macp-sdk-typescript 0.10.0 → 0.12.0

package/dist/projections/decision.js

@@ -2,66 +2,16 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.DecisionProjection = void 0;
 const constants_1 = require("../constants");
-const logging_1 = require("../logging");
-class DecisionProjection {
+const base_1 = require("./base");
+class DecisionProjection extends base_1.BaseProjection {
+    mode = constants_1.MODE_DECISION;
     proposals = new Map();
     evaluations = [];
     objections = [];
     votes = new Map();
-    /**
-     * The session's accepted history, one envelope per unique `message_id`. See
-     * `BaseProjection.transcript` (`src/projections/base.ts`) for the full
-     * redelivery-idempotence contract (RFC-MACP-0006 §3.2); duplicated here
-     * only as a one-line pointer.
-     */
-    transcript = [];
-    /**
-     * Cardinality anomalies recorded while replaying this projection's accepted
-     * transcript (e.g. a duplicate `Vote` from the same sender for the same
-     * `proposal_id`). See `BaseProjection.anomalies` (`src/projections/base.ts`)
-     * for the canonical description; duplicated here only as a one-line
-     * pointer.
-     */
-    anomalies = [];
     phase = 'Proposal';
-    commitment;
-    /**
-     * `message_id`s already applied to this projection. See
-     * `BaseProjection.seenMessageIds` (`src/projections/base.ts`) for the full
-     * redelivery-idempotence rationale (RFC-MACP-0006 §3.2); duplicated here
-     * only as a one-line pointer.
-     */
-    seenMessageIds = new Set();
-    /**
-     * Apply one envelope to this projection's in-process state.
-     *
-     * Input contract: **accepted-only**, caller-maintained (`Envelope` carries
-     * no acceptance marker). Canonical source: `schemas/conformance/README.md`
-     * "Notes:", RFC-MACP-0007 §5.3, RFC-MACP-0011 §5. Full rationale and failure
-     * mode are documented once, on `BaseProjection.applyEnvelope`
-     * (`src/projections/base.ts`), and duplicated here only as a one-line
-     * pointer so six independent copies of the same prose cannot drift.
-     *
-     * Redelivery idempotence: a redelivered envelope (same `message_id`) is a
-     * non-event — not appended to `transcript`, not passed to the `switch`.
-     * See `BaseProjection.applyEnvelope` for the full RFC-MACP-0006 §3.2
-     * citation; duplicated here only as a one-line pointer.
-     */
-    applyEnvelope(envelope, protoRegistry) {
-        if (envelope.mode !== constants_1.MODE_DECISION)
-            return;
-        if (envelope.messageId) {
-            if (this.seenMessageIds.has(envelope.messageId)) {
-                logging_1.logger.debug('projection redelivery ignored', {
-                    messageId: envelope.messageId,
-                    mode: envelope.mode,
-                    messageType: envelope.messageType,
-                });
-                return;
-            }
-            this.seenMessageIds.add(envelope.messageId);
-        }
-        this.transcript.push(envelope);
+    /** Handle a Decision-mode envelope. See `BaseProjection.applyEnvelope` for the accepted-only input contract and redelivery/rollback semantics shared by all built-in modes. */
+    applyMode(envelope, protoRegistry) {
         const payload = protoRegistry.decodeKnownPayload(envelope.mode, envelope.messageType, envelope.payload);
         switch (envelope.messageType) {
             case 'Proposal': {
@@ -87,6 +37,23 @@ class DecisionProjection {
             }
             case 'Vote': {
                 const record = payload;
+                // RFC-MACP-0007 §5 rule 2: "Evaluation, Objection, and Vote MUST
+                // reference an existing proposal_id." A conforming runtime never
+                // admits a Vote for an unknown proposal_id into accepted history, but
+                // per the accepted-only input contract (`BaseProjection.applyEnvelope`)
+                // this guards the same class of unfiltered-transcript input that
+                // `HandoffAccept`/`HandoffDecline` already guard against (issue #119,
+                // mirrors issue #111's task.ts fix). Evaluation/Objection need no
+                // matching guard: they only append to audit arrays (see
+                // `docs/api/projections.md` "List accumulators and logical
+                // duplicates"), so an unknown-proposalId record there fabricates no
+                // Map state and moves no phase. Vote is different: without this
+                // guard, `this.votes.get(...) ?? new Map()` below would fabricate a
+                // new `votes` entry for an unknown proposalId, inflating
+                // `voteTotals()`/`majorityWinner()`'s denominators even though no
+                // known proposal exists.
