAAyB,EAEzB,YAAY,EAEZ,iBAAiB,EACjB,kBAAkB,EAClB,sBAAsB,EACtB,gCAAgC,EAChC,qBAAqB,EACrB,sBAAsB,EACtB,YAAY,EAEZ,aAAa,EAIb,iCAAiC,EACjC,mBAAmB,EACpB,MAAM,YAAY,CAAC;AAOpB,OAAO,KAAK,EACV,oBAAoB,EACpB,gBAAgB,EAChB,uCAAuC,EAExC,MAAM,uBAAuB,CAAC;AAoB/B,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,mBAAmB,EAAE,CAAC;CACnC;AAED,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,QAAQ,CAAC,mBAAmB,CAAC,CAAC;IAC5C,cAAc,CAAC,EAAE,QAAQ,CAAC,sBAAsB,CAAC,CAAC;IAClD,IAAI,EAAE,sBAAsB,CAAC;IAC7B,MAAM,EAAE,WAAW,GAAG,QAAQ,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,YAAY,CAAC;IACrB,KAAK,EAAE,YAAY,CAAC;IACpB,MAAM,EAAE,kBAAkB,EAAE,CAAC;IAC7B,QAAQ,EAAE,sBAAsB,EAAE,CAAC;IACnC,mBAAmB,CAAC,EAAE,gCAAgC,CAAC;IACvD,eAAe,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,yBAAyB,GAAG,SAAS,CAAC,CAAC,CAAC;IAClF,qEAAqE;IACrE,iBAAiB,CAAC,EAAE,iCAAiC,CAAC;IACtD;+DAC2D;IAC3D,mBAAmB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,0BAA0B,GAAG,SAAS,CAAC,CAAC,CAAC;IACvF,MAAM,CAAC,EAAE;QACP,MAAM,EAAE,QAAQ,CAAC,gBAAgB,CAAC,CAAC;QACnC,SAAS,EAAE,SAAS,cAAc,EAAE,CAAC;QACrC,SAAS,EAAE,eAAe,CAAC;QAC3B,aAAa,EAAE,mBAAmB,CAAC;KACpC,CAAC;IACF;mFAC+E;IAC/E,OAAO,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAClD,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;IAC5C,iBAAiB,CAAC,EAAE,uCAAuC,CAAC;IAC5D,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,YAAY,GAAG,SAAS,EAC9B,YAAY,EAAE,MAAM,GACnB,sBAAsB,CAqCxB;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE;IAC1C,KAAK,EAAE,qBAAqB,CAAC;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACnC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG,sBAAsB,CA8BzB;AAED,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,mBAAmB,EAAE,EAC/B,QAAQ,EAAE,sBAAsB,EAAE,GACjC;IAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC;IAAC,OAAO,EAAE,iBAAiB,CAAA;CAAE,CAuB9D;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,YAAY,CAQjF;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,WAAW,GAAG,QAAQ,EAC9B,MAAM,EAAE,SAAS,IAAI,CAAC,kBAAkB,EAAE,QAAQ,GAAG,OAAO,CAAC,EAAE,GAC9D,iBAAiB,GAAG,SAAS,CAS/B;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,uBAAuB,GAAG,aAAa,CA8DhF;AAgCD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,GAAG,IAAI,CAO3E;AAED,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,aAAa,CAqEjF;AA+DD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,aAAa,GAAG,MAAM,CA+DhE"}
+{"version":3,"file":"proof.d.ts","sourceRoot":"","sources":["../../../src/core/workflow/proof.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,KAAK,YAAY,EAA0B,MAAM,2BAA2B,CAAC;AAEtF,OAAO,KAAK,EACV,gBAAgB,EAChB,cAAc,EACd,eAAe,EACf,mBAAmB,EACpB,MAAM,oBAAoB,CAAC;AAK5B,OAAO,KAAK,EACV,mBAAmB,EACnB,gBAAgB,EAChB,iBAAiB,EACjB,0BAA0B,EAC1B,yBAAyB,EAEzB,YAAY,EAEZ,iBAAiB,EACjB,kBAAkB,EAClB,sBAAsB,EACtB,gCAAgC,EAChC,qBAAqB,EACrB,sBAAsB,EACtB,YAAY,EAEZ,aAAa,EAIb,iCAAiC,EACjC,mBAAmB,EACpB,MAAM,YAAY,CAAC;AAOpB,OAAO,KAAK,EACV,oBAAoB,EACpB,gBAAgB,EAChB,uCAAuC,EAExC,MAAM,uBAAuB,CAAC;AAoB/B,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,mBAAmB,EAAE,CAAC;CACnC;AAED,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,QAAQ,CAAC,mBAAmB,CAAC,CAAC;IAC5C,cAAc,CAAC,EAAE,QAAQ,CAAC,sBAAsB,CAAC,CAAC;IAClD,IAAI,EAAE,sBAAsB,CAAC;IAC7B,MAAM,EAAE,WAAW,GAAG,QAAQ,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,YAAY,CAAC;IACrB,KAAK,EAAE,YAAY,CAAC;IACpB,MAAM,EAAE,kBAAkB,EAAE,CAAC;IAC7B,QAAQ,EAAE,sBAAsB,EAAE,CAAC;IACnC,mBAAmB,CAAC,EAAE,gCAAgC,CAAC;IACvD,eAAe,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,yBAAyB,GAAG,SAAS,CAAC,CAAC,CAAC;IAClF,qEAAqE;IACrE,iBAAiB,CAAC,EAAE,iCAAiC,CAAC;IACtD;+DAC2D;IAC3D,mBAAmB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,0BAA0B,GAAG,SAAS,CAAC,CAAC,CAAC;IACvF,MAAM,CAAC,EAAE;QACP,MAAM,EAAE,QAAQ,CAAC,gBAAgB,CAAC,CAAC;QACnC,SAAS,EAAE,SAAS,cAAc,EAAE,CAAC;QACrC,SAAS,EAAE,eAAe,CAAC;QAC3B,aAAa,EAAE,mBAAmB,CAAC;KACpC,CAAC;IACF;mFAC+E;IAC/E,OAAO,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAClD,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;IAC5C,iBAAiB,CAAC,EAAE,uCAAuC,CAAC;IAC5D,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,YAAY,GAAG,SAAS,EAC9B,YAAY,EAAE,MAAM,GACnB,sBAAsB,CAqCxB;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE;IAC1C,KAAK,EAAE,qBAAqB,CAAC;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACnC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG,sBAAsB,CA8BzB;AAED,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,mBAAmB,EAAE,EAC/B,QAAQ,EAAE,sBAAsB,EAAE,GACjC;IAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC;IAAC,OAAO,EAAE,iBAAiB,CAAA;CAAE,CAuB9D;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,YAAY,CAQjF;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,WAAW,GAAG,QAAQ,EAC9B,MAAM,EAAE,SAAS,IAAI,CAAC,kBAAkB,EAAE,QAAQ,GAAG,OAAO,CAAC,EAAE,GAC9D,iBAAiB,GAAG,SAAS,CAS/B;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,uBAAuB,GAAG,aAAa,CA8DhF;AAgCD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,GAAG,IAAI,CAO3E;AAED,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,aAAa,CA8DjF;AA+DD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,aAAa,GAAG,MAAM,CAkDhE"}

package/dist/core/workflow/proof.js

@@ -1,7 +1,7 @@
 import { createHash } from "node:crypto";
 import { existsSync, readFileSync, statSync } from "node:fs";
-import { isAbsolute, join } from "node:path";
-import { observationsComparable } from "../context/observation.js";
+import { join } from "node:path";
+import { repoComparisonProblems } from "../context/observation.js";
 import { DIAGNOSTIC_ADVICE_SCHEMA_VERSION } from "../diagnostics/contract.js";
 import { policyDigest } from "../policy/index.js";
 import { isCanonicalWorkflowAttemptContext } from "./attempt-context.js";
@@ -276,13 +276,8 @@ export function readWorkflowProof(coordRoot, runId) {
             !isWorkspaceExecutionEvidence(proof.execution, runId, proof.run.status))) {
         throw new Error(`workflow proof at ${path} has an unsupported or mismatched schema`);
     }
-    if (repoComparisonProblem(proof.repository.before, proof.repository.after) !== undefined ||
-        proof.repository.before.dirty_paths_truncated ||
-        proof.repository.after.dirty_paths_truncated ||
-        !proof.repository.before.branch?.trim() ||
-        !proof.repository.after.branch?.trim() ||
-        !proof.repository.before.head?.trim() ||
-        !proof.repository.after.head?.trim()) {
+    // Packets written before observation checks may carry unproven drift.
