instar 1.3.553 → 1.3.555

package/dist/scheduler/JobLeaseClaimStore.js

@@ -0,0 +1,165 @@
+/**
+ * JobLeaseClaimStore — WS4.3 durable, epoch-fenced job-claim leases.
+ *
+ * (MULTI-MACHINE-SEAMLESSNESS-SPEC §WS4.3, "Cutover discipline".)
+ *
+ * The journal-backed upgrade of the best-effort `JobClaimManager` bus
+ * broadcast. A claim is a LEASE with a fenced ownership epoch: a receiver
+ * rejects a stale-epoch claim (invariant-4 epoch fencing), so a demoted
+ * machine's late claim cannot steal a job from the current lease-holder, and a
+ * partition double-run is structurally prevented when the journal is reachable.
+ *
+ * Claim records store METADATA ONLY — machine id, job slug, epoch, timestamps —
+ * never job payloads (the spec's explicit privacy bound). The store is the
+ * local materialized view of the replicated claim kind; the journal carries
+ * each record to peers and feeds them back through `applyRemote`.
+ *
+ * This store does NOT decide WHEN to use the journal path — that is the
+ * `JobLeaseCutoverGate`. The store only manages the leases once the gate has
+ * selected the journal path.
+ */
+import crypto from 'node:crypto';
+import fs from 'node:fs';
+import path from 'node:path';
+const DEFAULT_LEASE_TIMEOUT_MS = 30 * 60_000;
+const CLAIMS_FILE = 'job-lease-claims.json';
+export class JobLeaseClaimStore {
+    machineId;
+    claimsDir;
+    defaultLeaseTimeoutMs;
+    now;
+    claims = new Map(); // keyed by jobSlug
+    constructor(config) {
+        this.machineId = config.machineId;
+        this.defaultLeaseTimeoutMs = config.defaultLeaseTimeoutMs ?? DEFAULT_LEASE_TIMEOUT_MS;
+        this.now = config.now ?? (() => Date.now());
+        this.claimsDir = path.join(config.stateDir, 'state');
+        if (!fs.existsSync(this.claimsDir)) {
+            fs.mkdirSync(this.claimsDir, { recursive: true });
+        }
+        this.load();
+    }
+    /**
+     * Attempt to take a lease on a job at the given ownership epoch.
+     *
+     * Returns the new lease on success, or a rejection when a peer holds a live,
+     * non-stale lease. Idempotent: re-claiming a slug this machine already leases
+     * (at the same-or-newer epoch) returns the existing lease.
+     */
+    tryClaim(jobSlug, epoch, timeoutMs) {
+        this.pruneExpired();
+        const existing = this.claims.get(jobSlug);
+        if (existing && !existing.completed && !this.isExpired(existing)) {
+            if (existing.machineId === this.machineId) {
+                return { ok: false, reason: 'already-own', claim: existing };
+            }
+            // A peer holds a live lease. We may only supersede it with a STRICTLY
+            // newer epoch (the peer was demoted; our epoch advanced). A same/older
+            // epoch is fenced out — never steal from a current lease-holder.
+            if (epoch <= existing.epoch) {
+                return { ok: false, reason: 'held-by-peer', heldBy: existing.machineId };
+            }
+        }
+        const claim = {
+            claimId: `lease_${crypto.randomBytes(8).toString('hex')}`,
+            jobSlug,
+            machineId: this.machineId,
+            epoch,
+            claimedAt: new Date(this.now()).toISOString(),
+            expiresAt: new Date(this.now() + (timeoutMs ?? this.defaultLeaseTimeoutMs)).toISOString(),
+            completed: false,
+        };
+        this.claims.set(jobSlug, claim);
+        this.save();
+        return { ok: true, claim };
+    }
+    /** Mark our lease on a slug complete (releases it for the next tick). */
+    completeClaim(jobSlug, result) {
+        const claim = this.claims.get(jobSlug);
+        if (!claim || claim.machineId !== this.machineId)
+            return;
+        claim.completed = true;
+        claim.result = result;
+        claim.completedAt = new Date(this.now()).toISOString();
+        this.save();
+    }
+    /**
+     * Apply a claim record received from a peer over the journal. Epoch fencing:
+     * a record whose epoch is OLDER than the one we already hold for the slug is
+     * rejected (returns false) — a demoted machine's stale claim never overwrites
+     * a fresher lease. Returns true if the record was applied.
+     */
+    applyRemote(record) {
+        // Never let a remote record masquerade as our own machine's authority.
+        if (record.machineId === this.machineId)
+            return false;
+        const existing = this.claims.get(record.jobSlug);
+        if (existing && !existing.completed && !this.isExpired(existing)) {
+            // Strict epoch fence — equal epoch keeps the incumbent (first-writer-wins
+            // is resolved upstream by the journal's ordering; we never flip on a tie).
+            if (record.epoch <= existing.epoch)
+                return false;
+        }
+        this.claims.set(record.jobSlug, { ...record });
+        this.save();
+        return true;
+    }
+    /** True if a peer holds a live, non-stale lease on the slug. */
+    hasRemoteClaim(jobSlug) {
+        this.pruneExpired();
+        const claim = this.claims.get(jobSlug);
+        if (!claim || claim.completed || claim.machineId === this.machineId)
+            return false;
+        return !this.isExpired(claim);
+    }
+    getClaim(jobSlug) {
+        this.pruneExpired();
+        return this.claims.get(jobSlug);
+    }
+    getActiveClaims() {
+        this.pruneExpired();
+        return Array.from(this.claims.values()).filter((c) => !c.completed);
+    }
+    getAllClaims() {
+        return Array.from(this.claims.values());
+    }
+    /** Remove expired (uncompleted past expiry) + old completed records. */
+    pruneExpired() {
+        const now = this.now();
+        let pruned = 0;
+        for (const [slug, claim] of this.claims) {
+            if (claim.completed) {
+                const completedAt = claim.completedAt ? new Date(claim.completedAt).getTime() : now;
+                if (now - completedAt > 60 * 60_000) {
+                    this.claims.delete(slug);
+                    pruned++;
+                }
+            }
+            else if (this.isExpired(claim)) {
+                this.claims.delete(slug);
+                pruned++;
+            }
+        }
+        if (pruned > 0)
+            this.save();
+        return pruned;
+    }
+    isExpired(claim) {
+        return this.now() > new Date(claim.expiresAt).getTime();
+    }
+    load() {
+        try {
+            const data = JSON.parse(fs.readFileSync(path.join(this.claimsDir, CLAIMS_FILE), 'utf-8'));
+            this.claims.clear();
+            for (const c of data)
+                this.claims.set(c.jobSlug, c);
+        }
+        catch {