+                if (!this.proposals.has(record.proposalId))
+                    break;
                 const bySender = this.votes.get(record.proposalId) ?? new Map();
                 const kept = bySender.get(envelope.sender);
                 if (kept !== undefined) {
@@ -94,7 +61,7 @@ class DecisionProjection {
                     // runtime NACKs the duplicate (macp-runtime decision.rs), so reaching
                     // here means the transcript was not filtered to a conforming
                     // runtime's accepted history.
-                    const anomaly = {
+                    this.recordAnomaly({
                         kind: 'duplicate_vote',
                         mode: envelope.mode,
                         messageType: envelope.messageType,
@@ -102,9 +69,7 @@ class DecisionProjection {
                         sender: envelope.sender,
                         subjectId: record.proposalId,
                         detail: `sender ${envelope.sender} already voted '${kept.vote}' on proposal ${record.proposalId}; discarded '${record.vote}'`,
-                    };
-                    this.anomalies.push(anomaly);
-                    logging_1.logger.warn('projection anomaly', anomaly);
+                    });
                     break;
                 }
                 bySender.set(envelope.sender, { ...record, sender: envelope.sender });
@@ -120,41 +85,21 @@ class DecisionProjection {
                 // not a normative MACP term (it appears once, in passing, at
                 // RFC-MACP-0012 `:211`); this guard is justified by session
                 // terminality, not by a phase specification. An anomaly would be
-                // recorded here too, but `ProjectionAnomalyKind` (`base.ts:8-9`) is
-                // deliberately frozen pending cross-SDK agreement with
-                // macp-sdk-python.
+                // recorded here too, but unlike five of the six sites that were
+                // "frozen pending cross-SDK agreement" (issue #126/#128, now
+                // resolved for `duplicate_task_accept`/`settled_handoff` — see
+                // `base.ts`), this one is a session-terminality phase-regression
+                // guard, not a settlement discard, and remains genuinely undecided
+                // per #128's own explicit scoping. No behavior change here.
                 if (this.phase !== 'Committed') {
                     this.phase = 'Voting';
                 }
                 break;
             }
-            case 'Commitment': {
-                this.commitment = payload;
-                this.phase = 'Committed';
-                break;
-            }
             default:
                 break;
         }
     }
-    /**
-     * True once at least one `ProjectionAnomaly` has been recorded. See
-     * `BaseProjection.hasAnomalies` (`src/projections/base.ts`) for the
-     * canonical description; duplicated here only as a one-line pointer.
-     */
-    get hasAnomalies() {
-        return this.anomalies.length > 0;
-    }
-    get isCommitted() {
-        return this.commitment !== undefined;
-    }
-    get isPositiveOutcome() {
-        if (!this.commitment)
-            return undefined;
-        const val = this.commitment.outcomePositive ??
-            this.commitment.outcome_positive;
-        return val !== undefined ? Boolean(val) : true;
-    }
     voteTotals() {
         const totals = {};
         for (const [proposalId, senderVotes] of this.votes.entries()) {

package/dist/projections/handoff.d.ts

@@ -1,4 +1,4 @@
-import type { ProjectionAnomaly } from './base';
+import { BaseProjection } from './base';
 import type { Envelope } from '../types';
 import type { ProtoRegistry } from '../proto-registry';
 export interface HandoffRecord {
@@ -18,55 +18,12 @@ export interface HandoffRecord {
      */
     implicit?: boolean;
 }
-export declare class HandoffProjection {
+export declare class HandoffProjection extends BaseProjection {
+    protected readonly mode = "macp.mode.handoff.v1";
     readonly handoffs: Map<string, HandoffRecord>;
-    /**
-     * The session's accepted history, one envelope per unique `message_id`. See
-     * `BaseProjection.transcript` (`src/projections/base.ts`) for the full
-     * redelivery-idempotence contract (RFC-MACP-0006 §3.2); duplicated here
-     * only as a one-line pointer.
-     */
-    readonly transcript: Envelope[];
-    /**
-     * Cardinality anomalies recorded while replaying this projection's accepted
-     * transcript. See `BaseProjection.anomalies` (`src/projections/base.ts`)
-     * for the canonical description; duplicated here only as a one-line
-     * pointer. No built-in detection populates this for Handoff mode.