+    if (repoProblems(proof.repository).length > 0) {
         proof.repository = buildRepoEvidence(proof.repository.before, proof.repository.after);
         proof.unknowns = proof.unknowns.filter((item) => item.code !== "repository_drift_incomplete");
         proof.unknowns.push({
@@ -384,26 +379,16 @@ export function renderWorkflowProof(proof) {
                 `${observation.advice.assessment.recommended_action}; action none`
             : "admission: shadow not needed; no real child dispatch");
     }
-    const comparable = repoComparisonProblem(proof.repository.before, proof.repository.after) === undefined;
-    const repo = comparable &&
-        !proof.repository.before.dirty_paths_truncated &&
-        !proof.repository.after.dirty_paths_truncated &&
-        proof.repository.before.branch?.trim() &&
-        proof.repository.after.branch?.trim() &&
-        proof.repository.before.head?.trim() &&
-        proof.repository.after.head?.trim()
-        ? proof.repository
-        : buildRepoEvidence(proof.repository.before, proof.repository.after);
-    const drift = repo.drift;
-    if (!comparable) {
-        lines.push(`repository: drift unknown. ${drift.note}`);
+    const problems = repoProblems(proof.repository);
+    if (problems.length > 0) {
+        lines.push(`repository: drift unknown. ${unverifiedDrift(problems)}`);
     }
     else {
-        const paths = drift.dirty_paths_added === null || drift.dirty_paths_cleared === null
-            ? "dirty-path drift unknown"
-            : `${drift.dirty_paths_added.length} dirty added, ${drift.dirty_paths_cleared.length} cleared`;
-        lines.push(`repository: branch ${repo.before.branch ?? "unknown"} -> ${repo.after.branch ?? "unknown"}; ` +
-            `HEAD ${short(repo.before.head)} -> ${short(repo.after.head)}; ${paths}`);
+        const { before, after, drift } = proof.repository;
+        lines.push(`repository: branch ${before.branch} -> ${after.branch}; ` +
+            `HEAD ${short(before.head)} -> ${short(after.head)}; ` +
+            `${drift.dirty_paths_added?.length ?? "unknown"} dirty added, ` +
+            `${drift.dirty_paths_cleared?.length ?? "unknown"} cleared`);
     }
     if (proof.unknowns.length > 0) {
         lines.push(`unknowns: ${proof.unknowns.length}`);
@@ -416,8 +401,8 @@ export function renderWorkflowProof(proof) {
 function buildRepoEvidence(beforeRaw, afterRaw) {
     const before = normalizeRepoSnapshot(beforeRaw);
     const after = normalizeRepoSnapshot(afterRaw);
-    const problem = repoComparisonProblem(before, after);
-    if (problem !== undefined) {
+    const problems = repoProblems({ before, after });
+    if (problems.length > 0) {
         return {
             source: "engine",
             before,
@@ -429,46 +414,37 @@ function buildRepoEvidence(beforeRaw, afterRaw) {
                 dirty_paths_cleared: null,
                 dirty_paths_retained: null,
                 incomplete: true,
-                note: `Repository drift could not be verified: ${problem}. Re-check before editing.`,
+                note: unverifiedDrift(problems),
             },
         };
     }
-    const pathsComparable = !before.dirty_paths_truncated && !after.dirty_paths_truncated;
-    const branchKnown = Boolean(before.branch && after.branch);
-    const headKnown = Boolean(before.head && after.head);
     const beforeDirty = new Set(before.dirty_paths);
     const afterDirty = new Set(after.dirty_paths);
     const retained = after.dirty_paths.filter((path) => beforeDirty.has(path));
-    const notes = [
-        ...(!pathsComparable
-            ? ["Dirty-path drift is unknown because a snapshot list was truncated."]
-            : []),
-        ...(!branchKnown ? ["Branch drift is unknown because a snapshot has no branch."] : []),
-        ...(!headKnown ? ["HEAD drift is unknown because a snapshot has no HEAD."] : []),
-        ...(pathsComparable && retained.length > 0
-            ? ["Snapshots cannot prove whether retained dirty paths changed during the run."]