+            /* @silent-fallback-ok — no ledger yet; start empty */
+        }
+    }
+    save() {
+        fs.writeFileSync(path.join(this.claimsDir, CLAIMS_FILE), JSON.stringify(Array.from(this.claims.values()), null, 2) + '\n');
+    }
+}
+//# sourceMappingURL=JobLeaseClaimStore.js.map

package/dist/scheduler/JobLeaseClaimStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"JobLeaseClaimStore.js","sourceRoot":"","sources":["../../src/scheduler/JobLeaseClaimStore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAoC7B,MAAM,wBAAwB,GAAG,EAAE,GAAG,MAAM,CAAC;AAC7C,MAAM,WAAW,GAAG,uBAAuB,CAAC;AAU5C,MAAM,OAAO,kBAAkB;IACrB,SAAS,CAAS;IAClB,SAAS,CAAS;IAClB,qBAAqB,CAAS;IAC9B,GAAG,CAAe;IAClB,MAAM,GAA+B,IAAI,GAAG,EAAE,CAAC,CAAC,mBAAmB;IAE3E,YAAY,MAAgC;QAC1C,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;QAClC,IAAI,CAAC,qBAAqB,GAAG,MAAM,CAAC,qBAAqB,IAAI,wBAAwB,CAAC;QACtF,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAC5C,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACrD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YACnC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,CAAC,IAAI,EAAE,CAAC;IACd,CAAC;IAED;;;;;;OAMG;IACH,QAAQ,CAAC,OAAe,EAAE,KAAa,EAAE,SAAkB;QACzD,IAAI,CAAC,YAAY,EAAE,CAAC;QACpB,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAE1C,IAAI,QAAQ,IAAI,CAAC,QAAQ,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;YACjE,IAAI,QAAQ,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC;gBAC1C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;YAC/D,CAAC;YACD,sEAAsE;YACtE,uEAAuE;YACvE,iEAAiE;YACjE,IAAI,KAAK,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;gBAC5B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC;YAC3E,CAAC;QACH,CAAC;QAED,MAAM,KAAK,GAAkB;YAC3B,OAAO,EAAE,SAAS,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE;YACzD,OAAO;YACP,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,KAAK;YACL,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE;YAC7C,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,SAAS,IAAI,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,WAAW,EAAE;YACzF,SAAS,EAAE,KAAK;SACjB,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAChC,IAAI,CAAC,IAAI,EAAE,CAAC;QACZ,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IAC7B,CAAC;IAED,yEAAyE;IACzE,aAAa,CAAC,OAAe,EAAE,MAA6B;QAC1D,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACvC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS;YAAE,OAAO;QACzD,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC;QACvB,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC;QACtB,KAAK,CAAC,WAAW,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QACvD,IAAI,CAAC,IAAI,EAAE,CAAC;IACd,CAAC;IAED;;;;;OAKG;IACH,WAAW,CAAC,MAAqB;QAC/B,uEAAuE;QACvE,IAAI,MAAM,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS;YAAE,OAAO,KAAK,CAAC;QACtD,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACjD,IAAI,QAAQ,IAAI,CAAC,QAAQ,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;YACjE,0EAA0E;YAC1E,2EAA2E;YAC3E,IAAI,MAAM,CAAC,KAAK,IAAI,QAAQ,CAAC,KAAK;gBAAE,OAAO,KAAK,CAAC;QACnD,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;QAC/C,IAAI,CAAC,IAAI,EAAE,CAAC;QACZ,OAAO,IAAI,CAAC;IACd,CAAC;IAED,gEAAgE;IAChE,cAAc,CAAC,OAAe;QAC5B,IAAI,CAAC,YAAY,EAAE,CAAC;QACpB,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACvC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS;YAAE,OAAO,KAAK,CAAC;QAClF,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IAED,QAAQ,CAAC,OAAe;QACtB,IAAI,CAAC,YAAY,EAAE,CAAC;QACpB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAClC,CAAC;IAED,eAAe;QACb,IAAI,CAAC,YAAY,EAAE,CAAC;QACpB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACtE,CAAC;IAED,YAAY;QACV,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1C,CAAC;IAED,wEAAwE;IACxE,YAAY;QACV,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YACxC,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;gBACpB,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;gBACpF,IAAI,GAAG,GAAG,WAAW,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;oBACpC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;oBACzB,MAAM,EAAE,CAAC;gBACX,CAAC;YACH,CAAC;iBAAM,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;gBACjC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBACzB,MAAM,EAAE,CAAC;YACX,CAAC;QACH,CAAC;QACD,IAAI,MAAM,GAAG,CAAC;YAAE,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,SAAS,CAAC,KAAoB;QACpC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;IAC1D,CAAC;IAEO,IAAI;QACV,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CACrB,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,OAAO,CAAC,CAC9C,CAAC;YACrB,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACpB,KAAK,MAAM,CAAC,IAAI,IAAI;gBAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACtD,CAAC;QAAC,MAAM,CAAC;YACP,sDAAsD;QACxD,CAAC;IACH,CAAC;IAEO,IAAI;QACV,EAAE,CAAC,aAAa,CACd,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,EACtC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CACjE,CAAC;IACJ,CAAC;CACF"}

package/dist/scheduler/JobLeaseCutoverGate.d.ts

@@ -0,0 +1,73 @@
+/**
+ * JobLeaseCutoverGate — WS4.3 journal-lease cutover discipline.
+ *
+ * (MULTI-MACHINE-SEAMLESSNESS-SPEC §WS4.3, "Cutover discipline".)
+ *
+ * Job claims upgrade from the legacy best-effort AgentBus broadcast
+ * (`JobClaimManager`) to a durable, epoch-fenced lease carried over the
+ * replicated journal. The named migration hazard the spec closes is two
+ * NON-INTEROPERATING claim mechanisms running at once: one machine leasing
+ * via the journal while a peer broadcasts via the bus for the SAME job set.
+ * There must never be a window where both are live for a job.
+ *
+ * This gate is the SINGLE decision point that resolves which path a job uses.
+ * It engages the journal-lease path ONLY when invariant-5 flag coherence holds:
+ *   1. the dark flag `multiMachine.seamlessness.ws43JournalLease` is on;
+ *   2. the pool has at least one peer (single-machine = strict no-op, the
+ *      legacy path is byte-for-byte today's behavior);
+ *   3. EVERY online peer advertises the `ws43JournalLease` capability in its
+ *      `seamlessnessFlags` heartbeat — a peer that does not advertise it (an
+ *      older version, or the flag off there) keeps the WHOLE pool on the bus.
+ *
+ * A peer with NO seamlessnessFlags field is an older version → treated as NOT
+ * advertising (the conservative side). Absent = non-participant, per the
+ * spec's invariant-5 ("absent = the peer predates this spec = flag-state-off").
+ *
+ * Pure + deterministic: the gate holds no state and performs no IO, so it is
+ * trivially testable and can be re-read live at every spawn boundary (a
+ * mid-run flag flip or a peer going dark cuts the pool back to the bus
+ * immediately, never stranding a half-migrated job set).