-     */
-    readonly anomalies: ProjectionAnomaly[];
     phase: 'Pending' | 'OfferPending' | 'ContextSharing' | 'Accepted' | 'Declined' | 'Committed';
-    commitment?: Record<string, unknown>;
-    /**
-     * `message_id`s already applied to this projection. See
-     * `BaseProjection.seenMessageIds` (`src/projections/base.ts`) for the full
-     * redelivery-idempotence rationale (RFC-MACP-0006 §3.2); duplicated here
-     * only as a one-line pointer.
-     */
-    private readonly seenMessageIds;
-    /**
-     * Apply one envelope to this projection's in-process state.
-     *
-     * Input contract: **accepted-only**, caller-maintained (`Envelope` carries
-     * no acceptance marker). Canonical source: `schemas/conformance/README.md`
-     * "Notes:", RFC-MACP-0007 §5.3, RFC-MACP-0011 §5. Full rationale and failure
-     * mode are documented once, on `BaseProjection.applyEnvelope`
-     * (`src/projections/base.ts`), and duplicated here only as a one-line
-     * pointer so six independent copies of the same prose cannot drift.
-     *
-     * Redelivery idempotence: a redelivered envelope (same `message_id`) is a
-     * non-event — not appended to `transcript`, not passed to the `switch`.
-     * See `BaseProjection.applyEnvelope` for the full RFC-MACP-0006 §3.2
-     * citation; duplicated here only as a one-line pointer.
-     */
-    applyEnvelope(envelope: Envelope, protoRegistry: ProtoRegistry): void;
-    /**
-     * True once at least one `ProjectionAnomaly` has been recorded. See
-     * `BaseProjection.hasAnomalies` (`src/projections/base.ts`) for the
-     * canonical description; duplicated here only as a one-line pointer.
-     */
-    get hasAnomalies(): boolean;
-    get isCommitted(): boolean;
-    get isPositiveOutcome(): boolean | undefined;
+    /** Handle a Handoff-mode envelope. See `BaseProjection.applyEnvelope` for the accepted-only input contract and redelivery/rollback semantics shared by all built-in modes. */
+    protected applyMode(envelope: Envelope, protoRegistry: ProtoRegistry): void;
     getHandoff(handoffId: string): HandoffRecord | undefined;
     isAccepted(handoffId: string): boolean;
     isDeclined(handoffId: string): boolean;

package/dist/projections/handoff.js

@@ -2,62 +2,13 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.HandoffProjection = void 0;
 const constants_1 = require("../constants");
-const logging_1 = require("../logging");
-class HandoffProjection {
+const base_1 = require("./base");
+class HandoffProjection extends base_1.BaseProjection {
+    mode = constants_1.MODE_HANDOFF;
     handoffs = new Map();
-    /**
-     * The session's accepted history, one envelope per unique `message_id`. See
-     * `BaseProjection.transcript` (`src/projections/base.ts`) for the full
-     * redelivery-idempotence contract (RFC-MACP-0006 §3.2); duplicated here
-     * only as a one-line pointer.
-     */
-    transcript = [];
-    /**
-     * Cardinality anomalies recorded while replaying this projection's accepted
-     * transcript. See `BaseProjection.anomalies` (`src/projections/base.ts`)
-     * for the canonical description; duplicated here only as a one-line
-     * pointer. No built-in detection populates this for Handoff mode.
-     */
-    anomalies = [];
     phase = 'Pending';
-    commitment;
-    /**
-     * `message_id`s already applied to this projection. See
-     * `BaseProjection.seenMessageIds` (`src/projections/base.ts`) for the full
-     * redelivery-idempotence rationale (RFC-MACP-0006 §3.2); duplicated here
-     * only as a one-line pointer.
-     */
-    seenMessageIds = new Set();
-    /**
-     * Apply one envelope to this projection's in-process state.
-     *
-     * Input contract: **accepted-only**, caller-maintained (`Envelope` carries
-     * no acceptance marker). Canonical source: `schemas/conformance/README.md`
-     * "Notes:", RFC-MACP-0007 §5.3, RFC-MACP-0011 §5. Full rationale and failure
-     * mode are documented once, on `BaseProjection.applyEnvelope`
-     * (`src/projections/base.ts`), and duplicated here only as a one-line
-     * pointer so six independent copies of the same prose cannot drift.