-            : []),
-    ];
-    const incomplete = notes.length > 0;
+    const incomplete = retained.length > 0;
     return {
         source: "engine",
         before,
         after,
         drift: {
-            branch_changed: branchKnown ? before.branch !== after.branch : null,
-            head_changed: headKnown ? before.head !== after.head : null,
-            dirty_paths_added: pathsComparable
-                ? after.dirty_paths.filter((path) => !beforeDirty.has(path))
-                : null,
-            dirty_paths_cleared: pathsComparable
-                ? before.dirty_paths.filter((path) => !afterDirty.has(path))
-                : null,
-            dirty_paths_retained: pathsComparable ? retained : null,
+            branch_changed: before.branch !== after.branch,
+            head_changed: before.head !== after.head,
+            dirty_paths_added: after.dirty_paths.filter((path) => !beforeDirty.has(path)),
+            dirty_paths_cleared: before.dirty_paths.filter((path) => !afterDirty.has(path)),
+            dirty_paths_retained: retained,
             incomplete,
-            note: incomplete ? notes.join(" ") : undefined,
+            note: incomplete
+                ? "Snapshots cannot prove whether retained dirty paths changed during the run."
+                : undefined,
         },
     };
 }
+function repoProblems(repository) {
+    return repoComparisonProblems(repository.before, repository.after, ["before", "after"]);
+}
+function unverifiedDrift(problems) {
+    return `Repository drift could not be verified: ${problems.join("; ")}. Re-check before editing.`;
+}
 function normalizeRepoSnapshot(snapshot) {
     return {
         cwd: snapshot.cwd,
@@ -483,26 +459,6 @@ function normalizeRepoSnapshot(snapshot) {
         dirty_paths_truncated: snapshot.dirty_paths_truncated,
     };
 }
-function snapshotFailure(label, snapshot) {
-    return `${label} snapshot is ${snapshot.observation}${snapshot.observation_detail ? ` (${snapshot.observation_detail})` : ""}`;
-}
-function repoComparisonProblem(before, after) {
-    if (!observationsComparable(before, after)) {
-        return [
-            ...(before.observation !== "ok" ? [snapshotFailure("before", before)] : []),
-            ...(after.observation !== "ok" ? [snapshotFailure("after", after)] : []),
-        ].join("; ");
-    }
-    const unknownRoots = [
-        ...(!before.root || !isAbsolute(before.root) ? ["before"] : []),
-        ...(!after.root || !isAbsolute(after.root) ? ["after"] : []),
-    ];
-    if (unknownRoots.length > 0)
-        return `${unknownRoots.join(" and ")} snapshot repository root is unknown`;
-    if (before.root !== after.root)
-        return "snapshots name different repository roots";
-    return undefined;
-}
 function buildAdapterCoverage(agents, claims, attestations) {
     return [...new Set(agents.map((agent) => agent.adapter))].map((adapter) => {
         const adapterAgents = agents.filter((agent) => agent.adapter === adapter);

package/dist/core/workflow/resume-lock.d.ts

@@ -0,0 +1,17 @@
+export type WorkflowResumeOwnerState = "dead" | "live" | "unknown";
+export interface WorkflowResumeLockOwner {
+    pid: number;
+    host: string;
+    created_at: string;
+    start_token?: string | null;
+}
+/** Acquire the exclusive lease shared by resume and reclaim. A lock whose
+ * same-host owner has exited, or whose PID now names a different process, is
+ * retired automatically. Every other existing lock refuses. */
+export declare function acquireWorkflowResumeLease(coordRoot: string, runId: string): () => void;
+export declare function workflowResumeLockPath(coordRoot: string, runId: string): string;
+/** Only a same-host owner can be proven gone: by ESRCH, or by a recorded start
+ * token that no longer matches its PID. Foreign and unreadable owners stay live. */
+export declare function workflowResumeOwnerState(owner: WorkflowResumeLockOwner): WorkflowResumeOwnerState;
+export declare function readWorkflowResumeLock(coordRoot: string, runId: string): WorkflowResumeLockOwner | null;
+//# sourceMappingURL=resume-lock.d.ts.map

package/dist/core/workflow/resume-lock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resume-lock.d.ts","sourceRoot":"","sources":["../../../src/core/workflow/resume-lock.ts"],"names":[],"mappings":"AAqBA,MAAM,MAAM,wBAAwB,GAAG,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;AAEnE,MAAM,WAAW,uBAAuB;IACtC,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAED;;+DAE+D;AAC/D,wBAAgB,0BAA0B,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,IAAI,CAsDvF;AAED,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAG/E;AAED;oFACoF;AACpF,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,uBAAuB,GAAG,wBAAwB,CAUjG;AAkCD,wBAAgB,sBAAsB,CACpC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,GACZ,uBAAuB,GAAG,IAAI,CAEhC"}