+ */
+/** A peer's advertised seamlessness capability, read from its heartbeat. */
+export interface CutoverPeerAdvert {
+    machineId: string;
+    /** Whether the peer is currently online. An offline peer is not a participant
+     *  in coherence (it cannot lease or broadcast right now) and is excluded. */
+    online?: boolean;
+    /** The peer's advertised WS4.3 journal-lease capability. ABSENT/false = the
+     *  peer does not advertise it (older version or flag off there). */
+    ws43JournalLease?: boolean;
+}
+/** Inputs to the cutover decision, all read LIVE at each evaluation. */
+export interface CutoverGateInput {
+    /** `multiMachine.seamlessness.ws43JournalLease` resolved live. */
+    enabled: boolean;
+    /** `multiMachine.seamlessness.ws43JournalLeaseDryRun` resolved live. When
+     *  true AND the gate would otherwise select 'journal', the journal claim is
+     *  LOGGED as intended but the legacy bus path still runs (the WS-wide dry-run
+     *  posture: "log intended refusals/claims"). */
+    dryRun: boolean;
+    /** Every KNOWN peer (excluding self) with its advertised capability. An empty
+     *  list means single-machine (no peers) → strict no-op. */
+    peers: ReadonlyArray<CutoverPeerAdvert>;
+}
+/** Which claim mechanism a job must use this evaluation. */
+export type ClaimPath = 'journal' | 'bus';
+export interface CutoverDecision {
+    /** The claim path the scheduler must use. Exactly one — never both. */
+    path: ClaimPath;
+    /** When true, the journal claim should be LOGGED as intended but the bus path
+     *  actually runs (dry-run). Only ever true alongside `path: 'bus'`. */
+    journalDryRun: boolean;
+    /** Machine-readable reason, for audit + the status surface. */
+    reason: 'flag-off' | 'single-machine' | 'peers-incoherent' | 'dry-run' | 'journal-coherent';
+    /** Online peers that do NOT advertise the capability (empty ⇒ coherent). The
+     *  reason a coherent-pool cutover was withheld, surfaced for the operator. */
+    incoherentPeers: string[];
+}
+/**
+ * Resolve the claim path for the current pool state. Pure: same input ⇒ same
+ * output, no IO, no clock.
+ */
+export declare function decideClaimPath(input: CutoverGateInput): CutoverDecision;
+//# sourceMappingURL=JobLeaseCutoverGate.d.ts.map

package/dist/scheduler/JobLeaseCutoverGate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"JobLeaseCutoverGate.d.ts","sourceRoot":"","sources":["../../src/scheduler/JobLeaseCutoverGate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,4EAA4E;AAC5E,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB;iFAC6E;IAC7E,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB;wEACoE;IACpE,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,wEAAwE;AACxE,MAAM,WAAW,gBAAgB;IAC/B,kEAAkE;IAClE,OAAO,EAAE,OAAO,CAAC;IACjB;;;oDAGgD;IAChD,MAAM,EAAE,OAAO,CAAC;IAChB;+DAC2D;IAC3D,KAAK,EAAE,aAAa,CAAC,iBAAiB,CAAC,CAAC;CACzC;AAED,4DAA4D;AAC5D,MAAM,MAAM,SAAS,GAAG,SAAS,GAAG,KAAK,CAAC;AAE1C,MAAM,WAAW,eAAe;IAC9B,uEAAuE;IACvE,IAAI,EAAE,SAAS,CAAC;IAChB;2EACuE;IACvE,aAAa,EAAE,OAAO,CAAC;IACvB,+DAA+D;IAC/D,MAAM,EACF,UAAU,GACV,gBAAgB,GAChB,kBAAkB,GAClB,SAAS,GACT,kBAAkB,CAAC;IACvB;kFAC8E;IAC9E,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,gBAAgB,GAAG,eAAe,CAoCxE"}

package/dist/scheduler/JobLeaseCutoverGate.js

@@ -0,0 +1,66 @@
+/**
+ * JobLeaseCutoverGate — WS4.3 journal-lease cutover discipline.
+ *
+ * (MULTI-MACHINE-SEAMLESSNESS-SPEC §WS4.3, "Cutover discipline".)
+ *
+ * Job claims upgrade from the legacy best-effort AgentBus broadcast
+ * (`JobClaimManager`) to a durable, epoch-fenced lease carried over the
+ * replicated journal. The named migration hazard the spec closes is two
+ * NON-INTEROPERATING claim mechanisms running at once: one machine leasing
+ * via the journal while a peer broadcasts via the bus for the SAME job set.
+ * There must never be a window where both are live for a job.
+ *
+ * This gate is the SINGLE decision point that resolves which path a job uses.
+ * It engages the journal-lease path ONLY when invariant-5 flag coherence holds:
+ *   1. the dark flag `multiMachine.seamlessness.ws43JournalLease` is on;
+ *   2. the pool has at least one peer (single-machine = strict no-op, the
+ *      legacy path is byte-for-byte today's behavior);
+ *   3. EVERY online peer advertises the `ws43JournalLease` capability in its
+ *      `seamlessnessFlags` heartbeat — a peer that does not advertise it (an
+ *      older version, or the flag off there) keeps the WHOLE pool on the bus.
+ *
+ * A peer with NO seamlessnessFlags field is an older version → treated as NOT
+ * advertising (the conservative side). Absent = non-participant, per the
+ * spec's invariant-5 ("absent = the peer predates this spec = flag-state-off").
+ *
+ * Pure + deterministic: the gate holds no state and performs no IO, so it is
+ * trivially testable and can be re-read live at every spawn boundary (a
+ * mid-run flag flip or a peer going dark cuts the pool back to the bus
+ * immediately, never stranding a half-migrated job set).
+ */
+/**
+ * Resolve the claim path for the current pool state. Pure: same input ⇒ same
+ * output, no IO, no clock.
+ */
+export function decideClaimPath(input) {
+    // (1) Flag off → legacy bus, byte-for-byte today's behavior.
+    if (!input.enabled) {
+        return { path: 'bus', journalDryRun: false, reason: 'flag-off', incoherentPeers: [] };
+    }
+    // Consider only ONLINE peers — an offline peer cannot claim/broadcast right
+    // now, so it neither blocks coherence nor participates in it (it will be
+    // re-evaluated when it returns and re-advertises).
+    const onlinePeers = input.peers.filter((p) => p.online !== false);
+    // (2) No online peers → single-machine (or all-peers-dark) strict no-op. The
+    // legacy path is the no-op baseline; with no peers there is no one to
+    // double-run against, so the cutover is irrelevant.
+    if (onlinePeers.length === 0) {
+        return { path: 'bus', journalDryRun: false, reason: 'single-machine', incoherentPeers: [] };
+    }
+    // (3) Flag coherence: EVERY online peer must advertise ws43JournalLease.
+    // Absent/false = does not advertise (the conservative side — invariant-5).
+    const incoherentPeers = onlinePeers
+        .filter((p) => p.ws43JournalLease !== true)
+        .map((p) => p.machineId);
+    if (incoherentPeers.length > 0) {
+        // Mixed pool → stay on the bus for the WHOLE job set. Never lease while a
+        // peer broadcasts: the named migration hazard. Degrade conservatively.
+        return { path: 'bus', journalDryRun: false, reason: 'peers-incoherent', incoherentPeers };
+    }
+    // Coherent pool. Dry-run still runs the bus path but logs the intended claim.