-     *
-     * Redelivery idempotence: a redelivered envelope (same `message_id`) is a
-     * non-event — not appended to `transcript`, not passed to the `switch`.
-     * See `BaseProjection.applyEnvelope` for the full RFC-MACP-0006 §3.2
-     * citation; duplicated here only as a one-line pointer.
-     */
-    applyEnvelope(envelope, protoRegistry) {
-        if (envelope.mode !== constants_1.MODE_HANDOFF)
-            return;
-        if (envelope.messageId) {
-            if (this.seenMessageIds.has(envelope.messageId)) {
-                logging_1.logger.debug('projection redelivery ignored', {
-                    messageId: envelope.messageId,
-                    mode: envelope.mode,
-                    messageType: envelope.messageType,
-                });
-                return;
-            }
-            this.seenMessageIds.add(envelope.messageId);
-        }
-        this.transcript.push(envelope);
+    /** Handle a Handoff-mode envelope. See `BaseProjection.applyEnvelope` for the accepted-only input contract and redelivery/rollback semantics shared by all built-in modes. */
+    applyMode(envelope, protoRegistry) {
         const payload = protoRegistry.decodeKnownPayload(envelope.mode, envelope.messageType, envelope.payload);
         switch (envelope.messageType) {
             case 'HandoffOffer': {
@@ -76,6 +27,11 @@ class HandoffProjection {
             case 'HandoffContext': {
                 const record = payload;
                 const handoff = this.handoffs.get(record.handoffId);
+                // RFC-MACP-0010 §5 rule 2: HandoffContext MUST reference an existing
+                // handoff_id, so the phase transition belongs inside this guard too
+                // (issue #119, same shape as issue #111) — a HandoffContext for an
+                // unknown handoff_id must not advance `phase` past `'OfferPending'`
+                // while a different, real handoff is still pending.
                 if (handoff) {
                     // Per RFC-MACP-0010 §2.1: context after accept is permitted as supplementary docs.
                     // Only update status if not already accepted/declined.
@@ -83,9 +39,9 @@ class HandoffProjection {
                         handoff.status = 'context_sent';
                     }
                     handoff.contextContentType = record.contentType;
+                    if (this.phase === 'OfferPending')
+                        this.phase = 'ContextSharing';
                 }
-                if (this.phase === 'OfferPending')
-                    this.phase = 'ContextSharing';
                 break;
             }
             case 'HandoffAccept': {
@@ -96,9 +52,10 @@ class HandoffProjection {
                     // and HandoffDecline MUST reference an existing handoff_id." An
                     // accept for an unknown/never-offered handoff_id is invalid input
                     // (e.g. an unfiltered transcript) and MUST NOT mutate `phase` or
-                    // fabricate a handoff record. An anomaly would be recorded here,
-                    // but `ProjectionAnomalyKind` (`base.ts:8-9`) is deliberately
-                    // frozen pending cross-SDK agreement with macp-sdk-python.
+                    // fabricate a handoff record. Confirmed (issue #126/#128): no
+                    // anomaly is recorded for this case — an unknown `handoff_id` is
+                    // not caller misuse (a projection that joined mid-session may never
+                    // have observed the original offer).
                     break;
                 }
                 // RFC-MACP-0010 §5 rule 4 (`:68`): "Once an offer has been
@@ -107,10 +64,7 @@ class HandoffProjection {
                 // direction too: a `handoff_id` transitions
                 // offered -> accepted | declined exactly once. Only settle if this
                 // handoff hasn't already resolved — the same shape as the
-                // HandoffContext guard just above. An anomaly would be recorded when
-                // this guard discards a competing accept, but `ProjectionAnomalyKind`
-                // (`base.ts:8-9`) is deliberately frozen pending cross-SDK agreement
-                // with macp-sdk-python.
+                // HandoffContext guard just above.
                 if (handoff.status === 'offered' || handoff.status === 'context_sent') {
                     handoff.status = 'accepted';
                     handoff.acceptedBy = record.acceptedBy;
@@ -120,6 +74,17 @@ class HandoffProjection {
                     handoff.implicit = record.implicit ?? false;
                     this.phase = 'Accepted';
                 }
+                else {
+                    this.recordAnomaly({
+                        kind: 'settled_handoff',
+                        mode: envelope.mode,
+                        messageType: envelope.messageType,
+                        messageId: envelope.messageId,
+                        sender: envelope.sender,
+                        subjectId: record.handoffId,
+                        detail: `sender ${envelope.sender} attempted HandoffAccept for ${record.handoffId}, but it already settled as '${handoff.status}'`,
+                    });
+                }
                 break;
             }
             case 'HandoffDecline': {
@@ -130,51 +95,37 @@ class HandoffProjection {
                     // and HandoffDecline MUST reference an existing handoff_id." A
                     // decline for an unknown/never-offered handoff_id is invalid input
                     // (e.g. an unfiltered transcript) and MUST NOT mutate `phase` or
-                    // fabricate a handoff record. An anomaly would be recorded here,
-                    // but `ProjectionAnomalyKind` (`base.ts:8-9`) is deliberately
-                    // frozen pending cross-SDK agreement with macp-sdk-python.
+                    // fabricate a handoff record. Confirmed (issue #126/#128): no
+                    // anomaly is recorded for this case — an unknown `handoff_id` is
+                    // not caller misuse (a projection that joined mid-session may never
+                    // have observed the original offer).
                     break;
                 }
                 // RFC-MACP-0010 §5 rule 4 (`:68`) + §5.1(4) (`:113-116`): a
                 // `handoff_id` settles once. A decline after the handoff already
-                // settled (accepted or declined) is invalid and ignored. An anomaly
-                // would be recorded here too, but `ProjectionAnomalyKind`
-                // (`base.ts:8-9`) is deliberately frozen pending cross-SDK agreement
-                // with macp-sdk-python.
+                // settled (accepted or declined) is invalid and ignored.
                 if (handoff.status === 'offered' || handoff.status === 'context_sent') {
                     handoff.status = 'declined';
                     handoff.declinedBy = record.declinedBy;
                     this.phase = 'Declined';
                 }
-                break;
-            }
-            case 'Commitment': {
-                this.commitment = payload;
-                this.phase = 'Committed';
+                else {
+                    this.recordAnomaly({
+                        kind: 'settled_handoff',
+                        mode: envelope.mode,
+                        messageType: envelope.messageType,
+                        messageId: envelope.messageId,
+                        sender: envelope.sender,
+                        subjectId: record.handoffId,
+                        detail: `sender ${envelope.sender} attempted HandoffDecline for ${record.handoffId}, but it already settled as '${handoff.status}'`,
+                    });
+                }
                 break;
             }
             default:
                 break;
         }
     }
-    /**
-     * True once at least one `ProjectionAnomaly` has been recorded. See
-     * `BaseProjection.hasAnomalies` (`src/projections/base.ts`) for the
-     * canonical description; duplicated here only as a one-line pointer.
-     */
-    get hasAnomalies() {
-        return this.anomalies.length > 0;
-    }
-    get isCommitted() {
-        return this.commitment !== undefined;
-    }
-    get isPositiveOutcome() {
-        if (!this.commitment)
-            return undefined;
-        const val = this.commitment.outcomePositive ??
-            this.commitment.outcome_positive;
-        return val !== undefined ? Boolean(val) : true;
-    }
     getHandoff(handoffId) {
         return this.handoffs.get(handoffId);
     }

package/dist/projections/proposal.d.ts

@@ -1,4 +1,4 @@
-import type { ProjectionAnomaly } from './base';
+import { BaseProjection } from './base';
 import type { Envelope } from '../types';
 import type { ProtoRegistry } from '../proto-registry';
 export interface ProposalRecord {
@@ -21,7 +21,8 @@ export interface ProposalRejectRecord {
     reason?: string;
     sender: string;
 }
-export declare class ProposalProjection {
+export declare class ProposalProjection extends BaseProjection {
+    protected readonly mode = "macp.mode.proposal.v1";
     readonly proposals: Map<string, ProposalRecord>;
     readonly accepts: ProposalAcceptRecord[];
     readonly rejections: ProposalRejectRecord[];
@@ -39,53 +40,9 @@ export declare class ProposalProjection {
      * acceptance set, and the same commitment eligibility."