+    if (input.dryRun) {
+        return { path: 'bus', journalDryRun: true, reason: 'dry-run', incoherentPeers: [] };
+    }
+    return { path: 'journal', journalDryRun: false, reason: 'journal-coherent', incoherentPeers: [] };
+}
+//# sourceMappingURL=JobLeaseCutoverGate.js.map

package/dist/scheduler/JobLeaseCutoverGate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"JobLeaseCutoverGate.js","sourceRoot":"","sources":["../../src/scheduler/JobLeaseCutoverGate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAgDH;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,KAAuB;IACrD,6DAA6D;IAC7D,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QACnB,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,eAAe,EAAE,EAAE,EAAE,CAAC;IACxF,CAAC;IAED,4EAA4E;IAC5E,yEAAyE;IACzE,mDAAmD;IACnD,MAAM,WAAW,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC;IAElE,6EAA6E;IAC7E,sEAAsE;IACtE,oDAAoD;IACpD,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,eAAe,EAAE,EAAE,EAAE,CAAC;IAC9F,CAAC;IAED,yEAAyE;IACzE,2EAA2E;IAC3E,MAAM,eAAe,GAAG,WAAW;SAChC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,gBAAgB,KAAK,IAAI,CAAC;SAC1C,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAE3B,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,0EAA0E;QAC1E,uEAAuE;QACvE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,eAAe,EAAE,CAAC;IAC5F,CAAC;IAED,8EAA8E;IAC9E,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjB,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,eAAe,EAAE,EAAE,EAAE,CAAC;IACtF,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,eAAe,EAAE,EAAE,EAAE,CAAC;AACpG,CAAC"}

package/dist/scheduler/JobScheduler.d.ts

@@ -17,6 +17,8 @@ import type { CanRunJobResult, IntelligenceProvider, MessagingAdapter } from '..
 import type { JobDefinition, JobSchedulerConfig, JobPriority } from '../core/types.js';
 import type { TelegramAdapter } from '../messaging/TelegramAdapter.js';
 import type { JobClaimManager } from './JobClaimManager.js';
+import type { JobLeaseClaimStore } from './JobLeaseClaimStore.js';
+import { type CutoverGateInput, type CutoverDecision } from './JobLeaseCutoverGate.js';
 import type { TopicMemory } from '../memory/TopicMemory.js';
 interface QueuedJob {
     slug: string;
@@ -66,6 +68,26 @@ export declare class JobScheduler {
     private quotaTracker;
     /** Optional job claim manager for multi-machine deduplication (Phase 4C) */
     private claimManager;
+    /**
+     * MULTI-MACHINE-SEAMLESSNESS-SPEC §WS4.3 journal-lease cutover. The durable,
+     * epoch-fenced lease store — the journal-backed UPGRADE of the best-effort
+     * AgentBus broadcast in `claimManager`. It is consulted for a job ONLY when
+     * `journalLeaseGate` selects the 'journal' path (flag on + pool coherent). The
+     * gate guarantees the two mechanisms are never both live for a job set (the
+     * named migration hazard). When unset, the scheduler stays on the legacy bus
+     * path (byte-for-byte today's behavior).
+     */
+    private leaseClaimStore;
+    /**
+     * Live provider for the cutover-gate input (flag + dry-run + the pool peers'
+     * advertised ws43JournalLease capability + this machine's lease epoch). Read
+     * LIVE at each claim boundary so a flag flip / a peer going dark cuts the pool
+     * back to the bus immediately. When unset, the gate is never consulted and the
+     * legacy bus path runs (strict no-op).
+     */
+    private journalLeaseGate;
+    /** Optional sink for the most-recent cutover decision (status/audit surface). */
+    private onCutoverDecision;
     /**
      * UNIFIED-SESSION-LIFECYCLE §P0 #9 (SE-8): function returning cumulative
      * wall-time-asleep in milliseconds during a half-open window [startMs, endMs).
@@ -130,6 +152,37 @@ export declare class JobScheduler {
      * and skip jobs already claimed by other machines.
      */
     setJobClaimManager(manager: JobClaimManager): void;
+    /**
+     * MULTI-MACHINE-SEAMLESSNESS-SPEC §WS4.3 — inject the journal-lease cutover.
+     *
+     * `store` is the durable epoch-fenced lease store; `gateInput` returns the
+     * LIVE cutover-gate input (flag, dry-run, pool peers' advertised capability,
+     * and this machine's current lease epoch) — read fresh at each claim boundary,
+     * never cached. `onDecision` (optional) receives the resolved decision per job
+     * for the status/audit surface.
+     *
+     * When omitted, the scheduler never consults the journal path — the legacy
+     * AgentBus `claimManager` runs unchanged (single-machine / flag-off no-op).
+     */
+    setJournalLeaseCutover(store: JobLeaseClaimStore, gateInput: () => CutoverGateInput & {
+        epoch: number;
+    }, onDecision?: (slug: string, decision: CutoverDecision) => void): void;
+    /**
+     * Resolve which claim mechanism a job uses RIGHT NOW. Pure read of the live
+     * gate input. Returns null when the cutover is not wired (legacy bus only).
+     * Exposed for the scheduler's claim seams (check + claim + complete) so a
+     * single evaluation drives all three — never two mechanisms for one job.
+     */
+    private resolveClaimPath;
+    /**
+     * Release a claim for a completed job across BOTH mechanisms. The path that
+     * actually took the claim may differ from the path the gate would pick at
+     * completion time (a mid-run flag flip), so we release both — each store's
+     * completeClaim is a strict no-op when this machine does not own the slug's
+     * live record, so releasing the unused store is harmless. The journal release
+     * is synchronous (durable); the bus release is best-effort async.
+     */
+    private releaseClaim;
     /**
      * Set local machine identity for machine-scoped job filtering.
      * Jobs with a `machines` field will only run on machines whose ID or name matches.