      */
     private readonly latestAcceptBySender;
-    /**
-     * The session's accepted history, one envelope per unique `message_id`. See
-     * `BaseProjection.transcript` (`src/projections/base.ts`) for the full
-     * redelivery-idempotence contract (RFC-MACP-0006 §3.2); duplicated here
-     * only as a one-line pointer.
-     */
-    readonly transcript: Envelope[];
-    /**
-     * Cardinality anomalies recorded while replaying this projection's accepted
-     * transcript. See `BaseProjection.anomalies` (`src/projections/base.ts`)
-     * for the canonical description; duplicated here only as a one-line
-     * pointer. No built-in detection populates this for Proposal mode.
-     */
-    readonly anomalies: ProjectionAnomaly[];
     phase: 'Negotiating' | 'TerminalRejected' | 'Committed';
-    commitment?: Record<string, unknown>;
-    /**
-     * `message_id`s already applied to this projection. See
-     * `BaseProjection.seenMessageIds` (`src/projections/base.ts`) for the full
-     * redelivery-idempotence rationale (RFC-MACP-0006 §3.2); duplicated here
-     * only as a one-line pointer.
-     */
-    private readonly seenMessageIds;
-    /**
-     * Apply one envelope to this projection's in-process state.
-     *
-     * Input contract: **accepted-only**, caller-maintained (`Envelope` carries
-     * no acceptance marker). Canonical source: `schemas/conformance/README.md`
-     * "Notes:", RFC-MACP-0007 §5.3, RFC-MACP-0011 §5. Full rationale and failure
-     * mode are documented once, on `BaseProjection.applyEnvelope`
-     * (`src/projections/base.ts`), and duplicated here only as a one-line
-     * pointer so six independent copies of the same prose cannot drift.
-     *
-     * Redelivery idempotence: a redelivered envelope (same `message_id`) is a
-     * non-event — not appended to `transcript`, not passed to the `switch`.
-     * See `BaseProjection.applyEnvelope` for the full RFC-MACP-0006 §3.2
-     * citation; duplicated here only as a one-line pointer.
-     */
-    applyEnvelope(envelope: Envelope, protoRegistry: ProtoRegistry): void;
-    /**
-     * True once at least one `ProjectionAnomaly` has been recorded. See
-     * `BaseProjection.hasAnomalies` (`src/projections/base.ts`) for the
-     * canonical description; duplicated here only as a one-line pointer.
-     */
-    get hasAnomalies(): boolean;
-    get isCommitted(): boolean;
-    get isPositiveOutcome(): boolean | undefined;
+    /** Handle a Proposal-mode envelope. See `BaseProjection.applyEnvelope` for the accepted-only input contract and redelivery/rollback semantics shared by all built-in modes. */
+    protected applyMode(envelope: Envelope, protoRegistry: ProtoRegistry): void;
     activeProposals(): ProposalRecord[];
     latestProposal(): ProposalRecord | undefined;
     /**

package/dist/projections/proposal.js

@@ -2,8 +2,9 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ProposalProjection = void 0;
 const constants_1 = require("../constants");
-const logging_1 = require("../logging");
-class ProposalProjection {
+const base_1 = require("./base");
+class ProposalProjection extends base_1.BaseProjection {
+    mode = constants_1.MODE_PROPOSAL;
     proposals = new Map();
     accepts = [];
     rejections = [];
@@ -21,59 +22,9 @@ class ProposalProjection {
      * acceptance set, and the same commitment eligibility."
      */
     latestAcceptBySender = new Map();
-    /**
-     * The session's accepted history, one envelope per unique `message_id`. See
-     * `BaseProjection.transcript` (`src/projections/base.ts`) for the full
-     * redelivery-idempotence contract (RFC-MACP-0006 §3.2); duplicated here
-     * only as a one-line pointer.
-     */
-    transcript = [];
-    /**
-     * Cardinality anomalies recorded while replaying this projection's accepted
-     * transcript. See `BaseProjection.anomalies` (`src/projections/base.ts`)
-     * for the canonical description; duplicated here only as a one-line
-     * pointer. No built-in detection populates this for Proposal mode.
-     */
-    anomalies = [];
     phase = 'Negotiating';
-    commitment;
-    /**
-     * `message_id`s already applied to this projection. See
-     * `BaseProjection.seenMessageIds` (`src/projections/base.ts`) for the full
-     * redelivery-idempotence rationale (RFC-MACP-0006 §3.2); duplicated here
-     * only as a one-line pointer.