package/dist/scheduler/JobScheduler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"JobScheduler.d.ts","sourceRoot":"","sources":["../../src/scheduler/JobScheduler.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAaH,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAGvD,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAE7C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,KAAK,EAAE,eAAe,EAAE,oBAAoB,EAAE,gBAAgB,EAAc,MAAM,kBAAkB,CAAC;AAE5G,OAAO,KAAK,EAAE,aAAa,EAAE,kBAAkB,EAAY,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACjG,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AACvE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAS5D,UAAU,SAAS;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,UAAU,eAAe;IACvB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AASD,qBAAa,YAAY;IACvB,OAAO,CAAC,MAAM,CAAqB;IACnC,OAAO,CAAC,cAAc,CAAiB;IACvC,OAAO,CAAC,KAAK,CAAe;IAC5B,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,UAAU,CAAa;IAC/B,OAAO,CAAC,UAAU,CAAgB;IAClC,OAAO,CAAC,IAAI,CAAuB;IACnC,OAAO,CAAC,SAAS,CAAgC;IACjD,OAAO,CAAC,KAAK,CAAmB;IAChC,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,MAAM,CAAS;IAEvB,2DAA2D;IAC3D,OAAO,CAAC,YAAY,CAAkC;IAEtD,2EAA2E;IAC3E,OAAO,CAAC,UAAU,CAAqF;IAEvG,2DAA2D;IAC3D,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAOrC;IAEF,qEAAqE;IACrE,OAAO,CAAC,SAAS,CAAuB;IACxC,OAAO,CAAC,WAAW,CAAuB;IAE1C;;;;OAIG;IACH,SAAS,EAAE,CAAC,QAAQ,EAAE,WAAW,KAAK,OAAO,GAAG,eAAe,CAAc;IAE7E,uDAAuD;IACvD,OAAO,CAAC,SAAS,CAAiC;IAElD,uDAAuD;IACvD,OAAO,CAAC,QAAQ,CAAgC;IAEhD,sEAAsE;IACtE,OAAO,CAAC,YAAY,CAA6B;IAEjD,4EAA4E;IAC5E,OAAO,CAAC,YAAY,CAAgC;IACpD;;;;;;OAMG;IACH,OAAO,CAAC,uBAAuB,CAA6D;IAE5F,2EAA2E;IAC3E,OAAO,CAAC,YAAY,CAAqC;IAEzD,0EAA0E;IAC1E,OAAO,CAAC,eAAe,CAAgC;IAEvD,wDAAwD;IACxD,OAAO,CAAC,WAAW,CAA4B;IAE/C;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,iBAAiB,CAAkE;IAE3F;;;;;;OAMG;IACH,OAAO,CAAC,kBAAkB,CAAmE;gBAG3F,MAAM,EAAE,kBAAkB,EAC1B,cAAc,EAAE,cAAc,EAC9B,KAAK,EAAE,YAAY,EACnB,QAAQ,EAAE,MAAM;IAUlB;;OAEG;IACH,YAAY,CAAC,OAAO,EAAE,gBAAgB,GAAG,IAAI;IAI7C;;;;OAIG;IACH,0BAA0B,CAAC,EAAE,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI;IAIhF;;;OAGG;IACH,WAAW,CAAC,OAAO,EAAE,eAAe,GAAG,IAAI;IAa3C;;;;OAIG;IACH,eAAe,CAAC,OAAO,EAAE,YAAY,GAAG,IAAI;IAI5C;;;;OAIG;IACH,kBAAkB,CAAC,OAAO,EAAE,eAAe,GAAG,IAAI;IAIlD;;;OAGG;IACH,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI;IAMhE;;OAEG;IACH,eAAe,CAAC,QAAQ,EAAE,oBAAoB,GAAG,IAAI;IAIrD;;;;OAIG;IACH,kBAAkB,CAAC,IAAI,EAAE,eAAe,GAAG,IAAI;IAI/C;;;OAGG;IACH,cAAc,CAAC,WAAW,EAAE,WAAW,GAAG,IAAI;IAI9C;;;;;;OAMG;IACH,YAAY,CACV,QAAQ,EAAE,MAAM;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,UAAU,EAAE,OAAO,CAAA;KAAE,EACzD,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,GAC3D,IAAI;IAKP;;OAEG;IACH,KAAK,IAAI,IAAI;IA8Db;;OAEG;IACH,IAAI,IAAI,IAAI;IAsBZ;;OAEG;IACG,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,QAAQ,GAAG,SAAS,CAAC;IAgK3F;;;;OAIG;IACH,OAAO,CAAC,wBAAwB;IAahC;;OAEG;IACH,YAAY,IAAI,IAAI;IAuBpB;;OAEG;IACH,KAAK,IAAI,IAAI;IAIb;;OAEG;IACH,UAAU,IAAI,IAAI;IAIlB;;OAEG;IACH,MAAM,IAAI,IAAI;IAKd;;OAEG;IACH,SAAS,IAAI,eAAe;IAY5B;;OAEG;IACH,OAAO,IAAI,aAAa,EAAE;IAI1B;;OAEG;IACH,QAAQ,IAAI,SAAS,EAAE;IAIvB;;;;OAIG;IACH,eAAe,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IAQrD;;OAEG;IACH,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAKjC;;OAEG;IACH,aAAa,IAAI,UAAU;IAI3B;;OAEG;IACH,aAAa,IAAI,aAAa;IAI9B;;;;;;;;;;;;;;;;OAgBG;IACG,aAAa,CAAC,UAAU,EAAE;QAAE,oBAAoB,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAmGjH,OAAO,CAAC,OAAO;IAoBf;;;;;;OAMG;IACH,OAAO,CAAC,YAAY;IA2FpB,OAAO,CAAC,eAAe;IA4IvB;;;;;;;;OAQG;IACH,OAAO,CAAC,gBAAgB;IAaxB,OAAO,CAAC,WAAW;IAsGnB;;;OAGG;IACH,OAAO,CAAC,aAAa;IAOrB;;;OAGG;IACH,OAAO,CAAC,kBAAkB;IAI1B;;;;OAIG;IACH,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAKpD,OAAO,CAAC,sBAAsB;IAI9B,OAAO,CAAC,UAAU;IAOlB;;OAEG;IACG,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA8O9E;;;;OAIG;YACW,eAAe;IAsE7B;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAM3B;;;;;;;;OAQG;YACW,YAAY;IAwD1B;;;;OAIG;IACH,OAAO,CAAC,qBAAqB;IAK7B;;;;OAIG;IACH,OAAO,CAAC,aAAa;IAkCrB;;OAEG;IACH,OAAO,CAAC,eAAe;IAQvB;;;;;;;;;;OAUG;IACH,OAAO,CAAC,0BAA0B;IA0BlC;;;;OAIG;IACH,OAAO,CAAC,wBAAwB;YA4ClB,eAAe;IAmD7B;;;;OAIG;YACW,gBAAgB;IAyD9B;;;;;;;;;;;;;;;OAeG;IACH,MAAM,CAAC,gBAAgB,CAAC,GAAG,EAAE,aAAa,GAAG,mBAAmB;IA4FhE;;;8EAG0E;IAC1E,MAAM,CAAC,qBAAqB,CAAC,SAAS,EAAE,aAAa,CAAC,WAAW,CAAC,GAAG,OAAO;IAQ5E;;;;OAIG;IACH,MAAM,CAAC,uBAAuB,CAC5B,GAAG,EAAE,aAAa,EAClB,UAAU,EAAE,mBAAmB,GAC9B,gBAAgB;IAqCnB;;;;;OAKG;IACH,MAAM,CAAC,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM;IAc3C;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,oBAAoB;IA8D5B;;;;wCAIoC;IACpC,WAAW,IAAI;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE;CAO9E;AAED,4EAA4E;AAC5E,MAAM,WAAW,mBAAmB;IAClC,IAAI,EACA,QAAQ,GACR,OAAO,GACP,cAAc,GACd,SAAS,GACT,cAAc,GACd,qBAAqB,GACrB,wBAAwB,CAAC;IAC7B;;;2FAGuF;IACvF,SAAS,EAAE,MAAM,EAAE,GAAG,GAAG,GAAG,IAAI,CAAC;IACjC,iBAAiB,EAAE,OAAO,CAAC;IAC3B,gBAAgB,EAAE,OAAO,CAAC;IAC1B;;;;mEAI+D;IAC/D,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AAED,iDAAiD;AACjD,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,QAAQ,GAAG,MAAM,GAAG,QAAQ,CAAC;IACrC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,aAAa,EAAE,MAAM,EAAE,GAAG,GAAG,GAAG,IAAI,CAAC;IACrC,iBAAiB,EAAE,OAAO,CAAC;IAC3B,gBAAgB,EAAE,OAAO,CAAC;CAC3B"}
+{"version":3,"file":"JobScheduler.d.ts","sourceRoot":"","sources":["../../src/scheduler/JobScheduler.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAaH,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAGvD,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAE7C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,KAAK,EAAE,eAAe,EAAE,oBAAoB,EAAE,gBAAgB,EAAc,MAAM,kBAAkB,CAAC;AAE5G,OAAO,KAAK,EAAE,aAAa,EAAE,kBAAkB,EAAY,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACjG,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AACvE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAClE,OAAO,EAAmB,KAAK,gBAAgB,EAAE,KAAK,eAAe,EAAE,MAAM,0BAA0B,CAAC;AACxG,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAS5D,UAAU,SAAS;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,UAAU,eAAe;IACvB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AASD,qBAAa,YAAY;IACvB,OAAO,CAAC,MAAM,CAAqB;IACnC,OAAO,CAAC,cAAc,CAAiB;IACvC,OAAO,CAAC,KAAK,CAAe;IAC5B,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,UAAU,CAAa;IAC/B,OAAO,CAAC,UAAU,CAAgB;IAClC,OAAO,CAAC,IAAI,CAAuB;IACnC,OAAO,CAAC,SAAS,CAAgC;IACjD,OAAO,CAAC,KAAK,CAAmB;IAChC,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,MAAM,CAAS;IAEvB,2DAA2D;IAC3D,OAAO,CAAC,YAAY,CAAkC;IAEtD,2EAA2E;IAC3E,OAAO,CAAC,UAAU,CAAqF;IAEvG,2DAA2D;IAC3D,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAOrC;IAEF,qEAAqE;IACrE,OAAO,CAAC,SAAS,CAAuB;IACxC,OAAO,CAAC,WAAW,CAAuB;IAE1C;;;;OAIG;IACH,SAAS,EAAE,CAAC,QAAQ,EAAE,WAAW,KAAK,OAAO,GAAG,eAAe,CAAc;IAE7E,uDAAuD;IACvD,OAAO,CAAC,SAAS,CAAiC;IAElD,uDAAuD;IACvD,OAAO,CAAC,QAAQ,CAAgC;IAEhD,sEAAsE;IACtE,OAAO,CAAC,YAAY,CAA6B;IAEjD,4EAA4E;IAC5E,OAAO,CAAC,YAAY,CAAgC;IAEpD;;;;;;;;OAQG;IACH,OAAO,CAAC,eAAe,CAAmC;IAC1D;;;;;;OAMG;IACH,OAAO,CAAC,gBAAgB,CAA6D;IACrF,iFAAiF;IACjF,OAAO,CAAC,iBAAiB,CAAoE;IAC7F;;;;;;OAMG;IACH,OAAO,CAAC,uBAAuB,CAA6D;IAE5F,2EAA2E;IAC3E,OAAO,CAAC,YAAY,CAAqC;IAEzD,0EAA0E;IAC1E,OAAO,CAAC,eAAe,CAAgC;IAEvD,wDAAwD;IACxD,OAAO,CAAC,WAAW,CAA4B;IAE/C;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,iBAAiB,CAAkE;IAE3F;;;;;;OAMG;IACH,OAAO,CAAC,kBAAkB,CAAmE;gBAG3F,MAAM,EAAE,kBAAkB,EAC1B,cAAc,EAAE,cAAc,EAC9B,KAAK,EAAE,YAAY,EACnB,QAAQ,EAAE,MAAM;IAUlB;;OAEG;IACH,YAAY,CAAC,OAAO,EAAE,gBAAgB,GAAG,IAAI;IAI7C;;;;OAIG;IACH,0BAA0B,CAAC,EAAE,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI;IAIhF;;;OAGG;IACH,WAAW,CAAC,OAAO,EAAE,eAAe,GAAG,IAAI;IAa3C;;;;OAIG;IACH,eAAe,CAAC,OAAO,EAAE,YAAY,GAAG,IAAI;IAI5C;;;;OAIG;IACH,kBAAkB,CAAC,OAAO,EAAE,eAAe,GAAG,IAAI;IAIlD;;;;;;;;;;;OAWG;IACH,sBAAsB,CACpB,KAAK,EAAE,kBAAkB,EACzB,SAAS,EAAE,MAAM,gBAAgB,GAAG;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,EACrD,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,KAAK,IAAI,GAC7D,IAAI;IAMP;;;;;OAKG;IACH,OAAO,CAAC,gBAAgB;IAexB;;;;;;;OAOG;IACH,OAAO,CAAC,YAAY;IAWpB;;;OAGG;IACH,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI;IAMhE;;OAEG;IACH,eAAe,CAAC,QAAQ,EAAE,oBAAoB,GAAG,IAAI;IAIrD;;;;OAIG;IACH,kBAAkB,CAAC,IAAI,EAAE,eAAe,GAAG,IAAI;IAI/C;;;OAGG;IACH,cAAc,CAAC,WAAW,EAAE,WAAW,GAAG,IAAI;IAI9C;;;;;;OAMG;IACH,YAAY,CACV,QAAQ,EAAE,MAAM;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,UAAU,EAAE,OAAO,CAAA;KAAE,EACzD,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,GAC3D,IAAI;IAKP;;OAEG;IACH,KAAK,IAAI,IAAI;IA8Db;;OAEG;IACH,IAAI,IAAI,IAAI;IAsBZ;;OAEG;IACG,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,QAAQ,GAAG,SAAS,CAAC;IAsM3F;;;;OAIG;IACH,OAAO,CAAC,wBAAwB;IAahC;;OAEG;IACH,YAAY,IAAI,IAAI;IAuBpB;;OAEG;IACH,KAAK,IAAI,IAAI;IAIb;;OAEG;IACH,UAAU,IAAI,IAAI;IAIlB;;OAEG;IACH,MAAM,IAAI,IAAI;IAKd;;OAEG;IACH,SAAS,IAAI,eAAe;IAY5B;;OAEG;IACH,OAAO,IAAI,aAAa,EAAE;IAI1B;;OAEG;IACH,QAAQ,IAAI,SAAS,EAAE;IAIvB;;;;OAIG;IACH,eAAe,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IAQrD;;OAEG;IACH,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAKjC;;OAEG;IACH,aAAa,IAAI,UAAU;IAI3B;;OAEG;IACH,aAAa,IAAI,aAAa;IAI9B;;;;;;;;;;;;;;;;OAgBG;IACG,aAAa,CAAC,UAAU,EAAE;QAAE,oBAAoB,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAoGjH,OAAO,CAAC,OAAO;IAoBf;;;;;;OAMG;IACH,OAAO,CAAC,YAAY;IA2FpB,OAAO,CAAC,eAAe;IA4IvB;;;;;;;;OAQG;IACH,OAAO,CAAC,gBAAgB;IAaxB,OAAO,CAAC,WAAW;IAsGnB;;;OAGG;IACH,OAAO,CAAC,aAAa;IAOrB;;;OAGG;IACH,OAAO,CAAC,kBAAkB;IAI1B;;;;OAIG;IACH,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAKpD,OAAO,CAAC,sBAAsB;IAI9B,OAAO,CAAC,UAAU;IAOlB;;OAEG;IACG,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA2O9E;;;;OAIG;YACW,eAAe;IAsE7B;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAM3B;;;;;;;;OAQG;YACW,YAAY;IAwD1B;;;;OAIG;IACH,OAAO,CAAC,qBAAqB;IAK7B;;;;OAIG;IACH,OAAO,CAAC,aAAa;IAkCrB;;OAEG;IACH,OAAO,CAAC,eAAe;IAQvB;;;;;;;;;;OAUG;IACH,OAAO,CAAC,0BAA0B;IA0BlC;;;;OAIG;IACH,OAAO,CAAC,wBAAwB;YA4ClB,eAAe;IAmD7B;;;;OAIG;YACW,gBAAgB;IAyD9B;;;;;;;;;;;;;;;OAeG;IACH,MAAM,CAAC,gBAAgB,CAAC,GAAG,EAAE,aAAa,GAAG,mBAAmB;IA4FhE;;;8EAG0E;IAC1E,MAAM,CAAC,qBAAqB,CAAC,SAAS,EAAE,aAAa,CAAC,WAAW,CAAC,GAAG,OAAO;IAQ5E;;;;OAIG;IACH,MAAM,CAAC,uBAAuB,CAC5B,GAAG,EAAE,aAAa,EAClB,UAAU,EAAE,mBAAmB,GAC9B,gBAAgB;IAqCnB;;;;;OAKG;IACH,MAAM,CAAC,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM;IAc3C;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,oBAAoB;IA8D5B;;;;wCAIoC;IACpC,WAAW,IAAI;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE;CAO9E;AAED,4EAA4E;AAC5E,MAAM,WAAW,mBAAmB;IAClC,IAAI,EACA,QAAQ,GACR,OAAO,GACP,cAAc,GACd,SAAS,GACT,cAAc,GACd,qBAAqB,GACrB,wBAAwB,CAAC;IAC7B;;;2FAGuF;IACvF,SAAS,EAAE,MAAM,EAAE,GAAG,GAAG,GAAG,IAAI,CAAC;IACjC,iBAAiB,EAAE,OAAO,CAAC;IAC3B,gBAAgB,EAAE,OAAO,CAAC;IAC1B;;;;mEAI+D;IAC/D,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AAED,iDAAiD;AACjD,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,QAAQ,GAAG,MAAM,GAAG,QAAQ,CAAC;IACrC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,aAAa,EAAE,MAAM,EAAE,GAAG,GAAG,GAAG,IAAI,CAAC;IACrC,iBAAiB,EAAE,OAAO,CAAC;IAC3B,gBAAgB,EAAE,OAAO,CAAC;CAC3B"}