-     */
-    seenMessageIds = new Set();
-    /**
-     * Apply one envelope to this projection's in-process state.
-     *
-     * Input contract: **accepted-only**, caller-maintained (`Envelope` carries
-     * no acceptance marker). Canonical source: `schemas/conformance/README.md`
-     * "Notes:", RFC-MACP-0007 §5.3, RFC-MACP-0011 §5. Full rationale and failure
-     * mode are documented once, on `BaseProjection.applyEnvelope`
-     * (`src/projections/base.ts`), and duplicated here only as a one-line
-     * pointer so six independent copies of the same prose cannot drift.
-     *
-     * Redelivery idempotence: a redelivered envelope (same `message_id`) is a
-     * non-event — not appended to `transcript`, not passed to the `switch`.
-     * See `BaseProjection.applyEnvelope` for the full RFC-MACP-0006 §3.2
-     * citation; duplicated here only as a one-line pointer.
-     */
-    applyEnvelope(envelope, protoRegistry) {
-        if (envelope.mode !== constants_1.MODE_PROPOSAL)
-            return;
-        if (envelope.messageId) {
-            if (this.seenMessageIds.has(envelope.messageId)) {
-                logging_1.logger.debug('projection redelivery ignored', {
-                    messageId: envelope.messageId,
-                    mode: envelope.mode,
-                    messageType: envelope.messageType,
-                });
-                return;
-            }
-            this.seenMessageIds.add(envelope.messageId);
-        }
-        this.transcript.push(envelope);
+    /** Handle a Proposal-mode envelope. See `BaseProjection.applyEnvelope` for the accepted-only input contract and redelivery/rollback semantics shared by all built-in modes. */
+    applyMode(envelope, protoRegistry) {
         const payload = protoRegistry.decodeKnownPayload(envelope.mode, envelope.messageType, envelope.payload);
         switch (envelope.messageType) {
             case 'Proposal': {
@@ -118,11 +69,25 @@ class ProposalProjection {
                     reason: record.reason,
                     sender: envelope.sender,
                 });
+                // RFC-MACP-0008 §5 rule 3 requires `Reject` to reference an existing
+                // proposal_id, so `this.phase` must only move to the terminal state
+                // when a proposal record for it actually exists here (issue #119,
+                // same shape as issue #111's TaskComplete/TaskFail fix) — otherwise
+                // an unfiltered transcript could flip `phase` to `'TerminalRejected'`
+                // (a TERMINAL_PHASES member, see `src/agent/participant.ts`) on a
+                // never-seen proposalId, ending a live Participant's run() loop for a
+                // session that never actually terminated. `this.rejections.push(...)`
+                // above stays unconditional — it's an append-only audit log (see
+                // `docs/api/projections.md` "List accumulators and logical
+                // duplicates"), so `isTerminallyRejected`/`hasTerminalRejection` can
+                // still report `true` for an unknown id even though `phase` does not
+                // move; that split is intentional, not a residual bug.
                 if (terminal) {
                     const proposal = this.proposals.get(record.proposalId);
-                    if (proposal)
+                    if (proposal) {
                         proposal.status = 'rejected';
-                    this.phase = 'TerminalRejected';
+                        this.phase = 'TerminalRejected';
+                    }
                 }
                 break;
             }
@@ -133,33 +98,10 @@ class ProposalProjection {
                     proposal.status = 'withdrawn';
                 break;
             }
-            case 'Commitment': {
-                this.commitment = payload;
-                this.phase = 'Committed';
-                break;
-            }
             default:
                 break;
         }
     }
-    /**
-     * True once at least one `ProjectionAnomaly` has been recorded. See
-     * `BaseProjection.hasAnomalies` (`src/projections/base.ts`) for the
-     * canonical description; duplicated here only as a one-line pointer.
-     */
-    get hasAnomalies() {
-        return this.anomalies.length > 0;
-    }
-    get isCommitted() {
-        return this.commitment !== undefined;
-    }
-    get isPositiveOutcome() {
-        if (!this.commitment)
-            return undefined;
-        const val = this.commitment.outcomePositive ??
-            this.commitment.outcome_positive;
-        return val !== undefined ? Boolean(val) : true;
-    }
     activeProposals() {
         return [...this.proposals.values()].filter((p) => p.status === 'open');
     }