package/dist/scheduler/JobScheduler.js

@@ -23,6 +23,7 @@ import { JobRunHistory } from './JobRunHistory.js';
 import { SkipLedger } from './SkipLedger.js';
 import { classifySessionDeath } from '../monitoring/QuotaExhaustionDetector.js';
 import { TOPIC_STYLE } from '../messaging/TelegramAdapter.js';
+import { decideClaimPath } from './JobLeaseCutoverGate.js';
 /**
  * Fallback expected duration (minutes) used when a run is encountered for a
  * slug that's no longer present in `jobs` (e.g., job config was removed
@@ -77,6 +78,26 @@ export class JobScheduler {
     quotaTracker = null;
     /** Optional job claim manager for multi-machine deduplication (Phase 4C) */
     claimManager = null;
+    /**
+     * MULTI-MACHINE-SEAMLESSNESS-SPEC §WS4.3 journal-lease cutover. The durable,
+     * epoch-fenced lease store — the journal-backed UPGRADE of the best-effort
+     * AgentBus broadcast in `claimManager`. It is consulted for a job ONLY when
+     * `journalLeaseGate` selects the 'journal' path (flag on + pool coherent). The
+     * gate guarantees the two mechanisms are never both live for a job set (the
+     * named migration hazard). When unset, the scheduler stays on the legacy bus
+     * path (byte-for-byte today's behavior).
+     */
+    leaseClaimStore = null;
+    /**
+     * Live provider for the cutover-gate input (flag + dry-run + the pool peers'
+     * advertised ws43JournalLease capability + this machine's lease epoch). Read
+     * LIVE at each claim boundary so a flag flip / a peer going dark cuts the pool
+     * back to the bus immediately. When unset, the gate is never consulted and the
+     * legacy bus path runs (strict no-op).
+     */
+    journalLeaseGate = null;
+    /** Optional sink for the most-recent cutover decision (status/audit surface). */
+    onCutoverDecision = null;
     /**
      * UNIFIED-SESSION-LIFECYCLE §P0 #9 (SE-8): function returning cumulative
      * wall-time-asleep in milliseconds during a half-open window [startMs, endMs).
@@ -166,6 +187,64 @@ export class JobScheduler {
     setJobClaimManager(manager) {
         this.claimManager = manager;
     }
+    /**
+     * MULTI-MACHINE-SEAMLESSNESS-SPEC §WS4.3 — inject the journal-lease cutover.
+     *
+     * `store` is the durable epoch-fenced lease store; `gateInput` returns the
+     * LIVE cutover-gate input (flag, dry-run, pool peers' advertised capability,
+     * and this machine's current lease epoch) — read fresh at each claim boundary,
+     * never cached. `onDecision` (optional) receives the resolved decision per job
+     * for the status/audit surface.
+     *
+     * When omitted, the scheduler never consults the journal path — the legacy
+     * AgentBus `claimManager` runs unchanged (single-machine / flag-off no-op).
+     */
+    setJournalLeaseCutover(store, gateInput, onDecision) {
+        this.leaseClaimStore = store;
+        this.journalLeaseGate = gateInput;
+        this.onCutoverDecision = onDecision ?? null;
+    }
+    /**
+     * Resolve which claim mechanism a job uses RIGHT NOW. Pure read of the live
+     * gate input. Returns null when the cutover is not wired (legacy bus only).
+     * Exposed for the scheduler's claim seams (check + claim + complete) so a
+     * single evaluation drives all three — never two mechanisms for one job.
+     */
+    resolveClaimPath(slug) {
+        if (!this.journalLeaseGate || !this.leaseClaimStore)
+            return null;
+        let input;
+        try {
+            input = this.journalLeaseGate();
+        }
+        catch {
+            // @silent-fallback-ok — fail toward the legacy bus path (the conservative
+            // side) if the live gate read throws; never strand a job on a broken gate.
+            return null;
+        }
+        const decision = decideClaimPath(input);
+        this.onCutoverDecision?.(slug, decision);
+        return { path: decision.path, epoch: input.epoch, journalDryRun: decision.journalDryRun };
+    }
+    /**
+     * Release a claim for a completed job across BOTH mechanisms. The path that
+     * actually took the claim may differ from the path the gate would pick at
+     * completion time (a mid-run flag flip), so we release both — each store's
+     * completeClaim is a strict no-op when this machine does not own the slug's
+     * live record, so releasing the unused store is harmless. The journal release
+     * is synchronous (durable); the bus release is best-effort async.
+     */
+    releaseClaim(slug, result) {
+        try {
+            this.leaseClaimStore?.completeClaim(slug, result);
+        }
+        catch {
+            /* @silent-fallback-ok — best-effort; lease expires on its own otherwise */
+        }
+        this.claimManager?.completeClaim(slug, result).catch(err => {
+            console.error(`[scheduler] Failed to broadcast claim completion for "${slug}": ${err}`);
+        });
+    }
     /**
      * Set local machine identity for machine-scoped job filtering.
      * Jobs with a `machines` field will only run on machines whose ID or name matches.
@@ -356,15 +435,27 @@ export class JobScheduler {
                 return 'skipped';
             }
         }
-        // Multi-machine claim check (Phase 4C — Gap 5)
-        // If another machine already claimed this job, skip it.
-        if (this.claimManager?.hasRemoteClaim(slug)) {
+        // Multi-machine claim check (Phase 4C — Gap 5; WS4.3 journal-lease cutover).
+        // The cutover gate resolves WHICH mechanism owns dedup for this job RIGHT
+        // NOW — the durable epoch-fenced journal lease (flag on + pool coherent) or
+        // the legacy AgentBus broadcast. Exactly one is consulted per job, so the
+        // two never run simultaneously for the same job set (the named migration
+        // hazard). The decision is recomputed live at each seam; in the steady
+        // coherent state it is stable across the same tick.
+        const claimPath = this.resolveClaimPath(slug);
+        const remoteHeld = claimPath?.path === 'journal'
+            ? this.leaseClaimStore.hasRemoteClaim(slug)
+            : (this.claimManager?.hasRemoteClaim(slug) ?? false);
+        if (remoteHeld) {
+            const claimedBy = claimPath?.path === 'journal'
+                ? this.leaseClaimStore.getClaim(slug)?.machineId
+                : this.claimManager?.getClaim(slug)?.machineId;
             this.skipLedger.recordSkip(slug, 'claimed');
             this.state.appendEvent({
                 type: 'job_skipped',
                 summary: `Job "${slug}" skipped — claimed by another machine`,
                 timestamp: new Date().toISOString(),
-                metadata: { slug, reason, claimedBy: this.claimManager.getClaim(slug)?.machineId },
+                metadata: { slug, reason, claimedBy, claimPath: claimPath?.path ?? 'bus' },
             });
             return 'skipped';
         }
@@ -431,12 +522,39 @@ export class JobScheduler {
             this.enqueue(slug, reason);
             return 'queued';
         }
-        // Broadcast claim before spawning (async, best-effort)
-        if (this.claimManager) {
-            const timeoutMs = (job.expectedDurationMinutes ?? 30) * 2 * 60_000;
-            this.claimManager.tryClaim(slug, timeoutMs).catch(err => {
-                console.error(`[scheduler] Failed to broadcast claim for "${slug}": ${err}`);
-            });
+        // Take the claim before spawning. The cutover gate (resolved at the check
+        // seam above) decides the mechanism: a durable epoch-fenced journal lease
+        // when the pool is coherent, else the legacy best-effort AgentBus broadcast.
+        // DRY-RUN: when the gate is coherent-but-dry-run, the intended journal claim
+        // is LOGGED (the WS-wide "log intended claims" posture) but the bus path
+        // still runs — so a dry-run pool never half-migrates.
+        const timeoutMs = (job.expectedDurationMinutes ?? 30) * 2 * 60_000;
+        if (claimPath?.path === 'journal') {
+            // Synchronous, durable: the lease is persisted before the spawn, so a
+            // crash between claim and spawn leaves the lease (fenced, expiring) rather
+            // than a silent double-run window.
+            const attempt = this.leaseClaimStore.tryClaim(slug, claimPath.epoch, timeoutMs);
+            if (!attempt.ok && attempt.reason === 'held-by-peer') {
+                // A peer leased it between the check and here — yield (rare race).
+                this.skipLedger.recordSkip(slug, 'claimed');
+                this.state.appendEvent({
+                    type: 'job_skipped',
+                    summary: `Job "${slug}" skipped — leased by another machine`,
+                    timestamp: new Date().toISOString(),
+                    metadata: { slug, reason, claimedBy: attempt.heldBy, claimPath: 'journal' },
+                });
+                return 'skipped';
+            }
+        }
+        else {
+            if (claimPath?.journalDryRun) {
+                console.log(`[scheduler] WS4.3 journal-lease DRY-RUN — would lease "${slug}" via journal (epoch ${claimPath.epoch}); running legacy bus path.`);
+            }
+            if (this.claimManager) {
+                this.claimManager.tryClaim(slug, timeoutMs).catch(err => {
+                    console.error(`[scheduler] Failed to broadcast claim for "${slug}": ${err}`);
+                });
+            }
         }
         // Clear retry state on successful trigger
         this.clearRetryState(slug);
@@ -652,8 +770,9 @@ export class JobScheduler {
             try {
                 // Note: claim is finalized as 'failure' (slug is unblocked for the next tick)
                 // while run history records 'timeout' (preserves the cause for diagnostics).
-                // The asymmetry is intentional — don't "fix" it.
-                this.claimManager?.completeClaim(run.slug, 'failure');
+                // The asymmetry is intentional — don't "fix" it. Releases both the journal
+                // lease and the legacy bus claim (whichever took it).
+                this.releaseClaim(run.slug, 'failure');
             }
             catch {
                 // Best-effort — claim may have already cleared.
@@ -754,7 +873,7 @@ export class JobScheduler {
                 consecutiveFailures: 0,
                 nextScheduled: this.getNextRun(job.slug),
             });
-            this.claimManager?.completeClaim(job.slug, 'success');
+            this.releaseClaim(job.slug, 'success');
         }).catch((err) => {
             const errorMsg = err instanceof Error ? err.message : String(err);
             const output = [
@@ -772,7 +891,7 @@ export class JobScheduler {
                 consecutiveFailures: (previous?.consecutiveFailures ?? 0) + 1,
                 nextScheduled: this.getNextRun(job.slug),
             });
-            this.claimManager?.completeClaim(job.slug, 'failure');
+            this.releaseClaim(job.slug, 'failure');
             this.scheduleRetry(job.slug, 'error');
         });
     }
@@ -1098,12 +1217,9 @@ export class JobScheduler {
             }
             this.activeRunIds.delete(session.name);
         }
-        // Signal claim completion (Phase 4C — Gap 5)
-        if (this.claimManager) {
-            this.claimManager.completeClaim(job.slug, failed ? 'failure' : 'success').catch(err => {
-                console.error(`[scheduler] Failed to broadcast claim completion for "${job.slug}": ${err}`);
-            });
-        }
+        // Signal claim completion (Phase 4C — Gap 5; WS4.3 journal-lease cutover).
+        // Releases whichever mechanism took the claim (journal lease or legacy bus).
+        this.releaseClaim(job.slug, failed ? 'failure' : 'success');
         // Clear active-job.json now that the job is done
         const activeJob = this.state.get('active-job');
         if (activeJob?.slug === job.slug) {